evolcore 0.0.24 → 0.0.25

package/dist/core/auth/operation-authorizer.js

@@ -192,7 +192,8 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
         };
     }
     // Any authenticated role may inspect the current Agent through the daemon's
-    // redacted view. Cross-Agent inspection is handled by requiresDaemonOwner().
+    // redacted view. Management roles may inspect another Agent's redacted view;
+    // mutation and reload remain target-scoped below.
     if (operation === 'agent.show' && isCurrentAgentTarget(ctx)) {
         return {
             allow: true,
@@ -203,6 +204,17 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
             matchedRule: 'self-agent-read',
         };
     }
+    if (operation === 'agent.persona' && isCurrentAgentTarget(ctx)
+        && (role === 'owner' || hasDaemonOwnerRole(ctx))) {
+        return {
+            allow: true,
+            operation,
+            scope: intent.scope,
+            role,
+            dangerous: opMeta.dangerous,
+            matchedRule: role === 'owner' ? 'agent-owner-persona' : 'daemon-owner-persona',
+        };
+    }
     if (resolvedConfigCommand) {
         const targetCheck = checkResolvedConfigTarget(ctx, resolvedConfigCommand);
         if (!targetCheck.ok) {
@@ -215,7 +227,7 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
         if (!isManagementRole(role) && intent.scope !== 'relation') {
             return denyDecision(ctx, 'SCOPE_MISMATCH', `Role ${role} may only access relation-scoped config`, operation, intent.scope, opMeta.dangerous);
         }
-        if (role === 'owner') {
+        if (role === 'owner' && isCurrentAgentTarget(ctx)) {
             return {
                 allow: true,
                 operation,
@@ -225,6 +237,22 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
                 matchedRule: 'agent-owner',
             };
         }
+        // The daemon control identity is allowed to inspect any Agent config,
+        // including sensitive fields. This is intentionally handled before
+        // role-definition matching because daemon-owner subjects do not need an
+        // Agent relation role to read the daemon's local configuration store.
+        if (resolvedConfigCommand.kind === 'field'
+            && resolvedConfigCommand.subcommand === 'get'
+            && hasDaemonOwnerRole(ctx)) {
+            return {
+                allow: true,
+                operation,
+                scope: intent.scope,
+                role: 'daemon-owner',
+                dangerous: opMeta.dangerous,
+                matchedRule: 'daemon-owner-config-read',
+            };
+        }
     }
     const roleDef = getRoleDefinition(role, ctx.selfAid);
     if (!roleDef) {
@@ -357,10 +385,25 @@ function requiresDaemonOwner(ctx, resolvedConfigCommand) {
             || resolvedConfigCommand.configScope === 'process'
             || resolvedConfigCommand.configScope === 'defaults'))
         return true;
+    // Sensitive reads of another Agent's config are daemon-scoped. Agent
+    // owner/admin roles may inspect safe fields cross-Agent, but only the
+    // daemon control identity may access config.read targets that are not the
+    // current Agent.
+    if (operation === 'config.read'
+        && resolvedConfigCommand?.kind === 'field'
+        && resolvedConfigCommand.configScope === 'agent'
+        && !isCurrentAgentTarget(ctx)) {
+        return true;
+    }
     if (operation === 'agent.reload' && hasDaemonOwnerRole(ctx)) {
         return true;
     }
-    if (operation === 'agent.show' || operation === 'agent.reload') {
+    // Avatar publication is an Agent-scoped mutation for Agent channels, but
+    // the trusted control plane may publish it for a selected Agent target.
+    if (operation === 'ec.aid.avatar' && hasDaemonOwnerRole(ctx)) {
+        return true;
+    }
+    if (operation === 'agent.reload') {
         return !isCurrentAgentTarget(ctx);
     }
     if (operation.startsWith('trigger.')) {
@@ -529,6 +572,12 @@ function checkConfigFieldPolicy(ctx, policy, resolvedConfigOp) {
         return { ok: false, reason: 'Resolved config operation is required' };
     const field = resolvedConfigOp.field;
     if (!resolvedConfigOp.route || (resolvedConfigOp.fieldRule.class !== 'safe-scalar' && resolvedConfigOp.fieldRule.class !== 'safe-readonly-object')) {
+        if (policy === 'behavior-read'
+            && !isCurrentAgentTarget(ctx)
+            && hasDaemonOwnerRole(ctx)
+            && resolvedConfigOp.route) {
+            return { ok: true };
+        }
         return { ok: false, reason: `Config field ${field} is not available to user roles` };
     }
     if (policy === 'role-overridable-write'
@@ -541,8 +590,12 @@ function checkConfigFieldPolicy(ctx, policy, resolvedConfigOp) {
     const fieldPermission = roleDef
         ? resolveRoleFieldPermission(roleDef.permissions || {}, field)
         : undefined;
-    if (policy === 'behavior-read')
+    if (policy === 'behavior-read') {
+        // Only the daemon control identity may read sensitive config fields from
+        // another Agent. Agent owners retain unrestricted reads for their own
+        // target via the self-target fast path above.
         return { ok: true };
+    }
     if (fieldPermission && !fieldPermission.allowOverride) {
         return { ok: false, reason: `Role ${ctx.role} cannot override ${field}` };
     }
@@ -579,6 +632,11 @@ function checkResolvedConfigTarget(ctx, command) {
         return { ok: true };
     }
     if (command.configScope === 'agent') {
+        // Management roles may read another Agent's non-sensitive config fields;
+        // sensitive fields are rejected by the field policy. Writes stay self-only.
+        if (command.subcommand === 'get' && (isManagementRole(ctx.role) || hasDaemonOwnerRole(ctx))) {
+            return { ok: true };
+        }
         if (!ctx.selfAid || !command.self || command.self !== ctx.selfAid) {
             return { ok: false, reason: 'Only the current agent can be targeted' };
         }

