evolcore 0.0.3 → 0.0.5

package/dist/core/auth/operation-authorizer.js

@@ -18,6 +18,8 @@ export const USER_PLANE_CAPABILITY_CEILING = {
         'chatmode.update',
         'mentionmode.current',
         'mentionmode.update',
+        'group.mentionmode.current',
+        'group.rulespolicy.current',
         'session.list',
         'session.create',
         'session.rename',
@@ -415,6 +417,12 @@ function checkConfigFieldPolicy(ctx, policy, resolvedConfigOp) {
     if (!resolvedConfigOp.route || (resolvedConfigOp.fieldRule.class !== 'safe-scalar' && resolvedConfigOp.fieldRule.class !== 'safe-readonly-object')) {
         return { ok: false, reason: `Config field ${field} is not available to user roles` };
     }
+    if (policy === 'role-overridable-write'
+        && resolvedConfigOp.fieldRule.access === 'owner-only'
+        && ctx.role !== 'owner'
+        && !ctx.isDaemonOwner) {
+        return { ok: false, reason: `Config field ${field} can only be changed by an owner` };
+    }
     const roleDef = getRoleDefinition(ctx.role, ctx.selfAid);
     const fieldPermission = roleDef
         ? resolveRoleFieldPermission(roleDef.permissions || {}, field)

package/dist/core/auth/operation-catalog.js

@@ -133,6 +133,46 @@ const OPERATIONS = [
         description: 'Update group mention mode',
         sources: ['slash', 'menu'],
     },
+    {
+        id: 'group.list',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['agent'],
+        description: 'List joined AUN groups',
+        sources: ['menu'],
+    },
+    {
+        id: 'group.mentionmode.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation', 'agent'],
+        description: 'Read a group mention mode',
+        sources: ['menu'],
+    },
+    {
+        id: 'group.mentionmode.update',
+        category: 'write-own',
+        dangerous: false,
+        defaultScopes: ['relation', 'agent'],
+        description: 'Update a group mention mode',
+        sources: ['menu'],
+    },
+    {
+        id: 'group.rulespolicy.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation', 'agent'],
+        description: 'Read a group rules loading policy',
+        sources: ['menu'],
+    },
+    {
+        id: 'group.rulespolicy.update',
+        category: 'write-own',
+        dangerous: false,
+        defaultScopes: ['relation', 'agent'],
+        description: 'Update a group rules loading policy',
+        sources: ['menu'],
+    },
     {
         id: 'session.list',
         category: 'read',
@@ -180,7 +220,7 @@ const OPERATIONS = [
         dangerous: false,
         defaultScopes: ['filesystem'],
         description: '获取文件内容（需路径沙箱检查）',
-        sources: ['menu'],
+        sources: ['slash', 'menu'],
     },
     // ── Trigger Operations ──
     {
@@ -317,7 +357,7 @@ const OPERATIONS = [
         category: 'write-agent',
         dangerous: false,
         defaultScopes: ['agent'],
-        description: 'Block or unblock an AUN contact',
+        description: 'Block or unblock a canonical contact across bound private channels',
         sources: ['agent-tool'],
     },
     {
@@ -357,7 +397,15 @@ const OPERATIONS = [
         category: 'write-agent',
         dangerous: false,
