evolcore 0.0.25 → 0.0.27

package/dist/cli/handoff-command.js

@@ -4,7 +4,7 @@ import { ipcQuery } from '../ipc.js';
 import { HANDOFF_QUERY_DEFAULT_LIMIT, HANDOFF_QUERY_MAX_LIMIT, HANDOFF_STATES } from '../core/handoff/types.js';
 import { HANDOFF_ID_RE } from '../core/handoff/store.js';
 import { isHelpFlag, wantsHelp } from './help.js';
-import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 function parseLimit(value) {
     const limit = Number(value);
     if (!value || !Number.isInteger(limit) || limit < 1 || limit > HANDOFF_QUERY_MAX_LIMIT) {
@@ -106,13 +106,13 @@ export function parseReturn(args) {
 function printReturn(result) {
     if (result.ok) {
         if (result.code === 'HANDOFF_RETURN_ALREADY_APPLIED') {
-            console.log(`✓ handoff ${result.handoff_id} 已接收过相同结果，未重复处理`);
+            console.log(`✓ handoff ${result.handoff_id} 已接收过相同结果，未重复处理${result.result_id ? ` result_id=${result.result_id}` : ''}`);
         }
         else if (result.state === 'completed') {
             console.log(`✓ handoff ${result.handoff_id} 已确认完成，不回流来源会话`);
         }
         else {
-            console.log(`✓ handoff ${result.handoff_id} 回流结果已接收`);
+            console.log(`✓ handoff ${result.handoff_id} 回流结果已接收${result.result_id ? ` result_id=${result.result_id}` : ''}；后续仍可用同一 ID 追加结果`);
         }
         return;
     }
@@ -153,13 +153,15 @@ function formatTimestamp(value) {
 export async function cmdHandoff(args) {
     const sub = args[0];
     if (!sub || isHelpFlag(sub) || wantsHelp(args)) {
-        console.log(`用法: ec handoff <command> [args]
-
-Commands:
-  return [handoff-id] [content]       确认完成；required 策略需提供回流内容
-  return [handoff-id] --text-from-file <path>
-  status <handoff-id>                查询 handoff 状态
-  list [--state <state>] [--session <id>] [--limit <n>] [--agent <aid>]
+        console.log(`用法: ec handoff <command> [args]
+
+Commands:
+  return [handoff-id] [content]       提交一个回流结果；required 可用同一 ID 追加多个结果
+  return [handoff-id] --text-from-file <path>
+  recover-return <handoff-id> [content]  owner-authorized recovery after target session replacement
+  recover-return <handoff-id> --text-from-file <path>
+  status <handoff-id>                查询 handoff 状态
+  list [--state <state>] [--session <id>] [--limit <n>] [--agent <aid>]
   trace <handoff-id> [--limit <n>] [--agent <aid>]`);
         return;
     }
@@ -184,7 +186,37 @@ Commands:
             sessionId: process.env.EVOLCORE_SESSION_ID,
             handoffId: parsed.handoffId,
             content: parsed.content,
-            delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
+            delegationToken: readDelegationCredential(),
+        }, 5000);
+        if (!result) {
+            console.error('✗ daemon 暂时不可用');
+            process.exitCode = 1;
+            return;
+        }
+        printReturn(result);
+        return;
+    }
+    if (sub === 'recover-return') {
+        let parsed;
+        try {
+            parsed = parseReturn(args.slice(1));
+        }
+        catch (error) {
+            console.error(`✗ ${error instanceof Error ? error.message : String(error)}`);
+            process.exitCode = 1;
+            return;
+        }
+        if (!parsed.handoffId) {
+            console.error('✗ recover-return 必须指定 handoff ID');
+            process.exitCode = 1;
+            return;
+        }
+        const result = await ipcQuery(resolvePaths().socket, {
+            type: 'handoff-recover-return',
+            sessionId: process.env.EVOLCORE_SESSION_ID,
+            handoffId: parsed.handoffId,
+            content: parsed.content,
+            delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
             console.error('✗ daemon 暂时不可用');
@@ -203,7 +235,7 @@ Commands:
         }
         const result = await ipcQuery(resolvePaths().socket, {
             type: 'handoff-status', sessionId: process.env.EVOLCORE_SESSION_ID, handoffId,
-            delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
+            delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
             console.error('✗ daemon 暂时不可用');
@@ -235,7 +267,7 @@ Commands:
             state: parsed.state,
             filterSessionId: parsed.sessionId,
             limit: parsed.limit,
-            delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
+            delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
             console.error('✗ daemon 暂时不可用');
@@ -278,7 +310,7 @@ Commands:
             agent: parsed.agent,
             handoffId: parsed.handoffId,
             limit: parsed.limit,
-            delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
+            delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
             console.error('✗ daemon 暂时不可用');