package/dist/core/auth/operation-catalog.js

@@ -601,6 +601,14 @@ const OPERATIONS = [
         description: '获取 agent 配置（含凭证）',
         sources: ['menu', 'menu.cli', 'control'],
     },
+    {
+        id: 'agent.persona',
+        category: 'write-agent',
+        dangerous: false,
+        defaultScopes: ['agent'],
+        description: '读取或更新当前 Agent 的 persona.md',
+        sources: ['agent-tool', 'control'],
+    },
     {
         id: 'agent.create',
         category: 'process',
@@ -944,6 +952,14 @@ const OPERATIONS = [
         description: 'Sign and publish the current Agent local agent.md',
         sources: ['agent-tool'],
     },
+    {
+        id: 'ec.aid.avatar',
+        category: 'write-agent',
+        dangerous: true,
+        defaultScopes: ['agent'],
+        description: 'Upload and publish the current Agent avatar',
+        sources: ['agent-tool', 'menu', 'menu.cli'],
+    },
     {
         id: 'ec.msg.send',
         category: 'write-own',

package/dist/core/command/agent-control.js

@@ -6,11 +6,11 @@ import path from 'path';
 import { ConfigTarget, ensureFile as cfgEnsure, read as cfgRead, write as cfgWrite, } from '../../config/config-manager.js';
 import { CreateStatusWriter, readCreateStatus } from '../message/create-status.js';
 import { agentProjectRootFromDefaults, deriveAgentProjectPath } from '../../utils/project-path.js';
-import { uploadAvatar } from '../../utils/avatar-upload.js';
+import { uploadAvatar, uploadAvatarUrl } from '../../utils/avatar-upload.js';
 import { agentmdGet, agentmdPut, updateAgentMdFrontmatterName } from '../../aun/aid/agentmd.js';
 import { isValidAid } from '../../aun/aid/validation.js';
 import { isSupportedBaseagent } from '../../agents/baseagent.js';
-const SUPPORTED_AGENT_PATCH_FIELDS = new Set(['aid', 'name', 'avatar', 'active_baseagent', 'baseagents', 'projects', 'owners', 'chatmode', 'channels', 'channelOwners']);
+const SUPPORTED_AGENT_PATCH_FIELDS = new Set(['aid', 'name', 'active_baseagent', 'baseagents', 'projects', 'owners', 'chatmode', 'channels', 'channelOwners']);
 const HIDDEN_VALUE = '[hidden]';
 const SENSITIVE_CONFIG_KEYS = new Set([
     'apikey',
@@ -48,6 +48,42 @@ function classifyAgentMdError(error) {
         return 'INVALID_ARGS';
     return 'UPLOAD_FAILED';
 }
+/** Canonical avatar mutation for the `aid.avatar` menu action. */
+export async function execAidAvatar(args) {
+    const a = args ?? {};
+    const aid = typeof a.aid === 'string' ? a.aid.trim().replace(/^@/, '') : '';
+    if (!aid)
+        return { error: '缺少 aid', code: 'INVALID_ARGS' };
+    if (!isValidAid(aid))
+        return { error: `无效 aid: ${aid}`, code: 'INVALID_ARGS' };
+    const hasData = a.data !== undefined;
+    const hasUrl = a.url !== undefined;
+    if ((hasData ? 1 : 0) + (hasUrl ? 1 : 0) > 1) {
+        return { error: '头像数据源必须在 data 与 url 中二选一', code: 'INVALID_ARGS' };
+    }
+    if (!hasData && !hasUrl) {
+        return { error: '缺少头像数据源：需要 data 或 url', code: 'INVALID_ARGS' };
+    }
+    const result = hasUrl
+        ? await uploadAvatarUrl(aid, a.url, { aunPath: resolveRoot() })
+        : await uploadAvatar(aid, a.data, { aunPath: resolveRoot() });
+    if (!result.ok) {
+        return { error: `头像上传失败: ${result.error}`, code: result.code ?? 'UPLOAD_FAILED' };
+    }
+    return {
+        data: {
+            aid,
+            avatar: result.publicUrl,
+            objectKey: result.objectKey,
+            sha256: result.sha256,
+            mime: result.mime,
+            width: result.width,
+            height: result.height,
+            aspectRatio: result.aspectRatio,
+            saved: true,
+        },
+    };
+}
 async function updateAgentMdName(aid, value) {
     const name = typeof value === 'string' ? value.trim() : '';
     if (!name)
@@ -299,6 +335,7 @@ async function runCreateInBackground(opts, w, service) {
             aid: opts.aid, name: opts.name, baseagent: opts.baseagent,
             project: opts.project, owner: opts.owner,
             description: opts.description,
+            tags: opts.tags,
