evolcore 0.0.23 → 0.0.24

package/dist/config/builtin-roles.js

@@ -48,6 +48,8 @@ export function getManagementCommandPermissions(role) {
         'config.unset': { allow: true, scopes: ['agent', 'relation'] },
         'role.policy.write': { allow: true, dangerous: true, scopes: ['agent'], constraints: { requireAgentAdmin: true } },
         'ec.aid.show': { allow: true, dangerous: true, scopes: ['agent'], constraints: { targetCurrentAgentOnly: true, requireAgentAdmin: true } },
+        'ec.aid.lookup': { allow: true, scopes: ['agent'] },
+        'ec.aid.agentmd.get': { allow: true, scopes: ['agent'] },
         'ec.aid.agentmd.put': { allow: true, dangerous: true, scopes: ['agent'], constraints: { targetCurrentAgentOnly: true, requireAgentAdmin: true } },
         'ec.fs.mkdir': { allow: true, permissionMode: 'auto', scopes: ['relation'], constraints: { groupOnly: true, currentRelationOnly: true, targetCurrentAgentOnly: true } },
         'ec.fs.upload': { allow: true, permissionMode: 'auto', scopes: ['relation'], constraints: { groupOnly: true, currentRelationOnly: true, targetCurrentAgentOnly: true } },

package/dist/core/auth/auth-gateway.js

@@ -33,10 +33,11 @@ export function buildAuthSubject(input) {
         && fullAccessAuthorization.processRole === 'fullaccess-run'
         && fullAccessAuthorization.dataScope === 'daemon';
     const isDaemonService = input.trustedProcessRole === 'daemon-service';
-    const isDaemonOwner = !isDaemonService && !isFullAccessRun && isProcessOwner({
+    const isTrustedDaemonOwner = input.trustedProcessRole === 'daemon-owner';
+    const isDaemonOwner = !isDaemonService && !isFullAccessRun && (isTrustedDaemonOwner || isProcessOwner({
         actor: roleDetail.actor,
         processOwners,
-    });
+    }));
     const suppliedRole = input.identity?.role && input.identity.role !== 'none' ? input.identity.role : undefined;
     const role = suppliedRole ?? roleDetail.effectiveRole ?? 'none';
     const processRole = isFullAccessRun

