evolcore 0.0.38 → 0.0.40

package/dist/cli/skill-command.js

@@ -22,7 +22,7 @@ import path from 'path';
 import { spawn } from 'child_process';
 import { getPackageRoot, agentDir, resolvePaths } from '../paths.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { authorizeLocalCommand, TASK_RUNTIME_CONTEXT_ENV } from './task-context.js';
 import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
@@ -87,17 +87,17 @@ async function cmdSkillRefresh(args) {
         process.exitCode = 1;
         return;
     }
-    let response;
-    try {
-        response = await ipcQuery(resolvePaths().socket, {
-            type: 'skill.refresh',
-            aid,
-            argv,
-            ...(sessionId ? { sessionId, delegationToken } : {}),
-        }, 30_000, { throwOnError: true });
-    }
-    catch (e) {
-        console.error(`❌ 刷新失败 (DAEMON_UNAVAILABLE): ${e instanceof Error ? e.message : String(e)}`);
+    const { response, transportError } = await queryDaemon(resolvePaths().socket, {
+        type: 'skill.refresh',
+        aid,
+        argv,
+        ...(sessionId ? { sessionId, delegationToken } : {}),
+    }, 30_000);
+    if (transportError) {
+        if (asJson)
+            console.log(JSON.stringify({ ok: false, code: 'DAEMON_UNAVAILABLE', error: transportError.message }, null, 2));
+        else
+            console.error(`❌ 刷新失败 (DAEMON_UNAVAILABLE): ${transportError.message}`);
         process.exitCode = 1;
         return;
     }
@@ -109,7 +109,7 @@ async function cmdSkillRefresh(args) {
     }
     if (!response?.ok) {
         const code = response?.code ?? (response ? 'FAILED' : 'DAEMON_UNAVAILABLE');
-        console.error(`❌ 刷新失败 (${code}): ${response?.error ?? '无法连接 evolcore daemon'}`);
+        console.error(`❌ 刷新失败 (${code}): ${response?.error ?? daemonUnavailableMessage(transportError, '无法连接 evolcore daemon')}`);
         if (response?.data?.nextStep)
             console.error(`   ${response.data.nextStep}`);
         process.exitCode = 1;

package/dist/cli/task-command.js

@@ -1,5 +1,5 @@
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { wantsHelp } from './help.js';
 const TASK_HELP = `用法: ec task resume <sessionId> [--format json]
@@ -39,14 +39,14 @@ export async function cmdTask(args) {
         printError('DELEGATION_REQUIRED', '托管任务缺少 delegation token');
         return;
     }
-    const result = await ipcQuery(resolvePaths().socket, {
+    const { response: result, transportError } = await queryDaemon(resolvePaths().socket, {
         type: 'task.resume',
         argv: ['task', ...args],
         targetSessionId,
         ...(sessionId ? { sessionId, delegationToken } : {}),
     }, 10_000);
     if (!result) {
-        printError('IPC_UNAVAILABLE', '无法连接 EvolCore 服务；请查询任务状态后再决定是否重试');
+        printError('IPC_UNAVAILABLE', daemonUnavailableMessage(transportError, '无法连接 EvolCore 服务；请查询任务状态后再决定是否重试'));
         return;
     }
     if (json)

package/dist/cli/task-context.js

@@ -47,6 +47,7 @@ function normalizeTaskRuntimeContext(value) {
         executionSource: value.executionSource === 'fullaccess-command'
             || value.executionSource === 'trigger'
             || value.executionSource === 'agent-policy'
+            || value.executionSource === 'session-policy'
             ? value.executionSource : undefined,
         daemonRuntimeEpoch: optionalString(value.daemonRuntimeEpoch),
         threadId: optionalString(value.threadId),