             onPhase: (phase, state, detail) => {
                 if (state === 'begin') {
                     curPhase = phase;
@@ -398,6 +435,7 @@ export async function execAgentAction(action, args, peerId, eventBus, service) {
         const description = typeof a.description === 'string' && a.description.trim()
             ? a.description.trim()
             : undefined;
+        const tags = Array.isArray(a.tags) ? a.tags : undefined;
         // D3: accepted=true 必须意味着后续 query 能查到该 AID 的创建状态。
         let progressWriter;
         try {
@@ -410,7 +448,7 @@ export async function execAgentAction(action, args, peerId, eventBus, service) {
         void runCreateInBackground({
             aid: a.aid, name: a.name, baseagent: a.baseagent,
             project: a.project, owner,
-            model, effort, description, chatmode: a.chatmode,
+            model, effort, description, tags, chatmode: a.chatmode,
             eventBus,
         }, progressWriter, service).catch(e => logger.error(`[agent-control] runCreateInBackground unhandled ${a.aid}: ${e?.message || e}`));
         return { data: { accepted: true, aid: a.aid } };
@@ -461,14 +499,6 @@ export async function execAgentAction(action, args, peerId, eventBus, service) {
     if (action === 'update') {
         const result = await execAgentUpdate(a);
         if (!('error' in result)) {
-            if (result.data?.avatar) {
-                eventBus?.publish({
-                    type: 'agent:avatar_updated',
-                    aid: a.aid,
-                    avatar: result.data.avatar,
-                    timestamp: Date.now(),
-                });
-            }
             eventBus?.publish({
                 type: 'agent:updated',
                 aid: a.aid,
@@ -501,12 +531,6 @@ export async function execAgentUpdate(args) {
     if (p.aid !== undefined) {
         return { error: 'aid 不可修改（AUN 身份绑定，如需换 AID 请删除后重建）', code: 'INVALID_ARGS' };
     }
-    if (p.avatar !== undefined) {
-        const otherKeys = Object.keys(p).filter(k => k !== 'avatar');
-        if (otherKeys.length > 0) {
-            return { error: 'avatar 不能与其他 patch 字段同时提交，请拆分为两次 update', code: 'INVALID_ARGS' };
-        }
-    }
     if (p.name !== undefined) {
         const otherKeys = Object.keys(p).filter(k => k !== 'name');
         if (otherKeys.length > 0) {
@@ -522,13 +546,6 @@ export async function execAgentUpdate(args) {
     const config = cfgRead(ConfigTarget.Agent, { self: a.aid });
     if (!config)
         return { error: `Agent "${a.aid}" not found`, code: 'NOT_FOUND' };
-    if (p.avatar !== undefined) {
-        const result = await uploadAvatar(a.aid, p.avatar, { aunPath: resolveRoot() });
-        if (!result.ok) {
-            return { error: `头像上传失败: ${result.error}`, code: result.code ?? 'UPLOAD_FAILED' };
-        }
-        return { data: { aid: a.aid, avatar: result.publicUrl, saved: true } };
-    }
     let touched = false;
     const data = { aid: a.aid };
     const hasConfigPatch = p.active_baseagent !== undefined || p.baseagents !== undefined || p.projects !== undefined || p.owners !== undefined || p.chatmode !== undefined || p.channels !== undefined || p.channelOwners !== undefined;
@@ -564,7 +581,19 @@ export async function execAgentUpdate(args) {
             delete config.projects;
     }
     if (p.owners !== undefined) {
-        config.owners = p.owners;
+        if (!Array.isArray(p.owners) || p.owners.length === 0) {
+            return { error: 'owners must contain at least one owner', code: 'LAST_OWNER_PROTECTED' };
+        }
+        const owners = [];
+        for (const rawOwner of p.owners) {
+            if (typeof rawOwner !== 'string' || !rawOwner.trim() || !isValidAid(rawOwner.trim())) {
+                return { error: `Invalid owner AID: ${JSON.stringify(rawOwner)}`, code: 'INVALID_ARGS' };
+            }
+            const owner = rawOwner.trim();
+            if (!owners.includes(owner))
+                owners.push(owner);
+        }
+        config.owners = owners;
         touched = true;
     }
     if (p.chatmode !== undefined) {

