evolcore 0.0.24 → 0.0.26

package/dist/core/command/menu-catalog.js

@@ -79,6 +79,7 @@ const ENTRIES = [
     { id: 'chatmode.agent.nothuman', type: 'setting', contexts: ['agent'], name: 'chatmode', label: 'Agent 非人类对话模式', section: 'agent', order: 43, query: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.current', scope: 'agent' }, options: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.current', scope: 'agent' }, update: { cmd: '/chatmode', args: { scope: 'agent', field: 'nothuman' }, operation: 'chatmode.update', scope: 'agent' }, control: 'select' },
     { id: 'activity.agent', type: 'setting', contexts: ['agent'], name: 'activity', label: 'Agent 中间输出', section: 'agent', order: 50, query: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.current', scope: 'agent' }, options: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.current', scope: 'agent' }, update: { cmd: '/activity', args: { scope: 'agent' }, operation: 'activity.update', scope: 'agent' }, control: 'select' },
     { id: 'observable.agent', type: 'setting', contexts: ['agent'], name: 'observable', label: '观察模式', section: 'agent', order: 60, query: { cmd: '/observable', operation: 'observable.current', scope: 'agent' }, update: { cmd: '/observable', operation: 'observable.update', scope: 'agent' }, valueSchema: { type: 'boolean' }, control: 'toggle' },
+    { id: 'aid.avatar', type: 'action', contexts: ['agent'], name: 'aid', label: '更换头像', section: 'agent', order: 70, action: { cmd: '/aid', action: 'avatar', operation: 'ec.aid.avatar', scope: 'agent' }, valueSchema: { type: 'object', properties: { data: { type: 'string' }, url: { type: 'string', format: 'uri' } }, oneOf: [{ required: ['data'] }, { required: ['url'] }] }, control: 'action' },
     { id: 'system.status', type: 'list', contexts: ['process'], name: 'system', label: '系统状态', section: 'process', order: 10, query: { cmd: '/system', operation: 'system.status', scope: 'process' }, control: 'list' },
     { id: 'system.monitor', type: 'list', contexts: ['process'], name: 'system', label: '运行监控快照', section: 'process', order: 11, query: { cmd: '/system', args: { view: 'monitor' }, operation: 'system.status', scope: 'process' }, control: 'list' },
     { id: 'system.logs', type: 'list', contexts: ['process'], name: 'system', label: 'Daemon 日志', section: 'process', order: 12, query: { cmd: '/system', args: { view: 'logs' }, operation: 'system.status', scope: 'process' }, options: { cmd: '/system', args: { option: 'logs' }, operation: 'system.status', scope: 'process', mode: 'dynamic' }, control: 'list' },
@@ -86,6 +87,7 @@ const ENTRIES = [
     { id: 'baseagent.models', type: 'list', contexts: ['process'], name: 'baseagent-models', label: 'Baseagent 模型目录', section: 'process', order: 41, query: { cmd: '/baseagent-models', args: { baseagent: 'claude' }, operation: 'baseagent.models.list', scope: 'process' }, control: 'list' },
     { id: 'system.restart', type: 'action', contexts: ['process'], name: 'system', label: '重启服务', section: 'process', order: 20, action: { cmd: '/system', action: 'restart', operation: 'system.restart', scope: 'process' } },
     { id: 'system.upgrade', type: 'action', contexts: ['process'], name: 'system', label: '升级服务', section: 'process', order: 30, action: { cmd: '/system', action: 'upgrade', operation: 'system.upgrade', scope: 'process' } },
+    { id: 'system.paircode', type: 'action', contexts: ['process'], name: 'system', label: '获取配对码', section: 'process', order: 35, action: { cmd: '/system', action: 'paircode', operation: 'system.paircode', scope: 'process' } },
     { id: 'agent.list', type: 'list', contexts: ['process'], name: 'agent', label: 'Agent 列表', section: 'process', order: 40, options: { cmd: '/agent', args: { options: 'all' }, operation: 'agent.list', scope: 'control', mode: 'dynamic' }, control: 'list' },
     { id: 'agent.create', type: 'action', contexts: ['process'], name: 'agent', label: '创建 Agent', section: 'process', order: 50, action: { cmd: '/agent', action: 'create', operation: 'agent.create', scope: 'control' } },
     { id: 'agent.reload', type: 'action', contexts: ['process'], name: 'agent', label: '重载 Agent', section: 'process', order: 60, action: { cmd: '/agent', action: 'reload', operation: 'agent.reload', scope: 'control' } },
