evolcore 0.0.12 → 0.0.14

package/dist/channels/daemon.js

@@ -413,6 +413,7 @@ function normalizeExecutionAnomaly(value) {
     const occurredAt = typeof value.occurredAt === 'number' && Number.isFinite(value.occurredAt)
         ? value.occurredAt
         : Date.now();
+    const correlationId = nonEmptyString(value.correlationId);
     const toolName = nonEmptyString(value.toolName);
     const requestId = nonEmptyString(value.requestId);
     const policyCode = nonEmptyString(value.policyCode);
@@ -426,6 +427,7 @@ function normalizeExecutionAnomaly(value) {
         severity: 'warning',
         phase: 'execution',
         occurredAt,
+        ...(correlationId ? { correlationId } : {}),
         effect,
         ...(toolName ? { toolName } : {}),
         ...(requestId ? { requestId } : {}),

package/dist/cli/agent.js

@@ -8,18 +8,14 @@ import { resolveConfigCommand } from '../config/resolved-config-op.js';
 import { executeResolvedConfigCommand } from '../config/config-operation-service.js';
 import { ipcQuery } from '../ipc.js';
 import { CONFIG_SCHEMA_VERSION } from '../types.js';
-import { normalizeAgentLifecycle, withLifecycleForWrite } from '../config/lifecycle.js';
-import { bindPostBootstrapWelcomeOutboxSession, hasPendingPostBootstrapWelcomeOutbox, postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox, } from '../core/bootstrap-messages.js';
 import { ensureInitialRoleRegistry } from '../config/role-service.js';
-import { formatChannelKey, isValidChannelName } from '../core/channel-loader.js';
+import { isValidChannelName } from '../core/channel-loader.js';
 import { commandExists } from '../utils/cross-platform.js';
 import { getCodexAppServerAvailability, isCodexAppServerAvailable } from '../agents/codex-runner.js';
 import { resolveEcagentConfig } from '../agents/baseagent.js';
 import { agentProjectRootFromDefaults, deriveAgentProjectPath } from '../utils/project-path.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
-import { EventBus } from '../core/event-bus.js';
-import { SessionManager } from '../core/session/session-manager.js';
 import { isValidAid } from '../aun/aid/validation.js';
 function withStaticOwner(config, owner) {
     const value = owner?.trim();
@@ -1196,33 +1192,9 @@ export async function agentRename(aid, name) {
     return { ok: true, aid, name };
 }
 // ==================== agentReady ====================
-async function ensureOfflinePostBootstrapMainSession(aid, config) {
-    const owner = config.owners?.[0];
-    if (!owner)
-        throw new Error(`Agent "${aid}" has no owner for the post-bootstrap main session`);
-    const p = resolvePaths();
-    const aunName = config.channels?.find(channel => channel.type === 'aun')?.name || 'main';
-    const channel = formatChannelKey({ type: 'aun', selfAID: aid, name: aunName });
-    const manager = new SessionManager(p.sessionsDir, new EventBus());
-    const active = await manager.getActiveSession(channel, owner);
-    const ensured = await manager.ensureNewMainSessionForOperation({
-        channel,
-        channelId: owner,
-        projectPath: active?.projectPath
-            || config.projects?.defaultPath
-            || path.join(p.root, 'projects', aid.split('.')[0]),
-        baseagent: config.active_baseagent || active?.baseagent || 'claude',
-        operationId: postBootstrapWelcomeOperationId(aid),
-        identityMetadata: {
-            ...(active?.metadata ?? {}),
-            channelKey: channel,
-            peerId: owner,
-        },
-    });
-    return ensured.session.id;
-}
 export async function agentReady(aid) {
-    const taskSelfAid = readTaskRuntimeContextFromEnv()?.selfAid;
+    const managedSessionId = process.env.EVOLCORE_SESSION_ID;
+    const taskSelfAid = managedSessionId ? readTaskRuntimeContextFromEnv()?.selfAid : undefined;
     if (taskSelfAid && taskSelfAid.replace(/^@/, '') !== aid.replace(/^@/, '')) {
         return {
             ok: false,
@@ -1231,77 +1203,18 @@ export async function agentReady(aid) {
         };
     }
     const p = resolvePaths();
-    const managedSessionId = process.env.EVOLCORE_SESSION_ID;
-    if (managedSessionId) {