         defaultScopes: ['agent'],
-        description: 'Add contacts or modify contact status (block/unblock)',
+        description: 'Manage contacts and contact requests',
+        sources: ['menu', 'ecweb', 'control'],
+    },
+    {
+        id: 'connect.access.write',
+        category: 'write-agent',
+        dangerous: false,
+        defaultScopes: ['agent'],
+        description: 'Manage owner-only Agent access policy and request limit settings',
         sources: ['menu', 'ecweb', 'control'],
     },
     // Agent Operations

package/dist/core/auth/trigger-authorization.js

@@ -0,0 +1,15 @@
+const CROSS_AGENT_READ_OPERATIONS = new Set([
+    'trigger.list',
+    'trigger.show',
+    'trigger.history',
+]);
+export function isCrossAgentTriggerOperationAllowed(input) {
+    if (input.control || input.taskAgentAid === input.targetAgentAid)
+        return true;
+    if (!input.taskAgentAid || !input.targetManagement)
+        return false;
+    return CROSS_AGENT_READ_OPERATIONS.has(input.operation);
+}
+export function isCrossAgentTriggerReadOperation(operation) {
+    return CROSS_AGENT_READ_OPERATIONS.has(operation);
+}

package/dist/core/bootstrap-service.js

@@ -2,6 +2,7 @@ import fs from 'fs';
 import path from 'path';
 import { randomBytes } from 'crypto';
 import { kitsTemplatesDir, agentMdPath } from '../paths.js';
+import { resolveAgentDisplayName } from '../aun/aid/agentmd.js';
 import { logger } from '../utils/logger.js';
 import { loadAgent, saveAgent } from '../config-store.js';
 import { normalizeAgentLifecycle, withLifecycleForWrite } from '../config/lifecycle.js';
@@ -130,15 +131,7 @@ export class BootstrapService {
         return renderTemplate(template, vars).trim();
     }
     resolveAgentDisplayName(aid) {
-        try {
-            const content = fs.readFileSync(agentMdPath(aid), 'utf-8');
-            const fm = content.match(/^---\n([\s\S]*?)\n---/)?.[1] || '';
-            const name = fm.match(/^name:\s*["']?(.+?)["']?\s*$/m)?.[1]?.trim();
-            if (name)
-                return name;
-        }
-        catch { }
-        return aid.split('.')[0];
+        return resolveAgentDisplayName(aid) || aid.split('.')[0];
     }
     resolveBaseagent(agent, aid) {
         try {

package/dist/core/channel-loader.js

@@ -26,7 +26,11 @@ export function showActivitiesPolicy(mode, chatType, _identity) {
 }
 // ── ChannelLoader ──────────────────────────────────────────────────────────
 export class ChannelLoader {
+    processDebug;
     plugins = new Map();
+    constructor(processDebug) {
+        this.processDebug = processDebug;
+    }
     register(plugin) {
         if (this.plugins.has(plugin.name)) {
             throw new Error(`Channel plugin '${plugin.name}' already registered`);
@@ -46,7 +50,7 @@ export class ChannelLoader {
         const ctx = {
             agentName: agent.aid,
             defaultProjectPath: agent.config.projects?.defaultPath ?? process.cwd(),
-            debug: agent.config.debug,
+            debug: this.processDebug,
         };
         // Build the full list of config instances to create.
         // AUN is synthesised from agent.aid; any explicit aun entry in channels[] is skipped.