package/dist/cli/thread-command.js

@@ -1,5 +1,5 @@
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
 import { isMainSessionThreadId, resolveThreadRef } from '../core/thread/topic-id.js';
@@ -91,7 +91,7 @@ async function sendThreadOp(req, commandArgv) {
     const cred = readDelegationCredential();
     const { socket } = resolvePaths();
     const invokingSessionId = process.env.EVOLCORE_SESSION_ID;
-    const result = await ipcQuery(socket, {
+    const { response: result, transportError } = await queryDaemon(socket, {
         ...req,
         type: 'thread.op',
         argv: commandArgv,
@@ -99,7 +99,9 @@ async function sendThreadOp(req, commandArgv) {
         sessionId: invokingSessionId,
     }, 10000);
     if (!result)
-        return { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'daemon 暂时不可用' };
+        return {
+            ok: false, code: 'DAEMON_UNAVAILABLE', error: daemonUnavailableMessage(transportError, 'daemon 暂时不可用'),
+        };
     return result;
 }
 function printResult(data, jsonFormat) {

package/dist/cli/trigger-command.js

@@ -1,7 +1,7 @@
 import fs from 'fs';
 import path from 'path';
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { isHelpFlag, wantsHelp } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
@@ -642,9 +642,9 @@ async function request(cmd, timeoutMs = 10_000) {
         }
         catch { }
     }
-    const res = await ipcQuery(resolvePaths().socket, actorSessionId ? { ...cmd, actorSessionId, delegationToken } : delegationToken ? { ...cmd, delegationToken } : { ...cmd, controlToken }, timeoutMs);
+    const { response: res, transportError } = await queryDaemon(resolvePaths().socket, actorSessionId ? { ...cmd, actorSessionId, delegationToken } : delegationToken ? { ...cmd, delegationToken } : { ...cmd, controlToken }, timeoutMs);
     if (!res)
-        throw new Error('错误: 无法连接 evolcore 服务');
+        throw new Error(`错误: ${daemonUnavailableMessage(transportError, '无法连接 evolcore 服务')}`);
     if (res.ok === false || res.error)
         throw new Error(res.error || 'trigger command failed');
     return res;

package/dist/cli/version.js

@@ -6,6 +6,7 @@ import path from 'path';
 import { fileURLToPath } from 'url';
 import { MAIN_PACKAGE_NAME, PRODUCT_DISPLAY_NAME, WEB_PACKAGE_NAME } from '../product.js';
 import { getArgValue, wantsHelp } from './help.js';
+import { resolveGlobalPkg } from '../utils/npm-ops.js';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const PACKAGE_ROOT = path.resolve(__dirname, '../..');
 const RESET = '\x1b[0m';
@@ -54,8 +55,11 @@ export function handleVersion(args) {
     const mainPkg = readPkgJson(PACKAGE_ROOT);
     const mainEntry = path.join(PACKAGE_ROOT, 'dist', 'cli', 'index.js');
     const mainTs = getFileModTime(mainEntry);
-    // ecweb 包
-    const ecwebDir = path.join(PACKAGE_ROOT, 'ecweb');
+    // EC Web may be in the repository (dev mode) or nested under the globally
+    // installed EvolCore package. Use the shared resolver so both layouts report
+    // the actual installed package instead of `?`.
+    const ecwebInstalled = resolveGlobalPkg(WEB_PACKAGE_NAME);
+    const ecwebDir = ecwebInstalled ? path.dirname(ecwebInstalled.path) : path.join(PACKAGE_ROOT, 'ecweb');
     const ecwebPkg = readPkgJson(ecwebDir);
     const ecwebEntry = path.join(ecwebDir, 'dist', 'index.js');
     const ecwebTs = getFileModTime(ecwebEntry);

package/dist/config/config-field-policy.js

@@ -227,6 +227,7 @@ export function resolveConfigFieldRule(fieldPath, scope) {
         }
         // 数值参数：整理节奏与容量上限，均 owner-only
         if (field === 'memory.idleHours'
+            || field === 'memory.maxUnconsolidatedHours'
             || field === 'memory.checkIntervalHours'
             || field === 'memory.backlogHours'
             || field === 'memory.indexMaxBytes'