-        const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
-        if (!delegationToken)
+    try {
+        const delegationToken = managedSessionId ? process.env[AGENT_DELEGATION_TOKEN_ENV] : undefined;
+        if (managedSessionId && !delegationToken) {
             return { ok: false, code: 'DELEGATION_REQUIRED', error: `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task` };
+        }
         const result = await ipcQuery(p.socket, {
             type: 'evolagent.bootstrapComplete',
             aid,
-            sessionId: managedSessionId,
-            delegationToken,
+            ...(managedSessionId ? { sessionId: managedSessionId, delegationToken } : {}),
         }, 30_000);
         if (!result)
-            return { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the evolcore daemon' };
-        return result.ok
-            ? { ok: true, aid, reloaded: result.reloaded === true }
-            : { ok: false, code: result.code, error: result.error || 'Failed to complete bootstrap' };
-    }
-    const config = loadAgent(aid);
-    if (!config)
-        return { ok: false, error: `Agent "${aid}" not found` };
-    try {
-        let controlToken;
-        try {
-            controlToken = fs.readFileSync(p.controlToken, 'utf8').trim() || undefined;
-        }
-        catch { }
-        const result = await ipcQuery(p.socket, { type: 'evolagent.bootstrapComplete', aid, controlToken }, 30_000);
-        if (!result) {
-            const offlineConfig = loadAgent(aid) || config;
-            const lifecycle = normalizeAgentLifecycle(offlineConfig).lifecycle;
-            if (lifecycle !== 'bootstrapping') {
-                if (lifecycle === 'active') {
-                    if (hasPendingPostBootstrapWelcomeOutbox(aid)) {
-                        try {
-                            const sessionId = await ensureOfflinePostBootstrapMainSession(aid, offlineConfig);
-                            if (!bindPostBootstrapWelcomeOutboxSession(aid, sessionId)) {
-                                throw new Error(`Failed to bind the completion welcome to session ${sessionId}`);
-                            }
-                        }
-                        catch (e) {
-                            return {
-                                ok: false,
-                                code: 'MAIN_SESSION_CREATE_FAILED',
-                                error: e instanceof Error ? e.message : 'Failed to recover the post-bootstrap main session',
-                            };
-                        }
-                    }
-                    return { ok: true, aid, reloaded: false };
-                }
-                return { ok: false, code: 'INVALID_LIFECYCLE', error: `Agent "${aid}" is ${lifecycle}; only a bootstrapping agent can become ready` };
-            }
-            const owner = offlineConfig.owners?.[0];
-            if (!owner)
-                return { ok: false, code: 'OWNER_REQUIRED', error: `Agent "${aid}" has no owner for the completion welcome` };
-            try {
-                preparePostBootstrapWelcomeOutbox(aid, owner);
-                const sessionId = await ensureOfflinePostBootstrapMainSession(aid, offlineConfig);
-                if (!bindPostBootstrapWelcomeOutboxSession(aid, sessionId)) {
-                    throw new Error(`Failed to bind the completion welcome to session ${sessionId}`);
-                }
-                saveAgent(withLifecycleForWrite(offlineConfig, 'active'));
-            }
-            catch (e) {
-                return {
-                    ok: false,
-                    code: 'READY_PERSIST_FAILED',
-                    error: e instanceof Error ? e.message : 'Failed to persist bootstrap completion',
-                };
-            }
-            return { ok: true, aid, reloaded: false };
-        }
+            return { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the evolcore daemon; agent ready requires daemon IPC' };
         if (!result.ok) {
             return { ok: false, code: result.code, error: result.error || 'Failed to complete bootstrap' };
         }

