evolcore 0.0.27 → 0.0.28

package/CHANGELOG.md

@@ -5,24 +5,35 @@
 
 ## Unreleased
 
+## 0.0.28 (2026-09-24)
+
+- 增加 npm 版本缓存，改进升级状态展示及启动、重启流程。
+- 改进 AUN 回复投递与消息展示。
+- 加固 Windows CLI 启动和 PowerShell 命令解析，完善 Codex CLI 诊断。
+- 强化 Menu 请求校验与错误处理。
+
 ## 0.0.27 (2026-09-24)
 
+### AUN、群聊与消息
+
 - 持久化 AUN 群邀请的 Owner 审核流程，并增加 Base Agent 清单查询入口。
-- 支持 EC Agent 的角色级模型与推理强度策略；为 Claude、Codex、EC Agent runner 会话增加任务历史聚合，并在未确认中断后设置会话重用栅栏。
-- 模型类 Trigger 支持单次执行时限；目标会话失联时明确记录为孤儿执行失败。
-- 修复 AUN 撤回事件导致的私聊游标跳跃；手动停止的 Agent reload 后恢复渠道连接。
-- 规范 Shell 工具活动中的命令展示；本地缺少证书时跳过控制 AID 名片发布。
-- 收紧 Codex 分支会话的权限上下文，避免从旧会话缓存继承过期授权。
-- 移除 CodeBuddy、QwenWork 非标准 Base Agent 的运行时自动管理路径；EC Agent 默认配置恢复显式凭证要求。
-- 移除运行时命令索引中尚未实现的组织管理、任务、资源和工作流命令说明。
-- 修复 AUN 出站 payload 截断按原始字符串大小判断的问题；现在按最终 JSON/UTF-8 大小压缩嵌套日志和转义输出，避免可截断负载被误判为仍超限。
-- 升级 `@agentunion/fastaun` 至 `0.5.17`，同步运行时最低版本要求；包含 Storage / Group FS 上传 Content-Type 一致性修复，避免 OSS 预签名校验不一致导致的 403。
-- 附件 MIME 采用 SDK 字节识别及存储结果；头像与 Storage 上传、删除复用 SDK 文件系统，公开文件返回稳定 AID URL。
-- 订阅 `agentmd.changed` 失效 Core 身份缓存，按需刷新并保留失败重试，避免旧查询覆盖更新。
-- 对齐无持久序号消息的 Pull 类型，按实际返回透传 volatile 元数据，并修正 SDK 未返回 count 时的消息数量。
-- 群命令与托管群文件操作支持 `{base}.{issuer}` 群 AID；不再接受或转换 `group.{issuer}/{base}`，保留当前群权限检查。
-- 默认建群名称改为 `g-` 加五位随机数字（10000–99999），明确身份占用时最多尝试 5 次；自定义名称完整保留 `g-`，并提示实际创建身份与请求不一致的情况。
-- 群参数格式校验与主体类型提示分离；关系角色查询优先采用已存储的关系类型和已验签身份信息。
+- 支持 EC Agent 的角色级模型与推理强度策略；完善 Claude、Codex、EC Agent 会话的任务历史和中断恢复。
+- 模型类 Trigger 支持单次执行时限；目标会话失联时明确记录为失败。
+- 修复 AUN 撤回消息造成的私聊游标跳跃；手动停止的 Agent 重新加载后可恢复渠道连接。
+- 规范工具活动中的 Shell 命令展示，并在缺少本地证书时跳过控制 AID 名片发布。
+- 优化消息大小处理，提升长消息和复杂内容的发送稳定性。
+- 升级 AUN SDK 至 `0.5.17`，改进消息、群文件和存储上传的兼容性。
+- 改进附件、头像和文件存储处理，提升文件类型识别、上传和公开访问的稳定性。
+- 改进身份信息缓存刷新，确保对端资料更新后及时生效。
+- 支持无连续编号消息的完整拉取信息，并修正消息数量统计。
+- 群命令和托管群文件操作支持标准群 AID 格式。
+- 优化群名称生成和冲突处理，自定义名称保持原样。
+- 改进群组参数校验和成员身份识别，提升群聊操作准确性。
+
+### Agent、权限与运行稳定性
+
+- 收紧 Codex 分支会话的权限上下文，避免旧会话继承过期授权。
+- 完善 Agent 初始化、会话恢复、权限边界和运行状态处理。
 
