evolcore 0.0.25 → 0.0.27

package/dist/utils/npm-ops.js

@@ -8,11 +8,119 @@
  */
 import fs from 'fs';
 import path from 'path';
-import { execFile, execSync } from 'child_process';
+import { execFile, execFileSync } from 'child_process';
 import { promisify } from 'util';
 import { getPackageRoot } from '../paths.js';
 import { isWindows } from './cross-platform.js';
 const execFileAsync = promisify(execFile);
+/** The preferred public registry for update checks. */
+export const DEFAULT_NPM_REGISTRY = 'https://registry.npmjs.org';
+function normalizeRegistry(registry = DEFAULT_NPM_REGISTRY) {
+    const value = registry.trim();
+    return (value || DEFAULT_NPM_REGISTRY).replace(/\/+$/, '');
+}
+/**
+ * Resolve npm from the same Node installation that is running EvolCore.
+ * This prevents a daemon launched by one NVM installation from querying or
+ * mutating another installation selected by the shell's PATH.
+ */
+function resolveNpmInvocation() {
+    const nodeDir = path.dirname(process.execPath);
+    const sibling = path.join(nodeDir, isWindows ? 'npm.cmd' : 'npm');
+    const cliCandidates = [
+        path.join(nodeDir, 'node_modules', 'npm', 'bin', 'npm-cli.js'),
+    ];
+    if (fs.existsSync(sibling)) {
+        try {
+            const target = fs.realpathSync(sibling);
+            if (target.endsWith('.js'))
+                cliCandidates.unshift(target);
+        }
+        catch { /* fall through to the known npm layouts */ }
+    }
+    const npmCli = cliCandidates.find(candidate => fs.existsSync(candidate));
+    if (npmCli)
+        return { command: process.execPath, argsPrefix: [npmCli] };
+    if (isWindows) {
+        return {
+            command: process.env.ComSpec || path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'cmd.exe'),
+            argsPrefix: ['/c', 'npm'],
+        };
+    }
+    return { command: fs.existsSync(sibling) ? sibling : 'npm', argsPrefix: [] };
+}
+/**
+ * Read the effective registry from the npm belonging to the current Node.
+ * An empty value means npm has no explicit registry and uses the public
+ * default. A command failure is handled separately by using the public source
+ * directly, so a broken npm config cannot leave the upgrade without a retry.
+ */
+async function resolveUpgradeRegistry(signal) {
+    const npm = resolveNpmInvocation();
+    try {
+        const result = await execFileAsync(npm.command, [...npm.argsPrefix, 'config', 'get', 'registry'], {
+            timeout: 5000,
+            windowsHide: isWindows,
+            signal,
+        });
+        const value = String(result.stdout ?? '').trim();
+        if (!value || value === 'undefined' || value === 'null') {
+            return { registry: DEFAULT_NPM_REGISTRY, useNpmCli: false };
+        }
+        return { registry: normalizeRegistry(value), useNpmCli: true };
+    }
+    catch {
+        return { registry: DEFAULT_NPM_REGISTRY, useNpmCli: false };
+    }
+}
+async function checkLatestVersionViaNpm(pkg, timeoutMs, signal, registry) {
+    const npm = resolveNpmInvocation();
+    try {
+        const result = await execFileAsync(npm.command, [
+            ...npm.argsPrefix,
+            'view',
+            `${pkg}@latest`,
+            'version',
+            '--json',
+            '--registry',
+            registry,
+        ], {
+            timeout: timeoutMs ?? 10000,
+            windowsHide: isWindows,
+            signal,
+        });
+        const raw = String(result.stdout ?? '').trim();
+        if (!raw)
+            return null;
+        const parsed = JSON.parse(raw);
+        if (typeof parsed === 'string' && parsed)
+            return parsed;
+        if (Array.isArray(parsed)) {
+            const latest = parsed.at(-1);
+            return typeof latest === 'string' && latest ? latest : null;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// Registry checks can run concurrently, but two package upgrades must never
+// mutate npm's global tree at the same time. A tiny in-process queue keeps the
+// fast path parallel without changing upgrade ordering or failure semantics.
