evolcore 0.0.22 → 0.0.23

package/dist/core/command/menu-handler.js

@@ -1,9 +1,8 @@
 import { normalizePeer, writeScope } from '../model/config-scope.js';
 import { formatPeerKey } from '../relation/peer-identity.js';
-import { modelMatches } from '../model/model-catalog.js';
+import { modelMatches, getCatalog, resolveCatalogModel, assertCatalogSelectable } from '../model/model-catalog.js';
 import { constrainResolvedModelForRole, filterModelsForRole, validateModelSelectionForRole } from '../model/model-permission.js';
 import { hasModelSwitcher } from '../../agents/runner-types.js';
-import { getCodexEfforts } from '../../agents/codex-runner.js';
 import { execCodexCliSync, resolveCodexCliPath } from '../../utils/codex-cli.js';
 import { resolvePaths, getPackageRoot, daemonControlDir } from '../../paths.js';
 import { inspectDataMigrationRequirement } from '../data-migration.js';
@@ -40,6 +39,9 @@ import { logger } from '../../utils/logger.js';
 import { shouldSuppressRealRestart } from '../../utils/restart-safety.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../auth/agent-delegation.js';
 import { evolMenuResponseTransportMetadata, menuFailure, menuCommandForName, menuSuccess, normalizeMenuError, validateConfigWriteScope, validateMenuRequest, } from './menu-protocol.js';
+import { parseMenuClientProtectedHeaders } from './menu-protocol.js';
+import { validateAndRenewRemoteAccessToken } from '../auth/remote-access-store.js';
+import { listDiagnosticLogOptions, listRawConfigResources, queryDiagnosticLogs, readRawConfigResource, } from './daemon-diagnostics.js';
 import { roleMenuAction, roleMenuOperation, roleMenuOptions, roleMenuQuery, roleMenuUpdate, } from './role-menu.js';
 import { handleConnectMenu, connectMenuOperation } from './connect-menu.js';
 import { groupMenuAuthorizationArgs, groupMenuIntent, handleGroupMenu, } from './group-menu.js';
@@ -77,7 +79,7 @@ function getBaseagentVersion(cmd) {
         return null;
     }
 }
-const allEfforts = ['low', 'medium', 'high', 'xhigh', 'max'];
+const allEfforts = ['none', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
 const PERMISSION_MODE_KEYS = PUBLIC_PERMISSION_MODES;
 /** menu file: fetch 文件大小上限（与 /file 一致） */
 const FILE_FETCH_MAX_SIZE = 10 * 1024 * 1024;
@@ -394,14 +396,8 @@ function tokenizeArgv(line) {
     }
     return out;
 }
-function getAvailableEfforts(agent, model) {
-    if (agent.name === 'claude') {
-        return allEfforts;
-    }
-    if (agent.name === 'codex') {
-        return getCodexEfforts(model);
-    }
-    return [];
+async function getAvailableEfforts(agent, model) {
+    return (await agent.getAvailableEfforts?.(model) ?? []);
 }
 function modelDisplayLabel(agent, model) {
     const full = agent.resolveModelId?.(model);
@@ -943,6 +939,10 @@ function buildMenuIntent(verb, cmdBase, args, action, value, fromControlChannel
             return intent('trigger.list', 'relation');
     }
     if (verb === 'options') {
+        if (cmdBase === '/system')
+            return intent('system.status', 'process');
+        if (cmdBase === '/config')
+            return intent('config.read', args?.scope === 'agent' ? 'agent' : 'process');
         if (cmdBase === '/agent')
             return intent(fromControlChannel ? 'agent.list' : 'agent.show', fromControlChannel ? 'control' : 'agent');
         if (cmdBase === '/capability')
@@ -1284,8 +1284,14 @@ function resolveExternalMenuAgentChannel(owner, payload, fallbackChannel, requir
             : { channel: fallbackChannel };
     }
     const agent = owner.agentRegistry?.get?.(requestedAid) ?? null;
-    if (!agent)
+    if (!agent) {
+        // The daemon trigger owner is a virtual control identity and therefore is
+        // intentionally absent from the normal Agent registry.
