evolcore 0.0.14 → 0.0.16

package/CHANGELOG.md

@@ -3,6 +3,35 @@
 本文件记录 EvolCore 的重要变更。EvolClaw 版本线的历史记录已归档至
 [`docs/_archive/CHANGELOG-evolclaw.md`](docs/_archive/CHANGELOG-evolclaw.md)。
 
+## 0.0.16 (2026-08-25)
+
+### 任务与消息可靠性
+
+- 统一任务总执行时限与 AUN 附件投递重试边界，补充可恢复失败的退避与错误上下文，避免无配置时误设总超时。
+- 优化会话响应、事件总线和守护进程生命周期，完善任务结束、重试和清理时的状态收敛。
+
+### Windows 与运行兼容性
+
+- 强化 Windows 进程识别、登录自启状态探测和命令输出解码，避免误识别其它 Node 服务并改善失败诊断。
+- 修正 Windows Claude 沙箱 settings 的受管临时文件生命周期，收紧运行目录校验，并为过长的 Unix socket 路径提供隔离的短路径回退。
+
+### 审计与权限边界
+
+- 增强结构化日志完整性检查、生命周期关联和重复记录识别，统一工具错误分类与审计上下文。
+- 收紧只读诊断、受保护路径和运行时锁访问策略，仅允许显式授权的有界源码诊断。
+
+## 0.0.15 (2026-08-25)
+
+### Codex 文件授权
+
+- 文件变更的临时授权按 canonical 化后的完整目标文件集合匹配，变更内容或顺序调整不再扩大授权范围。
+- 统一 Codex 文件授权的交互反馈，明确区分同文件临时授权与同操作临时授权，并收紧跨会话授权契约。
+
+### 运行安全与审计
+
+- 为 Claude、Codex 和 ecagent 的工具预检拒绝统一补充结构化授权审计，便于追踪策略、请求和会话上下文。
+- 规范 Codex 审批命令与委派校验，拒绝无法规范化的复合命令和空字节输入，并修正 Windows 受管临时目录的私有性校验。
+
 ## 0.0.14 (2026-08-24)
 
 ### Codex 受管运行与安全

package/README.md

@@ -162,6 +162,7 @@ ec init aun
   "idleMonitor": {
     "enabled": true,                            // 任务超时监控开关
     "timeout": 120,                             // 超时阈值（秒），默认 120 秒
+    "maxExecutionTime": 7200,                   // 可选：任务总执行时限（秒）；未配置、非数字或 <=0 时不限制
     "safeModeThreshold": 3                      // 连续超时 N 次后进入安全模式（设为 0 禁用安全模式）
   },
   "flushDelay": 4                               // 工具活动消息聚合发送间隔（秒），默认 4 秒

package/dist/agents/claude-runner.js

@@ -25,6 +25,7 @@ import { buildClaudeProtectedFilesystem, containsHClassReference, containsLClass
 import { buildHClassGuardCommand, createSandboxInitializationError, isSandboxInitializationFailure, SANDBOX_INITIALIZATION_FAILED, ensureClaudeGitWorktreeConfig, prependExecutableDirectory, resolveBubblewrapPath, shouldFailIfClaudeSandboxUnavailable, } from '../core/permission/sandbox-runtime.js';
 import { buildClaudeUnixSocketAllowlist } from '../core/permission/unix-socket-policy.js';
 import { auditToolPreflightDenial } from '../core/auth/authorization-audit.js';
+import { isManagedSessionRuntimeDir } from '../cli/task-context.js';
 import { contextTokensForUsage, usageForContext, isClaudeContextUsageModel, isOneMillionContextModel, realContextWindowForModel, autoCompactWindowForModel } from './runner-types.js';
 export { hasCompact, hasModelSwitcher, hasPermissionController } from './runner-types.js';
 // Built-in tools execute inside the Claude runtime and are covered by the
@@ -243,6 +244,17 @@ function trustedRuntimeWritePaths(runtimeEnv) {
     }
     return [...new Set(paths)];
 }
+function resolveClaudeSettingsDirectory(runtimeEnv) {
+    const configured = runtimeEnv?.TMPDIR?.trim();
+    if (!configured || !path.isAbsolute(configured)) {
+        throw new Error('[ClaudeSandbox] managed TMPDIR is unavailable');
+    }
+    const directory = path.resolve(configured);
+    if (!isManagedSessionRuntimeDir(directory, configured)) {
+        throw new Error('[ClaudeSandbox] settings file directory is outside the managed TMPDIR');
+    }
+    return directory;
+}
 async function assertClaudeSettingSourcesHaveLiteralSandboxPaths(cwd, settingSources, managedSettings) {
     if (process.platform !== 'linux' || settingSources.length === 0)
         return;
@@ -601,6 +613,7 @@ export class AgentRunner {
     activeMessageStreams = new Map();
     interruptFns = new Map();
     activeQueries = new Map();
+    sandboxSettingsFiles = new Map();
     streamDone = new Map();
     streamDoneResolvers = new Map();
     onSessionIdUpdate;
@@ -612,6 +625,33 @@ export class AgentRunner {
     /** 每个 session 最近的子进程 stderr 行（环形缓冲），用于子进程崩溃时还原真正原因 */
     recentStderr = new Map();
     static STDERR_BUFFER_MAX = 80;
+    trackSandboxSettingsFile(sessionId, filePath) {
+        const files = this.sandboxSettingsFiles.get(sessionId) ?? new Set();