+let globalInstallTail = Promise.resolve();
+async function withGlobalInstallLock(action) {
+    const previous = globalInstallTail;
+    let release;
+    globalInstallTail = new Promise(resolve => { release = resolve; });
+    await previous;
+    try {
+        await action();
+    }
+    finally {
+        release();
+    }
+}
 // ── npm install -g (shared) ────────────────────────────────────────────────
 /**
  * Can we run sudo without a password prompt?
@@ -35,20 +143,11 @@ async function canSudoNonInteractively() {
     }
 }
 export async function npmInstallGlobal(pkg, options = {}) {
-    let cmd;
-    let args;
-    // Windows: run via cmd /c to avoid shell:true deprecation warning on Node 22.
-    // Unix: npm directly, no shell needed.
-    if (isWindows) {
-        cmd = process.env.ComSpec || path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'cmd.exe');
-        args = ['/c', 'npm', 'install', '-g', pkg];
-    }
-    else {
-        cmd = 'npm';
-        args = ['install', '-g', pkg];
-    }
+    const npm = resolveNpmInvocation();
+    const registry = options.registry ? normalizeRegistry(options.registry) : undefined;
+    const npmArgs = ['install', '-g', pkg, ...(registry ? ['--registry', registry] : [])];
     try {
-        await execFileAsync(cmd, args, {
+        await execFileAsync(npm.command, [...npm.argsPrefix, ...npmArgs], {
             timeout: options.timeoutMs ?? 180000,
             windowsHide: isWindows,
             signal: options.signal,
@@ -62,9 +161,10 @@ export async function npmInstallGlobal(pkg, options = {}) {
                 throw new Error('权限不足。请以管理员身份运行 PowerShell 或 CMD，然后重试');
             }
             if (!await canSudoNonInteractively()) {
-                throw new Error(`权限不足，且 sudo 需要密码（当前进程无法交互输入）。请手动执行: sudo npm install -g ${pkg}`);
+                const registryArg = registry ? ` --registry ${registry}` : '';
+                throw new Error(`权限不足，且 sudo 需要密码（当前进程无法交互输入）。请使用当前 Node 对应的 npm 手动执行: sudo npm install -g ${pkg}${registryArg}`);
             }
-            await execFileAsync('sudo', ['-n', 'npm', 'install', '-g', pkg], {
+            await execFileAsync('sudo', ['-n', npm.command, ...npm.argsPrefix, ...npmArgs], {
                 timeout: options.timeoutMs ?? 180000,
                 windowsHide: false,
                 signal: options.signal,
@@ -132,10 +232,8 @@ export function getLocalVersion() {
  */
 export function resolveGlobalPkg(pkgName) {
     try {
-        // 命令完全静态（npm root -g，无用户输入），用 execSync 传完整命令字符串，
-        // 避免 "args 数组 + shell:true" 组合触发 Node DeprecationWarning，且无注入风险。
-        const npmCmd = isWindows ? 'npm.cmd' : 'npm';
-        const globalRoot = execSync(`${npmCmd} root -g`, {
+        const npm = resolveNpmInvocation();
+        const globalRoot = execFileSync(npm.command, [...npm.argsPrefix, 'root', '-g'], {
             encoding: 'utf-8', timeout: 10000, windowsHide: true,
         }).trim();
         const pkgPath = path.join(globalRoot, ...pkgName.split('/'), 'package.json');
@@ -152,7 +250,7 @@ export function resolveGlobalPkg(pkgName) {
  * 使用 HTTP fetch 直接查 registry API，不依赖 npm CLI。
  * 超时 10 秒，失败返回 null。
  */
-export async function checkLatestVersion(pkg = 'evolcore', timeoutMs = 10000, signal) {
+async function fetchLatestVersion(pkg = 'evolcore', timeoutMs = 10000, signal, registry = DEFAULT_NPM_REGISTRY) {
     const controller = new AbortController();
     const abort = () => controller.abort();
     if (signal?.aborted)
@@ -161,14 +259,14 @@ export async function checkLatestVersion(pkg = 'evolcore', timeoutMs = 10000, si
         signal?.addEventListener('abort', abort, { once: true });
     const timer = setTimeout(abort, timeoutMs);
     try {
-        const res = await fetch(`https://registry.npmjs.org/${pkg}/latest`, {
+        const res = await fetch(`${normalizeRegistry(registry)}/${encodeURIComponent(pkg)}/latest`, {
             signal: controller.signal,
