evolcore 0.0.31 → 0.0.32

package/dist/channels/aun.js

@@ -5,7 +5,6 @@ import { performance } from 'node:perf_hooks';
 import fs from 'fs';
 import path from 'path';
 import os from 'os';
-import { fileURLToPath, pathToFileURL } from 'url';
 import { logger, localTimestamp } from '../utils/logger.js';
 import { LogWriter } from '../utils/log-writer.js';
 import { middleOutputModePolicy, resolveShowActivities, showActivitiesPolicy } from '../core/channel-loader.js';
@@ -19,7 +18,7 @@ import { chatDirPath } from '../core/session/session-fs-store.js';
 import { readTopicLabel, readTopicStatus } from '../core/session/session-mapper.js';
 import { appendHintAddDetailed, appendHintRemoveDetailed, appendHintPromoteDetailed, parseInjectRequest, peekHints, withHintTargetLock } from '../core/message/pending-hints.js';
 import { appendAidLifecycle } from '../aun/aid/identity.js';
-import { enableFullGroupPullPagination, enableReliableMessageDelivery, getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
+import { getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
 import { MAX_AUN_ATTACHMENT_SIZE, uploadBufferAndBuildPayload, uploadFileAndBuildPayload } from '../aun/msg/upload.js';
 import { loadAgent } from '../config-store.js';
 import { resolveAgentLifecycle } from '../config/lifecycle.js';
@@ -653,7 +652,6 @@ export class AUNChannel {
         return this.managedMenuClient.request(options);
     }
     client = null;
-    localSenderInstallation;
     store = null;
     /** 实际连接的网关 URL（来自 authenticate() 返回值 / connection.state 事件），替代旧 (client as any)._gatewayUrl。 */
     gatewayUrl = '';
@@ -1343,7 +1341,7 @@ export class AUNChannel {
         // boundary while the command handler uses /mention internally.
         return stripped.replace(/^\/mentionmode(?=\s|$)/, '/mention');
     }
-    parsePayloadMentionsOrReject(payload, context, messageId, seq) {
+    parsePayloadMentionsOrReject(payload, context, messageId) {
         const raw = payload && typeof payload === 'object' && !Array.isArray(payload)
             ? payload.mentions
             : undefined;
@@ -1351,7 +1349,6 @@ export class AUNChannel {
             return normalizeAunMentionEntries(raw);
         }
         catch (error) {
-            this.acknowledgeImmediately(messageId, seq);
             const detail = error instanceof Error ? error.message : String(error);
             const code = error?.code ?? 'INVALID_MENTION_SCHEMA';
             logger.error(`${this.logPrefix()} Dropped ${context}: invalid payload.mentions (${detail}) code=${code} mid=${messageId}`);
@@ -1452,12 +1449,9 @@ export class AUNChannel {
             else {
                 logger.debug(`${this.logPrefix()} Duplicate inbound message dropped: namespace=${namespace} mid=${messageId} seq=${seq ?? 'unknown'}`);
             }
-            this.acknowledgeImmediately(messageId, seq);
             return false;
         }
         this.inboundSeenMessages.set(dedupeKey, { seenAt: Date.now(), seq });
-        if (seq !== undefined)
-            this.messageSeqMap.set(messageId, seq);
         this.appendInboundDedupe(dedupeKey, messageId, kind, seq);
         setTimeout(() => this.inboundSeenMessages.delete(dedupeKey), AUN_INBOUND_DEDUP_TTL_MS);
         return true;
@@ -1524,12 +1518,6 @@ export class AUNChannel {
             logger.warn(`${this.logPrefix()} Failed to compact inbound dedup: ${error instanceof Error ? error.message : String(error)}`);
         }
     }
-    acknowledgeImmediately(messageId, _seq) {
-        // SDK internally manages seq tracking and ack — do not call message.ack RPC directly,
-        // as it corrupts the SDK's seqTracker state and breaks V2 e2ee message pull.
-        if (messageId)
-            this.messageSeqMap.delete(messageId);
-    }
     shouldEncrypt(_peerId) {
         return this.config.defaultEncrypt ?? true;
     }
@@ -1543,7 +1531,7 @@ export class AUNChannel {
     /**
      * Inbound application dedupe. The AUN SDK may redeliver the same message
      * with a different transport sequence, so message_id is the identity and
-     * seq is only retained for ACK/conflict diagnostics. Claiming happens at
+     * seq is only retained for ordering and conflict diagnostics. Claiming happens at
      * the event handler boundary, before payload/slash/mention parsing.