package/dist/cli/aun-commands.js

@@ -1698,7 +1698,7 @@ Options:
             else if (r.handoff_id)
                 console.log(`✓ 已排队 handoff ${r.handoff_id}（尚未投递）`);
             else
-                console.log(`✓ 已发送 message_id=${r.message?.message_id ?? '-'} seq=${r.message?.seq ?? '-'}`);
+                console.log(`✓ 已发送 message_id=${r.message_id ?? r.message?.message_id ?? '-'} seq=${r.message?.seq ?? '-'}`);
         });
         return;
     }

package/dist/cli/cli-argv.js

@@ -3,6 +3,16 @@ export function normalizeCliArgv(argv) {
         return argv.slice(1);
     return argv;
 }
+export function splitConfigBatchGetArgv(inputArgv) {
+    const argv = normalizeCliArgv(inputArgv);
+    if (argv[0] !== 'config' || argv[1] !== 'get')
+        return null;
+    const fields = [];
+    let i = 2;
+    for (; i < argv.length && !argv[i].startsWith('-'); i++)
+        fields.push(argv[i]);
+    return { fields, rest: argv.slice(i) };
+}
 export function validateCliArgv(value) {
     if (!Array.isArray(value) || value.length === 0)
         return { ok: false, reason: 'args.argv must be a non-empty string array' };

package/dist/cli/config.js

@@ -5,7 +5,7 @@ import { AUTHENTICATED_CONFIG_ROLE_ENV, executeResolvedConfigCommand, } from '..
 import { ipcQuery } from '../ipc.js';
 import { resolvePaths } from '../paths.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
-import { splitConfigBatchGetArgv } from '../config/config-batch-get.js';
+import { splitConfigBatchGetArgv } from './cli-argv.js';
 function emit(formatJson, payload, text) {
     if (formatJson)
         console.log(JSON.stringify(payload, null, 2));
@@ -47,6 +47,8 @@ function renderConfigExecution(result, formatJson) {
     switch (result.subcommand) {
         case 'get':
             return emit(formatJson, getResultPayload(result), () => getResultLine(result));
+        case 'batch-get':
+            return renderBatchGet(result.results, formatJson);
         case 'set':
             return emit(formatJson, {
                 ok: true,
@@ -186,23 +188,13 @@ function runDirectBatchGet(fields, rest, formatJson) {
 }
 async function runManagedBatchGet(fields, rest, formatJson) {
     const { sessionId, delegationToken } = managedSession(formatJson);
-    const results = [];
-    for (const field of fields) {
-        const response = await managedConfigQuery(['get', field, ...rest], sessionId, delegationToken);
-        if (!response) {
-            results.push({ ok: false, field, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the evolcore daemon' });
-        }
-        else if (!response.ok || !response.result || !response.result.ok) {
-            results.push({ ok: false, field, code: response.code || 'CONFIG_AUTH_FAILED', error: response.error || 'config operation failed' });
-        }
-        else if (response.result.subcommand === 'get') {
-            results.push(response.result);
-        }
-        else {
-            results.push({ ok: false, field, code: 'UNEXPECTED_RESULT', error: `config get ${field} produced a non-get result` });
-        }
+    const response = await managedConfigQuery(['get', ...fields, ...rest], sessionId, delegationToken);
+    if (!response)
+        fail(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+    if (!response.ok || !response.result) {
+        fail(formatJson, response.code || 'CONFIG_AUTH_FAILED', response.error || 'config operation failed', response.data);
     }
-    renderBatchGet(results, formatJson);
+    renderConfigExecution(response.result, formatJson);
 }
 const HELP = `Usage: ec config <command> [options]
 

package/dist/cli/ctl-command.js

@@ -16,7 +16,7 @@ const CTL_HELP = `用法: ec ctl <command> [args...]
 消息:
   send <消息内容>           主动发送文本消息（proactive 模式）
   file [channel] <path>     发送项目内文件
-  queue                     查看/管理会话消息队列
+  queue [--after <time>] [--before <time>]  查看/管理会话消息队列
 