package/dist/cli/index.js

@@ -5,7 +5,7 @@ import fs from 'fs';
 import path from 'path';
 import { getPackageRoot, resolvePaths } from '../paths.js';
 import { ipcQuery } from '../ipc.js';
-import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { cmdInit } from './init.js';
 import { cmdInitWechat, cmdInitFeishu, cmdInitDingtalk, cmdInitQQBot, cmdInitWecom, cmdInitAun } from './init-channel.js';
 import { isHelpFlag, wantsHelp, getArgValue } from './help.js';
@@ -19,57 +19,59 @@ import { cmdStart, cmdStop, cmdRestart, cmdStatus, cmdLogs, cmdWatchCommand, cmd
 import { logCliCommand } from './command-log.js';
 import { isInitCancelledError, printInitCancelHint } from './init-cancel.js';
 import { assertManagedTopLevelCommandAllowed, ManagedCommandNotAllowedError } from './managed-command-guard.js';
-const MAIN_HELP = `用法: ec <command> [选项]
-
-服务:
-  init              初始化默认配置、owner、控制 AID 与 EC Web
-  start             启动服务
-  stop              停止服务
-  restart           重启服务并检查更新
-  status            查看运行状态
-  logs              持续查看 daemon 日志
-  watch             打开日志、AID、消息或 EC Web 监控
-
-Agent 与会话:
-  agent             管理 EvolAgent
-  ctl               当前托管会话的控制命令
-  queue             查询或操作 agent 消息队列
-  trigger           管理定时与事件触发器
-  handoff           查询和完成跨会话回流
-  model             查看或设置模型与推理强度
-  response          查看或设置响应模式
-
-AUN:
-  aid               管理 AID 身份与 agent.md
-  msg               私聊消息收发、撤回、在线状态与历史
-  group             群消息与群管理
-  fs                AUN 文件系统
-  storage           底层对象存储命令
-  rpc               调用底层 AUN RPC
-  menu-client       向远程 daemon 发送标准 Menu 请求
-  contact           联系人黑名单管理
-  net               AUN 网络链路诊断
-
-配置与诊断:
-  config            读取、修改和检查分层配置
-  stats             Token 用量与费用统计
-  diagnose          检查启动环境
-  version           显示组件版本
-  mv                迁移项目目录和会话路径
-
-维护命令:
-  data migrate      迁移 per-Agent 用户数据（显式维护窗口）
-  mode              切换开发源码与 npm 包运行模式
-  restart-monitor   运行 daemon 重启监控器
-  bench             AUN 消息性能基准测试
-  link-rules        连接 ECK rules 到项目目录
-
-运行 ec <command> --help 查看该命令的完整参数。
-
-环境变量:
-  EVOLCORE_HOME     数据目录（默认: ~/.evolcore）
-  LOG_LEVEL         日志级别（默认: INFO）
-  MESSAGE_LOG       消息日志（默认: true）
+const MAIN_HELP = `用法: ec <command> [选项]
+
+服务:
+  init              初始化默认配置、owner、控制 AID 与 EC Web
+  start             启动服务
+  stop              停止服务
+  restart           重启服务并检查更新
+  status            查看运行状态
+  logs              持续查看 daemon 日志
+  watch             打开日志、AID、消息或 EC Web 监控
+
+Agent 与会话:
+  agent             管理 EvolAgent
+  ctl               当前托管会话的控制命令
+  queue             查询或操作 agent 消息队列
+  task              恢复暂停或异常中断的会话任务
+  trigger           管理定时与事件触发器
+  handoff           查询和完成跨会话回流
+  model             查看或设置模型与推理强度
+  response          查看或设置响应模式
+
+AUN:
+  aid               管理 AID 身份与 agent.md
+  msg               私聊消息收发、撤回、在线状态与历史
+  group             群消息与群管理
+  fs                AUN 文件系统
+  storage           底层对象存储命令
+  rpc               调用底层 AUN RPC
+  menu-client       向远程 daemon 发送标准 Menu 请求
+  diag              邀请远程诊断 Agent，或 stop 撤销诊断授权
+  contact           联系人、待审申请与黑名单管理
+  net               AUN 网络链路诊断
+
+配置与诊断:
+  config            读取、修改和检查分层配置
+  stats             Token 用量与费用统计
+  diagnose          检查启动环境
+  version           显示组件版本
+  mv                迁移项目目录和会话路径
+
+维护命令:
+  data migrate      迁移 per-Agent 用户数据（显式维护窗口）
+  mode              切换开发源码与 npm 包运行模式
+  restart-monitor   运行 daemon 重启监控器
+  bench             AUN 消息性能基准测试
+  link-rules        连接 ECK rules 到项目目录
+
+运行 ec <command> --help 查看该命令的完整参数。
+
+环境变量:
+  EVOLCORE_HOME     数据目录（默认: ~/.evolcore）
+  LOG_LEVEL         日志级别（默认: INFO）
+  MESSAGE_LOG       消息日志（默认: true）
   EVENT_LOG         事件日志（默认: true）`;
 function printLifecycleHelp(command) {
     const help = {
@@ -115,32 +117,32 @@ export async function main(args) {
         case 'init': {
             try {
                 if (wantsHelp(args.slice(1))) {