+        const daemonAid = owner.getDaemonTriggerOwnerAid?.();
+        if (daemonAid && requestedAid === daemonAid)
+            return { channel: 'daemon' };
         return { error: `未找到 Agent: ${requestedAid}`, code: 'NOT_FOUND' };
+    }
     const channel = agent.channelInstanceNames?.()[0];
     if (!channel)
         return { error: `Agent 无可用 channel: ${requestedAid}`, code: 'NOT_FOUND' };
@@ -1471,6 +1477,9 @@ export function getMenuItems(role, chatType = 'private', scope = 'agent', authSu
             ...(isControlScope && canManageProcess && canOperation('system.restart', 'process') ? [
                 { cmd: '/restart', label: '重启服务', desc: '重启整个 EvolCore 服务进程' },
             ] : []),
+            ...(isControlScope && canManageProcess && canOperation('system.status', 'process') ? [
+                { cmd: '/system', label: 'Daemon 诊断', desc: '查询 daemon 状态、监控快照和日志' },
+            ] : []),
             ...(canUseFile ? [
                 { cmd: '/file', label: '发送项目内文件', desc: '将项目目录内的文件发送给用户' },
             ] : []),
@@ -1567,6 +1576,18 @@ export async function getSubMenuItems(cmd, channel, channelId, userId, args, ove
     });
     if (optionsAuthDenied)
         throw { code: optionsAuthDenied.code, message: optionsAuthDenied.error, data: optionsAuthDenied.data };
+    if (cmdBase0 === '/system') {
+        if (args?.option !== 'logs')
+            throw { code: 'NOT_SUPPORTED', message: `Unsupported system option: ${String(args?.option ?? '')}` };
+        const options = listDiagnosticLogOptions();
+        return [
+            ...options.sources.map(source => ({ value: source.id, label: source.label, desc: `${source.fileCount} file(s), ${source.size} bytes` })),
+            ...options.levels.map(level => ({ value: `level:${level}`, label: level, desc: 'minimum log level' })),
+        ];
+    }
+    if (cmdBase0 === '/config' && args?.option === 'rawFile') {
+        return listRawConfigResources();
+    }
     // ── /agent list（只读） ──
     // 控制 channel：返回全量；agent channel：仅返回自身单条。
     if (cmd === '/agent') {
@@ -1607,7 +1628,7 @@ export async function getSubMenuItems(cmd, channel, channelId, userId, args, ove
         const triggerScheduler = this.getTriggerSchedulerForChannel?.(channel);
         const scope = args?.options === 'all' ? 'all' : 'enabled';
         const role = optionsIdentity.role;
-        const isAdmin = isManagementRole(role);
+        const isAdmin = isManagementRole(role) || subject.isDaemonOwner;
         if (!triggerScheduler)
             return [];
         const list = triggerScheduler.list({ all: scope === 'all' });
@@ -1711,13 +1732,15 @@ export async function getSubMenuItems(cmd, channel, channelId, userId, args, ove
         if ('error' in target)
             throw { code: target.code, message: target.error };
         const agent = this.getAgent(channel, target.baseagent);
-        if (hasModelSwitcher(agent) && agent.listModels) {
-            const rawModels = await agent.listModels() ?? [];
-            const models = filterModelsForRole(optionsIdentity.role, target.baseagent, rawModels, agent.resolveModelId?.bind(agent));
+        if (hasModelSwitcher(agent)) {
+            const catalog = await getCatalog(target.sel.self, target.baseagent);
+            assertCatalogSelectable(catalog);
+            const rawModels = catalog.models.map(m => m.id);
+            const models = filterModelsForRole(optionsIdentity.role, target.baseagent, rawModels, model => resolveCatalogModel(catalog, model), target.sel.self);
             const requestedModel = menuStringArg(args, 'model') ?? menuStringArg(args, 'current');
             const currentModel = requestedModel || readMenuModel(target, agent).value || agent.getModel();
             if (models.length > 0)
-                return models.map((m) => ({ value: m, label: modelDisplayLabel(agent, m), selected: modelMatches(agent, m, currentModel) }));
+                return models.map((m) => ({ value: m, label: modelDisplayLabel(agent, m) + (catalog.models.find(e => e.id === m)?.verification === 'unverified' ? ' [unverified]' : '') + (catalog.freshness === 'stale' ? ' [stale]' : ''), selected: modelMatches(agent, m, currentModel) }));
         }
         return null;
