evolcore 0.0.2 → 0.0.4

package/dist/core/command/slash-handler.js

@@ -3,6 +3,7 @@ import { getCodexEfforts } from '../../agents/codex-runner.js';
 import { buildEnvelope } from '../message/message-utils.js';
 import { resolvePaths, getPackageRoot } from '../../paths.js';
 import { logger } from '../../utils/logger.js';
+import { shouldSuppressRealRestart } from '../../utils/restart-safety.js';
 import crypto from 'crypto';
 import path from 'path';
 import fs from 'fs';
@@ -186,7 +187,7 @@ function triggerOperationForSlash(content) {
         return 'trigger.show';
     if (subcommand === 'history')
         return 'trigger.history';
-    if (subcommand === 'set')
+    if (subcommand === 'create' || subcommand === 'set')
         return 'trigger.create';
     if (subcommand === 'update')
         return 'trigger.update';
@@ -351,7 +352,7 @@ async function getGitWorkingDirInfo(projectPath) {
         return null; // git 命令失败时静默返回 null
     }
 }
-export async function handleSlashCommand(content, channel, channelId, sendMessage, userId, threadId, chatType, source, messageId, selfAID, overrideIdentity, overrideSubject) {
+export async function handleSlashCommand(content, channel, channelId, sendMessage, userId, threadId, chatType, source, messageId, selfAID, overrideIdentity, overrideSubject, replyContext) {
     // 卡片回调的 chatType 不可靠（飞书 bot 单聊 chatId 也是 oc_ 前缀），
     // 不应覆盖 session 中已有的正确值
     if (source === 'card-trigger')
@@ -431,9 +432,23 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         ...params,
         subject: authSubject,
     });
-    // roleGuard 仅对进程级命令（/restart /reload）放行 daemon owner 绕过，
+    const canAccessSlashOperation = (operation, scope) => {
+        const args = scope === 'relation'
+            ? buildSlashRelationIntentArgs({ selfAid: authSubject.selfAid, peerKey: authSubject.peerKey })
+            : {};
+        return authorizeOperation({
+            source: 'slash',
+            intent: { operation, scope, source: 'slash', args },
+            subject: authSubject,
+            audit: false,
+        }).allow;
+    };
+    // roleGuard 仅对进程级命令（/restart /upgrade /reload）放行 daemon owner 绕过，
     // 其余命令严格按 agent-channel 的 isAdmin 判定，不越权。
-    const isProcessLevelSlash = normalizedContent === '/restart' || normalizedContent === '/reload' || normalizedContent.startsWith('/reload ');
+    const isProcessLevelSlash = normalizedContent === '/restart'
+        || normalizedContent === '/upgrade'
+        || normalizedContent === '/reload'
+        || normalizedContent.startsWith('/reload ');
     const roleGuard = guardRoleCommand(normalizedContent, activeChatType, isAdmin || (isDaemonOwner && isProcessLevelSlash));
     if (roleGuard)
         return roleGuard;
@@ -458,18 +473,50 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         return undefined;
     // /help 命令不需要会话
     if (normalizedContent === '/help') {
+        const canReadModel = canAccessSlashOperation('model.current', 'relation')
+            || canAccessSlashOperation('model.list', 'relation');
+        const canUseModel = canAccessSlashOperation('model.use', 'relation');
+        const canSetEffort = canAccessSlashOperation('model.effort', 'relation');
+        const canReadPermission = canAccessSlashOperation('permission.current', 'relation');
+        const canAnswerPermission = canAccessSlashOperation('permission.answer', 'relation');
+        const canReadChatmode = canAccessSlashOperation('chatmode.current', 'relation');
+        const canSetChatmode = canAccessSlashOperation('chatmode.update', 'relation');
+        const canReadMentionmode = activeChatType === 'group'
+            && canAccessSlashOperation('mentionmode.current', 'relation');
+        const canSetMentionmode = activeChatType === 'group'
+            && canAccessSlashOperation('mentionmode.update', 'relation');
+        const canUseFile = canAccessSlashOperation('file.fetch', 'filesystem');
         const appendProcessCommands = (lines) => {
             if (!isDaemonOwner)
