evolcore 0.0.16 → 0.0.18

package/dist/channels/aun.js

@@ -1,5 +1,6 @@
 import { E2EEError } from '@agentunion/fastaun';
 import crypto from 'crypto';
+import { performance } from 'node:perf_hooks';
 import fs from 'fs';
 import path from 'path';
 import os from 'os';
@@ -15,7 +16,7 @@ import { createSendFileMarkerPattern } from '../core/message/file-markers.js';
 import { chatDirPath } from '../core/session/session-fs-store.js';
 import { appendHintAdd, appendHintRemove, parseInjectRequest } from '../core/message/pending-hints.js';
 import { appendAidLifecycle } from '../aun/aid/identity.js';
-import { getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
+import { enableFullGroupPullPagination, getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
 import { MAX_AUN_ATTACHMENT_SIZE, uploadBufferAndBuildPayload, uploadFileAndBuildPayload } from '../aun/msg/upload.js';
 import { loadAgent } from '../config-store.js';
 import { normalizeAgentLifecycle } from '../config/lifecycle.js';
@@ -33,7 +34,7 @@ import { deriveCausation, normalizeCausation } from '../core/causation/context.j
 import { recordCausationSpan } from '../core/causation/audit.js';
 import { refreshAgentDisplayName, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
 import { readInstalledEvolcoreVersion } from '../utils/evolcore-version.js';
-import { bindPostBootstrapWelcomeOutboxSession, hasPendingPostBootstrapWelcomeOutbox, postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox, } from '../core/bootstrap-messages.js';
+import { bindPostBootstrapWelcomeOutboxSession, hasPendingPostBootstrapWelcomeOutbox, bootstrapInitialMessageOperationId, postBootstrapWelcomeOperationId, preparePostBootstrapWelcomeOutbox, } from '../core/bootstrap-messages.js';
 import { hasMentionAll, mentionEntryAids, mentionEntryTargets, } from '../core/message/mention-schema.js';
 import { normalizeAunMentionEntries, } from '../aun/msg/mention-schema.js';
 import { isDeliveryTarget, sameDeliveryTarget } from '../core/message/message-utils.js';
@@ -224,6 +225,7 @@ export function aunOptsToInbound(opts, channel, channelType) {
         protectedHeaders: opts.protectedHeaders,
         messageId: opts.messageId,
         receivedAt: opts.receivedAt,
+        receivedAtMono: opts.receivedAtMono,
         gatewaySeq: opts.gatewaySeq,
         causation: opts.causation,
         mentions: opts.mentions,
@@ -1053,6 +1055,8 @@ export class AUNChannel {
     reconnectTimer = null;
     reconnectGeneration = 0; // 防止并发 initClient：每次 takeoverReconnect 递增，回调中校验
     onChannelDown;
+    /** Prevent a legacy state alias from double-counting the same SDK transition. */
+    lastConnectionStateSignature = '';
     // initClient concurrency guard: 防止多个 initClient 并发执行
     initInProgress = false;
     // Flap detection: 连接寿命 < FLAP_WINDOW_MS 累计 FLAP_THRESHOLD 次，判定为持续被踢
@@ -1165,6 +1169,7 @@ export class AUNChannel {
             this.store = null;
         }
         this.connected = false;
+        this.lastConnectionStateSignature = '';
         const aunPath = this.config.keystorePath || resolveRoot();
         const aidName = this.config.aid;
         // encryptionSeed 由 getAidStore 内部解析（config / env / 'evol'）
@@ -1183,7 +1188,11 @@ export class AUNChannel {
         });
         this.store = store;
         const client = await loadClient(store, aidName);
+        enableFullGroupPullPagination(client);
         this.client = client;
+        // A reconnect replaces the SDK client. Late events from the retired
+        // instance must not mutate the new instance's health or message state.
