evolcore 0.0.23 → 0.0.25

package/dist/core/command/agent-control.js

@@ -1,15 +1,16 @@
-import { agentCreateNonInteractive, agentDelete, agentEnable, agentDisable, agentList, agentShow, agentSet, agentReload, } from '../../cli/agent.js';
+import { agentDelete, agentEnable, agentDisable, agentList, agentShow, agentSet, agentReload, } from '../../cli/agent.js';
+import { agentCreateNonInteractive } from '../../cli/agent-create.js';
 import { logger } from '../../utils/logger.js';
 import { resolvePaths, resolveRoot } from '../../paths.js';
 import path from 'path';
 import { ConfigTarget, ensureFile as cfgEnsure, read as cfgRead, write as cfgWrite, } from '../../config/config-manager.js';
 import { CreateStatusWriter, readCreateStatus } from '../message/create-status.js';
 import { agentProjectRootFromDefaults, deriveAgentProjectPath } from '../../utils/project-path.js';
-import { uploadAvatar } from '../../utils/avatar-upload.js';
+import { uploadAvatar, uploadAvatarUrl } from '../../utils/avatar-upload.js';
 import { agentmdGet, agentmdPut, updateAgentMdFrontmatterName } from '../../aun/aid/agentmd.js';
 import { isValidAid } from '../../aun/aid/validation.js';
 import { isSupportedBaseagent } from '../../agents/baseagent.js';
-const SUPPORTED_AGENT_PATCH_FIELDS = new Set(['aid', 'name', 'avatar', 'active_baseagent', 'baseagents', 'projects', 'owners', 'chatmode', 'channels', 'channelOwners']);
+const SUPPORTED_AGENT_PATCH_FIELDS = new Set(['aid', 'name', 'active_baseagent', 'baseagents', 'projects', 'owners', 'chatmode', 'channels', 'channelOwners']);
 const HIDDEN_VALUE = '[hidden]';
 const SENSITIVE_CONFIG_KEYS = new Set([
     'apikey',
@@ -47,6 +48,42 @@ function classifyAgentMdError(error) {
         return 'INVALID_ARGS';
     return 'UPLOAD_FAILED';
 }
+/** Canonical avatar mutation for the `aid.avatar` menu action. */
+export async function execAidAvatar(args) {
+    const a = args ?? {};
+    const aid = typeof a.aid === 'string' ? a.aid.trim().replace(/^@/, '') : '';
+    if (!aid)
+        return { error: '缺少 aid', code: 'INVALID_ARGS' };
+    if (!isValidAid(aid))
+        return { error: `无效 aid: ${aid}`, code: 'INVALID_ARGS' };
+    const hasData = a.data !== undefined;
+    const hasUrl = a.url !== undefined;
+    if ((hasData ? 1 : 0) + (hasUrl ? 1 : 0) > 1) {
+        return { error: '头像数据源必须在 data 与 url 中二选一', code: 'INVALID_ARGS' };
+    }
+    if (!hasData && !hasUrl) {
+        return { error: '缺少头像数据源：需要 data 或 url', code: 'INVALID_ARGS' };
+    }
+    const result = hasUrl
+        ? await uploadAvatarUrl(aid, a.url, { aunPath: resolveRoot() })
+        : await uploadAvatar(aid, a.data, { aunPath: resolveRoot() });
+    if (!result.ok) {
+        return { error: `头像上传失败: ${result.error}`, code: result.code ?? 'UPLOAD_FAILED' };
+    }
+    return {
+        data: {
+            aid,
+            avatar: result.publicUrl,
+            objectKey: result.objectKey,
+            sha256: result.sha256,
+            mime: result.mime,
+            width: result.width,
+            height: result.height,
+            aspectRatio: result.aspectRatio,
+            saved: true,
+        },
+    };
+}
 async function updateAgentMdName(aid, value) {
     const name = typeof value === 'string' ? value.trim() : '';
     if (!name)
@@ -297,6 +334,8 @@ async function runCreateInBackground(opts, w, service) {
         const createOptions = {
             aid: opts.aid, name: opts.name, baseagent: opts.baseagent,
             project: opts.project, owner: opts.owner,
+            description: opts.description,
+            tags: opts.tags,
             onPhase: (phase, state, detail) => {
                 if (state === 'begin') {
                     curPhase = phase;
@@ -393,6 +432,10 @@ export async function execAgentAction(action, args, peerId, eventBus, service) {
         const model = typeof a.model === 'string' && a.model.trim() ? a.model.trim() : undefined;
