evolcore 0.0.2 → 0.0.4

package/README.md

@@ -43,7 +43,7 @@ EvolCore 是一个轻量级 AI Agent 网关系统。它为 Claude Code / Codex
 1. **消息渠道层** (`src/channels/`) - Feishu + WeChat + DingTalk + QQBot + WeCom + AUN 网络
 2. **消息队列层** (`src/core/message/message-queue.ts`) - 会话级串行处理 + 中断支持
 3. **命令处理层** (`src/core/command/`) - 斜杠命令处理（slash-handler / menu-handler / command-handler）
-4. **消息处理层** (`src/core/message/message-processor.ts`) - 统一事件处理引擎
+4. **消息处理层** (`src/core/message/response-engine.ts`) - 统一事件处理引擎
 5. **会话管理层** (`src/core/session/session-manager.ts`) - 多项目会话管理
 6. **交互路由层** (`src/core/interaction-router.ts`) - 卡片交互回调注册与路由
 7. **会话存储层** - JSONL 文件（CLI 共用）+ 文件系统（每 chat 一个目录，含 active.json / meta_*.jsonl / messages.jsonl / health.jsonl）
@@ -63,7 +63,7 @@ MessageQueue.enqueue(streamKey, message)
     ↓ 否                                    ↓
 MessageQueue.processNext()  ←──────────────┘
     ↓
-MessageProcessor.processMessage()
+ResponseEngine.processMessage()
     ↓
 ├─ 解析会话和项目路径
 ├─ 创建 StreamFlusher（3 秒批量发送）
@@ -78,12 +78,26 @@ MessageProcessor.processMessage()
 ### 环境要求
 
 - **操作系统**：macOS / Linux / Windows
-- **Node.js** >= 18
+- **Node.js** >= 22（依赖 `node:sqlite`）
 - **Claude Code** >= 2.1.32（`npm install -g @anthropic-ai/claude-code`）
 
 ### 1. 安装
 
-**npm 全局安装**（推荐）：
+**一行安装（macOS / Linux）**：
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/eLeanwang/evolcore/main/scripts/install.sh | bash
+```
+
+**Windows PowerShell**：
+
+```powershell
+irm https://raw.githubusercontent.com/eLeanwang/evolcore/main/scripts/install.ps1 | iex
+```
+
+安装器会在新实例上自动进入 `ec init` 交互向导，完成后运行 `ec start` 和 `ec status`。已有配置的升级场景会跳过自动初始化，不会停止或重启服务。详细流程见 [一键安装脚本说明](docs/evolcore-install-script.md)。
+
+**npm 全局安装**：
 
 ```bash
 npm install -g evolcore
@@ -128,7 +142,7 @@ ec init aun
 
 交互式引导完成以下配置：
 - 环境检查（Node.js >= 22、claude CLI、SDK 版本）
-- 渠道选择（飞书/微信）并扫码登录
+- 渠道选择（飞书 / 微信 / 钉钉 / QQ 频道 / 企业微信 / AUN）并扫码登录
 - 默认项目路径
 - 模型选择（sonnet/opus/haiku）
 - owner 配置：默认走 **Evol App 扫码绑定**，若无 Evol App 可手工录入 AID 兜底
@@ -207,7 +221,8 @@ evolcore/
 │   │   │   └── slash-gate.ts       # 权限前置拦截
 │   │   ├── message/
 │   │   │   ├── message-bridge.ts   # 渠道 ↔ 核心消息桥
-│   │   │   ├── message-processor.ts # 统一消息处理引擎
+│   │   │   ├── response-engine.ts  # 统一响应处理引擎
+│   │   │   ├── inbound-admission.ts # 私聊入站准入
 │   │   │   ├── message-queue.ts    # 消息队列（串行+中断）
 │   │   │   ├── message-cache.ts    # 消息缓存
 │   │   │   ├── message-log.ts      # 每 chat 的 messages.jsonl
@@ -216,11 +231,11 @@ evolcore/
 │   │   │   ├── adapters/           # 各后端会话文件适配器
 │   │   │   ├── session-fs-store.ts # 文件系统存储原语
 │   │   │   └── session-manager.ts  # 会话管理（多项目支持）
-│   │   ├── trigger/                # 触发器引擎
+│   │   ├── auth/                   # 授权审计与 Trigger 鉴权
 │   │   ├── evolagent.ts            # EvolAgent 实体
 │   │   ├── evolagent-registry.ts   # Agent 注册表（扫描/路由/热重载）
 │   │   ├── interaction-router.ts   # 卡片交互回调路由
-│   │   └── permission.ts           # 权限网关
+│   │   └── protected-paths.ts      # 受保护路径分级
 │   ├── channels/
 │   │   ├── feishu.ts               # 飞书 WebSocket 渠道
 │   │   ├── wechat.ts               # 微信 ClawBot 渠道
@@ -228,13 +243,18 @@ evolcore/
 │   │   ├── qqbot.ts                # QQ 频道渠道
 │   │   ├── wecom.ts                # 企业微信 AI Bot 渠道
 │   │   └── aun.ts                  # AUN Mesh 网络渠道
+│   ├── config/                     # 配置分层、访问策略、联系人绑定
+│   ├── eck/                        # ECK 上下文组装（manifest / kit 渲染）
+│   ├── response-system/            # 响应模式决策与参数解析
+│   ├── trigger/                    # 触发器引擎
+│   ├── stats/                      # 用量统计与计费
 │   ├── cli/                        # CLI 命令
 │   ├── utils/                      # 工具函数
 │   ├── types.ts                    # 类型定义
 │   ├── config-store.ts             # 配置加载
 │   ├── paths.ts                    # 路径解析
 │   └── index.ts                    # 主入口
-└── kits/                           # 共享上下文模板
+└── kits/                           # 共享上下文模板（rules / docs / schemas）
 ```
 
