evolcore 0.0.26 → 0.0.28

package/dist/cli/agent.js

@@ -1,6 +1,7 @@
 import fs from 'fs';
 import path from 'path';
-import { resolvePaths, agentMdPath as getAgentMdPathFromPaths, agentPersonalDir, aunPath as defaultAunPath } from '../paths.js';
+import { SESSION_ID_ENV } from '../product.js';
+import { resolvePaths, agentMdPath as getAgentMdPathFromPaths, agentPersonalDir, agentWelcomePath, aunPath as defaultAunPath } from '../paths.js';
 import { loadDefaults, loadAllAgents, loadAgent, saveAgent, ensureAgentDirSkeleton } from '../config-store.js';
 import { initConfigManager } from '../config/config-manager.js';
 import { resolveConfigCommand } from '../config/resolved-config-op.js';
@@ -10,16 +11,21 @@ import { CONFIG_SCHEMA_VERSION } from '../types.js';
 import { ensureInitialRoleRegistry } from '../config/role-service.js';
 import { agentProjectRootFromDefaults, deriveAgentProjectPath } from '../utils/project-path.js';
 import { isValidChannelName } from '../core/channel-loader.js';
-import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
+import { isValidAid } from '../aun/aid/validation.js';
 import { isHClassPath, isLClassPath, isSameOrDescendant } from '../core/permission/protected-paths.js';
+import { findPostBootstrapWelcomeOutbox } from '../core/bootstrap-messages.js';
+import { resolveAgentLifecycle } from '../config/lifecycle.js';
+import { initializationSummary } from './agent-create.js';
+import { parseAgentWelcomeMetadata, readAgentWelcomeTemplate, renderPostBootstrapWelcomeMessage, saveAgentWelcomeTemplate, validateWelcomeTemplate } from '../utils/welcome.js';
 export { agentCreateInteractive, agentCreateNonInteractive, parseAgentOwnerArgs, resolveAgentCreatePlan, validateAgentCreatePlan, validateAgentOwnerOptions, } from './agent-create.js';
 /** Route agent lifecycle commands from a managed task through daemon IPC. */
 export async function runManagedAgentOperation(argv) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId)
         return { ok: false, code: 'MANAGED_ONLY', error: 'agent operation is not running in a managed task' };
-    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const delegationToken = readDelegationCredential();
     if (!delegationToken) {
         return { ok: false, code: 'DELEGATION_REQUIRED', error: `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task` };
     }
@@ -74,6 +80,7 @@ function toAgentListItem(info, stale = false) {
         name: info.name,
         personalName: info.personalName || null,
         status: stale && storedStatus !== 'disabled' && storedStatus !== 'error' ? 'unknown' : storedStatus,
+        lifecycle: info.lifecycle ?? null,
         channels: info.channels || [],
         projectPath: toPosix(info.projectPath || null),
         baseagent: info.baseagent || null,
@@ -158,6 +165,27 @@ export async function agentShow(aid) {
         registry.loadAll();
         const agent = registry.get(aid);
         if (!agent) {
+            const init = initializationSummary(aid);
+            if (init) {
+                return {
+                    ok: true,
+                    aid,
+                    status: 'initializing',
+                    lifecycle: loadAgent(aid)?.lifecycle ?? null,
+                    identity: { name: null, description: null },
+                    config: { baseagent: null, model: null, effort: null, chatmode: null, channels: [] },
+                    connection: null,
+                    sessions: { active: 0, last_activity: null },
+                    paths: {
+                        config: toPosix(path.join(p.agentsDir, aid, 'config.json')),
+                        agent_md: toPosix(getAgentMdPath(aid)),
+                        project: null,
+                        data: toPosix(path.join(p.agentsDir, aid, 'data')),
+                    },
+                    initialization: init,
+                    stale: true,
+                };
+            }
             const allList = registry.list();
             const available = allList.map((i) => i.name).join(', ');
             return { ok: false, error: `Agent "${aid}" not found.${available ? ` Available: ${available}` : ''}` };
@@ -203,6 +231,7 @@ export async function agentShow(aid) {
             project: toPosix(agentInfo.projectPath || null),
             data: toPosix(path.join(p.agentsDir, aid, 'data')),
         },
+        ...(initializationSummary(aid) ? { initialization: initializationSummary(aid) } : {}),
         ...(stale ? { stale: true } : {}),
     };
 }