         const rawEffort = typeof a.effort === 'string' && a.effort.trim() ? a.effort.trim() : undefined;
         const effort = rawEffort && rawEffort !== 'auto' ? rawEffort : undefined;
+        const description = typeof a.description === 'string' && a.description.trim()
+            ? a.description.trim()
+            : undefined;
+        const tags = Array.isArray(a.tags) ? a.tags : undefined;
         // D3: accepted=true 必须意味着后续 query 能查到该 AID 的创建状态。
         let progressWriter;
         try {
@@ -405,7 +448,7 @@ export async function execAgentAction(action, args, peerId, eventBus, service) {
         void runCreateInBackground({
             aid: a.aid, name: a.name, baseagent: a.baseagent,
             project: a.project, owner,
-            model, effort, chatmode: a.chatmode,
+            model, effort, description, tags, chatmode: a.chatmode,
             eventBus,
         }, progressWriter, service).catch(e => logger.error(`[agent-control] runCreateInBackground unhandled ${a.aid}: ${e?.message || e}`));
         return { data: { accepted: true, aid: a.aid } };
@@ -456,14 +499,6 @@ export async function execAgentAction(action, args, peerId, eventBus, service) {
     if (action === 'update') {
         const result = await execAgentUpdate(a);
         if (!('error' in result)) {
-            if (result.data?.avatar) {
-                eventBus?.publish({
-                    type: 'agent:avatar_updated',
-                    aid: a.aid,
-                    avatar: result.data.avatar,
-                    timestamp: Date.now(),
-                });
-            }
             eventBus?.publish({
                 type: 'agent:updated',
                 aid: a.aid,
@@ -496,12 +531,6 @@ export async function execAgentUpdate(args) {
     if (p.aid !== undefined) {
         return { error: 'aid 不可修改（AUN 身份绑定，如需换 AID 请删除后重建）', code: 'INVALID_ARGS' };
     }
-    if (p.avatar !== undefined) {
-        const otherKeys = Object.keys(p).filter(k => k !== 'avatar');
-        if (otherKeys.length > 0) {
-            return { error: 'avatar 不能与其他 patch 字段同时提交，请拆分为两次 update', code: 'INVALID_ARGS' };
-        }
-    }
     if (p.name !== undefined) {
         const otherKeys = Object.keys(p).filter(k => k !== 'name');
         if (otherKeys.length > 0) {
@@ -517,13 +546,6 @@ export async function execAgentUpdate(args) {
     const config = cfgRead(ConfigTarget.Agent, { self: a.aid });
     if (!config)
         return { error: `Agent "${a.aid}" not found`, code: 'NOT_FOUND' };
-    if (p.avatar !== undefined) {
-        const result = await uploadAvatar(a.aid, p.avatar, { aunPath: resolveRoot() });
-        if (!result.ok) {
-            return { error: `头像上传失败: ${result.error}`, code: result.code ?? 'UPLOAD_FAILED' };
-        }
-        return { data: { aid: a.aid, avatar: result.publicUrl, saved: true } };
-    }
     let touched = false;
     const data = { aid: a.aid };
     const hasConfigPatch = p.active_baseagent !== undefined || p.baseagents !== undefined || p.projects !== undefined || p.owners !== undefined || p.chatmode !== undefined || p.channels !== undefined || p.channelOwners !== undefined;
@@ -559,7 +581,19 @@ export async function execAgentUpdate(args) {
             delete config.projects;
     }
     if (p.owners !== undefined) {
-        config.owners = p.owners;
+        if (!Array.isArray(p.owners) || p.owners.length === 0) {
+            return { error: 'owners must contain at least one owner', code: 'LAST_OWNER_PROTECTED' };
+        }
+        const owners = [];
+        for (const rawOwner of p.owners) {
+            if (typeof rawOwner !== 'string' || !rawOwner.trim() || !isValidAid(rawOwner.trim())) {
+                return { error: `Invalid owner AID: ${JSON.stringify(rawOwner)}`, code: 'INVALID_ARGS' };
+            }
+            const owner = rawOwner.trim();
+            if (!owners.includes(owner))
+                owners.push(owner);
+        }
+        config.owners = owners;