@@ -303,11 +305,18 @@ export async function resolveExplicitMenuExecutionContext(input) {
 }
 function entryVisible(entry, context) { return entry.contexts.includes(context.kind); }
 function intentFor(binding, context) { return { operation: binding.operation, scope: binding.scope, source: 'menu', args: { ...bindingArgs(binding, context) } }; }
-async function operationView(binding, context) {
+async function operationView(binding, context, options = {}) {
     if (!binding)
         return undefined;
     if (binding.supported === false)
         return { supported: false, allowed: false, reason: { code: 'NOT_SUPPORTED', message: 'operation is not supported' } };
+    if (binding.operation === 'system.paircode' && options.paircodeAllowed === false) {
+        return {
+            supported: true,
+            allowed: false,
+            reason: { code: 'NOT_ALLOWED', message: 'Pairing code issuance requires encrypted DaemonOwner authentication' },
+        };
+    }
     if (binding.operation === 'group.rulespolicy.update' && context.subject.role !== 'owner') {
         return { supported: true, allowed: false, reason: { code: 'PERMISSION_DENIED', message: 'rulesPolicy can only be changed by an Agent owner' } };
     }
@@ -330,16 +339,17 @@ function wireBinding(binding, context) {
 export async function getMenuCatalog(input) {
     const context = await resolveMenuCatalogContext(input);
     const entries = [];
+    const paircodeAllowed = input.paircodeAllowed ?? input.channelScope !== 'control';
     for (const entry of ENTRIES.filter(candidate => entryVisible(candidate, context)).sort((a, b) => a.order - b.order)) {
         const operations = {};
         for (const [key, binding] of [['query', entry.query], ['options', entry.options], ['update', entry.update], ['action', entry.action]]) {
-            const view = await operationView(binding, context);
+            const view = await operationView(binding, context, { paircodeAllowed });
             if (view)
                 operations[key] = view;
         }
         entries.push({ id: entry.id, type: entry.type, name: entry.name, label: entry.label, section: entry.section, order: entry.order, target: { scope: context.kind === 'agent' ? 'agent' : context.kind === 'process' ? 'process' : 'relation', ...(context.self ? { self: context.self } : {}), ...(context.peerKey ? { peerKey: context.peerKey } : {}) }, valueSchema: entry.valueSchema ?? { type: 'object' }, operations, wire: { name: entry.name, operations: { ...(wireBinding(entry.query, context) ? { query: wireBinding(entry.query, context) } : {}), ...(wireBinding(entry.options, context) ? { options: wireBinding(entry.options, context) } : {}), ...(wireBinding(entry.update, context) ? { update: wireBinding(entry.update, context) } : {}), ...(wireBinding(entry.action, context) ? { action: wireBinding(entry.action, context) } : {}) } }, ui: { control: entry.control ?? 'action' } });
     }
-    const policyRevision = hash({ role: context.subject.role, self: context.subject.selfAid, peerKey: context.subject.peerKey, groupMembershipRole: context.groupMembershipRole, baselineRole: context.baselineRole, roles: readRolesConfig(context.subject.selfAid) });
+    const policyRevision = hash({ role: context.subject.role, self: context.subject.selfAid, peerKey: context.subject.peerKey, groupMembershipRole: context.groupMembershipRole, baselineRole: context.baselineRole, paircodeAllowed, roles: readRolesConfig(context.subject.selfAid) });
     const data = { $schema_version: 1, kind: 'menu.catalog', complete: true, catalogRevision: hash({ entries, context: context.contextKey, policyRevision }), policyRevision, generatedAt: Date.now(), context: { contextKey: context.contextKey, kind: context.kind, channelScope: context.channelScope, transport: context.transport, chatType: context.chatType, ...(context.self ? { self: context.self } : {}), ...(context.actor ? { actor: context.actor } : {}), ...(context.groupId ? { groupId: context.groupId } : {}), ...(context.peerKey ? { peerKey: context.peerKey } : {}), requesterRole: context.requesterRole, ...(context.groupMembershipRole ? { groupMembershipRole: context.groupMembershipRole } : {}), ...(context.baselineRole !== undefined ? { baselineRole: context.baselineRole } : {}) }, features: { batchValuesV1: true, verifiedExplicitGroupContext: context.kind === 'group_relation' }, entries };