@@ -252,7 +256,7 @@ export function buildReloadHooks(deps) {
             const ctx = {
                 agentName: agent.aid ?? agent.config?.aid,
                 defaultProjectPath: agent.config?.projects?.defaultPath ?? process.cwd(),
-                debug: agent.config?.debug,
+                debug: channelLoader.processDebug,
             };
             const plugin = channelLoader.getPlugin(cfgInst.type);
             if (!plugin)

package/dist/core/command/command-handler.js

@@ -814,12 +814,9 @@ export class CommandHandler {
             item.lastActive = s.updatedAt;
         return item;
     }
-    /**
-     * 返回结构化命令菜单（供 menu.query 使用）
-     * owner 看到全部命令，admin 看到管理级命令（不含 owner-only），visitor/member 仅看到用户级命令
-     */
-    getMenuItems(role, chatType = 'private', scope = 'agent') {
-        return menuGetMenuItems.call(this, role, chatType, scope);
+    /** 返回结构化命令菜单，已迁移的命令按当前授权主体过滤。 */
+    getMenuItems(role, chatType = 'private', scope = 'agent', authSubject) {
+        return menuGetMenuItems.call(this, role, chatType, scope, authSubject);
     }
     /** 动态子菜单：根据 cmd 路径返回选项列表（供 menu.query + cmd 使用） */
     async getSubMenuItems(cmd, channel, channelId, userId, args, overrideIdentity, explicitChatType, fromControlChannel = false, authSubject, source = 'menu') {
@@ -843,8 +840,8 @@ export class CommandHandler {
         return await menuExecMenuUpdate.call(this, cmd, value, channel, channelId, userId, overrideIdentity, fromControlChannel, args, authSubject, source);
     }
     /** menu.action — 触发动词。 */
-    async execMenuAction(cmd, action, args, channel, channelId, userId, overrideIdentity, explicitChatType, requestId, fromControlChannel = false, authSubject, source = 'menu') {
-        return await menuExecMenuAction.call(this, cmd, action, args, channel, channelId, userId, overrideIdentity, explicitChatType, requestId, fromControlChannel, authSubject, source);
+    async execMenuAction(cmd, action, args, channel, channelId, userId, overrideIdentity, explicitChatType, requestId, fromControlChannel = false, authSubject, source = 'menu', transportReplyContext, deferSideEffect) {
+        return await menuExecMenuAction.call(this, cmd, action, args, channel, channelId, userId, overrideIdentity, explicitChatType, requestId, fromControlChannel, authSubject, source, transportReplyContext, deferSideEffect);
     }
     /** ECWeb 专用入口：身份只取可信 IPC 信封。 */
     async execMenuForEcweb(payload, auth) {
@@ -1168,7 +1165,7 @@ export class CommandHandler {
 /trigger list [--all] — 查看所有触发器
 /trigger create <参数> — 创建触发器（set 为兼容别名）
 /trigger update <名称|ID> <参数> — 修改触发器
-常用参数：--delay/--at/--cron/--every、--prompt、--model、--effort、--permission（省略则继承；update 可用 inherit 清除覆盖）
+常用参数：--exec script|trigger-session|target-session（create 必填）、--delay/--at/--cron/--every、--prompt、--model、--effort、--permission（省略则继承；update 可用 inherit 清除覆盖）
 /trigger enable <名称|ID> — 启用触发器
 /trigger disable <名称|ID> — 暂停触发器
 /trigger show <名称|ID> — 查看触发器详情
@@ -1451,11 +1448,11 @@ export class CommandHandler {
      * Agent managed CLI config entrypoint. Identity and relation are resolved
      * from the daemon-owned session rather than caller-provided flags.
      */
-    async handleConfigOperation(argv, sessionId, delegationToken) {
+    async handleConfigOperation(argv, sessionId, delegationToken, delegationCommandHash) {
         if (!this.agentDelegationRegistry) {
             return { ok: false, code: 'DELEGATION_REQUIRED', error: 'Task delegation is not configured' };
         }
-        const delegation = this.agentDelegationRegistry.validate(delegationToken, sessionId);
+        const delegation = this.agentDelegationRegistry.validate(delegationToken, sessionId, delegationCommandHash);
         if (!delegation.ok)
             return { ok: false, code: delegation.code, error: delegation.reason };
         const session = await this.sessionManager.getSessionById(sessionId);
@@ -1513,11 +1510,11 @@ export class CommandHandler {
             : { ok: false, code: result.code, error: result.error, ...(result.data !== undefined ? { data: result.data } : {}) };
     }
     /** Agent-managed contact CLI entrypoint. The daemon owns actor resolution and authorization. */
-    async handleContactOperation(argv, sessionId, delegationToken) {
+    async handleContactOperation(argv, sessionId, delegationToken, delegationCommandHash) {
         if (!this.agentDelegationRegistry) {
             return { ok: false, code: 'DELEGATION_REQUIRED', error: 'Task delegation is not configured' };
         }
-        const delegation = this.agentDelegationRegistry.validate(delegationToken, sessionId);