                 return;
-            lines.push('', '🛠️ 进程级运维：', '  /restart - 重启服务', '  /reload [aid] - 热重载 Agent 配置');
+            lines.push('', '🛠️ 进程级运维：', '  /restart - 重启服务', '  /upgrade - 检查版本更新', '  /reload [aid] - 热重载 Agent 配置');
         };
         if (!isAdmin && activeChatType === 'group') {
             const lines = [
                 '可用命令：',
+                ...((canReadModel || canUseModel || canSetEffort) ? [
+                    '',
+                    '🤖 Agent 与模型：',
+                    ...(canReadModel || canUseModel ? [`  /model${canUseModel ? ' [model]' : ''} - 查看${canUseModel ? '或切换' : ''}模型`] : []),
+                    ...(canSetEffort ? ['  /effort [level] - 查看或切换推理强度'] : []),
+                ] : []),
+                ...((canReadChatmode || canSetChatmode || canReadMentionmode || canSetMentionmode) ? [
+                    '',
+                    '💬 聊天设置：',
+                    ...(canReadChatmode || canSetChatmode ? [`  /chatmode${canSetChatmode ? ' [interactive|proactive]' : ''} - 查看${canSetChatmode ? '或切换' : ''}会话模式`] : []),
+                    ...(canReadMentionmode || canSetMentionmode ? [`  /mentionmode${canSetMentionmode ? ' [mention-only|disabled]' : ''} - 查看${canSetMentionmode ? '或切换' : ''}群聊 @ 处理模式`] : []),
+                ] : []),
+                ...(canReadPermission || canAnswerPermission ? [
+                    '',
+                    '🔐 权限管理：',
+                    ...(canReadPermission ? ['  /perm - 查看当前权限模式'] : []),
+                    ...(canAnswerPermission ? ['  /perm allow|always|deny - 审批权限请求'] : []),
+                ] : []),
                 '',
                 '其他：',
                 '  /status - 显示会话状态',
                 '  /check - 检查 EvolAgent 实例健康',
+                ...(canUseFile ? ['  /file <path> - 发送项目内文件'] : []),
                 '  /help - 显示此帮助信息',
             ];
             appendProcessCommands(lines);
@@ -486,6 +533,28 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 '  /del <名称> - 删除指定会话（仅解绑，不删除文件）',
                 '  /status - 显示会话状态',
                 '  /check - 检查 EvolAgent 实例健康',
+                ...((canReadModel || canUseModel || canSetEffort) ? [
+                    '',
+                    '🤖 Agent 与模型：',
+                    ...(canReadModel || canUseModel ? [`  /model${canUseModel ? ' [model]' : ''} - 查看${canUseModel ? '或切换' : ''}模型`] : []),
+                    ...(canSetEffort ? ['  /effort [level] - 查看或切换推理强度'] : []),
+                ] : []),
+                ...((canReadChatmode || canSetChatmode) ? [
+                    '',
+                    '💬 聊天设置：',
+                    `  /chatmode${canSetChatmode ? ' [interactive|proactive]' : ''} - 查看${canSetChatmode ? '或切换' : ''}会话模式`,
+                ] : []),
+                ...(canReadPermission || canAnswerPermission ? [
+                    '',
+                    '🔐 权限管理：',
+                    ...(canReadPermission ? ['  /perm - 查看当前权限模式'] : []),
+                    ...(canAnswerPermission ? ['  /perm allow|always|deny - 审批权限请求'] : []),
+                ] : []),
+                ...(canUseFile ? [
+                    '',
+                    '🧰 工具：',
+                    '  /file <path> - 发送项目内文件',
+                ] : []),
                 '',
                 '❓ 帮助：',
                 '  /help - 显示此帮助信息',
@@ -511,18 +580,18 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             '',
             '🤖 Agent 与模型：',
             '  /baseagent [name] - 查看或切换 Agent 后端（别名: /base）',
-            '  /model [model] - 查看或切换模型',
-            '  /effort [level] - 查看或切换推理强度',
+            ...(canReadModel || canUseModel ? [`  /model${canUseModel ? ' [model]' : ''} - 查看${canUseModel ? '或切换' : ''}模型`] : []),
+            ...(canSetEffort ? ['  /effort [level] - 查看或切换推理强度'] : []),
             '',
             '💬 聊天设置：',
             '  /activity [all|text|none] - 查看/控制中间输出显示模式',
-            '  /chatmode [interactive|proactive] - 查看/切换会话模式（被动响应或主动推进）',
-            '  /mentionmode [mention-only|disabled] - 查看/切换群聊 @ 处理模式（仅@响应或全部响应，仅群聊）',