      */
     inboundSeenMessages = new Map();
@@ -1551,7 +1539,6 @@ export class AUNChannel {
     groupNameCache = new Map(); // groupId → 群显示名（进程内缓存，群名极少变）
     peerInfoCache = new Map();
     peerInfoRevision = 0;
-    messageSeqMap = new Map(); // messageId → seq (for ack/diagnostics)
     sentCount = new Map(); // "channelId\0threadId" → 本轮已发消息计数（seqInTurn/turnMessageCount 用）
     peerE2ee = new Map();
     static E2EE_PROBE_TTL = 10 * 60 * 1000; // 10min
@@ -1737,27 +1724,6 @@ export class AUNChannel {
             this.initInProgress = false;
         }
     }
-    /** Optional local compatibility code is never required by a clean checkout or npm install. */
-    async loadLocalSenderInstallation(client) {
-        this.localSenderInstallation = undefined;
-        const currentFile = fileURLToPath(import.meta.url);
-        const modulePath = path.join(path.dirname(currentFile), '..', 'aun', `sender-installation${path.extname(currentFile)}`);
-        if (!fs.existsSync(modulePath))
-            return;
-        try {
-            // Use a runtime URL so TypeScript can build when the local file is absent.
-            const extension = await import(pathToFileURL(modulePath).href);
-            if (typeof extension.enableAunSenderInstallation !== 'function'
-                || typeof extension.aunSenderInstallation !== 'function') {
-                throw new Error('Invalid local sender installation module');
-            }
-            extension.enableAunSenderInstallation(client);
-            this.localSenderInstallation = extension;
-        }
-        catch (error) {
-            logger.warn(`${this.logPrefix()} Optional local sender installation disabled: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
     async _initClientInner() {
         this.observerGroupMembers.clear();
         for (const groupId of new Set([
@@ -1805,9 +1771,6 @@ export class AUNChannel {
         });
         this.store = store;
         const client = await loadClient(store, aidName);
-        enableFullGroupPullPagination(client);
-        enableReliableMessageDelivery(client);
-        await this.loadLocalSenderInstallation(client);
         this.client = client;
         // A reconnect replaces the SDK client. Late events from the retired
         // instance must not mutate the new instance's health or message state.
@@ -1939,7 +1902,7 @@ export class AUNChannel {
         client.on('message.recalled', (data) => {
             if (!isCurrentClient())
                 return;
-            this.handleMessageRecalled(data, client, isCurrentClient);
+            this.handleMessageRecalled(data);
         });
         client.on('message.undecryptable', (data) => {
             if (!isCurrentClient())
@@ -2017,13 +1980,14 @@ export class AUNChannel {
                 // max_attempts=0 = 无限重试（与 Go/Python 对齐），交由 SDK 自己跑指数退避
                 // initial_delay=1s，max_delay=300s（5min 封顶）
                 auto_reconnect: true,
+                background_sync: true,
                 retry_max_attempts: 0,
                 retry_initial_delay: 1.0,
                 retry_max_delay: 300.0,
             });
             this.trace('OUT', 'client.connect.ok', { aid: client.aid });
             this._aid = this.client.aid ?? undefined;
-            const deviceId = this.client._device_id ?? '';
+            const deviceId = client.currentAid?.deviceId ?? '';
             this._chatId = this._aid ? `${this._aid}:${deviceId}:` : '';
             // 控制 AID 也有标准 host agent.md。发布在后台执行，短暂的 Name
             // Service/Gateway 故障不能把控制通道判定为连接失败。
@@ -2056,25 +2020,6 @@ export class AUNChannel {
                     logger.warn(`${this.logPrefix()} Group invitation recovery failed: ${error instanceof Error ? error.message : String(error)}`);
                 });
             }
-            // AUN seq_tracker is transport-scoped, while this channel's durable
-            // dedup log is application-scoped.  A diagnostic consumer can advance
-            // the former without the application having seen those messages.  On a
-            // reconnect, repair only the in-memory P2P cursor to the last message
-            // the application actually claimed, then force a Forward pull.  The SDK
-            // persists cursors monotonically, so this does not rewrite SQLite and
-            // the normal pull will restore the high watermark after delivery.