     return data;
 }

package/dist/core/command/menu-handler.js

@@ -19,7 +19,7 @@ import { scanInstances } from '../../utils/instance-registry.js';
 import { isFullAccessEnabled, loadDefaults, loadDaemonConfig } from '../../config-store.js';
 import { WEB_PACKAGE_NAME } from '../../product.js';
 import { read as cfgRead, resolveEffective, resolveEffectiveFieldWithSource, routeFieldPath, write as cfgWrite, ConfigTarget, } from '../../config/config-manager.js';
-import { execAgentAction, execAgentQuery, execAgentOptions, resolveProjectPath } from './agent-control.js';
+import { execAgentAction, execAgentQuery, execAgentOptions, execAidAvatar, resolveProjectPath } from './agent-control.js';
 import { gatewayList, gatewayUpdate, gatewayDelete, gatewayTest, gatewayModels, gatewaySetPrice, gatewaySyncEnv } from '../../config/gateway-config.js';
 import { displaySessionTitle } from '../session/session-title.js';
 import { buildSessionTurnList } from '../session/session-turns.js';
@@ -40,7 +40,7 @@ import { shouldSuppressRealRestart } from '../../utils/restart-safety.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../auth/agent-delegation.js';
 import { evolMenuResponseTransportMetadata, menuFailure, menuCommandForName, menuSuccess, normalizeMenuError, validateConfigWriteScope, validateMenuRequest, } from './menu-protocol.js';
 import { parseMenuClientProtectedHeaders } from './menu-protocol.js';
-import { validateAndRenewRemoteAccessToken } from '../auth/remote-access-store.js';
+import { remoteAccessService, validateAndRenewRemoteAccessToken } from '../auth/remote-access-store.js';
 import { listDiagnosticLogOptions, listRawConfigResources, queryDiagnosticLogs, readRawConfigResource, } from './daemon-diagnostics.js';
 import { roleMenuAction, roleMenuOperation, roleMenuOptions, roleMenuQuery, roleMenuUpdate, } from './role-menu.js';
 import { handleConnectMenu, connectMenuOperation } from './connect-menu.js';
@@ -1015,6 +1015,8 @@ function buildMenuIntent(verb, cmdBase, args, action, value, fromControlChannel
                 return intent('system.upgrade', 'process', { action });
             if (action === 'check')
                 return intent('system.status', 'process', { action });
+            if (action === 'paircode')
+                return intent('system.paircode', 'process', { action });
         }
         if (cmdBase === '/agent') {
             if (action === 'reload')
@@ -1028,6 +1030,8 @@ function buildMenuIntent(verb, cmdBase, args, action, value, fromControlChannel
             if (action === 'disable')
                 return intent('agent.disable', 'control', { action });
         }
+        if (cmdBase === '/aid' && action === 'avatar')
+            return intent('ec.aid.avatar', 'agent', { action });
         if (cmdBase === '/trigger') {
             if (action === 'create' || action === 'set')
                 return intent('trigger.create', 'relation', { action });
@@ -1287,7 +1291,11 @@ function menuResultFailure(error) {
     return { error: normalized.message, code: normalized.code, ...(normalized.data !== undefined ? { data: normalized.data } : {}) };
 }
 function resolveExternalMenuAgentChannel(owner, payload, fallbackChannel, required) {
-    const requestedAid = typeof payload?.agent === 'string' ? payload.agent.trim() : '';
+    const requestedAid = typeof payload?.agent === 'string' && payload.agent.trim()
+        ? payload.agent.trim()
+        : typeof payload?.args?.aid === 'string'
+            ? payload.args.aid.trim()
+            : '';
     if (!requestedAid) {
         return required
             ? { error: '缺少顶层 agent 参数', code: 'MISSING_AID' }
@@ -1761,7 +1769,7 @@ export async function getSubMenuItems(cmd, channel, channelId, userId, args, ove
             const requestedModel = menuStringArg(args, 'model') ?? menuStringArg(args, 'current');
             const currentModel = requestedModel || readMenuModel(target, agent).value || agent.getModel();