package/dist/core/command/cli-intent-parser.js

@@ -156,6 +156,14 @@ function parseStatsCommand(argv, source) {
 }
 function parseAgentCommand(argv, source) {
     const subcmd = argv[1];
+    if (subcmd === 'persona') {
+        const tail = argv.at(-2) === '--format' && argv.at(-1) === 'json' ? argv.slice(0, -2) : argv;
+        const isShow = tail.length === 3 && tail[2] === 'show';
+        const isWrite = tail.length === 4 && (tail[2] === '--text' || tail[2] === '--file');
+        return isShow || isWrite
+            ? recognized('agent.persona', 'agent', source, {}, argv)
+            : raw(source, argv, 'Invalid agent persona command');
+    }
     const parsed = parseArgs(argv.slice(2));
     const args = parsed.args;
     if (parsed.positionals.length > 0)
@@ -170,6 +178,16 @@ function parseAgentCommand(argv, source) {
 }
 function parseAidCommand(argv, source) {
     const subcmd = argv[1];
+    if (subcmd === 'avatar') {
+        const tail = argv.slice(2);
+        const aid = tail[0];
+        const sourceFlag = tail[1];
+        if (!aid || (sourceFlag !== '--file' && sourceFlag !== '--url') || !tail[2] || tail[2].startsWith('-')
+            || (tail.length !== 3 && !(tail.length === 5 && tail[3] === '--format' && tail[4] === 'json'))) {
+            return raw(source, argv, 'Invalid aid avatar command');
+        }
+        return recognized('ec.aid.avatar', 'agent', source, { aid, ...(sourceFlag === '--file' ? { file: tail[2] } : { url: tail[2] }) }, argv, true);
+    }
     const parsed = parseArgs(argv.slice(2));
     const args = parsed.args;
     if (parsed.positionals.length > 0)