package/dist/contracts/ecweb-service-protocol.js

@@ -0,0 +1,44 @@
+export const ECWEB_SERVICE_PROTOCOL = Object.freeze({
+    name: 'evolcore.ecweb',
+    major: 1,
+    minor: 1,
+    capabilities: Object.freeze([
+        'daemon.status',
+        'agent.directory',
+        'aun.directory',
+        'menu.execute',
+        'provider.management',
+        'basic-settings',
+        'model.catalog',
+        'baseagent.snapshot',
+        'monitor.snapshot',
+        'monitor.subscription',
+        'remote-auth',
+        'trigger.history',
+    ]),
+});
+export function validateEcwebClientProtocolRequirements(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return 'ECWeb client protocol requirements are missing or malformed';
+    }
+    const requirements = value;
+    if (requirements.name !== ECWEB_SERVICE_PROTOCOL.name) {
+        return `Unsupported ECWeb protocol name: ${String(requirements.name ?? 'missing')}`;
+    }
+    if (requirements.major !== ECWEB_SERVICE_PROTOCOL.major) {
+        return `Unsupported ECWeb protocol major version: ${String(requirements.major ?? 'missing')}`;
+    }
+    if (!Number.isInteger(requirements.minMinor) || requirements.minMinor < 0
+        || requirements.minMinor > ECWEB_SERVICE_PROTOCOL.minor) {
+        return `ECWeb requires protocol minor ${String(requirements.minMinor ?? 'missing')}, host supports ${ECWEB_SERVICE_PROTOCOL.minor}`;
+    }
+    if (!Array.isArray(requirements.requiredCapabilities)
+        || requirements.requiredCapabilities.some(capability => typeof capability !== 'string' || !capability.trim())) {
+        return 'ECWeb required capabilities are malformed';
+    }
+    const supported = new Set(ECWEB_SERVICE_PROTOCOL.capabilities);
+    const missing = requirements.requiredCapabilities.filter(capability => !supported.has(capability));
+    if (missing.length > 0)
+        return `ECWeb requires unsupported capabilities: ${missing.join(', ')}`;
+    return null;
+}

package/dist/core/agent-runtime.js

@@ -226,6 +226,11 @@ export function createAgentInitializationRuntime({ agentRegistry, agentMap, chan
         bindOwner: async (aid, ownerAid) => {
             await ownerResolver.bind(aid, ownerAid);
         },
+        ownerBindActive: (aid, ownerAid) => {
+            const task = ownerResolver.snapshot(aid).task;
+            return task?.operation === 'bind' && task.owner_aid === ownerAid
+                && (task.status === 'pending' || task.status === 'completed');
+        },
         checkOwner: async (aid, expectedOwnerAid) => {
             const view = await ownerResolver.refresh(aid, { maxAgeMs: OWNERSHIP_AUTHORIZATION_MAX_AGE_MS });
             if (view.consensusStatus === 'consensus')
@@ -257,6 +262,7 @@ export function createAgentInitializationRuntime({ agentRegistry, agentMap, chan
             const agent = agentRegistry.get(aid);
             return !!agent && agent.config.enabled !== false && agentMap.has(`${aid}::${agent.baseagent}`) && isConnected(aid);
         },
+        authorize: actor => actor === 'local-control' || ownerResolver.daemonOwners().includes(actor),
     });
 }
 export function recoverIncompleteAgentInitializations(service, agentsDir = resolvePaths().agentsDir) {

package/dist/core/auth/agent-delegation.js

@@ -440,7 +440,7 @@ export async function authorizeDelegatedAunMsgSend(registry, input) {
     catch {
         return { ok: false, code: 'INVALID_DELEGATION', reason: 'Delegation relation key is invalid' };
     }
-    await refreshOwnershipForAuthorization(grant.selfAid);
+    await refreshOwnershipForAuthorization(grant.selfAid, { allowTransient: true });
     const builtSubject = buildAuthSubject({
         selfAid: grant.selfAid,
         actorId: grant.actorId,
@@ -503,10 +503,13 @@ function isValidFullAccessExecutionIdentity(identity) {
         || identity.processRole !== 'fullaccess-run'
         || identity.dataScope !== 'daemon')
         return false;
-    if (identity.source === 'fullaccess-command' || identity.source === 'agent-policy') {
+    if (identity.source === 'fullaccess-command' || identity.source === 'agent-policy' || identity.source === 'session-policy') {
         return typeof identity.authorizedBy === 'string' && identity.authorizedBy.length > 0
-            && (identity.source !== 'agent-policy'
-                || (typeof identity.agentAid === 'string' && identity.agentAid.length > 0));
+            && (identity.source === 'fullaccess-command'
+                || (typeof identity.agentAid === 'string'
+                    && identity.agentAid.length > 0
+                    && (identity.source !== 'session-policy'
+                        || (typeof identity.sessionId === 'string' && identity.sessionId.length > 0))));
     }
     return identity.source === 'trigger'
         && typeof identity.authorizedBy === 'string' && identity.authorizedBy.length > 0