             if (models.length > 0)
-                return models.map((m) => ({ value: m, label: modelDisplayLabel(agent, m) + (catalog.models.find(e => e.id === m)?.verification === 'unverified' ? ' [unverified]' : '') + (catalog.freshness === 'stale' ? ' [stale]' : ''), selected: modelMatches(agent, m, currentModel) }));
+                return models.map((m) => ({ value: m, label: modelDisplayLabel(agent, m) + (catalog.models.find(e => e.id === m)?.verification === 'unverified' ? ' [unverified]' : ''), selected: modelMatches(agent, m, currentModel) }));
         }
         return null;
     }
@@ -2366,6 +2374,24 @@ export async function execMenuQuery(cmd, channel, channelId, userId, args, expli
     }
     if (cmdBase === '/system') {
         const view = args?.view ?? 'status';
+        if (view === 'version') {
+            const data = {};
+            try {
+                const pkgPath = path.join(getPackageRoot(), 'package.json');
+                const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+                if (pkg?.version)
+                    data.version = pkg.version;
+            }
+            catch { }
+            try {
+                const fp = path.join(getPackageRoot(), 'node_modules', '@agentunion', 'fastaun', 'package.json');
+                const fp2 = JSON.parse(fs.readFileSync(fp, 'utf-8'));
+                if (fp2?.version)
+                    data.fastaunVersion = fp2.version;
+            }
+            catch { }
+            return { data };
+        }
         if (view === 'monitor') {
             if (typeof this.daemonMonitorProvider !== 'function') {
                 return { error: 'Daemon monitor snapshot is unavailable', code: 'DEPENDENCY_UNAVAILABLE' };
@@ -3061,7 +3087,7 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             return menuResultFailure(error);
         }
     }
-    if (cmdBase === '/agent' && !fromControlChannel && !args?.aid) {
+    if ((cmdBase === '/agent' || cmdBase === '/aid') && !args?.aid) {
         const selfAid = this.getOwningAgent?.(channel)?.aid;
         if (selfAid)
             args = { ...(args ?? {}), aid: selfAid };
@@ -3096,6 +3122,30 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
         return { error: `不支持 gateway action: ${action}`, code: 'NOT_SUPPORTED' };
     }
     const isMenuAdmin = isManagementRole(authIdentity.role);
+    // ── /aid avatar ──
+    // The AID namespace is the only avatar mutation surface.
+    if (cmdBase === '/aid') {
+        if (action !== 'avatar')
+            return { error: `不支持 aid action: ${action}`, code: 'NOT_SUPPORTED' };
+        const result = await execAidAvatar(args);
+        if (!('error' in result)) {
+            const data = result.data;
+            if (data?.avatar) {
+                this.eventBus.publish({
+                    type: 'agent:avatar_updated',
+                    aid: data.aid,
+                    avatar: data.avatar,
+                    ...(data.sha256 !== undefined ? { sha256: data.sha256 } : {}),
+                    ...(data.mime !== undefined ? { mime: data.mime } : {}),
+                    ...(data.width !== undefined ? { width: data.width } : {}),
+                    ...(data.height !== undefined ? { height: data.height } : {}),
+                    ...(data.aspectRatio !== undefined ? { aspectRatio: data.aspectRatio } : {}),
+                    timestamp: Date.now(),
+                });
+            }
+        }
+        return result;
+    }
     // ── /agent action ──
     // 控制 channel：验 evolcore.owners，可执行进程级（create/delete/enable/disable）+ 自管理（update/reload）。
     // agent channel：闸门已挡掉进程级 + 跨 agent，仅 update/reload 能到此；reload 允许 owner/admin，update 仅 owner。
@@ -3855,6 +3905,13 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             this.eventBus.publish({ type: 'system:restart', channel, channelId });
             return { data: { action: 'restart', success: true } };
         }
+        if (action === 'paircode') {
+            // Keep Menu pairing on the same daemon-owned store as /pair, ECWeb, and
+            // the local IPC endpoint. The store reuses an unexpired code and creates
+            // a new one only after the shared TTL has elapsed.