 示例:
   ec ctl status

package/dist/cli/daemon-commands.js

@@ -389,9 +389,6 @@ export async function cmdStart(opts = {}) {
     cleanEnv();
     // 在启动前确保 serviceProxy 配置完整（如果 ecweb 启用但 serviceProxy 未配置）
     ensureServiceProxyConfigBeforeStart(p);
-    const ecwebStartedBeforeDaemon = serviceProxyNeedsEcweb(loadDaemonConfig())
-        ? await startEcwebIfEnabled(p)
-        : false;
     // 删除旧的 ready signal
     try {
         fs.unlinkSync(p.readySignal);
@@ -421,23 +418,11 @@ export async function cmdStart(opts = {}) {
             console.log(`  EVOLCORE_HOME: ${resolveRoot()}`);
             console.log(`  Logs: ${p.logs}/`);
             console.log(`⏱ ready in ${((Date.now() - cmdStartedAt) / 1000).toFixed(1)}s`);
-            if (!ecwebStartedBeforeDaemon) {
-                startEcwebIfEnabled(p)
-                    .then((ecwebStarted) => {
-                    if (shouldPrintNoSelfAgentHints) {
-                        printNoSelfAgentHints({ daemonConfig: loadDaemonConfig(), ecwebStarted, skipped });
-                    }
-                })
-                    .catch((err) => {
-                    console.error(`⚠ ECWeb 启动检查失败: ${err instanceof Error ? err.message : String(err)}`);
-                    if (shouldPrintNoSelfAgentHints) {
-                        printNoSelfAgentHints({ daemonConfig: loadDaemonConfig(), ecwebStarted: false, skipped });
-                    }
-                });
-            }
-            else if (shouldPrintNoSelfAgentHints) {
-                printNoSelfAgentHints({ daemonConfig: loadDaemonConfig(), ecwebStarted: true, skipped });
-            }
+            void waitForExistingEcweb(p).then((ecweb) => {
+                if (shouldPrintNoSelfAgentHints) {
+                    printNoSelfAgentHints({ daemonConfig: loadDaemonConfig(), ecwebStarted: ecweb !== null, skipped });
+                }
+            });
         }, 500);
         let forwardingShutdown = false;
         const forwardSignal = (signal) => {
@@ -536,8 +521,9 @@ export async function cmdStart(opts = {}) {
                 printCodeStats(getPackageRoot(), p.logs);
             }
             console.log(`⏱ done in ${((Date.now() - cmdStartedAt) / 1000).toFixed(1)}s`);
-            // ECWeb 自动后台启动
-            const ecwebStarted = ecwebStartedBeforeDaemon || await startEcwebIfEnabled(p);
+            // ECWeb lifecycle belongs to the daemon; the CLI only reports whether
+            // the supervised instance became healthy.
+            const ecwebStarted = await waitForExistingEcweb(p) !== null;
