evolcore 0.0.31 → 0.0.33

package/dist/core/auth/agent-delegation.js

@@ -4,6 +4,8 @@ import { authorizeOperation, buildAuthSubject } from './auth-gateway.js';
 import { formatPeerKey, parsePeerKey } from '../relation/peer-identity.js';
 import { logger } from '../../utils/logger.js';
 import { canonicalizeEvolcoreCommandArgv } from '../permission/ec-command-parser.js';
+import { MAIN_CLI_BIN } from '../../product.js';
+import { DebugDelegationRegistry, DEBUG_TOKEN_PREFIX } from './debug-context.js';
 export const AGENT_DELEGATION_TOKEN_ENV = 'EVOLCORE_DELEGATION_TOKEN';
 export const CODEX_SESSION_TOKEN_ENV = 'EVOLCORE_CODEX_SESSION_TOKEN';
 export const AGENT_DELEGATION_COMMAND_TTL_MS = 5 * 60_000;
@@ -23,9 +25,11 @@ export class AgentDelegationRegistry {
     grantsByHash = new Map();
     activeHashBySession = new Map();
     approvedCommands = new Map();
+    debugRegistry = new DebugDelegationRegistry();
     getRuntimeEpoch() {
         return this.runtimeEpoch;
     }
+    /** 发行正常 task delegation token */
     issue(input) {
         if (input.executionIdentity && !isValidFullAccessExecutionIdentity(input.executionIdentity)) {
             throw new Error('invalid fullaccess task execution identity');
@@ -37,11 +41,21 @@ export class AgentDelegationRegistry {
         this.activeHashBySession.set(input.sessionId, tokenHash);
         return token;
     }
+    /** 发行 debug token（dbg: 前缀），仅 debug 模式下调用 */
+    issueDebug(input) {
+        return this.debugRegistry.issue(input);
+    }
     validate(token, sessionId, commandHash) {
+        if (token?.startsWith(DEBUG_TOKEN_PREFIX)) {
+            return this.debugRegistry.validate(token, sessionId);
+        }
         return this.validateToken(token, sessionId, commandHash, true);
     }
     /** Authenticate a CLI context lookup without spending its approved operation. */
     validateForContext(token, sessionId, commandHash) {
+        if (token?.startsWith(DEBUG_TOKEN_PREFIX)) {
+            return this.debugRegistry.validate(token, sessionId);
+        }
         return this.validateToken(token, sessionId, commandHash, false);
     }
     validateToken(token, sessionId, commandHash, consumeApproval) {
@@ -210,7 +224,18 @@ export function authorizeDelegatedAunMsgSend(registry, input) {
         fromControlChannel: false,
         ...trustedExecutionIdentityInput(grant),
     });
-    const subject = { ...builtSubject, peerKey: grant.peerKey };
+    // 跨话题发送：目标 relation 由话题推断，按目标话题的会话类型和 relation 校验
+    // 「当前对端/当前群」约束；角色仍沿用来源会话，不因目标而提权。
+    const subject = input.threadRouted
+        ? {
+            ...builtSubject,
+            chatType: (input.scope === 'group' ? 'group' : 'private'),
+            channelId: input.to,
+            conversationId: input.to,
+            actorId: input.scope === 'group' ? builtSubject.actorId : input.to,
+            peerKey: formatPeerKey(grant.channelType, input.to),
+        }
+        : { ...builtSubject, peerKey: grant.peerKey };
     const decision = authorizeOperation({
         source: 'agent-tool',
         intent: {
@@ -278,7 +303,22 @@ export function hashDelegatedCommandArgv(argv) {
         .digest('hex');
 }
 export function hashCurrentDelegatedCommand(processArgv = process.argv) {
+    const argv = currentDelegatedCommandArgv(processArgv);
+    return argv ? hashDelegatedCommandArgv([MAIN_CLI_BIN, ...argv]) : undefined;
+}
+/**
+ * Return the command arguments used by a delegated CLI invocation.
+ *
+ * The returned value excludes the executable because IPC request builders add
+ * the canonical executable before hashing. Keeping this conversion beside
+ * hashCurrentDelegatedCommand prevents typed IPC requests from hashing a
+ * different representation than the implicit current-command path.
+ */
+export function currentDelegatedCommandArgv(processArgv = process.argv) {
     if (processArgv.length < 3)
         return undefined;
-    return hashDelegatedCommandArgv(canonicalizeEvolcoreCommandArgv(['ec', ...processArgv.slice(2)]));
+    const canonical = canonicalizeEvolcoreCommandArgv([MAIN_CLI_BIN, ...processArgv.slice(2)]);
+    if (canonical[0] !== MAIN_CLI_BIN)
+        return undefined;
+    return canonical.slice(1);
 }