     }
@@ -1774,7 +1797,7 @@ export async function getSubMenuItems(cmd, channel, channelId, userId, args, ove
         const requestedModel = menuStringArg(args, 'model') ?? menuStringArg(args, 'currentModel');
         const modelTarget = { ...target, field: 'model', fieldPath: `baseagents.${target.baseagent}.model` };
         const currentModel = requestedModel || (hasModelSwitcher(agent) ? (readMenuModel(modelTarget, agent).value || agent.getModel()) : agent.name);
-        const efforts = getAvailableEfforts(agent, currentModel);
+        const efforts = await getAvailableEfforts(agent, currentModel);
         const currentEffort = menuStringArg(args, 'effort') ?? menuStringArg(args, 'current') ?? readMenuModel(target, agent).value ?? 'auto';
         const allItems = [...efforts, 'auto'];
         return allItems.map(e => ({ value: e, label: e === 'auto' ? 'auto (SDK默认)' : e, selected: e === currentEffort }));
@@ -1950,9 +1973,25 @@ export async function execMenuQuery(cmd, channel, channelId, userId, args, expli
     }
     // ── /config 查询（只读，查询各层配置） ──
     if (cmdBase === '/config') {
+        if (args?.view === 'rawFile') {
+            return { data: readRawConfigResource(args, subject.actorId ?? '') };
+        }
         const scope = args?.scope || 'process';
         if (scope === 'process') {
             const cfg = loadDaemonConfig();
+            if (args?.fields !== undefined) {
+                if (!Array.isArray(args.fields) || args.fields.length === 0
+                    || args.fields.some((field) => typeof field !== 'string' || !field.trim())) {
+                    return { error: 'fields must be a non-empty string array', code: 'INVALID_ARGUMENT' };
+                }
+                const selected = {};
+                for (const rawField of args.fields) {
+                    const field = rawField.trim();
+                    if (Object.prototype.hasOwnProperty.call(cfg, field))
+                        selected[field] = cfg[field];
+                }
+                return { data: { scope: 'process', fields: args.fields, config: selected } };
+            }
             return { data: { scope: 'process', config: cfg } };
         }
         if (scope === 'defaults') {
@@ -2284,6 +2323,23 @@ export async function execMenuQuery(cmd, channel, channelId, userId, args, expli
         };
     }
     if (cmdBase === '/system') {
+        const view = args?.view ?? 'status';
+        if (view === 'monitor') {
+            if (typeof this.daemonMonitorProvider !== 'function') {
+                return { error: 'Daemon monitor snapshot is unavailable', code: 'DEPENDENCY_UNAVAILABLE' };
+            }
+            return { data: await this.daemonMonitorProvider() };
+        }
+        if (view === 'logs') {
+            try {
+                return { data: queryDiagnosticLogs(args ?? {}, subject.actorId ?? '') };
+            }
+            catch (error) {
+                return { error: error?.message ?? String(error), code: error?.code ?? 'INTERNAL_ERROR' };
+            }
+        }
+        if (view !== 'status')
+            return { error: `Unsupported system view: ${String(view)}`, code: 'NOT_SUPPORTED' };
         const data = {
             aid: loadDaemonConfig().aid ?? null,
             pid: process.pid,
@@ -2460,7 +2516,7 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
         }
         if (!patch?.nameOrId)
             return { error: '缺少 nameOrId', code: 'INVALID_ARGS' };
-        const isAdmin = isManagementRole(identity.role);
+        const isAdmin = isManagementRole(identity.role) || subject.isDaemonOwner;
         if (!isAdmin && !userId)
             return { error: '无法确认身份，请确保渠道提供发送者 ID', code: 'FORBIDDEN' };
         const triggerScheduler = this.getTriggerSchedulerForChannel?.(channel);
@@ -2554,13 +2610,16 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
         const agent = this.getAgent(channel, target.baseagent);
         let targetModel = arg;
         if (hasModelSwitcher(agent)) {
-            const models = (await agent.listModels?.()) ?? [];
+            const catalog = await getCatalog(target.sel.self, target.baseagent);
+            assertCatalogSelectable(catalog);