             if (shouldPrintNoSelfAgentHints) {
                 printNoSelfAgentHints({ daemonConfig: loadDaemonConfig(), ecwebStarted, skipped });
             }
@@ -2422,6 +2408,24 @@ async function probeEcwebReady(port) {
         return false;
     }
 }
+/**
+ * Wait briefly for an already-launched ECWeb to become healthy.  `ec start`,
+ * restart-monitor, and the daemon can overlap by a few milliseconds; treating
+ * a healthy instance as an adoption target avoids killing/replacing it.
+ */
+async function waitForExistingEcweb(p, timeoutMs = 3_000) {
+    const deadline = Date.now() + timeoutMs;
+    do {
+        for (const entry of findAliveEcwebs(p)) {
+            if (await probeEcwebReady(entry.port))
+                return entry;
+        }
+        if (Date.now() >= deadline)
+            break;
+        await sleep(250);
+    } while (true);
+    return null;
+}
 /**
  * 输出 ECWeb 状态。判定口径：
  *   1. 进程是否存活（instance/ 下的 pid 文件 + isProcessRunning）
@@ -2633,10 +2637,21 @@ function ensureServiceProxyConfig(cfg, port) {
  * Kept public for restart-monitor, which launches the daemon directly and
  * therefore cannot rely on cmdStart's post-ready ECWeb startup path.
  */
-export async function startEcwebIfEnabled(p) {
+export async function startEcwebIfEnabled(p, options = {}) {
     const cfg = loadDaemonConfig();
     if (!cfg.ecweb?.enabled)
         return false;
+    // The daemon is the lifecycle owner.  CLI callers normally only need to
+    // ensure ECWeb is available, so adopt a healthy process instead of killing
+    // it.  `ec watch web` passes forceRestart explicitly for an intentional
+    // manual replacement.
+    if (!options.forceRestart) {
+        const existing = await waitForExistingEcweb(p);
+        if (existing) {
+            console.log(`✓ ECWeb 已在运行 (PID: ${existing.pid})  http://localhost:${existing.port}`);
+            return true;
+        }
+    }
     const installedPkg = resolveGlobalPkg(WEB_PACKAGE_NAME);
     if (!installedPkg) {
         console.log(`⚠ EC Web 未安装，跳过启动（运行 npm i -g ${WEB_PACKAGE_NAME}@latest 后可用）`);
@@ -2795,7 +2810,7 @@ async function cmdWatchWeb() {
     saveDaemonConfig({ ...cfg, ecweb: { ...(cfg.ecweb ?? {}), enabled: true, port } });
     // 自动配置 serviceProxy（如果控制 AID 已配置）
     ensureServiceProxyConfigBeforeStart(p);
-    const ok = await startEcwebIfEnabled(p);
+    const ok = await startEcwebIfEnabled(p, { forceRestart: true });
     if (!ok)
         process.exit(1); // 失败原因已由 startEcwebIfEnabled 打印
     // 启动成功的访问信息已由 startEcwebIfEnabled 打印，无需 printEcwebAccess 重复输出