+        const isCurrentClient = () => this.client === client;
         // fastaun gives a preset in-memory gateway precedence over its metadata
         // cache and AID discovery. authenticate({ gateway }) is deliberately
         // rejected by its public API, so set the documented client preset before
@@ -1193,6 +1202,10 @@ export class AUNChannel {
         this.gatewayUrl = configuredGateway;
         // Register event handlers before connecting
         client.on('message.received', (data) => {
+            if (!isCurrentClient())
+                return;
+            this.aidState.lastInboundAt = Date.now();
+            this.aidState.lastTransportEventAt = this.aidState.lastInboundAt;
             this.trace('IN', 'message.received', data);
             const kind = (data && typeof data === 'object') ? data.kind ?? '' : '';
             const keys = (data && typeof data === 'object') ? Object.keys(data).join(',') : typeof data;
@@ -1202,6 +1215,10 @@ export class AUNChannel {
         // pureIdentity（控制 AID）：协议层不接群消息，不注册 group 创建监听
         if (!this.config.pureIdentity) {
             client.on('group.message_created', (data) => {
+                if (!isCurrentClient())
+                    return;
+                this.aidState.lastInboundAt = Date.now();
+                this.aidState.lastTransportEventAt = this.aidState.lastInboundAt;
                 this.trace('IN', 'group.message_created', data);
                 const env = (data && typeof data === 'object') ? data.envelope ?? {} : {};
                 const gid = env.group_id ?? '';
@@ -1210,16 +1227,26 @@ export class AUNChannel {
                 this.handleIncomingGroupMessage(data);
             });
         }
-        client.on('connection.state', (data) => {
-            // trace is handled inside handleConnectionState with throttling
-            this.handleConnectionState(data);
-        });
+        const handleSdkState = (source) => (data) => {
+            if (!isCurrentClient())
+                return;
+            // fastaun 0.5.x publishes state_change with nine-state values. Keep the
+            // legacy event subscription for older stores/SDKs during rolling upgrades.
+            this.handleConnectionState(data, source);
+        };
+        client.on('state_change', handleSdkState('state_change'));
+        client.on('connection.state', handleSdkState('connection.state'));
         // gateway 被踢/服务端主动断开（含同槽位互踢的 self/new extra_info）
         client.on('gateway.disconnect', (data) => {
+            if (!isCurrentClient())
+                return;
+            this.aidState.lastTransportEventAt = Date.now();
             this.trace('IN', 'gateway.disconnect', data);
             this.handleGatewayDisconnect(data);
         });
         client.on('message.recalled', (data) => {
+            if (!isCurrentClient())
+                return;
             this.trace('IN', 'message.recalled', data);
             if (data && typeof data === 'object') {
                 const ids = data.message_ids;
@@ -1234,6 +1261,8 @@ export class AUNChannel {
             }
         });
         client.on('message.undecryptable', (data) => {
+            if (!isCurrentClient())
+                return;
             this.trace('IN', 'message.undecryptable', data);
             const d = data;
             const env = (d.envelope && typeof d.envelope === 'object') ? d.envelope : {};
@@ -1242,6 +1271,8 @@ export class AUNChannel {
         // pureIdentity（控制 AID）：不注册 group 解密失败监听
         if (!this.config.pureIdentity) {
             client.on('group.message_undecryptable', (data) => {
+                if (!isCurrentClient())
+                    return;
                 this.trace('IN', 'group.message_undecryptable', data);
                 const d = data;
                 const env = (d.envelope && typeof d.envelope === 'object') ? d.envelope : {};
@@ -1250,6 +1281,8 @@ export class AUNChannel {
             // 群消息撤回（SDK 0.4.10 在线 push 通道）：与私聊 message.recalled 同构，
             // 逐个 message_id 交给 recallHandler → msgBridge.cancel（排队中删除 / 处理中中断）。
             client.on('group.message_recalled', (data) => {
+                if (!isCurrentClient())
+                    return;
                 this.trace('IN', 'group.message_recalled', data);
                 if (data && typeof data === 'object') {
                     const d = data;
@@ -1357,15 +1390,45 @@ export class AUNChannel {
             }
             const operationId = postBootstrapWelcomeOperationId(aidName);
             const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aidName);
+            if (hasMessageLogOperation(chatDir, operationId))
+                return true;
             const prepared = outbox.findByDedupeKey(aidName, operationId);
-            if (hasMessageLogOperation(chatDir, operationId)
-                || (prepared?.delivery?.chatType === 'private' && prepared.channelId === owner)) {
+            const initial = outbox.findByDedupeKey(aidName, bootstrapInitialMessageOperationId(aidName));
+            const initialDelivery = initial && outbox.isDeliveryForChannel(initial.delivery, owner)
+                ? initial.delivery
+                : undefined;
+            // During bootstrap completion the lifecycle is intentionally still
+            // non-active. Persisting the welcome must stay local and must not block
+            // on a best-effort group RPC before the lifecycle commit. If the initial
+            // bootstrap route is already known, preserve it; otherwise migration
+            // will resolve a group route after the channel is active.