+        const delegation = this.agentDelegationRegistry.validate(delegationToken, sessionId, delegationCommandHash);
         if (!delegation.ok)
             return { ok: false, code: delegation.code, error: delegation.reason };
         const session = await this.sessionManager.getSessionById(sessionId);

package/dist/core/command/connect-menu.js

@@ -1,6 +1,7 @@
-import { roleMenuQuery, roleMenuUpdate, } from './role-menu.js';
+import { roleMenuQuery, roleMenuGroupCount, roleMenuUpdate, } from './role-menu.js';
 import { getContactSnapshot, resolveContactView } from '../../config/contact-book.js';
-import { mutateContactBook } from '../../config/contact-book-store.js';
+import { mutateAccessPolicy, readAccessPolicySnapshot, } from '../../config/access-policy.js';
+import { expirePendingContactRequests, mutateContactWithOperation, reviewContactRequest, } from '../../config/contact-request-service.js';
 import { formatPeerKey, parsePeerKey } from '../relation/peer-identity.js';
 /**
  * Connect Menu — 联系人与关系管理协议
@@ -10,8 +11,10 @@ import { formatPeerKey, parsePeerKey } from '../relation/peer-identity.js';
  *   复用其 agent 级互斥锁、CAS revision、owner/admin 安全护栏与审计链，绝不自行写 relation 文件。
  * - 群组列表（view=groups）→ 委派给 role-menu 的 view=targets（数据源是 AUN live 目录），
  *   群组不落 contact.json（contact book 只接受个人 AID，group 会被拒绝）。
- * - 联系人（view=contacts / contact，add / block / unblock）→ 直接读写 Contact Book v2，
- *   contact.json 是联系人列表的唯一事实来源。
+ * - 联系人与申请（view=contacts / contact，add / block / unblock / review）→ 直接读写
+ *   Contact Book v3；contact.json 是当前状态和 pending 版本的唯一事实来源。
+ * - 访问设置（view=access / resource=<access field>）→
+ *   查询和写入 Agent config.json 的 access 字段。
  */
 const MENU_NAME = 'connect';
 const DEFAULT_PAGE_SIZE = 50;
@@ -19,6 +22,7 @@ const MAX_PAGE_SIZE = 200;
 /**
  * Map a connect menu request to its authorization operation id.
  * Read views/options → connect.read; contact writes → connect.write;
+ * owner-only access fields → connect.access.write;
  * role assignment/admin delegate to the role.* operations role-menu enforces.
  */
 export function connectMenuOperation(kind, args, value) {
@@ -27,6 +31,9 @@ export function connectMenuOperation(kind, args, value) {
     if (kind === 'action')
         return 'connect.write';
     const resource = String(args?.resource ?? '');
+    if (resource === 'policyMode' || resource === 'requestLimit') {
+        return 'connect.access.write';
+    }
     if (resource === 'admin')
         return 'connect.admin';
     const decoded = decodeUpdateValue(value);
@@ -41,14 +48,12 @@ export async function handleConnectMenu(req, context) {
     const { self } = context;
     if (!self)
         return fail('INVALID_ARGUMENT', 'selfAid is required for connect menu');
-    if (req.args?.self !== self) {
-        return fail(req.args && Object.prototype.hasOwnProperty.call(req.args, 'self') ? 'PERMISSION_DENIED' : 'INVALID_ARGUMENT', req.args && Object.prototype.hasOwnProperty.call(req.args, 'self')
-            ? 'args.self does not match the receiving Agent'
-            : 'args.self is required for connect menu');
+    if (req.args?.self !== undefined && req.args.self !== self) {
+        return fail('PERMISSION_DENIED', 'args.self does not match the receiving Agent');
     }
     try {
         if (req.subtype === 'options')
-            return await handleOptions(self);
+            return await handleOptions(self, req.args, context);
         if (req.subtype === 'query')
             return await handleQuery(req, self, context);
         if (req.subtype === 'update')
@@ -62,21 +67,40 @@ export async function handleConnectMenu(req, context) {
     return fail('INVALID_ARGUMENT', `Unknown subtype: ${req.subtype}`);
 }
 // ── Options ──
-async function handleOptions(self) {
+async function handleOptions(self, args, context) {
+    const option = String(args?.option ?? '').trim();
+    if (option) {
+        return fail('NOT_SUPPORTED', `Unknown connect option: ${option}`);
+    }
+    await expirePendingContactRequests(self);
     const snapshot = getContactSnapshot(self);
     const contactCount = snapshot.contacts.size;
     const blockedCount = snapshot.blockedIndex.size;
+    const pendingCount = [...snapshot.contacts.values()].filter(entry => entry.status === 'pending').length;
+    let groupsDescription = '查看所在群组（数量暂不可用）';
+    try {
+        const groupCount = await roleMenuGroupCount(context);
+        groupsDescription = `查看所在群组（${groupCount} 个）`;
+    }
+    catch {
+        // Keep the root menu available when AUN group directory is disabled or unavailable.