-            this.scheduleInboundP2PCursorRepair(client, isCurrentClient);
-            // Workaround: SDK e2ee uses _identity.cert for sender_cert_fingerprint;
-            // if cert is missing, it falls back to public key SPKI fingerprint which
-            // causes peer cert lookup failures. Backfill from keystore if needed.
-            const clientAny = this.client;
-            if (clientAny._identity && !clientAny._identity.cert) {
-                const cert = clientAny._keystore?.loadCert?.(aidName);
-                if (cert) {
-                    clientAny._identity.cert = cert;
-                    logger.info(`${this.logPrefix()} Backfilled identity.cert from keystore for e2ee fingerprint`);
-                }
-            }
             logger.info(`${this.logPrefix()} Connected as ${this._aid}`);
             appendAidEvent({ ts: Date.now(), iso: new Date().toISOString(), event: 'connected', aid: this.config.aid, gateway: this.gatewayUrl });
             appendAidLifecycle({ ts: Date.now(), iso: new Date().toISOString(), event: 'connected', aid: this.config.aid, gateway: this.gatewayUrl });
@@ -2161,47 +2106,7 @@ export class AUNChannel {
         const aid = this.config.aid.replace(/^@/, '');
         return bindPostBootstrapWelcomeOutboxSession(aid, sessionId, owner);
     }
-    scheduleInboundP2PCursorRepair(client, isCurrentClient) {
-        const tracker = client?._seqTracker;
-        const repair = tracker?.repairContiguousSeq;
-        const pull = client?._pullV2;
-        if (typeof repair !== 'function' || typeof pull !== 'function')
-            return;
-        if (this.inboundP2PCursorRepairTimer)
-            clearTimeout(this.inboundP2PCursorRepairTimer);
-        const ns = `p2p:${this.config.aid}`;
-        let appSeq = 0;
-        for (const [key, value] of this.inboundSeenMessages) {
-            // Group sequence spaces are independent from the P2P space.
-            if (!key.includes(':aun:private'))
-                continue;
-            const seq = Number(value.seq);
-            if (Number.isSafeInteger(seq) && seq > appSeq)
-                appSeq = seq;
-        }
-        if (appSeq <= 0)
-            return;
-        this.inboundP2PCursorRepairTimer = setTimeout(() => {
-            this.inboundP2PCursorRepairTimer = null;
-            if (!isCurrentClient() || !this.connected)
-                return;
-            const transportSeq = Number(tracker.getContiguousSeq?.(ns) ?? 0);
-            if (!Number.isSafeInteger(transportSeq) || transportSeq <= appSeq + 1)
-                return;
-            try {
-                repair.call(tracker, ns, appSeq);
-                logger.warn(`${this.logPrefix()} Rewinding in-memory P2P cursor for application recovery: transport=${transportSeq}, app=${appSeq}`);
-                Promise.resolve(pull.call(client, appSeq, 50, { force: true }))
-                    .then(() => logger.info(`${this.logPrefix()} Replayed P2P messages after cursor mismatch: after_seq=${appSeq}`))
-                    .catch((error) => logger.warn(`${this.logPrefix()} P2P cursor recovery pull failed: ${error instanceof Error ? error.message : String(error)}`));
-            }
-            catch (error) {
-                logger.warn(`${this.logPrefix()} P2P cursor repair failed: ${error instanceof Error ? error.message : String(error)}`);
-            }
-        }, 250);
-    }
-    inboundP2PCursorRepairTimer = null;
-    handleMessageRecalled(data, client, isCurrentClient) {
+    handleMessageRecalled(data) {
         this.trace('IN', 'message.recalled', data);
         if (data && typeof data === 'object') {
             const ids = data.message_ids;
@@ -2214,9 +2119,6 @@ export class AUNChannel {
                 }
             }
         }
-        // A recall tombstone may arrive at a high transport sequence and advance
-        // the SDK cursor past messages that were never delivered to the app.