package/dist/core/auth/authorization-audit.js

@@ -10,6 +10,8 @@ export function auditCommandAuthorization(event) {
         (event.decision === 'allow' && event.dangerous) ||
         (event.source === 'agent-tool' && event.operation.startsWith('config.')) ||
         event.operation === 'codex.approval' ||
+        event.operation === 'permission.approval' ||
+        event.operation === 'permission.runtime' ||
         event.operation.startsWith('fullaccess.') ||
         event.operation.startsWith('role.') ||
         event.operation === 'cli.exec.raw';
@@ -198,33 +200,78 @@ export function auditCodexApprovalDecision(input) {
  * infrastructure denials without parsing localized log text.
  */
 export function auditPermissionDecision(input) {
-    auditCommandAuthorization({
-        ts: Date.now(),
-        callId: input.requestId,
-        correlationId: input.requestId,
-        requestId: input.requestId,
+    const requestId = input.requestId ?? `perm-audit-${crypto.randomUUID()}`;
+    auditPermissionLifecycle({
+        phase: 'final',
+        requestId,
         sessionId: input.sessionId,
         agentAid: input.agentAid,
         agentName: input.agentName,
         permissionMode: input.permissionMode,
         toolName: input.toolName,
+        decision: 'deny',
+        decisionSource: input.decisionSource,
+        policyCode: input.policyCode,
+        reason: input.reason,
+        role: input.role,
+        taskId: input.taskId,
+        summary: input.summary,
+        operation: 'permission.runtime',
+    });
+}
+/**
+ * Emit a canonical request/response/final lifecycle for runtime approvals.
+ * All three phases share one eventKey and complete correlation fields so
+ * daily analysis can group them without parsing runner-specific log text.
+ */
+export function auditPermissionLifecycle(input) {
+    const sessionId = input.sessionId ?? 'unknown';
+    auditCommandAuthorization({
+        ts: Date.now(),
+        eventKey: buildToolLifecycleEventKey({
+            sessionId,
+            callId: input.callId,
+            correlationId: input.correlationId,
+            requestId: input.requestId,
+        }),
+        eventPhase: input.phase,
+        callId: input.callId ?? input.requestId,
+        correlationId: input.correlationId ?? input.callId ?? input.requestId,
+        requestId: input.requestId,
+        sessionId,
+        agentAid: input.agentAid ?? 'unknown',
+        agentName: input.agentName,
+        permissionMode: input.permissionMode ?? 'unknown',
+        toolName: input.toolName,
+        approvalMethod: input.approvalMethod,
         policyCode: input.policyCode,
         decisionSource: input.decisionSource,
-        errorCode: input.decisionSource === 'approval'
-            ? 'USER_DENIED'
-            : input.decisionSource === 'policy'
-                ? 'POLICY_DENIED'
-                : infrastructureErrorCode(input.policyCode),
+        errorCode: input.decision === 'deny'
+            ? input.decisionSource === 'approval'
+                ? 'USER_DENIED'
+                : input.decisionSource === 'policy'
+                    ? 'POLICY_DENIED'
+                    : infrastructureErrorCode(input.policyCode)
+            : undefined,
         source: 'agent-tool',
-        operation: 'permission.runtime',
+        operation: input.operation ?? 'permission.approval',
         scope: 'filesystem',
         dangerous: false,
         role: input.role ?? 'unknown',
         taskId: input.taskId,
-        argsSummary: input.summary ? { summary: input.summary } : undefined,
-        decision: 'deny',
+        argsSummary: input.summary || input.response
+            ? {
+                ...(input.summary ? { summary: input.summary } : {}),
+                ...(input.response ? { response: input.response } : {}),
+            }
+            : undefined,
+        decision: input.decision,
         executed: false,
-        executionState: 'blocked',
+        executionState: input.phase === 'request'
+            ? 'requested'
+            : input.phase === 'response'
+                ? 'responded'
+                : input.decision === 'deny' ? 'blocked' : 'authorized',
         reason: input.reason,
     });
 }
@@ -270,7 +317,7 @@ function infrastructureErrorCode(policyCode) {
 }
 function buildAuditRecord(event) {
     const executed = event.executed ?? false;
-    const decisionSource = event.decisionSource ?? (event.decision === 'deny' ? 'policy' : 'command');
+    const decisionSource = event.decisionSource ?? (event.decision === 'deny' ? 'policy' : event.decision === 'pending' ? 'approval' : 'command');
     const errorCode = event.errorCode ?? (event.decision === 'deny'
         ? decisionSource === 'approval'
             ? 'USER_DENIED'
@@ -281,9 +328,11 @@ function buildAuditRecord(event) {
     const executionState = event.executionState
         ?? (event.decision === 'deny'
             ? 'blocked'
-            : executed
-                ? (event.exitCode === undefined || event.exitCode === 0 ? 'completed' : 'failed')
-                : 'authorized');
+            : event.decision === 'pending'
+                ? 'requested'
+                : executed
+                    ? (event.exitCode === undefined || event.exitCode === 0 ? 'completed' : 'failed')
+                    : 'authorized');
     const lifecycleId = event.callId ?? event.correlationId ?? event.requestId;
     return {
         ts: event.ts,
@@ -386,7 +435,11 @@ function logAuditEvent(record) {
         : routineEcwebRoleRead
             ? 'debug'
             : 'info';
-    const marker = record.decision === 'deny' ? 'DENY' : record.dangerous ? 'DANGEROUS_ALLOW' : 'ALLOW';
+    const marker = record.decision === 'deny'
+        ? 'DENY'
+        : record.decision === 'pending'
+            ? 'PENDING'
+            : record.dangerous ? 'DANGEROUS_ALLOW' : 'ALLOW';
     const message = [
         `[CommandAudit:${marker}]`,
         `operation=${record.operation}`,