         touched = true;
     }
     if (p.chatmode !== undefined) {

package/dist/core/command/cli-intent-parser.js

@@ -156,6 +156,14 @@ function parseStatsCommand(argv, source) {
 }
 function parseAgentCommand(argv, source) {
     const subcmd = argv[1];
+    if (subcmd === 'persona') {
+        const tail = argv.at(-2) === '--format' && argv.at(-1) === 'json' ? argv.slice(0, -2) : argv;
+        const isShow = tail.length === 3 && tail[2] === 'show';
+        const isWrite = tail.length === 4 && (tail[2] === '--text' || tail[2] === '--file');
+        return isShow || isWrite
+            ? recognized('agent.persona', 'agent', source, {}, argv)
+            : raw(source, argv, 'Invalid agent persona command');
+    }
     const parsed = parseArgs(argv.slice(2));
     const args = parsed.args;
     if (parsed.positionals.length > 0)
@@ -170,6 +178,16 @@ function parseAgentCommand(argv, source) {
 }
 function parseAidCommand(argv, source) {
     const subcmd = argv[1];
+    if (subcmd === 'avatar') {
+        const tail = argv.slice(2);
+        const aid = tail[0];
+        const sourceFlag = tail[1];
+        if (!aid || (sourceFlag !== '--file' && sourceFlag !== '--url') || !tail[2] || tail[2].startsWith('-')
+            || (tail.length !== 3 && !(tail.length === 5 && tail[3] === '--format' && tail[4] === 'json'))) {
+            return raw(source, argv, 'Invalid aid avatar command');
+        }
+        return recognized('ec.aid.avatar', 'agent', source, { aid, ...(sourceFlag === '--file' ? { file: tail[2] } : { url: tail[2] }) }, argv, true);
+    }
     const parsed = parseArgs(argv.slice(2));
     const args = parsed.args;
     if (parsed.positionals.length > 0)

package/dist/core/command/command-handler.js

@@ -22,7 +22,7 @@ import { splitConfigBatchGetArgv } from '../../cli/cli-argv.js';
 import { auditCommandAuthorization, auditFullAccessEvent, hashArgv } from '../auth/authorization-audit.js';
 import { executeResolvedContactCommand, resolveContactCommand } from '../../config/contact-operation-service.js';
 import { hasTrustedFullAccessDelegation, trustedExecutionIdentityInput } from '../auth/agent-delegation.js';
-import { executeManagedAidOperation, ManagedAidOperationError, resolveManagedAidOperation, } from '../../aun/aid/managed-operation.js';
+import { executeManagedAidOperation, ManagedAidOperationError, managedAidShowViewForRole, resolveManagedAidOperation, } from '../../aun/aid/managed-operation.js';
 import { executeManagedGroupOperation, isManagedGroupRelationRead, ManagedGroupOperationError, resolveManagedGroupOperation, executeManagedMsgOperation, ManagedMsgOperationError, resolveManagedMsgOperation, executeManagedFsOperation, ManagedFsOperationError, resolveManagedFsOperation, } from '../../aun/msg/managed-operation.js';
 import { authorizeOperation, buildAuthSubject } from '../auth/auth-gateway.js';
 import { isHClassPath, isLClassPath, isSameOrDescendant } from '../permission/protected-paths.js';
@@ -108,6 +108,7 @@ export class CommandHandler {
     interactionRouter;
     statsCollector;
     agentMap;
+    legacySingleRunnerMode;
     primaryRunnerKey;
     agentRegistry;
     agentApplicationService;
@@ -131,23 +132,42 @@ export class CommandHandler {
      * different backend; that would corrupt session metadata.
      */
     getAgent(channel, baseagent) {
-        if (channel && baseagent) {
+        const requestedBaseagent = typeof baseagent === 'string' ? baseagent.trim() : '';
+        // Support callers that intentionally provide a single-runner map keyed by
+        // the backend name. This exact lookup does not select another agent.
+        if (requestedBaseagent && this.agentMap.has(requestedBaseagent)) {
+            return this.agentMap.get(requestedBaseagent);
+        }
+        // A caller that passed one runner explicitly has already selected the
+        // backend; this compatibility path does not exist for multi-agent maps.