             headers: { 'Accept': 'application/json' },
         });
         if (!res.ok)
             return null;
         const data = await res.json();
-        return data.version || null;
+        return typeof data.version === 'string' && data.version ? data.version : null;
     }
     catch {
         return null;
@@ -178,6 +276,31 @@ export async function checkLatestVersion(pkg = 'evolcore', timeoutMs = 10000, si
         signal?.removeEventListener('abort', abort);
     }
 }
+/**
+ * Read the current npm registry first. If that read succeeds, npm itself is
+ * used for the version query so proxy/CA/auth settings are preserved. If the
+ * read fails, retry once against the official HTTP endpoint. The selected
+ * registry is returned so installation uses the same source.
+ */
+async function checkLatestVersionWithFallback(pkg, timeoutMs, signal, explicitRegistry) {
+    if (explicitRegistry) {
+        const registry = normalizeRegistry(explicitRegistry);
+        const version = await fetchLatestVersion(pkg, timeoutMs, signal, registry);
+        return version ? { version, registry } : null;
+    }
+    const selection = await resolveUpgradeRegistry(signal);
+    const version = selection.useNpmCli
+        ? await checkLatestVersionViaNpm(pkg, timeoutMs, signal, selection.registry)
+        : await fetchLatestVersion(pkg, timeoutMs, signal, selection.registry);
+    return version ? { version, registry: selection.registry } : null;
+}
+/**
+ * Query the registry selected from the running Node/npm configuration, or the
+ * official registry when that configuration cannot be read.
+ */
+export async function checkLatestVersion(pkg = 'evolcore', timeoutMs = 10000, signal, registry) {
+    return (await checkLatestVersionWithFallback(pkg, timeoutMs, signal, registry))?.version ?? null;
+}
 /**
  * 完整升级流程：检查 → 比较 → 安装（失败重试一次）
  */
@@ -188,12 +311,13 @@ export async function tryUpgrade(options = {}) {
     }
     const localVer = getLocalVersion();
     // 查询 registry
-    const remoteVer = await checkLatestVersion('evolcore', options.checkTimeoutMs, options.signal);
-    if (!remoteVer) {
+    const checked = await checkLatestVersionWithFallback('evolcore', options.checkTimeoutMs, options.signal, options.registry);
+    if (!checked) {
         return options.signal?.aborted
             ? { status: 'failed', from: localVer, error: 'Upgrade cancelled or timed out' }
             : { status: 'skipped', error: 'Failed to check remote version' };
     }
+    const { version: remoteVer, registry } = checked;
     // 版本比较
     if (compareVersions(localVer, remoteVer) >= 0) {
         return { status: 'no-update', from: localVer };
@@ -202,11 +326,19 @@ export async function tryUpgrade(options = {}) {
     let lastError;
     for (let attempt = 0; attempt < 2; attempt++) {
         try {
-            await npmInstallGlobal('evolcore@latest', {
-                timeoutMs: options.installTimeoutMs,
-                signal: options.signal,
+            let installedVer;
+            await withGlobalInstallLock(async () => {
+                await npmInstallGlobal(`evolcore@${remoteVer}`, {
+                    timeoutMs: options.installTimeoutMs,
+                    signal: options.signal,
+                    registry,
+                });
+                installedVer = getLocalVersion();
             });
-            return { status: 'upgraded', from: localVer, to: remoteVer };
+            if (!installedVer || compareVersions(installedVer, remoteVer) < 0) {
+                throw new Error(`npm install completed but evolcore is still ${installedVer ?? 'not installed'} (target ${remoteVer})`);
+            }
+            return { status: 'upgraded', from: localVer, to: installedVer };
         }
         catch (e) {
             lastError = e.stderr || e.message || String(e);
@@ -230,23 +362,32 @@ export async function tryUpgradeGlobalPkg(resolveInstalled, pkgName, options = {