package/dist/core/auth/auth-gateway.js

@@ -107,7 +107,8 @@ export async function authorizeFreshOperation(params) {
         const configCommand = params.resolvedConfigCommand;
         const changesOwner = configCommand?.kind === 'field' && configCommand.subcommand !== 'get'
             && ['owner', 'owners'].includes(configCommand.field.split('.')[0]);
-        const force = changesOwner || params.intent.operation === 'ec.aid.bind' || params.intent.operation === 'config.restore';
+        const force = changesOwner || ['ec.aid.bind', 'ec.aid.bind.status', 'ec.aid.unbind', 'ec.aid.transfer']
+            .includes(params.intent.operation) || params.intent.operation === 'config.restore';
         const operation = getOperationMeta(params.intent.operation);
         const sensitive = force || params.intent.dangerous || operation?.dangerous || operation?.category !== 'read'
             || configCommand?.dangerous || subject.processRole === 'fullaccess-run';
@@ -116,6 +117,7 @@ export async function authorizeFreshOperation(params) {
             ...(sensitive ? {} : { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS }),
             includeDaemon: subject.isDaemonOwner || subject.processRole === 'fullaccess-run'
                 || params.intent.scope === 'process' || params.intent.scope === 'control' || force,
+            allowTransient: !force,
         });
         const current = buildAuthSubject({
             selfAid: subject.selfAid, agentName: subject.agentName, actorId: subject.actorId,

package/dist/core/auth/authorization-audit.js

@@ -25,11 +25,15 @@ export function auditCommandAuthorization(event) {
 }
 export function auditFullAccessEvent(input) {
     const configurationEvent = input.event === 'fullaccess.trigger.configured'
-        || input.event === 'fullaccess.trigger.deescalated';
+        || input.event === 'fullaccess.trigger.deescalated'
+        || input.event === 'fullaccess.session-policy.configured'
+        || input.event === 'fullaccess.session-policy.deescalated';
     const executionEvent = input.event === 'fullaccess.execution.started'
         || input.event === 'fullaccess.execution.ended'
         || input.event === 'fullaccess.agent-policy.execution.started'
         || input.event === 'fullaccess.agent-policy.execution.ended'
+        || input.event === 'fullaccess.session-policy.execution.started'
+        || input.event === 'fullaccess.session-policy.execution.ended'
         || input.event === 'fullaccess.trigger.execution.started'
         || input.event === 'fullaccess.trigger.execution.ended';
     // The scheduler triggers a run, but the executing subject is the task-bound

package/dist/core/auth/debug-context.js

@@ -127,7 +127,11 @@ export function buildDebugTaskContext(input) {
         chatType,
         selfAid: session.selfAID,
         peerId,
-        peerKey: channel && peerKeyId ? formatPeerKey(channel, peerKeyId) : undefined,
+        // 系统会话的目标关系在 metadata.peerKey（与 response-engine 的任务上下文同源），
+        // 不能从后台伪对端 peerId 推。
+        peerKey: meta.systemSession && typeof meta.peerKey === 'string' && meta.peerKey
+            ? meta.peerKey
+            : (channel && peerKeyId ? formatPeerKey(channel, peerKeyId) : undefined),
         peerName: meta.peerName,
         peerType: meta.peerType,
         threadId,

