evolcore 0.0.17 → 0.0.18

package/dist/core/command/slash-handler.js

@@ -7,18 +7,18 @@ import { shouldSuppressRealRestart } from '../../utils/restart-safety.js';
 import crypto from 'crypto';
 import path from 'path';
 import fs from 'fs';
-import os from 'os';
 import { checkLatestVersion, getLocalVersion, isLinkedInstall, compareVersions } from '../../utils/npm-ops.js';
 import { loadDaemonConfig } from '../../config-store.js';
 import { read as cfgRead, resolveEffective, routeFieldPath, write as cfgWrite, } from '../../config/config-manager.js';
 import { execAgentAction } from './agent-control.js';
 import { authorizeOperation, buildAuthSubject } from '../auth/auth-gateway.js';
+import { authorizationNextStep, formatAuthorizationDenial } from '../auth/authorization-denial.js';
 import { resolvePermissionMode, writeScope } from '../model/config-scope.js';
 import { formatPeerKey } from '../relation/peer-identity.js';
 import { modelMatches } from '../model/model-catalog.js';
 import { formatModelCheck, runModelCheck } from '../model/model-diagnostics.js';
 import { filterModelsForRole, validateModelSelectionForRole } from '../model/model-permission.js';
-import { displaySessionTitle, isSyntheticCliPrompt } from '../session/session-title.js';
+import { displaySessionTitle } from '../session/session-title.js';
 import { chatmodeFieldForPeer, resolveChatModeForField } from '../message/peer-mode.js';
 import { normalizePermissionMode as normalizePermissionModeContract, PUBLIC_PERMISSION_MODES } from '../permission/mode.js';
 import { isManagementRole } from '../../config/builtin-roles.js';
@@ -157,7 +157,7 @@ async function authorizeSlashIntent(params) {
     const channelType = channel.split('#')[0];
     const peerKey = channelType && peerKeyId ? formatPeerKey(channelType, peerKeyId) : undefined;
     const subject = params.subject
-        ? { ...params.subject, role: identity.role, identity }
+        ? { ...params.subject, identity }
         : buildAuthSubject({
             selfAid,
             actorId: userId,
@@ -175,7 +175,13 @@ async function authorizeSlashIntent(params) {
     }
     const decision = await authorizeOperation({ source: 'slash', intent, subject });
     if (!decision.allow) {
-        return { kind: 'command.error', text: decision.reason };
+        const reasonCode = decision.command?.reasonCode;
+        return {
+            kind: 'command.error',
+            text: formatAuthorizationDenial(decision.reason, reasonCode),
+            reason: decision.code,
+            ...(reasonCode ? { reasonCode, nextStep: authorizationNextStep(reasonCode) } : {}),
+        };
     }
     return null;
 }
@@ -471,6 +477,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         activeAgent: getActiveAgentIfAvailable(),
         sessionManager: this.sessionManager,
         messageQueue: this.messageQueue,
+        isSessionPaused: sessionId => this.processor?.isPauseRequested?.(sessionId) ?? false,
         getAgentForSession: session => this.getAgent(channel, session.baseagent),
     });
     if (idleGuard)
@@ -481,6 +488,17 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     const isCmd = isRecognizedSlashCommand(normalizedContent);
     if (!isCmd)
         return undefined;
+    const interruptPausedSessionBeforeReplacement = async (commandSession) => {
+        if (commandSession && (this.processor?.isPauseRequested?.(commandSession.id) ?? false)) {
+            this.eventBus.publish({
+                type: 'task:interrupted',
+                sessionId: commandSession.id,
+                reason: 'stop',
+                agentName: this.agentRegistry?.resolveByChannel(channel)?.name ?? '<unknown>',
+            });
+            await this.processor.interruptSession(commandSession.id, 'stop');
+        }
+    };
     // /help 命令不需要会话
     if (normalizedContent === '/help') {
         const canReadModel = canAccessSlashOperation('model.current', 'relation')
@@ -541,6 +559,9 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 '  /s [cli|名称|序号|uuid] - 列出或切换会话（cli 查看未导入的 CLI 会话）',
                 '  /name <新名称> - 重命名当前会话',
                 '  /del <名称> - 删除指定会话（仅解绑，不删除文件）',
+                '  /pause - 在下一次工具调用前暂停当前任务',
+                '  /resume - 继续已暂停的当前任务',
+                '  /stop - 中断当前任务',
                 '  /status - 显示会话状态',
                 '  /check - 检查 EvolAgent 实例健康',
                 ...((canReadModel || canUseModel || canSetEffort) ? [