+            const pair = remoteAccessService.getPairingCode(subject.actorId);
+            return { data: { code: pair.code, expiresAt: pair.expiresAt } };
+        }
         if (action === 'check') {
             const r = await this.delegateAsAction(action, '/check', channel, channelId, userId, { overrideIdentity, authSubject: subject, threadId: transportReplyContext?.threadId, chatType: transportReplyContext?.delivery?.chatType, replyContext: transportReplyContext });
             // delegateAsAction 会把 structured 展开到 data 顶层，并保留 data.structured 兼容旧客户端。
@@ -4157,9 +4214,9 @@ async function execMenuForSystemControl(payload, context) {
     const isRoleRequest = name === 'role' || compatCmd === '/role';
     const isConnectRequest = name === 'connect' || compatCmd === '/connect';
     const requiresAgentTarget = isRoleRequest || isConnectRequest || [
-        'observable', 'baseagent', 'model', 'effort', 'trigger', 'capability', 'group',
+        'observable', 'baseagent', 'model', 'effort', 'trigger', 'capability', 'group', 'aid',
     ].includes(name)
-        || ['/observable', '/baseagent', '/model', '/effort', '/trigger', '/capability', '/group'].includes(compatCmd ?? '')
+        || ['/observable', '/baseagent', '/model', '/effort', '/trigger', '/capability', '/group', '/aid'].includes(compatCmd ?? '')
         || (!isProcessLevel && requestedContextKind !== undefined && requestedContextKind !== 'process');
     const target = isProcessLevel
         ? { channel: SYSTEM_CONTROL_CHANNEL }
@@ -4169,6 +4226,12 @@ async function execMenuForSystemControl(payload, context) {
     const targetChannel = target.channel;
     const targetAid = this.getOwningAgent?.(targetChannel)?.aid
         ?? this.getDaemonTriggerOwnerAid?.(targetChannel);
+    if (name === 'aid' || compatCmd === '/aid') {
+        const requestedAid = typeof payload?.args?.aid === 'string' ? payload.args.aid.trim().replace(/^@/, '') : '';
+        if (requestedAid && targetAid && requestedAid !== targetAid) {
+            return ecwebErr(id, name, 'INVALID_ARGUMENT', 'args.aid 必须与目标 Agent 一致');
+        }
+    }
     const trustedSubject = buildAuthSubject({
         selfAid: targetAid,
         actorId: context.actorAid,
@@ -4185,6 +4248,12 @@ async function execMenuForSystemControl(payload, context) {
     });
     const trustedIdentity = trustedSubject.identity;
     const cmd = name ? (menuCommandForName(name) ?? payload.cmd) : payload.cmd;
+    if (payload?.type === 'menu.action'
+        && menuCommandToken(cmd) === '/system'
+        && payload.action === 'paircode'
+        && (context.authMethod !== 'daemon-owner' || (context.source === 'control' && !context.encrypted))) {
+        return ecwebErr(id, name, 'NOT_ALLOWED', 'Pairing code issuance requires encrypted DaemonOwner authentication');
+    }
     try {
         if (menuCommandToken(cmd) === '/baseagent-models') {
             if (payload.type !== 'menu.query')
@@ -4203,6 +4272,8 @@ async function execMenuForSystemControl(payload, context) {
                         channelScope: 'control',
                         channelId: targetChannel,
                         request: payload.args.context,
+                        paircodeAllowed: context.authMethod === 'daemon-owner'
+                            && (context.source !== 'control' || context.encrypted),
                     });
                     return menuSuccess({ id, ...(name ? { name } : {}) }, data);
                 }
@@ -4307,15 +4378,6 @@ export async function execMenuForEcweb(payload, trusted) {
     const validationError = validateMenuRequest(payload ?? {});
     if (validationError)
         return menuFailure({ id, ...(name ? { name } : {}) }, validationError);
-    const isProcessLevel = isProcessLevelMenu(name, payload?.cmd) || isProcessContextMenu(payload);
-    const owners = loadDaemonConfig().owners ?? [];
-    if (isProcessLevel && owners.length === 0) {
-        return menuFailure({ id, ...(name ? { name } : {}) }, {
-            code: 'NOT_ALLOWED',
-            message: formatAuthorizationDenial('Configure daemon.json.owners before using process-level operations.', 'DAEMON_OWNER_REQUIRED'),
-            data: authorizationDenialData('DAEMON_OWNER_REQUIRED'),
-        });
-    }
     if (!trusted || (!trusted.localDirect && trusted.authenticated !== true)) {
         return menuFailure({ id, ...(name ? { name } : {}) }, {
             code: 'PERMISSION_DENIED',
@@ -4323,29 +4385,22 @@ export async function execMenuForEcweb(payload, trusted) {
             data: { $schema_version: 1, kind: 'role_permission_denied', self: payload?.args?.self ?? null },
         });
     }
-    // A verified ECWeb connection has daemon-owner management authority. If the
-    // bearer token has no explicit owner provenance (the normal pairing path),
-    // use the first currently configured owner as the canonical management
-    // principal. This keeps audit/Trigger approval attribution deterministic
-    // without requiring owner-bound pairing metadata.
+    // ECWeb authentication grants daemon-owner authority independently of the
+    // configured owners. Prefer an owner for audit/Trigger attribution when
+    // available; otherwise keep local and remote management actors distinct.