package/dist/core/auth/debug-context.js

@@ -0,0 +1,139 @@
+/**
+ * debug-context.ts — 调试模式共享逻辑
+ *
+ * 供两端共用，不依赖 src/cli/：
+ *   - CLI 侧：src/cli/debug-mode.ts（resolveDebugContext）
+ *   - daemon 侧：src/ipc.ts（debug-issue-token IPC handler）
+ *
+ * 包含：
+ *   - DebugDelegationRegistry：独立 grant 通道，token 带 dbg: 前缀，不影响主 registry
+ *   - buildDebugTaskContext：从 Session 重建 TaskRuntimeContext（从 launch-consolidation.ts 迁移）
+ */
+import crypto from 'crypto';
+import { formatPeerKey } from '../relation/peer-identity.js';
+import { logger } from '../../utils/logger.js';
+// ---------------------------------------------------------------------------
+// DebugDelegationRegistry
+// ---------------------------------------------------------------------------
+/** Token TTL for debug grants — longer than production (30 min vs 5 min). */
+const DEBUG_TOKEN_TTL_MS = 30 * 60_000;
+/** Prefix that identifies a debug delegation token at the validation entry point. */
+export const DEBUG_TOKEN_PREFIX = 'dbg:';
+function sha256(data) {
+    return crypto.createHash('sha256').update(data).digest('hex');
+}
+/**
+ * Standalone delegation registry for debug mode.
+ *
+ * Uses a separate Map (debugGrantsByHash) so debug tokens never touch
+ * activeHashBySession in AgentDelegationRegistry, and issuing a debug token
+ * never triggers revokeSession on a live task.
+ *
+ * Token format: `dbg:<32-byte random hex>`
+ * Hash is computed over the raw part (after the prefix) only.
+ */
+export class DebugDelegationRegistry {
+    debugGrantsByHash = new Map();
+    issue(input) {
+        const raw = crypto.randomBytes(32).toString('hex');
+        const token = `${DEBUG_TOKEN_PREFIX}${raw}`;
+        const tokenHash = sha256(raw);
+        const grant = {
+            tokenHash,
+            sessionId: input.sessionId,
+            taskId: `debug-${Date.now()}`,
+            actorId: input.actorId ?? input.selfAid,
+            channel: input.channel,
+            channelType: input.channelType,
+            chatType: input.chatType,
+            selfAid: input.selfAid,
+            peerKey: input.peerKey,
+            issuedRole: input.issuedRole ?? 'debug',
+            expiresAt: Date.now() + DEBUG_TOKEN_TTL_MS,
+        };
+        this.debugGrantsByHash.set(tokenHash, grant);
+        logger.debug(`[DebugDelegation] issued token for session=${input.sessionId}`);
+        return token;
+    }
+    validate(token, sessionId) {
+        const raw = token.startsWith(DEBUG_TOKEN_PREFIX) ? token.slice(DEBUG_TOKEN_PREFIX.length) : token;
+        const tokenHash = sha256(raw);
+        const grant = this.debugGrantsByHash.get(tokenHash);
+        if (!grant) {
+            return { ok: false, code: 'INVALID_DELEGATION', reason: 'unknown debug token', diagnosticCause: 'unknown_token' };
+        }
+        if (grant.sessionId !== sessionId) {
+            return { ok: false, code: 'INVALID_DELEGATION', reason: 'session mismatch', diagnosticCause: 'session_mismatch' };
+        }
+        if (Date.now() > grant.expiresAt) {
+            this.debugGrantsByHash.delete(tokenHash);
+            return { ok: false, code: 'INVALID_DELEGATION', reason: 'debug token expired', diagnosticCause: 'task_replaced' };
+        }
+        return { ok: true, grant };
+    }
+    /** Remove all grants for a session (called when session is unbound). */
+    revokeSession(sessionId) {
+        for (const [hash, grant] of this.debugGrantsByHash) {
+            if (grant.sessionId === sessionId) {
+                this.debugGrantsByHash.delete(hash);
+            }
+        }
+    }
+    /** Prune expired grants. */
+    pruneExpired() {
+        const now = Date.now();
+        for (const [hash, grant] of this.debugGrantsByHash) {
+            if (now > grant.expiresAt)
+                this.debugGrantsByHash.delete(hash);
+        }
+    }
+}
+export function buildDebugTaskContext(input) {
+    const { session } = input;
+    const meta = (session.metadata ?? {});
+    const sessionType = session.sessionType ?? meta.sessionType ?? 'main';
+    // channel = 类型名；channelKey = 完整实例 key。二者分开，
+    // 与 originFromActorSession 的 `session.metadata?.channelKey || session.channel` 同源。
+    let channel = session.channelType || session.channel;
+    let channelKey = meta.channelKey || session.channel;
+    let chatType = session.chatType || 'private';
+    let peerId = meta.peerId;
+    let peerKeyId = chatType === 'group'
+        ? (meta.groupId || session.channelId)
+        : (meta.peerId || session.channelId);
+    let threadId = session.threadId || undefined;
+    if (session.channelId?.startsWith('trigger:') && session.selfAID && input.getTrigger) {
+        const triggerId = session.channelId.slice('trigger:'.length);
+        const origin = input.getTrigger(session.selfAID, triggerId)?.origin;
+        if (origin?.channelType) {
+            channel = origin.channelType;
+            if (origin.channelKey)
+                channelKey = origin.channelKey;
+            chatType = origin.delivery?.chatType ?? 'private';
+            peerId = origin.peerId;
+            peerKeyId = chatType === 'group' ? origin.channelId : (origin.peerId ?? origin.channelId);
+            threadId = origin.threadId;
+        }
+    }
+    return {
+        sessionId: session.id,
+        taskId: `debug-${Date.now()}`,
+        messageId: `debug-msg-${Date.now()}`,
+        baseagent: session.baseagent,
+        channel,
+        channelKey,
+        channelId: session.channelId,
+        chatType,
+        selfAid: session.selfAID,
+        peerId,
+        peerKey: channel && peerKeyId ? formatPeerKey(channel, peerKeyId) : undefined,
+        peerName: meta.peerName,
+        peerType: meta.peerType,
+        threadId,
+        sessionType,
+        memoryMode: meta.memoryMode,
+        memoryScope: meta.memoryScope,
+        consolidationBatchDir: meta.consolidationBatchDir ?? meta.consolidationLogBase,
+        sessionRuntimeDir: input.sessionRuntimeDir,
+    };
+}