-        this.scheduleInboundP2PCursorRepair(client, isCurrentClient);
     }
     pendingPostBootstrapWelcomeOwners() {
         return pendingPostBootstrapWelcomeOwners(this.config.aid);
@@ -2525,7 +2427,6 @@ export class AUNChannel {
         const env = (msg.envelope && typeof msg.envelope === 'object') ? msg.envelope : {};
         const fromAid = typeof env.from === 'string' ? env.from.trim() : '';
         if (!messageId || !fromAid) {
-            this.acknowledgeImmediately(messageId, seq);
             const now = Date.now();
             if (now - this.invalidInboundEnvelopeLastLogAt >= 60_000) {
                 this.invalidInboundEnvelopeLastLogAt = now;
@@ -2541,15 +2442,13 @@ export class AUNChannel {
         const protectedHeaders = verifiedProtectedHeaders(msg, env);
         const payload = msg.payload ?? '';
         if (this.managedMenuClient.accept(fromAid, payload, !!env.encrypted)) {
-            this.acknowledgeImmediately(messageId, seq);
             return;
         }
         if (payloadTypeForObserver(msg) === 'observer.forward') {
-            this.acknowledgeImmediately(messageId, seq);
             logger.debug(`${this.logPrefix()} P2P dropped observer.forward control envelope: mid=${messageId}`);
             return;
         }
-        const mentions = this.parsePayloadMentionsOrReject(payload, 'p2p.inbound', messageId, seq);
+        const mentions = this.parsePayloadMentionsOrReject(payload, 'p2p.inbound', messageId);
         if (!mentions)
             return;
         const causationRef = payload && typeof payload === 'object' && typeof payload._evolcore_causation_ref === 'string'
@@ -2570,7 +2469,6 @@ export class AUNChannel {
         const inboundType = (payload && typeof payload === 'object') ? payload.type : undefined;
         // 终态错误只作为展示信号，不能进入 Agent，也不能被 observer 再次传播。
         if (inboundType === 'error') {
-            this.acknowledgeImmediately(messageId, seq);
             logger.info(`${this.logPrefix()} P2P dropped terminal error: from=${fromAid || 'unknown'} mid=${messageId}`);
             return;
         }
@@ -2582,14 +2480,12 @@ export class AUNChannel {
             void this.forwardInbound(msg);
         }
         if (inboundType === 'observer.inject.status' || inboundType === 'observer.inject.ack') {
-            this.acknowledgeImmediately(messageId, seq);
             return;
         }
         // 回声过滤：自己发出的消息会被 gateway fanout 回来，
         // 只有 from_aid == self 且 chat_id 不匹配时才丢弃（说明是其它实例发的）
         const msgChatId = typeof payload === 'object' && payload !== null && payload.chat_id;
         if (this._aid && fromAid === this._aid && (!msgChatId || !this._chatId || msgChatId !== this._chatId)) {
-            this.acknowledgeImmediately(messageId, seq);
             logger.debug(`${this.logPrefix()} P2P dropped: echo from self (from=${fromAid} mid=${messageId})`);
             return;
         }
@@ -2632,18 +2528,14 @@ export class AUNChannel {
         if (p2pPayloadType.startsWith('menu.')
             || p2pPayloadType === AUNChannel.CONTACT_REQUEST_QUERY_TYPE
             || p2pPayloadType === AUNChannel.CONTACT_REQUEST_SUBMIT_TYPE) {
-            const installation = p2pPayloadType.startsWith('menu.')
-                ? this.localSenderInstallation?.aunSenderInstallation(msg) : undefined;
             const peerDeviceId = p2pPayloadType.startsWith('menu.')
                 ? menuSenderDeviceId(msg.sender_device_id) : undefined;
-            this.acknowledgeImmediately(messageId, seq);
             this.appendInboundPayloadJsonl(chatId, fromAid, messageId, msgEncrypted, false, logDescriptor, threadId, receivedAt, seq);
             this.dispatchMessage({
                 channelId: chatId, userId: fromAid,
                 text: JSON.stringify(payload),
                 chatType: 'private', messageId, seq, receivedAt, receivedAtMono, gatewaySeq: seq,
                 peerDeviceId,
-                peerSlotId: installation?.slotId,
                 threadId,
                 peerName: displayName || undefined,
                 peerType: peerIdentity.type,
@@ -2669,7 +2561,6 @@ export class AUNChannel {
         // observer.inject：owner 插话。鉴权 from∈owners 后，以 target.channel_id 选 agent↔对端 会话，
         // observer 插话（v0.3）：只落盘到 pending-hints，不进 Agent、不回 owner。详见 docs/observer-insert-design.md。
         if (p2pPayloadType === AUNChannel.INJECT_REQUEST_TYPE) {