@@ -362,7 +391,7 @@ async function runManagedAgentConfig(args, options) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId || options.trustedLocal)
         return { managed: false };
-    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const delegationToken = readDelegationCredential();
     if (!delegationToken) {
         return {
             managed: true,
@@ -469,7 +498,7 @@ export async function agentSet(aid, key, rawValue, options = {}) {
     return { ok: true, aid, key, value, reloaded };
 }
 export const AGENT_PERSONA_MAX_BYTES = 64 * 1024;
-function validatePersonaContent(content) {
+export function validatePersonaContent(content) {
     if (content.includes('\0'))
         return 'persona 只能包含文本内容';
     if (Buffer.byteLength(content, 'utf8') > AGENT_PERSONA_MAX_BYTES) {
@@ -569,6 +598,78 @@ export async function agentPersona(aid, options = {}) {
         return { ok: false, code: 'WRITE_FAILED', error: e?.message || String(e) };
     }
 }
+/** Read or replace the current Agent's confirmed Bootstrap welcome template. */
+export async function agentWelcome(aid, options = {}) {
+    if (!isValidAid(aid))
+        return { ok: false, code: 'INVALID_ARGS', error: 'Invalid Agent AID' };
+    if (options.text !== undefined) {
+        const validation = validateWelcomeTemplate(options.text);
+        if (!validation.valid)
+            return { ok: false, code: 'INVALID_ARGS', error: validation.errors.join('; ') };
+    }
+    const managedSession = !!process.env[SESSION_ID_ENV] && !options.trustedLocal;
+    const managedArgs = options.text !== undefined
+        ? ['welcome', '--text', options.text]
+        : ['welcome', 'show'];
+    if (managedSession) {
+        if (readTaskRuntimeContextFromEnv()?.selfAid !== aid) {
+            return { ok: false, code: 'SELF_AGENT_REQUIRED', error: 'welcome only targets the current Agent' };
+        }
+        const managed = await runManagedAgentOperation(managedArgs);
+        if (!managed.ok)
+            return managed;
+        return {
+            ok: true,
+            aid,
+            content: managed.content ?? null,
+            ...(managed.path ? { path: managed.path } : {}),
+            ...(managed.saved ? { saved: true } : {}),
+            ...(managed.bytes !== undefined ? { bytes: managed.bytes } : {}),
+            ...(managed.sha256 ? { sha256: managed.sha256 } : {}),
+        };
+    }
+    const config = loadAgent(aid);
+    if (!config)
+        return { ok: false, code: 'NOT_FOUND', error: 'Agent not found' };
+    if (options.text === undefined) {
+        try {
+            return { ok: true, aid, content: readAgentWelcomeTemplate(aid), path: agentWelcomePath(aid) };
+        }
+        catch (e) {
+            return { ok: false, code: 'READ_FAILED', error: e instanceof Error ? e.message : String(e) };
+        }
+    }
+    if (resolveAgentLifecycle(config) !== 'bootstrapping' || config.initialization) {
+        return { ok: false, code: 'INVALID_LIFECYCLE', error: 'welcome can only be saved during conversational Bootstrap' };
+    }
+    try {
+        if (findPostBootstrapWelcomeOutbox(aid, { includeTerminal: true }).length) {
+            if (readAgentWelcomeTemplate(aid) === options.text) {
+                return { ok: true, aid, content: options.text, saved: true, path: agentWelcomePath(aid), bytes: Buffer.byteLength(options.text, 'utf8') };
+            }
+            return { ok: false, code: 'WELCOME_FROZEN', error: 'welcome delivery has already been prepared; resume ready with the saved text' };
+        }
+        const mdPath = getAgentMdPath(aid);
+        const metadata = parseAgentWelcomeMetadata(fs.existsSync(mdPath) ? fs.readFileSync(mdPath, 'utf8') : '');
+        try {
+            for (const owner of config.owners?.length ? config.owners : [aid]) {
+                renderPostBootstrapWelcomeMessage({
+                    template: options.text, agentName: metadata.name || aid.split('.')[0], agentAid: aid,
+                    agentDescription: metadata.description, agentTags: metadata.tags,
+                    ownerAid: owner, ownerName: owner.split('.')[0],
+                });
+            }
+        }
+        catch (error) {
+            return { ok: false, code: 'WELCOME_INVALID', error: error.message };
+        }
+        const saved = saveAgentWelcomeTemplate(aid, options.text);
+        return { ok: true, aid, content: options.text, ...saved, saved: true };
+    }
+    catch (e) {
+        return { ok: false, code: 'WRITE_FAILED', error: e instanceof Error ? e.message : String(e) };
+    }
+}
 /**
  * Add or overwrite a channel instance on a per-agent config.