@@ -587,6 +608,9 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             '  /fork [名称] - 分支当前会话（从当前对话点创建分支）',
             '  /rewind [N] [chat|file|all] - 查看历史/撤销指定轮次（别名: /rw）',
             '  /compact - 压缩会话上下文（减少 token 用量）',
+            '  /pause - 在下一次工具调用前暂停当前任务',
+            '  /resume - 继续已暂停的当前任务',
+            '  /stop - 中断当前任务',
             '',
             '🤖 Agent 与模型：',
             '  /baseagent [name] - 查看或切换 Agent 后端（别名: /base）',
@@ -605,6 +629,8 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             '',
             '🛠️ 运维：',
             '  /status - 显示会话状态',
+            '  /pause - 在下一次工具调用前暂停当前任务',
+            '  /resume - 继续已暂停的当前任务',
             '  /stop - 中断当前任务',
             '  /check - 检查 EvolAgent 实例健康',
             ...(isOwner ? [
@@ -670,6 +696,8 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             cmds.push({ command: '/perm', args: 'allow|always|deny', description: '审批权限请求', category: '权限管理', roles: [identity.role] });
         // 运维
         cmds.push({ command: '/status', description: '显示会话状态', category: '运维', roles: ['visitor', 'member', 'admin', 'owner'] });
+        cmds.push({ command: '/pause', description: '在下一次工具调用前暂停当前任务', category: '运维', roles: ['admin', 'owner'] });
+        cmds.push({ command: '/resume', description: '继续已暂停的当前任务', category: '运维', roles: ['admin', 'owner'] });
         cmds.push({ command: '/stop', description: '中断当前任务', category: '运维', roles: ['admin', 'owner'] });
         cmds.push({ command: '/check', description: '检查 EvolAgent 实例健康', category: '运维', roles: ['visitor', 'member', 'admin', 'owner'] });
         if (isAdmin) {
@@ -851,92 +879,36 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             return { kind: 'command.result', text: fb.result ?? '✓ 已回答' };
         return { kind: 'command.error', text: '❌ 当前没有待回答的问题' };
     }
-    // /resume 命令：返回当前项目的 Claude 会话记录（JSON）
-    if (normalizedContent === '/resume' || normalizedContent.startsWith('/resume ')) {
+    // /pause and /resume control the current session's next-tool gate.
+    if (normalizedContent.startsWith('/pause ')) {
+        return { kind: 'command.error', text: '用法: /pause' };
+    }
+    if (normalizedContent === '/pause') {
+        const pauseSession = await getExistingSessionForCommand();
+        if (!pauseSession)
+            return { kind: 'command.result', text: '当前没有活跃会话' };
+        const pauseAgent = this.getAgent(channel, pauseSession.baseagent);
+        const hasActiveTask = pauseAgent.hasActiveStream(pauseSession.id)
+            || this.messageQueue.isProcessing(pauseSession.id);
+        if (!hasActiveTask)
+            return { kind: 'command.result', text: '当前没有正在处理的任务' };
+        const requested = this.processor.pauseSession(pauseSession.id);
+        return {
+            kind: 'command.result',
+            text: requested
+                ? '✓ 已请求暂停，任务将在下一次工具调用前暂停'
+                : '当前任务已请求暂停或正在暂停',
+        };
+    }
+    if (normalizedContent.startsWith('/resume ')) {
+        return { kind: 'command.error', text: '用法: /resume' };
+    }
+    if (normalizedContent === '/resume') {
         const resumeSession = await getExistingSessionForCommand();
         if (!resumeSession)
             return { kind: 'command.result', text: '当前没有活跃会话' };
-        try {
-            const { encodePath } = await import('../../utils/cross-platform.js');
-            const homeDir = os.homedir();
-            const encodedPath = encodePath(resumeSession.projectPath);
-            const projectDir = path.join(homeDir, '.claude', 'projects', encodedPath);
-            if (!fs.existsSync(projectDir)) {
-                return { kind: 'command.error', text: '❌ 未找到 Claude 会话记录目录' };
-            }
-            const jsonlFiles = fs.readdirSync(projectDir).filter(f => f.endsWith('.jsonl'));
-            if (jsonlFiles.length === 0) {
-                return { kind: 'command.error', text: '❌ 当前项目没有 Claude 会话记录' };
-            }
-            const sessions = [];
-            for (const file of jsonlFiles) {
-                const filePath = path.join(projectDir, file);
-                const sessionId = file.replace('.jsonl', '');
-                let lastTimestamp = '';
-                let firstUserMessage = '';
-                let model = '';
-                let branch = '';
-                let turns = 0;
-                try {
-                    const content = fs.readFileSync(filePath, 'utf-8');
-                    const lines = content.split('\n').filter(l => l.trim());
