evolcore 0.0.3 → 0.0.4

package/dist/core/command/menu-token-store.js

@@ -0,0 +1,102 @@
+import { createHash, randomBytes, timingSafeEqual } from 'crypto';
+import path from 'path';
+import { agentDataDir } from '../../paths.js';
+import { atomicReadJson, atomicWriteJson } from '../../utils/atomic-write.js';
+export const DEFAULT_MENU_TOKEN_IDLE_TIMEOUT_SECONDS = 30 * 24 * 60 * 60;
+export const MAX_MENU_TOKENS_PER_AGENT = 1_000;
+function hashToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+function isTokenRecord(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const record = value;
+    return typeof record.peerAid === 'string'
+        && record.peerAid.trim().length > 0
+        && typeof record.tokenHash === 'string'
+        && /^[a-f0-9]{64}$/.test(record.tokenHash)
+        && typeof record.requestedAt === 'number'
+        && Number.isFinite(record.requestedAt)
+        && record.requestedAt >= 0
+        && typeof record.lastUsedAt === 'number'
+        && Number.isFinite(record.lastUsedAt)
+        && record.lastUsedAt >= 0
+        && typeof record.idleTimeout === 'number'
+        && Number.isInteger(record.idleTimeout)
+        && record.idleTimeout > 0;
+}
+function isExpired(record, now) {
+    return now - record.lastUsedAt >= record.idleTimeout * 1000;
+}
+function hashesEqual(left, right) {
+    const leftBytes = Buffer.from(left, 'hex');
+    const rightBytes = Buffer.from(right, 'hex');
+    return leftBytes.length === rightBytes.length && timingSafeEqual(leftBytes, rightBytes);
+}
+export function menuTokenStorePath(selfAid) {
+    return path.join(agentDataDir(selfAid), 'menu-tokens.json');
+}
+export class MenuTokenStore {
+    maxRecords;
+    constructor(maxRecords = MAX_MENU_TOKENS_PER_AGENT) {
+        this.maxRecords = maxRecords;
+    }
+    issue(selfAid, peerAid, metadata = {}, now = Date.now()) {
+        const file = this.read(selfAid);
+        const idleTimeout = DEFAULT_MENU_TOKEN_IDLE_TIMEOUT_SECONDS;
+        const tokens = file.tokens.filter(record => record.peerAid !== peerAid && !isExpired(record, now));
+        if (tokens.length >= this.maxRecords) {
+            if (tokens.length !== file.tokens.length)
+                this.write(selfAid, tokens);
+            return null;
+        }
+        const menuToken = `mt_${randomBytes(32).toString('base64url')}`;
+        tokens.push({
+            peerAid,
+            tokenHash: hashToken(menuToken),
+            requestedAt: now,
+            lastUsedAt: now,
+            idleTimeout,
+            ...(metadata.clientName ? { clientName: metadata.clientName } : {}),
+            ...(metadata.clientVersion ? { clientVersion: metadata.clientVersion } : {}),
+            ...(metadata.evolVersion ? { evolVersion: metadata.evolVersion } : {}),
+        });
+        this.write(selfAid, tokens);
+        return { menuToken, idleTimeout };
+    }
+    use(selfAid, peerAid, menuToken, now = Date.now()) {
+        const file = this.read(selfAid);
+        const activeTokens = file.tokens.filter(record => !isExpired(record, now));
+        const tokenHash = typeof menuToken === 'string' && menuToken.length > 0 && menuToken.length <= 256
+            ? hashToken(menuToken)
+            : undefined;
+        const matchingIndex = tokenHash
+            ? activeTokens.findIndex(record => record.peerAid === peerAid && hashesEqual(record.tokenHash, tokenHash))
+            : -1;
+        if (matchingIndex < 0) {
+            if (activeTokens.length !== file.tokens.length)
+                this.write(selfAid, activeTokens);
+            return false;
+        }
+        activeTokens[matchingIndex] = { ...activeTokens[matchingIndex], lastUsedAt: now };
+        this.write(selfAid, activeTokens);
+        return true;
+    }
+    read(selfAid) {
+        try {
+            const value = atomicReadJson(menuTokenStorePath(selfAid));
+            if (!value || typeof value !== 'object' || Array.isArray(value))
+                return { schemaVersion: 1, tokens: [] };
+            const file = value;
+            if (file.schemaVersion !== 1 || !Array.isArray(file.tokens))
