evolcore 0.0.31 → 0.0.33

package/dist/cli/agent.js

@@ -14,7 +14,6 @@ import { isValidChannelName } from '../core/channel-loader.js';
 import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
 import { isValidAid } from '../aun/aid/validation.js';
-import { isHClassPath, isLClassPath, isSameOrDescendant } from '../core/permission/protected-paths.js';
 import { findPostBootstrapWelcomeOutbox } from '../core/bootstrap-messages.js';
 import { resolveAgentLifecycle } from '../config/lifecycle.js';
 import { initializationSummary } from './agent-create.js';
@@ -22,7 +21,7 @@ import { parseAgentWelcomeMetadata, readAgentWelcomeTemplate, renderPostBootstra
 import { RUNTIME_ENVIRONMENT_NAMES } from '../config/runtime-env.js';
 export { agentCreateInteractive, agentCreateNonInteractive, parseAgentOwnerArgs, resolveAgentCreatePlan, validateAgentCreatePlan, validateAgentOwnerOptions, } from './agent-create.js';
 /** Route agent lifecycle commands from a managed task through daemon IPC. */
-export async function runManagedAgentOperation(argv) {
+export async function runManagedAgentOperation(argv, timeoutMs = 60_000) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId)
         return { ok: false, code: 'MANAGED_ONLY', error: 'agent operation is not running in a managed task' };
@@ -36,7 +35,7 @@ export async function runManagedAgentOperation(argv) {
             argv: ['agent', ...argv],
             sessionId,
             delegationToken,
-        }, 60_000);
+        }, timeoutMs);
         if (!response)
             return { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the evolcore daemon' };
         if (!response.ok)
@@ -398,37 +397,12 @@ async function agentSetEnabled(aid, enabled, options = {}) {
     return { ok: true, aid, enabled, reloaded };
 }
 async function runManagedAgentConfig(args, options) {
-    const sessionId = process.env.EVOLCORE_SESSION_ID;
-    if (!sessionId || options.trustedLocal)
+    if (!process.env.EVOLCORE_SESSION_ID || options.trustedLocal)
         return { managed: false };
-    const delegationToken = readDelegationCredential();
-    if (!delegationToken) {
-        return {
-            managed: true,
-            error: { ok: false, code: 'DELEGATION_REQUIRED', error: `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task` },
-        };
-    }
-    try {
-        const response = await ipcQuery(resolvePaths().socket, {
-            type: 'config.op',
-            argv: ['config', ...args],
-            sessionId,
-            delegationToken,
-        }, 10_000);
-        if (!response) {
-            return { managed: true, error: { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the evolcore daemon' } };
-        }
-        if (!response.ok || !response.result?.ok) {
-            return {
-                managed: true,
-                error: { ok: false, code: response.code || 'CONFIG_AUTH_FAILED', error: response.error || 'config operation failed' },
-            };
-        }
-        return { managed: true, response };
-    }
-    catch {
-        return { managed: true, error: { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'Unable to connect to the evolcore daemon' } };
-    }
+    const result = await runManagedAgentOperation(options.argv ?? args, 10_000);
+    return result.ok
+        ? { managed: true, response: { ok: true, result } }
+        : { managed: true, error: result };
 }
 async function executeLocalAgentConfig(args) {
     initConfigManager();
@@ -448,7 +422,7 @@ async function executeLocalAgentConfig(args) {
     });
 }
 export async function agentGet(aid, key, options = {}) {
-    const managed = await runManagedAgentConfig(['get', key, '--self', aid], options);
+    const managed = await runManagedAgentConfig(['get', aid, key], options);
     if (managed.managed) {
         if ('error' in managed)
             return managed.error;
@@ -472,7 +446,7 @@ export async function agentGet(aid, key, options = {}) {
     }
 }
 export async function agentSet(aid, key, rawValue, options = {}) {
-    const managed = await runManagedAgentConfig(['set', key, rawValue, '--self', aid], options);
+    const managed = await runManagedAgentConfig(['set', aid, key, rawValue], options);
     if (managed.managed) {
         if ('error' in managed)
             return managed.error;
@@ -539,36 +513,7 @@ export async function agentPersona(aid, options = {}) {
         return { ok: false, code: 'INVALID_ARGS', error: '--text 与 --file 不能同时使用' };
     const managedSession = !!process.env.EVOLCORE_SESSION_ID && !options.trustedLocal;
     let text = options.text;