package/dist/core/command/command-handler.js

@@ -1399,17 +1399,17 @@ export class CommandHandler {
             const nextStr = reg.trigger.nextFireAt ? new Date(reg.trigger.nextFireAt).toLocaleString() : '未计算';
             return `✅ 触发器已注册：**${reg.trigger.name}**\n下次触发：${nextStr}`;
         }
-        return `❌ 未知子命令。用法：
-/trigger — 查看活跃触发器
-/trigger list [--all] — 查看所有触发器
-/trigger create <参数> — 创建触发器（set 为兼容别名）
-/trigger update <名称|ID> <参数> — 修改触发器
-常用参数：--delay/--at/--cron/--every、--prompt、--description、--model、--effort、--permission（省略则继承；update 可用 inherit 清除覆盖）、--feedback、--target-channel/--target-channel-id、--trigger-thread、--baseagent、--on-error、--retry-attempts/--retry-backoff、--script-runtime/--script-args/--script-timeout
-/trigger enable <名称|ID> — 启用触发器
-/trigger disable <名称|ID> — 暂停触发器
-/trigger show <名称|ID> — 查看触发器详情
-/trigger run <名称|ID> [--dry-run] — 手动触发
-/trigger cancel <名称|ID> — 禁用触发器（disable 的兼容别名）
+        return `❌ 未知子命令。用法：
+/trigger — 查看活跃触发器
+/trigger list [--all] — 查看所有触发器
+/trigger create <参数> — 创建触发器（set 为兼容别名）
+/trigger update <名称|ID> <参数> — 修改触发器
+常用参数：--delay/--at/--cron/--every、--prompt、--description、--model、--effort、--permission（省略则继承；update 可用 inherit 清除覆盖）、--feedback、--target-channel/--target-channel-id、--trigger-thread、--baseagent、--on-error、--retry-attempts/--retry-backoff、--script-runtime/--script-args/--script-timeout
+/trigger enable <名称|ID> — 启用触发器
+/trigger disable <名称|ID> — 暂停触发器
+/trigger show <名称|ID> — 查看触发器详情
+/trigger run <名称|ID> [--dry-run] — 手动触发
+/trigger cancel <名称|ID> — 禁用触发器（disable 的兼容别名）
 /trigger delete <名称|ID> — 删除触发器`;
     }
     async handleTrigger(content, channel, channelId, peerId, isAdmin, messageId, chatType, threadId, isDaemonOwner = false, canApprovePersistentFullAccess = isDaemonOwner) {
@@ -1946,10 +1946,10 @@ export class CommandHandler {
         if (sessionSelfAid && sessionSelfAid !== grantSelfAid) {
             return { ok: false, code: 'INVALID_DELEGATION', error: 'Delegation self agent does not match the active session' };
         }
-        const requiresSelfAid = parsed.command.kind === 'show' || parsed.command.kind === 'agentmd.put';
+        const requiresSelfAid = parsed.command.kind === 'show' || parsed.command.kind === 'agentmd.put' || parsed.command.kind === 'avatar';
         if (requiresSelfAid
             && parsed.command.aid !== grantSelfAid
-            && !hasTrustedFullAccessDelegation(delegation.grant)) {
+            && (parsed.command.kind === 'avatar' || !hasTrustedFullAccessDelegation(delegation.grant))) {
             return { ok: false, code: 'SCOPE_MISMATCH', error: 'Only the current Agent AID can be targeted' };
         }
         let conversationId;
@@ -1988,12 +1988,87 @@ export class CommandHandler {
         });
         if (!decision.allow)
             return { ok: false, code: decision.code, error: decision.reason };
+        let avatarBuffer;
+        if (parsed.command.kind === 'avatar' && parsed.command.filePath) {
+            const filePath = String(parsed.command.filePath || '').trim();
+            if (typeof session.projectPath !== 'string' || !session.projectPath.trim()) {
+                return { ok: false, code: 'INVALID_AVATAR_PATH', error: 'Avatar file requires a current session project path' };
+            }
+            const projectPath = path.resolve(session.projectPath);
+            const managedTempPath = this.getManagedSessionTempDir(session);
+            const resolvedPath = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(projectPath, filePath);
+            const allowedRoots = [projectPath, managedTempPath].filter((value) => !!value);
+            if (!filePath || !allowedRoots.some(root => isSameOrDescendant(resolvedPath, root))) {
+                return { ok: false, code: 'INVALID_AVATAR_PATH', error: 'Avatar file must be inside the current session project or managed TMPDIR' };
+            }
+            if (isHClassPath(resolvedPath) || isLClassPath(resolvedPath)) {
+                return { ok: false, code: 'PROTECTED_AVATAR_PATH', error: 'Avatar file cannot be read from a protected EvolCore path' };
+            }
+            let fd;
+            try {
+                const realProjectPath = fs.realpathSync(projectPath);
+                const realPath = fs.realpathSync(resolvedPath);
+                let realManagedTempPath;
+                try {
+                    realManagedTempPath = managedTempPath ? fs.realpathSync(managedTempPath) : undefined;
+                }
+                catch { }
+                const realAllowedRoots = [realProjectPath, realManagedTempPath].filter((value) => !!value);
+                if (!realAllowedRoots.some(root => isSameOrDescendant(realPath, root))) {
+                    return { ok: false, code: 'INVALID_AVATAR_PATH', error: 'Avatar file resolves outside the current session project or managed TMPDIR' };
+                }
+                if (isHClassPath(realPath) || isLClassPath(realPath)) {
+                    return { ok: false, code: 'PROTECTED_AVATAR_PATH', error: 'Avatar file cannot be read from a protected EvolCore path' };
+                }
+                const stat = fs.lstatSync(resolvedPath);
+                if (stat.isSymbolicLink() || !stat.isFile()) {
+                    return { ok: false, code: 'INVALID_AVATAR_FILE', error: 'Avatar source must be a regular non-symlink file' };
+                }
+                if (realManagedTempPath && isSameOrDescendant(realPath, realManagedTempPath) && stat.nlink > 1) {
+                    return { ok: false, code: 'INVALID_AVATAR_PATH', error: 'Avatar source cannot be a hard link inside managed TMPDIR' };
+                }
+                if (stat.size < 1 || stat.size > 500 * 1024) {
+                    return { ok: false, code: 'INVALID_AVATAR_FILE', error: 'Avatar source must be between 1 byte and 500KB' };
+                }
+                // Open the user-supplied node with no-follow semantics after checking
+                // its canonical ancestors; the bytes passed to the uploader come from
+                // this descriptor rather than from a second path lookup.
+                fd = fs.openSync(resolvedPath, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
+                const finalStat = fs.fstatSync(fd);
+                if (!finalStat.isFile() || finalStat.size < 1 || finalStat.size > 500 * 1024 || finalStat.nlink !== stat.nlink) {
+                    return { ok: false, code: 'INVALID_AVATAR_FILE', error: 'Avatar source changed during validation' };
+                }
+                avatarBuffer = fs.readFileSync(fd);
+            }
+            catch (error) {
+                return { ok: false, code: 'INVALID_AVATAR_FILE', error: error instanceof Error ? error.message : String(error) };
+            }
+            finally {
+                if (fd !== undefined)
+                    fs.closeSync(fd);
+            }
+        }
         try {
+            const result = await executeManagedAidOperation(parsed.command, {
+                showView: managedAidShowViewForRole(subject.role),
+                ...(avatarBuffer ? { avatarBuffer } : {}),
+            });
+            if (result.kind === 'avatar' && result.avatar) {
+                this.eventBus.publish({
+                    type: 'agent:avatar_updated',
+                    aid: result.aid,
+                    avatar: result.avatar,
+                    ...(result.sha256 ? { sha256: result.sha256 } : {}),
+                    ...(result.mime ? { mime: result.mime } : {}),
+                    ...(result.width ? { width: result.width } : {}),
+                    ...(result.height ? { height: result.height } : {}),
+                    ...(result.aspectRatio ? { aspectRatio: result.aspectRatio } : {}),
+                    timestamp: Date.now(),
+                });
+            }
             return {
                 ok: true,
-                result: await executeManagedAidOperation(parsed.command, {
-                    showView: managedAidShowViewForRole(subject.role),
-                }),
+                result,
             };
         }
         catch (error) {