package/dist/core/auth/operation-catalog.js

@@ -323,6 +323,22 @@ const OPERATIONS = [
         description: '更新当前主会话或话题的 idle 触发设置',
         sources: ['slash', 'menu', 'ecweb', 'control'],
     },
+    {
+        id: 'session.fullaccess.current',
+        category: 'read',
+        dangerous: true,
+        defaultScopes: ['relation'],
+        description: '查看当前 EC 会话的 fullaccess 状态',
+        sources: ['slash', 'menu'],
+    },
+    {
+        id: 'session.fullaccess.update',
+        category: 'dangerous',
+        dangerous: true,
+        defaultScopes: ['relation'],
+        description: '更新当前 EC 会话的 fullaccess 状态',
+        sources: ['slash', 'menu'],
+    },
     {
         id: 'session.topic.current',
         category: 'read',
@@ -1123,7 +1139,7 @@ const OPERATIONS = [
     },
     {
         id: 'ec.aid.bind', category: 'write-agent', dangerous: true, defaultScopes: ['agent'],
-        description: 'Request a protocol Owner binding using the subject SDK client', sources: ['agent-tool', 'menu.cli'],
+        description: 'Request or decide a protocol Owner binding using the subject SDK client', sources: ['agent-tool', 'menu.cli'],
     },
     {
         id: 'ec.aid.bind.status', category: 'read', dangerous: false, defaultScopes: ['agent'],

package/dist/core/bootstrap-service.js

@@ -3,8 +3,8 @@ import { ownerResolver, OWNERSHIP_AUTHORIZATION_MAX_AGE_MS } from './ownership/o
 import fs from 'fs';
 import path from 'path';
 import { randomBytes } from 'crypto';
-import { kitsTemplatesDir, agentMdPath, resolvePaths } from '../paths.js';
-import { buildInitialAgentMd, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
+import { kitsTemplatesDir, resolvePaths } from '../paths.js';
+import { buildInitialAgentMd, resolveAgentDisplayName, verifyLocalAgentMd } from '../aun/aid/agentmd.js';
 import { logger } from '../utils/logger.js';
 import { readAgentWelcomeTemplate } from '../utils/welcome.js';
 import { loadAgent, saveAgent } from '../config-store.js';
@@ -308,7 +308,13 @@ export class BootstrapService {
                 return false;
             }
             if (starting) {
-                await this.publishAgentMdIfSupported(ctx.adapter, aid, agentName);
+                // AUN creation/binding has already published agent.md, and the fresh
+                // Owner consensus above requires it. A normal upload here re-signs the
+                // approved original while the Owner may still be confirming its hash
+                // and ETag. Sending a welcome must not mutate that binding evidence.
+                if (channelType !== 'aun') {
+                    await this.publishAgentMdIfSupported(ctx.adapter, aid, agentName);
+                }
                 this.setLifecycle(agent, aid, 'bootstrapping');
                 lifecycleStarted = true;
             }
@@ -546,18 +552,20 @@ export class BootstrapService {
     async publishAgentMdIfSupported(adapter, aid, fallbackName) {
         if (typeof adapter.uploadAgentMd !== 'function')
             return;
-        const existing = fs.existsSync(agentMdPath(aid)) ? fs.readFileSync(agentMdPath(aid), 'utf-8') : '';
-        const content = existing.trim() || buildInitialAgentMd({
+        const verification = await verifyLocalAgentMd(aid);
+        if (verification.status === 'verified') {
+            logger.info(`[Bootstrap] Preserving verified local agent.md for ${aid}; upload skipped`);
+            return;
+        }
+        if (verification.status !== 'missing') {
+            throw new Error(`Local agent.md cannot be safely republished for ${aid}: ${verification.reason ?? verification.status}`);
+        }
+        const content = buildInitialAgentMd({
             aid,
             name: fallbackName,
             type: 'agent',
         });
-        try {
-            await adapter.uploadAgentMd(content);
-            logger.info(`[Bootstrap] Published agent.md for ${aid}`);
-        }
-        catch (e) {
-            logger.warn(`[Bootstrap] Failed to publish agent.md for ${aid}: ${e instanceof Error ? e.message : String(e)}`);
-        }
+        await adapter.uploadAgentMd(content);
+        logger.info(`[Bootstrap] Published initial agent.md for ${aid}`);
     }
 }