-                    console.log(`用法: ec init [渠道] [选项]
-
-仅初始化 defaults.json:
-  ec init                          交互式（写完 defaults.json 后嵌套 agent new）
-                                  选择 ecagent 时会继续询问 API Key 和 Base URL
-  ec init --non-interactive [选项]
-    --baseagent <claude|codex|gemini|ecagent>    默认: PATH 中第一个可用项；ecagent 需显式选择
-    --force                              已存在 defaults.json 时覆盖
-
-云部署非交互式初始化（结构化 JSON 输出）:
-  ec init --non-interactive --owner <aid> [--format json] [选项]
-    --owner <aid>                        必填。唯一 daemon owner AID
-    --baseagent <claude|codex|gemini|ecagent>    可选。默认从 PATH 检测，ecagent 需显式选择
-    --projectpath <abs-path>             可选。默认项目目录（必须绝对路径，自动创建）
-    --ecweb                              可选。安装 EC Web 并启用自启动
-    --auto-start                         Windows/macOS 上启用 EvolCore 登录自启动
-    --no-auto-start                      Windows/macOS 上禁用 EvolCore 登录自启动
-    --format json                        可选但推荐。stdout 输出 init.result JSON
-    --force                              已有不同 owner 时强制覆盖
-
-配置渠道（先 ec agent new 创建 agent）:
-  ec init aun           AUN owner 追加绑定（daemon 或指定 agent）
-  ec init feishu        飞书扫码登录
-  ec init wechat        微信扫码登录
-  ec init dingtalk      钉钉扫码登录
-  ec init qqbot         QQ 机器人扫码绑定
+                    console.log(`用法: ec init [渠道] [选项]
+
+仅初始化 defaults.json:
+  ec init                          交互式（写完 defaults.json 后嵌套 agent new）
+                                  选择 ecagent 时会继续询问 API Key 和 Base URL
+  ec init --non-interactive [选项]
+    --baseagent <claude|codex|gemini|ecagent>    默认: PATH 中第一个可用项；ecagent 需显式选择
+    --force                              已存在 defaults.json 时覆盖
+
+云部署非交互式初始化（结构化 JSON 输出）:
+  ec init --non-interactive --owner <aid> [--format json] [选项]
+    --owner <aid>                        必填。唯一 daemon owner AID
+    --baseagent <claude|codex|gemini|ecagent>    可选。默认从 PATH 检测，ecagent 需显式选择
+    --projectpath <abs-path>             可选。默认项目目录（必须绝对路径，自动创建）
+    --ecweb                              可选。安装 EC Web 并启用自启动
+    --auto-start                         Windows/macOS 上启用 EvolCore 登录自启动
+    --no-auto-start                      Windows/macOS 上禁用 EvolCore 登录自启动
+    --format json                        可选但推荐。stdout 输出 init.result JSON
+    --force                              已有不同 owner 时强制覆盖
+
+配置渠道（先 ec agent new 创建 agent）:
+  ec init aun           AUN owner 追加绑定（daemon 或指定 agent）
+  ec init feishu        飞书扫码登录
+  ec init wechat        微信扫码登录
+  ec init dingtalk      钉钉扫码登录
+  ec init qqbot         QQ 机器人扫码绑定
   ec init wecom         企业微信 AI Bot 扫码创建/手工配置`);
                 }
                 else {
@@ -246,7 +248,7 @@ export async function main(args) {
             }
             if (process.env.EVOLCORE_SESSION_ID) {
                 const sessionId = process.env.EVOLCORE_SESSION_ID;
-                const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+                const delegationToken = readDelegationCredential();
                 const result = await ipcQuery(resolvePaths().socket, {
                     type: 'status.auth', sessionId, delegationToken,
                 });
@@ -327,6 +329,11 @@ export async function main(args) {
         case 'queue':
             await cmdQueue(args.slice(1));
             break;
+        case 'task': {
+            const { cmdTask } = await import('./task-command.js');
+            await cmdTask(args.slice(1));
+            break;
+        }
         case 'trigger':
             {
                 const { cmdTrigger } = await import('./trigger-command.js');
@@ -351,6 +358,11 @@ export async function main(args) {
             await cmdRpc(args.slice(1));
             break;
         }
+        case 'diag': {
+            const { cmdDiag } = await import('./diag.js');
+            await cmdDiag(args.slice(1));
+            break;
+        }
         case 'menu-client': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();