 ## 斜杠命令
@@ -252,6 +272,11 @@ evolcore/
 - `/check` - 系统健康检查（摘要）
 - `/help` - 显示所有命令
 
+**身份绑定**：
+- `/bind <6 位绑定码>` - 将当前 IM 账号绑定到已登记的联系人身份（仅私聊）。
+  支持飞书、微信、钉钉、QQ 频道、企业微信。绑定码有效期 10 分钟，可由
+  `ec init <channel>` 生成，或在目标 Agent 的 AUN 私聊发送 `/bind <channel>` 自助申请。
+
 ### 管理员级命令（Admin+ 可用）
 
 **项目**：
@@ -280,6 +305,16 @@ evolcore/
 - `/restart` - 重启服务（自愈机制）
 - `/repair` - 检查并修复会话
 
+### 联系人与关系管理（menu 协议）
+
+`/connect` 与 `/group` 是 menu 协议操作，通过 Evol App 或 EC Web 调用，不是 IM 里的斜杠命令。
+
+- **`/connect`** - 联系人与关系管理：联系人列表、群组列表、角色分配、管理员授权、拉黑状态。
+  准入策略（`connect.access.write`）为 owner 专属，角色分配与 admin 授权委派给 `role` menu 执行，
+  复用其 agent 级互斥锁、CAS revision 与审计链。
+- **`/group`** - 群组管理：群列表、群级 @ 提及策略、群规则加载策略的查询与更新。
+  群操作纳入权限目录与角色能力判定，通过版本比对和原子写入避免并发覆盖。
+
 ### ⚠️ 进程级 menu 操作鉴权（v3.2 Breaking）
 
 进程级 menu 操作（`/system restart/upgrade`、`/agent` agent 生命周期管理）的鉴权已迁移到
@@ -309,7 +344,7 @@ v3.2 新增进程级身份标识。启动时自动生成 `ec+5位数字.agentid.
 ## 技术栈
 
 - **运行时**：Node.js >= 22 + TypeScript（ES modules）
-- **AI 后端**：@anthropic-ai/claude-agent-sdk >= 0.3.211、Codex CLI app-server、Gemini CLI
+- **AI 后端**：@anthropic-ai/claude-agent-sdk 0.3.220（固定版本）、Codex CLI app-server、Gemini CLI
 - **消息渠道**：飞书（@larksuiteoapi/node-sdk）、微信（ClawBot ilink API）、钉钉（dingtalk-stream）、QQ频道（pure-qqbot）、企业微信（AI Bot API）、AUN 网络
 - **数据存储**：文件系统（per-chat 目录） + JSONL（CLI 共用）
 - **测试框架**：Vitest

package/bin/ec-safe-output.js

@@ -6,6 +6,13 @@ import { spawn } from 'child_process';
 const MAX_OUTPUT_BYTES = 1024 * 1024;
 const EC_EXECUTABLES = new Set(['ec']);
 const HOST_PROCESS_EXECUTABLES = new Set(['ps', 'pgrep', 'pidof', 'kill', 'pkill', 'killall']);
+const HEAD_EXECUTABLE = ['/usr/bin/head', '/bin/head'].find(candidate => {
+  try {
+    return fs.statSync(candidate).isFile();
+  } catch {
+    return false;
+  }
+});
 
 function fail(message) {
   process.stderr.write(`ec-safe-output: ${message}\n`);
@@ -34,6 +41,33 @@ function validateCommand(payload) {
   return !payload.argv.some(arg => /\bnode(?:js|\.exe)?\b/i.test(arg));
 }
 