package/dist/core/command/menu-catalog.js

@@ -79,6 +79,7 @@ const ENTRIES = [
     { id: 'chatmode.agent.nothuman', type: 'setting', contexts: ['agent'], name: 'chatmode', label: 'Agent 非人类对话模式', section: 'agent', order: 43, query: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.current', scope: 'agent' }, options: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.current', scope: 'agent' }, update: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.update', scope: 'agent' }, control: 'select' },
     { id: 'activity.agent', type: 'setting', contexts: ['agent'], name: 'activity', label: 'Agent 中间输出', section: 'agent', order: 50, query: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.current', scope: 'agent' }, options: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.current', scope: 'agent' }, update: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.update', scope: 'agent' }, control: 'select' },
     { id: 'observable.agent', type: 'setting', contexts: ['agent'], name: 'observable', label: '观察模式', section: 'agent', order: 60, query: { cmd: '/observable', operation: 'observable.current', scope: 'agent' }, update: { cmd: '/observable', operation: 'observable.update', scope: 'agent' }, valueSchema: { type: 'boolean' }, control: 'toggle' },
+    { id: 'aid.avatar', type: 'action', contexts: ['agent'], name: 'aid', label: '更换头像', section: 'agent', order: 70, action: { cmd: '/aid', action: 'avatar', operation: 'ec.aid.avatar', scope: 'agent' }, valueSchema: { type: 'object', properties: { data: { type: 'string' }, url: { type: 'string', format: 'uri' } }, oneOf: [{ required: ['data'] }, { required: ['url'] }] }, control: 'action' },
     { id: 'system.status', type: 'list', contexts: ['process'], name: 'system', label: '系统状态', section: 'process', order: 10, query: { cmd: '/system', operation: 'system.status', scope: 'process' }, control: 'list' },
     { id: 'system.monitor', type: 'list', contexts: ['process'], name: 'system', label: '运行监控快照', section: 'process', order: 11, query: { cmd: '/system', args: { view: 'monitor' }, operation: 'system.status', scope: 'process' }, control: 'list' },
     { id: 'system.logs', type: 'list', contexts: ['process'], name: 'system', label: 'Daemon 日志', section: 'process', order: 12, query: { cmd: '/system', args: { view: 'logs' }, operation: 'system.status', scope: 'process' }, options: { cmd: '/system', args: { option: 'logs' }, operation: 'system.status', scope: 'process', mode: 'dynamic' }, control: 'list' },