package/dist/cli/init.js

@@ -7,7 +7,7 @@ import { commandExists } from '../utils/cross-platform.js';
 import { scanInstances } from '../utils/instance-registry.js';
 import { saveDefaultsSafe, loadAllAgents, loadDaemonConfig, saveDaemonConfig } from '../config-store.js';
 import { ecwebService, setEcwebEnabled } from '../config/daemon-services.js';
-import { generateControlAid, resolveControlAidDomain } from '../aun/aid/control-aid.js';
+import { ensureControlAgentMd, generateControlAid, resolveControlAidDomain } from '../aun/aid/control-aid.js';
 import { getCodexAppServerAvailability } from '../agents/codex-runner.js';
 import { DEFAULT_ECAGENT_BASE_URL, resolveEcagentConfig } from '../agents/baseagent.js';
 import { defaultProjectsRoot } from '../utils/project-path.js';
@@ -484,6 +484,12 @@ export async function initTail(options = {}) {
     let ownerBindingInterrupted = false;
     if (daemonConfig.aid) {
         console.log(`✓ 控制 AID 已存在: ${daemonConfig.aid}`);
+        try {
+            await ensureControlAgentMd(daemonConfig.aid);
+        }
+        catch (e) {
+            console.error(`⚠️ 控制 AID agent.md 补全失败（本次继续，后续启动会重试）: ${e?.message || e}`);
+        }
     }
     else {
         try {
@@ -861,6 +867,33 @@ export async function cmdInitNonInteractive(opts, dependencies = {}) {
             fail('CONTROL_AID_CREATE_FAILED', `control AID creation failed: ${e?.message || e}`, EXIT_RUNTIME, format);
         }
     }
+    if (controlAid) {
+        const certPath = path.join(resolvePaths().root, 'AIDs', controlAid, 'public', 'cert.pem');
+        if (!fs.existsSync(certPath)) {
+            // An externally supplied/pre-created AID without a local certificate
+            // cannot be signed or uploaded by this process. Avoid entering the SDK
+            // network path during non-interactive init; later daemon startup can
+            // retry once the identity material is provisioned.
+            console.error(`control AID agent.md publish skipped: local certificate not found for ${controlAid}`);
+        }
+        else {
+            try {
+                await ensureControlAgentMd(controlAid);
+            }
+            catch (e) {
+                // A registered control AID remains usable when the Name Service is
+                // temporarily unavailable; startup and the next init retry publication.
+                if (format === 'json') {
+                    // Keep the successful init result machine-readable; surface the
+                    // warning through stderr so stdout remains valid JSON.
+                    console.error(`control AID agent.md publish warning: ${e?.message || e}`);
+                }
+                else {
+                    console.error(`⚠️ 控制 AID agent.md 补全失败（本次继续，后续启动会重试）: ${e?.message || e}`);
+                }
+            }
+        }
+    }
     // ── 9. 写 daemon.json（aid + owners + ecweb）──
     try {
         const next = {

