evolcore 0.0.23 → 0.0.24

package/dist/agents/ecagent-runner.js

@@ -26,6 +26,13 @@ const MAX_TOOL_OUTPUT = 200_000;
 const MAX_SCAN_FILES = 5_000;
 const MAX_SEARCH_RESULTS = 500;
 const DEFAULT_BASH_TIMEOUT_MS = 120_000;
+/**
+ * 规范化模型 ID：去掉 Claude Code SDK 专有的上下文窗口后缀 [1m]/[200k]
+ * Ecagent/OpenAI API 不认识这些后缀，必须传入标准模型 ID
+ */
+function stripContextWindowSuffix(modelId) {
+    return modelId.replace(/\[(?:1m|200k)\]$/i, '');
+}
 class AsyncEventQueue {
     values = [];
     waiters = [];
@@ -714,7 +721,7 @@ export class EcagentRunner {
                 configuredHeaders: config.headers,
             }),
         };
-        this.model = config.model;
+        this.model = stripContextWindowSuffix(config.model);
         this.effort = config.effort;
         this.agentAid = runtime?.agentAid;
         this.onSessionIdUpdate = callbacks?.onSessionIdUpdate;
@@ -724,7 +731,7 @@ export class EcagentRunner {
             throw new Error('ecagent requires an EvolCore Agent AID');
         return agentSessionsDir(this.agentAid);
     }
-    setModel(model) { this.model = model; }
+    setModel(model) { this.model = stripContextWindowSuffix(model); }
     getModel() { return this.model; }
     resolveModelId(model) { return model; }
     setEffort(effort) { this.effort = effort; }
@@ -995,6 +1002,13 @@ export class EcagentRunner {
         return runtime;
     }
     mapHarnessEvent(queue, event, stats, model, effort) {
+        if (event.type === 'message_update'
+            && (event.assistantMessageEvent.type === 'thinking_start'
+                || event.assistantMessageEvent.type === 'thinking_delta'
+                || event.assistantMessageEvent.type === 'thinking_end')) {
+            queue.push({ type: 'heartbeat', source: 'reasoning', turn: stats.numTurns + 1 });
+            return;
+        }
         if (event.type === 'message_update' && event.assistantMessageEvent.type === 'text_delta') {
             if (!stats.firstTextAt)
                 stats.firstTextAt = Date.now();
@@ -1202,7 +1216,7 @@ export class EcagentRunner {
                 ? cached
                 : await this.openExistingRuntime(agentSessionId, cwd);
             this.onCompactStart?.(sessionId);
-            const compactModel = modelOverride?.model || this.model;
+            const compactModel = stripContextWindowSuffix(modelOverride?.model || this.model);
             const compactEffort = modelOverride?.effortMode === 'model_default'
                 ? undefined
                 : modelOverride?.effort ?? this.effort;