+            const lifecycle = normalizeAgentLifecycle(agentConfig).lifecycle;
+            const ownerIsGroup = initialDelivery
+                ? initialDelivery.chatType === 'group'
+                : lifecycle === 'active' ? await this.isGroup(owner) : undefined;
+            const delivery = initialDelivery ?? (ownerIsGroup === true
+                ? { chatType: 'group', groupId: owner }
+                : { chatType: 'private' });
+            if (prepared
+                && prepared.channelId === owner
+                && isDeliveryTarget(prepared.delivery)
+                && sameDeliveryTarget(prepared.delivery, delivery)) {
                 return true;
             }
             const ownerAidClean = owner.startsWith('@') ? owner.slice(1) : owner;
             let ownerDisplayName = ownerAidClean.split('.')[0].slice(0, 12);
+            // Keep lifecycle=bootstrapping preparation entirely local. Resolving an
+            // uncached peer may download agent.md, and welcome display metadata must
+            // never delay the durable write-ahead record or the lifecycle commit.
+            const cachedOwnerInfo = this.peerInfoCached(owner);
             try {
-                const ownerInfo = await this.fetchPeerInfo(owner);
+                const ownerInfo = cachedOwnerInfo
+                    ?? (lifecycle === 'active' ? await this.fetchPeerInfo(owner) : undefined);
+                if (!ownerInfo) {
+                    preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
+                    logger.info(`${this.logPrefix()} Post-bootstrap welcome durably prepared for owner: ${owner}`);
+                    return true;
+                }
                 ownerDisplayName = (ownerInfo.name || ownerDisplayName).slice(0, 12);
                 if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
                     logger.warn(`${this.logPrefix()} Owner ${owner} type is "${ownerInfo.type}" (not human).`);
@@ -1374,7 +1437,7 @@ export class AUNChannel {
             catch (e) {
                 logger.warn(`${this.logPrefix()} Failed to resolve owner display name; using AID label: ${e}`);
             }
-            preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName);
+            preparePostBootstrapWelcomeOutbox(aidName, owner, ownerDisplayName, delivery);
             logger.info(`${this.logPrefix()} Post-bootstrap welcome durably prepared for owner: ${owner}`);
             return true;
         }
@@ -1415,7 +1478,7 @@ export class AUNChannel {
             const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aid);
             return hasMessageLogOperation(chatDir, operationId);
         }
-        if (entry.delivery?.chatType !== 'private') {
+        if (!outbox.isDeliveryForChannel(entry.delivery, entry.channelId)) {
             logger.warn(`${this.logPrefix()} Discarding unrouted legacy post-bootstrap welcome: id=${entry.id}`);
             outbox.remove(aid, entry.id);
             return false;
@@ -1679,6 +1742,7 @@ export class AUNChannel {
             return;
         const msg = data;
         const receivedAt = Date.now();
+        const receivedAtMono = performance.now();
         // Claim before any payload extraction or command parsing. Retransmits may
         // carry a new seq, but the application identity remains message_id.
         const messageId = typeof msg.message_id === 'string' ? msg.message_id : '';
@@ -1772,7 +1836,7 @@ export class AUNChannel {
             this.dispatchMessage({
                 channelId: chatId, userId: fromAid,
                 text: JSON.stringify(payload),
-                chatType: 'private', messageId, seq, receivedAt, gatewaySeq: seq,
+                chatType: 'private', messageId, seq, receivedAt, receivedAtMono, gatewaySeq: seq,
                 peerName: displayName || undefined,
                 peerType: peerIdentity.type,
                 encrypted: msgEncrypted,
@@ -1860,6 +1924,7 @@ export class AUNChannel {
             return;
         const msg = data;
         const receivedAt = Date.now();
+        const receivedAtMono = performance.now();
         // Deduplicate at the adapter boundary, before mention/slash routing.