 ## 0.0.26 (2026-09-18)
 

package/dist/agents/baseagent.js

@@ -12,22 +12,26 @@
 import fs from 'fs';
 import path from 'path';
 import os from 'os';
-import { commandExists, isWindows, resolveProbePath } from '../utils/cross-platform.js';
+import { buildCliLaunchCommand, commandExists, isWindows, resolvePowerShellShimPath, resolveProbePath, } from '../utils/cross-platform.js';
 import { execFileSync } from 'child_process';
 import { parse as parseToml } from 'smol-toml';
 /** Resolve the installed Codex CLI entrypoint, including npm shims on Windows. */
 export function resolveCodexCliPath() {
     return resolveProbePath('codex');
 }
+/** Return a PS1-only Codex shim for installation diagnostics, never execution. */
+export function resolveCodexPowerShellShimPath() {
+    return resolvePowerShellShimPath('codex');
+}
 export function resolveCodexLaunchCommand(args, options = {}) {
     const windows = options.isWindows ?? isWindows;
     const commandPath = options.commandPath !== undefined ? options.commandPath : resolveCodexCliPath();
     if (!commandPath)
         return null;
-    if (windows && /\.(cmd|bat)$/i.test(commandPath)) {
-        return { command: options.comSpec ?? process.env.ComSpec ?? 'cmd.exe', args: ['/d', '/s', '/c', commandPath, ...args] };
-    }
-    return { command: commandPath, args };
+    return buildCliLaunchCommand(commandPath, args, {
+        isWindows: windows,
+        comSpec: options.comSpec,
+    });
 }
 /** Execute a Codex CLI command using the resolved npm shim/path. */
 export function execCodexCliSync(args, options) {
@@ -40,6 +44,7 @@ export function execCodexCliSync(args, options) {
     return execFileSync(launchCommand.command, launchCommand.args, {
         ...(options ?? {}),
         windowsHide: isWindows,
+        windowsVerbatimArguments: launchCommand.windowsVerbatimArguments,
     });
 }
 const BASEAGENT_ALIASES = {

package/dist/agents/codex/app-server-client.js

@@ -481,6 +481,12 @@ export class CodexAppServerClient {
         const launchCommand = resolveCodexLaunchCommand(args);
         if (!launchCommand)
             throw new Error('Codex CLI not found');
+        logger.info(`[CodexAppServer] launch ${JSON.stringify({
+            resolvedPath: launchCommand.resolvedPath,
+            launcherKind: launchCommand.launcherKind,
+            launcherPath: launchCommand.launcherPath,
+            codexVersion: this.options.codexVersion ?? null,
+        })}`);
         try {
             let command = launchCommand.command;
             let commandArgs = launchCommand.args;
@@ -509,6 +515,7 @@ export class CodexAppServerClient {
                 env,
                 stdio: ['pipe', 'pipe', 'pipe'],
                 windowsHide: process.platform === 'win32',
+                windowsVerbatimArguments: launchCommand.windowsVerbatimArguments,
             });
             try {
                 this.processRegistrationPath = registerCodexAppServerProcess(this.proc.pid);