+                return { schemaVersion: 1, tokens: [] };
+            return { schemaVersion: 1, tokens: file.tokens.filter(isTokenRecord) };
+        }
+        catch {
+            return { schemaVersion: 1, tokens: [] };
+        }
+    }
+    write(selfAid, tokens) {
+        atomicWriteJson(menuTokenStorePath(selfAid), { schemaVersion: 1, tokens });
+    }
+}

package/dist/core/command/slash-gate.js

@@ -71,7 +71,7 @@ export function guardRoleCommand(content, activeChatType, isAdmin) {
     const userGroupCommands = [
         '/status', '/help', '/evolhelp', '/check', '/chatmode', '/mentionmode',
         '/model', '/effort', '/baseagent', '/perm', '/activity', '/stop',
-        '/resume', '/trigger',
+        '/resume', '/trigger', '/file',
     ];
     const userCommands = activeChatType === 'group' && !isAdmin
         ? userGroupCommands

package/dist/core/command/slash-handler.js

@@ -432,9 +432,23 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         ...params,
         subject: authSubject,
     });
-    // roleGuard 仅对进程级命令（/restart /reload）放行 daemon owner 绕过，
+    const canAccessSlashOperation = (operation, scope) => {
+        const args = scope === 'relation'
+            ? buildSlashRelationIntentArgs({ selfAid: authSubject.selfAid, peerKey: authSubject.peerKey })
+            : {};
+        return authorizeOperation({
+            source: 'slash',
+            intent: { operation, scope, source: 'slash', args },
+            subject: authSubject,
+            audit: false,
+        }).allow;
+    };
+    // roleGuard 仅对进程级命令（/restart /upgrade /reload）放行 daemon owner 绕过，
     // 其余命令严格按 agent-channel 的 isAdmin 判定，不越权。
-    const isProcessLevelSlash = normalizedContent === '/restart' || normalizedContent === '/reload' || normalizedContent.startsWith('/reload ');
+    const isProcessLevelSlash = normalizedContent === '/restart'
+        || normalizedContent === '/upgrade'
+        || normalizedContent === '/reload'
+        || normalizedContent.startsWith('/reload ');
     const roleGuard = guardRoleCommand(normalizedContent, activeChatType, isAdmin || (isDaemonOwner && isProcessLevelSlash));
     if (roleGuard)
         return roleGuard;
@@ -459,18 +473,50 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         return undefined;
     // /help 命令不需要会话
     if (normalizedContent === '/help') {
+        const canReadModel = canAccessSlashOperation('model.current', 'relation')
+            || canAccessSlashOperation('model.list', 'relation');
+        const canUseModel = canAccessSlashOperation('model.use', 'relation');
+        const canSetEffort = canAccessSlashOperation('model.effort', 'relation');
+        const canReadPermission = canAccessSlashOperation('permission.current', 'relation');
+        const canAnswerPermission = canAccessSlashOperation('permission.answer', 'relation');
+        const canReadChatmode = canAccessSlashOperation('chatmode.current', 'relation');
+        const canSetChatmode = canAccessSlashOperation('chatmode.update', 'relation');
+        const canReadMentionmode = activeChatType === 'group'
+            && canAccessSlashOperation('mentionmode.current', 'relation');
+        const canSetMentionmode = activeChatType === 'group'
+            && canAccessSlashOperation('mentionmode.update', 'relation');
+        const canUseFile = canAccessSlashOperation('file.fetch', 'filesystem');
         const appendProcessCommands = (lines) => {
             if (!isDaemonOwner)
                 return;
-            lines.push('', '🛠️ 进程级运维：', '  /restart - 重启服务', '  /reload [aid] - 热重载 Agent 配置');
+            lines.push('', '🛠️ 进程级运维：', '  /restart - 重启服务', '  /upgrade - 检查版本更新', '  /reload [aid] - 热重载 Agent 配置');
         };
         if (!isAdmin && activeChatType === 'group') {
             const lines = [
                 '可用命令：',
+                ...((canReadModel || canUseModel || canSetEffort) ? [
+                    '',
+                    '🤖 Agent 与模型：',
+                    ...(canReadModel || canUseModel ? [`  /model${canUseModel ? ' [model]' : ''} - 查看${canUseModel ? '或切换' : ''}模型`] : []),