package/dist/core/auth/operation-authorizer.js

@@ -34,6 +34,9 @@ const DAEMON_SERVICE_OPERATIONS = new Set([
     'trigger.cancel',
     'trigger.delete',
     'trigger.run',
+    'agent.reload',
+    'system.restart',
+    'system.upgrade',
 ]);
 export function authorizeCommand(ctx) {
     return authorizeCommandInternal(ctx);
@@ -121,6 +124,47 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
         return denyDecision(ctx, 'NOT_ALLOWED', `Operation ${operation} is not available from source ${ctx.source}`, operation, intent.scope, opMeta.dangerous);
     }
     if (ctx.processRole === 'daemon-service') {
+        // ECWeb uses the authenticated daemon service for its read-only menu
+        // bootstrap (model/effort, agent metadata, trigger views, etc.). These
+        // queries are safe to authorize by catalog category; mutating operations
+        // remain restricted to the explicit daemon-service allowlist below.
+        const ECWEB_SERVICE_READ_OPERATIONS = new Set([
+            'system.status', 'model.current', 'model.list', 'baseagent.models.list',
+            'model.effort.current', 'agent.baseagent.current', 'agent.baseagent.list',
+            'agent.show',
+            'agent.list',
+            'capability.read',
+            'gateway.read', 'stats.summary', 'stats.session', 'stats.context',
+            'role.policy.read', 'role.relation.read', 'config.read',
+            'model.info', 'model.check',
+            'trigger.list', 'trigger.show', 'trigger.history', 'trigger.eventCatalog',
+        ]);
+        if (ECWEB_SERVICE_READ_OPERATIONS.has(operation)) {
+            return {
+                allow: true,
+                operation,
+                scope: intent.scope,
+                role: 'daemon-service',
+                dangerous: opMeta.dangerous,
+                matchedRule: 'daemon-service-read',
+            };
+        }
+        // The in-process service may perform system lifecycle actions only when
+        // the request came through the authenticated ECWeb management surface.
+        // A raw daemon-service subject on the control source is not a human owner.
+        if ((operation === 'system.restart' || operation === 'system.upgrade') && ctx.source === 'control') {
+            return denyDecision(ctx, 'NOT_ALLOWED', `Daemon service is not authorized for ${operation}`, operation, intent.scope, opMeta.dangerous, 'daemon-service');
+        }
+        if (ctx.source !== 'control' && (operation === 'observable.current' || operation === 'observable.update')) {
+            return {
+                allow: true,
+                operation,
+                scope: intent.scope,
+                role: 'daemon-service',
+                dangerous: opMeta.dangerous,
+                matchedRule: 'ecweb-daemon-service-agent-management',
+            };
+        }
         if (!DAEMON_SERVICE_OPERATIONS.has(operation)) {
             return denyDecision(ctx, 'NOT_ALLOWED', `Daemon service is not authorized for ${operation}`, operation, intent.scope, opMeta.dangerous, 'daemon-service');
         }
@@ -189,6 +233,20 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
     if (roleDef.allowAccess === false) {
         return denyDecision(ctx, 'ROLE_ACCESS_DENIED', `Role ${role} is not allowed to access commands`, operation, intent.scope, opMeta.dangerous);
     }
+    // AID lookup and public agent.md reads are available to every accessible
+    // role and may target any AID that passed managed-command validation. The
+    // operation source is restricted to agent-tool by the catalog.
+    if ((operation === 'ec.aid.lookup' || operation === 'ec.aid.agentmd.get')
+        && (intent.scope === 'relation' || intent.scope === 'agent')) {
+        return {
+            allow: true,
+            operation,
+            scope: intent.scope,
+            role,
+            dangerous: opMeta.dangerous,
+            matchedRule: 'public-aid-read',
+        };
+    }
     let matchResult = matchCommandPermission(operation, opMeta.category, roleDef.commandPermissions || {}, opMeta.dangerous);
     // Agent self-service contact add deliberately reuses the same low-trust
     // relation boundary as ec.msg.send. Older per-Agent role files may still
@@ -317,7 +375,9 @@ function requiresDaemonOwner(ctx, resolvedConfigCommand) {
     return false;
 }
 function hasDaemonOwnerRole(ctx) {
-    return ctx.isDaemonOwner === true || ctx.processRole === 'daemon-owner';
+    return ctx.isDaemonOwner === true
+        || ctx.processRole === 'daemon-owner'
+        || ctx.processRole === 'daemon-service';
 }
 function daemonOwnerDenialReasonCode(ctx) {
     if ((ctx.intent.operation === 'agent.show' || ctx.intent.operation === 'agent.reload')
@@ -340,8 +400,8 @@ function isCurrentAgentTarget(ctx) {
     return !!ctx.selfAid && !!targetAid && targetAid === ctx.selfAid;
 }
 function daemonOwnerRequiredMessage(operation) {
-    return `${operation} is a daemon-level operation and requires DaemonOwner. `
-        + 'Agent owner/admin and permissionMode=bypass do not grant this permission.';
+    return `无权限：${operation} 是 daemon 级操作，需要 DaemonOwner。`
+        + 'Agent owner/admin 和 permissionMode=bypass 均不能授予此权限。';
 }
 function getRuleRank(rule, permission, operation, category, isDangerous) {
     const denyOffset = permission.allow ? 0 : 1;