package/dist/core/auth/delegation-authorization.js

@@ -52,6 +52,7 @@ export function createDelegationAuthorizer({ agentDelegationRegistry, sessionMan
                 aid: subject.dataScope === 'daemon' ? (params.targetAid ?? delegation.grant.selfAid) : delegation.grant.selfAid,
                 dataScope: subject.dataScope,
                 management: isManagementRole(subject.role),
+                sessionRuntimeDir: delegation.grant.sessionRuntimeDir,
             }
             : { ok: false, code: decision.code, error: decision.reason };
     };

package/dist/core/auth/operation-authorizer.js

@@ -331,6 +331,15 @@ function authorizeCommandInternal(ctx, resolvedConfigCommand) {
         };
     }
     let matchResult = matchCommandPermission(operation, opMeta.category, roleDef.commandPermissions || {}, opMeta.dangerous);
+    if (!matchResult && operation.startsWith('ec.thread.') && opMeta.category === 'read' && intent.scope === 'relation') {
+        const permission = roleDef.commandPermissions?.['session.topic.list'];
+        if (permission?.allow)
+            matchResult = {
+                permission: { ...permission, scopes: ['relation'], constraints: { ...permission.constraints, currentRelationOnly: true, targetCurrentAgentOnly: true } },
+                matchedRule: 'session.topic.list',
+                rank: 1000,
+            };
+    }
     // Agent self-service contact add deliberately reuses the same low-trust
     // relation boundary as ec.msg.send. Older per-Agent role files may still
     // contain the historical contact.* deny without an explicit contact.add
@@ -461,6 +470,14 @@ function requiresDaemonOwner(ctx, resolvedConfigCommand) {
     if (operation === 'agent.reload') {
         return !isCurrentAgentTarget(ctx);
     }
+    // Same shape as agent.reload: the current Agent's owner/admin refresh their
+    // own skill index; refreshing another Agent's index needs the daemon owner.
+    if (operation === 'skill.refresh' && hasDaemonOwnerRole(ctx)) {
+        return true;
+    }
+    if (operation === 'skill.refresh') {
+        return !isCurrentAgentTarget(ctx);
+    }
     if (operation.startsWith('trigger.')) {
         if (ctx.fromControlChannel)
             return true;
@@ -478,7 +495,7 @@ function hasDaemonOwnerRole(ctx) {
         || ctx.processRole === 'daemon-service';
 }
 function daemonOwnerDenialReasonCode(ctx) {
-    if ((ctx.intent.operation === 'agent.show' || ctx.intent.operation === 'agent.reload')
+    if ((ctx.intent.operation === 'agent.show' || ctx.intent.operation === 'agent.reload' || ctx.intent.operation === 'skill.refresh')
         && ctx.intent.scope !== 'control'
         && !ctx.fromControlChannel
         && !isCurrentAgentTarget(ctx)) {
@@ -894,6 +911,12 @@ function checkOwnPeer(ctx) {
             ? { ok: true }
             : { ok: false, reason: 'Only the current group relation can be targeted' };
     }
+    // For ec.msg.send / ec.msg.file, args.peer is the recipient (to), not a
+    // self-targeting field. Cross-topic sends are checked against their indexed
+    // target session by the managed message operation.
+    const isMsgSend = ctx.intent.operation === 'ec.msg.send' || ctx.intent.operation === 'ec.msg.file';
+    if (isMsgSend)
+        return { ok: true };
     if (ctx.actorId) {