+                    ...(canSetEffort ? ['  /effort [level] - 查看或切换推理强度'] : []),
+                ] : []),
+                ...((canReadChatmode || canSetChatmode || canReadMentionmode || canSetMentionmode) ? [
+                    '',
+                    '💬 聊天设置：',
+                    ...(canReadChatmode || canSetChatmode ? [`  /chatmode${canSetChatmode ? ' [interactive|proactive]' : ''} - 查看${canSetChatmode ? '或切换' : ''}会话模式`] : []),
+                    ...(canReadMentionmode || canSetMentionmode ? [`  /mentionmode${canSetMentionmode ? ' [mention-only|disabled]' : ''} - 查看${canSetMentionmode ? '或切换' : ''}群聊 @ 处理模式`] : []),
+                ] : []),
+                ...(canReadPermission || canAnswerPermission ? [
+                    '',
+                    '🔐 权限管理：',
+                    ...(canReadPermission ? ['  /perm - 查看当前权限模式'] : []),
+                    ...(canAnswerPermission ? ['  /perm allow|always|deny - 审批权限请求'] : []),
+                ] : []),
                 '',
                 '其他：',
                 '  /status - 显示会话状态',
                 '  /check - 检查 EvolAgent 实例健康',
+                ...(canUseFile ? ['  /file <path> - 发送项目内文件'] : []),
                 '  /help - 显示此帮助信息',
             ];
             appendProcessCommands(lines);
@@ -487,6 +533,28 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 '  /del <名称> - 删除指定会话（仅解绑，不删除文件）',
                 '  /status - 显示会话状态',
                 '  /check - 检查 EvolAgent 实例健康',
+                ...((canReadModel || canUseModel || canSetEffort) ? [
+                    '',
+                    '🤖 Agent 与模型：',
+                    ...(canReadModel || canUseModel ? [`  /model${canUseModel ? ' [model]' : ''} - 查看${canUseModel ? '或切换' : ''}模型`] : []),
+                    ...(canSetEffort ? ['  /effort [level] - 查看或切换推理强度'] : []),
+                ] : []),
+                ...((canReadChatmode || canSetChatmode) ? [
+                    '',
+                    '💬 聊天设置：',
+                    `  /chatmode${canSetChatmode ? ' [interactive|proactive]' : ''} - 查看${canSetChatmode ? '或切换' : ''}会话模式`,
+                ] : []),
+                ...(canReadPermission || canAnswerPermission ? [
+                    '',
+                    '🔐 权限管理：',
+                    ...(canReadPermission ? ['  /perm - 查看当前权限模式'] : []),
+                    ...(canAnswerPermission ? ['  /perm allow|always|deny - 审批权限请求'] : []),
+                ] : []),
+                ...(canUseFile ? [
+                    '',
+                    '🧰 工具：',
+                    '  /file <path> - 发送项目内文件',
+                ] : []),
                 '',
                 '❓ 帮助：',
                 '  /help - 显示此帮助信息',
@@ -512,18 +580,18 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             '',
             '🤖 Agent 与模型：',
             '  /baseagent [name] - 查看或切换 Agent 后端（别名: /base）',
-            '  /model [model] - 查看或切换模型',
-            '  /effort [level] - 查看或切换推理强度',
+            ...(canReadModel || canUseModel ? [`  /model${canUseModel ? ' [model]' : ''} - 查看${canUseModel ? '或切换' : ''}模型`] : []),
+            ...(canSetEffort ? ['  /effort [level] - 查看或切换推理强度'] : []),
             '',
             '💬 聊天设置：',
             '  /activity [all|text|none] - 查看/控制中间输出显示模式',
-            '  /chatmode [interactive|proactive] - 查看/切换会话模式（被动响应或主动推进）',
-            '  /mentionmode [mention-only|disabled] - 查看/切换群聊 @ 处理模式（仅@响应或全部响应，仅群聊）',
+            ...(canReadChatmode || canSetChatmode ? [`  /chatmode${canSetChatmode ? ' [interactive|proactive]' : ''} - 查看${canSetChatmode ? '/切换' : ''}会话模式（被动响应或主动推进）`] : []),
+            ...(canReadMentionmode || canSetMentionmode ? [`  /mentionmode${canSetMentionmode ? ' [mention-only|disabled]' : ''} - 查看${canSetMentionmode ? '/切换' : ''}群聊 @ 处理模式`] : []),
             '',
             '🔐 权限管理：',
-            '  /perm - 查看当前权限模式',
-            ...(isAdmin ? ['  权限模式请通过角色策略编辑器修改'] : []),
-            '  /perm allow|always|deny - 审批权限请求',
+            ...(canReadPermission ? ['  /perm - 查看当前权限模式'] : []),
+            ...(canReadPermission ? ['  权限模式请通过角色策略编辑器修改'] : []),