package/dist/core/auth/operation-catalog.js

@@ -116,6 +116,14 @@ const QUEUE_OPERATIONS = [['read', 'Read the current Agent message queue'], ['cl
  */
 const OPERATIONS = [
     // ── Model Operations ──
+    {
+        id: 'baseagent.models.list',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['process'],
+        description: '查询主机默认 Baseagent 模型目录',
+        sources: ['menu', 'ecweb', 'control'],
+    },
     {
         id: 'model.list',
         category: 'read',
@@ -917,7 +925,7 @@ const OPERATIONS = [
         category: 'read',
         dangerous: false,
         defaultScopes: ['relation', 'agent'],
-        description: 'Look up the current Agent public AID record',
+        description: 'Look up a public AID record',
         sources: ['agent-tool'],
     },
     {
@@ -925,7 +933,7 @@ const OPERATIONS = [
         category: 'read',
         dangerous: false,
         defaultScopes: ['relation', 'agent'],
-        description: 'Read and verify the current Agent public agent.md',
+        description: 'Read and verify a public Agent agent.md',
         sources: ['agent-tool'],
     },
     {

package/dist/core/auth/remote-access-store.js

@@ -2,8 +2,9 @@ import crypto from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
 import { resolvePaths } from '../../paths.js';
-export const REMOTE_ACCESS_TOKEN_TTL_MS = 30 * 24 * 60 * 60 * 1000;
-export const REMOTE_ACCESS_PAIRING_TTL_MS = 5 * 60 * 1000;
+export const REMOTE_ACCESS_TOKEN_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+// 与 owner 绑定二维码（BindService）的默认有效期保持一致：10 分钟。
+export const REMOTE_ACCESS_PAIRING_TTL_MS = 10 * 60 * 1000;
 export function remoteAccessTokenStorePath() {
     return path.join(resolvePaths().instanceDir, 'control-access-tokens.json');
 }

package/dist/core/baseagent-loader.js

@@ -20,16 +20,16 @@ export class AgentLoader {
      * Iterate over all EvolAgents in the registry × all registered plugins.
      * Each successful (agent, plugin) pair yields one runner instance.
      */
-    createAll(registry, callbacks, creationErrors) {
+    async createAll(registry, callbacks, creationErrors) {
         const instances = [];
         const allAgents = registry.runnableAgents();
         for (const agent of allAgents) {
-            instances.push(...this.createForAgent(agent, callbacks, creationErrors));
+            instances.push(...await this.createForAgent(agent, callbacks, creationErrors));
         }
         return instances;
     }
     /** Create runners for one EvolAgent, used by runtime hot-load. */
-    createForAgent(agent, callbacks, creationErrors) {
+    async createForAgent(agent, callbacks, creationErrors) {
         const instances = [];
         for (const [pluginName, plugin] of this.plugins) {
             if (!plugin.isEnabled(agent)) {
@@ -37,7 +37,7 @@ export class AgentLoader {
                 continue;
             }
             try {
-                const instance = plugin.createAgent(agent, callbacks);
+                const instance = await plugin.createAgent(agent, callbacks);
                 if (!instance) {
                     logger.debug(`Plugin '${pluginName}' returned null for agent '${agent.name}', skipping`);
                     continue;