         if (requestedPeerId && requestedPeerId !== ctx.actorId) {
             return { ok: false, reason: ownPeerOnlyDenialReason(ctx, requestedPeerId) };

package/dist/core/auth/operation-catalog.js

@@ -81,15 +81,15 @@ const GROUP_FS_READ_OPERATIONS = ['ls', 'stat', 'lstat', 'cat', 'find', 'df', 'g
     category: 'read',
     dangerous: false,
     defaultScopes: ['relation', 'agent'],
-    description: `Read current group filesystem (${kind})`,
+    description: `Read managed filesystem (${kind})`,
     sources: ['agent-tool'],
 }));
 const GROUP_FS_WRITE_OPERATIONS = [['mkdir', 'write-own'], ['upload', 'write-own'], ['copy', 'write-own'], ['move', 'write-own'], ['remove', 'write-own'], ['setfacl', 'write-agent']].map(([kind, category]) => ({
     id: `ec.fs.${kind}`,
     category,
     dangerous: false,
-    defaultScopes: ['relation'],
-    description: `Write current group filesystem (${kind})`,
+    defaultScopes: ['relation', 'agent'],
+    description: `Write managed filesystem (${kind})`,
     sources: ['agent-tool'],
 }));
 const HANDOFF_READ_OPERATIONS = ['status', 'list', 'trace'].map(kind => ({
@@ -307,6 +307,22 @@ const OPERATIONS = [
         description: '查看当前会话状态',
         sources: ['slash', 'menu', 'agent-tool'],
     },
+    {
+        id: 'session.loop.current',
+        category: 'read',
+        dangerous: false,
+        defaultScopes: ['relation'],
+        description: '查看当前主会话或话题的 idle 触发设置',
+        sources: ['slash', 'menu', 'ecweb', 'control'],
+    },
+    {
+        id: 'session.loop.update',
+        category: 'write-own',
+        dangerous: false,
+        defaultScopes: ['relation'],
+        description: '更新当前主会话或话题的 idle 触发设置',
+        sources: ['slash', 'menu', 'ecweb', 'control'],
+    },
     {
         id: 'session.topic.current',
         category: 'read',
@@ -719,6 +735,14 @@ const OPERATIONS = [
         description: '读取或更新当前 Agent 的 Bootstrap welcome.md',
         sources: ['agent-tool', 'control'],
     },
+    {
+        id: 'agent.rename',
+        category: 'write-agent',
+        dangerous: true,
+        defaultScopes: ['agent'],
+        description: '更新并发布当前 Agent 的 agent.md 显示名称',
+        sources: ['agent-tool'],
+    },
     {
         id: 'agent.create',
         category: 'process',
@@ -759,6 +783,23 @@ const OPERATIONS = [
         description: '重载 agent 配置',
         sources: ['slash', 'menu', 'agent-tool', 'control'],
     },
+    {
+        id: 'skill.refresh',
+        category: 'write-agent',
+        dangerous: false,
+        defaultScopes: ['agent', 'control'],
+        description: '重建技能索引文件',
+        sources: ['agent-tool', 'control'],
+    },
+    ...['list', 'list-peers', 'show', 'history', 'check-index', 'summary-show', 'summary-log', 'create', 'rename', 'label', 'status', 'delete', 'summary-set', 'summary-clear', 'rebuild-index'].map(action => ({
+        id: `ec.thread.${action}`,
+        category: (['list', 'list-peers', 'show', 'history', 'check-index', 'summary-show', 'summary-log'].includes(action)
+            ? 'read' : action === 'rebuild-index' ? 'write-agent' : 'write-own'),
+        dangerous: false,
+        defaultScopes: ['relation', 'agent'],
+        description: `${action} managed conversation threads`,
+        sources: ['agent-tool'],
+    })),
     {
         id: 'agent.bootstrapComplete',
         category: 'write-agent',