+        if (this.legacySingleRunnerMode && this.agentMap.size === 1
+            && this.agentMap.values().next().value?.name === requestedBaseagent) {
+            return this.agentMap.values().next().value;
+        }
+        if (channel && requestedBaseagent) {
             const owner = this.agentRegistry?.resolveByChannel(channel);
             const evolName = owner?.name || '<unknown>';
-            const key = `${evolName}::${baseagent}`;
+            const key = `${evolName}::${requestedBaseagent}`;
             if (this.agentMap.has(key))
                 return this.agentMap.get(key);
             if (owner) {
-                throw new BaseagentRunnerUnavailableError(evolName, baseagent, this.getAvailableBaseagentsForOwner(evolName));
+                throw new BaseagentRunnerUnavailableError(evolName, requestedBaseagent, this.getAvailableBaseagentsForOwner(evolName));
             }
-            const globalRunner = [...this.agentMap.entries()]
-                .find(([runnerKey]) => runnerKey === baseagent || runnerKey.endsWith(`::${baseagent}`));
-            if (globalRunner)
-                return globalRunner[1];
-        }
-        if (this.agentMap.has(this.primaryRunnerKey))
-            return this.agentMap.get(this.primaryRunnerKey);
-        return this.agentMap.values().next().value;
+            const matches = [...this.agentMap.entries()]
+                .filter(([runnerKey]) => runnerKey.endsWith(`::${requestedBaseagent}`));
+            if (matches.length === 1)
+                return matches[0][1];
+            logger.error(`[RunnerLookup] unavailable channel=${channel ?? '<none>'} baseagent=${requestedBaseagent} owner=${evolName} keys=${[...this.agentMap.keys()].join(',')}`);
+            throw new BaseagentRunnerUnavailableError('<unknown>', requestedBaseagent, []);
+        }
+        if (requestedBaseagent) {
+            const matches = [...this.agentMap.entries()]
+                .filter(([runnerKey]) => runnerKey.endsWith(`::${requestedBaseagent}`));
+            if (matches.length === 1)
+                return matches[0][1];
+        }
+        logger.error(`[RunnerLookup] unavailable channel=${channel ?? '<none>'} baseagent=${requestedBaseagent || '<missing>'} keys=${[...this.agentMap.keys()].join(',')}`);
+        throw new BaseagentRunnerUnavailableError('<unknown>', requestedBaseagent || '<missing>', []);
     }
     getAvailableBaseagentsForOwner(evolName) {
         const prefix = `${evolName}::`;
@@ -205,11 +225,13 @@ export class CommandHandler {
         this.eventBus = eventBus;
         if (agentRunnerOrMap instanceof Map) {
             this.agentMap = agentRunnerOrMap;
+            this.legacySingleRunnerMode = false;
             this.primaryRunnerKey = primaryRunnerKey || '<unknown>::claude';
         }
         else {
             // 测试 / 单 runner 路径：占位 agent name 用 '<unknown>'
             this.agentMap = new Map([[`<unknown>::${agentRunnerOrMap.name}`, agentRunnerOrMap]]);
+            this.legacySingleRunnerMode = true;
             this.primaryRunnerKey = `<unknown>::${agentRunnerOrMap.name}`;
         }
     }
@@ -424,13 +446,13 @@ export class CommandHandler {
             return fallback;
         }
     }
-    validateTriggerPermissionModeForRole(mode, isAdmin, role, selfAid, isDaemonOwner = false) {
+    validateTriggerPermissionModeForRole(mode, isAdmin, role, selfAid, isDaemonOwner = false, canApprovePersistentFullAccess = isDaemonOwner) {
         if (!mode)
             return undefined;
         if (mode === 'fullaccess') {
             if (!isFullAccessEnabled())
                 return 'fullaccess 功能未启用';
-            return isDaemonOwner ? undefined : '无权限：只有 daemon-owner 可以配置 fullaccess Trigger';
+            return canApprovePersistentFullAccess ? undefined : '无权限：只有 daemon-owner 可以配置 fullaccess Trigger';
         }
         if (!role) {
             if (mode === 'bypass' && !isAdmin)
@@ -486,7 +508,9 @@ export class CommandHandler {
                 return modelDecision.message || '当前角色不允许使用该 Trigger 模型';
         }
         if (definition.execution.effort) {
-            const base = executionBaseagent || 'claude';
+            if (!executionBaseagent)
+                return '无法确定 Trigger 会话的 baseagent';
+            const base = executionBaseagent;
             const effortDecision = validateRuntimeStringFieldOverride({
                 selfAid: definition.agentAid,
                 role,
@@ -575,7 +599,7 @@ export class CommandHandler {
         } : undefined;
         const permissionMode = this.triggerPermissionFromParsed(parsed);
         const triggerRole = this.triggerRoleContext(schedulerAid, channel, peerId, chatType);
-        const permissionError = this.validateTriggerPermissionModeForRole(permissionMode, isAdmin, triggerRole.role, schedulerAid, isDaemonOwner);
+        const permissionError = this.validateTriggerPermissionModeForRole(permissionMode, isAdmin, triggerRole.role, schedulerAid, isDaemonOwner, canApprovePersistentFullAccess);