         return { status: 'skipped' }; // not installed, skip
     }
     const localVer = installed.version;
-    const remoteVer = await checkLatestVersion(pkgName, options.checkTimeoutMs, options.signal);
-    if (!remoteVer) {
+    const checked = await checkLatestVersionWithFallback(pkgName, options.checkTimeoutMs, options.signal, options.registry);
+    if (!checked) {
         return options.signal?.aborted
             ? { status: 'failed', from: localVer, error: 'Upgrade cancelled or timed out' }
             : { status: 'skipped', error: 'Failed to check remote version' };
     }
+    const { version: remoteVer, registry } = checked;
     if (compareVersions(localVer, remoteVer) >= 0) {
         return { status: 'no-update', from: localVer };
     }
     let lastError;
     for (let attempt = 0; attempt < 2; attempt++) {
         try {
-            await npmInstallGlobal(`${pkgName}@latest`, {
-                timeoutMs: options.installTimeoutMs,
-                signal: options.signal,
+            let installedVer;
+            await withGlobalInstallLock(async () => {
+                await npmInstallGlobal(`${pkgName}@${remoteVer}`, {
+                    timeoutMs: options.installTimeoutMs,
+                    signal: options.signal,
+                    registry,
+                });
+                installedVer = resolveInstalled()?.version;
             });
-            return { status: 'upgraded', from: localVer, to: remoteVer };
+            if (!installedVer || compareVersions(installedVer, remoteVer) < 0) {
+                throw new Error(`npm install completed but ${pkgName} is still ${installedVer ?? 'not installed'} (target ${remoteVer})`);
+            }
+            return { status: 'upgraded', from: localVer, to: installedVer };
         }
         catch (e) {
             lastError = e.stderr || e.message || String(e);

package/dist/utils/tool-summary.js

@@ -51,19 +51,75 @@ function displayShellCommand(command) {
     const carrier = resolveCodexShellCarrierString(command);
     return carrier?.dialect === 'powershell' ? carrier.command : undefined;
 }
+/** Hide an initial cd through its first unquoted && or ;, regardless of the directory. */
+function displayBashCommand(command) {
+    const prefix = command.match(/^[ \t]*cd(?=[ \t;]|&&)/);
+    if (!prefix)
+        return command;
+    let quote;
+    for (let index = prefix[0].length; index < command.length; index++) {
+        const char = command[index];
+        if (quote === "'") {
+            if (char === quote)
+                quote = undefined;
+            continue;
+        }
+        if (char === '\\') {
+            index++;
+            continue;
+        }
+        // Nested shell expressions need a full shell parser; keep them visible.
+        if (char === '`' || (char === '$' && command[index + 1] === '('))
+            return command;
+        if (quote === '"') {
+            if (char === quote)
+                quote = undefined;
+            continue;
+        }
+        if (char === "'" || char === '"') {
+            quote = char;
+            continue;
+        }
+        if (char === ';' || (char === '&' && command[index + 1] === '&')) {
+            if (char === ';' && /[;&]/.test(command[index + 1] ?? ''))
+                return command;
+            const body = command.slice(index + (char === ';' ? 1 : 2)).trimStart();
+            return body || command;
+        }
+        // Do not skip over other commands, redirections, or shell comments.
+        if (/[\r\n|&<>()]/.test(char) || (char === '#' && /[ \t]/.test(command[index - 1])))
+            return command;
+    }
+    return command;
+}
 /**
  * Build the tool arguments projected into activity/thought payloads.
  * Execution, permission checks, and audit logging keep using the original
- * input; only the human-facing Shell command is de-wrapped here.
+ * input; only the human-facing command is simplified here.