+            ...(canReadChatmode || canSetChatmode ? [`  /chatmode${canSetChatmode ? ' [interactive|proactive]' : ''} - 查看${canSetChatmode ? '/切换' : ''}会话模式（被动响应或主动推进）`] : []),
+            ...(canReadMentionmode || canSetMentionmode ? [`  /mentionmode${canSetMentionmode ? ' [mention-only|disabled]' : ''} - 查看${canSetMentionmode ? '/切换' : ''}群聊 @ 处理模式`] : []),
             '',
             '🔐 权限管理：',
-            '  /perm - 查看当前权限模式',
-            ...(isAdmin ? ['  权限模式请通过角色策略编辑器修改'] : []),
-            '  /perm allow|always|deny - 审批权限请求',
+            ...(canReadPermission ? ['  /perm - 查看当前权限模式'] : []),
+            ...(canReadPermission ? ['  权限模式请通过角色策略编辑器修改'] : []),
+            ...(canAnswerPermission ? ['  /perm allow|always|deny - 审批权限请求'] : []),
             '',
             '🛠️ 运维：',
             '  /status - 显示会话状态',
@@ -538,7 +607,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             ...(!isDaemonOwner && isAdmin ? [
                 '  /reload - 热重载当前 Agent 配置',
             ] : []),
-            ...(isAdmin ? [
+            ...(canUseFile ? [
                 '',
                 '🧰 工具：',
                 `  /file ${isOwner ? '[channel] ' : ''}<path> - 发送项目内文件`,
@@ -552,6 +621,19 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     // /evolhelp 命令：返回 JSON 格式的命令列表（供程序解析）
     if (normalizedContent === '/evolhelp') {
         const cmds = [];
+        const canReadModel = canAccessSlashOperation('model.current', 'relation')
+            || canAccessSlashOperation('model.list', 'relation');
+        const canUseModel = canAccessSlashOperation('model.use', 'relation');
+        const canSetEffort = canAccessSlashOperation('model.effort', 'relation');
+        const canReadPermission = canAccessSlashOperation('permission.current', 'relation');
+        const canAnswerPermission = canAccessSlashOperation('permission.answer', 'relation');
+        const canReadChatmode = canAccessSlashOperation('chatmode.current', 'relation');
+        const canSetChatmode = canAccessSlashOperation('chatmode.update', 'relation');
+        const canReadMentionmode = activeChatType === 'group'
+            && canAccessSlashOperation('mentionmode.current', 'relation');
+        const canSetMentionmode = activeChatType === 'group'
+            && canAccessSlashOperation('mentionmode.update', 'relation');
+        const canUseFile = canAccessSlashOperation('file.fetch', 'filesystem');
         // 项目
         cmds.push({ command: '/pwd', description: '显示当前项目路径', category: '项目', roles: ['admin', 'owner'] });
         // 会话管理
@@ -565,16 +647,17 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             cmds.push({ command: '/compact', description: '压缩会话上下文（减少 token 用量）', category: '会话管理', roles: ['admin', 'owner'] });
         }
         // Agent 与模型
-        if (isAdmin) {
+        if (isAdmin)
             cmds.push({ command: '/baseagent', aliases: ['/base'], args: '[name]', description: '查看或切换 Agent 后端', category: 'Agent 与模型', roles: ['admin', 'owner'] });
-            cmds.push({ command: '/model', args: '[model]', description: '查看或切换模型', category: 'Agent 与模型', roles: ['admin', 'owner'] });
-            cmds.push({ command: '/effort', args: '[level]', description: '查看或切换推理强度', category: 'Agent 与模型', roles: ['admin', 'owner'] });
-        }
+        if (canReadModel || canUseModel)
+            cmds.push({ command: '/model', ...(canUseModel ? { args: '[model]' } : {}), description: `查看${canUseModel ? '或切换' : ''}模型`, category: 'Agent 与模型', roles: [identity.role] });
+        if (canSetEffort)
+            cmds.push({ command: '/effort', args: '[level]', description: '查看或切换推理强度', category: 'Agent 与模型', roles: [identity.role] });
         // 权限管理
-        if (isAdmin) {
-            cmds.push({ command: '/perm', description: '查看当前角色决定的权限模式', category: '权限管理', roles: ['admin', 'owner'] });
-            cmds.push({ command: '/perm', args: 'allow|always|deny', description: '审批权限请求', category: '权限管理', roles: ['admin', 'owner'] });