+    const owners = loadDaemonConfig().owners ?? [];
     const userId = (trusted.actorAid && owners.includes(trusted.actorAid))
         ? trusted.actorAid
-        : owners[0] ?? (trusted.localDirect ? 'local-direct' : undefined);
-    if (!userId) {
-        return menuFailure({ id, ...(name ? { name } : {}) }, {
-            code: 'PERMISSION_DENIED',
-            message: 'ECWeb operation requires configured daemon owners',
-            data: { $schema_version: 1, kind: 'role_permission_denied', self: payload?.args?.self ?? null },
-        });
-    }
+        : owners[0] ?? (trusted.localDirect ? 'local-direct' : 'ecweb-remote');
     return execMenuForSystemControl.call(this, payload, {
         source: 'ecweb',
         actorAid: userId,
+        authMethod: trusted.localDirect ? 'daemon-owner' : 'remote-access-token',
+        encrypted: trusted.localDirect,
         localDirect: trusted.localDirect,
         // The ECWeb server/IPC control-token gate authenticates this management
         // request. All authenticated ECWeb connections are equally eligible to
-        // approve persistent fullaccess; actorAid is used only when it identifies
-        // a current configured owner.
+        // approve persistent fullaccess without owner-bound token metadata.
         canApprovePersistentFullAccess: true,
         owners,
     });
@@ -4379,6 +4434,8 @@ export async function execMenuForControl(payload, peerId, auth = {}) {
     return execMenuForSystemControl.call(this, payload, {
         source: 'control',
         actorAid: managementActor,
+        authMethod: authorization.allowed ? authorization.authMethod : 'daemon-owner',
+        encrypted: auth.encrypted === true,
         localDirect: false,
         canApprovePersistentFullAccess: false,
         owners,

package/dist/core/command/menu-protocol.js

@@ -120,6 +120,7 @@ export const MENU_NAME_COMMANDS = Object.freeze({
     system: '/system',
     cli: '/cli',
     agent: '/agent',
+    aid: '/aid',
     trigger: '/trigger',
     file: '/file',
     gateway: '/gateway',
@@ -566,6 +567,11 @@ function sanitizeLogArgv(value, depth, seen) {
 export function sanitizeMenuLogValue(value, key = '', depth = 0, seen = new WeakSet()) {
     if (isSensitiveLogKey(key))
         return '[REDACTED]';
+    // Pairing codes are intentionally returned as `code` on the wire for
+    // compatibility with /pair and the ECWeb API. Do not persist six-digit
+    // credentials in menu-protocol.log.
+    if (key === 'code' && typeof value === 'string' && /^\d{6}$/.test(value))
+        return '[REDACTED]';
     if (value === null || value === undefined || typeof value === 'number' || typeof value === 'boolean')
         return value;
     if (typeof value === 'bigint')

package/dist/core/command/menu-token-store.js

@@ -4,6 +4,20 @@ import { agentDataDir } from '../../paths.js';
 import { atomicReadJson, atomicWriteJson } from '../../utils/atomic-write.js';
 export const DEFAULT_MENU_TOKEN_IDLE_TIMEOUT_SECONDS = 30 * 24 * 60 * 60;
 export const MAX_MENU_TOKENS_PER_AGENT = 1_000;
+function validInstallationId(value) {
+    return value === undefined || (typeof value === 'string' && value.length <= 256
+        && !/[\u0000-\u001f\u007f]/.test(value));
+}
+function normalizeInstallation(value) {
+    if (!value || typeof value !== 'object' || !validInstallationId(value.deviceId)
+        || !validInstallationId(value.slotId))
+        return null;
+    const deviceId = value.deviceId?.trim() || '';
+    const slotId = value.slotId?.trim() || '';
+    if (slotId && !deviceId)
+        return null;
+    return { deviceId, slotId };
+}
 function hashToken(token) {
     return createHash('sha256').update(token).digest('hex');
 }
@@ -13,6 +27,9 @@ function isTokenRecord(value) {
     const record = value;
     return typeof record.peerAid === 'string'
         && record.peerAid.trim().length > 0
+        && validInstallationId(record.peerDeviceId)
+        && validInstallationId(record.peerSlotId)
+        && (!record.peerSlotId?.trim() || !!record.peerDeviceId?.trim())
         && typeof record.tokenHash === 'string'