  */
 export function toolInputForDisplay(toolName, input) {
-    if (!input || toolName !== 'Shell')
+    if (!input || typeof input.command !== 'string')
+        return input;
+    let command;
+    if (toolName === 'Shell') {
+        command = displayShellCommand(input.command) ?? input.command;
+        // Keep explicit shell invocations, but omit standard executable directories.
+        command = command.replace(/^(\s*)(['"]?)\/(?:usr\/)?bin\/(bash|sh)\2(?=\s|$)/, '$1$2$3$2');
+    }
+    else if (toolName === 'Bash') {
+        command = displayBashCommand(input.command);
+    }
+    else {
         return input;
-    const command = displayShellCommand(input.command);
+    }
     if (!command || command === input.command)
         return input;
     return { ...input, command };
 }
+/** Activity summaries use the same command projection as displayed arguments. */
+export function summarizeToolInputForDisplay(toolName, input) {
+    return summarizeToolInput(toolName, toolInputForDisplay(toolName, input) ?? {});
+}
 /**
  * 工具输入摘要（提取工具调用的可读描述，供权限审批和消息展示使用）
  */

package/dist/utils/welcome.js

@@ -8,10 +8,154 @@
  * - 所有 IM 渠道（Feishu/WeChat/DingTalk/QQBot/WeCom）：首次交互时发送给交互用户（被动响应）
  */
 import fs from 'fs';
-import { channelStatePath } from '../paths.js';
+import path from 'path';
+import { createHash } from 'crypto';
+import { parseDocument } from 'yaml';
+import { agentWelcomePath, channelStatePath, resolveRoot } from '../paths.js';
+import { isValidAid } from '../aun/aid/validation.js';
 import { loadAgent, saveAgent } from '../config-store.js';
 import { resolveAgentLifecycle, withLifecycleForWrite } from '../config/lifecycle.js';
+import { renderTemplate } from '../eck/manifest-engine.js';
+import { atomicWriteText } from './atomic-write.js';
 import { logger } from './logger.js';
+export const MAX_WELCOME_TEMPLATE_BYTES = 4 * 1024;
+export const MAX_RENDERED_WELCOME_BYTES = 8 * 1024;
+const WELCOME_TEMPLATE_VARS = new Set([
+    'agentName', 'agentDescription', 'agentAid', 'agentTags', 'agentTagsText',
+    'ownerName', 'ownerAid', 'channel',
+]);
+/** Validate the small, data-only template language used by Bootstrap welcome text. */
+export function validateWelcomeTemplate(template) {
+    const errors = [];
+    if (typeof template !== 'string' || !template.trim()) {
+        return { valid: false, errors: ['welcome template must be non-empty'] };
+    }
+    if (template.includes('\0') || Buffer.from(template, 'utf8').toString('utf8') !== template) {
+        errors.push('welcome template must contain valid UTF-8 text only');
+    }
+    if (Buffer.byteLength(template, 'utf8') > MAX_WELCOME_TEMPLATE_BYTES) {
+        return { valid: false, errors: [`welcome template must be at most ${MAX_WELCOME_TEMPLATE_BYTES} bytes`] };
+    }
+    const stack = [];
+    const tokenPattern = /\{\{|\}\}/g;
+    let match;
+    while ((match = tokenPattern.exec(template)) !== null) {
+        const end = template.indexOf('}}', tokenPattern.lastIndex);
+        if (match[0] !== '{{' || end < 0) {
+            errors.push('unmatched template delimiter');
+            break;
+        }
+        const token = template.slice(tokenPattern.lastIndex, end);
+        tokenPattern.lastIndex = end + 2;
+        if (token === '#each agentTags') {
+            if (stack.includes('each'))
+                errors.push('nested tag loops are not supported');
+            stack.push('each');
+        }
+        else if (token === '/each' || token === '/') {
+            const expected = token === '/each' ? 'each' : 'condition';
+            if (stack.pop() !== expected)
+                errors.push(`unexpected {{${token}}}`);
+        }
+        else if (/^\?\w+$/.test(token) && WELCOME_TEMPLATE_VARS.has(token.slice(1))) {
+            stack.push('condition');
+        }
+        else if ((token === '.' || token === '@index') && stack.includes('each')) {
+            // Loop-local variables are valid only inside the tag loop.