-        }
+        if (canReadPermission)
+            cmds.push({ command: '/perm', description: '查看当前角色决定的权限模式', category: '权限管理', roles: [identity.role] });
+        if (canAnswerPermission)
+            cmds.push({ command: '/perm', args: 'allow|always|deny', description: '审批权限请求', category: '权限管理', roles: [identity.role] });
         // 运维
         cmds.push({ command: '/status', description: '显示会话状态', category: '运维', roles: ['visitor', 'member', 'admin', 'owner'] });
         cmds.push({ command: '/stop', description: '中断当前任务', category: '运维', roles: ['admin', 'owner'] });
@@ -587,19 +670,19 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         }
         if (isDaemonOwner) {
             cmds.push({ command: '/restart', description: '重启服务', category: '运维', roles: ['daemon-owner'] });
+            cmds.push({ command: '/upgrade', description: '检查版本更新', category: '运维', roles: ['daemon-owner'] });
             cmds.push({ command: '/reload', args: '[aid]', description: '热重载 Agent 配置', category: '运维', roles: ['daemon-owner'] });
         }
         if (!isDaemonOwner && isAdmin) {
             cmds.push({ command: '/reload', description: '热重载当前 Agent 配置', category: '运维', roles: ['admin', 'owner'] });
         }
-        if (isAdmin) {
-            cmds.push({ command: '/file', args: isOwner ? '[channel] <path>' : '<path>', description: '发送项目内文件', category: '工具', roles: ['admin', 'owner'] });
-        }
+        if (canUseFile)
+            cmds.push({ command: '/file', args: isOwner ? '[channel] <path>' : '<path>', description: '发送项目内文件', category: '工具', roles: [identity.role] });
         // 聊天设置
-        if (isAdmin) {
-            cmds.push({ command: '/chatmode', args: '[interactive|proactive]', description: '查看/切换会话模式（被动响应或主动推进）', category: '聊天设置', roles: ['admin', 'owner'] });
-            cmds.push({ command: '/mentionmode', args: '[mention-only|disabled]', description: '查看/切换群聊 @ 处理模式（仅@响应或全部响应）', category: '聊天设置', roles: ['admin', 'owner'] });
-        }
+        if (canReadChatmode || canSetChatmode)
+            cmds.push({ command: '/chatmode', ...(canSetChatmode ? { args: '[interactive|proactive]' } : {}), description: `查看${canSetChatmode ? '/切换' : ''}会话模式（被动响应或主动推进）`, category: '聊天设置', roles: [identity.role] });
+        if (canReadMentionmode || canSetMentionmode)
+            cmds.push({ command: '/mentionmode', ...(canSetMentionmode ? { args: '[mention-only|disabled]' } : {}), description: `查看${canSetMentionmode ? '/切换' : ''}群聊 @ 处理模式`, category: '聊天设置', roles: [identity.role] });
         // 交互
         cmds.push({ command: '/ask', args: '<选项>', description: '回答 Agent 的交互式问题', category: '运维', roles: ['visitor', 'member', 'admin', 'owner'] });
         // 帮助
@@ -1628,11 +1711,12 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     }
     if (normalizedContent === '/activity' || normalizedContent.startsWith('/activity ')) {
         const activityArg = normalizedContent.slice(9).trim();
+        const activitySession = await getExistingSessionForCommand();
         // 带参（写操作）需 admin+；无参查询对所有人开放（owner 门在具体切换点还有一道）
         if (activityArg && !isAdmin)
             return { kind: 'command.error', text: '❌ 无权限：此命令仅限管理员使用' };
         // proactive 模式下流式输出全部静默，activity 配置无意义
-        if (getEffectiveChatmode(activeSession) === 'proactive') {
+        if (getEffectiveChatmode(activitySession) === 'proactive') {
             return { kind: 'command.error', text: '❌ 当前会话为 proactive 模式，不支持 activity 配置（流式输出已全部静默）' };
         }
         const modeMap = {
@@ -1655,7 +1739,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                     type: 'interaction',
                     id: `activity-${Date.now()}-${crypto.randomBytes(4).toString('hex')}`,
                     channelId,
-                    sessionId: activeSession?.id || '',
+                    sessionId: activitySession?.id || '',
                     initiatorId: userId,
                     kind: {
                         kind: 'command-card',