         if (permissionError)
             return { error: permissionError };
         if (permissionMode === 'fullaccess' && !canApprovePersistentFullAccess) {
@@ -604,7 +628,7 @@ export class CommandHandler {
                 };
             }
         }
-        const authorizedBy = permissionMode === 'fullaccess' && isDaemonOwner
+        const authorizedBy = permissionMode === 'fullaccess' && canApprovePersistentFullAccess
             ? this.canonicalDaemonOwnerId(schedulerAid, channel, peerId, chatType)
             : undefined;
         const definition = {
@@ -1000,8 +1024,8 @@ export class CommandHandler {
         return await menuExecMenuQuery.call(this, cmd, channel, channelId, userId, args, explicitChatType, fromControlChannel, overrideIdentity, authSubject, source);
     }
     /** menu.update — 写入新值。 */
-    async execMenuUpdate(cmd, value, channel, channelId, userId, overrideIdentity, fromControlChannel = false, args, authSubject, source = 'menu') {
-        return await menuExecMenuUpdate.call(this, cmd, value, channel, channelId, userId, overrideIdentity, fromControlChannel, args, authSubject, source);
+    async execMenuUpdate(cmd, value, channel, channelId, userId, overrideIdentity, fromControlChannel = false, args, authSubject, source = 'menu', transportReplyContext) {
+        return await menuExecMenuUpdate.call(this, cmd, value, channel, channelId, userId, overrideIdentity, fromControlChannel, args, authSubject, source, transportReplyContext);
     }
     /** menu.action — 触发动词。 */
     async execMenuAction(cmd, action, args, channel, channelId, userId, overrideIdentity, explicitChatType, requestId, fromControlChannel = false, authSubject, source = 'menu', transportReplyContext, deferSideEffect) {
@@ -1103,7 +1127,7 @@ export class CommandHandler {
     /** 把 menu.action 委派给已有 slash 命令处理逻辑，把 OutboundPayload 包成结构化结果。 */
     async delegateAsAction(action, slashCmd, channel, channelId, userId, opts = {}) {
         try {
-            const result = await this._handleInternal(slashCmd, channel, channelId, undefined, userId, undefined, undefined, undefined, undefined, undefined, opts.overrideIdentity, opts.authSubject);
+            const result = await this._handleInternal(slashCmd, channel, channelId, undefined, userId, opts.threadId, opts.chatType, undefined, undefined, undefined, opts.overrideIdentity, opts.authSubject, opts.replyContext);
             if (result == null) {
                 // null / undefined: 命令未识别或前置守卫拦截（如 idle 检查），视为失败
                 return { error: '命令未执行（可能被前置守卫拦截）', code: 'EXEC_FAILED' };
@@ -1375,17 +1399,17 @@ export class CommandHandler {
             const nextStr = reg.trigger.nextFireAt ? new Date(reg.trigger.nextFireAt).toLocaleString() : '未计算';
             return `✅ 触发器已注册：**${reg.trigger.name}**\n下次触发：${nextStr}`;
         }
-        return `❌ 未知子命令。用法：
-/trigger — 查看活跃触发器
-/trigger list [--all] — 查看所有触发器
-/trigger create <参数> — 创建触发器（set 为兼容别名）
-/trigger update <名称|ID> <参数> — 修改触发器
-常用参数：--delay/--at/--cron/--every、--prompt、--description、--model、--effort、--permission（省略则继承；update 可用 inherit 清除覆盖）、--feedback、--target-channel/--target-channel-id、--trigger-thread、--baseagent、--on-error、--retry-attempts/--retry-backoff、--script-runtime/--script-args/--script-timeout
-/trigger enable <名称|ID> — 启用触发器
-/trigger disable <名称|ID> — 暂停触发器
-/trigger show <名称|ID> — 查看触发器详情
-/trigger run <名称|ID> [--dry-run] — 手动触发
-/trigger cancel <名称|ID> — 禁用触发器（disable 的兼容别名）
+        return `❌ 未知子命令。用法：
+/trigger — 查看活跃触发器
+/trigger list [--all] — 查看所有触发器
+/trigger create <参数> — 创建触发器（set 为兼容别名）
+/trigger update <名称|ID> <参数> — 修改触发器
+常用参数：--delay/--at/--cron/--every、--prompt、--description、--model、--effort、--permission（省略则继承；update 可用 inherit 清除覆盖）、--feedback、--target-channel/--target-channel-id、--trigger-thread、--baseagent、--on-error、--retry-attempts/--retry-backoff、--script-runtime/--script-args/--script-timeout
+/trigger enable <名称|ID> — 启用触发器
+/trigger disable <名称|ID> — 暂停触发器
+/trigger show <名称|ID> — 查看触发器详情
+/trigger run <名称|ID> [--dry-run] — 手动触发
+/trigger cancel <名称|ID> — 禁用触发器（disable 的兼容别名）
 /trigger delete <名称|ID> — 删除触发器`;
     }
     async handleTrigger(content, channel, channelId, peerId, isAdmin, messageId, chatType, threadId, isDaemonOwner = false, canApprovePersistentFullAccess = isDaemonOwner) {
@@ -1432,7 +1456,7 @@ export class CommandHandler {
             return { ok: false, error: err?.message || String(err) };
         }
         if (updated.execution.permissionMode === 'fullaccess') {
-            if (!isDaemonOwner) {
+            if (!isDaemonOwner && !canApprovePersistentFullAccess) {
                 return { ok: false, code: 'FORBIDDEN', error: '无权限：只有 daemon-owner 可以配置 fullaccess Trigger' };
             }
             if (!canApprovePersistentFullAccess) {
@@ -1455,7 +1479,7 @@ export class CommandHandler {