package/dist/core/bootstrap-messages.js

@@ -18,8 +18,16 @@ export function bootstrapInitialMessageOperationPrefix(aid) {
 export function bootstrapInitialRetryOperationId(aid, at = Date.now()) {
     return `${bootstrapInitialMessageOperationPrefix(aid)}:${at}`;
 }
-export function postBootstrapWelcomeOperationId(aid) {
-    return `bootstrap-complete:v1:${aid}`;
+export function postBootstrapWelcomeOperationId(aid, owner) {
+    const normalizedAid = aid.replace(/^@/, '');
+    return owner ? `bootstrap-complete:v2:${normalizedAid}:${owner}` : `bootstrap-complete:v1:${normalizedAid}`;
+}
+export function isPostBootstrapWelcomeOperationId(operationId, aid) {
+    if (!operationId)
+        return false;
+    const normalizedAid = aid.replace(/^@/, '');
+    return operationId === postBootstrapWelcomeOperationId(normalizedAid)
+        || operationId.startsWith(`bootstrap-complete:v2:${normalizedAid}:`);
 }
 export function renderPostBootstrapWelcome(aid, owner, ownerName) {
     const mdPath = agentMdPath(aid);
@@ -36,9 +44,13 @@ export function renderPostBootstrapWelcome(aid, owner, ownerName) {
     });
 }
 export function preparePostBootstrapWelcomeOutbox(aid, owner, ownerName, delivery = { chatType: 'private' }) {
-    const operationId = postBootstrapWelcomeOperationId(aid);
+    const operationId = postBootstrapWelcomeOperationId(aid, owner);
     const chatDir = chatDirPath(resolvePaths().sessionsDir, 'aun', owner, aid);
-    if (hasMessageLogOperation(chatDir, operationId))
+    const legacyOperationId = postBootstrapWelcomeOperationId(aid);
+    if (hasMessageLogOperation(chatDir, operationId) || hasMessageLogOperation(chatDir, legacyOperationId))
+        return;
+    const legacy = outbox.findByDedupeKey(aid, legacyOperationId);
+    if (legacy?.channelId === owner)
         return;
     const existing = outbox.findByDedupeKey(aid, operationId);
     if (existing
@@ -68,21 +80,30 @@ export function preparePostBootstrapWelcomeOutbox(aid, owner, ownerName, deliver
     });
 }
 export function hasPendingPostBootstrapWelcomeOutbox(aid) {
-    const entry = outbox.findByDedupeKey(aid, postBootstrapWelcomeOperationId(aid));
-    return !!entry && outbox.isDeliveryForChannel(entry.delivery, entry.channelId);
+    return findPostBootstrapWelcomeOutbox(aid)
+        .some(entry => outbox.isDeliveryForChannel(entry.delivery, entry.channelId));
+}
+/** Keep pending welcomes from the single-owner v1 format retryable after upgrades. */
+export function findPostBootstrapWelcomeOutbox(aid, opts = {}) {
+    const normalizedAid = aid.replace(/^@/, '');
+    const entries = outbox.findByDedupePrefix(normalizedAid, `bootstrap-complete:v2:${normalizedAid}:`, opts);
+    const legacy = outbox.findByDedupeKey(normalizedAid, postBootstrapWelcomeOperationId(normalizedAid), opts);
+    return [...entries, ...(legacy ? [legacy] : [])];
+}
+export function pendingPostBootstrapWelcomeOwners(aid) {
+    return findPostBootstrapWelcomeOutbox(aid)
+        .filter(entry => outbox.isDeliveryForChannel(entry.delivery, entry.channelId))
+        .map(entry => entry.channelId)
+        .filter((owner, index, all) => all.indexOf(owner) === index);
 }
 /** Bind the durable completion welcome to the fresh post-bootstrap session. */
-export function bindPostBootstrapWelcomeOutboxSession(aid, sessionId) {
-    const entry = outbox.findByDedupeKey(aid, postBootstrapWelcomeOperationId(aid));
-    if (!entry || !outbox.isDeliveryForChannel(entry.delivery, entry.channelId))
+export function bindPostBootstrapWelcomeOutboxSession(aid, sessionId, owner) {
+    const normalizedAid = aid.replace(/^@/, '');
+    const entries = findPostBootstrapWelcomeOutbox(normalizedAid)
+        .filter(entry => (!owner || entry.channelId === owner) && outbox.isDeliveryForChannel(entry.delivery, entry.channelId));
+    // A session is scoped to one peer: never silently pick an arbitrary Owner.
+    if (!entries.length || (!owner && new Set(entries.map(entry => entry.channelId)).size !== 1))
         return false;
-    if (entry.context?.sessionId === sessionId)
-        return true;
-    return outbox.replaceIfRouteMatches(aid, entry, {
-        ...entry,
-        context: {
-            ...(entry.context ?? {}),
-            sessionId,
-        },
-    }) === 'replaced';
+    return entries.every(entry => entry.context?.sessionId === sessionId
+        || outbox.replaceIfRouteMatches(normalizedAid, entry, { ...entry, context: { ...(entry.context ?? {}), sessionId } }) === 'replaced');
 }