package/dist/core/command/cli-intent-parser.js

@@ -243,11 +243,14 @@ function parseAidCommand(argv, source, defaultSelfAid) {
         try {
             const command = parseOwnershipCommand(argv.slice(1));
             const subjectAid = command.subjectAid ?? defaultSelfAid;
-            return recognized(command.action === 'bind' ? 'ec.aid.bind' : 'ec.aid.bind.status', 'agent', source, {
+            const isMutation = command.action !== 'status';
+            return recognized(isMutation ? 'ec.aid.bind' : 'ec.aid.bind.status', 'agent', source, {
                 ...(subjectAid ? { self: subjectAid } : {}),
                 ...(command.subjectAid ? { subjectAid: command.subjectAid } : {}),
                 ...(command.action === 'bind' ? { ownerAid: command.ownerAid } : {}),
-            }, argv, command.action === 'bind');
+                ...(command.action === 'accept' || command.action === 'reject'
+                    ? { decision: command.action, operationId: command.operationId } : {}),
+            }, argv, isMutation);
         }
         catch (error) {
             return raw(source, argv, error instanceof Error ? error.message : 'Invalid aid bind command');

package/dist/core/command/command-handler.js

@@ -1380,6 +1380,7 @@ export class CommandHandler {
                     ? {
                         kind: 'system.error',
                         text: result.text,
+                        ...(result.raw !== undefined ? { raw: result.raw } : {}),
                         subtype: `session.${content.trim().toLowerCase().startsWith('/new') ? 'new' : 'renew'}.error`,
                         recoverable: true,
                     }
@@ -1394,7 +1395,12 @@ export class CommandHandler {
         catch (error) {
             if (error instanceof BaseagentRunnerUnavailableError) {
                 logger.error(`[CommandHandler] baseagent mismatch blocked: channel=${channel} requested=${error.baseagent} owner=${error.evolagentName} available=${error.availableBaseagents.join(',') || '<none>'}`);
-                return { kind: 'command.error', text: this.formatBaseagentUnavailable(error), reason: error.code };
+                return {
+                    kind: 'command.error',
+                    text: this.formatBaseagentUnavailable(error),
+                    raw: error.message,
+                    reason: error.code,
+                };
             }
             throw error;
         }
@@ -2196,8 +2202,9 @@ export class CommandHandler {
             const command = parseOwnershipCommand(argv);
             const targetAid = command.subjectAid ?? grant.selfAid;
             ownerResolver.assertLocalSubject(targetAid);
-            if (command.action === 'bind' && ['readonly', 'auto'].includes(grant.permissionMode ?? '')) {
-                return { ok: false, code: 'NOT_ALLOWED', error: 'Binding requires a request or bypass task' };
+            const isMutation = command.action !== 'status';
+            if (isMutation && !['request', 'bypass'].includes(grant.permissionMode ?? '')) {
+                return { ok: false, code: 'NOT_ALLOWED', error: 'Binding changes and decisions require a request or bypass task' };
             }
             await refreshOwnershipForAuthorization(targetAid);
             let conversationId;
@@ -2215,12 +2222,20 @@ export class CommandHandler {
             if (targetAid !== grant.selfAid && !subject.isDaemonOwner) {
                 return { ok: false, code: 'SCOPE_MISMATCH', error: 'A different local subject requires the current daemon Owner' };
             }
-            if (!subject.isDaemonOwner && (command.action === 'bind' ? subject.role !== 'owner' : !isManagementRole(subject.role))) {
+            if (!subject.isDaemonOwner && (isMutation ? subject.role !== 'owner' : !isManagementRole(subject.role))) {
                 return { ok: false, code: 'OWNER_REQUIRED', error: 'Ownership binding requires the subject Owner or daemon Owner; first daemon binding uses the local CLI' };
             }
             const decision = await authorizeFreshOperation({
                 source: 'agent-tool', subject,
-                intent: { operation: command.action === 'bind' ? 'ec.aid.bind' : 'ec.aid.bind.status', scope: 'agent', source: 'agent-tool', args: { self: targetAid, ...(command.action === 'bind' ? { ownerAid: command.ownerAid } : {}) } },
+                intent: {
+                    operation: isMutation ? 'ec.aid.bind' : 'ec.aid.bind.status', scope: 'agent', source: 'agent-tool',
+                    args: {
+                        self: targetAid,
+                        ...(command.action === 'bind' ? { ownerAid: command.ownerAid } : {}),
+                        ...(command.action === 'accept' || command.action === 'reject'
+                            ? { decision: command.action, operationId: command.operationId } : {}),
+                    },
+                },
                 auditMetadata: { taskId: grant.taskId, messageId: grant.messageId },
             });
             if (!decision.allow)