+    }
     return ok({
         options: [
             {
                 option: 'contacts',
                 label: '联系人列表',
-                description: `查看所有联系人（${contactCount} 人，${blockedCount} 人已拉黑）`,
+                description: `查看所有状态（${contactCount} 人，${pendingCount} 个待审核，${blockedCount} 人已拉黑）`,
             },
             {
                 option: 'groups',
                 label: '群组列表',
-                description: '查看所在群组',
+                description: groupsDescription,
+            },
+            {
+                option: 'access',
+                label: '访问设置',
+                description: '设置消息准入模式和准入控制消息限额',
             },
         ],
     });
@@ -89,6 +113,8 @@ async function handleQuery(req, self, context) {
         return queryContacts(args, self);
     if (view === 'contact')
         return queryContact(req, self);
+    if (view === 'access')
+        return queryAccess(self);
     // Groups and role assignments are delegated to role-menu (authoritative source).
     // Role *definitions* are out of scope here — use `menu name=role` for those.
     if (view === 'groups') {
@@ -124,9 +150,19 @@ async function handleQuery(req, self, context) {
             dataSource: { ...data.dataSource, kind: 'relation-config' },
         });
     }
-    return fail('INVALID_ARGUMENT', `Unknown view: ${String(view)}`);
+    return fail('NOT_SUPPORTED', `Unknown view: ${String(view)}`);
+}
+function queryAccess(self) {
+    const { policy, accessRevision } = readAccessPolicySnapshot(self);
+    return ok({
+        self,
+        view: 'access',
+        policy,
+        accessRevision,
+    });
 }
-function queryContacts(args, self) {
+async function queryContacts(args, self) {
+    await expirePendingContactRequests(self);
     const snapshot = getContactSnapshot(self);
     const page = paginate([...snapshot.contacts.keys()].sort(), args, self, primaryId => primaryId);
     const items = page.items.map(primaryId => contactItem(self, primaryId));
@@ -135,11 +171,13 @@ function queryContacts(args, self) {
         view: 'contacts',
         items,
         contactRevision: snapshot.contactRevision,
+        pendingCount: [...snapshot.contacts.values()].filter(entry => entry.status === 'pending').length,
         nextCursor: page.nextCursor,
         dataSource: { kind: 'contact-book', authoritative: true, complete: true },
     });
 }
-function queryContact(req, self) {
+async function queryContact(req, self) {
+    await expirePendingContactRequests(self);
     const primaryId = String(req.args?.primaryId ?? '').trim();
     if (!primaryId)
         return fail('INVALID_ARGUMENT', 'primaryId is required');
@@ -150,6 +188,7 @@ function queryContact(req, self) {
 }
 function contactItem(self, primaryId) {
     const view = resolveContactView(self, primaryId);
+    const pendingRequest = getContactSnapshot(self).contacts.get(primaryId)?.pendingRequest;
     return {
         primaryId,
         displayName: view.displayName ?? null,
@@ -157,6 +196,13 @@ function contactItem(self, primaryId) {
         blocked: view.blocked,
         isOwner: view.isOwner,
         aliases: view.aliases,
+        ...(pendingRequest ? {
+            pendingRequest: {
+                id: pendingRequest.id,
+                submittedAt: pendingRequest.submittedAt,
+                expiresAt: pendingRequest.expiresAt,
+            },
+        } : {}),
     };
 }
 function normalizeAssignmentItem(item) {
@@ -181,12 +227,15 @@ function normalizeAssignmentItem(item) {
         return item;
     }
 }
-// ── Update (delegated to role-menu) ──