package/dist/core/background-session/session-cleanup.js

@@ -0,0 +1,212 @@
+/**
+ * session-cleanup.ts — 独立后台会话（bg-session）和 trigger 会话的清理机制
+ *
+ * 三种自动清理模式：
+ *   immediate     — 会话结束时同步清理
+ *   on_next_launch — 下次同 kind 会话启动时清理上一次的残留（默认）
+ *   expire        — 会话结束时写登记表，启动时扫描到期条目清理
+ *
+ * 登记表路径：$EVOLCORE_HOME/data/session-cleanup/expire-<YYYYMMDD>.jsonl
+ * 详见 docs/background-session/session-cleanup-policy.md
+ */
+import fs from 'fs';
+import path from 'path';
+import { resolveRoot } from '../../paths.js';
+import { logger } from '../../utils/logger.js';
+// ── 登记表工具 ──────────────────────────────────────────────────────────────
+function cleanupDir() {
+    return path.join(resolveRoot(), 'data', 'session-cleanup');
+}
+function expireFilePath(date) {
+    const y = date.getFullYear();
+    const m = String(date.getMonth() + 1).padStart(2, '0');
+    const d = String(date.getDate()).padStart(2, '0');
+    return path.join(cleanupDir(), `expire-${y}${m}${d}.jsonl`);
+}
+function doneFilePath(expirePath) {
+    return expirePath.replace(/\.jsonl$/, '.done.jsonl');
+}
+/**
+ * 把一条超期记录写进今天的登记表。
+ * 幂等：同一 channelId 写多次无害，runExpireCleanup 会逐条处理。
+ */
+export function appendExpireEntry(entry) {
+    try {
+        const dir = cleanupDir();
+        fs.mkdirSync(dir, { recursive: true });
+        const filePath = expireFilePath(new Date(entry.expireAt));
+        fs.appendFileSync(filePath, JSON.stringify(entry) + '\n', 'utf-8');
+    }
+    catch (e) {
+        logger.warn(`[SessionCleanup] 写入超期登记表失败: ${e?.message}`);
+    }
+}
+/**
+ * 清理一条 evolcore session 记录（移入 _trash/）。
+ * runner 侧日志不在这里处理（runner 接口尚未提供 deleteSession）。
+ */
+export async function cleanupSessionRecord(target, cleaner) {
+    try {
+        await cleaner.softDeleteSession(target.channelId);
+        logger.debug(`[SessionCleanup] 已清理 session 记录: channelId=${target.channelId}` +
+            `${target.agentAid ? ` aid=${target.agentAid}` : ''}`);
+    }
+    catch (e) {
+        logger.warn(`[SessionCleanup] 清理 session 记录失败 channelId=${target.channelId}: ${e?.message}`);
+    }
+}
+// ── expire 模式：启动时扫描 ──────────────────────────────────────────────────
+/**
+ * 扫描 data/session-cleanup/ 下所有登记表，清理已到期的条目。
+ * 在任意 bg-session 或 trigger 会话启动时调用，成本低（只读少量小文件）。
+ */
+export async function runExpireCleanup(cleaner, now = Date.now()) {
+    const dir = cleanupDir();
+    if (!fs.existsSync(dir))
+        return;
+    let files;
+    try {
+        files = fs.readdirSync(dir).filter(f => /^expire-\d{8}\.jsonl$/.test(f));
+    }
+    catch {
+        return;
+    }
+    const todayStr = (() => {
+        const d = new Date(now);
+        const y = d.getFullYear();
+        const m = String(d.getMonth() + 1).padStart(2, '0');
+        const day = String(d.getDate()).padStart(2, '0');
+        return `expire-${y}${m}${day}.jsonl`;
+    })();
+    for (const file of files) {
+        // 跳过未来日期的文件（expireAt 不可能到期）
+        const fileDate = file.slice(7, 15); // expire-YYYYMMDD.jsonl → YYYYMMDD
+        const todayDate = todayStr.slice(7, 15);
+        if (fileDate > todayDate)
+            continue;
+        const filePath = path.join(dir, file);
+        const donePath = doneFilePath(filePath);
+        let lines;
+        try {
+            lines = fs.readFileSync(filePath, 'utf-8').split('\n').filter(l => l.trim());
+        }
+        catch {
+            continue;
+        }
+        // 读取已处理的 channelId 集合
+        const doneIds = new Set();
+        if (fs.existsSync(donePath)) {
+            try {
+                for (const line of fs.readFileSync(donePath, 'utf-8').split('\n').filter(l => l.trim())) {