             return { ok: false, error: '无权限：只有 owner/admin 可以修改 script trigger' };
         }
         const triggerRole = this.triggerRoleContext(definition.agentAid, definition.origin?.channelKey || channel, definition.origin?.peerId || peerId);
-        const permissionError = this.validateTriggerPermissionModeForRole(updated.execution.permissionMode, isAdmin, triggerRole.role, definition.agentAid, isDaemonOwner);
+        const permissionError = this.validateTriggerPermissionModeForRole(updated.execution.permissionMode, isAdmin, triggerRole.role, definition.agentAid, isDaemonOwner, canApprovePersistentFullAccess);
         if (permissionError) {
             return {
                 ok: false,
@@ -1922,7 +1946,10 @@ export class CommandHandler {
         if (sessionSelfAid && sessionSelfAid !== grantSelfAid) {
             return { ok: false, code: 'INVALID_DELEGATION', error: 'Delegation self agent does not match the active session' };
         }
-        if (parsed.command.aid !== grantSelfAid && !hasTrustedFullAccessDelegation(delegation.grant)) {
+        const requiresSelfAid = parsed.command.kind === 'show' || parsed.command.kind === 'agentmd.put' || parsed.command.kind === 'avatar';
+        if (requiresSelfAid
+            && parsed.command.aid !== grantSelfAid
+            && (parsed.command.kind === 'avatar' || !hasTrustedFullAccessDelegation(delegation.grant))) {
             return { ok: false, code: 'SCOPE_MISMATCH', error: 'Only the current Agent AID can be targeted' };
         }
         let conversationId;
@@ -1961,8 +1988,88 @@ export class CommandHandler {
         });
         if (!decision.allow)
             return { ok: false, code: decision.code, error: decision.reason };
+        let avatarBuffer;
+        if (parsed.command.kind === 'avatar' && parsed.command.filePath) {
+            const filePath = String(parsed.command.filePath || '').trim();
+            if (typeof session.projectPath !== 'string' || !session.projectPath.trim()) {
+                return { ok: false, code: 'INVALID_AVATAR_PATH', error: 'Avatar file requires a current session project path' };
+            }
+            const projectPath = path.resolve(session.projectPath);
+            const managedTempPath = this.getManagedSessionTempDir(session);
+            const resolvedPath = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(projectPath, filePath);
+            const allowedRoots = [projectPath, managedTempPath].filter((value) => !!value);
+            if (!filePath || !allowedRoots.some(root => isSameOrDescendant(resolvedPath, root))) {
+                return { ok: false, code: 'INVALID_AVATAR_PATH', error: 'Avatar file must be inside the current session project or managed TMPDIR' };
+            }
+            if (isHClassPath(resolvedPath) || isLClassPath(resolvedPath)) {
+                return { ok: false, code: 'PROTECTED_AVATAR_PATH', error: 'Avatar file cannot be read from a protected EvolCore path' };
+            }
+            let fd;
+            try {
+                const realProjectPath = fs.realpathSync(projectPath);
+                const realPath = fs.realpathSync(resolvedPath);
+                let realManagedTempPath;
+                try {
+                    realManagedTempPath = managedTempPath ? fs.realpathSync(managedTempPath) : undefined;
+                }
+                catch { }
+                const realAllowedRoots = [realProjectPath, realManagedTempPath].filter((value) => !!value);
+                if (!realAllowedRoots.some(root => isSameOrDescendant(realPath, root))) {
+                    return { ok: false, code: 'INVALID_AVATAR_PATH', error: 'Avatar file resolves outside the current session project or managed TMPDIR' };
+                }
+                if (isHClassPath(realPath) || isLClassPath(realPath)) {
+                    return { ok: false, code: 'PROTECTED_AVATAR_PATH', error: 'Avatar file cannot be read from a protected EvolCore path' };
+                }
+                const stat = fs.lstatSync(resolvedPath);
+                if (stat.isSymbolicLink() || !stat.isFile()) {
+                    return { ok: false, code: 'INVALID_AVATAR_FILE', error: 'Avatar source must be a regular non-symlink file' };
+                }
+                if (realManagedTempPath && isSameOrDescendant(realPath, realManagedTempPath) && stat.nlink > 1) {
+                    return { ok: false, code: 'INVALID_AVATAR_PATH', error: 'Avatar source cannot be a hard link inside managed TMPDIR' };
+                }
+                if (stat.size < 1 || stat.size > 500 * 1024) {
+                    return { ok: false, code: 'INVALID_AVATAR_FILE', error: 'Avatar source must be between 1 byte and 500KB' };
+                }
+                // Open the user-supplied node with no-follow semantics after checking
+                // its canonical ancestors; the bytes passed to the uploader come from
+                // this descriptor rather than from a second path lookup.