+// ── Update ──
 async function handleUpdate(req, context) {
     const args = req.args ?? {};
-    const resource = args.resource;
+    const resource = String(args.resource ?? '');
+    if (isAccessUpdateResource(resource)) {
+        return updateAccessResource(req, context, resource);
+    }
     if (resource !== 'assignment' && resource !== 'admin') {
-        return fail('INVALID_ARGUMENT', `Unknown resource: ${String(resource)}`);
+        return fail('NOT_SUPPORTED', `Unknown resource: ${String(resource)}`);
     }
     if (req.value === undefined || !req.value.trim()) {
         return fail('INVALID_ARGUMENT', 'value is required');
@@ -194,9 +243,9 @@ async function handleUpdate(req, context) {
     validateWritableTarget(args.target);
     const value = roleMenuUpdateValue(resource, req.value);
     const data = await roleMenuUpdate(context, args, value);
-    return ok(data);
+    return ok(resource === 'assignment' ? normalizeAssignmentUpdate(data) : data);
 }
-// ── Action (Contact Book v2) ──
+// ── Action (Contact Book v3) ──
 async function handleAction(req, self, context) {
     const action = req.action;
     if (action === 'add')
@@ -205,9 +254,100 @@ async function handleAction(req, self, context) {
         return actionSetStatus(req, self, context, true);
     if (action === 'unblock')
         return actionSetStatus(req, self, context, false);
-    return fail('INVALID_ARGUMENT', `Unknown action: ${String(action)}`);
+    if (action === 'approve-request')
+        return actionReviewRequest(req, self, context, 'approve');
+    if (action === 'reject-request')
+        return actionReviewRequest(req, self, context, 'reject');
+    if (action === 'block-request')
+        return actionReviewRequest(req, self, context, 'block');
+    return fail('NOT_SUPPORTED', `Unknown action: ${String(action)}`);
+}
+function isAccessUpdateResource(resource) {
+    return resource === 'policyMode'
+        || resource === 'requestLimit';
+}
+function updateAccessResource(req, context, resource) {
+    const args = req.args ?? {};
+    requireOwnerContext(context);
+    if (req.value === undefined || !req.value.trim()) {
+        return fail('INVALID_ARGUMENT', 'value is required');
+    }
+    const self = context.self;
+    const expectedAccessRevision = requireAccessRevision(args);
+    const decoded = decodeAccessUpdateValue(req.value);
+    if (resource === 'policyMode') {
+        if (typeof decoded !== 'string' || !['open', 'contacts', 'owners'].includes(decoded)) {
+            return fail('INVALID_ARGUMENT', 'policyMode must be open, contacts, or owners');
+        }
+    }
+    else {
+        const requestLimit = decoded;
+        if (!requestLimit || typeof requestLimit !== 'object' || Array.isArray(requestLimit)
+            || Object.keys(requestLimit).some(key => key !== 'maxTimes' && key !== 'coolDown')
+            || !Number.isInteger(requestLimit.maxTimes)
+            || Number(requestLimit.maxTimes) < 1
+            || Number(requestLimit.maxTimes) > 100_000
+            || !Number.isInteger(requestLimit.coolDown)
+            || Number(requestLimit.coolDown) < 1
+            || Number(requestLimit.coolDown) > 86_400) {
+            return fail('INVALID_ARGUMENT', 'requestLimit must be a JSON object with integer maxTimes and coolDown');
+        }
+    }
+    const result = mutateAccessPolicy({
+        selfAid: self,
+        actorAid: String(context.actorAid || ''),
+        actorRole: context.actorRole,
+        resource: `access.${resource}`,
+        expectedAccessRevision,