package/dist/core/command/menu-catalog.js

@@ -6,6 +6,7 @@ import { authorizationDenialData, formatAuthorizationDenial } from '../auth/auth
 import { ConfigTarget, read as readConfig } from '../../config/config-manager.js';
 import { readRolesConfig } from '../../config/roles.js';
 import { normalizeMenuError } from './menu-protocol.js';
+import { isAgentFullAccessOwner } from '../role/runtime-policy.js';
 import { isValidAid } from '../../aun/aid/validation.js';
 import { DEFAULT_SESSION_LOOP_SECONDS, MAX_SESSION_LOOP_SECONDS, MIN_SESSION_LOOP_SECONDS } from '../session/session-idle-monitor.js';
 const DEFAULT_DIRECTORY = { getGroup: groupInfo, getMembers: groupMembers };
@@ -79,6 +80,19 @@ const ENTRIES = [
         valueSchema: { type: 'boolean' },
         control: 'toggle-with-number',
     },
+    {
+        id: 'session.fullaccess',
+        type: 'setting',
+        contexts: ['private_relation'],
+        name: 'session',
+        label: '当前 EC 会话 fullaccess',
+        section: 'relation_behavior',
+        order: 6,
+        query: { cmd: '/session', args: { view: 'fullaccess' }, operation: 'session.fullaccess.current', scope: 'relation' },
+        update: { cmd: '/session', args: { resource: 'fullaccess' }, operation: 'session.fullaccess.update', scope: 'relation' },
+        valueSchema: { type: 'boolean' },
+        control: 'toggle',
+    },
     relation('model.relation', 'model', '模型', 10, '/model', 'model.current', { options: { cmd: '/model', operation: 'model.list', scope: 'relation', mode: 'dynamic' }, update: { cmd: '/model', operation: 'model.use', scope: 'relation' }, control: 'select' }),
     relation('effort.relation', 'effort', '推理强度', 20, '/effort', 'model.effort.current', { options: { cmd: '/effort', operation: 'model.effort.current', scope: 'relation', mode: 'dynamic', dependsOn: ['model.relation'] }, update: { cmd: '/effort', operation: 'model.effort', scope: 'relation' }, control: 'select' }),
     relation('chatmode.relation', 'chatmode', '对话模式', 30, '/chatmode', 'chatmode.current', { options: { cmd: '/chatmode', operation: 'chatmode.current', scope: 'relation', mode: 'static', items: [{ value: 'interactive', label: '交互模式' }, { value: 'proactive', label: '主动模式' }] }, update: { cmd: '/chatmode', operation: 'chatmode.update', scope: 'relation' }, control: 'select' }),
@@ -290,8 +304,8 @@ export function bindMenuExecutionContextArgs(args, context) {
     if (!args && context.kind !== 'group_relation')
         return args;
     const { context: _context, ...bound } = args ?? {};
-    const isSessionLoop = bound.resource === 'loop' || bound.view === 'loop';
-    if (isSessionLoop)
+    const isSessionScoped = ['loop', 'fullaccess'].includes(String(bound.resource ?? bound.view ?? ''));
+    if (isSessionScoped)
         return bound;
     if (context.kind === 'private_relation' || context.kind === 'group_relation') {
         if (bound.scope !== 'role')
@@ -368,6 +382,17 @@ async function operationView(binding, context, options = {}) {
             reason: { code: 'NOT_ALLOWED', message: 'Pairing code issuance requires encrypted DaemonOwner authentication' },
         };
     }
+    if (binding.operation.startsWith('session.fullaccess.')) {
+        const allowed = context.kind === 'private_relation'
+            && context.subject.chatType === 'private'
+            && context.subject.isDaemonOwner === true
+            && isAgentFullAccessOwner(context.subject.selfAid ?? '', context.subject.principalId);
+        return {
+            supported: true,
+            allowed,
+            ...(allowed ? {} : { reason: { code: 'FORBIDDEN', message: 'session fullaccess requires the Agent Owner and daemon Owner identity' } }),
+        };
+    }
     if (binding.operation === 'group.rulespolicy.update' && context.subject.role !== 'owner') {
         return { supported: true, allowed: false, reason: { code: 'PERMISSION_DENIED', message: 'rulesPolicy can only be changed by an Agent owner' } };