package/dist/cli/link-rules.js

@@ -79,27 +79,27 @@ function cleanEmptyParents(dir) {
 }
 // ── 子命令 ──
 function showHelp() {
-    console.log(`Usage: ec link-rules <subcommand> [baseagent] [--dir <path>]
-
-Subcommands:
-  connect       Connect ECK rules to a project directory (default: cwd)
-  disconnect    Remove ECK rules connection for a baseagent
-  status        Show connection state for all baseagents
-
-Arguments:
-  baseagent     Target base agent: ${KNOWN_BASEAGENTS.join(', ')} (default: cc)
-  --dir <path>  Target directory (default: current working directory)
-
-Supported baseagents:
-  cc            Claude Code (.claude/rules/eck/)
-  codex         Codex (.codex/rules/eck/)
-  gemini        Gemini CLI (.gemini/rules/eck/)
-
-Examples:
-  ec link-rules connect              # connect cc in cwd
-  ec link-rules connect codex        # connect codex in cwd
-  ec link-rules connect cc --dir /x  # connect cc in specific dir
-  ec link-rules disconnect cc        # disconnect cc
+    console.log(`Usage: ec link-rules <subcommand> [baseagent] [--dir <path>]
+
+Subcommands:
+  connect       Connect ECK rules to a project directory (default: cwd)
+  disconnect    Remove ECK rules connection for a baseagent
+  status        Show connection state for all baseagents
+
+Arguments:
+  baseagent     Target base agent: ${KNOWN_BASEAGENTS.join(', ')} (default: cc)
+  --dir <path>  Target directory (default: current working directory)
+
+Supported baseagents:
+  cc            Claude Code (.claude/rules/eck/)
+  codex         Codex (.codex/rules/eck/)
+  gemini        Gemini CLI (.gemini/rules/eck/)
+
+Examples:
+  ec link-rules connect              # connect cc in cwd
+  ec link-rules connect codex        # connect codex in cwd
+  ec link-rules connect cc --dir /x  # connect cc in specific dir
+  ec link-rules disconnect cc        # disconnect cc
   ec link-rules status               # show all connections`);
 }
 function showStatus() {

package/dist/cli/managed-command-guard.js

@@ -5,6 +5,9 @@ const MANAGED_TASK_COMMANDS = new Set([
     'config',
     'contact',
     'ctl',
+    // These commands are authenticated again by their daemon IPC entrypoints.
+    'diag',
+    'menu-client',
     'fs',
     'group',
     'handoff',
@@ -17,6 +20,7 @@ const MANAGED_TASK_COMMANDS = new Set([
     'stats',
     'status',
     'storage',
+    'task',
     'trigger',
     'version',
     '-v',
@@ -27,7 +31,7 @@ export class ManagedCommandNotAllowedError extends Error {
     command;
     code = 'NOT_ALLOWED';
     constructor(command) {
-        super(`Command ${command} is not available in a managed Agent task`);
+        super(`Command ${command} is not available in a managed Agent task; run it from the host terminal after the task completes`);
         this.command = command;
         this.name = 'ManagedCommandNotAllowedError';
     }