+        files.add(filePath);
+        this.sandboxSettingsFiles.set(sessionId, files);
+    }
+    cleanupSandboxSettingsFile(sessionId, filePath) {
+        if (!filePath)
+            return;
+        try {
+            fs.rmSync(filePath, { force: true });
+        }
+        catch (error) {
+            const code = error && typeof error === 'object' && 'code' in error
+                ? String(error.code)
+                : 'unknown';
+            logger.warn(`[ClaudeSandbox] failed to remove transient settings file code=${code}`);
+        }
+        const files = this.sandboxSettingsFiles.get(sessionId);
+        files?.delete(filePath);
+        if (files?.size === 0)
+            this.sandboxSettingsFiles.delete(sessionId);
+    }
+    cleanupSandboxSettingsFiles(sessionId) {
+        for (const filePath of [...(this.sandboxSettingsFiles.get(sessionId) ?? [])]) {
+            this.cleanupSandboxSettingsFile(sessionId, filePath);
+        }
+    }
     constructor(apiKey, model, onSessionIdUpdate, baseUrl, config) {
         this.apiKey = apiKey;
         this.model = model || 'sonnet';
@@ -1366,7 +1406,7 @@ export class AgentRunner {
      * SDK 原始事件 → 标准 AgentEvent 转换
      * 所有 SDK 特有的事件类型引用封装在此方法内
      */
-    async *transformStream(sdkStream, sessionId, inputId, callModel, callEffort, sdkModel, isResuming = false) {
+    async *transformStream(sdkStream, sessionId, inputId, callModel, callEffort, sdkModel, isResuming = false, sandboxSettingsFile) {
         let lastSessionId;
         let hasTurnActivity = false;
         let ignoredPreTurnResult = false;
@@ -1813,6 +1853,7 @@ export class AgentRunner {
         }
         finally {
             this.recentStderr.delete(sessionId);
+            this.cleanupSandboxSettingsFile(sessionId, sandboxSettingsFile);
         }
     }
     async runQuery(sessionId, prompt, projectPath, initialClaudeSessionId, images, systemPromptAppend, sessionManager, modelOverride, runtimeEnv) {
@@ -2001,6 +2042,7 @@ export class AgentRunner {
                 userId: permCtx?.userId,
                 role: permCtx?.role,
                 permissionMode: callPermissionMode,
+                allowReadonlySourceDiagnostics: permCtx?.allowReadonlySourceDiagnostics === true,
                 allowHostProcessCommands: true,
                 allowProtectedMetadata: false,
                 safeOutputHelperPath: path.join(getPackageRoot(), 'bin', 'ec-safe-output.js'),
@@ -2035,6 +2077,7 @@ export class AgentRunner {
                     peerId: permCtx?.userId,
                     role: permCtx?.role,
                     allowProtectedMetadata: false,
+                    allowReadonlySourceDiagnostics: permCtx?.allowReadonlySourceDiagnostics === true,
                 };
                 const roResult = checkReadonly(toolName, toolInput, projectPath, readonlyContext);
                 if (roResult.behavior === 'deny') {
@@ -2123,6 +2166,7 @@ export class AgentRunner {
                 userId: permCtx?.userId,
                 role: permCtx?.role,
                 permissionMode: callPermissionMode,
+                allowReadonlySourceDiagnostics: permCtx?.allowReadonlySourceDiagnostics === true,
                 allowHostProcessCommands: true,
                 allowProtectedMetadata: false,
                 safeOutputHelperPath: path.join(getPackageRoot(), 'bin', 'ec-safe-output.js'),
@@ -2193,6 +2237,7 @@ export class AgentRunner {
                     peerId: permCtx?.userId,
                     role: permCtx?.role,
                     allowProtectedMetadata: false,
+                    allowReadonlySourceDiagnostics: permCtx?.allowReadonlySourceDiagnostics === true,
                 };
                 const roResult = checkReadonly(toolName, input, projectPath, readonlyContext);