package/dist/agents/codex/catalog.js

@@ -7,7 +7,13 @@ async function cliModels() {
     if (!launch)
         return null;
     return new Promise(resolve => {
-        execFile(launch.command, launch.args, { timeout: 3000, windowsHide: true, maxBuffer: 16 * 1024 * 1024, encoding: 'utf8' }, (error, stdout) => {
+        execFile(launch.command, launch.args, {
+            timeout: 3000,
+            windowsHide: true,
+            windowsVerbatimArguments: launch.windowsVerbatimArguments,
+            maxBuffer: 16 * 1024 * 1024,
+            encoding: 'utf8',
+        }, (error, stdout) => {
             try {
                 if (error)
                     return resolve(null);

package/dist/agents/codex-runner.js

@@ -7,7 +7,7 @@ import { checkReadonly, checkDangerousCommand, evaluateToolPreflight } from '../
 import { normalizeExecutionPermissionMode, normalizePermissionMode, resolvePhaseOneExecutionSandbox } from '../core/permission/mode.js';
 import { assertWindowsCodexFilesystemRuleBudget, buildCodexProtectedFilesystemRules, isSameOrDescendant, resolveProtectedCandidate, } from '../core/permission/protected-paths.js';
 import { CODEX_THREAD_ACTIVE_WRITER, CodexAppServerClient, } from './codex/app-server-client.js';
-import { resolveOpenaiConfig, resolveCodexCliPath } from './baseagent.js';
+import { resolveOpenaiConfig, resolveCodexCliPath, resolveCodexPowerShellShimPath, } from './baseagent.js';
 import { logger } from '../utils/logger.js';
 import { summarizeToolInputForAudit } from '../utils/tool-summary.js';
 import { auditCodexApprovalDecision, auditPermissionLifecycle, auditToolPreflightDenial } from '../core/auth/authorization-audit.js';
@@ -212,10 +212,13 @@ function compactCodexProbeText(value, maxLength = 600) {
     const text = value.replace(/\s+/gu, ' ').trim();
     return text.length <= maxLength ? text : `${text.slice(0, maxLength - 3).trimEnd()}...`;
 }
-function logCodexProbeFailure(args, startedAt, error, timeoutMs) {
+function logCodexProbeFailure(args, startedAt, error, timeoutMs, launch) {
     const detail = error;
     logger.warn(`[CodexProbe] CLI probe failed: ${JSON.stringify({
         command: ['codex', ...args],
+        resolvedPath: launch?.resolvedPath ?? null,
+        launcherKind: launch?.launcherKind ?? null,
+        launcherPath: launch?.launcherPath ?? null,
         path: detail?.path ?? null,
         spawnargs: detail?.spawnargs ?? null,
         elapsedMs: Date.now() - startedAt,
@@ -229,13 +232,13 @@ function logCodexProbeFailure(args, startedAt, error, timeoutMs) {
         stderr: compactCodexProbeText(detail?.stderr),
     })}`);
 }
-function probeCodexCli(args) {
-    return probeCliSync('codex', args, { onFailure: logCodexProbeFailure });
+function probeCodexCli(args, executable) {
+    return probeCliSync('codex', args, { executable, onFailure: logCodexProbeFailure });
 }
-export function getCodexCliVersion() {
+export function getCodexCliVersion(executable) {
     const startedAt = Date.now();
     try {
-        const output = probeCodexCli(['--version']);
+        const output = probeCodexCli(['--version'], executable);
         const version = parseCodexCliVersion(output);
         if (!version) {
             logCodexProbeFailure(['--version'], startedAt, {
@@ -254,9 +257,15 @@ export function getCodexCliVersion() {
 export function getCodexAppServerAvailability() {
     const cliPath = resolveCodexCliPath();
     if (!cliPath) {
-        return { available: false, reason: '未检测到 Codex CLI。' };
+        const powershellShim = resolveCodexPowerShellShimPath();
+        return {
+            available: false,
+            reason: powershellShim
+                ? '检测到 codex.ps1，但当前 Windows 启动路径要求 codex.exe/codex.cmd/codex.bat；请重新安装 @openai/codex 以恢复 npm shim。'
+                : '未检测到 Codex CLI。',
+        };
     }
-    const version = getCodexCliVersion();
+    const version = getCodexCliVersion(cliPath);
     if (!version) {
         return { available: false, reason: '无法读取 Codex CLI 版本。' };
     }
@@ -269,7 +278,7 @@ export function getCodexAppServerAvailability() {
         };
     }
     try {
-        probeCodexCli(['app-server', '--help']);
+        probeCodexCli(['app-server', '--help'], cliPath);
         return { available: true, version };