package/dist/agents/gemini-runner.js

@@ -24,6 +24,7 @@ import { normalizeExecutionPermissionMode, normalizePermissionMode } from '../co
 import { workspaceContainsHClassPaths } from '../core/permission/protected-paths.js';
 import { buildBubblewrapCommand } from '../core/permission/sandbox-runtime.js';
 import { getManagedTaskTempDir } from '../cli/task-context.js';
+import { auditPermissionLifecycle } from '../core/auth/authorization-audit.js';
 // Strip ANSI escape codes from Gemini CLI text output.
 // Gemini embeds raw terminal colors from tool stdout (e.g. vitest, npm)
 // into its assistant text, unlike Claude SDK which strips them internally.
@@ -32,6 +33,13 @@ const ANSI_RE = /\x1b\[[0-9;]*[a-zA-Z]|\x1b\].*?(?:\x1b\\|\x07)/g;
 function stripAnsi(text) {
     return text.replace(ANSI_RE, '');
 }
+/**
+ * 规范化模型 ID：去掉 Claude Code SDK 专有的上下文窗口后缀 [1m]/[200k]
+ * Gemini API 不认识这些后缀，必须传入标准模型 ID
+ */
+function stripContextWindowSuffix(modelId) {
+    return modelId.replace(/\[(?:1m|200k)\]$/i, '');
+}
 // ── MIME → 扩展名映射 ──
 const MIME_EXT = {
     'image/png': '.png',
@@ -286,11 +294,11 @@ export class GeminiRunner {
     permissionContexts = new Map();
     constructor(config, callbacks) {
         this.resolved = resolveGoogleConfig(config);
-        this.model = this.resolved.model;
+        this.model = stripContextWindowSuffix(this.resolved.model);
         this.onSessionIdUpdate = callbacks.onSessionIdUpdate;
     }
     // ── ModelSwitcher ──
-    setModel(model) { this.model = model; }
+    setModel(model) { this.model = stripContextWindowSuffix(model); }
     getModel() { return this.model; }
     async listModels() { const catalog = await getCatalog(undefined, 'gemini'); assertCatalogSelectable(catalog); return catalog.models.map(m => m.id); }
     // ── Effort (not applicable) ──
@@ -687,6 +695,56 @@ export class GeminiRunner {
             logger.info(`[GeminiRunner] interaction.auto_resolved kind=${normalizeGeminiToolName(toolName)} session=${sessionId}`);
             return;
         }
+        const lifecycleRequestId = requestId ?? `gemini-approval-${crypto.randomUUID()}`;
+        const auditSummary = `${toolName} runtime authorization denied by Gemini headless policy`;
+        auditPermissionLifecycle({
+            phase: 'request',
+            requestId: lifecycleRequestId,
+            sessionId,
+            toolName,
+            decision: 'pending',
+            decisionSource: 'approval',
+            permissionMode: context.permissionMode,
+            agentAid: context.selfAid,
+            agentName: context.agentName,
+            role: context.role,
+            taskId: context.taskId,
+            summary: auditSummary,
+        });
+        auditPermissionLifecycle({
+            phase: 'response',
+            requestId: lifecycleRequestId,
+            sessionId,
+            toolName,
+            decision: 'deny',
+            decisionSource: 'policy',
+            policyCode: 'permission_mode_denied',
+            reason: auditSummary,
+            permissionMode: context.permissionMode,
+            agentAid: context.selfAid,
+            agentName: context.agentName,
+            role: context.role,
+            taskId: context.taskId,
+            summary: auditSummary,
+            response: 'deny',
+        });
+        auditPermissionLifecycle({
+            phase: 'final',
+            requestId: lifecycleRequestId,
+            sessionId,
+            toolName,
+            decision: 'deny',
+            decisionSource: 'policy',
+            policyCode: 'permission_mode_denied',
+            reason: auditSummary,
+            permissionMode: context.permissionMode,
+            agentAid: context.selfAid,
+            agentName: context.agentName,
+            role: context.role,
+            taskId: context.taskId,
+            summary: auditSummary,
+            response: 'deny',
+        });
         try {
             await context.recordExecutionAnomaly?.({
                 code: 'runtime_permission_denied',

package/dist/agents/runner-types.js

@@ -63,7 +63,7 @@ export function usageForContext(usage) {
     return lastIteration ?? usage;
 }
 /** Models whose base ID uses a 1M context window when sent to the SDK with [1m]. */
-export const ONE_M_CONTEXT_MODEL_PREFIXES = ['claude-opus-4-8', 'claude-sonnet-4-6'];
+export const ONE_M_CONTEXT_MODEL_PREFIXES = ['claude-opus-5', 'claude-opus-4-8', 'claude-sonnet-4-6'];
 const ONE_M_CONTEXT_MODEL_ALIASES = ['opus', 'sonnet'];
 const CLAUDE_CONTEXT_MODEL_ALIASES = ['opus', 'sonnet', 'haiku'];
 export function isClaudeContextUsageModel(model) {

package/dist/aun/aid/managed-operation.js

@@ -29,8 +29,9 @@ function parseAid(value) {
     return { ok: true, aid };
 }
 /**
- * The daemon accepts only the self-scoped AID commands exposed to managed
- * tasks. Parsing here is deliberately narrower than the standalone CLI.
+ * The daemon accepts only the narrowly scoped AID commands exposed to managed
+ * tasks. Public lookup/get may name any valid AID; local show/publish remain
+ * subject to the self-AID boundary enforced by the command handler.
  */
 export function resolveManagedAidOperation(argv) {
     const args = argv[0] === 'aid' ? argv.slice(1) : argv;
@@ -67,7 +68,21 @@ export function resolveManagedAidOperation(argv) {
     return {
         ok: false,
         code: 'NOT_ALLOWED',
-        reason: 'Managed AID operations only allow exact self-scoped show, lookup, agentmd get, or agentmd put commands with an optional --format json suffix',
+        reason: 'Managed AID operations only allow exact show, lookup, agentmd get, or agentmd put commands with an optional --format json suffix',
+    };
+}
+export function managedAidShowViewForRole(role) {
+    return role === 'owner' || role === 'admin' ? 'full' : 'redacted';
+}
+export function redactAidShowResult(value) {
+    return {
+        aid: value.aid,
+        redacted: true,
+        hasAgentMd: value.hasAgentMd,
+        certExpiresAt: value.certExpiresAt,
+        certSubject: value.certSubject,
+        certExpired: value.certExpired,
+        agentMdSignature: value.agentMdSignature,
     };
 }
 const defaultDependencies = () => ({
@@ -80,12 +95,19 @@ const defaultDependencies = () => ({
     readFileSync: fs.readFileSync,
 });
 /** Execute a validated AID operation from the daemon-owned host filesystem. */
-export async function executeManagedAidOperation(command, overrides = {}) {
+export async function executeManagedAidOperation(command, options = {}) {
+    const { showView = 'full', ...overrides } = options;
     const deps = { ...defaultDependencies(), ...overrides };
     const aunPath = deps.root;
     switch (command.kind) {
-        case 'show':
-            return { kind: command.kind, aid: command.aid, value: await deps.aidShow(command.aid, { aunPath }) };
+        case 'show': {
+            const value = await deps.aidShow(command.aid, { aunPath });
+            return {
+                kind: command.kind,
+                aid: command.aid,
+                value: showView === 'redacted' ? redactAidShowResult(value) : value,
+            };
+        }
         case 'lookup':
             return { kind: command.kind, aid: command.aid, value: await deps.aidLookup(command.aid) };
         case 'agentmd.get':