                 if (roResult.behavior === 'deny') {
@@ -2362,23 +2407,54 @@ export class AgentRunner {
             stderr: handleClaudeStderr,
             env: this.getAgentEnv(runtimeEnv, sessionId, callPermissionMode)
         };
+        // Native Windows has a small CreateProcess command-line limit. The SDK
+        // normally serializes `sandbox` into inline `--settings` JSON, so preserve
+        // the same flag-settings semantics while passing a short file path.
+        let sandboxSettingsFile;
+        const shouldUseSandboxSettingsFile = process.platform === 'win32' && sandboxOptions && sandboxOptions.enabled !== false;
+        if (shouldUseSandboxSettingsFile) {
+            try {
+                const managedTmpDir = resolveClaudeSettingsDirectory(runtimeEnv);
+                sandboxSettingsFile = path.join(managedTmpDir, `.claude-sandbox-${crypto.randomUUID()}.json`);
+                const capabilitySettings = capabilityOptions.settings;
+                const settingsContent = JSON.stringify({
+                    ...(capabilitySettings && typeof capabilitySettings === 'object' && !Array.isArray(capabilitySettings)
+                        ? capabilitySettings
+                        : {}),
+                    sandbox: sandboxOptions,
+                });
+                fs.writeFileSync(sandboxSettingsFile, settingsContent, { flag: 'wx', mode: 0o600 });
+                this.trackSandboxSettingsFile(sessionId, sandboxSettingsFile);
+                logger.info(`[ClaudeSandbox] Windows settings externalized settingsChars=${settingsContent.length} ` +
+                    `settingsPathChars=${sandboxSettingsFile.length}`);
+            }
+            catch (error) {
+                this.cleanupSandboxSettingsFile(sessionId, sandboxSettingsFile);
+                throw new Error(`[ClaudeSandbox] failed to externalize Windows settings: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
         const createQuery = (promptInput, resumeSessionId, resumeAt) => {
             if (useSettingSources) {
+                const queryOptions = {
+                    ...commonOptions,
+                    ...(!resumeSessionId && callSessionTitle ? { title: callSessionTitle } : {}),
+                    settingSources: [...settingSources],
+                    systemPrompt: {
+                        type: 'preset',
+                        preset: 'claude_code',
+                        ...(excludeDynamic ? { excludeDynamicSections: true } : {}),
+                        ...(systemPromptAppend ? { append: systemPromptAppend } : {})
+                    },
+                    ...(resumeSessionId ? { resume: resumeSessionId } : {}),
+                    ...(resumeAt ? { resumeSessionAt: resumeAt } : {}),
+                };
+                if (sandboxSettingsFile) {
+                    delete queryOptions.sandbox;
+                    queryOptions.settings = sandboxSettingsFile;
+                }
                 return query({
                     prompt: promptInput,
-                    options: {
-                        ...commonOptions,
-                        ...(!resumeSessionId && callSessionTitle ? { title: callSessionTitle } : {}),
-                        settingSources: [...settingSources],
-                        systemPrompt: {
-                            type: 'preset',
-                            preset: 'claude_code',
-                            ...(excludeDynamic ? { excludeDynamicSections: true } : {}),
-                            ...(systemPromptAppend ? { append: systemPromptAppend } : {})
-                        },
-                        ...(resumeSessionId ? { resume: resumeSessionId } : {}),
-                        ...(resumeAt ? { resumeSessionAt: resumeAt } : {}),