-    if (options.file !== undefined) {
-        if (managedSession) {
-            const resolved = path.resolve(options.file);
-            const projectRoot = path.resolve(process.cwd());
-            const tempRoot = process.env.TMPDIR?.trim() && path.isAbsolute(process.env.TMPDIR)
-                ? path.resolve(process.env.TMPDIR)
-                : undefined;
-            const allowed = isSameOrDescendant(resolved, projectRoot)
-                || (!!tempRoot && isSameOrDescendant(resolved, tempRoot));
-            if (!allowed || isHClassPath(resolved) || isLClassPath(resolved)) {
-                return { ok: false, code: 'INVALID_ARGS', error: '--file 必须位于当前项目或会话 $TMPDIR，且不能读取 EvolCore 受保护路径' };
-            }
-            try {
-                const stat = fs.lstatSync(resolved);
-                if (stat.isSymbolicLink() || !stat.isFile()) {
-                    return { ok: false, code: 'INVALID_ARGS', error: '--file 必须指向当前项目或会话 $TMPDIR 内的普通文件' };
-                }
-                const realPath = fs.realpathSync(resolved);
-                const realProjectRoot = fs.realpathSync(projectRoot);
-                const realTempRoot = tempRoot ? fs.realpathSync(tempRoot) : undefined;
-                const realAllowed = isSameOrDescendant(realPath, realProjectRoot)
-                    || (!!realTempRoot && isSameOrDescendant(realPath, realTempRoot));
-                if (!realAllowed || isHClassPath(realPath) || isLClassPath(realPath)) {
-                    return { ok: false, code: 'INVALID_ARGS', error: '--file 解析后越出允许目录或命中 EvolCore 受保护路径' };
-                }
-            }
-            catch (e) {
-                return { ok: false, code: 'READ_FAILED', error: `无法校验 --file: ${e?.message || e}` };
-            }
-        }
+    if (options.file !== undefined && !managedSession) {
         const source = readPersonaSource(options.file);
         if (!source.ok)
             return source;
@@ -582,10 +527,10 @@ export async function agentPersona(aid, options = {}) {
     const managedArgs = options.text !== undefined
         ? ['persona', '--text', text]
         : options.file !== undefined
-            ? ['persona', '--text', text]
+            ? ['persona', '--file', options.file]
             : ['persona', 'show'];
     if (managedSession) {
-        const managed = await runManagedAgentOperation(managedArgs);
+        const managed = await runManagedAgentOperation(options.argv ?? managedArgs);
         if (!managed.ok)
             return managed;
         return { ok: true, aid, content: managed.content ?? null, ...(managed.path ? { path: managed.path } : {}), ...(managed.saved ? { saved: true } : {}) };
@@ -608,7 +553,7 @@ export async function agentPersona(aid, options = {}) {
         return { ok: false, code: 'WRITE_FAILED', error: e?.message || String(e) };
     }
 }
-/** Read or replace the current Agent's confirmed Bootstrap welcome template. */
+/** Read or replace the current Agent's self-prepared Bootstrap welcome template. */
 export async function agentWelcome(aid, options = {}) {
     if (!isValidAid(aid))
         return { ok: false, code: 'INVALID_ARGS', error: 'Invalid Agent AID' };
@@ -625,7 +570,7 @@ export async function agentWelcome(aid, options = {}) {
         if (readTaskRuntimeContextFromEnv()?.selfAid !== aid) {
             return { ok: false, code: 'SELF_AGENT_REQUIRED', error: 'welcome only targets the current Agent' };
         }
-        const managed = await runManagedAgentOperation(managedArgs);
+        const managed = await runManagedAgentOperation(options.argv ?? managedArgs);
         if (!managed.ok)
             return managed;
         return {
@@ -803,7 +748,7 @@ export async function agentRename(aid, name) {
     return { ok: true, aid, name };
 }
 // ==================== agentReady ====================
-export async function agentReady(aid) {
+export async function agentReady(aid, commandArgs) {
     const managedSessionId = process.env.EVOLCORE_SESSION_ID;
     const taskSelfAid = managedSessionId ? readTaskRuntimeContextFromEnv()?.selfAid : undefined;
     if (taskSelfAid && taskSelfAid.replace(/^@/, '') !== aid.replace(/^@/, '')) {
@@ -822,6 +767,7 @@ export async function agentReady(aid) {
         const result = await ipcQuery(p.socket, {
             type: 'evolagent.bootstrapComplete',
             aid,
+            ...(managedSessionId ? { argv: ['agent', ...(commandArgs ?? ['ready', aid])] } : {}),
             ...(managedSessionId ? { sessionId: managedSessionId, delegationToken } : {}),
         }, 30_000);
         if (!result)