     }
     catch (error) {
@@ -284,10 +293,21 @@ export function isCodexAppServerAvailable() {
 }
 /** Daemon startup/hot reload use asynchronous probes; sync CLI callers share the cache. */
 export async function getCodexAppServerAvailabilityAsync() {
+    const cliPath = resolveCodexCliPath();
     const options = {
         timeouts: [CODEX_CLI_PROBE_TIMEOUT_MS, CODEX_CLI_PROBE_RETRY_TIMEOUT_MS],
+        executable: cliPath ?? undefined,
         onFailure: logCodexProbeFailure,
     };
+    if (!cliPath) {
+        const powershellShim = resolveCodexPowerShellShimPath();
+        return {
+            available: false,
+            reason: powershellShim
+                ? '检测到 codex.ps1，但当前 Windows 启动路径要求 codex.exe/codex.cmd/codex.bat；请重新安装 @openai/codex 以恢复 npm shim。'
+                : '未检测到 Codex CLI。',
+        };
+    }
     let version;
     try {
         version = parseCodexCliVersion(await probeCli('codex', ['--version'], options)) ?? undefined;
@@ -348,6 +368,7 @@ export class CodexRunner {
     /** Fallback authorization lifecycle ids for app-server requests without an RPC id. */
     approvalLifecycleIds = new WeakMap();
     resolvedConfig;
+    codexVersion;
     pendingInterruptTtlMs = 30_000;
     /** Fallback for direct runner callers that do not inject SessionManager. */
     codexSessionFileAdapter = new CodexSessionFileAdapter();
@@ -389,6 +410,7 @@ export class CodexRunner {
         if (this.resolvedConfig.effort)
             this.effort = this.resolvedConfig.effort;
         this.onSessionIdUpdate = callbacks.onSessionIdUpdate;
+        this.codexVersion = runtime?.codexVersion;
     }
     getAppServerClient(fullAccess = false) {
         const existing = fullAccess ? this.fullAccessAppServerClient : this.appServerClient;
@@ -396,6 +418,7 @@ export class CodexRunner {
             return existing;
         const client = new CodexAppServerClient({
             apiKey: this.resolvedConfig.apiKey,
+            codexVersion: this.codexVersion,
             authType: this.resolvedConfig.authType,
             baseUrl: this.resolvedConfig.baseUrl,
             provider: this.resolvedConfig.provider,
@@ -3056,6 +3079,9 @@ export class CodexRunner {
             }
             return await denyInfrastructure('ec_command_not_canonical', canonicalEcApproval?.parseFailure
                 ? `EC command approval denied because canonical argv parsing failed (${canonicalEcApproval.parseFailure.issue})`
+                    + (canonicalEcApproval.parseFailure.dialect === 'powershell' && canonicalEcApproval.parseFailure.issue === 'invalid-quote'
+                        ? '. PowerShell treats smart quotes as delimiters too; escape quotes for PowerShell or use --text-from-file for message text.'
+                        : '')
                 : 'EC command approval denied because no canonical argv could be derived');
         }
         try {
@@ -4680,7 +4706,10 @@ export class CodexRunner {
                     const text = typeof item.text === 'string' && item.text ? item.text : buffered;
                     if (text) {
                         state.lastAssistantUuid = item.id || state.turnId;
-                        yield { type: 'text', text, assistantUuid: state.lastAssistantUuid };
+                        yield {
+                            type: 'text', text, assistantUuid: state.lastAssistantUuid,
+                            ...(item.phase === 'commentary' || item.phase === 'final_answer' ? { phase: item.phase } : {}),
+                        };
                     }
                     if (item.id)
                         state.agentMessageDeltaText.delete(item.id);
@@ -5077,6 +5106,14 @@ export class CodexAgentPlugin {
                 },
             },
         };
-        return { evolagentName: agent.name, baseagent: 'codex', agent: new CodexRunner(merged, callbacks, { agentAid: agent.config.aid, agentConfig: agent.config }) };
+        return {
+            evolagentName: agent.name,
+            baseagent: 'codex',
+            agent: new CodexRunner(merged, callbacks, {
+                agentAid: agent.config.aid,
+                agentConfig: agent.config,
+                codexVersion: availability.version,
+            }),
+        };
     }
 }