-            this.acknowledgeImmediately(messageId, seq);
             void Promise.resolve(this.handleObserverInject(fromAid, payload, displayName, peerIdentity.type)).catch(error => {
                 logger.error(`${this.logPrefix()} observer.inject failed: ${error instanceof Error ? error.message : String(error)}`);
             });
@@ -2679,7 +2570,6 @@ export class AUNChannel {
         // 由控制 AID 的 onMessage 处理器（BindService.handleRequest）解析并回 bind.response。
         // 透传 encrypted：bind.response 须与请求的加密/明文对称（见 onMessage 处理）。
         if (p2pPayloadType === AUNChannel.BIND_REQUEST_TYPE) {
-            this.acknowledgeImmediately(messageId, seq);
             this.appendInboundPayloadJsonl(chatId, fromAid, messageId, msgEncrypted, false, logDescriptor, threadId, receivedAt, seq);
             this.dispatchMessage({
                 channelId: chatId, userId: fromAid,
@@ -2700,7 +2590,6 @@ export class AUNChannel {
         }
         // payload 类型白名单：信号类消息（status / event / thought 等）不进 Agent
         if (p2pPayloadType && !AUNChannel.PROACTIVE_ALLOW_TYPES.has(p2pPayloadType)) {
-            this.acknowledgeImmediately(messageId, seq);
             this.appendInboundPayloadJsonl(chatId, fromAid, messageId, msgEncrypted, false, logDescriptor, threadId, receivedAt, seq);
             logger.info(`${this.logPrefix()} P2P dropped (type deny): type=${p2pPayloadType} from=${shortAid}(${displayName}) mid=${messageId}`);
             return;
@@ -2758,11 +2647,10 @@ export class AUNChannel {
         const payload = msg.payload ?? '';
         const inboundType = (payload && typeof payload === 'object') ? payload.type : undefined;
         if (inboundType === 'observer.forward' || (typeof inboundType === 'string' && inboundType.startsWith('observer.inject'))) {
-            this.acknowledgeImmediately(messageId, seq);
             logger.debug(`${this.logPrefix()} Group dropped observer control envelope: mid=${messageId}`);
             return;
         }
-        const payloadMentionEntries = this.parsePayloadMentionsOrReject(payload, 'group.inbound', messageId, seq);
+        const payloadMentionEntries = this.parsePayloadMentionsOrReject(payload, 'group.inbound', messageId);
         if (!payloadMentionEntries)
             return;
         const payloadMentionAids = mentionEntryAids(payloadMentionEntries);
@@ -2774,7 +2662,6 @@ export class AUNChannel {
             : undefined;
         // 终态错误只作为展示信号，不能进入 Agent，也不能被 observer 再次传播。
         if (inboundType === 'error') {
-            this.acknowledgeImmediately(messageId, seq);
             logger.info(`${this.logPrefix()} Group dropped terminal error: group=${groupId || 'unknown'} sender=${senderAid || 'unknown'} mid=${messageId}`);
             return;
         }
@@ -2783,7 +2670,6 @@ export class AUNChannel {
         void this.forwardInbound(msg);
         logger.debug(`${this.logPrefix()}[DIAG-GRP] full_msg=${JSON.stringify(msg).substring(0, 500)}`);
         if (!groupId || !senderAid) {
-            this.acknowledgeImmediately(messageId, seq);
             logger.debug(`${this.logPrefix()} Group dropped: missing groupId or senderAid (mid=${messageId})`);
             return;
         }
@@ -2795,7 +2681,6 @@ export class AUNChannel {
             && typeof handoffMarker === 'string'
             && /^h-[A-Za-z0-9._-]+$/.test(handoffMarker);
         if (this._aid && senderAid === this._aid && !isOwnHandoff) {
-            this.acknowledgeImmediately(messageId, seq);
             logger.debug(`${this.logPrefix()} Group dropped: own message (group=${groupId} mid=${messageId})`);
             return;
         }
@@ -2804,7 +2689,6 @@ export class AUNChannel {
             const firstLineFast = text.split('\n')[0] || '';
             const hasEvolCoreTrace = /\[EvolCore\.(receive|reply|agent)\]/.test(text);
             if (/echo/i.test(firstLineFast) && firstLineFast.trim().length <= 10 && !hasEvolCoreTrace) {
-                this.acknowledgeImmediately(messageId, seq);
                 const msgEncryptedFast = !!env.encrypted;
                 const msgChatmodeFast = (payload && typeof payload === 'object') ? payload.chatmode : undefined;
                 const peerInfo = this.peerInfoCached(senderAid);
@@ -2843,12 +2727,10 @@ export class AUNChannel {
             const payloadType = typeof payloadObj?.type === 'string' ? payloadObj.type : '';
             // Menu control requests are private-only, including token issuance.