-                    for (const line of lines) {
-                        const event = JSON.parse(line);
-                        if (event.timestamp && event.timestamp > lastTimestamp) {
-                            lastTimestamp = event.timestamp;
-                        }
-                        if (event.gitBranch && !branch) {
-                            branch = event.gitBranch;
-                        }
-                        if (event.type === 'user' && event.message?.role === 'user') {
-                            const msgContent = event.message.content;
-                            const isToolResult = Array.isArray(msgContent) && msgContent.every((c) => c.type === 'tool_result');
-                            if (!isToolResult) {
-                                turns++;
-                                if (!firstUserMessage) {
-                                    let candidate = '';
-                                    if (typeof msgContent === 'string') {
-                                        candidate = msgContent;
-                                    }
-                                    else if (Array.isArray(msgContent)) {
-                                        const textBlock = msgContent.find((c) => c.type === 'text');
-                                        if (textBlock?.text) {
-                                            candidate = textBlock.text;
-                                        }
-                                    }
-                                    // 跳过 Claude Code 注入的脚手架 prompt，取第一条真人消息
-                                    if (candidate && !isSyntheticCliPrompt(candidate, 'claude')) {
-                                        firstUserMessage = candidate.slice(0, 100);
-                                    }
-                                }
-                            }
-                        }
-                        if (event.type === 'assistant' && event.message?.model && !model) {
-                            model = event.message.model;
-                        }
-                    }
-                }
-                catch {
-                    continue;
-                }
-                if (!lastTimestamp)
-                    continue;
-                sessions.push({
-                    sessionId,
-                    lastMessageTime: lastTimestamp,
-                    firstUserMessage: firstUserMessage || '(无消息)',
-                    model: model || 'unknown',
-                    turns,
-                    branch: branch || 'unknown',
-                });
-            }
-            sessions.sort((a, b) => b.lastMessageTime.localeCompare(a.lastMessageTime));
-            return { kind: 'command.result', text: JSON.stringify(sessions, null, 2) };
-        }
-        catch (error) {
-            logger.error('[CommandHandler] /resume failed:', error);
-            return { kind: 'command.error', text: `❌ 读取会话记录失败: ${error instanceof Error ? error.message : '未知错误'}` };
-        }
+        const resumed = this.processor.resumeSession(resumeSession.id);
+        return { kind: 'command.result', text: resumed ? '✓ 已继续当前任务' : '当前任务未处于暂停状态' };
     }
     // /baseagent 命令：查看或切换 Agent 后端
     if (normalizedContent === '/baseagent' || normalizedContent.startsWith('/baseagent ')) {
@@ -988,6 +960,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         if (!owningAgent) {
             return { kind: 'command.error', text: '❌ 当前 channel 无绑定 agent，无法设置 active_baseagent' };
         }
+        await interruptPausedSessionBeforeReplacement(await getExistingSessionForCommand());
         const previousDefaultBaseagent = owningAgent.baseagent || this.parseDefaultBaseagent();
         owningAgent.setActiveBaseagent(args);
         this.eventBus.publish({
@@ -1646,11 +1619,6 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     if (normalizedContent === '/reload' || normalizedContent.startsWith('/reload ')) {
         const aidArg = normalizedContent.slice('/reload'.length).trim() || undefined;
         const selfAid = this.agentRegistry?.resolveByChannel(channel)?.aid;
-        // agent channel 的 owner/admin 不能跨 agent reload；先返回领域内错误，避免落到
-        // 底层 daemon-owner 约束的英文 reason。
-        if (!isDaemonOwner && aidArg && aidArg !== selfAid) {
-            return { kind: 'command.error', text: '❌ 无权限：跨 agent reload 仅限 daemon owner 使用' };
-        }
         const targetAid = aidArg ?? selfAid;
         if (!targetAid) {