         const messageId = typeof msg.message_id === 'string' ? msg.message_id : '';
         const seq = typeof msg.seq === 'number' ? msg.seq : undefined;
@@ -1960,7 +2025,7 @@ export class AUNChannel {
                 this.dispatchMessage({
                     channelId: groupId, userId: senderAid,
                     text: JSON.stringify(payload),
-                    chatType: 'group', messageId, seq, receivedAt, gatewaySeq: seq, groupId,
+                    chatType: 'group', messageId, seq, receivedAt, receivedAtMono, gatewaySeq: seq, groupId,
                     encrypted: menuEncrypted,
                     protectedHeaders,
                     mentions: payloadMentionEntries,
@@ -2199,6 +2264,7 @@ export class AUNChannel {
             protectedHeaders: event.protectedHeaders,
             messageId: event.messageId,
             receivedAt: event.receivedAt,
+            receivedAtMono: event.receivedAtMono,
             gatewaySeq: event.gatewaySeq ?? event.seq,
             causation: event.causation,
             threadId: event.threadId,
@@ -2496,21 +2562,47 @@ export class AUNChannel {
             logger.warn(`${this.logPrefix()} Server-initiated disconnect: code=${code} reason=${reason} detail=${JSON.stringify(detail)}`);
         }
     }
-    handleConnectionState(data) {
+    handleConnectionState(data, source = 'state_change') {
         if (!data || typeof data !== 'object')
             return;
-        const state = data.state ?? '';
+        const rawState = String(data.state ?? '');
+        const statePayload = data;
+        const state = rawState === 'ready' ? 'connected'
+            : rawState === 'standby' || rawState === 'authenticated' || rawState === 'connecting' || rawState === 'retry_backoff'
+                ? 'reconnecting'
+                : rawState === 'connection_failed' || rawState === 'no_identity'
+                    ? 'terminal_failed'
+                    : rawState === 'closed'
+                        ? 'disconnected'
+                        : rawState;
+        const signature = [
+            rawState,
+            String(statePayload.attempt ?? ''),
+            String(statePayload.reason ?? ''),
+            String(statePayload.code ?? ''),
+            String(statePayload.error ?? ''),
+            String(statePayload.gateway ?? ''),
+        ].join('|');
+        this.aidState.lastTransportEventAt = Date.now();
+        if (signature === this.lastConnectionStateSignature)
+            return;
+        this.lastConnectionStateSignature = signature;
+        if (this.intentionalDisconnect && state === 'disconnected') {
+            this.connected = false;
+            this.connectedAt = 0;
+            return;
+        }
         if (state === 'connected') {
             this.connected = true;
             this.connectedAt = Date.now();
             this.lastReconnectLogTime = 0;
             this.lastReconnectLogAttempt = 0;
-            // connection.state 事件 payload 带实际连接的 gateway，更新本地缓存
+            // SDK 状态事件 payload 带实际连接的 gateway，更新本地缓存
             const evtGateway = data.gateway;
             if (typeof evtGateway === 'string' && evtGateway)
                 this.gatewayUrl = evtGateway;
             this.setAidStatus('connected', { lastConnectedAt: Date.now(), lastError: undefined, gatewayUrl: this.gatewayUrl });
-            this.trace('IN', 'connection.state', data);
+            this.trace('IN', source, data);
             logger.info(`${this.logPrefix()} Connected`);
             // 不在这里清 flapCount —— 短命连接一上来就会触发本分支，
             // 必须等 disconnected 时根据 lifetime 决定是否清零
@@ -2519,7 +2611,11 @@ export class AUNChannel {
         else if (state === 'disconnected' || state === 'reconnecting') {
             const wasConnected = this.connected;
             this.connected = false;
-            this.aidState.reconnectCount++;
+            // The nine-state SDK emits standby -> retry_backoff -> reconnecting for
+            // one reconnect cycle. Count the connected-to-down edge once instead of
+            // inflating the metric for every intermediate state.