             if (payloadType.startsWith('menu.')) {
-                this.acknowledgeImmediately(messageId, seq);
                 logger.debug(`${this.logPrefix()} Group Menu dropped: code=MENU_PRIVATE_ONLY mid=${messageId}`);
                 return;
             }
             if (payloadType && !AUNChannel.PROACTIVE_ALLOW_TYPES.has(payloadType)) {
-                this.acknowledgeImmediately(messageId, seq);
                 this.appendInboundPayloadJsonl(groupId, senderAid, messageId, !!env.encrypted, true, logDescriptor, threadId, receivedAt, seq);
                 logger.info(`${this.logPrefix()} Group dropped (type deny): type=${payloadType} group=${groupId} sender=${senderAid} mid=${messageId}`);
                 return;
@@ -2906,7 +2788,6 @@ export class AUNChannel {
         }
         else if (/echo/i.test(firstLineGroup) && hasEvolCoreTraceGroup) {
             // 回声炸弹：已被任何 EvolCore 节点 trace 过的 echo，直接丢弃
-            this.acknowledgeImmediately(messageId, seq);
             logger.info(`${this.logPrefix()} Group dropped: echo bomb (already-traced group=${groupId} sender=${senderAid} mid=${messageId})`);
             return;
         }
@@ -2934,7 +2815,6 @@ export class AUNChannel {
                     logger.warn(`${this.logPrefix()} Deferred group message was not recorded; awaiting redelivery: ${error}`);
                     return;
                 }
-                this.acknowledgeImmediately(messageId, seq);
                 const dropReason = commandTargetsAnotherAgent ? 'command-targeted-other-agent' : 'unmentioned';
                 logger.info(`${this.logPrefix()} Group dropped: ${dropReason} (group=${groupId} sender=${senderAid} mid=${messageId} mentionMode=${mentionMode} slashRequireMentions=${groupSlashRequireMentions} isCommand=${isCommandMsg} commandMentionAids=${JSON.stringify(commandMentionAids)} textPreview=${JSON.stringify(text.slice(0, 80))})`);
                 return;
@@ -2950,7 +2830,6 @@ export class AUNChannel {
         const hasAttachments = rawAttachments.length > 0;
         // Allow through if there's text OR attachments; both-empty messages are silently dropped
         if (!strippedText && !hasAttachments) {
-            this.acknowledgeImmediately(messageId, seq);
             logger.debug(`${this.logPrefix()} Group dropped: empty text and no attachments (group=${groupId} sender=${senderAid} mid=${messageId})`);
             return;
         }
@@ -6022,11 +5901,7 @@ export class AUNChannel {
             logger.warn(`${this.logPrefix()} Repaired bootstrap outbox route to private Owner delivery: entry=${entry.id} owner=${owner}`);
         }
     }
-    acknowledge(messageId) {
-        // Gateway auto-delivery-ack is sufficient; skip explicit message.ack RPC
-        // to avoid duplicate "已送达" at the sender CLI
-        this.messageSeqMap.delete(messageId);
-    }
+    acknowledge(_messageId) { }
     sendProcessingStatus(channelId, status, sessionId, taskId, context, extraMeta) {
         let delivery;
         try {

package/dist/cli/agent-command.js

@@ -148,8 +148,7 @@ Options:
             process.exitCode = 1;
             return;
         }
-        const managedArgs = commands.has(sub) ? args : ['show', ...args];
-        const result = await runManagedAgentOperation(managedArgs);
+        const result = await runManagedAgentOperation(args);
         if (!result.ok) {
             if (formatJson)
                 console.log(JSON.stringify(result));
@@ -671,7 +670,7 @@ Options:
             process.exitCode = 1;
             return;
         }
-        const result = await agentPersona(aid, { text, file });
+        const result = await agentPersona(aid, { text, file, argv: args });
         if (!result.ok) {
             if (formatJson)
                 console.log(JSON.stringify(result));
@@ -720,7 +719,7 @@ Options:
             process.exitCode = 1;
             return;
         }
-        const result = await agentWelcome(aid, { text });
+        const result = await agentWelcome(aid, { text, argv: args });
         if (!result.ok) {
             if (formatJson)
                 console.log(JSON.stringify(result));
@@ -756,7 +755,7 @@ Options:
             console.error('用法: ec agent get <aid> <key>');
             process.exit(1);
         }
-        const result = await agentGet(aid, key);
+        const result = await agentGet(aid, key, { argv: args });