package/dist/core/command/menu-handler.js

@@ -19,7 +19,7 @@ import { scanInstances } from '../../utils/instance-registry.js';
 import { isFullAccessEnabled, loadDefaults, loadDaemonConfig } from '../../config-store.js';
 import { WEB_PACKAGE_NAME } from '../../product.js';
 import { read as cfgRead, resolveEffective, resolveEffectiveFieldWithSource, routeFieldPath, write as cfgWrite, ConfigTarget, } from '../../config/config-manager.js';
-import { execAgentAction, execAgentQuery, execAgentOptions, resolveProjectPath } from './agent-control.js';
+import { execAgentAction, execAgentQuery, execAgentOptions, execAidAvatar, resolveProjectPath } from './agent-control.js';
 import { gatewayList, gatewayUpdate, gatewayDelete, gatewayTest, gatewayModels, gatewaySetPrice, gatewaySyncEnv } from '../../config/gateway-config.js';
 import { displaySessionTitle } from '../session/session-title.js';
 import { buildSessionTurnList } from '../session/session-turns.js';
@@ -1028,6 +1028,8 @@ function buildMenuIntent(verb, cmdBase, args, action, value, fromControlChannel
             if (action === 'disable')
                 return intent('agent.disable', 'control', { action });
         }
+        if (cmdBase === '/aid' && action === 'avatar')
+            return intent('ec.aid.avatar', 'agent', { action });
         if (cmdBase === '/trigger') {
             if (action === 'create' || action === 'set')
                 return intent('trigger.create', 'relation', { action });
@@ -1287,7 +1289,11 @@ function menuResultFailure(error) {
     return { error: normalized.message, code: normalized.code, ...(normalized.data !== undefined ? { data: normalized.data } : {}) };
 }
 function resolveExternalMenuAgentChannel(owner, payload, fallbackChannel, required) {
-    const requestedAid = typeof payload?.agent === 'string' ? payload.agent.trim() : '';
+    const requestedAid = typeof payload?.agent === 'string' && payload.agent.trim()
+        ? payload.agent.trim()
+        : typeof payload?.args?.aid === 'string'
+            ? payload.args.aid.trim()
+            : '';
     if (!requestedAid) {
         return required
             ? { error: '缺少顶层 agent 参数', code: 'MISSING_AID' }
@@ -3061,7 +3067,7 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             return menuResultFailure(error);
         }
     }
-    if (cmdBase === '/agent' && !fromControlChannel && !args?.aid) {
+    if ((cmdBase === '/agent' || cmdBase === '/aid') && !args?.aid) {
         const selfAid = this.getOwningAgent?.(channel)?.aid;
         if (selfAid)
             args = { ...(args ?? {}), aid: selfAid };
@@ -3096,6 +3102,30 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
         return { error: `不支持 gateway action: ${action}`, code: 'NOT_SUPPORTED' };
     }
     const isMenuAdmin = isManagementRole(authIdentity.role);
+    // ── /aid avatar ──
+    // The AID namespace is the only avatar mutation surface.
+    if (cmdBase === '/aid') {
+        if (action !== 'avatar')
+            return { error: `不支持 aid action: ${action}`, code: 'NOT_SUPPORTED' };
+        const result = await execAidAvatar(args);
+        if (!('error' in result)) {
+            const data = result.data;
+            if (data?.avatar) {
+                this.eventBus.publish({
+                    type: 'agent:avatar_updated',
+                    aid: data.aid,
+                    avatar: data.avatar,
+                    ...(data.sha256 !== undefined ? { sha256: data.sha256 } : {}),
+                    ...(data.mime !== undefined ? { mime: data.mime } : {}),
+                    ...(data.width !== undefined ? { width: data.width } : {}),
+                    ...(data.height !== undefined ? { height: data.height } : {}),
+                    ...(data.aspectRatio !== undefined ? { aspectRatio: data.aspectRatio } : {}),
+                    timestamp: Date.now(),
+                });
+            }
+        }
+        return result;
+    }
     // ── /agent action ──
     // 控制 channel：验 evolcore.owners，可执行进程级（create/delete/enable/disable）+ 自管理（update/reload）。
     // agent channel：闸门已挡掉进程级 + 跨 agent，仅 update/reload 能到此；reload 允许 owner/admin，update 仅 owner。
@@ -4157,9 +4187,9 @@ async function execMenuForSystemControl(payload, context) {
     const isRoleRequest = name === 'role' || compatCmd === '/role';
     const isConnectRequest = name === 'connect' || compatCmd === '/connect';
     const requiresAgentTarget = isRoleRequest || isConnectRequest || [
-        'observable', 'baseagent', 'model', 'effort', 'trigger', 'capability', 'group',
+        'observable', 'baseagent', 'model', 'effort', 'trigger', 'capability', 'group', 'aid',
     ].includes(name)
-        || ['/observable', '/baseagent', '/model', '/effort', '/trigger', '/capability', '/group'].includes(compatCmd ?? '')
+        || ['/observable', '/baseagent', '/model', '/effort', '/trigger', '/capability', '/group', '/aid'].includes(compatCmd ?? '')
         || (!isProcessLevel && requestedContextKind !== undefined && requestedContextKind !== 'process');
     const target = isProcessLevel
         ? { channel: SYSTEM_CONTROL_CHANNEL }
@@ -4169,6 +4199,12 @@ async function execMenuForSystemControl(payload, context) {
     const targetChannel = target.channel;
     const targetAid = this.getOwningAgent?.(targetChannel)?.aid
         ?? this.getDaemonTriggerOwnerAid?.(targetChannel);
+    if (name === 'aid' || compatCmd === '/aid') {
+        const requestedAid = typeof payload?.args?.aid === 'string' ? payload.args.aid.trim().replace(/^@/, '') : '';
+        if (requestedAid && targetAid && requestedAid !== targetAid) {
+            return ecwebErr(id, name, 'INVALID_ARGUMENT', 'args.aid 必须与目标 Agent 一致');
+        }
+    }
     const trustedSubject = buildAuthSubject({
         selfAid: targetAid,
         actorId: context.actorAid,