             return { kind: 'command.error', text: '❌ 无法确定目标 agent，请指定 aid：/reload <aid>' };
@@ -1664,7 +1632,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 args: { ...(aidArg ? { aid: aidArg } : {}), ...(selfAid ? { self: selfAid } : {}) },
                 dangerous: true,
             },
-            identity: isDaemonOwner ? { ...identity, role: 'owner' } : identity,
+            identity,
             session: activeSession,
             channel,
             channelId,
@@ -2010,12 +1978,16 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         return { kind: 'command.result', text: `✅ @ 处理模式已切换: ${currentMode ?? '未设置'} → ${arg}` };
     }
     // /stop 命令：中断当前任务
+    if (normalizedContent.startsWith('/stop ')) {
+        return { kind: 'command.error', text: '用法: /stop' };
+    }
     if (normalizedContent === '/stop') {
         const stopSession = await getExistingSessionForCommand();
         if (!stopSession)
             return { kind: 'command.result', text: '当前没有正在处理的任务' };
         const stopAgent = this.getAgent(channel, stopSession.baseagent);
         const sessionKey = stopSession.id;
+        this.processor?.clearPauseSession?.(sessionKey);
         const queueLength = this.messageQueue.getQueueLength(sessionKey);
         const hasActive = stopAgent.hasActiveStream(sessionKey);
         const isProcessing = this.messageQueue.isProcessing(sessionKey);
@@ -2049,6 +2021,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         if (!session.agentSessionId) {
             return { kind: 'command.error', text: '❌ 当前会话没有历史记录，无需压缩' };
         }
+        await interruptPausedSessionBeforeReplacement(session);
         const projectPath = path.isAbsolute(session.projectPath)
             ? session.projectPath
             : path.resolve(process.cwd(), session.projectPath);
@@ -2168,6 +2141,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 return { kind: 'command.error', text: `❌ 会话名称 "${sessionName}" 已存在，请使用其他名称` };
             }
         }
+        await interruptPausedSessionBeforeReplacement(session || activeSession);
         const projectPath = this.getEffectiveDefaultPath(channel);
         if (sendMessage && session) {
             await sendMessage(channelId, `⏳ 正在创建新会话${sessionName ? `: ${sessionName}` : ''}...`, this.getReplyContext(session));
@@ -2291,7 +2265,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 groups.set(type, []);
             groups.get(type).push({ name, status });
         }
-        if (!isAdmin) {
+        if (!isAdmin && !isDaemonOwner) {
             // visitor/member: 仅显示实例通道摘要
             const total = [...groups.values()].flat().length;
             const healthy = [...groups.values()].flat().filter(i => i.status.includes('✓')).length;
@@ -2443,9 +2417,6 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     if (normalizedContent === '/restart') {
         // 进程级操作：必须是 daemon owner（daemon.json.owners），与 menu 协议 /system restart 一致。
         // agent-channel 的 owner/admin 角色不足以重启整个 daemon。
-        if (!isDaemonOwner) {
-            return { kind: 'command.error', text: '❌ 无权限：服务重启仅限 daemon owner 使用' };
-        }
         const restartSelfAid = this.agentRegistry?.resolveByChannel(channel)?.aid;
         const authDenied = await authorizeIntent({
             intent: {
@@ -2455,7 +2426,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 args: {},
                 dangerous: true,
             },
-            identity: { ...identity, role: 'owner' },
+            identity,
             session: activeSession,
             channel,
             channelId,
@@ -2624,7 +2595,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 args: {},
                 dangerous: true,
             },
-            identity: isDaemonOwner ? { ...identity, role: 'owner' } : identity,
+            identity,
             session: activeSession,
             channel,
             channelId,
@@ -3008,6 +2979,10 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                     : await this.sessionManager.listImportableCliSessions(projectPath, currentBaseagent);
                 const cliSession = cliSessions.find((c) => c.uuid.startsWith(sessionName));
                 if (cliSession) {
+                    // Importing a CLI session replaces the active session. Cancel any
+                    // pending tool-boundary pause only after the target has been
+                    // validated, so an invalid UUID cannot interrupt the current task.