+function validateStdinOnlyHeadArgs(args) {
+  if (args === undefined) return true;
+  if (!Array.isArray(args) || args.some(arg => typeof arg !== 'string')) return false;
+  let optionsEnded = false;
+  let expectsOptionValue = false;
+  for (const arg of args) {
+    if (expectsOptionValue) {
+      expectsOptionValue = false;
+      continue;
+    }
+    if (optionsEnded) {
+      if (arg !== '-') return false;
+      continue;
+    }
+    if (arg === '--') {
+      optionsEnded = true;
+      continue;
+    }
+    if (arg === '-') continue;
+    if (!arg.startsWith('-')) return false;
+    if (arg === '-n' || arg === '-c' || arg === '--lines' || arg === '--bytes') {
+      expectsOptionValue = true;
+    }
+  }
+  return true;
+}
+
 function resolveExecutionPaths(payload) {
   if (typeof payload.workspace !== 'string' || typeof payload.cwd !== 'string') fail('invalid workspace');
   let workspace;
@@ -87,36 +121,19 @@ function openOutputFile(payload, paths) {
 const payload = decodePayload(process.argv[2]);
 if (!payload) fail('invalid payload');
 if (!validateCommand(payload)) fail('command is not permitted');
-if (payload.headLines !== undefined
-  && (!Number.isSafeInteger(payload.headLines) || payload.headLines < 1 || payload.headLines > 10_000)) {
-  fail('invalid head line limit');
-}
+if (!validateStdinOnlyHeadArgs(payload.headArgs)) fail('head may only consume stdin');
+if (payload.headArgs !== undefined && !HEAD_EXECUTABLE) fail('trusted head executable is unavailable');
 
 const paths = resolveExecutionPaths(payload);
 const output = openOutputFile(payload, paths);
 let bytesWritten = 0;
-let linesWritten = 0;
 let limitReached = false;
 let writeFailed = false;
 
 function writeLimited(chunk) {
   if (limitReached || writeFailed) return;
   const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-  let allowed = Math.min(buffer.length, MAX_OUTPUT_BYTES - bytesWritten);
-  if (payload.headLines !== undefined) {
-    let cursor = 0;
-    while (cursor < allowed) {
-      const newline = buffer.indexOf(0x0a, cursor);
-      if (newline < 0 || newline >= allowed) break;
-      linesWritten++;
-      cursor = newline + 1;
-      if (linesWritten >= payload.headLines) {
-        allowed = cursor;
-        limitReached = true;
-        break;
-      }
-    }
-  }
+  const allowed = Math.min(buffer.length, MAX_OUTPUT_BYTES - bytesWritten);
   if (allowed <= 0) {
     limitReached = true;
     return;
@@ -132,13 +149,35 @@ function writeLimited(chunk) {
   }
 }
 
+const head = payload.headArgs === undefined
+  ? undefined
+  : spawn(HEAD_EXECUTABLE, payload.headArgs, {
+      cwd: paths.cwd,
+      env: process.env,
+      stdio: ['pipe', 'pipe', 'inherit'],
+    });
+if (head) {
+  head.stdout.on('data', writeLimited);
+  // Early-exit options such as --help or a small -n/-c close stdin before the
+  // EC process finishes. Ignore EPIPE and keep draining EC output below.
+  head.stdin.on('error', () => {});
+}
+
 const child = spawn(payload.argv[0], payload.argv.slice(1), {
   cwd: paths.cwd,
   env: process.env,
   stdio: ['ignore', 'pipe', payload.mergeStderr ? 'pipe' : 'inherit'],
 });
-child.stdout.on('data', writeLimited);
-if (payload.mergeStderr) child.stderr.on('data', writeLimited);
+const sourceStreams = [child.stdout, ...(payload.mergeStderr ? [child.stderr] : [])];
+if (head) {
+  for (const stream of sourceStreams) {
+    // The no-op data listener keeps draining the source if head exits early.
+    stream.on('data', () => {});
+    stream.pipe(head.stdin, { end: false });
+  }
+} else {
+  for (const stream of sourceStreams) stream.on('data', writeLimited);
+}
 
 child.once('error', error => {
   if (output) {
@@ -148,7 +187,13 @@ child.once('error', error => {
   fail(`unable to start command: ${error.message}`);
 });
 