package/dist/aun/aid/store.js

@@ -7,6 +7,7 @@ import { AUN_KEYSTORE_ENCRYPTION_SEED } from './encryption-seed-policy.js';
 // pages so a large backlog is drained without monopolizing the sync loop.
 const FULL_GROUP_PULL_MAX_PAGES = 10;
 const GROUP_PULL_PAGINATION_PATCH = Symbol('evolcore.groupPullPaginationPatch');
+const RELIABLE_MESSAGE_DELIVERY_PATCH = Symbol('evolcore.reliableMessageDeliveryPatch');
 /**
  * Slot 命名约定（基于 fastaun 0.4.3 隔离键语义）。
  *
@@ -106,6 +107,46 @@ export function enableFullGroupPullPagination(client) {
     target._pullGroupV2 = wrappedPull;
     return true;
 }
+/**
+ * Make SDK pull delivery wait until EvolCore's application handlers finish.
+ *
+ * fastaun 0.5.13 publishes message events with dispatcher.enqueue(), then
+ * advances its sequence tracker immediately.  That is a transport watermark,
+ * so a daemon restart can acknowledge a message before the application has
+ * durably claimed it.  The SDK keeps _publishAppEvent private, but the public
+ * client is intentionally adapted here in one place: preserve the SDK's
+ * normal publication path and wait for its dispatcher queue for pulled
+ * message events before the pull operation commits the sequence.
+ */
+export function enableReliableMessageDelivery(client) {
+    const target = client;
+    if (target[RELIABLE_MESSAGE_DELIVERY_PATCH])
+        return false;
+    const publish = target._publishAppEvent;
+    const dispatcher = target._dispatcher;
+    if (typeof publish !== 'function' || !dispatcher || typeof dispatcher.flush !== 'function')
+        return false;
+    const wrappedPublish = async function (event, payload, source, ...rest) {
+        const result = await publish.call(this, event, payload, source, ...rest);
+        // Pull/recovery paths must not advance SeqTracker until the application
+        // handlers have completed. Push delivery has no pull commit to gate and
+        // remains asynchronous as intended by the SDK.
+        const reliable = (event === 'message.received' || event === 'group.message_created')
+            && source !== 'push'
+            && source !== 'inline-push';
+        if (reliable)
+            await dispatcher.flush();
+        return result;
+    };
+    Object.defineProperty(target, RELIABLE_MESSAGE_DELIVERY_PATCH, {
+        configurable: false,
+        enumerable: false,
+        value: true,
+        writable: false,
+    });
+    target._publishAppEvent = wrappedPublish;
+    return true;
+}
 /** 加载本地 AID 值对象（用于离线签名/验签，无需连接）。load 失败抛 AidLoadError。 */
 export function loadAid(store, aid) {
     const r = store.load(aid);

package/dist/aun/msg/managed-operation.js

@@ -797,7 +797,12 @@ export function resolveManagedFsOperation(argv) {
         const destination = remoteOrError(positionals[1]);
         if (!('groupId' in destination))
             return destination;
-        const source = positionals[0].includes(':') ? remoteOrError(positionals[0]) : undefined;
+        // Windows absolute paths contain a drive-letter colon, but are local
+        // upload sources rather than managed group references.
+        const isWindowsAbsolutePath = /^[A-Za-z]:[\\/]/.test(positionals[0]);
+        const source = positionals[0].includes(':') && !isWindowsAbsolutePath
+            ? remoteOrError(positionals[0])
+            : undefined;
         if (source && !('groupId' in source))
             return source;
         if (source && source.groupId !== destination.groupId)