+                    const entry = JSON.parse(line);
+                    if (entry.channelId)
+                        doneIds.add(entry.channelId);
+                }
+            }
+            catch { /* 损坏的 done 文件，跳过去重，重复清理幂等 */ }
+        }
+        let processedCount = 0;
+        // 文件里是否还有未到期条目；有则保留文件，下次再扫
+        let hasPending = false;
+        for (const line of lines) {
+            let entry;
+            try {
+                entry = JSON.parse(line);
+            }
+            catch {
+                continue;
+            }
+            if (!entry.channelId || !entry.expireAt)
+                continue;
+            if (entry.expireAt > now) {
+                hasPending = true;
+                continue;
+            } // 未到期
+            if (doneIds.has(entry.channelId))
+                continue; // 已处理
+            await cleanupSessionRecord({ sessionId: entry.sessionId, channelId: entry.channelId, agentAid: entry.agentAid }, cleaner);
+            // 标记已处理
+            try {
+                fs.appendFileSync(donePath, JSON.stringify({ channelId: entry.channelId, ts: now }) + '\n', 'utf-8');
+            }
+            catch { /* 写失败无妨，下次会重复处理，cleanupSessionRecord 幂等 */ }
+            doneIds.add(entry.channelId);
+            processedCount++;
+        }
+        if (processedCount > 0) {
+            logger.debug(`[SessionCleanup] expire 扫描：清理 ${processedCount} 条到期记录（${file}）`);
+        }
+        // 整天文件全部处理完时，删除两个文件。
+        // 不能用 doneIds.size 与行数比较：同一 channelId 重复登记时两者永远不等，文件会残留。
+        if (!hasPending) {
+            try {
+                fs.unlinkSync(filePath);
+            }
+            catch { /* ignore */ }
+            try {
+                fs.unlinkSync(donePath);
+            }
+            catch { /* ignore */ }
+        }
+    }
+}
+// ── on_next_launch 模式：按 kind 清理历史会话 ────────────────────────────────
+/**
+ * 记录一条 on_next_launch 清理登记，供下次启动时使用。
+ * 存在一个独立的 JSONL 文件中，按 kind 分文件存储。
+ */
+function nextLaunchFilePath(kind) {
+    const safeKind = kind.replace(/[^a-zA-Z0-9\-_]/g, '_');
+    return path.join(cleanupDir(), `next-launch-${safeKind}.jsonl`);
+}
+/**
+ * 记录一条「下次启动时清理」的会话信息。
+ * 在会话正常或异常结束时调用。
+ */
+export function recordNextLaunchCleanup(kind, entry) {
+    try {
+        const dir = cleanupDir();
+        fs.mkdirSync(dir, { recursive: true });
+        const filePath = nextLaunchFilePath(kind);
+        fs.appendFileSync(filePath, JSON.stringify(entry) + '\n', 'utf-8');
+    }
+    catch (e) {
+        logger.warn(`[SessionCleanup] 写入 on_next_launch 登记失败 kind=${kind}: ${e?.message}`);
+    }
+}
+/**
+ * 清理同 kind 的所有历史会话记录，然后清空登记文件。
+ * 在新会话启动前调用（on_next_launch 模式）。
+ */
+export async function cleanupPreviousByKind(kind, cleaner) {
+    const filePath = nextLaunchFilePath(kind);
+    if (!fs.existsSync(filePath))
+        return;
+    let lines;
+    try {
+        lines = fs.readFileSync(filePath, 'utf-8').split('\n').filter(l => l.trim());
+    }
+    catch {
+        return;
+    }
+    for (const line of lines) {
+        let entry;
+        try {
+            entry = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        if (!entry.channelId)
+            continue;
+        await cleanupSessionRecord({ sessionId: entry.sessionId, channelId: entry.channelId, agentAid: entry.agentAid }, cleaner);
+    }
+    // 清空登记文件（下一次重新积累）
+    try {
+        fs.unlinkSync(filePath);
+    }
+    catch { /* ignore */ }
+    if (lines.length > 0) {
+        logger.debug(`[SessionCleanup] on_next_launch：已清理 ${lines.length} 条历史记录（kind=${kind}）`);
+    }
+}