+            if (wasConnected)
+                this.aidState.reconnectCount++;
             this.aidState.lastAttemptAt = Date.now();
             this.setAidStatus('reconnecting');
             // Flap 检测：仅在从 connected 状态过渡时统计
@@ -2545,7 +2641,7 @@ export class AUNChannel {
                 }
             }
             if (state === 'disconnected') {
-                this.trace('IN', 'connection.state', data);
+                this.trace('IN', source, data);
                 logger.warn(`${this.logPrefix()} Disconnected: ${data.error ?? 'unknown'}`);
             }
             else {
@@ -2561,14 +2657,14 @@ export class AUNChannel {
                     logger.info(`${this.logPrefix()} SDK reconnecting (attempt ${attempt}${suffix})`);
                     this.lastReconnectLogTime = now;
                     this.lastReconnectLogAttempt = attempt;
-                    this.trace('IN', 'connection.state', data);
+                    this.trace('IN', source, data);
                 }
             }
         }
         else if (state === 'terminal_failed') {
             this.connected = false;
             this.connectedAt = 0;
-            this.trace('IN', 'connection.state', data);
+            this.trace('IN', source, data);
             const d = data;
             const reason = d.reason ?? '';
             const error = d.error ?? 'unknown';
@@ -4423,6 +4519,7 @@ export class AUNChannel {
     async drainOutbox() {
         if (!this.connected || !this.client)
             return;
+        await this.migrateLegacyBootstrapRoutes();
         if (!outbox.hasPending(this.config.aid))
             return;
         logger.info(`${this.logPrefix()} Draining outbox...`);
@@ -4450,6 +4547,32 @@ export class AUNChannel {
             logger.info(`${this.logPrefix()} Outbox drained: sent=${result.sent} expired=${result.expired} failed=${result.failed}`);
         }
     }
+    /** Repair pre-route bootstrap entries once the AUN group endpoint is available. */
+    async migrateLegacyBootstrapRoutes() {
+        const operationIds = new Set([
+            bootstrapInitialMessageOperationId(this.config.aid),
+            postBootstrapWelcomeOperationId(this.config.aid),
+        ]);
+        const entries = outbox.load(this.config.aid).filter(entry => typeof entry.dedupeKey === 'string'
+            && operationIds.has(entry.dedupeKey)
+            && entry.channelId
+            && entry.delivery?.chatType === 'private');
+        for (const entry of entries) {
+            const group = await this.isGroup(entry.channelId);
+            if (group !== true)
+                continue;
+            const delivery = { chatType: 'group', groupId: entry.channelId };
+            if (!outbox.replace(this.config.aid, {
+                ...entry,
+                delivery,
+                context: entry.context
+                    ? { ...entry.context, delivery }
+                    : entry.context,
+            }))
+                continue;
+            logger.warn(`${this.logPrefix()} Migrated legacy bootstrap outbox route to group.send: entry=${entry.id} group=${entry.channelId}`);
+        }
+    }
     acknowledge(messageId) {
         // Gateway auto-delivery-ack is sufficient; skip explicit message.ack RPC
         // to avoid duplicate "已送达" at the sender CLI
@@ -4622,6 +4745,8 @@ export class AUNChannel {
             aid: this._aid,
             flapCount: this.flapCount,
             plaintextRecv: this.plaintextRecv,
+            lastTransportEventAt: this.aidState.lastTransportEventAt,
+            lastInboundAt: this.aidState.lastInboundAt,
         };
     }
     /** 读取本地 agent.md 中的 name（用于身份上下文展示），若本地不存在则尝试远程拉取 */
@@ -4714,6 +4839,18 @@ export class AUNChannel {
             return undefined; // 不写缓存，下次仍可重试
         }
     }
+    /** Query the authoritative group endpoint without guessing from an AID string. */
+    async isGroup(groupId) {
+        if (!groupId || !this.client)
+            return undefined;
+        try {
+            const result = await this.callAndTrace('group.get_info', { group_id: groupId });
+            return !!(result?.group || result?.group_id || result?.groupId);