-                    }
+                    options: queryOptions
                 });
             }
             else {
@@ -2408,22 +2484,27 @@ export class AgentRunner {
                     globalClaudeMd,
                     systemPromptAppend,
                 ].filter(Boolean).join('\n\n');
+                const queryOptions = {
+                    ...commonOptions,
+                    ...(!resumeSessionId && callSessionTitle ? { title: callSessionTitle } : {}),
+                    settingSources: [],
+                    ...(resumeSessionId ? { resume: resumeSessionId } : {}),
+                    ...(resumeAt ? { resumeSessionAt: resumeAt } : {}),
+                    ...(fullAppend ? {
+                        systemPrompt: {
+                            type: 'preset',
+                            preset: 'claude_code',
+                            append: fullAppend
+                        }
+                    } : {}),
+                };
+                if (sandboxSettingsFile) {
+                    delete queryOptions.sandbox;
+                    queryOptions.settings = sandboxSettingsFile;
+                }
                 return query({
                     prompt: promptInput,
-                    options: {
-                        ...commonOptions,
-                        ...(!resumeSessionId && callSessionTitle ? { title: callSessionTitle } : {}),
-                        settingSources: [],
-                        ...(resumeSessionId ? { resume: resumeSessionId } : {}),
-                        ...(resumeAt ? { resumeSessionAt: resumeAt } : {}),
-                        ...(fullAppend ? {
-                            systemPrompt: {
-                                type: 'preset',
-                                preset: 'claude_code',
-                                append: fullAppend
-                            }
-                        } : {}),
-                    }
+                    options: queryOptions
                 });
             }
         };
@@ -2455,6 +2536,7 @@ export class AgentRunner {
                 sdkStream = createQuery(msgStream);
             }
             catch (error) {
+                this.cleanupSandboxSettingsFile(sessionId, sandboxSettingsFile);
                 const stderr = this.recentStderr.get(sessionId) ?? [];
                 if (isSandboxInitializationFailure(error, stderr))
                     throw createSandboxInitializationError(error, stderr);
@@ -2468,6 +2550,7 @@ export class AgentRunner {
                 sdkStream = createQuery(msgStream, agentSessionId, resumeAt);
             }
             catch (error) {
+                this.cleanupSandboxSettingsFile(sessionId, sandboxSettingsFile);
                 const stderr = this.recentStderr.get(sessionId) ?? [];
                 if (isSandboxInitializationFailure(error, stderr))
                     throw createSandboxInitializationError(error, stderr);
@@ -2483,13 +2566,14 @@ export class AgentRunner {
             this.interruptFns.set(sessionId, () => sdkStream.interrupt());
         }
         // 返回标准 AgentEvent 流（重试由 MessageProcessor 层负责）
-        const transformed = this.transformStream(sdkStream, sessionId, inputId, callModel, callEffort, sdkModel, !!agentSessionId);
+        const transformed = this.transformStream(sdkStream, sessionId, inputId, callModel, callEffort, sdkModel, !!agentSessionId, sandboxSettingsFile);
         const self = this;
         return (async function* () {
             try {
                 yield* transformed;
             }
             finally {
+                self.cleanupSandboxSettingsFile(sessionId, sandboxSettingsFile);
                 self.streamDoneResolvers.get(sessionId)?.();