package/dist/cli/fs-command.js

@@ -6,6 +6,7 @@ import { agentmdGet, getAidStore, isValidAid, loadClient, SLOT } from '../aun/ai
 import { ipcQuery } from '../ipc.js';
 import { resolvePaths } from '../paths.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { downloadGroupFsBytes } from '../aun/group-fs-download.js';
 class FsCliError extends Error {
     code;
     suggestion;
@@ -33,8 +34,8 @@ Commands:
   mkdir [-p] <AID>:<path>         创建目录
   ln -s <target> <AID>:<path>     创建软链（personal storage）
   chmod [mode] <AID>:<path>       切换公开/私有（personal storage）
-  setfacl <AID>:<path> -m|-x ...   设置/移除 ACL（personal storage）
-  getfacl <AID>:<path>            查看 ACL（personal storage）
+  setfacl <AID>:<path> -m|-x ...   设置/移除 ACL（群路径使用 role:member|role:admin）
+  getfacl <AID>:<path>            查看 ACL
   token issue|revoke|ls <path>    管理访问 token（personal storage）
   find <AID>:<path> [filters]     查找节点
   df <AID>:                       查看容量/配额
@@ -257,6 +258,27 @@ async function runManagedFs(args, formatJson) {
             for (const item of result.items ?? [])
                 console.log(JSON.stringify(item));
             return;
+        case 'mkdir':
+            console.log(`✓ 已创建目录: ${result.path}`);
+            return;
+        case 'upload':
+            console.log(`✓ 已上传: ${result.localPath} -> ${result.path}`);
+            return;
+        case 'copy':
+            console.log(`✓ 已复制: ${result.src} -> ${result.path}`);
+            return;
+        case 'move':
+            console.log(`✓ 已移动: ${result.src} -> ${result.path}`);
+            return;
+        case 'remove':
+            console.log(`✓ 已删除: ${result.path}`);
+            return;
+        case 'getfacl':
+            console.log(JSON.stringify(result.result ?? {}, null, 2));
+            return;
+        case 'setfacl':
+            console.log(`✓ 已${result.removed ? '移除' : '设置'}群 ACL: ${result.path}`);
+            return;
     }
 }
 function parseCommonOptions(args) {
@@ -385,8 +407,9 @@ async function fsCat(args, opts) {
         if (route.backend === 'group') {
             statInfo = await client.group.fs.stat(remoteRef(target));
             const size = numberFrom(statInfo, ['size', 'size_bytes', 'bytes']);
-            const downloaded = await client.group.fs.cp(remoteRef(target), { kind: 'blob' }, { verifyHash: true });
-            bytes = bytesFromDownload(downloaded);
+            const downloaded = await downloadGroupFsBytes(client, remoteRef(target));
+            bytes = downloaded.bytes;
+            statInfo = { ...statInfo, ...downloaded.ticket };
             statInfo = { ...statInfo, size: bytes.byteLength };
             if (size !== undefined && size > opts.maxCatBytes) {
                 binaryHeadOnly = true;
@@ -821,10 +844,16 @@ async function fsSetfacl(args, opts) {
     }
     await withClient(opts, async ({ client, store }) => {
         const route = await resolveRoute(target.aid, store);
-        if (route.backend === 'group') {
-            throw new FsCliError('UNSUPPORTED', 'group fs 当前 SDK facade 没有 setfacl 接口', '请在 personal storage 中使用 setfacl。');
-        }
         if (modify) {
+            if (route.backend === 'group') {
+                const [role, rolePerms] = parseGroupAclSpec(modify, true);
+                if (expiresAt !== undefined || maxUses !== undefined) {
+                    throw new FsCliError('INVALID_ARGUMENT', '群空间 ACL 不支持 --expires 或 --max-uses');
+                }
+                const result = await client.group.fs.setAcl(remoteRef(target), { granteeAid: role, perms: rolePerms });
+                outputSuccess(opts, { command: 'setfacl', backend: route.backend, route, path: remoteRef(target), result }, () => console.log(`✓ 已设置群 ACL: ${remoteRef(target)}`));