package/dist/core/command/menu-protocol.js

@@ -120,6 +120,7 @@ export const MENU_NAME_COMMANDS = Object.freeze({
     system: '/system',
     cli: '/cli',
     agent: '/agent',
+    aid: '/aid',
     trigger: '/trigger',
     file: '/file',
     gateway: '/gateway',

package/dist/core/command/slash-handler.js

@@ -3223,10 +3223,10 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     // /slist cli  — 仅 CLI 会话（未导入的）
     if (normalizedContent === '/slist' || normalizedContent === '/slist cli') {
         if (!session) {
-            return { kind: 'command.error', text: `❌ 当前没有活跃会话
-
-请先执行以下操作之一：
-1. 发送任意消息 - 自动创建新会话
+            return { kind: 'command.error', text: `❌ 当前没有活跃会话
+
+请先执行以下操作之一：
+1. 发送任意消息 - 自动创建新会话
 2. /new [名称] - 创建命名会话` };
         }
         const showCliOnly = normalizedContent === '/slist cli';
@@ -3497,11 +3497,11 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         if (!newName)
             return { kind: 'command.result', text: '用法: /name <新名称> 或 /rename <新名称>' };
         if (!session) {
-            return { kind: 'command.error', text: `❌ 当前没有活跃会话
-
-请先执行以下操作之一：
-1. 发送任意消息 - 自动创建新会话
-2. /new [名称] - 创建命名会话
+            return { kind: 'command.error', text: `❌ 当前没有活跃会话
+
+请先执行以下操作之一：
+1. 发送任意消息 - 自动创建新会话
+2. /new [名称] - 创建命名会话
 3. /session <名称> - 切换到已有会话` };
         }
         const existing = await this.sessionManager.getSessionByName(channel, channelId, newName);

package/dist/core/event-catalog.js

@@ -796,6 +796,11 @@ const CATALOG = [
         fields: [
             { path: 'aid', type: 'string' },
             { path: 'avatar', type: 'string' },
+            { path: 'sha256', type: 'string', optional: true },
+            { path: 'mime', type: 'string', optional: true },
+            { path: 'width', type: 'number', optional: true },
+            { path: 'height', type: 'number', optional: true },
+            { path: 'aspectRatio', type: 'number', optional: true },
             { path: 'timestamp', type: 'number', optional: true },
         ],
     },

package/dist/core/evolagent.js

@@ -275,9 +275,9 @@ export class EvolAgent {
         return `agent-files:${this.aid}`;
     }
     /**
-     * 读取 personal/persona.md 内容。走 fileCache（mtime 门控）：persona 没有任何
-     * 写入命令、由 agent 自己带外改写，与 working memory 同样改了即应生效，故每次读
-     * stat 比对、变了自动重读。文件不存在返回 null。
+     * 读取 personal/persona.md 内容。走 fileCache（mtime 门控）：persona 可由
+     * `ec agent persona` 或 agent 自己更新，与 working memory 一样改了即应生效，
+     * 故每次读 stat 比对、变了自动重读。文件不存在返回 null。
      */
     getPersona() {
         const personaPath = path.join(agentPersonalDir(this.aid), 'persona.md');