package/dist/core/bootstrap-service.js

@@ -52,32 +52,38 @@ export async function completeBootstrapWithWelcome(service, aid, welcome, sessio
                 reloaded: false,
             };
         }
-        try {
-            mainSession = await sessions.ensurePostBootstrapMainSession();
-        }
-        catch (e) {
-            return {
-                ok: false,
-                code: 'MAIN_SESSION_CREATE_FAILED',
-                error: e instanceof Error ? e.message : `Failed to create the post-bootstrap main session for ${aid}`,
-                reloaded: false,
-            };
-        }
-        if (!mainSession.sessionId) {
-            return {
-                ok: false,
-                code: 'MAIN_SESSION_CREATE_FAILED',
-                error: `Failed to create the post-bootstrap main session for ${aid}`,
-                reloaded: false,
-            };
-        }
-        if (welcomePending && welcome && !await welcome.bindPostBootstrapWelcomeToSession(mainSession.sessionId)) {
-            return {
-                ok: false,
-                code: 'WELCOME_SESSION_BIND_FAILED',
-                error: `Failed to bind the post-bootstrap welcome to session ${mainSession.sessionId}`,
-                reloaded: false,
-            };
+        const pendingOwners = welcome?.pendingPostBootstrapWelcomeOwners?.();
+        const sessionOwners = pendingOwners?.length ? pendingOwners : [undefined];
+        for (const owner of sessionOwners) {
+            let ownerSession;
+            try {
+                ownerSession = await sessions.ensurePostBootstrapMainSession(owner);
+            }
+            catch (e) {
+                return {
+                    ok: false,
+                    code: 'MAIN_SESSION_CREATE_FAILED',
+                    error: e instanceof Error ? e.message : `Failed to create the post-bootstrap main session for ${aid}`,
+                    reloaded: false,
+                };
+            }
+            if (!ownerSession.sessionId) {
+                return {
+                    ok: false,
+                    code: 'MAIN_SESSION_CREATE_FAILED',
+                    error: `Failed to create the post-bootstrap main session for ${aid}`,
+                    reloaded: false,
+                };
+            }
+            if (welcomePending && welcome && !await welcome.bindPostBootstrapWelcomeToSession(ownerSession.sessionId, owner)) {
+                return {
+                    ok: false,
+                    code: 'WELCOME_SESSION_BIND_FAILED',
+                    error: `Failed to bind the post-bootstrap welcome to session ${ownerSession.sessionId}`,
+                    reloaded: false,
+                };
+            }
+            mainSession ??= ownerSession;
         }
     }
     const result = service.completeBootstrap(aid);