+        }
+        else if (!WELCOME_TEMPLATE_VARS.has(token)) {
+            errors.push(`unsupported template variable or block: ${token}`);
+        }
+        if (stack.length > 8) {
+            errors.push('template blocks are nested too deeply');
+            break;
+        }
+    }
+    if (stack.includes('each'))
+        errors.push('unclosed {{#each}} block');
+    if (stack.includes('condition'))
+        errors.push('unclosed condition block');
+    return { valid: errors.length === 0, errors };
+}
+function checkedWelcomePath(aid) {
+    if (!isValidAid(aid))
+        throw new Error('invalid Agent AID');
+    const target = agentWelcomePath(aid);
+    const root = path.resolve(resolveRoot());
+    for (let cursor = path.resolve(target); cursor !== root; cursor = path.dirname(cursor)) {
+        try {
+            if (fs.lstatSync(cursor).isSymbolicLink())
+                throw new Error('welcome path must not contain symbolic links');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+    return target;
+}
+export function saveAgentWelcomeTemplate(aid, template) {
+    const validation = validateWelcomeTemplate(template);
+    if (!validation.valid)
+        throw new Error(`invalid welcome template: ${validation.errors.join('; ')}`);
+    const target = checkedWelcomePath(aid);
+    const staging = target + '.tmp.' + process.pid;
+    try {
+        if (fs.lstatSync(staging).isSymbolicLink())
+            throw new Error('invalid welcome staging path');
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    try {
+        atomicWriteText(target, template);
+    }
+    finally {
+        fs.rmSync(staging, { force: true });
+    }
+    return { path: target, bytes: Buffer.byteLength(template, 'utf8'), sha256: createHash('sha256').update(template).digest('hex') };
+}
+export function readAgentWelcomeTemplate(aid) {
+    const target = checkedWelcomePath(aid);
+    let stat;
+    try {
+        stat = fs.lstatSync(target);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+    if (!stat.isFile() || stat.size > MAX_WELCOME_TEMPLATE_BYTES)
+        throw new Error('invalid welcome template file');
+    const template = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(fs.readFileSync(target));
+    const validation = validateWelcomeTemplate(template);
+    if (!validation.valid)
+        throw new Error(`invalid welcome template at ${target}: ${validation.errors.join('; ')}`);
+    return template;
+}
+export function parseAgentWelcomeMetadata(content) {
+    const frontmatter = content.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/)?.[1];
+    if (!frontmatter)
+        return { tags: [] };
+    try {
+        const document = parseDocument(frontmatter);
+        if (document.errors.length)
+            return { tags: [] };
+        const value = document.toJS();
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            return { tags: [] };
+        return {
+            name: typeof value.name === 'string' ? value.name.trim() : undefined,
+            description: typeof value.description === 'string' ? value.description.trim() : undefined,
+            tags: Array.isArray(value.tags) ? value.tags.filter((tag) => typeof tag === 'string').map(tag => tag.trim()) : [],
+        };
+    }
+    catch {
+        return { tags: [] };
+    }
+}
 // ============================================================================
 // 欢迎消息生成