-child.once('close', code => {
+let sourceClosed = false;
+let sourceCode = 1;
+let headClosed = !head;
+let headCode = 1;
+
+function finish() {
+  if (!sourceClosed || !headClosed) return;
   if (output) {
     try { fs.closeSync(output.fd); } catch { writeFailed = true; }
   }
@@ -157,5 +202,25 @@ child.once('close', code => {
     fail('failed to write command output');
   }
   if (output) process.stderr.write(`Saved output to ${output.target}\n`);
-  process.exitCode = code ?? 1;
+  process.exitCode = head ? headCode : sourceCode;
+}
+
+if (head) {
+  head.once('error', error => {
+    writeFailed = true;
+    process.stderr.write(`ec-safe-output: unable to start head: ${error.message}\n`);
+  });
+  head.once('close', code => {
+    headCode = code ?? 1;
+    headClosed = true;
+    for (const stream of sourceStreams) stream.unpipe(head.stdin);
+    finish();
+  });
+}
+
+child.once('close', code => {
+  sourceCode = code ?? 1;
+  sourceClosed = true;
+  if (head && !head.stdin.destroyed) head.stdin.end();
+  finish();
 });

package/dist/agents/baseagent.js

@@ -32,6 +32,22 @@ export function normalizeBaseagent(input) {
     const key = String(input || '').trim().toLowerCase().replace(/_/g, '-');
     return BASEAGENT_ALIASES[key] || { canonical: 'unknown', displayName: input ? String(input) : 'Unknown' };
 }
+function directInferencePair(apiKey, baseUrl) {
+    const normalizedApiKey = directInferenceValue(apiKey);
+    const normalizedBaseUrl = directInferenceValue(baseUrl);
+    if (!normalizedApiKey || !normalizedBaseUrl)
+        return undefined;
+    return { apiKey: normalizedApiKey, baseUrl: normalizedBaseUrl };
+}
+function directInferenceValue(...values) {
+    for (const value of values) {
+        const normalized = value?.trim();
+        const lower = normalized?.toLowerCase();
+        if (normalized && !lower?.includes('your-') && !lower?.includes('placeholder'))
+            return normalized;
+    }
+    return undefined;
+}
 function loadClaudeSettings() {
     try {
         const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');
@@ -42,6 +58,21 @@ function loadClaudeSettings() {
     catch { }
     return {};
 }
+/**
+ * Resolve a complete credential/endpoint pair for direct Anthropic HTTP calls.
+ * A pair must come from one source so partial configuration cannot be mixed
+ * across Agent config, the process environment, and Claude Code settings.
+ */
+export function resolveAnthropicDirectConfig(override) {
+    const explicit = directInferencePair(override?.apiKey, override?.baseUrl);
+    if (explicit)
+        return explicit;
+    const environment = directInferencePair(directInferenceValue(process.env.ANTHROPIC_AUTH_TOKEN, process.env.ANTHROPIC_API_KEY), process.env.ANTHROPIC_BASE_URL);
+    if (environment)
+        return environment;
+    const settings = loadClaudeSettings();
+    return directInferencePair(directInferenceValue(settings.env?.ANTHROPIC_AUTH_TOKEN, settings.env?.ANTHROPIC_API_KEY), settings.env?.ANTHROPIC_BASE_URL);
+}
 export function resolveAnthropicConfig(config, override) {
     const settings = loadClaudeSettings();
     const isPlaceholder = (v) => !v || v.includes('your-') || v.includes('placeholder');
@@ -103,6 +134,21 @@ function loadCodexSettings() {
     catch { }
     return {};
 }
+/**
+ * Resolve a complete credential/endpoint pair for direct OpenAI HTTP calls.
+ * auth.json and config.toml together form the Codex SDK source; fields are
+ * never combined with a partial Agent or process-environment configuration.
+ */
+export function resolveOpenaiDirectConfig(override) {
+    const explicit = directInferencePair(override?.apiKey, override?.baseUrl);
+    if (explicit)
+        return explicit;
+    const environment = directInferencePair(process.env.OPENAI_API_KEY, process.env.OPENAI_BASE_URL);
+    if (environment)
+        return environment;
+    const settings = loadCodexSettings();
+    return directInferencePair(settings.apiKey, settings.baseUrl);
+}
 export function resolveOpenaiConfig(config, override) {
     const codexSettings = loadCodexSettings();
     const isPlaceholder = (v) => !v || v.includes('your-') || v.includes('placeholder');