  *
@@ -704,7 +805,7 @@ export async function agentReady(aid) {
     }
     const p = resolvePaths();
     try {
-        const delegationToken = managedSessionId ? process.env[AGENT_DELEGATION_TOKEN_ENV] : undefined;
+        const delegationToken = managedSessionId ? readDelegationCredential() : undefined;
         if (managedSessionId && !delegationToken) {
             return { ok: false, code: 'DELEGATION_REQUIRED', error: `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task` };
         }
@@ -714,11 +815,11 @@ export async function agentReady(aid) {
             ...(managedSessionId ? { sessionId: managedSessionId, delegationToken } : {}),
         }, 30_000);
         if (!result)
-            return { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the evolcore daemon; agent ready requires daemon IPC' };
+            return { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the EvolCore daemon; agent ready requires daemon IPC' };
         if (!result.ok) {
             return { ok: false, code: result.code, error: result.error || 'Failed to complete bootstrap' };
         }
-        return { ok: true, aid, reloaded: true };
+        return { ...result, ok: true, aid, reloaded: result.reloaded === true };
     }
     catch (e) {
         return {

package/dist/cli/aun-commands.js

@@ -1,10 +1,10 @@
 import fs from 'fs';
 import path from 'path';
 import { agentMdPath, resolvePaths, resolveRoot } from '../paths.js';
-import { isExplicitGroupId } from '../aun/group-identity.js';
+import { isExplicitGroupId, normalizeGroupAid, sameGroupAid } from '../aun/group/index.js';
 import { getArgValue, isHelpFlag, wantsHelp } from './help.js';
 import { ipcQuery } from '../ipc.js';
-import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { isManagementRole } from '../config/builtin-roles.js';
 import { readBestTaskRuntimeContext } from './task-context.js';
 // ==================== AID ====================
@@ -107,7 +107,7 @@ async function runManagedAid(args, formatJson) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId)
         failManagedAid(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
-    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const delegationToken = readDelegationCredential();
     if (!delegationToken) {
         failManagedAid(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
     }
@@ -184,7 +184,7 @@ async function runManagedGroup(args, formatJson) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId)
         failManagedGroup(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
-    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const delegationToken = readDelegationCredential();
     if (!delegationToken) {
         failManagedGroup(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
     }
@@ -214,7 +214,7 @@ async function runManagedMsg(args, formatJson) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId)
         failManagedGroup(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
-    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const delegationToken = readDelegationCredential();
     if (!delegationToken) {
         failManagedGroup(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
     }
@@ -274,7 +274,7 @@ function validateManagedGroupScope(from, groupId, runtime, formatJson) {
     if (runtime.channel !== 'aun' || runtime.chatType !== 'group') {
         failManagedGroup(formatJson, 'ARGUMENT_MISMATCH', `当前角色 ${runtime.peerRole} 只能在 AUN 群聊任务中操作当前群`);
     }
-    if (!runtime.channelId || groupId !== runtime.channelId) {
+    if (!runtime.channelId || !sameGroupAid(groupId, runtime.channelId)) {
         failManagedGroup(formatJson, 'ARGUMENT_MISMATCH', `当前角色 ${runtime.peerRole} 只能操作当前群 ${runtime.channelId ?? '<unknown>'}，不能操作 ${groupId}`);
     }
 }
@@ -307,6 +307,27 @@ function renderManagedGroupResult(args, result, formatJson) {
         return;
     }
     const sub = args[0];
+    if (sub === 'history') {
+        if (result.mode === 'message')
+            console.log(result.content);
+        else {
+            console.log('本地群历史：' + result.count + ' 条');