+        update: current => accessPolicyWithUpdate(current, resource, decoded),
+    });
+    return ok({
+        self,
+        resource,
+        policy: result.policy,
+        accessRevision: result.accessRevision,
+        changed: result.changed,
+    });
+}
+async function actionReviewRequest(req, self, context, decision) {
+    const args = req.args ?? {};
+    const primaryId = String(args.primaryId ?? '').trim();
+    const requestId = String(args.requestId ?? '').trim();
+    if (!primaryId)
+        return fail('INVALID_ARGUMENT', 'primaryId is required');
+    if (!requestId)
+        return fail('INVALID_ARGUMENT', 'requestId is required');
+    requireAdminContext(context);
+    const expectedContactRevision = requireContactRevision(args);
+    const actorId = String(context.actorAid || '').trim();
+    const reviewed = await reviewContactRequest({
+        selfAid: self,
+        primaryId,
+        requestId,
+        expectedContactRevision,
+        approverId: actorId,
+        actorId,
+        reviewerRole: context.actorRole,
+        decision,
+    });
+    if (reviewed.code === 'approved' || reviewed.code === 'rejected' || reviewed.code === 'blocked') {
+        return ok({
+            self,
+            action: `${decision}-request`,
+            primaryId,
+            requestId,
+            result: reviewed.code,
+            contactRevision: reviewed.contactRevision,
+        });
+    }
+    const code = reviewed.code === 'forbidden' ? 'PERMISSION_DENIED'
+        : reviewed.code === 'revision-conflict' ? 'CONFLICT'
+            : reviewed.code === 'request-expired' ? 'EXPIRED'
+                : 'NOT_FOUND';
+    return fail(code, reviewed.code.replace(/-/g, ' '), { contactRevision: reviewed.contactRevision });
 }
 async function actionAdd(req, self, context) {
+    requireAdminContext(context);
     const args = req.args ?? {};
     const primaryId = String(args.primaryId ?? '').trim();
     if (!primaryId)
@@ -219,11 +359,13 @@ async function actionAdd(req, self, context) {
     }
     const current = getContactSnapshot(self).contacts.get(primaryId);
     const displayName = hasDisplayName ? args.displayName : current?.displayName ?? null;
-    const result = await mutateContactBook({
+    const result = await mutateContactWithOperation({
         selfAid: self,
-        actor: context.actorAid ?? 'connect-menu',
+        actorId: context.actorAid ?? 'connect-menu',
+        operation: 'manual-add',
         expectedContactRevision,
         mutation: { type: 'set-display-name', primaryId, displayName },
+        primaryId,
     });
     const storedDisplayName = result.contact.contacts[primaryId]?.displayName ?? null;
     return ok({
@@ -236,16 +378,22 @@ async function actionAdd(req, self, context) {
     });
 }
 async function actionSetStatus(req, self, context, blocked) {
+    requireAdminContext(context);
     const args = req.args ?? {};
     const primaryId = String(args.primaryId ?? '').trim();
     if (!primaryId)
         return fail('INVALID_ARGUMENT', 'primaryId is required');
     const expectedContactRevision = requireContactRevision(args);
-    const result = await mutateContactBook({
+    if (!getContactSnapshot(self).contacts.has(primaryId)) {
+        return fail('NOT_FOUND', `Contact was not found: ${primaryId}`);
+    }
+    const result = await mutateContactWithOperation({
         selfAid: self,
-        actor: context.actorAid ?? 'connect-menu',
+        actorId: context.actorAid ?? 'connect-menu',
+        operation: blocked ? 'block' : 'unblock',
         expectedContactRevision,