                 self.streamDoneResolvers.delete(sessionId);
                 self.streamDone.delete(sessionId);
@@ -2536,6 +2620,7 @@ export class AgentRunner {
         }
         this.interruptFns.delete(sessionId);
         this.activeStreams.delete(sessionId);
+        this.cleanupSandboxSettingsFiles(sessionId);
         return { stillQueued, cancelledInputIds, closed: true };
     }
     hasActiveStream(sessionId) {
@@ -2553,6 +2638,7 @@ export class AgentRunner {
         this.activeStreams.delete(sessionId);
         this.interruptFns.delete(sessionId);
         this.activeQueries.delete(sessionId);
+        this.cleanupSandboxSettingsFiles(sessionId);
         this.recentStderr.delete(sessionId);
     }
     injectUserMessage(sessionId, text) {
@@ -2657,6 +2743,7 @@ export class AgentRunner {
         this.interruptFns.delete(sessionId);
         this.activeQueries.delete(sessionId);
         this.permissionContexts.delete(sessionId);
+        this.cleanupSandboxSettingsFiles(sessionId);
     }
     async dispose() {
         const interrupts = [...this.interruptFns.values()].map(async (interrupt) => {
@@ -2686,6 +2773,9 @@ export class AgentRunner {
         this.streamDoneResolvers.clear();
         this.permissionContexts.clear();
         this.recentStderr.clear();
+        for (const sessionId of [...this.sandboxSettingsFiles.keys()]) {
+            this.cleanupSandboxSettingsFiles(sessionId);
+        }
     }
     resolveSessionFile(agentSessionId, projectPath) {
         const encodedProjectPath = encodePath(projectPath);

package/dist/agents/codex-runner.js

@@ -13,7 +13,7 @@ import { CodexAppServerClient } from './codex-app-server-client.js';
 import { resolveOpenaiConfig } from './baseagent.js';
 import { logger } from '../utils/logger.js';
 import { summarizeToolInputForAudit } from '../utils/tool-summary.js';
-import { auditToolPreflightDenial } from '../core/auth/authorization-audit.js';
+import { auditCodexApprovalDecision, auditToolPreflightDenial } from '../core/auth/authorization-audit.js';
 import { isRetryableError } from '../utils/error-utils.js';
 import { renderActionAsText } from '../core/interaction-router.js';
 import { buildEnvelope, sendInteractionPayload } from '../core/message/message-utils.js';
@@ -1694,7 +1694,7 @@ export class CodexRunner {
                 logger.warn(`[CodexRunner] failed to record policy-hook denial: session=${sessionKey} tool=${toolName} error=${error instanceof Error ? error.message : String(error)}`);
             }
             const response = this.toAppServerApprovalResponse(request.method, 'deny', toolInput, unattended);
-            this.logAppServerApprovalAudit(request, sessionKey, toolName, 'deny', 'policy', policyResult.policyCode ?? 'session_policy_hook');
+            this.logAppServerApprovalAudit(request, sessionKey, toolName, 'deny', 'policy', policyResult.policyCode ?? 'session_policy_hook', policyResult.reason ?? 'session policy denied approval');
             return response;
         }
         const summary = this.summarizeAppServerRequest(request.method, params);
@@ -1703,7 +1703,7 @@ export class CodexRunner {
         if (!workspacePath) {
             logger.warn(`[CodexRunner] approval denied because thread workspace is unknown: method=${request.method} thread=${params.threadId ?? params.conversationId ?? '<missing>'}`);
             const response = this.toAppServerApprovalResponse(request.method, 'deny', toolInput, unattended);
-            this.logAppServerApprovalAudit(request, sessionKey, toolName, 'deny', 'infrastructure', 'approval_workspace_unknown');
+            this.logAppServerApprovalAudit(request, sessionKey, toolName, 'deny', 'infrastructure', 'approval_workspace_unknown', 'thread workspace is unknown');
             return response;
         }