+            for (const message of result.messages ?? []) {
+                console.log('[' + message.time + '] ' + message.from + ' → ' + message.to
+                    + ' thread=' + (message.threadId || 'main') + '\n' + message.content);
+                if (message.content_truncated)
+                    console.log('正文尚未读完');
+                if (message.content_truncated && message.msgId) {
+                    console.log('--all --message ' + message.msgId + ' --offset ' + message.next_offset);
+                }
+            }
+        }
+        if (result.next_offset != null)
+            console.log('next_offset=' + result.next_offset);
+        if (result.has_more)
+            console.log('还有更多历史');
+        return;
+    }
     if (sub === 'list') {
         if (!result.items?.length)
             console.log('(没有加入任何群)');
@@ -317,8 +338,35 @@ function renderManagedGroupResult(args, result, formatJson) {
         }
         return;
     }
+    if (sub === 'blocklist') {
+        const items = result.items ?? [];
+        console.log(items.length ? `共 ${result.total ?? items.length} 条屏蔽:` : '(没有屏蔽成员)');
+        for (const item of items) {
+            console.log(`  ${item.subject ?? item.aid ?? '-'} blocked_by=${item.blocked_by ?? '-'} reason=${item.reason ?? ''}`);
+        }
+        return;
+    }
+    if (sub === 'member-statuses') {
+        console.log(`成员上报状态（共 ${result.items?.length ?? 0} 名成员）:`);
+        for (const item of result.items ?? []) {
+            console.log(`  ${item.aid ?? '-'} online_status=${item.online_status || '(未上报)'} work_status=${item.work_status || '(未上报)'}`);
+        }
+        return;
+    }
+    if (sub === 'report-status') {
+        console.log('✓ 已上报当前成员状态');
+        console.log(JSON.stringify(result.data?.status ?? {}, null, 2));
+        return;
+    }
+    if (sub === 'block' || sub === 'unblock') {
+        const target = result.data?.block?.subject ?? result.data?.subject ?? args[3];
+        console.log(`✓ 已${sub === 'block' ? '屏蔽' : '取消屏蔽'} ${target} 接收群消息`);
+        return;
+    }
     if (sub === 'create') {
-        console.log(`✓ 已创建群 ${result.group?.group_id ?? '-'}`);
+        console.log(`✓ 已创建群 ${result.group?.group_aid ?? result.group?.group_id ?? '-'}`);
+        if (result.warning)
+            console.warn(result.warning);
         return;
     }
     if (sub === 'rules' && args[3] === 'get' && result.status === 'ok') {
@@ -338,7 +386,7 @@ function renderManagedGroupResult(args, result, formatJson) {
         return;
     }
     if (sub === 'accept-invite' || sub === 'reject-invite' || sub === 'revoke-invite') {
-        console.log(`✓ group ${sub} 完成`);
+        console.log(typeof result.message === 'string' ? result.message : `✓ group ${sub} 完成`);
         return;
     }
     console.log(`✓ group ${sub} 完成`);
@@ -992,15 +1040,47 @@ Options:
         const operation = { ls: 'storage.list', quota: 'storage.quota', upload: 'storage.upload', download: 'storage.download', rm: 'storage.delete' }[sub];
         if (!operation)
             failManagedGroup(formatJson, 'NOT_ALLOWED', `unsupported managed storage command: ${sub}`);
-        const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+        const delegationToken = readDelegationCredential();
         if (!delegationToken)
             failManagedGroup(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
+        if (sub === 'upload') {
+            const localFile = args[2];
+            const remotePath = args[3];
+            if (!localFile || !remotePath) {
+                console.error('用法: ec storage upload <aid> <local-file> <remote-path> [--public]');
+                process.exit(1);
+            }
+            if (!fs.existsSync(localFile)) {
+                console.error(`❌ 文件不存在: ${localFile}`);
+                process.exit(1);
+            }
+            const result = await ipcQuery(resolvePaths().socket, {
+                type: 'storage.upload',
+                aid,
+                localFile,
+                remotePath,
+                isPublic: args.includes('--public'),