+            const models = catalog.models.map(m => m.id);
             const decision = validateModelSelectionForRole({
                 role: identity.role,
                 baseagent: target.baseagent,
                 requestedModel: arg,
                 models,
-                resolveModelId: agent.resolveModelId?.bind(agent),
+                selfAid: target.sel.self,
+                resolveModelId: model => resolveCatalogModel(catalog, model),
             });
             if (!decision.ok)
                 return { error: decision.message || `invalid model: ${arg}`, code: decision.code || 'INVALID_VALUE' };
@@ -2610,7 +2669,7 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
         const agent = this.getAgent(channel, target.baseagent);
         const modelTarget = { ...target, field: 'model', fieldPath: `baseagents.${target.baseagent}.model` };
         const currentModel = hasModelSwitcher(agent) ? (readMenuModel(modelTarget, agent).value || agent.getModel()) : agent.name;
-        const validEfforts = getAvailableEfforts(agent, currentModel);
+        const validEfforts = await getAvailableEfforts(agent, currentModel);
         const allValid = [...validEfforts, 'auto'];
         if (!allValid.includes(arg)) {
             return { error: `无效推理强度: ${arg}，可选: ${allValid.join(' / ')}`, code: 'INVALID_VALUE' };
@@ -2995,7 +3054,7 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
     // ── 关系级 /trigger（不走 owners；复用 isAdmin + scoped 逻辑，D4 直调底层） ──
     if (cmdBase === '/trigger') {
         const role = identity.role;
-        const isAdmin = isManagementRole(role);
+        const isAdmin = isManagementRole(role) || subject.isDaemonOwner;
         const triggerScheduler = this.getTriggerSchedulerForChannel?.(channel);
         if (!triggerScheduler)
             return { error: '触发器功能未启用', code: 'NOT_SUPPORTED' };
@@ -3819,6 +3878,48 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
     }
     return { error: `不支持 action: ${cmdBase}`, code: 'NOT_SUPPORTED' };
 }
+export function resolveControlMenuAuthorization(input) {
+    const headers = parseMenuClientProtectedHeaders(input.auth.protectedHeaders);
+    const wireAuthMethod = headers.auth_method ?? 'daemon-owner';
+    const authMethod = wireAuthMethod === 'ecweb-token' ? 'remote-access-token' : wireAuthMethod;
+    const remoteToken = headers.remote_access_token ?? headers.ecweb_token;
+    if (authMethod !== 'daemon-owner' && authMethod !== 'remote-access-token') {
+        return { allowed: false, code: 'PERMISSION_DENIED', message: 'Unsupported Control Menu authorization method' };
+    }
+    if (authMethod === 'daemon-owner') {
+        if (remoteToken) {
+            return { allowed: false, code: 'PERMISSION_DENIED', message: 'remote_access_token requires auth_method=remote-access-token' };
+        }
+        if (!isProcessLevelOwner(input.peerId, input.owners)) {
+            return {
+                allowed: false,
+                code: 'NOT_ALLOWED',
+                message: formatAuthorizationDenial('Control-channel process operations require DaemonOwner.', 'DAEMON_OWNER_REQUIRED'),
+                data: authorizationDenialData('DAEMON_OWNER_REQUIRED'),
+            };
+        }
+        return { allowed: true, actorAid: input.peerId, authMethod };
+    }
+    if (!input.auth.encrypted || !remoteToken) {
+        return { allowed: false, code: 'REMOTE_ACCESS_TOKEN_INVALID', message: 'Remote access token authorization requires an encrypted protected header' };
+    }
+    const checked = (input.validateToken ?? validateAndRenewRemoteAccessToken)(remoteToken);
+    if (!checked.valid) {
+        return { allowed: false, code: 'REMOTE_ACCESS_TOKEN_INVALID', message: 'Remote access token is invalid or expired' };
+    }
+    const actorAid = checked.authorizedBy && input.owners.includes(checked.authorizedBy)
+        ? checked.authorizedBy
+        : input.owners[0];
+    if (!actorAid) {
+        return {
+            allowed: false,
+            code: 'NOT_ALLOWED',
+            message: formatAuthorizationDenial('Configure daemon.json.owners before using Control Menu operations.', 'DAEMON_OWNER_REQUIRED'),
+            data: authorizationDenialData('DAEMON_OWNER_REQUIRED'),