+            ...(canAnswerPermission ? ['  /perm allow|always|deny - 审批权限请求'] : []),
             '',
             '🛠️ 运维：',
             '  /status - 显示会话状态',
@@ -539,7 +607,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             ...(!isDaemonOwner && isAdmin ? [
                 '  /reload - 热重载当前 Agent 配置',
             ] : []),
-            ...(isAdmin ? [
+            ...(canUseFile ? [
                 '',
                 '🧰 工具：',
                 `  /file ${isOwner ? '[channel] ' : ''}<path> - 发送项目内文件`,
@@ -553,6 +621,19 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     // /evolhelp 命令：返回 JSON 格式的命令列表（供程序解析）
     if (normalizedContent === '/evolhelp') {
         const cmds = [];
+        const canReadModel = canAccessSlashOperation('model.current', 'relation')
+            || canAccessSlashOperation('model.list', 'relation');
+        const canUseModel = canAccessSlashOperation('model.use', 'relation');
+        const canSetEffort = canAccessSlashOperation('model.effort', 'relation');
+        const canReadPermission = canAccessSlashOperation('permission.current', 'relation');
+        const canAnswerPermission = canAccessSlashOperation('permission.answer', 'relation');
+        const canReadChatmode = canAccessSlashOperation('chatmode.current', 'relation');
+        const canSetChatmode = canAccessSlashOperation('chatmode.update', 'relation');
+        const canReadMentionmode = activeChatType === 'group'
+            && canAccessSlashOperation('mentionmode.current', 'relation');
+        const canSetMentionmode = activeChatType === 'group'
+            && canAccessSlashOperation('mentionmode.update', 'relation');
+        const canUseFile = canAccessSlashOperation('file.fetch', 'filesystem');
         // 项目
         cmds.push({ command: '/pwd', description: '显示当前项目路径', category: '项目', roles: ['admin', 'owner'] });
         // 会话管理
@@ -566,16 +647,17 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             cmds.push({ command: '/compact', description: '压缩会话上下文（减少 token 用量）', category: '会话管理', roles: ['admin', 'owner'] });
         }
         // Agent 与模型
-        if (isAdmin) {
+        if (isAdmin)
             cmds.push({ command: '/baseagent', aliases: ['/base'], args: '[name]', description: '查看或切换 Agent 后端', category: 'Agent 与模型', roles: ['admin', 'owner'] });
-            cmds.push({ command: '/model', args: '[model]', description: '查看或切换模型', category: 'Agent 与模型', roles: ['admin', 'owner'] });
-            cmds.push({ command: '/effort', args: '[level]', description: '查看或切换推理强度', category: 'Agent 与模型', roles: ['admin', 'owner'] });
-        }
+        if (canReadModel || canUseModel)
+            cmds.push({ command: '/model', ...(canUseModel ? { args: '[model]' } : {}), description: `查看${canUseModel ? '或切换' : ''}模型`, category: 'Agent 与模型', roles: [identity.role] });
+        if (canSetEffort)
+            cmds.push({ command: '/effort', args: '[level]', description: '查看或切换推理强度', category: 'Agent 与模型', roles: [identity.role] });
         // 权限管理
-        if (isAdmin) {
-            cmds.push({ command: '/perm', description: '查看当前角色决定的权限模式', category: '权限管理', roles: ['admin', 'owner'] });
-            cmds.push({ command: '/perm', args: 'allow|always|deny', description: '审批权限请求', category: '权限管理', roles: ['admin', 'owner'] });
-        }
+        if (canReadPermission)
+            cmds.push({ command: '/perm', description: '查看当前角色决定的权限模式', category: '权限管理', roles: [identity.role] });
+        if (canAnswerPermission)
+            cmds.push({ command: '/perm', args: 'allow|always|deny', description: '审批权限请求', category: '权限管理', roles: [identity.role] });
         // 运维
         cmds.push({ command: '/status', description: '显示会话状态', category: '运维', roles: ['visitor', 'member', 'admin', 'owner'] });
         cmds.push({ command: '/stop', description: '中断当前任务', category: '运维', roles: ['admin', 'owner'] });
@@ -588,19 +670,19 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         }
         if (isDaemonOwner) {
             cmds.push({ command: '/restart', description: '重启服务', category: '运维', roles: ['daemon-owner'] });