+                sessionId: process.env.EVOLCORE_SESSION_ID,
+                delegationToken,
+            }, null);
+            if (!result)
+                failManagedGroup(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+            if (!result.ok)
+                failManagedGroup(formatJson, result.code || 'STORAGE_UPLOAD_FAILED', result.error || 'Storage upload failed');
+            if (formatJson)
+                console.log(JSON.stringify({ ok: true, objectKey: remotePath, isPublic: args.includes('--public'), ref: `${aid}/${remotePath}`, publicUrl: result.publicUrl ?? null }));
+            else {
+                console.log(`✓ 已上传: ${remotePath}${args.includes('--public') ? ' (公开)' : ''}`);
+                if (result.publicUrl)
+                    console.log(`  🔗 访问: ${result.publicUrl}`);
+                else
+                    console.log(`  引用: ${aid}/${remotePath}`);
+                console.log(`  下载: ec storage download ${aid} ${aid}/${remotePath}`);
+            }
+            return;
+        }
         const authorization = await ipcQuery(resolvePaths().socket, {
-            type: 'storage.auth',
-            operation,
-            aid,
-            sessionId: process.env.EVOLCORE_SESSION_ID,
-            delegationToken,
+            type: 'storage.auth', operation, aid, sessionId: process.env.EVOLCORE_SESSION_ID, delegationToken,
         }, 10_000);
         if (!authorization)
             failManagedGroup(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
@@ -1443,26 +1523,12 @@ Options:
             console.error(`❌ --return 仅支持 required|none: ${returnPolicyRaw}`);
             process.exit(1);
         }
-        // 文件上传进度展示（非 JSON 输出时）。仅在大文件降级到 HTTP PUT 阶段会逐块更新。
-        let lastPctShown = -1;
+        // SDK 尚未提供字节进度回调，只展示上传开始和成功完成。
         const onUploadProgress = formatJson ? undefined : (info) => {
-            if (info.phase === 'inline')
-                return; // 内联阶段不分块，跳过
-            if (info.phase === 'http-put') {
-                const pct = info.total > 0 ? Math.floor((info.bytes / info.total) * 100) : 0;
-                if (pct === lastPctShown && info.bytes < info.total)
-                    return;
-                lastPctShown = pct;
-                const mb = (n) => (n / 1024 / 1024).toFixed(2);
-                const eol = info.bytes >= info.total ? '\n' : '\r';
-                process.stderr.write(`  ⏫ uploading: ${pct}% (${mb(info.bytes)}/${mb(info.total)} MB)${eol}`);
-            }
-            else if (info.phase === 'session-create') {
-                process.stderr.write('  ⏫ requesting upload session...\n');
-            }
-            else if (info.phase === 'session-complete') {
-                process.stderr.write('  ⏫ finalizing upload...\n');
-            }
+            if (info.phase === 'upload')
+                process.stderr.write('  ⏫ uploading...\n');
+            else if (info.phase === 'done')
+                process.stderr.write('  ✓ upload complete\n');
         };
         const result = await msgSend({ from, to, body, encrypt, thread, returnPolicy: returnPolicyRaw, handoffContext: getArgValue(args, '--handoff-context'), onUploadProgress, ...commonOpts });
         if (!result.ok) {
@@ -1633,6 +1699,23 @@ export async function cmdGroup(args) {
     const aunPath = resolveAunPath(args);
     const formatJson = getArgValue(args, '--format') === 'json';
     const appSlot = getArgValue(args, '--app');
+    if (sub === 'history' && wantsHelp(args)) {
+        console.log(`用法: ec group history <self-aid> <group-aid> --unread|--all [options]
+本地 messages.jsonl 查询，不访问 Gateway，不推进 group pull/ack 游标。
+--unread               返回最早未读的未提及背景，并自动记录本页已读
+--all                  浏览群会话历史（返回最近 N 条），不改变已读状态
+--limit <N>            默认 50，范围 1–500；另有 24 KiB 单页消息预算
+--thread <main|all|id>  当前群任务缺省继承当前话题；其他调用缺省 all
+--direction <in|out|all> 按方向筛选，默认 all
+--before/--after <time> 按接收时间筛选，开区间；epoch 毫秒或 ISO 时间
+--format <text|json>    默认 text
+--message <msg-id>     配合 --all 查看指定长消息正文
+--offset <bytes>       配合 --message 从 next_offset 继续读取，默认 0