         mutation: { type: 'set-status', primaryId, status: blocked ? 'blocked' : 'active' },
+        primaryId,
     });
     return ok({
         self,
@@ -259,6 +407,16 @@ async function actionSetStatus(req, self, context, blocked) {
 function ok(data) {
     return { type: 'menu.response', id: '', name: MENU_NAME, data };
 }
+function requireOwnerContext(context) {
+    if (context.actorRole !== 'owner') {
+        throw connectError('PERMISSION_DENIED', 'Only an Agent Owner can modify this access setting');
+    }
+}
+function requireAdminContext(context) {
+    if (context.actorRole !== 'owner' && context.actorRole !== 'admin') {
+        throw connectError('PERMISSION_DENIED', 'Only an Agent Owner or Admin can perform this operation');
+    }
+}
 function fail(code, message, data) {
     return {
         type: 'menu.response',
@@ -277,6 +435,16 @@ function errorCode(error) {
         return 'CONFLICT';
     if (code === 'INVALID_CONTACT_BOOK')
         return 'INTERNAL_ERROR';
+    if (code === 'access_policy_owner_required')
+        return 'PERMISSION_DENIED';
+    if (code === 'access_policy_revision_conflict')
+        return 'CONFLICT';
+    if (code === 'access_policy_temporarily_unavailable')
+        return 'TEMPORARILY_UNAVAILABLE';
+    if (code === 'restricted_mode_without_owner')
+        return 'NOT_ALLOWED';
+    if (code === 'invalid_access_policy')
+        return 'INTERNAL_ERROR';
     return typeof code === 'string' ? code : 'INTERNAL_ERROR';
 }
 function errorMessage(error) {
@@ -297,6 +465,15 @@ function requireContactRevision(args) {
     }
     return args.expectedContactRevision;
 }
+function requireAccessRevision(args) {
+    if (!Object.prototype.hasOwnProperty.call(args, 'expectedAccessRevision')) {
+        throw connectError('INVALID_ARGUMENT', 'expectedAccessRevision is required');
+    }
+    if (typeof args.expectedAccessRevision !== 'string' || !args.expectedAccessRevision) {
+        throw connectError('INVALID_ARGUMENT', 'expectedAccessRevision must be a non-empty string');
+    }
+    return args.expectedAccessRevision;
+}
 function decodeUpdateValue(value) {
     const text = String(value ?? '').trim();
     if (!text)
@@ -309,6 +486,15 @@ function decodeUpdateValue(value) {
     catch { }
     return text;
 }
+function decodeAccessUpdateValue(value) {
+    const text = value.trim();
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
 function roleMenuUpdateValue(resource, value) {
     const decoded = decodeUpdateValue(value);
     if (resource === 'assignment') {
@@ -317,11 +503,28 @@ function roleMenuUpdateValue(resource, value) {
         }
         return JSON.stringify(decoded);
     }
-    if (![true, false, null, 'grant', 'revoke'].includes(decoded)) {
+    if (decoded !== 'grant' && decoded !== 'revoke') {
         throw connectError('INVALID_ARGUMENT', 'admin value must be grant or revoke');
     }
     return JSON.stringify(decoded);
 }
+function normalizeAssignmentUpdate(data) {
+    const explicitRole = data?.assignment?.explicitRole;
+    return {
+        ...data,
+        roleId: typeof explicitRole === 'string' ? explicitRole : null,
+    };
+}
+function accessPolicyWithUpdate(current, resource, decoded) {
+    if (resource === 'policyMode') {
+        return { ...current, policyMode: decoded };
+    }
+    const requestLimit = decoded;
+    return {
+        ...current,
+        requestLimit: { maxTimes: requestLimit.maxTimes, coolDown: requestLimit.coolDown },
+    };
+}
 function validateWritableTarget(target) {
     if (!target || typeof target !== 'object' || Array.isArray(target))
         return;