         && /^[a-f0-9]{64}$/.test(record.tokenHash)
         && typeof record.requestedAt === 'number'
@@ -28,6 +45,10 @@ function isTokenRecord(value) {
 function isExpired(record, now) {
     return now - record.lastUsedAt >= record.idleTimeout * 1000;
 }
+function installationMatches(record, installation) {
+    return (record.peerDeviceId?.trim() || '') === (installation.deviceId?.trim() || '')
+        && (record.peerSlotId?.trim() || '') === (installation.slotId?.trim() || '');
+}
 function hashesEqual(left, right) {
     const leftBytes = Buffer.from(left, 'hex');
     const rightBytes = Buffer.from(right, 'hex');
@@ -41,10 +62,14 @@ export class MenuTokenStore {
     constructor(maxRecords = MAX_MENU_TOKENS_PER_AGENT) {
         this.maxRecords = maxRecords;
     }
-    issue(selfAid, peerAid, metadata = {}, now = Date.now()) {
+    issue(selfAid, peerAid, metadata = {}, installationOrNow = {}, now = Date.now()) {
+        const installation = normalizeInstallation(typeof installationOrNow === 'number' ? {} : installationOrNow);
+        if (!installation)
+            return null;
+        const issuedAt = typeof installationOrNow === 'number' ? installationOrNow : now;
         const file = this.read(selfAid);
         const idleTimeout = DEFAULT_MENU_TOKEN_IDLE_TIMEOUT_SECONDS;
-        const tokens = file.tokens.filter(record => record.peerAid !== peerAid && !isExpired(record, now));
+        const tokens = file.tokens.filter(record => (record.peerAid !== peerAid || !installationMatches(record, installation)) && !isExpired(record, issuedAt));
         if (tokens.length >= this.maxRecords) {
             if (tokens.length !== file.tokens.length)
                 this.write(selfAid, tokens);
@@ -53,9 +78,11 @@ export class MenuTokenStore {
         const menuToken = `mt_${randomBytes(32).toString('base64url')}`;
         tokens.push({
             peerAid,
+            ...(installation.deviceId?.trim() ? { peerDeviceId: installation.deviceId.trim() } : {}),
+            ...(installation.slotId?.trim() ? { peerSlotId: installation.slotId.trim() } : {}),
             tokenHash: hashToken(menuToken),
-            requestedAt: now,
-            lastUsedAt: now,
+            requestedAt: issuedAt,
+            lastUsedAt: issuedAt,
             idleTimeout,
             ...(metadata.clientName ? { clientName: metadata.clientName } : {}),
             ...(metadata.clientVersion ? { clientVersion: metadata.clientVersion } : {}),
@@ -64,21 +91,27 @@ export class MenuTokenStore {
         this.write(selfAid, tokens);
         return { menuToken, idleTimeout };
     }
-    use(selfAid, peerAid, menuToken, now = Date.now()) {
+    use(selfAid, peerAid, menuToken, installationOrNow = {}, now = Date.now()) {
+        const installation = normalizeInstallation(typeof installationOrNow === 'number' ? {} : installationOrNow);
+        if (!installation)
+            return false;
+        const usedAt = typeof installationOrNow === 'number' ? installationOrNow : now;
         const file = this.read(selfAid);
-        const activeTokens = file.tokens.filter(record => !isExpired(record, now));
+        const activeTokens = file.tokens.filter(record => !isExpired(record, usedAt));
         const tokenHash = typeof menuToken === 'string' && menuToken.length > 0 && menuToken.length <= 256
             ? hashToken(menuToken)
             : undefined;
         const matchingIndex = tokenHash
-            ? activeTokens.findIndex(record => record.peerAid === peerAid && hashesEqual(record.tokenHash, tokenHash))
+            ? activeTokens.findIndex(record => record.peerAid === peerAid
+                && installationMatches(record, installation)
+                && hashesEqual(record.tokenHash, tokenHash))
             : -1;
         if (matchingIndex < 0) {
             if (activeTokens.length !== file.tokens.length)
                 this.write(selfAid, activeTokens);
             return false;
         }
-        activeTokens[matchingIndex] = { ...activeTokens[matchingIndex], lastUsedAt: now };