+--unread 返回的消息会记为已读；--all（包括 --all --message）始终只读，之后仍可回看。
+visitor 不开放历史；群权限仍由托管会话校验。
+旧日志通过 --all 查询，只有带本地未提及标记的新记录参与 --unread。`);
+        return;
+    }
     const rulesActionHelp = sub === 'rules' && isHelpFlag(args[3]);
     if (!sub || isHelpFlag(sub) || (wantsHelp(args) && !rulesActionHelp)) {
         console.log(`用法: ec group <command> <from-aid> [args...] [options]
@@ -1643,6 +1726,7 @@ export async function cmdGroup(args) {
   send <from> <group-id> --payload <json>              发送自定义 payload
   pull <from> <group-id> [--after-seq N] [--limit N] --app <name>   拉取群消息（必须使用独立 slot）
   ack <from> <group-id> <seq> [--app <name>]           确认已读
+  history <from> <group-id> [--unread|--all]           查询本地群消息历史
 
 群管理:
   create <from> <name> [--visibility public|private] [--description D]
@@ -1673,6 +1757,11 @@ export async function cmdGroup(args) {
   owner <from> <group-id> <new-owner-aid>               转让群主
   ban <from> <group-id> [<member-aid>] [--duration N]   封禁成员；不带 member-aid 时列出封禁
   unban <from> <group-id> <member-aid>                  解封成员
+  block <from> <group-id> <member-aid> [--reason R]     屏蔽成员接收群消息
+  unblock <from> <group-id> <member-aid>                取消屏蔽
+  blocklist <from> <group-id>                            查看屏蔽列表（群管理员）
+  report-status <from> <group-id> --online-status O --work-status W  上报自己的状态
+  member-statuses <from> <group-id>                     查看成员上报状态（独立于 online）
 
 Options:
   --app <name>          指定应用 slot（独立消费通道，不影响 daemon）
@@ -1688,7 +1777,7 @@ Options:
   --as <type>           附件类型：image|video|voice|file（仅 --file 模式）
   --text <说明>          附件说明文字（仅 --file 模式）
   --transcript <text>   语音转写（仅 --as voice）
-  --group-id <aid>      指定自定义群 AID（仅 create）
+  --group-id <aid>      指定自定义群 AID（仅 create）；省略时生成 g- 加五位随机数字
   --member-type <type>  定向邀请成员类型：human|agent（仅 invite）
   --                    end-of-options：其后所有参数按正文处理
                         （用于发送恰好等于某 flag 的文本，如 send a g -- --encrypt）
@@ -1703,7 +1792,11 @@ Options:
   ec group members sender.example.invalid 12345.example.invalid
 
 查询真实群 AID:
-  ec group list <发送方AID>`);
+  ec group list <发送方AID>
+
+群 AID 使用 base.issuer（如 ontology.example.invalid、g-12345.example.invalid）。
+群命令支持本域 base 简写；不再支持 group.issuer/base 或 base@issuer。
+g- 是名称的一部分，会完整保留；默认命名格式为 g-10000 至 g-99999。`);
         return;
     }
     const from = args[1];
@@ -1720,13 +1813,55 @@ Options:
         printGroupSendAidHint();
         process.exit(1);
     }
-    if (process.env.EVOLCORE_SESSION_ID && sub !== 'send') {
+    if ((process.env.EVOLCORE_SESSION_ID || (sub === 'history' && readDelegationCredential())) && sub !== 'send') {
         const result = await runManagedGroup(args, formatJson);
         renderManagedGroupResult(args, result, formatJson);
         return;
     }
-    const { groupSend, groupPull, groupAck, groupCreate, groupInfo, groupList, groupUpdate, groupDissolve, groupSuspend, groupResume, groupJoin, groupLeave, groupInvite, groupInvites, groupAcceptInvite, groupRejectInvite, groupRevokeInvite, groupKick, groupMembers, groupOnline, groupSetRole, groupTransferOwner, groupBan, groupUnban, groupBanlist, groupRules, groupUpdateRules, groupRulesFileGet, groupRulesFileSet, groupRulesFilePublish, } = await import('../aun/msg/index.js');
+    const { groupSend, groupPull, groupAck, groupHistory, parseGroupHistoryArgs, groupCreate, groupInfo, groupList, groupUpdate, groupDissolve, groupSuspend, groupResume, groupJoin, groupLeave, groupInvite, groupInvites, groupAcceptInvite, groupRejectInvite, groupRevokeInvite, groupKick, groupMembers, groupOnline, groupSetRole, groupTransferOwner, groupBan, groupUnban, groupBanlist, groupBlock, groupUnblock, groupBlocklist, groupReportStatus, groupMemberStatuses, groupRules, groupUpdateRules, groupRulesFileGet, groupRulesFileSet, groupRulesFilePublish, } = await import('../aun/msg/index.js');
     const commonOpts = { aunPath, slotId: appSlot };
+    if (['block', 'unblock', 'blocklist', 'report-status', 'member-statuses'].includes(sub)) {
+        // Share validation with the daemon; standalone connection options stay local.