         const operationCwd = this.resolvePermissionOperationCwd(params, workspacePath, toolName);
@@ -1738,7 +1738,7 @@ export class CodexRunner {
                 logger.warn(`[CodexRunner] failed to record infrastructure approval denial: session=${sessionKey} code=${policyCode} error=${error instanceof Error ? error.message : String(error)}`);
             }
             const response = this.toAppServerApprovalResponse(request.method, 'deny', toolInput, unattended);
-            this.logAppServerApprovalAudit(request, sessionKey, toolName, 'deny', 'infrastructure', policyCode);
+            this.logAppServerApprovalAudit(request, sessionKey, toolName, 'deny', 'infrastructure', policyCode, message);
             return response;
         };
         if (managedEcIntent && !approvedCommand) {
@@ -1763,7 +1763,13 @@ export class CodexRunner {
                 }
             }
             const response = this.toAppServerApprovalResponse(request.method, decision, toolInput, unattended);
-            this.logAppServerApprovalAudit(request, sessionKey, toolName, decision === 'deny' ? 'deny' : 'allow', decision === 'deny' ? (sessionMode === 'auto' || sessionMode === 'readonly' ? 'policy' : 'approval') : 'approval');
+            this.logAppServerApprovalAudit(request, sessionKey, toolName, decision === 'deny' ? 'deny' : 'allow', decision === 'deny' ? (sessionMode === 'auto' || sessionMode === 'readonly' ? 'policy' : 'approval') : 'approval', decision === 'deny' && (sessionMode === 'auto' || sessionMode === 'readonly')
+                ? 'permission_mode_denied'
+                : undefined, decision === 'deny'
+                ? (reason || (sessionMode === 'auto' || sessionMode === 'readonly'
+                    ? `permission mode ${sessionMode} denied approval`
+                    : 'user approval denied'))
+                : 'approval accepted');
             logger.info(`[CodexRunner] app-server approval response id=${request.id} method=${request.method} decision=${decision} response=${JSON.stringify(response)}`);
             return response;
         }
@@ -1773,7 +1779,21 @@ export class CodexRunner {
             throw error;
         }
     }
-    logAppServerApprovalAudit(request, sessionKey, toolName, decision, decisionSource, policyCode) {
+    logAppServerApprovalAudit(request, sessionKey, toolName, decision, decisionSource, policyCode, reason) {
+        const context = this.permissionContexts.get(sessionKey);
+        auditCodexApprovalDecision({
+            requestId: request.id !== undefined ? String(request.id) : undefined,
+            method: request.method,
+            sessionId: sessionKey,
+            agentAid: context?.selfAid,
+            toolName,
+            decision,
+            decisionSource,
+            policyCode,
+            permissionMode: normalizePermissionMode(this.chatModes.get(sessionKey) ?? this.currentMode).mode,
+            role: context?.role,
+            reason: reason ?? policyCode ?? (decision === 'allow' ? 'approval accepted' : 'approval denied'),
+        });
         logger.info(`[CodexRunner] app-server approval audit ${JSON.stringify({
             requestId: request.id !== undefined ? String(request.id) : undefined,
             method: request.method,
@@ -1782,6 +1802,7 @@ export class CodexRunner {
             decision,
             decisionSource,
             ...(policyCode ? { policyCode } : {}),
+            reason: reason ?? policyCode ?? (decision === 'allow' ? 'approval accepted' : 'approval denied'),
             executed: false,
         })}`);
     }
@@ -2200,6 +2221,7 @@ export class CodexRunner {
             // readonly decision. The map entry alone is stale if the directory was
             // replaced between preflight and the approval callback.