package/dist/aun/outbox.js

@@ -1,5 +1,6 @@
 import crypto from 'crypto';
-import { agentActivityOutboxPath, agentOutboxPath } from '../paths.js';
+import fs from 'fs';
+import { agentActivityOutboxPath, agentOutboxPath, legacyAgentActivityOutboxPath, legacyAgentOutboxPath, legacyFlatOutboxPath, } from '../paths.js';
 import { atomicRead, atomicWrite } from '../utils/atomic-write.js';
 import { isDeliveryTarget, isDeliveryTargetForChannel, sameDeliveryTarget } from '../core/message/message-utils.js';
 export const DEFAULT_OUTBOX_MAX_ENTRIES = 200;
@@ -10,11 +11,13 @@ const MAX_TERMINAL_ENTRIES_PER_AID = 100;
 const QUEUE_CONFIG = {
     default: {
         file: agentOutboxPath,
+        legacyFiles: aid => [legacyAgentOutboxPath(aid), legacyFlatOutboxPath(aid)],
         maxEntries: DEFAULT_OUTBOX_MAX_ENTRIES,
         defaultTtl: DEFAULT_OUTBOX_TTL_MS,
     },
     activity: {
         file: agentActivityOutboxPath,
+        legacyFiles: aid => [legacyAgentActivityOutboxPath(aid)],
         maxEntries: ACTIVITY_OUTBOX_MAX_ENTRIES,
         defaultTtl: ACTIVITY_OUTBOX_TTL_MS,
     },
@@ -28,6 +31,55 @@ export function defaultTtl(queue = 'default') {
 function outboxFile(aid, queue = 'default') {
     return queueConfig(queue).file(aid);
 }
+const migratedOutboxes = new Set();
+function parseEntriesFile(file) {
+    try {
+        const content = atomicRead(file)?.trim();
+        if (!content)
+            return [];
+        return content.split('\n').map(line => {
+            try {
+                return JSON.parse(line);
+            }
+            catch {
+                return null;
+            }
+        }).filter((entry) => entry !== null);
+    }
+    catch {
+        return [];
+    }
+}
+/** Import old outbox layouts without deleting their recovery copies. */
+function ensureOutboxMigrated(aid, queue) {
+    const canonical = outboxFile(aid, queue);
+    const key = canonical;
+    if (migratedOutboxes.has(key))
+        return;
+    const merged = fs.existsSync(canonical) ? parseEntriesFile(canonical) : [];
+    const ids = new Set(merged.map(entry => entry.id));
+    let changed = false;
+    for (const legacy of queueConfig(queue).legacyFiles(aid)) {
+        if (legacy === canonical || !fs.existsSync(legacy))
+            continue;
+        for (const entry of parseEntriesFile(legacy)) {
+            if (ids.has(entry.id))
+                continue;
+            ids.add(entry.id);
+            merged.push(entry);
+            changed = true;
+        }
+    }
+    if (!changed) {
+        migratedOutboxes.add(key);
+        return;
+    }
+    const content = merged.length > 0
+        ? merged.map(entry => JSON.stringify(entry)).join('\n') + '\n'
+        : '';
+    atomicWrite(canonical, content);
+    migratedOutboxes.add(key);
+}
 function entryQueue(entry) {
     return entry.queue ?? 'default';
 }
@@ -50,25 +102,11 @@ export function isDeliveryForChannel(value, channelId) {
     return isDeliveryTargetForChannel(value, channelId);
 }
 function readEntries(aid, queue = 'default') {
-    const file = outboxFile(aid, queue);
-    try {
-        const content = atomicRead(file)?.trim();
-        if (!content)
-            return [];
-        return content.split('\n').map(line => {
-            try {
-                return JSON.parse(line);
-            }
-            catch {
-                return null;
-            }
-        }).filter((e) => e !== null);
-    }
-    catch {
-        return [];
-    }
+    ensureOutboxMigrated(aid, queue);
+    return parseEntriesFile(outboxFile(aid, queue));
 }
 function writeEntries(aid, entries, queue = 'default') {
+    ensureOutboxMigrated(aid, queue);
     const file = outboxFile(aid, queue);
     const boundedEntries = trimFinalEntries(entries);
     const content = boundedEntries.length > 0

package/dist/aun/rpc/client.js

@@ -9,11 +9,10 @@ export async function createShortConnection(aid, opts) {
                 return client.call(method, params);
             },
             group: {
-                inviteMember: (params) => client.group.inviteMember(params),
-                listMyInvites: (params) => client.group.listMyInvites(params),
-                acceptInvite: (params) => client.group.acceptInvite(params),
-                rejectInvite: (params) => client.group.rejectInvite(params),
-                revokeInvite: (params) => client.group.revokeInvite(params),
+                createInviteCode: (params) => client.group.createInviteCode(params),
+                listInviteCodes: (params) => client.group.listInviteCodes(params),
+                useInviteCode: (params) => client.group.useInviteCode(params),
+                revokeInviteCode: (params) => client.group.revokeInviteCode(params),
             },
             async close() {
                 try {