@@ -1669,7 +1753,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                         })),
                     },
                 };
-                const replyCtx = activeSession ? this.getReplyContext(activeSession) : undefined;
+                const replyCtx = replyContext ?? (activitySession ? this.getReplyContext(activitySession) : undefined);
                 const cardResult = await this.sendCommandCard({ channel, channelId, interaction, replyCtx, canWrite: isOwner });
                 if (cardResult === null)
                     return null;
@@ -2081,7 +2165,21 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             await sendMessage(channelId, `⏳ 正在创建新会话${sessionName ? `: ${sessionName}` : ''}...`, this.getReplyContext(session));
         }
         const newSessionBaseagent = this.agentRegistry?.resolveByChannel(channel)?.baseagent || this.parseDefaultBaseagent();
-        const newSession = await this.sessionManager.createNewSession(channel, channelId, projectPath, sessionName, newSessionBaseagent);
+        const previousMetadata = session?.metadata || activeSession?.metadata || {};
+        const newSessionIdentityMetadata = activeChatType === 'group'
+            ? {
+                ...(previousMetadata.channelKey ? { channelKey: previousMetadata.channelKey } : {}),
+                groupId: previousMetadata.groupId || channelId,
+                ...(previousMetadata.groupName ? { groupName: previousMetadata.groupName } : {}),
+                ...(previousMetadata.dispatchMode ? { dispatchMode: previousMetadata.dispatchMode } : {}),
+            }
+            : {
+                ...(previousMetadata.channelKey ? { channelKey: previousMetadata.channelKey } : {}),
+                ...((userId || previousMetadata.peerId) ? { peerId: userId || previousMetadata.peerId } : {}),
+                ...(previousMetadata.peerName ? { peerName: previousMetadata.peerName } : {}),
+                ...(previousMetadata.peerType ? { peerType: previousMetadata.peerType } : {}),
+            };
+        const newSession = await this.sessionManager.createNewSession(channel, channelId, projectPath, sessionName, newSessionBaseagent, newSessionIdentityMetadata);
         const previousAgent = getActiveAgentIfAvailable();
         if (session && previousAgent) {
             // Reset agent backend state so the new
@@ -2370,6 +2468,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         });
         // 执行重启逻辑（共用于卡片回调和文本确认）
         const executeRestart = async () => {
+            const suppressRealRestart = shouldSuppressRealRestart();
             let replyContext;
             if (threadId) {
                 const threadSession = await this.sessionManager.getThreadSession(channel, channelId, threadId);
@@ -2382,15 +2481,20 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 timestamp: Date.now(),
                 ...(replyContext?.replyToMessageId ? { rootId: replyContext.replyToMessageId } : {}),
             };
-            const dataDir = resolvePaths().dataDir;
-            fs.mkdirSync(dataDir, { recursive: true });
-            fs.writeFileSync(path.join(dataDir, 'restart-pending.json'), JSON.stringify(restartInfo));
-            const { spawn } = await import('child_process');
-            spawn('node', [path.join(getPackageRoot(), 'dist', 'cli', 'index.js'), 'restart-monitor'], {
-                detached: true,
-                stdio: 'ignore',
-                env: { ...process.env, EVOLCORE_HOME: resolvePaths().root }
-            }).unref();
+            if (!suppressRealRestart) {
+                const dataDir = resolvePaths().dataDir;
+                fs.mkdirSync(dataDir, { recursive: true });
+                fs.writeFileSync(path.join(dataDir, 'restart-pending.json'), JSON.stringify(restartInfo));
+                const { spawn } = await import('child_process');
+                spawn('node', [path.join(getPackageRoot(), 'dist', 'cli', 'index.js'), 'restart-monitor'], {
+                    detached: true,