+        };
+    }
+    return { allowed: true, actorAid, authMethod };
+}
 function menuCommandToken(cmd) {
     if (typeof cmd !== 'string')
         return undefined;
@@ -3871,7 +3972,8 @@ async function execMenuForSystemControl(payload, context) {
     if ('error' in target)
         return ecwebErr(id, name, target.code, target.error);
     const targetChannel = target.channel;
-    const targetAid = this.getOwningAgent?.(targetChannel)?.aid;
+    const targetAid = this.getOwningAgent?.(targetChannel)?.aid
+        ?? this.getDaemonTriggerOwnerAid?.(targetChannel);
     const trustedSubject = buildAuthSubject({
         selfAid: targetAid,
         actorId: context.actorAid,
@@ -4044,10 +4146,10 @@ export async function execMenuForEcweb(payload, trusted) {
         owners,
     });
 }
-/** 控制 AID channel 专用入口：peerId 必须 ∈ evolcore.owners。
- *  全量权限（进程级 + 跨 agent + 关系级），fromControlChannel=true 放行闸门。
- *  与 ECWeb 入口的区别：鉴权主体是真实 peerId（而非注入 owner），按 evolcore.owners 校验。 */
-export async function execMenuForControl(payload, peerId) {
+/** Control AID entry: daemon-owner and valid ECWeb token modes share the same
+ * process authorization path. The authenticated envelope peerId remains the
+ * requester; token mode maps to a configured owner as its management actor. */
+export async function execMenuForControl(payload, peerId, auth = {}) {
     const id = payload?.id ?? '';
     const name = payload?.name;
     const validationError = validateMenuRequest(payload ?? {});
@@ -4057,16 +4159,22 @@ export async function execMenuForControl(payload, peerId) {
     const compatCmd = menuCommandToken(payload?.cmd);
     const isRoleRequest = name === 'role' || compatCmd === '/role';
     const isConnectRequest = name === 'connect' || compatCmd === '/connect';
-    if (!isRoleRequest && !isConnectRequest && !isProcessLevelOwner(peerId, owners)) {
+    const authorization = resolveControlMenuAuthorization({ peerId, owners, auth });
+    const hasExplicitAuthMethod = auth.protectedHeaders?.auth_method !== undefined;
+    if (!authorization.allowed && (hasExplicitAuthMethod || (!isRoleRequest && !isConnectRequest))) {
         return menuFailure({ id, ...(name ? { name } : {}) }, {
-            code: 'NOT_ALLOWED',
-            message: formatAuthorizationDenial('Control-channel process operations require DaemonOwner.', 'DAEMON_OWNER_REQUIRED'),
-            data: authorizationDenialData('DAEMON_OWNER_REQUIRED'),
+            code: authorization.code,
+            message: authorization.message,
+            ...(authorization.data !== undefined ? { data: authorization.data } : {}),
         });
     }
+    // Existing role/connect self-inspection remains available without process
+    // authority. Token-authorized and daemon-owner requests use one canonical
+    // management actor for the common process authorization path.
+    const managementActor = authorization.allowed ? authorization.actorAid : peerId;
     return execMenuForSystemControl.call(this, payload, {
         source: 'control',
-        actorAid: peerId,
+        actorAid: managementActor,
         localDirect: false,
         canApprovePersistentFullAccess: false,
         owners,

package/dist/core/command/menu-protocol.js

@@ -12,6 +12,93 @@ export const MENU_REQUEST_TYPES = new Set([
     'menu.update',
     'menu.action',
 ]);
+export function buildMenuClientProtectedHeaders(input) {
+    const clientName = input.clientName ?? 'evol';
+    if (clientName === 'ec-menu-client') {
+        const clientVersion = input.clientVersion?.trim();
+        if (!parseStableSemver(clientVersion)) {
+            throw Object.assign(new Error('ec-menu-client requires a stable X.Y.Z client version'), { code: 'INVALID_CLIENT' });
+        }
+        return {
+            client_name: clientName,
+            client_version: clientVersion,
+            ...(input.remoteAccessToken || input.ecwebToken ? { auth_method: 'remote-access-token', remote_access_token: input.remoteAccessToken ?? input.ecwebToken } : {}),
+        };
+    }
+    return {
+        ...(input.evolVersion ? { evol_version: input.evolVersion } : {}),
+        ...(input.remoteAccessToken || input.ecwebToken ? { auth_method: 'remote-access-token', remote_access_token: input.remoteAccessToken ?? input.ecwebToken } : {}),