+                return;
+            }
             const [grantee, perms] = parseAclSpec(modify, true);
             const result = await client.storage.setAcl(target.path, {
                 owner: target.aid,
@@ -836,6 +865,12 @@ async function fsSetfacl(args, opts) {
             outputSuccess(opts, { command: 'setfacl', backend: route.backend, route, path: remoteRef(target), result }, () => console.log(`✓ 已设置 ACL: ${remoteRef(target)}`));
             return;
         }
+        if (route.backend === 'group') {
+            const [role] = parseGroupAclSpec(remove || '', false);
+            const result = await client.group.fs.removeAcl(remoteRef(target), { granteeAid: role });
+            outputSuccess(opts, { command: 'setfacl', backend: route.backend, route, path: remoteRef(target), result }, () => console.log(`✓ 已移除群 ACL: ${remoteRef(target)}`));
+            return;
+        }
         const [grantee] = parseAclSpec(remove || '', false);
         const result = await client.storage.removeAcl(target.path, {
             owner: target.aid,
@@ -848,10 +883,9 @@ async function fsGetfacl(args, opts) {
     const target = parseRemoteRequired(firstPositional(args), { command: 'getfacl' });
     await withClient(opts, async ({ client, store }) => {
         const route = await resolveRoute(target.aid, store);
-        if (route.backend === 'group') {
-            throw new FsCliError('UNSUPPORTED', 'group fs 当前 SDK facade 没有 getfacl/listAcl 接口', '请在 personal storage 中使用 getfacl。');
-        }
-        const result = await client.storage.listAcl(target.path, { owner: target.aid });
+        const result = route.backend === 'group'
+            ? await client.group.fs.getAcl(remoteRef(target))
+            : await client.storage.listAcl(target.path, { owner: target.aid });
         outputSuccess(opts, { command: 'getfacl', backend: route.backend, route, path: remoteRef(target), result }, () => console.log(JSON.stringify(result, null, 2)));
     });
 }
@@ -1288,6 +1322,26 @@ function parseAclSpec(value, requirePerms) {
     }
     return [parts[1]];
 }
+function parseGroupAclSpec(value, requirePerms) {
+    const parts = value.split(':');
+    if (parts[0] !== 'role' || !parts[1] || (parts.length !== (requirePerms ? 3 : 2))) {
+        throw new FsCliError('INVALID_ARGUMENT', '群空间 ACL 条目格式应为 role:member:<perms>、role:admin:<perms> 或 role:<role>');
+    }
+    const role = `role:${parts[1]}`;
+    if (!['role:member', 'role:admin'].includes(role)) {
+        throw new FsCliError('INVALID_ARGUMENT', '群空间 ACL 仅支持 role:member 或 role:admin');
+    }
+    if (!requirePerms)
+        return [role];
+    const perms = parts[2];
+    if (!perms || !/^(?:r|rw|rwx)$/.test(perms)) {
+        throw new FsCliError('INVALID_ARGUMENT', '群空间 ACL 权限必须是 r、rw 或 rwx');
+    }
+    if (role === 'role:member' && perms !== 'rw') {
+        throw new FsCliError('INVALID_ARGUMENT', 'role:member 只能授予 rw 群空间 ACL');
+    }
+    return [role, perms];
+}
 function assertLocalFile(localPath) {
     let st;
     try {
@@ -1420,14 +1474,6 @@ function contentTypeFrom(value) {
     const raw = value?.contentType ?? value?.content_type ?? value?.mime ?? value?.mime_type;
     return raw ? String(raw).toLowerCase() : undefined;
 }
-function bytesFromDownload(value) {
-    const data = value?.data;
-    if (data instanceof Uint8Array)
-        return data;
-    if (data instanceof ArrayBuffer)
-        return new Uint8Array(data);
-    throw new FsCliError('BACKEND_ERROR', '下载接口未返回字节内容', undefined, value);
-}
 function looksBinary(bytes, contentType) {
     if (contentType) {
         if (contentType.startsWith('text/'))