package/dist/aun/menu/client.js

@@ -67,6 +67,7 @@ export class ManagedMenuClient {
         let timer;
         try {
             for (let attempt = 0; attempt < attempts; attempt++) {
+                options.beforeSend?.();
                 const response = new Promise((resolve, reject) => {
                     this.pending.set(key, { resolve, reject });
                     timer = setTimeout(() => reject(new MenuClientError('TIMEOUT', 'Remote Menu response timed out')), timeout);

package/dist/channels/aun.js

@@ -715,8 +715,9 @@ export class AUNChannel {
      * 统一的 RPC 调用包装：自动记录 OUT 发送、.ok 结果、.error 错误（含 trace + daemon.log 失败日志）。
      * 所有 client.call() 都应通过此方法调用，保证 aun-trace 里每个 OUT 调用都有"发+收/错"成对记录。
      */
-    callClient(method, params, lane = 'normal', onStart) {
+    callClient(method, params, lane = 'normal', onStart, onPrepared) {
         params = menuTransportParams(method, params);
+        onPrepared?.(params);
         return this.withOutboundSendGate(method, () => (this.client.call(method, params).then(value => value)), lane, onStart);
     }
     withOutboundSendGate(method, run, lane = 'normal', onStart) {
@@ -784,7 +785,6 @@ export class AUNChannel {
         });
     }
     async callAndTrace(method, params, opts) {
-        this.trace('OUT', method, params);
         // 计时同时覆盖排队和 SDK 往返；callStartedAt 让日志能区分「本地队列堵塞」
         // 与「网关慢」。两者对 /evolhelp 等命令的回复延迟都有直接影响。
         const rpcStart = Date.now();
@@ -794,6 +794,11 @@ export class AUNChannel {
         try {
             const result = await this.callClient(method, params, opts?.lane ?? 'normal', () => {
                 callStartedAt = Date.now();
+            }, preparedParams => {
+                // Apply Menu compatibility exactly once, then log the same parameters
+                // passed to the SDK (TTL and device targeting may both be removed).
+                params = preparedParams;
+                this.trace('OUT', method, params);
             });
             const durationMs = Date.now() - rpcStart;
             const rpcDurationMs = Date.now() - callStartedAt;
@@ -844,14 +849,17 @@ export class AUNChannel {
         state.maxDurationMs = 0;
         this.rpcWarningStates.set(key, state);
         const summary = suppressed > 0 ? ` suppressed=${suppressed} max_duration=${maxDurationMs}ms` : '';
+        const menuTransport = method === 'message.send' && payloadType.startsWith('menu.')
+            ? ` ttl=${params.ttl ?? 'default'} to_device_id=${JSON.stringify(params.to_device_id ?? null)}`
+            : '';
         if (kind === 'failed') {
             const name = error instanceof Error ? error.name : '';
             const message = error instanceof Error ? error.message : String(error ?? '');
             const errorLabel = `${name}${code ? `(${code})` : ''} ${message}`.trim();
-            logger.warn(`${this.logPrefix()} rpc ${method} failed after ${durationMs}ms: ${errorLabel} queue_wait=${queueWaitMs}ms rpc=${rpcDurationMs}ms payload=${payloadType}${summary}`);
+            logger.warn(`${this.logPrefix()} rpc ${method} failed after ${durationMs}ms: ${errorLabel} queue_wait=${queueWaitMs}ms rpc=${rpcDurationMs}ms payload=${payloadType}${menuTransport}${summary}`);
             return;
         }