+    };
+}
+export function parseMenuClientProtectedHeaders(value) {
+    if (!value)
+        return {};
+    const normalized = {};
+    for (const [key, raw] of Object.entries(value)) {
+        if (typeof raw !== 'string')
+            continue;
+        normalized[key.trim().toLowerCase()] = raw;
+    }
+    const result = {};
+    if (normalized.client_name === 'evol' || normalized.client_name === 'ec-menu-client')
+        result.client_name = normalized.client_name;
+    else if (normalized.client_name !== undefined)
+        result.client_name = normalized.client_name;
+    if (normalized.client_version !== undefined)
+        result.client_version = normalized.client_version;
+    if (normalized.evol_version !== undefined)
+        result.evol_version = normalized.evol_version;
+    if (normalized.auth_method === 'daemon-owner' || normalized.auth_method === 'remote-access-token' || normalized.auth_method === 'ecweb-token')
+        result.auth_method = normalized.auth_method;
+    else if (normalized.auth_method !== undefined)
+        result.auth_method = normalized.auth_method;
+    if (normalized.remote_access_token !== undefined)
+        result.remote_access_token = normalized.remote_access_token;
+    if (normalized.ecweb_token !== undefined)
+        result.ecweb_token = normalized.ecweb_token;
+    return result;
+}
+/** Validate client identity separately from authorization. These fields never grant access. */
+export function evaluateMenuClientCompatibility(input) {
+    const headers = parseMenuClientProtectedHeaders(input.protectedHeaders);
+    const clientName = headers.client_name ?? 'evol';
+    if (clientName === 'ec-menu-client') {
+        if (!input.encrypted || !parseStableSemver(headers.client_version)) {
+            return {
+                code: 'INVALID_CLIENT',
+                message: 'ec-menu-client requires encrypted protected headers and a stable X.Y.Z client_version',
+            };
+        }
+        return null;
+    }
+    if (clientName !== 'evol') {
+        return { code: 'INVALID_CLIENT', message: `Unsupported Menu client: ${String(clientName)}` };
+    }
+    return evaluateEvolMenuVersionGate(input);
+}
+export function parseMenuResponse(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw Object.assign(new Error('Menu response must be an object'), { code: 'INVALID_RESPONSE' });
+    }
+    const response = value;
+    if (response.type !== 'menu.response' || typeof response.id !== 'string' || !response.id.trim()) {
+        throw Object.assign(new Error('Invalid Menu response type or id'), { code: 'INVALID_RESPONSE' });
+    }
+    const hasData = Object.prototype.hasOwnProperty.call(response, 'data');
+    const hasError = Object.prototype.hasOwnProperty.call(response, 'error');
+    if (hasData === hasError) {
+        throw Object.assign(new Error('Menu response must contain exactly one of data or error'), { code: 'INVALID_RESPONSE' });
+    }
+    if (hasError) {
+        const error = response.error;
+        if (!error || typeof error !== 'object' || Array.isArray(error)
+            || typeof error.code !== 'string'
+            || typeof error.message !== 'string') {
+            throw Object.assign(new Error('Invalid Menu response error'), { code: 'INVALID_RESPONSE' });
+        }
+    }
+    return value;
+}
 export const MENU_NAME_COMMANDS = Object.freeze({
     pwd: '/pwd',
     session: '/session',
@@ -259,6 +346,25 @@ export function menuFailure(header, error) {
         },
     };
 }
+export function enforceMenuResponseSize(response, maxBytes = 128 * 1024) {
+    let bytes;
+    try {
+        bytes = Buffer.byteLength(JSON.stringify(response), 'utf8');
+    }
+    catch {
+        return menuFailure({ id: response.id, ...(response.name ? { name: response.name } : {}) }, {
+            code: 'INTERNAL_ERROR',
+            message: 'Menu response is not serializable',
+        });
+    }
+    if (bytes <= maxBytes)
+        return response;
+    return menuFailure({ id: response.id, ...(response.name ? { name: response.name } : {}) }, {
+        code: 'RESPONSE_TOO_LARGE',
+        message: `Menu response exceeds the ${maxBytes}-byte limit`,