package/dist/cli/menu-client.js

@@ -1,6 +1,7 @@
 import fs from 'node:fs';
 import { getArgValue, wantsHelp } from './help.js';
-import { executeMenuClientRequest, MenuClientError } from '../aun/menu-client.js';
+import { executeMenuClientRequest, MenuClientError } from '../aun/menu/index.js';
+import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 function parseDurationMs(value) {
     if (value === undefined)
         return undefined;
@@ -11,14 +12,14 @@ function parseDurationMs(value) {
     const unit = match[2].toLowerCase();
     return amount * (unit === 'ms' ? 1 : unit === 's' ? 1_000 : unit === 'm' ? 60_000 : 3_600_000);
 }
-function readRequest(args) {
+function readRequest(args, readFile = (file) => fs.readFileSync(file, 'utf8')) {
     const file = getArgValue(args, '--request-file');
     const inline = getArgValue(args, '--request-json');
     if (!!file === !!inline)
         throw new MenuClientError('INVALID_ARGUMENT', '--request-file and --request-json are mutually exclusive');
     let raw;
     try {
-        raw = file ? fs.readFileSync(file, 'utf8') : inline;
+        raw = file ? readFile(file) : inline;
     }
     catch (error) {
         throw new MenuClientError('INVALID_ARGUMENT', `Unable to read request: ${error?.message ?? String(error)}`);
@@ -36,8 +37,12 @@ function readRequest(args) {
 function validateOptions(args) {
     const valueOptions = new Set(['--request-file', '--request-json', '--timeout', '--remote-token', '--ecweb-token', '--app', '--aun-path', '--format']);
     const booleanOptions = new Set(['--encrypt', '--no-encrypt']);
+    const seen = new Set();
     for (let index = 0; index < args.length; index += 1) {
         const option = args[index];
+        if (seen.has(option))
+            throw new MenuClientError('INVALID_ARGUMENT', `Duplicate option: ${option}`);
+        seen.add(option);
         if (booleanOptions.has(option))
             continue;
         if (!valueOptions.has(option))
@@ -54,22 +59,7 @@ function validateOptions(args) {
     if (format !== undefined && format !== 'json')
         throw new MenuClientError('INVALID_ARGUMENT', '--format currently supports only json');
 }
-export async function cmdMenuClient(args) {
-    if (wantsHelp(args)) {
-        console.log(`用法: ec menu-client request <from-aid> <daemon-aid> [选项]
-
-  --request-file <path>    从 JSON 文件读取一个 menu.* 请求
-  --request-json <json>    直接传入一个 menu.* JSON 请求
-  --timeout <时长>         默认 15s，最大 120s
-  --encrypt                使用 E2EE（默认）
-  --no-encrypt             已拒绝：ec-menu-client 必须使用 E2EE
-  --remote-token <token>   使用 daemon 远程访问 token 临时授权
-  --ecweb-token <token>    --remote-token 的兼容别名
-  --app <slot>             覆盖默认 evolcore-menu-client 消费槽位
-  --aun-path <path>        覆盖本地 AUN keystore 根目录
-  --format json            输出标准 menu.response JSON`);
-        return;
-    }
+export function parseMenuClientArgs(args, readFile) {
     if (args[0] !== 'request')
         throw new MenuClientError('INVALID_ARGUMENT', 'menu-client currently supports only the request subcommand');
     const fromAid = args[1]?.trim();
@@ -78,18 +68,47 @@ export async function cmdMenuClient(args) {
         throw new MenuClientError('INVALID_ARGUMENT', 'request requires <from-aid> and <daemon-aid>');
     const options = args.slice(3);
     validateOptions(options);
-    const request = readRequest(options);
-    const timeoutMs = parseDurationMs(getArgValue(args, '--timeout'));
-    const encrypt = args.includes('--no-encrypt') ? false : true;
-    const response = await executeMenuClientRequest({
-        fromAid,
-        targetAid,
-        request,
-        timeoutMs,
-        encrypt,