     }
@@ -377,7 +402,7 @@ async function operationView(binding, context, options = {}) {
 function wireBinding(binding, context) {
     if (!binding || binding.supported === false)
         return undefined;
-    if (binding.operation.startsWith('session.loop.'))
+    if (binding.operation.startsWith('session.loop.') || binding.operation.startsWith('session.fullaccess.'))
         return {
             args: context.kind === 'group_relation'
                 ? { ...(binding.args ?? {}), context: { kind: context.kind, ...(context.groupId ? { groupId: context.groupId } : {}) } }
@@ -406,10 +431,10 @@ export async function getMenuCatalog(input) {
                 operations[key] = view;
         }
         entries.push({ id: entry.id, type: entry.type, name: entry.name, label: entry.label, section: entry.section, order: entry.order, target: { scope: context.kind === 'agent' ? 'agent' : context.kind === 'process' ? 'process' : 'relation', ...(context.self ? { self: context.self } : {}), ...(context.peerKey ? { peerKey: context.peerKey } : {}) }, valueSchema: entry.valueSchema ?? { type: 'object' }, operations, wire: { name: entry.name, operations: { ...(wireBinding(entry.query, context) ? { query: wireBinding(entry.query, context) } : {}), ...(wireBinding(entry.options, context) ? { options: wireBinding(entry.options, context) } : {}), ...(wireBinding(entry.update, context) ? { update: wireBinding(entry.update, context) } : {}), ...(wireBinding(entry.action, context) ? { action: wireBinding(entry.action, context) } : {}) } }, ui: { control: entry.control ?? 'action' } });
-        if (entry.id === 'session.loop') {
+        if (entry.id === 'session.loop' || entry.id === 'session.fullaccess') {
             const loopEntry = entries[entries.length - 1];
-            let target = { level: 'relation-main' };
-            if (input.resolveLoopTarget) {
+            let target = { level: 'relation-main', scope: 'agent' };
+            if ((entry.id === 'session.loop' || entry.id === 'session.fullaccess') && input.resolveLoopTarget) {
                 try {
                     target = await input.resolveLoopTarget(context);
                 }
@@ -420,12 +445,23 @@ export async function getMenuCatalog(input) {
                     }
                 }
             }
-            loopEntry.target = target;
-            loopEntry.label = target.level === 'topic-session' ? '当前话题闲置触发' : '关系主会话闲置触发';
-            loopEntry.ui = {
-                control: entry.control,
-                idleSeconds: { type: 'integer', minimum: MIN_SESSION_LOOP_SECONDS, maximum: MAX_SESSION_LOOP_SECONDS, default: DEFAULT_SESSION_LOOP_SECONDS, unit: 'seconds' },
-            };
+            if (entry.id === 'session.loop') {
+                loopEntry.target = target;
+                loopEntry.label = target.level === 'topic-session' ? '当前话题闲置触发' : '关系主会话闲置触发';
+                loopEntry.ui = {
+                    control: entry.control,
+                    idleSeconds: { type: 'integer', minimum: MIN_SESSION_LOOP_SECONDS, maximum: MAX_SESSION_LOOP_SECONDS, default: DEFAULT_SESSION_LOOP_SECONDS, unit: 'seconds' },
+                };
+            }
+            else {
+                loopEntry.target = {
+                    level: target.level,
+                    sessionId: target.sessionId,
+                    scope: target.level === 'topic-session' ? 'session' : 'agent',
+                };
+                loopEntry.label = '当前 EC 会话 fullaccess';
+                loopEntry.ui = { control: entry.control };
+            }
         }
     }
     const policyRevision = hash({ role: context.subject.role, self: context.subject.selfAid, peerKey: context.subject.peerKey, groupMembershipRole: context.groupMembershipRole, baselineRole: context.baselineRole, paircodeAllowed, roles: readRolesConfig(context.subject.selfAid) });