+                fd = fs.openSync(resolvedPath, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
+                const finalStat = fs.fstatSync(fd);
+                if (!finalStat.isFile() || finalStat.size < 1 || finalStat.size > 500 * 1024 || finalStat.nlink !== stat.nlink) {
+                    return { ok: false, code: 'INVALID_AVATAR_FILE', error: 'Avatar source changed during validation' };
+                }
+                avatarBuffer = fs.readFileSync(fd);
+            }
+            catch (error) {
+                return { ok: false, code: 'INVALID_AVATAR_FILE', error: error instanceof Error ? error.message : String(error) };
+            }
+            finally {
+                if (fd !== undefined)
+                    fs.closeSync(fd);
+            }
+        }
         try {
-            return { ok: true, result: await executeManagedAidOperation(parsed.command) };
+            const result = await executeManagedAidOperation(parsed.command, {
+                showView: managedAidShowViewForRole(subject.role),
+                ...(avatarBuffer ? { avatarBuffer } : {}),
+            });
+            if (result.kind === 'avatar' && result.avatar) {
+                this.eventBus.publish({
+                    type: 'agent:avatar_updated',
+                    aid: result.aid,
+                    avatar: result.avatar,
+                    ...(result.sha256 ? { sha256: result.sha256 } : {}),
+                    ...(result.mime ? { mime: result.mime } : {}),
+                    ...(result.width ? { width: result.width } : {}),
+                    ...(result.height ? { height: result.height } : {}),
+                    ...(result.aspectRatio ? { aspectRatio: result.aspectRatio } : {}),
+                    timestamp: Date.now(),
+                });
+            }
+            return {
+                ok: true,
+                result,
+            };
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
@@ -2188,7 +2295,14 @@ export class CommandHandler {
             if (!hasTrustedFullAccessDelegation(grant) && (grant.channelType !== 'aun' || grant.chatType !== 'private')) {
                 return { ok: false, code: 'SCOPE_MISMATCH', error: 'Managed msg reads require the current AUN private relation' };
             }
-            if (!hasTrustedFullAccessDelegation(grant) && parsed.command.target !== conversationId) {
+            // A management role may read history for any peer, one peer per query.
+            // `issuedRole` is resolved daemon-side from the persisted relation
+            // config, so it cannot be spoofed by the calling task. Narrower roles
+            // stay pinned here, and authorizeOperation below remains the authority
+            // for every role (member carries currentRelationOnly; visitor is denied).
+            const mayReadCrossPeer = hasTrustedFullAccessDelegation(grant)
+                || (parsed.command.kind === 'history' && isAdminRole(grant.issuedRole));
+            if (!mayReadCrossPeer && parsed.command.target !== conversationId) {
                 return { ok: false, code: 'SCOPE_MISMATCH', error: 'Only the current AUN private relation can be targeted' };
             }
         }
@@ -2458,6 +2572,29 @@ export class CommandHandler {
         });
         if (!ctlDecision.allow)
             return { ok: false, code: ctlDecision.code, error: ctlDecision.reason };
+        if (cmd.startsWith('/status ') && cmd !== '/status --format json') {
+            return { ok: false, code: 'INVALID_ARGUMENT', error: 'status 仅支持可选参数 --format json' };
+        }
+        if (cmd === '/status --format json') {
+            const context = {
+                selfAid: grantSelfAid,
+                sessionId,
+                taskId: grant.taskId,
+                ...(grant.messageId ? { messageId: grant.messageId } : {}),
+                baseagent: session.baseagent,
+                channel: grant.channelType,
+                channelKey: grant.channel,
+                channelId: conversationId,
+                chatType: grant.chatType,
+                peerKey: grant.peerKey,
+                peerId: conversationId,
+                peerRole: ctlSubject.role,
+                permissionMode: grant.permissionMode ?? ctlSubject.permissionMode,
+                projectPath: path.resolve(session.projectPath),
+                ...(grant.sessionRuntimeDir ? { tmpDir: grant.sessionRuntimeDir } : {}),
+            };
+            return { ok: true, result: JSON.stringify(context, null, 2), data: context };
+        }
         if (cmd.startsWith('/model info ')) {
             const modelId = cmd.slice('/model info '.length).trim();