+                    stdio: 'ignore',
+                    env: { ...process.env, EVOLCORE_HOME: resolvePaths().root }
+                }).unref();
+            }
+            else {
+                logger.info('[System] Suppressed real restart in test runtime');
+            }
             this.eventBus.publish({ type: 'system:restart', channel, channelId });
             // 先发送重启反馈消息，等待发送完成后再 kill 进程
             // 避免消息还没发出去进程就退出了
@@ -2416,10 +2520,12 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             // 发 SIGTERM 而非直接 process.exit(0)，让 index.ts 的 shutdown() 先
             // 正常关闭所有 channel（包括 Feishu WebSocket close frame），
             // 避免 Feishu 服务端因连接异常断开而重推未 ack 的消息给新进程。
-            setTimeout(() => {
-                logger.info('[System] Restarting by user command...');
-                process.kill(process.pid, 'SIGTERM');
-            }, 1000);
+            if (!suppressRealRestart) {
+                setTimeout(() => {
+                    logger.info('[System] Restarting by user command...');
+                    process.kill(process.pid, 'SIGTERM');
+                }, 1000);
+            }
             return true;
         };
         // 文本确认流程
@@ -2450,8 +2556,24 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     }
     // /upgrade 命令：检查版本更新，提示用户手动重启
     if (normalizedContent === '/upgrade') {
-        if (!isAdmin)
-            return { kind: 'command.error', text: '❌ 无权限：升级检查仅限管理员使用' };
+        const upgradeAuthDenied = await authorizeIntent({
+            intent: {
+                operation: 'system.upgrade',
+                scope: 'process',
+                source: 'slash',
+                args: {},
+                dangerous: true,
+            },
+            identity: isDaemonOwner ? { ...identity, role: 'owner' } : identity,
+            session: activeSession,
+            channel,
+            channelId,
+            userId,
+            selfAid: this.agentRegistry?.resolveByChannel(channel)?.aid,
+            isDaemonOwner,
+        });
+        if (upgradeAuthDenied)
+            return upgradeAuthDenied;
         if (isLinkedInstall()) {
             return { kind: 'command.result', text: '⏭ 开发模式，跳过升级检查' };
         }
@@ -2483,11 +2605,26 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     }
     // /file 命令：发送项目内文件，支持 /file path 和 /file channel path
     if (normalizedContent.startsWith('/file')) {
-        if (!isAdmin)
-            return { kind: 'command.error', text: '❌ 无权限：此命令仅限管理员使用' };
         // 飞书会将 .md 等后缀自动转为 Markdown 链接: foo.md → [foo.md](http://foo.md/)
         // 还原: 将 [text](url) 替换为 text
         const rawArg = normalizedContent.slice(5).trim().replace(/\[([^\]]+)\]\([^)]+\)/g, '$1');
+        const fileAuthDenied = await authorizeIntent({
+            intent: {
+                operation: 'file.fetch',
+                scope: 'filesystem',
+                source: 'slash',
+                args: rawArg ? { filePath: rawArg } : {},
+            },
+            identity,
+            session: activeSession,
+            channel,
+            channelId,
+            userId,
+            selfAid: this.agentRegistry?.resolveByChannel(channel)?.aid,
+            isDaemonOwner,
+        });
+        if (fileAuthDenied)
+            return fileAuthDenied;
         if (!rawArg) {
             const usage = isOwner
                 ? '用法: /file <相对路径> 或 /file <渠道> <相对路径>\n示例: /file src/index.ts\n示例: /file feishu report.md'

package/dist/core/daemon-file-cache.js

@@ -12,7 +12,7 @@
  * 策略（reload/重启永远全量失效，无视策略；策略只决定"平时每次读怎么检查"）：
  *  - on-reload：平时不检查，直接用缓存（kits 文件、persona）。靠 reload/重启刷新。
  *  - manual：同 on-reload，额外支持显式 invalidate(file) 单刷。
- *  - mtime：每次读 statSync 门控 mtime，变了自动重读（working.md、config.json）。
+ *  - mtime：每次读 statSync 门控 size + mtime，变了自动重读（working.md、config.json）。
  *
  * 容量：项数可无界增长的组（如 relation-prefs，每 peer 一文件）设 LRU 硬上限
  * （见 GROUP_CAPS），命中/写入移到末尾、超限驱逐同组最旧项；无 timer。
@@ -71,9 +71,9 @@ export class FileCache {
         const read = opts.read ?? readFileOrNull;