+            cmds.push({ command: '/upgrade', description: '检查版本更新', category: '运维', roles: ['daemon-owner'] });
             cmds.push({ command: '/reload', args: '[aid]', description: '热重载 Agent 配置', category: '运维', roles: ['daemon-owner'] });
         }
         if (!isDaemonOwner && isAdmin) {
             cmds.push({ command: '/reload', description: '热重载当前 Agent 配置', category: '运维', roles: ['admin', 'owner'] });
         }
-        if (isAdmin) {
-            cmds.push({ command: '/file', args: isOwner ? '[channel] <path>' : '<path>', description: '发送项目内文件', category: '工具', roles: ['admin', 'owner'] });
-        }
+        if (canUseFile)
+            cmds.push({ command: '/file', args: isOwner ? '[channel] <path>' : '<path>', description: '发送项目内文件', category: '工具', roles: [identity.role] });
         // 聊天设置
-        if (isAdmin) {
-            cmds.push({ command: '/chatmode', args: '[interactive|proactive]', description: '查看/切换会话模式（被动响应或主动推进）', category: '聊天设置', roles: ['admin', 'owner'] });
-            cmds.push({ command: '/mentionmode', args: '[mention-only|disabled]', description: '查看/切换群聊 @ 处理模式（仅@响应或全部响应）', category: '聊天设置', roles: ['admin', 'owner'] });
-        }
+        if (canReadChatmode || canSetChatmode)
+            cmds.push({ command: '/chatmode', ...(canSetChatmode ? { args: '[interactive|proactive]' } : {}), description: `查看${canSetChatmode ? '/切换' : ''}会话模式（被动响应或主动推进）`, category: '聊天设置', roles: [identity.role] });
+        if (canReadMentionmode || canSetMentionmode)
+            cmds.push({ command: '/mentionmode', ...(canSetMentionmode ? { args: '[mention-only|disabled]' } : {}), description: `查看${canSetMentionmode ? '/切换' : ''}群聊 @ 处理模式`, category: '聊天设置', roles: [identity.role] });
         // 交互
         cmds.push({ command: '/ask', args: '<选项>', description: '回答 Agent 的交互式问题', category: '运维', roles: ['visitor', 'member', 'admin', 'owner'] });
         // 帮助
@@ -2083,7 +2165,21 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             await sendMessage(channelId, `⏳ 正在创建新会话${sessionName ? `: ${sessionName}` : ''}...`, this.getReplyContext(session));
         }
         const newSessionBaseagent = this.agentRegistry?.resolveByChannel(channel)?.baseagent || this.parseDefaultBaseagent();
-        const newSession = await this.sessionManager.createNewSession(channel, channelId, projectPath, sessionName, newSessionBaseagent);
+        const previousMetadata = session?.metadata || activeSession?.metadata || {};
+        const newSessionIdentityMetadata = activeChatType === 'group'
+            ? {
+                ...(previousMetadata.channelKey ? { channelKey: previousMetadata.channelKey } : {}),
+                groupId: previousMetadata.groupId || channelId,
+                ...(previousMetadata.groupName ? { groupName: previousMetadata.groupName } : {}),
+                ...(previousMetadata.dispatchMode ? { dispatchMode: previousMetadata.dispatchMode } : {}),
+            }
+            : {
+                ...(previousMetadata.channelKey ? { channelKey: previousMetadata.channelKey } : {}),
+                ...((userId || previousMetadata.peerId) ? { peerId: userId || previousMetadata.peerId } : {}),
+                ...(previousMetadata.peerName ? { peerName: previousMetadata.peerName } : {}),
+                ...(previousMetadata.peerType ? { peerType: previousMetadata.peerType } : {}),
+            };
+        const newSession = await this.sessionManager.createNewSession(channel, channelId, projectPath, sessionName, newSessionBaseagent, newSessionIdentityMetadata);
         const previousAgent = getActiveAgentIfAvailable();
         if (session && previousAgent) {
             // Reset agent backend state so the new
@@ -2460,8 +2556,24 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     }
     // /upgrade 命令：检查版本更新，提示用户手动重启
     if (normalizedContent === '/upgrade') {
-        if (!isAdmin)
-            return { kind: 'command.error', text: '❌ 无权限：升级检查仅限管理员使用' };
+        const upgradeAuthDenied = await authorizeIntent({
+            intent: {
+                operation: 'system.upgrade',
+                scope: 'process',