         if (!result.ok) {
             if (formatJson) {
                 console.log(JSON.stringify(result));
@@ -797,7 +796,7 @@ Options:
             console.error('用法: ec agent set <aid> <key> <value>');
             process.exit(1);
         }
-        const result = await agentSet(aid, key, val);
+        const result = await agentSet(aid, key, val, { argv: args });
         if (!result.ok) {
             if (formatJson) {
                 console.log(JSON.stringify(result));
@@ -828,7 +827,7 @@ Options:
             console.error('用法: ec agent ready <aid>');
             process.exit(1);
         }
-        const result = await agentReady(aid);
+        const result = await agentReady(aid, args);
         if (!result.ok) {
             if (formatJson) {
                 console.log(JSON.stringify(result));

package/dist/cli/agent-create.js

@@ -20,6 +20,7 @@ import { atomicWriteJson } from '../utils/atomic-write.js';
 import { isHClassPath, isLClassPath, isSameOrDescendant } from '../core/permission/protected-paths.js';
 import { MAIN_CLI_BIN } from '../product.js';
 import { uploadAvatarFile, uploadAvatarUrl } from '../utils/avatar-upload.js';
+import { readTaskRuntimeContextFromEnv } from './task-context.js';
 /** Parse the current Agent's Bootstrap welcome subcommand. */
 export function parseAgentWelcomeArgs(args) {
     const tail = args.at(-2) === '--format' && args.at(-1) === 'json' ? args.slice(0, -2) : args;
@@ -190,9 +191,9 @@ function projectSlug(project) {
         .replace(/-+$/g, '');
     return slug || 'agent';
 }
-export function resolveAgentCreatePlan(options) {
+export function resolveAgentCreatePlan(options, projectCwd = process.cwd()) {
     const aid = options.aid.trim();
-    const project = path.resolve(options.project || process.cwd());
+    const project = path.resolve(projectCwd, options.project || '.');
     const metadata = readProjectMetadata(project);
     const defaults = loadDefaults();
     const daemon = loadDaemonConfig();
@@ -940,6 +941,20 @@ export class AgentInitializationService {
         await this.running.get(aid);
     }
     async settle(aid) { await this.running.get(aid); }
+    async wait(aid, seconds) {
+        const work = this.running.get(aid);
+        if (work && seconds > 0) {
+            let timer;
+            try {
+                await Promise.race([work, new Promise(resolve => { timer = setTimeout(resolve, seconds * 1000); })]);
+            }
+            finally {
+                if (timer)
+                    clearTimeout(timer);
+            }
+        }
+        return this.status(aid);
+    }
     launch(r) {
         const aid = r.plan.aid;
         const work = Promise.resolve().then(() => this.run(r)).catch(error => {
@@ -1167,33 +1182,37 @@ export function parseInitializationArgs(args) {
         throw new Error('--wait must be an integer from 0 to 300');
     return { aid: args[1], resume, dryRun: seen.has('--dry-run'), wait, values };
 }
-export function resolveInitializationPlan(args) {
+export function resolveInitializationPlan(args, context) {
     const parsed = parseInitializationArgs(args);
     if (parsed.resume)
         throw new Error('A resume request cannot supply a new plan');
     const v = parsed.values;
     if (v['--avatar-file'] !== undefined && v['--avatar-url'] !== undefined)
         throw new Error('--avatar-file and --avatar-url are mutually exclusive');
-    if (v['--avatar-file']?.startsWith('attachment:') && !process.env.EVOLCORE_SESSION_ID) {
+    if (v['--avatar-file']?.startsWith('attachment:') && !context && !process.env.EVOLCORE_SESSION_ID) {
         throw new Error('attachment:<id> avatar sources require a managed Agent task');
     }
-    if (v['--persona-file'] !== undefined)
-        throw new Error('CLI must submit persona file contents as text');
+    const persona = v['--persona-file'] !== undefined
+        ? readInitializationPersona(v['--persona-file'], !!context, context)
+        : v['--persona-text'];
     const p = resolveAgentCreatePlan({
         aid: parsed.aid, project: v['--project'], baseagent: v['--baseagent'], ...parseAgentOwnerArgs(args),
         avatarFile: v['--avatar-file'], avatarUrl: v['--avatar-url'],
         name: v['--name'], description: v['--description'], tags: parseAgentTags(v['--tags']), type: v['--type'],
-    });
+    }, context?.projectCwd);
     return {