package/dist/core/background-session/types.js

@@ -0,0 +1,10 @@
+/**
+ * background-session/types.ts — 独立后台会话的接口定义
+ *
+ * 独立后台会话（bg-session）是由 daemon 内部逻辑主动拉起的 AI 会话，
+ * 不属于用户交互，也不挂在 trigger 调度系统下。
+ * 整理会话、话题总结会话等都通过这套接口拉起。
+ *
+ * 详细机制见 docs/background-session/background-session-launcher.md
+ */
+export {};

package/dist/core/bootstrap-messages.js

@@ -53,7 +53,7 @@ export function renderPostBootstrapWelcome(aid, owner, ownerName) {
     }
     const config = loadAgent(aid);
     if (config && resolveAgentLifecycle(config) === 'bootstrapping' && config.initialization?.mode !== 'supplied') {
-        throw new Error('WELCOME_REQUIRED: Owner-confirmed welcome.md is required before activation');
+        throw new Error('WELCOME_REQUIRED: Agent-prepared welcome.md is required before activation');
     }
     return generateWelcomeMessage({
         channelType: 'aun',

package/dist/core/bootstrap-service.js

@@ -25,14 +25,17 @@ export async function completeBootstrapWithWelcome(service, aid, welcome, sessio
     }
     if (lifecycle === 'bootstrapping') {
         // Existing per-Owner records are immutable retry snapshots. New interactive
-        // Bootstrap completions require the text saved after Owner confirmation.
+        // Bootstrap completions require the welcome text prepared by the Agent.
         const config = loadAgent(aid);
         const deliveries = config?.owners?.length ? postBootstrapWelcomeStatus(aid, config.owners).deliveries : [];
         const alreadyPrepared = deliveries.length > 0 && deliveries.every(delivery => delivery.status !== 'not_prepared');
         if (config?.initialization?.mode !== 'supplied' && !alreadyPrepared) {
             try {
                 if (readAgentWelcomeTemplate(aid) === null) {
-                    return { ok: false, code: 'WELCOME_REQUIRED', error: '请先在 Bootstrap 对话中生成欢迎文案，经 Owner 确认后保存 welcome.md', reloaded: false };
+                    return {
+                        ok: false, code: 'WELCOME_REQUIRED', reloaded: false,
+                        error: '请先自主生成正式欢迎文案并保存 welcome.md，无需 Owner 确认',
+                    };
                 }
             }
             catch (error) {
@@ -446,7 +449,7 @@ export class BootstrapService {
         const templatePath = path.join(kitsTemplatesDir(), 'bootstrap-welcome.md');
         const template = fs.existsSync(templatePath)
             ? fs.readFileSync(templatePath, 'utf-8')
-            : '你好，我是 {{agentName}}。请帮我确认显示名、简介和标签。';
+            : '你好，我是 {{agentName}}。已有的有效基础信息会直接沿用；请补充缺失的显示名、简介或标签。persona 和头像可选，之后也可以完善。';
         return renderTemplate(template, vars).trim();
     }
     resolveAgentDisplayName(aid) {