package/dist/core/capability/capability-manager.js

@@ -13,10 +13,11 @@ function defaultTypeConfig() {
     return { mode: 'inherit', overrides: {} };
 }
 function resolveBaseagent(input) {
-    return input.baseagent
+    const value = input.baseagent
         || input.sessionBaseagent
-        || input.config?.active_baseagent
-        || 'claude';
+        || input.config?.active_baseagent;
+    const normalized = typeof value === 'string' ? value.trim() : '';
+    return normalized || undefined;
 }
 export function resolveCapabilityContext(input) {
     const aid = input.aid || input.config?.aid;
@@ -25,9 +26,12 @@ export function resolveCapabilityContext(input) {
     const projectPath = input.config?.projects?.defaultPath || input.projectPath || input.sessionProjectPath || null;
     if (!projectPath)
         return { error: '无法解析当前 agent projectPath', code: 'NO_PROJECT' };
+    const baseagent = resolveBaseagent(input);
+    if (!baseagent)
+        return { error: '无法解析当前 agent 的 baseagent', code: 'BASEAGENT_REQUIRED' };
     return {
         aid,
-        baseagent: resolveBaseagent(input),
+        baseagent,
         projectPath,
     };
 }

package/dist/core/capability/providers/codex-capability-provider.js

@@ -1,6 +1,6 @@
 import os from 'os';
 import path from 'path';
-import { execCodexCliSync } from '../../../utils/codex-cli.js';
+import { execCodexCliSync } from '../../../agents/baseagent.js';
 import { discoverSkillDirectories } from '../skill-discovery.js';
 function discoverSkills(ctx) {
     const roots = [

package/dist/core/command/agent-control.js

@@ -1,4 +1,5 @@
-import { agentCreateNonInteractive, agentDelete, agentEnable, agentDisable, agentList, agentShow, agentSet, agentReload, } from '../../cli/agent.js';
+import { agentDelete, agentEnable, agentDisable, agentList, agentShow, agentSet, agentReload, } from '../../cli/agent.js';
+import { agentCreateNonInteractive } from '../../cli/agent-create.js';
 import { logger } from '../../utils/logger.js';
 import { resolvePaths, resolveRoot } from '../../paths.js';
 import path from 'path';
@@ -297,6 +298,7 @@ async function runCreateInBackground(opts, w, service) {
         const createOptions = {
             aid: opts.aid, name: opts.name, baseagent: opts.baseagent,
             project: opts.project, owner: opts.owner,
+            description: opts.description,
             onPhase: (phase, state, detail) => {
                 if (state === 'begin') {
                     curPhase = phase;
@@ -393,6 +395,9 @@ export async function execAgentAction(action, args, peerId, eventBus, service) {
         const model = typeof a.model === 'string' && a.model.trim() ? a.model.trim() : undefined;
         const rawEffort = typeof a.effort === 'string' && a.effort.trim() ? a.effort.trim() : undefined;
         const effort = rawEffort && rawEffort !== 'auto' ? rawEffort : undefined;
+        const description = typeof a.description === 'string' && a.description.trim()
+            ? a.description.trim()
+            : undefined;
         // D3: accepted=true 必须意味着后续 query 能查到该 AID 的创建状态。
         let progressWriter;
         try {
@@ -405,7 +410,7 @@ export async function execAgentAction(action, args, peerId, eventBus, service) {
         void runCreateInBackground({
             aid: a.aid, name: a.name, baseagent: a.baseagent,
             project: a.project, owner,
-            model, effort, chatmode: a.chatmode,
+            model, effort, description, chatmode: a.chatmode,
             eventBus,
         }, progressWriter, service).catch(e => logger.error(`[agent-control] runCreateInBackground unhandled ${a.aid}: ${e?.message || e}`));
         return { data: { accepted: true, aid: a.aid } };