-        remoteAccessToken: getArgValue(args, '--remote-token') ?? getArgValue(args, '--ecweb-token'),
-        slotId: getArgValue(args, '--app'),
-        aunPath: getArgValue(args, '--aun-path'),
-    });
+    return {
+        fromAid, targetAid, request: readRequest(options, readFile),
+        timeoutMs: parseDurationMs(getArgValue(options, '--timeout')),
+        encrypt: !options.includes('--no-encrypt'),
+        remoteAccessToken: getArgValue(options, '--remote-token') ?? getArgValue(options, '--ecweb-token'),
+        slotId: getArgValue(options, '--app'), aunPath: getArgValue(options, '--aun-path'),
+    };
+}
+export async function cmdMenuClient(args) {
+    if (wantsHelp(args)) {
+        console.log(`用法: ec menu-client request <from-aid> <daemon-aid> [选项]
+
+  --request-file <path>    从 JSON 文件读取一个 menu.* 请求
+  --request-json <json>    直接传入一个 menu.* JSON 请求
+  --timeout <时长>         默认 15s，最大 120s
+  --encrypt                使用 E2EE（默认）
+  --no-encrypt             已拒绝：ec-menu-client 必须使用 E2EE
+  --remote-token <token>   使用 daemon 远程访问 token 临时授权
+  --ecweb-token <token>    --remote-token 的兼容别名
+  --app <slot>             覆盖默认 evolcore-menu-client 消费槽位
+  --aun-path <path>        覆盖本地 AUN keystore 根目录
+  --format json            输出标准 menu.response JSON`);
+        return;
+    }
+    let response;
+    if (process.env.EVOLCORE_SESSION_ID) {
+        const { ipcQuery, IpcTransportError } = await import('../ipc.js');
+        const { resolvePaths } = await import('../paths.js');
+        const result = await ipcQuery(resolvePaths().socket, {
+            type: 'menu-client.request', argv: args, sessionId: process.env.EVOLCORE_SESSION_ID,
+            delegationToken: readDelegationCredential(),
+        }, 250_000, { throwOnError: true }).catch(error => {
+            if (!(error instanceof IpcTransportError))
+                throw error;
+            throw new MenuClientError(error.code, error.message);
+        });
+        if (!result?.ok)
+            throw new MenuClientError(result?.code ?? 'DAEMON_UNAVAILABLE', result?.error ?? 'Managed Menu daemon is unavailable');
+        response = result.response;
+    }
+    else
+        response = await executeMenuClientRequest(parseMenuClientArgs(args));
     console.log(JSON.stringify(response, null, 2));
 }

package/dist/cli/model.js

@@ -20,7 +20,7 @@ import { ipcQuery } from '../ipc.js';
 import { parsePeerKey } from '../core/relation/peer-identity.js';
 import { resolvePeerRoleDetail } from '../config/peer-role-resolver.js';
 import { getFieldPermission } from '../config/roles.js';
-import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { formatModelCheck, runModelCheck } from '../core/model/model-diagnostics.js';
 import { validateRuntimeStringFieldOverride } from '../core/role/runtime-policy.js';
 const ALL_EFFORTS = ['none', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'auto'];
@@ -61,7 +61,7 @@ async function runCtlCommand(cmd, formatJson, timeoutMs = 10_000) {
         type: 'ctl',
         cmd,
         sessionId,
-        delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
+        delegationToken: readDelegationCredential(),
     }, timeoutMs);
     if (!result)
         fail(formatJson, 'DAEMON_UNAVAILABLE', '无法连接 evolcore 服务');
@@ -80,7 +80,7 @@ async function runManagedConfigOperation(args, formatJson) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId)
         fail(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID 未设置');
-    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const delegationToken = readDelegationCredential();
     if (!delegationToken) {
         fail(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} 未设置`);
     }