-        logger.warn(`${this.logPrefix()} rpc ${method} SLOW: duration=${durationMs}ms queue_wait=${queueWaitMs}ms rpc=${rpcDurationMs}ms payload=${payloadType}${summary} (发送管线可能饱和或链路抖动)`);
+        logger.warn(`${this.logPrefix()} rpc ${method} SLOW: duration=${durationMs}ms queue_wait=${queueWaitMs}ms rpc=${rpcDurationMs}ms payload=${payloadType}${menuTransport}${summary} (发送管线可能饱和或链路抖动)`);
     }
     observerQueueDropCount = 0;
     observerQueueDropLastWarnAt = 0;
@@ -4838,7 +4846,12 @@ export class AUNChannel {
         }
         // 从 context.metadata.source 读取 source，默认为 'daemon'
         const source = context?.metadata?.source ?? 'daemon';
-        const payload = withAunAttention({ type: 'text', text: finalText }, context?.attention);
+        // Put the label in the visible body without requiring client title support.
+        // Derive it from the durable context without mutating the stored text.
+        const title = delivery.chatType === 'private' ? context?.title?.trim() : undefined;
+        const wireText = title && finalText.split(/\r?\n/, 1)[0].trim() !== title
+            ? `${title}\n\n${finalText}` : finalText;
+        const payload = withAunAttention({ type: 'text', text: wireText }, context?.attention);
         if (delivery.chatType === 'group') {
             const extracted = this.extractMentionEntriesFromText(finalText);
             if (extracted.length > 0)
@@ -4863,7 +4876,7 @@ export class AUNChannel {
             registerAunCausation(causationRef, this.config.aid, channelId, causation);
         }
         // 诊断日志：记录 payload 构造结果（含 task_id / thread_id / chatmode）
-        logger.info(`${this.logPrefix()} deliverTextEntry: channelId=${channelId} thread_id=${payload.thread_id ?? 'none'} task_id=${payload.task_id ?? 'none'} chatmode=${payload.chatmode ?? 'none'} source=${source} textLen=${finalText.length}`);
+        logger.info(`${this.logPrefix()} deliverTextEntry: channelId=${channelId} thread_id=${payload.thread_id ?? 'none'} task_id=${payload.task_id ?? 'none'} chatmode=${payload.chatmode ?? 'none'} source=${source} textLen=${wireText.length}`);
         const isGroup = delivery.chatType === 'group';
         const targetAid = channelId;
         if (entry.deliveryReceipt) {
@@ -6239,6 +6252,8 @@ export class AUNChannelPlugin {
                 if (replyCtx) {
                     replyCtx = { ...replyCtx };
                     delete replyCtx.attention;
+                    // Assign titles per payload below, never inherit a final-reply title.
+                    delete replyCtx.title;
                 }
                 if (attention !== undefined)
                     replyCtx = { ...(replyCtx ?? {}), attention };
@@ -6283,8 +6298,9 @@ export class AUNChannelPlugin {
                                     ? { forkAnchor: payload.metadata.forkAnchor } : {}),
                             },
                         };
-                        if (payload.kind === 'result.text' && payload.isFinal)
+                        if (payload.kind === 'result.text' && payload.isFinal && delivery.chatType === 'private') {
                             sendCtx.title = '✅ 最终回复:';
+                        }
                         let result;
                         try {
                             result = await channel.sendMessage(channelId, payload.text, sendCtx);