+        const operationArgs = [];
+        for (let i = 0; i < args.length; i++) {
+            if (args[i] === '--aun-path' || args[i] === '--app') {
+                if (args[i + 1] === undefined || args[i + 1].startsWith('--')) {
+                    failManagedGroup(formatJson, 'INVALID_ARGUMENT', `${args[i]} requires a value`);
+                }
+                i++;
+            }
+            else {
+                operationArgs.push(args[i]);
+            }
+        }
+        const { resolveManagedGroupOperation } = await import('../aun/msg/managed-operation.js');
+        const parsed = resolveManagedGroupOperation(operationArgs);
+        if (!parsed.ok)
+            failManagedGroup(formatJson, parsed.code, parsed.reason);
+        const command = parsed.command;
+        const base = { from: command.from, groupId: command.groupId, ...commonOpts };
+        let result;
+        switch (sub) {
+            case 'block':
+                result = await groupBlock({ ...base, memberAid: command.memberAid, reason: command.reason });
+                break;
+            case 'unblock':
+                result = await groupUnblock({ ...base, memberAid: command.memberAid });
+                break;
+            case 'blocklist':
+                result = await groupBlocklist(base);
+                break;
+            case 'report-status':
+                result = await groupReportStatus({ ...base, onlineStatus: command.onlineStatus, workStatus: command.workStatus });
+                break;
+            default:
+                result = await groupMemberStatuses(base);
+        }
+        if (!result.ok)
+            failManagedGroup(formatJson, result.code ?? 'GROUP_OPERATION_FAILED', result.error);
+        renderManagedGroupResult(operationArgs, result, formatJson);
+        return;
+    }
     // 通用 group_id 提取（第三参数）
     const requireGroupId = () => {
         const gid = args[2];
@@ -1735,12 +1870,14 @@ Options:
             printGroupSendAidHint();
             process.exit(1);
         }
-        if (!isExplicitGroupId(gid)) {
-            console.error(`❌ 第 2 个位置参数 <group-aid> 不是有效群 AID: ${gid}`);
+        try {
+            return normalizeGroupAid(gid, from.slice(from.indexOf('.') + 1));
+        }
+        catch (error) {
+            console.error(`❌ 第 2 个位置参数 <group-aid> 不是有效群 AID: ${gid}: ${error.message}`);
             printGroupSendAidHint();
             process.exit(1);
         }
-        return gid;
     };
     // 收集 --mention（可多次；每次的值支持逗号分隔多个 aid）
     const collectMentions = () => {
@@ -1853,6 +1990,16 @@ Options:
         return parts.join(' ');
     };
     // ---- 消息 ----
+    if (sub === 'history') {
+        try {
+            const result = groupHistory(parseGroupHistoryArgs(args));
+            renderManagedGroupResult(args, result, formatJson);
+        }
+        catch (error) {
+            failManagedGroup(formatJson, error.code || 'HISTORY_READ_FAILED', error instanceof Error ? error.message : String(error));
+        }
+        return;
+    }
     if (sub === 'send') {
         const groupId = requireGroupId();
         // Group sends use the dedicated AUN message daemon route rather than the
@@ -2050,9 +2197,11 @@ Options:
         });
         outputResult(result, () => {
             const r = result;
-            console.log(`✓ 已创建群 ${r.group?.group_id}`);
+            console.log(`✓ 已创建群 ${r.group?.group_aid ?? r.group?.group_id}`);
             console.log(`  名称: ${r.group?.name}`);
             console.log(`  可见性: ${r.group?.visibility}`);
+            if (r.warning)
+                console.warn(r.warning);
         });
         return;
     }
@@ -2450,7 +2599,7 @@ Options:
         });
         return;
     }
-    console.error(`未知子命令: ${sub}\n用法: ec group [send|pull|ack|create|list|info|update|dissolve|suspend|resume|rules|join|leave|invite|invites|accept-invite|reject-invite|revoke-invite|kick|members|online|role|owner|ban|unban]`);