 // ============================================================================
@@ -31,25 +175,54 @@ export function generateWelcomeMessage(options) {
     const bindingNote = options.includeBindingNote
         ? `\n\n🔐 **绑定说明**：\n- 这条消息表示您的设备已和此 Agent 绑定\n- 只有您能看到和使用这个 Agent\n- AUN 提供端到端加密和跨设备同步`
         : '';
-    return `🎉 欢迎使用 EvolCore！
-
-${greeting}
-
-${agentIntro}${channelInfo}
-
-📋 **日常使用方法**：
-
-1. **查看帮助**：发送 \`/help\` 查看所有可用命令
-2. **查看状态**：发送 \`/status\` 查看当前会话状态
-3. **会话管理**：发送 \`/session\` 查看和切换会话
-
-💡 **提示**：
-- 直接发送消息即可与 Claude/Codex 对话
-- 支持多会话管理，每个会话独立上下文
-- 所有命令以 \`/\` 开头${channelSpecificNote}${bindingNote}
-
+    return `🎉 欢迎使用 EvolCore！
+
+${greeting}
+
+${agentIntro}${channelInfo}
+
+📋 **日常使用方法**：
+
+1. **查看帮助**：发送 \`/help\` 查看所有可用命令
+2. **查看状态**：发送 \`/status\` 查看当前会话状态
+3. **会话管理**：发送 \`/session\` 查看和切换会话
+
+💡 **提示**：
+- 直接发送消息即可与 Claude/Codex 对话
+- 支持多会话管理，每个会话独立上下文
+- 所有命令以 \`/\` 开头${channelSpecificNote}${bindingNote}
+
 现在就可以开始工作了！`;
 }
+export function renderPostBootstrapWelcomeMessage(options) {
+    const validation = validateWelcomeTemplate(options.template);
+    if (!validation.valid)
+        throw new Error(`invalid welcome template: ${validation.errors.join('; ')}`);
+    // ECK renders loop bodies recursively. Mask data so names/descriptions containing
+    // template syntax remain literal even when inserted inside a loop or condition.
+    const values = [];
+    const literal = (value) => {
+        if (!value)
+            return '';
+        values.push(value);
+        return `\0WELCOME${values.length - 1}\0`;
+    };
+    const rendered = renderTemplate(options.template, {
+        agentName: literal(options.agentName),
+        agentDescription: literal(options.agentDescription),
+        agentAid: literal(options.agentAid),
+        agentTags: (options.agentTags ?? []).map(literal),
+        agentTagsText: literal((options.agentTags ?? []).join(', ')),
+        ownerName: literal(options.ownerName),
+        ownerAid: literal(options.ownerAid),
+        channel: literal('aun'),
+    }, false).replace(/\0WELCOME(\d+)\0/g, (_match, index) => values[Number(index)]);
+    if (!rendered.trim())
+        throw new Error('welcome template rendered to an empty message');
+    if (Buffer.byteLength(rendered, 'utf8') > MAX_RENDERED_WELCOME_BYTES)
+        throw new Error('rendered welcome exceeds 8192 bytes');
+    return rendered;
+}
 /**
  * 生成简化版欢迎消息（用于快速场景）
  */
@@ -65,25 +238,25 @@ export function generateInitSuccessMessage(channelType, hasOwner) {
     const channelName = getChannelDescription(channelType);
     // AUN 在 connect 时向 owner 发送欢迎消息
     if (hasOwner && channelType === 'aun') {
-        return `\n💡 提示：首次启动时会向 owner 发送欢迎消息
+        return `\n💡 提示：首次启动时会向 owner 发送欢迎消息
    启动服务: ec start`;
     }
     // Feishu 虽然有 owner，但已改为首次交互发送（与其他 IM 统一）
     if (hasOwner && channelType === 'feishu') {
-        return `\n💡 提示：首次用户交互时会发送欢迎消息
+        return `\n💡 提示：首次用户交互时会发送欢迎消息
    启动服务: ec start`;
     }
     // 其他 IM 渠道：首次交互发送
     if (hasOwner) {
-        return `\n💡 提示：${channelName}渠道已配置
+        return `\n💡 提示：${channelName}渠道已配置
    启动服务: ec start`;
     }
     const ownerHint = channelType === 'aun'
         ? `   配置 owner: ec init ${channelType}`
         : '   配置 owner: 在 agent config.json 的 owners 中写入 AID；非 AUN 渠道身份写入 contact.json';
     // 无 owner 的渠道
-    return `\n💡 提示：${channelName}渠道已配置
-   启动服务: ec start
+    return `\n💡 提示：${channelName}渠道已配置
+   启动服务: ec start
 ${ownerHint}`;
 }
 /**