         aid: p.aid, project: p.project, baseagent: p.baseagent ?? '', owners: p.owners ?? (p.owner ? [p.owner] : []),
         name: p.name, description: p.description, tags: p.tags, type: p.type,
-        ...(v['--persona-text'] !== undefined ? { persona: v['--persona-text'] } : {}),
+        ...(persona !== undefined ? { persona } : {}),
         ...(v['--avatar-file'] !== undefined ? { avatarFile: v['--avatar-file'] } : {}),
         ...(v['--avatar-url'] !== undefined ? { avatarUrl: v['--avatar-url'] } : {}),
     };
 }
-export function readInitializationPersona(file, managed) {
-    const resolved = path.resolve(file);
+export function readInitializationPersona(file, managed, context = {
+    projectCwd: managed ? readTaskRuntimeContextFromEnv()?.projectPath ?? process.cwd() : process.cwd(),
+    tempDir: process.env.TMPDIR,
+}) {
+    const resolved = path.resolve(context.projectCwd, file);
     if (!/\.(md|txt)$/i.test(resolved))
         throw new Error('persona file must be .md or .txt');
     const stat = fs.lstatSync(resolved);
@@ -1201,8 +1220,8 @@ export function readInitializationPersona(file, managed) {
         throw new Error('persona must be a regular text file of at most 64 KiB');
     if (managed) {
         const real = fs.realpathSync(resolved);
-        const roots = [process.cwd(), process.env.TMPDIR].filter((r) => !!r && path.isAbsolute(r));
-        const allowed = roots.some(root => isSameOrDescendant(real, fs.realpathSync(root)));
+        const roots = [context.projectCwd, context.tempDir].filter((root) => !!root && path.isAbsolute(root));
+        const allowed = roots.some(root => fs.existsSync(root) && isSameOrDescendant(real, fs.realpathSync(root)));
         if (!allowed || isHClassPath(real) || isLClassPath(real))
             throw new Error('persona file must be inside the project or current TMPDIR');
     }
@@ -1216,27 +1235,24 @@ export async function runInitializationCommand(args) {
     const parsed = parseInitializationArgs(args);
     const managed = !!process.env.EVOLCORE_SESSION_ID;
     const argv = [...args];
-    if (parsed.values['--persona-file'] !== undefined) {
+    if (parsed.values['--persona-file'] !== undefined && !managed) {
+        const persona = readInitializationPersona(parsed.values['--persona-file'], managed);
         const at = argv.indexOf('--persona-file');
-        argv.splice(at, 2, '--persona-text', readInitializationPersona(parsed.values['--persona-file'], managed));
+        argv.splice(at, 2, '--persona-text', persona);
     }
-    if (!parsed.resume) {
+    if (!managed && !parsed.resume) {
         const at = argv.indexOf('--project');
         if (at < 0)
             argv.push('--project', process.cwd());
         else
             argv[at + 1] = path.resolve(argv[at + 1]);
     }
+    if (managed) {
+        const { runManagedAgentOperation } = await import('./agent.js');
+        const result = await runManagedAgentOperation(argv, (parsed.wait + 10) * 1000);
+        return initializationCommandResult(result);
+    }
     const request = async (poll) => {
-        if (managed) {
-            const { runManagedAgentOperation } = await import('./agent.js');
-            const r = await runManagedAgentOperation(poll ? ['show', parsed.aid, '--format', 'json'] : argv);
-            if (!poll || !r.ok || !r.initialization)
-                return r;
-            const init = r.initialization;
-            return { ...init, ok: !['failed', 'cancelled'].includes(init.status), aid: parsed.aid,
-                accepted: true, lifecycle: r.lifecycle, usable: init.complete && r.connection?.status === 'connected' };
-        }
         return await ipcQuery(resolvePaths().socket, {
             type: 'evolagent.initialize', argv, poll,
         }, 10_000) ?? { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Initialization requires a running daemon' };
@@ -1249,6 +1265,9 @@ export async function runInitializationCommand(args) {
         await new Promise(resolve => setTimeout(resolve, 500));
         result = await request(true);
     }
+    return initializationCommandResult(result);
+}
+function initializationCommandResult(result) {
     if (result.ok && !result.complete && result.accepted)
         return { ...result, ok: false, code: 'INITIALIZE_PENDING', error: 'Initialization is still running; inspect agent show' };
     if (result.complete && !result.usable)