+                    await interruptPausedSessionBeforeReplacement(session || activeSession);
                     const imported = await this.sessionManager.importCliSession(channel, channelId, projectPath, cliSession.uuid, currentBaseagent, selfAID ?? session?.selfAID);
                     this.eventBus.publish({ type: 'session:imported', sessionId: imported.id, agentSessionId: cliSession.uuid, projectPath });
                     const projectName = this.getProjectName(projectPath);
@@ -3038,6 +3013,9 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         if (!session.threadId && targetSession.threadId) {
             return { kind: 'command.error', text: `❌ 无法从主会话切换到话题会话\n话题会话仅在对应话题内可用` };
         }
+        await interruptPausedSessionBeforeReplacement(session);
+        this.processor?.clearPauseSession?.(session.id);
+        this.processor?.clearPauseSession?.(targetSession.id);
         const switched = await this.sessionManager.switchToSession(channel, channelId, targetSession.id);
         if (!switched) {
             return { kind: 'command.error', text: `❌ 切换会话失败` };
@@ -3125,6 +3103,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         }
         this.eventBus.publish({ type: 'session:deleted', sessionId: targetSession.id });
         const targetAgent = this.getAgent(channel, targetSession.baseagent);
+        this.processor?.clearPauseSession?.(targetSession.id);
         await targetAgent.closeSession(targetSession.id);
         return { kind: 'command.result', text: `✓ 已删除会话: ${displaySessionTitle(targetSession.name, sessionName)}\n会话文件已保留，可通过 CLI 访问` };
     }
@@ -3141,6 +3120,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         if (!forkAgent.capabilities?.fork) {
             return { kind: 'command.error', text: `❌ 当前 Agent (${forkAgent.name}) 不支持 /fork\n\n可使用 /new 创建新会话替代` };
         }
+        await interruptPausedSessionBeforeReplacement(session);
         try {
             const forkedSessionId = await forkAgent.forkSession(session.agentSessionId, session.projectPath, forkName);
             const newSession = await this.sessionManager.createForkedSession(session, forkedSessionId, forkName);
@@ -3195,6 +3175,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         if (!['chat', 'file', 'all'].includes(mode)) {
             return { kind: 'command.error', text: `❌ 无效模式 "${mode}"，可选：chat | file | all` };
         }
+        await interruptPausedSessionBeforeReplacement(session);
         return { kind: 'command.result', text: await this.handleRewind(session, rewindAgent, turnNum, mode) };
     }
     // /repair 命令：检查并修复会话文件
@@ -3204,6 +3185,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             return { kind: 'command.result', text: '当前没有活跃会话' };
         const repairAgent = this.getAgent(channel, repairSession.baseagent);
         const { checkSessionFile, backupSessionFile } = await import('../session/session-file-health.js');
+        await interruptPausedSessionBeforeReplacement(repairSession);
         try {
             if (!repairSession.agentSessionId) {
                 await this.sessionManager.resetHealthStatus(repairSession.id);

package/dist/core/event-catalog.js

@@ -313,10 +313,16 @@ const CATALOG = [
             { path: 'sessionId', type: 'string' },
             { path: 'toolName', type: 'string' },
             { path: 'input', type: 'object' },
+            { path: 'eventKey', type: 'string' },
+            { path: 'eventPhase', type: 'string' },
             { path: 'callId', type: 'string', optional: true },
             { path: 'correlationId', type: 'string', optional: true },
             { path: 'agentAid', type: 'string', optional: true },
             { path: 'permissionMode', type: 'string', optional: true },
+            { path: 'decision', type: 'string' },
+            { path: 'decisionSource', type: 'string' },
+            { path: 'executed', type: 'boolean' },
+            { path: 'executionState', type: 'string' },
             { path: 'timestamp', type: 'number', optional: true },
         ],
     },
@@ -328,6 +334,8 @@ const CATALOG = [
         fields: [
             { path: 'sessionId', type: 'string' },
             { path: 'toolName', type: 'string' },
+            { path: 'eventKey', type: 'string' },
+            { path: 'eventPhase', type: 'string' },
             { path: 'isError', type: 'boolean', optional: true },
             { path: 'errorCode', type: 'string', optional: true },
             { path: 'agentName', type: 'string', optional: true },
@@ -335,6 +343,10 @@ const CATALOG = [