+                source: 'slash',
+                args: {},
+                dangerous: true,
+            },
+            identity: isDaemonOwner ? { ...identity, role: 'owner' } : identity,
+            session: activeSession,
+            channel,
+            channelId,
+            userId,
+            selfAid: this.agentRegistry?.resolveByChannel(channel)?.aid,
+            isDaemonOwner,
+        });
+        if (upgradeAuthDenied)
+            return upgradeAuthDenied;
         if (isLinkedInstall()) {
             return { kind: 'command.result', text: '⏭ 开发模式，跳过升级检查' };
         }
@@ -2493,11 +2605,26 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     }
     // /file 命令：发送项目内文件，支持 /file path 和 /file channel path
     if (normalizedContent.startsWith('/file')) {
-        if (!isAdmin)
-            return { kind: 'command.error', text: '❌ 无权限：此命令仅限管理员使用' };
         // 飞书会将 .md 等后缀自动转为 Markdown 链接: foo.md → [foo.md](http://foo.md/)
         // 还原: 将 [text](url) 替换为 text
         const rawArg = normalizedContent.slice(5).trim().replace(/\[([^\]]+)\]\([^)]+\)/g, '$1');
+        const fileAuthDenied = await authorizeIntent({
+            intent: {
+                operation: 'file.fetch',
+                scope: 'filesystem',
+                source: 'slash',
+                args: rawArg ? { filePath: rawArg } : {},
+            },
+            identity,
+            session: activeSession,
+            channel,
+            channelId,
+            userId,
+            selfAid: this.agentRegistry?.resolveByChannel(channel)?.aid,
+            isDaemonOwner,
+        });
+        if (fileAuthDenied)
+            return fileAuthDenied;
         if (!rawArg) {
             const usage = isOwner
                 ? '用法: /file <相对路径> 或 /file <渠道> <相对路径>\n示例: /file src/index.ts\n示例: /file feishu report.md'

package/dist/core/daemon-file-cache.js

@@ -214,6 +214,34 @@ function readFileOrNull(file) {
         return null;
     }
 }
+/**
+ * 带错误捕获的 reader。默认 reader 把所有读盘异常吞成 null，调用方无从区分
+ * ENOENT（文件确实没有）与 EACCES/EISDIR（部署或权限事故）——对随包发布的
+ * 文件（schema、角色模板）来说这层信息正是定位问题的关键。
+ *
+ * 用法：建一个实例，把 `read` 交给 fileCache，loader 里拿到 null 时用
+ * `lastError()` 拼文案、把 `lastErrorCause()` 挂到新 Error 的 `cause` 上——
+ * 后者保住原始异常对象，`code`/`path`/`errno` 这些结构化字段不至于只剩字符串。
+ * 注意 loader 只在未命中时执行，与 read 同步成对调用，因此闭包里的 last
+ * 不会串到别的文件上。
+ */
+export function createErrorCapturingReader() {
+    let last = null;
+    return {
+        read: (file) => {
+            try {
+                last = null;
+                return fs.readFileSync(file, 'utf-8');
+            }
+            catch (error) {
+                last = error;
+                return null;
+            }
+        },
+        lastError: () => (last instanceof Error ? last.message : last === null ? 'unreadable' : String(last)),
+        lastErrorCause: () => last,
+    };
+}
 /** 缓存值内存占用近似：用读入的原始字符串长度（字节级近似），null 记 0。 */
 function approxBytes(raw) {
     return raw === null ? 0 : raw.length;

package/dist/core/event-catalog.js

@@ -89,9 +89,37 @@ const CATALOG = [
             { path: 'name', type: 'string', optional: true },
             { path: 'chatType', type: 'string', optional: true },
             { path: 'threadId', type: 'string', optional: true },
+            { path: 'cause', type: 'string', optional: true },
+            { path: 'sourceSessionId', type: 'string', optional: true },
+            { path: 'renewSource', type: 'string', optional: true },
             { path: 'timestamp', type: 'number', optional: true },
         ],
     },
+    {
+        type: 'session:renew-evaluated',
+        namespace: 'session',
+        name: 'renew-evaluated',
+        description: 'Session Renew 判定完成',
+        fields: [
+            { path: 'candidateSessionId', type: 'string' },
+            { path: 'selectedSessionId', type: 'string' },
+            { path: 'renewed', type: 'boolean' },
+            { path: 'decision', type: 'string' },
+            { path: 'source', type: 'string' },
+            { path: 'channel', type: 'string' },
+            { path: 'channelName', type: 'string', optional: true },