package/dist/cli/init.js

@@ -7,7 +7,7 @@ import { commandExists } from '../utils/cross-platform.js';
 import { scanInstances } from '../utils/instance-registry.js';
 import { saveDefaultsSafe, loadAllAgents, loadDaemonConfig, saveDaemonConfig } from '../config-store.js';
 import { generateControlAid, resolveControlAidDomain } from '../aun/aid/control-aid.js';
-import { getCodexAppServerAvailability, isCodexAppServerAvailable } from '../agents/codex-runner.js';
+import { getCodexAppServerAvailability } from '../agents/codex-runner.js';
 import { resolveEcagentConfig } from '../agents/baseagent.js';
 import { defaultProjectsRoot } from '../utils/project-path.js';
 import { WEB_CLI_BIN, WEB_PACKAGE_LATEST } from '../product.js';
@@ -28,15 +28,44 @@ export function expandLeadingTildePath(value, homeDir = os.homedir()) {
 }
 const BASEAGENT_CANDIDATES = ['claude', 'codex', 'gemini', 'ecagent'];
 const AUTO_BASEAGENT_CANDIDATES = ['claude', 'codex', 'gemini'];
-function isBaseagentAvailable(baseagent) {
+function isBaseagentAvailable(baseagent, codexAvailability) {
     if (baseagent === 'codex')
-        return isCodexAppServerAvailable();
+        return (codexAvailability ?? getCodexAppServerAvailability()).available;
     if (baseagent === 'ecagent')
         return true;
     return commandExists(baseagent);
 }
-function detectAvailable() {
-    return BASEAGENT_CANDIDATES.filter(isBaseagentAvailable);
+function detectAvailable(codexAvailability = getCodexAppServerAvailability()) {
+    return BASEAGENT_CANDIDATES.filter(baseagent => isBaseagentAvailable(baseagent, codexAvailability));
+}
+/** Offer installation only when the probe positively identified an old CLI. */
+export async function maybeUpgradeCodexForInit(availability, dependencies) {
+    if (!availability.requiresUpgrade) {
+        return { availability, offered: false, accepted: false };
+    }
+    const accepted = await dependencies.confirm();
+    if (!accepted)
+        return { availability, offered: true, accepted: false };
+    try {
+        const install = dependencies.install ?? (async () => {
+            const { npmInstallGlobal } = await import('../utils/npm-ops.js');
+            await npmInstallGlobal('@openai/codex@latest');
+        });
+        await install();
+    }
+    catch (error) {
+        return {
+            availability,
+            offered: true,
+            accepted: true,
+            error: installErrorMessage(error),
+        };
+    }
+    return {
+        availability: (dependencies.probe ?? getCodexAppServerAvailability)(),
+        offered: true,
+        accepted: true,
+    };
 }
 function pickDefault(available) {
     return AUTO_BASEAGENT_CANDIDATES.find(candidate => available.includes(candidate));
@@ -192,7 +221,45 @@ export async function cmdInit(options) {
         return false;
     }
     // ── 2. 探测 baseagent ──
-    const available = detectAvailable();
+    let codexAvailability = getCodexAppServerAvailability();
+    if (!options?.nonInteractive && codexAvailability.version) {
+        console.log(`检测到 Codex CLI: ${codexAvailability.version}`);
+    }
+    if (!options?.nonInteractive && codexAvailability.requiresUpgrade) {
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        let result;
+        try {
+            result = await maybeUpgradeCodexForInit(codexAvailability, {
+                confirm: async () => {
+                    console.log(`⚠ ${codexAvailability.reason}`);
+                    const answer = (await ask(rl, '是否立即升级 Codex CLI？[Y/n] ')).trim().toLowerCase();
+                    return answer === '' || answer === 'y' || answer === 'yes';
+                },
+            });
+        }
+        finally {
+            try {
+                rl.close();
+            }
+            catch { /* ignore */ }
+        }
+        if (!result.accepted) {
+            console.log('  已跳过 Codex CLI 升级');
+        }
+        else if (result.error) {
+            console.log(`  ⚠ Codex CLI 升级失败: ${result.error}`);
+        }
+        else {
+            codexAvailability = result.availability;
+            if (codexAvailability.available) {
+                console.log(`  ✓ Codex CLI 已升级至 ${codexAvailability.version}`);
+            }
+            else {
+                console.log(`  ⚠ Codex CLI 升级后仍不可用: ${codexAvailability.reason ?? '未知原因'}`);
+            }
+        }
+    }
+    const available = detectAvailable(codexAvailability);
     if (available.length === 0 || (available.length === 1 && available[0] === 'ecagent' && ecagentUnavailableReason())) {
         console.log('❌ 未检测到可用 baseagent。请安装至少一款：');
         console.log('  - claude CLI');
@@ -202,8 +269,10 @@ export async function cmdInit(options) {
         return false;
     }
     console.log('检测到可用的 baseagent:');
-    for (const b of available)
-        console.log(`  ● ${b}`);
+    for (const b of available) {
+        const version = b === 'codex' ? codexAvailability.version : undefined;
+        console.log(`  ● ${b}${version ? ` (CLI ${version})` : ''}`);
+    }
     console.log('');
     const defaultsPath = p.defaultsConfig;
     const defaultsExisted = fs.existsSync(defaultsPath);