+    console.error(`未知子命令: ${sub}\n用法: ec group [send|pull|ack|history|create|list|info|update|dissolve|suspend|resume|rules|join|leave|invite|invites|accept-invite|reject-invite|revoke-invite|kick|members|online|role|owner|ban|unban|block|unblock|blocklist|report-status|member-statuses]`);
     process.exit(1);
 }
 // ==================== Main ====================

package/dist/cli/config.js

@@ -4,7 +4,7 @@ import { resolveConfigCommand } from '../config/resolved-config-op.js';
 import { AUTHENTICATED_CONFIG_ROLE_ENV, executeResolvedConfigCommandAsync, } from '../config/config-operation-service.js';
 import { ipcQuery } from '../ipc.js';
 import { resolvePaths } from '../paths.js';
-import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { splitConfigBatchGetArgv } from './cli-argv.js';
 function emit(formatJson, payload, text) {
     if (formatJson)
@@ -128,7 +128,7 @@ function managedSession(formatJson) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId)
         fail(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
-    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const delegationToken = readDelegationCredential();
     if (!delegationToken) {
         fail(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
     }
@@ -158,10 +158,13 @@ async function runManagedConfig(args, formatJson) {
     renderConfigExecution(response.result, formatJson);
 }
 function renderBatchGet(results, formatJson) {
-    const allOk = results.every(entry => entry.ok);
+    // Unsupported runner fields are compatibility misses, not a failure of the
+    // supported fields in the same aggregate request. Keep the per-field error
+    // while allowing clients to consume the successful values.
+    const batchOk = results.every(entry => entry.ok || entry.code === 'UNSUPPORTED_FIELD');
     if (formatJson) {
         console.log(JSON.stringify({
-            ok: allOk,
+            ok: batchOk,
             results: results.map(entry => entry.ok
                 ? getResultPayload(entry)
                 : { ok: false, field: entry.field, code: entry.code, error: entry.error }),
@@ -175,7 +178,7 @@ function renderBatchGet(results, formatJson) {
                 console.error(`${entry.field}: Error: ${entry.error} (${entry.code})`);
         }
     }
-    if (!allOk)
+    if (!batchOk)
         process.exit(1);
 }
 async function runDirectBatchGet(fields, rest, formatJson) {

package/dist/cli/contact.js

@@ -2,7 +2,7 @@ import { resolvePaths } from '../paths.js';
 import { loadAllAgents } from '../config-store.js';
 import { executeResolvedContactCommand, resolveContactCommand, } from '../config/contact-operation-service.js';
 import { ipcQuery } from '../ipc.js';
-import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { getArgValue, isHelpFlag, wantsHelp } from './help.js';
 export async function cmdContact(args) {
     if (args.length === 0 || isHelpFlag(args[0]) || wantsHelp(args)) {
@@ -39,7 +39,7 @@ function output(value, json) {
 }
 async function runManaged(args, json) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
-    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const delegationToken = readDelegationCredential();
     if (!delegationToken)
         fail(`${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`, 'DELEGATION_REQUIRED');
     let response = null;

package/dist/cli/ctl-command.js

@@ -1,7 +1,7 @@
 import { resolvePaths } from '../paths.js';
 import { ipcQuery } from '../ipc.js';
 import { isHelpFlag, wantsHelp } from './help.js';
-import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
+import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 // ==================== Ctl ====================
 const CTL_HELP = `用法: ec ctl <command> [args...]
 
@@ -47,7 +47,7 @@ export async function cmdCtl(args) {
         type: 'ctl',
         cmd,
         sessionId,
-        delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
+        delegationToken: readDelegationCredential(),
     }, 10_000);
     if (!result) {
         console.error('错误: 无法连接 evolcore 服务');