             { path: 'correlationId', type: 'string', optional: true },
             { path: 'agentAid', type: 'string', optional: true },
             { path: 'permissionMode', type: 'string', optional: true },
+            { path: 'decision', type: 'string' },
+            { path: 'decisionSource', type: 'string' },
+            { path: 'executed', type: 'boolean' },
+            { path: 'executionState', type: 'string' },
             { path: 'timestamp', type: 'number', optional: true },
         ],
     },
@@ -846,3 +858,9 @@ export function getEventCatalog(opts = {}) {
     const namespaces = [...new Set(events.map(entry => entry.namespace))].sort();
     return { namespaces, events };
 }
+/** Whether an event Trigger pattern can subscribe to daemon-internal events. */
+export function eventPatternIncludesInternal(pattern) {
+    return CATALOG.some(entry => entry.internal === true && (pattern === '*'
+        || pattern === entry.type
+        || (pattern.endsWith(':*') && entry.namespace === pattern.slice(0, -2))));
+}

package/dist/core/message/message-bridge.js

@@ -17,7 +17,7 @@ import { handlePendingQQBotContactBindMessage, registerPendingQQBotContactBind }
 import { handlePendingWecomContactBindMessage, registerPendingWecomContactBind } from '../../channels/wecom.js';
 import { handlePendingWechatContactBindMessage, registerPendingWechatContactBind } from '../../channels/wechat.js';
 import { authorizeAccess, buildAuthSubject } from '../auth/auth-gateway.js';
-import { MenuDiagnosticLimiter, MenuRequestDeduper, hasValidMenuId, menuFailure, menuPayloadFingerprint, menuSuccess, normalizeMenuError, parseMenuControl, validateMenuRequest, evaluateEvolMenuVersionGate, evolMenuResponseTransportMetadata, isAunMenuTokenRequired, menuCommandForName, } from '../command/menu-protocol.js';
+import { MenuDiagnosticLimiter, MenuRequestDeduper, hasValidMenuId, menuFailure, menuPayloadFingerprint, menuSuccess, normalizeMenuError, parseMenuControl, validateMenuRequest, evaluateEvolMenuVersionGate, evolMenuResponseTransportMetadata, isAunMenuTokenRequired, menuCommandForName, normalizeMenuResponseTiming, withMenuProcessingTime, logMenuRequestCompleted, logMenuRequestReceived, } from '../command/menu-protocol.js';
 import { resolveExplicitMenuExecutionContext, validateMenuCatalogArgs, validateMenuValueBatchArgs } from '../command/menu-catalog.js';
 import { MenuTokenStore } from '../command/menu-token-store.js';
 import { SessionRenewService } from '../session/session-renew.js';
@@ -691,9 +691,16 @@ export class MessageBridge {
                 // that timestamp through session resolution and queue processing.
                 // The fallback is only for legacy adapters that do not provide it.
                 const receivedAt = msg.receivedAt ?? Date.now();
+                const menuTiming = normalizeMenuResponseTiming(msg);
                 const channelKey = adapter?.channelKey || channelName;
                 const owningAgent = this.agentRegistry?.resolveByChannel(channelKey)
                     ?? this.agentRegistry?.resolveByChannel(channelName);
+                // Agent-owned business controls bypass ResponseEngine entirely, so
+                // expose them only after bootstrap has explicitly reached active.
+                // Missing lifecycle fails closed; control channels without an owning
+                // EvolAgent keep their existing command behavior.
+                const allowsNormalCommandRouting = !owningAgent
+                    || owningAgent.config?.lifecycle === 'active';
                 const parsedChannelKey = tryParseChannelKey(channelKey);
                 const chatType = msg.chatType || 'private';
                 const delivery = chatType === 'group'
@@ -772,14 +779,21 @@ export class MessageBridge {
                     logger.info(`[MessageBridge] Inbound admission denied before business routing: self=${selfAid} actor=${actorId ?? '<none>'} channel=${channelKey} reason=${admissionDecision.reason}`);
                     return;
                 }
-                const menuControl = resolvedChannelType === 'aun'
+                const menuControl = allowsNormalCommandRouting && resolvedChannelType === 'aun'
                     ? parseMenuControl(content)
                     : { isMenu: false };
                 let menuResponseWarning;
                 if (menuControl.isMenu) {
+                    // AUN captures this mark at its adapter boundary. Legacy/test
+                    // adapters fall back to the bridge entry mark captured above.