             managedTempDir: this.getManagedTempDir(sessionKey),
+            allowReadonlySourceDiagnostics: permCtx?.allowReadonlySourceDiagnostics === true,
         } : undefined;
         if (toolName === 'Bash')
             return checkReadonly(toolName, input, projectPath, readonlyContext);
@@ -2315,12 +2337,12 @@ export class CodexRunner {
         // per-session 权限模式（runQuery 写入）；缺省回落实例级 currentMode（兼容无 runQuery 上下文的调用）
         const rawMode = this.chatModes.get(sessionKey) ?? this.currentMode;
         const mode = normalizePermissionMode(rawMode).mode;
-        const recordBlockedOperation = async (policyCode, operationInput = toolInput) => {
+        const recordBlockedOperation = async (policyCode, operationInput = toolInput, denialReason = 'policy denied') => {
             const summary = summarizeToolInputForAudit(toolName, operationInput).slice(0, 512);
             auditToolPreflightDenial({
                 toolName,
                 policyCode,
-                reason: 'policy denied',
+                reason: denialReason,
                 summary,
                 sessionId: sessionKey,
                 agentAid: permissionContext?.selfAid,
@@ -2364,6 +2386,7 @@ export class CodexRunner {
             userId: permissionContext?.userId,
             role: permissionContext?.role,
             permissionMode: mode,
+            allowReadonlySourceDiagnostics: permissionContext?.allowReadonlySourceDiagnostics === true,
             projectPath: operationCwd,
             workspacePath,
         });
@@ -2371,7 +2394,7 @@ export class CodexRunner {
             logger.warn(`[CodexRunner] tool preflight denied: session=${sessionKey} tool=${toolName} ` +
                 `policy=${preflight.policyCode ?? 'unknown'} reason=${preflight.message ?? 'policy denied'}`);
             if (preflight.policyCode) {
-                await recordBlockedOperation(preflight.policyCode);
+                await recordBlockedOperation(preflight.policyCode, toolInput, preflight.message ?? 'tool preflight denied');
             }
             return 'deny';
         }
@@ -2399,7 +2422,7 @@ export class CodexRunner {
         if (mode === 'readonly') {
             const readonly = this.checkCodexReadonly(toolName, checkedInput, operationCwd, sessionKey);
             if (readonly.behavior === 'deny') {
-                await recordBlockedOperation(readonly.policyCode ?? 'readonly_mode', checkedInput);
+                await recordBlockedOperation(readonly.policyCode ?? 'readonly_mode', checkedInput, readonly.message);
                 return 'deny';
             }
             return 'allow';
@@ -2430,6 +2453,9 @@ export class CodexRunner {
         if (requiresSandboxExpansionApproval) {
             if (!this.permissionGateway || !permissionPrompt)
                 return 'deny';
+            if (toolName === 'FileChange') {
+                return this.permissionGateway.requestPermission(sessionKey, toolName, checkedInput, permissionPrompt, this.permissionContexts.get(sessionKey), summary, reason || 'Codex 请求扩大当前命令或 turn 的文件系统权限', grantScope, undefined, { fileChangeCwd: workspacePath });
+            }
             return this.permissionGateway.requestPermission(sessionKey, toolName, checkedInput, permissionPrompt, this.permissionContexts.get(sessionKey), summary, reason || 'Codex 请求扩大当前命令或 turn 的文件系统权限', grantScope);
         }
         if (mode === 'request' || mode === 'bypass') {
@@ -2925,6 +2951,7 @@ export class CodexRunner {
                     name: 'Shell',
                     result: item.aggregatedOutput ?? '',
                     isError: item.exitCode !== null && item.exitCode !== undefined ? item.exitCode !== 0 : item.status === 'failed',
+                    ...(item.error?.code || item.error?.errorCode ? { errorCode: String(item.error.code ?? item.error.errorCode) } : {}),
                     callId: item.id,
                     durationMs: typeof item.durationMs === 'number' ? item.durationMs : undefined,