+        activeTokens[matchingIndex] = { ...activeTokens[matchingIndex], lastUsedAt: usedAt };
         this.write(selfAid, activeTokens);
         return true;
     }

package/dist/core/command/slash-gate.js

@@ -45,7 +45,8 @@ export function probeSessionActivity(evidence, probes) {
 // 支持的命令列表
 const commands = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/stop', '/pause', '/compact', '/renew', '/repair', '/fork', '/del', '/perm', '/file', '/check', '/rewind', '/activity', '/observable', '/chatmode', '/mentionmode', '/ask', '/resume', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair'];
 const deprecatedCommands = ['/clear'];
-const exactBoundaryCommands = new Set(['/pause', '/resume', '/stop', '/pair']);
+commands.push('/diag');
+const exactBoundaryCommands = new Set(['/pause', '/resume', '/stop', '/pair', '/diag']);
 /** Parse the execution command without treating it as a quick/result command. */
 export function parseFullAccessCommand(content) {
     const match = content.match(/^\s*(\/fa|\/fullaccess)(?=\s|$)([\s\S]*)$/);
@@ -64,8 +65,37 @@ const aliases = {
     '/rw': '/rewind',
     '/base': '/baseagent',
 };
+const GROUP_READ_ONLY_COMMANDS = new Set(['/mentionmode', '/model', '/effort', '/perm', '/baseagent']);
+const GROUP_TASK_COMMANDS = new Set([
+    '/help', '/evolhelp', '/status', '/check', '/ask', '/pause', '/resume', '/stop', '/compact', '/renew',
+]);
+/** Group slash policy applies to every role, including old command-card clicks. */
+export function guardGroupSlashCommand(content, chatType) {
+    if (chatType !== 'group' || !content.trim().startsWith('/'))
+        return undefined;
+    const [inputCommand, ...args] = content.trim().split(/\s+/);
+    const command = aliases[inputCommand] ?? inputCommand;
+    if (GROUP_READ_ONLY_COMMANDS.has(command)) {
+        if (!args.length || (command === '/model' && args.length === 1 && ['current', 'list', 'check'].includes(args[0]))) {
+            return undefined;
+        }
+        return {
+            kind: 'command.error',
+            text: `❌ 群聊中 ${command} 仅支持查询，请在私聊或管理界面操作`,
+            reason: 'GROUP_COMMAND_READ_ONLY',
+        };
+    }
+    if (GROUP_TASK_COMMANDS.has(command))
+        return undefined;
+    return {
+        kind: 'command.error',
+        text: `❌ 群聊中不支持 ${inputCommand}，输入 /help 查看可用命令`,
+        reason: 'GROUP_COMMAND_UNSUPPORTED',
+    };
+}
 // 命令快速路径前缀（所有命令都不进入消息队列）
 const quickCommandPrefixes = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/repair', '/fork', '/stop', '/pause', '/clear', '/compact', '/renew', '/del', '/perm', '/file', '/check', '/s ', '/name', '/rewind', '/rw', '/rw ', '/activity', '/observable', '/chatmode', '/mentionmode', '/ask', '/resume', '/base ', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair'];
+quickCommandPrefixes.push('/diag');
 /**
  * 计算两个字符串的 Levenshtein 距离（编辑距离）
  */
@@ -95,7 +125,7 @@ function levenshteinDistance(str1, str2) {
     return matrix[len1][len2];
 }
 export function isQuickCommand(content) {
-    return content === '/s' || quickCommandPrefixes.some(cmd => exactBoundaryCommands.has(cmd)
+    return content === '/s' || content === '/base' || quickCommandPrefixes.some(cmd => exactBoundaryCommands.has(cmd)
         ? content === cmd || content.startsWith(cmd + ' ')
         : content.startsWith(cmd));
 }
@@ -131,7 +161,7 @@ export function guardRoleCommand(content, activeChatType, isAdmin) {
     const userGroupCommands = [
         '/status', '/help', '/evolhelp', '/check', '/chatmode', '/mentionmode',
         '/model', '/effort', '/baseagent', '/perm', '/activity', '/stop', '/pause',
-        '/resume', '/trigger', '/file',
+        '/resume', '/trigger', '/file', '/ask',
     ];
     const userCommands = activeChatType === 'group' && !isAdmin
         ? userGroupCommands
@@ -146,7 +176,7 @@ export function guardRoleCommand(content, activeChatType, isAdmin) {
     return {
         kind: 'command.error',
         text: activeChatType === 'group'
-            ? '❌ 无权限：当前群聊仅支持 /status 和 /help'
+            ? '❌ 无权限：此命令仅限管理员使用，输入 /help 查看可用命令'
             : '❌ 无权限：此命令仅限管理员使用',
     };
 }