+                    Object.assign(msg, menuTiming);
                     this.logMenuInbound(channelName, msg, menuControl);
                     if (!hasValidMenuId(menuControl)) {
                         this.logMenuDiagnostic('missing-id', channelName, msg, menuControl);
+                        logMenuRequestCompleted(menuControl.request, undefined, this.menuFlowContext(channelName, msg), {
+                            delivery: 'dropped',
+                            reason: 'missing-id',
+                        });
                         return;
                     }
                     const versionError = evaluateEvolMenuVersionGate({
@@ -916,7 +930,9 @@ export class MessageBridge {
                 // 2. 命令快速路径（去除引用前缀后检查，兼容话题中引用上文的情况）
                 const contentForCmd = content.replace(/^(>[^\n]*\n)+\n?/, '').trim();
                 const cmdContent = contentForCmd || content;
-                const isCmd = msg.source !== 'handoff' && this.cmdHandler.isCommand(cmdContent);
+                const isCmd = allowsNormalCommandRouting
+                    && msg.source !== 'handoff'
+                    && this.cmdHandler.isCommand(cmdContent);
                 if (isCmd) {
                     logger.debug(`[MessageBridge] Command detected: "${cmdContent}", routing to handler`);
                     // 命令也要记录入方向 jsonl（不创建 session，直接用 chatDirPath 计算路径）
@@ -953,11 +969,13 @@ export class MessageBridge {
                         logger.debug(`[MessageBridge] Failed to log inbound command: ${e}`);
                     }
                 }
-                if (msg.source !== 'handoff' && await this.handleCommand(cmdContent, channelName, msg.channelId, (text) => {
-                    const taskId = `cmd-${msg.messageId || Date.now()}`;
-                    logger.channelOut({ channel: channelName, channelId: msg.channelId, taskId, correlationId: taskId, sessionId: msg.replyContext?.sessionId, agentAid: msg.selfAID, payload: { kind: 'command.result', text } });
-                    return sendReply(msg.channelId, text, msg.replyContext);
-                }, msg.peerId, msg.threadId, msg.chatType, msg.source, msg.replyContext, msg.messageId, msg.selfAID, authSubject))
+                if (allowsNormalCommandRouting
+                    && msg.source !== 'handoff'
+                    && await this.handleCommand(cmdContent, channelName, msg.channelId, (text) => {
+                        const taskId = `cmd-${msg.messageId || Date.now()}`;
+                        logger.channelOut({ channel: channelName, channelId: msg.channelId, taskId, correlationId: taskId, sessionId: msg.replyContext?.sessionId, agentAid: msg.selfAID, payload: { kind: 'command.result', text } });
+                        return sendReply(msg.channelId, text, msg.replyContext);
+                    }, msg.peerId, msg.threadId, msg.chatType, msg.source, msg.replyContext, msg.messageId, msg.selfAID, authSubject))
                     return;
                 // 3. session 解析（使用 Channel 层填充的 chatType）
                 if (!(await this.canCreateThreadSession(channelName, msg, chatType))) {
@@ -1408,6 +1426,9 @@ export class MessageBridge {
         }
     }
     async sendMenuResponse(adapter, channel, msg, response) {
+        const request = this.menuRequestForLog(msg, response);
+        const flowContext = this.menuFlowContext(channel, msg);
+        const timedResponse = withMenuProcessingTime(response, msg);
         if (!adapter?.send) {
             this.logMenuDiagnostic('transport-unavailable', channel, msg, {
                 isMenu: true,
@@ -1417,6 +1438,10 @@ export class MessageBridge {
                 id: response.id,
                 name: response.name,
             }, 'TEMPORARILY_UNAVAILABLE');
+            logMenuRequestCompleted(request, timedResponse, flowContext, {
+                delivery: 'dropped',
+                reason: 'transport-unavailable',
+            });
             return;
         }
         const agentName = this.agentRegistry?.resolveByChannel(channel)?.name ?? '<unknown>';
@@ -1429,6 +1454,10 @@ export class MessageBridge {
         };
         if (msg.channelType === 'aun' && !replyContext.delivery) {
             logger.warn(`[MessageBridge] dropping AUN menu response without trusted delivery route: channel=${channel} channelId=${msg.channelId}`);
+            logMenuRequestCompleted(request, timedResponse, flowContext, {
+                delivery: 'dropped',
+                reason: 'missing-delivery-route',
+            });