             if (!modelId || /\s/.test(modelId))

package/dist/core/command/menu-catalog.js

@@ -79,10 +79,12 @@ const ENTRIES = [
     { id: 'chatmode.agent.nothuman', type: 'setting', contexts: ['agent'], name: 'chatmode', label: 'Agent 非人类对话模式', section: 'agent', order: 43, query: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.current', scope: 'agent' }, options: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.current', scope: 'agent' }, update: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.update', scope: 'agent' }, control: 'select' },
     { id: 'activity.agent', type: 'setting', contexts: ['agent'], name: 'activity', label: 'Agent 中间输出', section: 'agent', order: 50, query: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.current', scope: 'agent' }, options: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.current', scope: 'agent' }, update: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.update', scope: 'agent' }, control: 'select' },
     { id: 'observable.agent', type: 'setting', contexts: ['agent'], name: 'observable', label: '观察模式', section: 'agent', order: 60, query: { cmd: '/observable', operation: 'observable.current', scope: 'agent' }, update: { cmd: '/observable', operation: 'observable.update', scope: 'agent' }, valueSchema: { type: 'boolean' }, control: 'toggle' },
+    { id: 'aid.avatar', type: 'action', contexts: ['agent'], name: 'aid', label: '更换头像', section: 'agent', order: 70, action: { cmd: '/aid', action: 'avatar', operation: 'ec.aid.avatar', scope: 'agent' }, valueSchema: { type: 'object', properties: { data: { type: 'string' }, url: { type: 'string', format: 'uri' } }, oneOf: [{ required: ['data'] }, { required: ['url'] }] }, control: 'action' },
     { id: 'system.status', type: 'list', contexts: ['process'], name: 'system', label: '系统状态', section: 'process', order: 10, query: { cmd: '/system', operation: 'system.status', scope: 'process' }, control: 'list' },
     { id: 'system.monitor', type: 'list', contexts: ['process'], name: 'system', label: '运行监控快照', section: 'process', order: 11, query: { cmd: '/system', args: { view: 'monitor' }, operation: 'system.status', scope: 'process' }, control: 'list' },
     { id: 'system.logs', type: 'list', contexts: ['process'], name: 'system', label: 'Daemon 日志', section: 'process', order: 12, query: { cmd: '/system', args: { view: 'logs' }, operation: 'system.status', scope: 'process' }, options: { cmd: '/system', args: { option: 'logs' }, operation: 'system.status', scope: 'process', mode: 'dynamic' }, control: 'list' },
     { id: 'config.rawFile', type: 'list', contexts: ['process'], name: 'config', label: '原始配置文件', section: 'process', order: 13, query: { cmd: '/config', args: { view: 'rawFile' }, operation: 'config.read', scope: 'process' }, options: { cmd: '/config', args: { option: 'rawFile' }, operation: 'config.read', scope: 'process', mode: 'dynamic' }, control: 'list' },
+    { id: 'baseagent.models', type: 'list', contexts: ['process'], name: 'baseagent-models', label: 'Baseagent 模型目录', section: 'process', order: 41, query: { cmd: '/baseagent-models', args: { baseagent: 'claude' }, operation: 'baseagent.models.list', scope: 'process' }, control: 'list' },
     { id: 'system.restart', type: 'action', contexts: ['process'], name: 'system', label: '重启服务', section: 'process', order: 20, action: { cmd: '/system', action: 'restart', operation: 'system.restart', scope: 'process' } },
     { id: 'system.upgrade', type: 'action', contexts: ['process'], name: 'system', label: '升级服务', section: 'process', order: 30, action: { cmd: '/system', action: 'upgrade', operation: 'system.upgrade', scope: 'process' } },
     { id: 'agent.list', type: 'list', contexts: ['process'], name: 'agent', label: 'Agent 列表', section: 'process', order: 40, options: { cmd: '/agent', args: { options: 'all' }, operation: 'agent.list', scope: 'control', mode: 'dynamic' }, control: 'list' },
@@ -110,7 +112,8 @@ export async function resolveMenuCatalogContext(input) {
         throw { code: 'FORBIDDEN', message: 'control catalog context requires a control subject' };
     }
     if (requested === 'process') {
-        if (input.channelScope !== 'control' || !subject.fromControlChannel || !subject.isDaemonOwner) {
+        if (input.channelScope !== 'control' || !subject.fromControlChannel
+            || (!subject.isDaemonOwner && subject.processRole !== 'daemon-service')) {
             throw {
                 code: 'NOT_ALLOWED',
                 message: formatAuthorizationDenial('Process context requires a DaemonOwner control subject.', 'DAEMON_OWNER_REQUIRED'),