                 };
@@ -2936,6 +2963,7 @@ export class CodexRunner {
                     result: item.result,
                     isError: item.status === 'failed',
                     error: item.error?.message,
+                    ...(item.error?.code || item.error?.errorCode ? { errorCode: String(item.error.code ?? item.error.errorCode) } : {}),
                     callId: item.id,
                     durationMs: typeof item.durationMs === 'number' ? item.durationMs : undefined,
                 };
@@ -2946,6 +2974,7 @@ export class CodexRunner {
                     name: item.namespace ? `${item.namespace}:${item.tool}` : item.tool,
                     result: item.contentItems,
                     isError: item.success === false || item.status === 'failed',
+                    ...(item.error?.code || item.error?.errorCode ? { errorCode: String(item.error.code ?? item.error.errorCode) } : {}),
                     callId: item.id,
                     durationMs: typeof item.durationMs === 'number' ? item.durationMs : undefined,
                 };

package/dist/agents/ecagent-runner.js

@@ -924,7 +924,8 @@ export class EcagentRunner {
         if (event.type === 'tool_execution_end') {
             queue.push({
                 type: 'tool_result', name: event.toolName, result: extractToolResult(event.result),
-                isError: event.isError, error: event.isError ? extractToolResult(event.result) : undefined, callId: event.toolCallId,
+                isError: event.isError, error: event.isError ? extractToolResult(event.result) : undefined,
+                callId: event.toolCallId,
             });
             return;
         }
@@ -1006,6 +1007,7 @@ export class EcagentRunner {
             userId: permissionContext?.userId,
             role: permissionContext?.role,
             permissionMode: mode,
+            allowReadonlySourceDiagnostics: permissionContext?.allowReadonlySourceDiagnostics === true,
             projectPath,
         });
         if (preflight.behavior === 'deny') {
@@ -1020,6 +1022,7 @@ export class EcagentRunner {
         if (mode === 'readonly') {
             const decision = checkReadonly(toolName, checkedInput, projectPath, {
                 sessionId, channel: permissionContext?.channel, peerId: permissionContext?.userId, role: permissionContext?.role,
+                allowReadonlySourceDiagnostics: permissionContext?.allowReadonlySourceDiagnostics === true,
             });
             if (decision.behavior === 'deny') {
                 await recordBlockedOperation(decision.policyCode ?? 'readonly_mode', checkedInput);

package/dist/aun/msg/p2p.js

@@ -11,20 +11,20 @@ import { ipcQuery } from '../../ipc.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../../core/auth/agent-delegation.js';
 import { loadDaemonConfig } from '../../config-store.js';
 import { normalizeAunMentionEntries } from './mention-schema.js';
-const DEFAULT_TASK_EXECUTION_MS = 60 * 60 * 1000;
 const DAEMON_SEND_TIMEOUT_GRACE_MS = 10_000;
+const DEFAULT_IDLE_TIMEOUT_MS = 120_000;
 const MAX_TIMER_MS = 2_147_483_647;
 export function daemonTaskSendIpcTimeoutMs(file = false) {
-    let executionMs = DEFAULT_TASK_EXECUTION_MS;
+    let idleTimeoutMs = DEFAULT_IDLE_TIMEOUT_MS;
     try {
         const config = JSON.parse(fs.readFileSync(resolvePaths().daemonConfig, 'utf8'));
-        const seconds = config.idleMonitor?.maxExecutionTime;
+        const seconds = config.idleMonitor?.timeout;
         if (typeof seconds === 'number' && Number.isFinite(seconds) && seconds > 0) {
-            executionMs = seconds * 1000;
+            idleTimeoutMs = seconds * 1000;
         }
     }
     catch { }
-    return Math.min(MAX_TIMER_MS, Math.max(file ? 120_000 : 5_000, executionMs + DAEMON_SEND_TIMEOUT_GRACE_MS));
+    return Math.min(MAX_TIMER_MS, Math.max(file ? 120_000 : 5_000, idleTimeoutMs + DAEMON_SEND_TIMEOUT_GRACE_MS));
 }
 export function resolveAunMessageEncrypt(explicit) {
     if (typeof explicit === 'boolean')