             return;
         }
         const envelope = buildEnvelope({
@@ -1438,7 +1467,18 @@ export class MessageBridge {
             agentName,
             replyContext,
         });
-        await adapter.send(envelope, { kind: 'custom', channelType: channel, payload: response });
+        try {
+            await adapter.send(envelope, { kind: 'custom', channelType: channel, payload: timedResponse });
+            logMenuRequestCompleted(request, timedResponse, flowContext, { delivery: 'sent' });
+        }
+        catch (error) {
+            logMenuRequestCompleted(request, timedResponse, flowContext, {
+                delivery: 'failed',
+                reason: 'transport-error',
+                transportError: error,
+            });
+            throw error;
+        }
     }
     menuTokenOwnerAid(channel, msg) {
         return msg.selfAID || this.agentRegistry?.resolveByChannel(channel)?.aid;
@@ -1466,6 +1506,7 @@ export class MessageBridge {
         return normalized.length > 0 && normalized.length <= 256 ? normalized : undefined;
     }
     logMenuInbound(channel, msg, parsed) {
+        logMenuRequestReceived(parsed.request, this.menuFlowContext(channel, msg));
         logger.channelIn({
             channel,
             channelId: this.shortHash(msg.channelId),
@@ -1482,6 +1523,21 @@ export class MessageBridge {
             },
         });
     }
+    menuRequestForLog(msg, response) {
+        try {
+            const parsed = JSON.parse(msg.content);
+            if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
+                return parsed;
+        }
+        catch {
+            // Fall through to a minimal correlation record.
+        }
+        return {
+            type: 'menu.unknown',
+            id: response.id,
+            ...(response.name ? { name: response.name } : {}),
+        };
+    }
     logMenuDiagnostic(category, channel, msg, parsed, code) {
         const scope = msg.chatType === 'group' ? (msg.groupId || msg.channelId) : msg.peerId;
         const key = `${category}:${channel}:${this.shortHash(scope)}`;
@@ -1611,6 +1667,13 @@ export class MessageBridge {
      * 撤回消息：先查 debounce 窗口，再查 message queue，最后查正在执行的任务。
      * @returns true 如果找到并取消/中断
      */
+    menuFlowContext(channel, msg) {
+        return {
+            source: 'agent-aun',
+            selfAid: msg.selfAID ?? this.agentRegistry?.resolveByChannel(channel)?.aid,
+            messageId: msg.messageId,
+        };
+    }
     cancel(messageId, selfAID) {
         // 阶段 1: debounce 窗口（尚未入队）
         for (const d of this.debouncers.values()) {

package/dist/core/message/pause-controller.js

@@ -0,0 +1,53 @@
+/** Per-session gate used only at the next tool boundary. */
+export class PauseController {
+    state = 'running';
+    waiters = new Set();
+    requestPause() {
+        if (this.state !== 'running')
+            return false;
+        this.state = 'pause_requested';
+        return true;
+    }
+    isPauseRequested() { return this.state === 'pause_requested'; }
+    isPaused() { return this.state === 'paused'; }
+    waitAtToolBoundary(signal) {
+        if (signal?.aborted)
+            return Promise.resolve('cancelled');
+        if (this.state === 'running')
+            return Promise.resolve('none');
+        this.state = 'paused';
+        return new Promise(resolve => {
+            const waiter = { resolve: () => { }, abort: undefined };
+            const finish = (result) => {
+                this.waiters.delete(waiter);
+                if (waiter.abort)
+                    signal?.removeEventListener('abort', waiter.abort);
+                resolve(result);
+            };
+            waiter.resolve = finish;
+            if (signal) {
+                waiter.abort = () => finish('cancelled');
+                signal.addEventListener('abort', waiter.abort, { once: true });
+            }
+            this.waiters.add(waiter);
+            if (this.state === 'running')
+                finish('released');
+            else if (signal?.aborted)
+                finish('cancelled');
+        });
+    }
+    resume() {
+        if (this.state === 'running')
+            return false;
+        this.state = 'running';
+        for (const waiter of [...this.waiters])
+            waiter.resolve('released');
+        return true;
+    }
+    cancel() {
+        this.state = 'running';
+        for (const waiter of [...this.waiters])
+            waiter.resolve('cancelled');
+    }
+    clear() { this.cancel(); }
+}