+            { path: 'channelId', type: 'string' },
+            { path: 'selfAid', type: 'string', optional: true },
+            { path: 'idleHours', type: 'number' },
+            { path: 'responseMode', type: 'string', optional: true },
+            { path: 'baseagent', type: 'string', optional: true },
+            { path: 'model', type: 'string', optional: true },
+            { path: 'effort', type: 'string', optional: true },
+            { path: 'fallbackReason', type: 'string', optional: true },
+            { path: 'durationMs', type: 'number' },
+            { path: 'timestamp', type: 'number' },
+        ],
+    },
     {
         type: 'session:switched',
         namespace: 'session',
@@ -407,6 +435,7 @@ const CATALOG = [
             { path: 'description', type: 'string', optional: true },
             { path: 'subagentType', type: 'string', optional: true },
             { path: 'status', type: 'string' },
+            { path: 'terminalReason', type: 'string', optional: true },
             { path: 'outputFile', type: 'string', optional: true },
             { path: 'summary', type: 'string', optional: true },
             { path: 'usage', type: 'object', optional: true },

package/dist/core/evolagent-registry.js

@@ -2,7 +2,8 @@ import fs from 'fs';
 import path from 'path';
 import { EvolAgent } from './evolagent.js';
 import { logger } from '../utils/logger.js';
-import { agentMdPath, agentPersonalDir } from '../paths.js';
+import { agentPersonalDir } from '../paths.js';
+import { invalidateAgentDisplayName, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
 import { loadAllAgents, ensureAgentDirSkeleton, loadAgent, validateAgentConfig, } from '../config-store.js';
 import { resolveEffective } from '../config/config-manager.js';
 // ── Channel Fingerprint ───────────────────────────────────────────────────
@@ -210,9 +211,8 @@ export class EvolAgentRegistry {
         return [...this.agents.values()].map(a => this.toInfo(a));
     }
     invalidateAgentDisplayCache(aid) {
-        this.displayNameCache.delete(aid);
+        invalidateAgentDisplayName(aid);
         this.personalNameCache.delete(aid);
-        this.displayNamePending.delete(aid);
     }
     runnableAgents() {
         return [...this.agents.values()].filter(a => a.status === 'stopped');
@@ -442,43 +442,8 @@ export class EvolAgentRegistry {
         }
         return null;
     }
-    displayNameCache = new Map();
-    displayNamePending = new Set();
     resolveDisplayName(aid) {
-        const cached = this.displayNameCache.get(aid);
-        if (cached)
-            return cached;
-        try {
-            const mdPath = agentMdPath(aid);
-            if (fs.existsSync(mdPath)) {
-                const content = fs.readFileSync(mdPath, 'utf-8');
-                const fm = content.match(/^---\n([\s\S]*?)\n---/);
-                if (fm) {
-                    const nm = fm[1].match(/^name:\s*["']?(.+?)["']?\s*$/m);
-                    if (nm?.[1]) {
-                        this.displayNameCache.set(aid, nm[1]);
-                        return nm[1];
-                    }
-                }
-            }
-        }
-        catch { }
-        if (!this.displayNamePending.has(aid)) {
-            this.displayNamePending.add(aid);
-            import('../aun/aid/index.js').then(({ agentmdGet }) => {
-                agentmdGet(aid).then(content => {
-                    if (typeof content === 'string') {
-                        const fm = content.match(/^---\n([\s\S]*?)\n---/);
-                        if (fm) {
-                            const nm = fm[1].match(/^name:\s*["']?(.+?)["']?\s*$/m);
-                            if (nm?.[1])
-                                this.displayNameCache.set(aid, nm[1]);
-                        }
-                    }
-                }).catch(() => { }).finally(() => this.displayNamePending.delete(aid));
-            }).catch(() => { this.displayNamePending.delete(aid); });
-        }
-        return undefined;
+        return resolveAgentDisplayName(aid);
     }
     personalNameCache = new Map();
     resolvePersonalName(aid) {