+        data: { bytes, maxBytes },
+    });
+}
 const INVALID_ARGUMENT_CODES = new Set([
     'ARGUMENT_MISMATCH', 'FILE_TOO_LARGE', 'INVALID_ARGS', 'INVALID_DELEGATION',
     'INVALID_FIELD', 'INVALID_REVISION', 'INVALID_SCOPE', 'INVALID_TYPE', 'INVALID_VALUE', 'MISSING_AID',
@@ -273,6 +379,8 @@ const STABLE_CODES = new Set([
     'MENU_TOKEN_REQUIRED', 'MENU_TOKEN_REJECTED', 'MENU_TOKEN_ENCRYPTION_REQUIRED',
     'INVALID_CONTEXT', 'SCHEMA_VERSION_UNSUPPORTED', 'DEPENDENCY_UNAVAILABLE',
     'RATE_LIMITED', 'CATALOG_STALE', 'DATA_MIGRATION_REQUIRED',
+    'INVALID_CLIENT', 'REMOTE_ACCESS_TOKEN_INVALID', 'ECWEB_TOKEN_INVALID', 'CLIENT_BUSY', 'INVALID_RESPONSE', 'TIMEOUT',
+    'RESPONSE_TOO_LARGE',
 ]);
 export function normalizeMenuError(error) {
     const source = error && typeof error === 'object' ? error : {};
@@ -493,6 +601,9 @@ function menuFlowBaseRecord(request, context) {
         requestId: menuRequestId(request),
         messageId: context.messageId,
         selfAid: context.selfAid,
+        requesterAid: context.requesterAid,
+        authMethod: context.authMethod,
+        clientName: context.clientName,
     };
 }
 function menuRequestBusinessFields(request) {
@@ -531,11 +642,19 @@ export function logMenuRequestCompleted(request, response, context, options) {
     const processingMs = response && typeof response.processing_ms === 'number'
         ? response.processing_ms
         : undefined;
+    let responseBytes;
+    if (response) {
+        try {
+            responseBytes = Buffer.byteLength(JSON.stringify(response), 'utf8');
+        }
+        catch { }
+    }
     writeMenuFlowRecord({
         ...menuFlowBaseRecord(request, context),
         event: options.delivery === 'failed' ? 'menu.request.failed' : 'menu.request.completed',
         delivery: options.delivery,
         processingMs,
+        responseBytes,
         reason: options.reason,
         result: response && 'data' in response ? sanitizeMenuLogValue(response.data) : undefined,
         warning: response && 'warning' in response ? sanitizeMenuLogValue(response.warning) : undefined,

package/dist/core/command/slash-gate.js

@@ -43,9 +43,9 @@ export function probeSessionActivity(evidence, probes) {
     return evaluateSessionActivity(collected);
 }
 // 支持的命令列表
-const commands = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/stop', '/pause', '/compact', '/renew', '/repair', '/fork', '/del', '/perm', '/file', '/check', '/rewind', '/activity', '/observable', '/chatmode', '/mentionmode', '/ask', '/resume', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade'];
+const commands = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/stop', '/pause', '/compact', '/renew', '/repair', '/fork', '/del', '/perm', '/file', '/check', '/rewind', '/activity', '/observable', '/chatmode', '/mentionmode', '/ask', '/resume', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair'];
 const deprecatedCommands = ['/clear'];
-const exactBoundaryCommands = new Set(['/pause', '/resume', '/stop']);
+const exactBoundaryCommands = new Set(['/pause', '/resume', '/stop', '/pair']);
 /** Parse the execution command without treating it as a quick/result command. */
 export function parseFullAccessCommand(content) {
     const match = content.match(/^\s*(\/fa|\/fullaccess)(?=\s|$)([\s\S]*)$/);
@@ -65,7 +65,7 @@ const aliases = {
     '/base': '/baseagent',
 };
 // 命令快速路径前缀（所有命令都不进入消息队列）
-const quickCommandPrefixes = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/repair', '/fork', '/stop', '/pause', '/clear', '/compact', '/renew', '/del', '/perm', '/file', '/check', '/s ', '/name', '/rewind', '/rw', '/rw ', '/activity', '/observable', '/chatmode', '/mentionmode', '/ask', '/resume', '/base ', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade'];
+const quickCommandPrefixes = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/repair', '/fork', '/stop', '/pause', '/clear', '/compact', '/renew', '/del', '/perm', '/file', '/check', '/s ', '/name', '/rewind', '/rw', '/rw ', '/activity', '/observable', '/chatmode', '/mentionmode', '/ask', '/resume', '/base ', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair'];
 /**
  * 计算两个字符串的 Levenshtein 距离（编辑距离）
  */