         this.bump(opts.group, opts.policy, 'gets');
         if (opts.policy === 'mtime') {
-            const mtimeMs = statMtime(file);
+            const fingerprint = statFingerprint(file);
             this.bump(opts.group, opts.policy, 'statChecks');
-            if (existing && existing.mtimeMs === mtimeMs) {
+            if (existing && sameFingerprint(existing.fingerprint, fingerprint)) {
                 this.bump(opts.group, opts.policy, 'hits');
                 this.touch(file, existing);
                 return existing.value;
@@ -84,7 +84,7 @@ export class FileCache {
             this.bump(opts.group, opts.policy, 'misses');
             const raw = read(file);
             const value = loader(raw);
-            this.store(file, { policy: 'mtime', group: opts.group, mtimeMs, value, bytes: approxBytes(raw) });
+            this.store(file, { policy: 'mtime', group: opts.group, fingerprint, value, bytes: approxBytes(raw) });
             return value;
         }
         // on-reload / manual：命中即用，不检查文件
@@ -192,14 +192,20 @@ export class FileCache {
         };
     }
 }
-function statMtime(file) {
+function statFingerprint(file) {
     try {
-        return fs.statSync(file).mtimeMs;
+        const stat = fs.statSync(file);
+        return { size: stat.size, mtimeMs: stat.mtimeMs };
     }
     catch {
         return null; // 文件不存在
     }
 }
+function sameFingerprint(left, right) {
+    if (left === null || right === null)
+        return left === right;
+    return !!left && left.size === right.size && left.mtimeMs === right.mtimeMs;
+}
 function readFileOrNull(file) {
     try {
         return fs.readFileSync(file, 'utf-8');
@@ -208,6 +214,34 @@ function readFileOrNull(file) {
         return null;
     }
 }
+/**
+ * 带错误捕获的 reader。默认 reader 把所有读盘异常吞成 null，调用方无从区分
+ * ENOENT（文件确实没有）与 EACCES/EISDIR（部署或权限事故）——对随包发布的
+ * 文件（schema、角色模板）来说这层信息正是定位问题的关键。
+ *
+ * 用法：建一个实例，把 `read` 交给 fileCache，loader 里拿到 null 时用
+ * `lastError()` 拼文案、把 `lastErrorCause()` 挂到新 Error 的 `cause` 上——
+ * 后者保住原始异常对象，`code`/`path`/`errno` 这些结构化字段不至于只剩字符串。
+ * 注意 loader 只在未命中时执行，与 read 同步成对调用，因此闭包里的 last
+ * 不会串到别的文件上。
+ */
+export function createErrorCapturingReader() {
+    let last = null;
+    return {
+        read: (file) => {
+            try {
+                last = null;
+                return fs.readFileSync(file, 'utf-8');
+            }
+            catch (error) {
+                last = error;
+                return null;
+            }
+        },
+        lastError: () => (last instanceof Error ? last.message : last === null ? 'unreadable' : String(last)),
+        lastErrorCause: () => last,
+    };
+}
 /** 缓存值内存占用近似：用读入的原始字符串长度（字节级近似），null 记 0。 */
 function approxBytes(raw) {
     return raw === null ? 0 : raw.length;

package/dist/core/event-catalog.js

@@ -89,9 +89,37 @@ const CATALOG = [
             { path: 'name', type: 'string', optional: true },
             { path: 'chatType', type: 'string', optional: true },
             { path: 'threadId', type: 'string', optional: true },
+            { path: 'cause', type: 'string', optional: true },
+            { path: 'sourceSessionId', type: 'string', optional: true },
+            { path: 'renewSource', type: 'string', optional: true },
             { path: 'timestamp', type: 'number', optional: true },
         ],
     },
+    {
+        type: 'session:renew-evaluated',
+        namespace: 'session',
+        name: 'renew-evaluated',
+        description: 'Session Renew 判定完成',
+        fields: [
+            { path: 'candidateSessionId', type: 'string' },
+            { path: 'selectedSessionId', type: 'string' },
+            { path: 'renewed', type: 'boolean' },
+            { path: 'decision', type: 'string' },
+            { path: 'source', type: 'string' },
+            { path: 'channel', type: 'string' },
+            { path: 'channelName', type: 'string', optional: true },
+            { path: 'channelId', type: 'string' },
+            { path: 'selfAid', type: 'string', optional: true },