+        }
+        catch {
+            return undefined;
+        }
+    }
     /** 统计关系键继续使用群 ID，仅为智能体预览补充可读群名。 */
     async groupStatsContext(groupId) {
         return {
@@ -4996,6 +5133,7 @@ export class AUNChannelPlugin {
             uploadAgentMd: (content) => channel.uploadAgentMd(content),
             downloadAgentMd: (aid) => channel.downloadAgentMd(aid),
             getGroupName: (groupId) => channel.getGroupName(groupId),
+            isGroup: (groupId) => channel.isGroup(groupId),
             getGroupMemberRole: (groupId, aid) => channel.getGroupMemberRole(groupId, aid),
             _selfAid: () => channel.getStatus().aid,
             _selfName: () => channel.getSelfName(),

package/dist/cli/agent-command.js

@@ -26,6 +26,15 @@ export async function cmdAgent(args) {
     const sub = args[0];
     const formatJson = getArgValue(args, '--format') === 'json';
     const commands = new Set(['list', 'show', 'new', 'enable', 'disable', 'get', 'set', 'rename', 'ready', 'reload', 'delete']);
+    if (sub === 'create') {
+        const error = { ok: false, code: 'INVALID_COMMAND', error: '`ec agent create` is not a command; use `ec agent new`.' };
+        if (formatJson)
+            console.log(JSON.stringify(error));
+        else
+            console.error(`❌ [${error.code}] ${error.error}`);
+        process.exitCode = 1;
+        return;
+    }
     if (!sub || isHelpFlag(sub) || (wantsHelp(args) && !commands.has(sub))) {
         console.log(`用法: ec agent <command>
 
@@ -59,14 +68,66 @@ Options:
   ec agent delete mybot.agentid.pub --purge`);
         return;
     }
+    const { agentList, agentShow, agentCreateInteractive, agentCreateNonInteractive, agentReload, agentEnable, agentDisable, agentGet, agentSet, agentRename, agentDelete, agentReady, runManagedAgentOperation, } = await import('./agent.js');
     if (process.env.EVOLCORE_SESSION_ID && !wantsHelp(args) && !new Set(['get', 'set', 'ready']).has(sub)) {
-        if (formatJson)
-            console.log(JSON.stringify({ ok: false, code: 'NOT_ALLOWED', error: `agent ${sub} is not available in a managed task` }));
-        else
-            console.error(`❌ [NOT_ALLOWED] agent ${sub} is not available in a managed task`);
-        process.exit(1);
+        if (sub === 'new' && !args.includes('--non-interactive')) {
+            const error = {
+                ok: false,
+                code: 'MANAGED_NON_INTERACTIVE_REQUIRED',
+                error: 'Managed Agent tasks must use `ec agent new <aid> --non-interactive`; interactive creation is unavailable here. Use ECWeb for interactive setup.',
+                data: { reasonCode: 'MANAGED_NON_INTERACTIVE_REQUIRED', nextStep: 'Use `ec agent new <aid> --non-interactive` or ECWeb.' },
+            };
+            if (formatJson)
+                console.log(JSON.stringify(error));
+            else
+                console.error(`❌ [${error.code}] ${error.error}`);
+            process.exitCode = 1;
+            return;
+        }
+        const managedArgs = commands.has(sub) ? args : ['show', ...args];
+        const result = await runManagedAgentOperation(managedArgs);
+        if (!result.ok) {
+            if (formatJson)
+                console.log(JSON.stringify(result));
+            else {
+                console.error(`❌ [${result.code || 'NOT_ALLOWED'}] ${result.error}`);
+                if (result.data?.nextStep)
+                    console.error(`Next step: ${result.data.nextStep}`);
+            }
+            process.exitCode = 1;
+            return;
+        }
+        if (formatJson) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        if (sub === 'show' || (!sub.startsWith('new') && result.identity && result.config)) {
+            printAgentShowHuman(result);
+        }
+        else if (sub === 'list' && Array.isArray(result.agents)) {
+            if (result.agents.length === 0)
+                console.log('No agents configured.');
+            else
+                for (const agent of result.agents)
+                    console.log(`${agent.name || agent.aid}\t${agent.status || 'stopped'}\t${agent.aid}`);
+        }
+        else if (result.accepted) {