+            { path: 'idleHours', type: 'number' },
+            { path: 'responseMode', type: 'string', optional: true },
+            { path: 'baseagent', type: 'string', optional: true },
+            { path: 'model', type: 'string', optional: true },
+            { path: 'effort', type: 'string', optional: true },
+            { path: 'fallbackReason', type: 'string', optional: true },
+            { path: 'durationMs', type: 'number' },
+            { path: 'timestamp', type: 'number' },
+        ],
+    },
     {
         type: 'session:switched',
         namespace: 'session',
@@ -355,6 +383,77 @@ const CATALOG = [
             { path: 'preTokens', type: 'number' },
         ],
     },
+    {
+        type: 'runner:task-started',
+        namespace: 'runner',
+        name: 'task-started',
+        description: 'Runner 子任务已创建',
+        fields: [
+            { path: 'sessionId', type: 'string' },
+            { path: 'taskId', type: 'string' },
+            { path: 'taskKind', type: 'string' },
+            { path: 'toolUseId', type: 'string', optional: true },
+            { path: 'description', type: 'string' },
+            { path: 'subagentType', type: 'string', optional: true },
+            { path: 'taskType', type: 'string', optional: true },
+            { path: 'workflowName', type: 'string', optional: true },
+            { path: 'prompt', type: 'string', optional: true },
+            { path: 'skipTranscript', type: 'boolean', optional: true },
+            { path: 'timestamp', type: 'number', optional: true },
+        ],
+    },
+    {
+        type: 'runner:task-progress',
+        namespace: 'runner',
+        name: 'task-progress',
+        description: 'Runner 子任务进度',
+        fields: [
+            { path: 'sessionId', type: 'string' },
+            { path: 'taskId', type: 'string', optional: true },
+            { path: 'taskKind', type: 'string', optional: true },
+            { path: 'toolUseId', type: 'string', optional: true },
+            { path: 'description', type: 'string', optional: true },
+            { path: 'subagentType', type: 'string', optional: true },
+            { path: 'summary', type: 'string', optional: true },
+            { path: 'lastToolName', type: 'string', optional: true },
+            { path: 'totalTokens', type: 'number', optional: true },
+            { path: 'toolUses', type: 'number', optional: true },
+            { path: 'durationMs', type: 'number', optional: true },
+            { path: 'timestamp', type: 'number', optional: true },
+        ],
+    },
+    {
+        type: 'runner:task-notification',
+        namespace: 'runner',
+        name: 'task-notification',
+        description: 'Runner 子任务终态和输出',
+        fields: [
+            { path: 'sessionId', type: 'string' },
+            { path: 'taskId', type: 'string' },
+            { path: 'taskKind', type: 'string' },
+            { path: 'toolUseId', type: 'string', optional: true },
+            { path: 'description', type: 'string', optional: true },
+            { path: 'subagentType', type: 'string', optional: true },
+            { path: 'status', type: 'string' },
+            { path: 'terminalReason', type: 'string', optional: true },
+            { path: 'outputFile', type: 'string', optional: true },
+            { path: 'summary', type: 'string', optional: true },
+            { path: 'usage', type: 'object', optional: true },
+            { path: 'skipTranscript', type: 'boolean', optional: true },
+            { path: 'timestamp', type: 'number', optional: true },
+        ],
+    },
+    {
+        type: 'runner:background-tasks-changed',
+        namespace: 'runner',
+        name: 'background-tasks-changed',
+        description: 'Runner 后台任务集合变化',
+        fields: [
+            { path: 'sessionId', type: 'string' },
+            { path: 'tasks', type: 'array' },
+            { path: 'timestamp', type: 'number', optional: true },
+        ],
+    },
     {
         type: 'runner:model-changed',
         namespace: 'runner',