+            console.log(`✓ Agent "${result.aid}" creation accepted`);
+        }
+        else if (result.aid && result.enabled !== undefined) {
+            console.log(`✓ ${result.aid} ${result.enabled ? 'enabled' : 'disabled'}${result.reloaded ? ' (hot-reloaded)' : ''}`);
+        }
+        else if (result.aid && result.purged !== undefined) {
+            console.log(`✓ ${result.aid} deleted${result.purged ? ' (purged)' : ''}`);
+        }
+        else if (result.aid && result.reloaded) {
+            console.log(`✓ Agent "${result.aid}" reloaded`);
+        }
+        else {
+            console.log(JSON.stringify(result));
+        }
+        return;
     }
-    const { agentList, agentShow, agentCreateInteractive, agentCreateNonInteractive, agentReload, agentEnable, agentDisable, agentGet, agentSet, agentRename, agentDelete, agentReady, } = await import('./agent.js');
     // --- list ---
     if (sub === 'list') {
         if (wantsHelp(args)) {

package/dist/cli/agent.js

@@ -26,6 +26,32 @@ function withStaticOwner(config, owner) {
         return config;
     return { ...config, owners: [...owners, value] };
 }
+/** Route agent lifecycle commands from a managed task through daemon IPC. */
+export async function runManagedAgentOperation(argv) {
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    if (!sessionId)
+        return { ok: false, code: 'MANAGED_ONLY', error: 'agent operation is not running in a managed task' };
+    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    if (!delegationToken) {
+        return { ok: false, code: 'DELEGATION_REQUIRED', error: `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task` };
+    }
+    try {
+        const response = await ipcQuery(resolvePaths().socket, {
+            type: 'agent.op',
+            argv: ['agent', ...argv],
+            sessionId,
+            delegationToken,
+        }, 60_000);
+        if (!response)
+            return { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the evolcore daemon' };
+        if (!response.ok)
+            return { ok: false, code: response.code, error: response.error || 'agent operation failed', ...(response.data ? { data: response.data } : {}) };
+        return response.result ?? { ok: true, ...(response.data ?? {}) };
+    }
+    catch (error) {
+        return { ok: false, code: 'DAEMON_UNAVAILABLE', error: error instanceof Error ? error.message : String(error) };
+    }
+}
 // ==================== Helpers ====================
 const BASEAGENT_CANDIDATES = ['claude', 'codex', 'gemini', 'ecagent'];
 const AUTO_BASEAGENT_CANDIDATES = ['claude', 'codex', 'gemini'];

package/dist/cli/command-log.js

@@ -18,14 +18,33 @@ import path from 'path';
 import { agentLogsDir, resolvePaths } from '../paths.js';
 import { getArgValue } from './help.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
+/** Keep path derivation from accepting arbitrary option values. */
+function isSafeAid(value) {
+    if (!value)
+        return false;
+    const labels = value.split('.');
+    return labels.length >= 3
+        && labels.every(label => /^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?$/.test(label));
+}
 /**
  * 同步解析当前执行者 self-AID（零延迟，绝不走 IPC）。
- * 优先级：--as <aid> > EVOLCORE_SELF_AID > runtime context 里的 selfAid。
+ *
+ * `msg/group send` 的第二个选项 `--as` 是附件类型（image/video/voice/file），
+ * 不是操作者 AID；这两类命令的发送方位于固定的第三个位置参数。其它
+ * 支持 `--as <aid>` 的命令继续使用显式参数优先。
  */
 function resolveSelfAid(args) {
-    return (getArgValue(args, '--as') ||
-        process.env.EVOLCORE_SELF_AID ||
-        readTaskRuntimeContextFromEnv()?.selfAid);
+    const command = args[0];
+    const subcommand = args[1];
+    const positionalAid = (command === 'msg' || command === 'group')
+        && subcommand === 'send'
+        ? args[2]
+        : undefined;
+    const explicitAid = (command === 'msg' || command === 'group') && subcommand === 'send'
+        ? undefined
+        : getArgValue(args, '--as');
+    const runtimeAid = process.env.EVOLCORE_SELF_AID || readTaskRuntimeContextFromEnv()?.selfAid;
+    return [positionalAid, explicitAid, runtimeAid].find(isSafeAid);
 }
 /**
  * 记录一条命令执行。同步、best-effort。