evolcore 0.0.38 → 0.0.40

package/dist/core/command/menu-handler.js

@@ -42,7 +42,7 @@ import { isUnsupportedBaseagentConfigField } from '../../config/config-field-pol
 import { splitConfigBatchGetArgv } from '../../cli/cli-argv.js';
 import { chatmodeFieldForPeer, isPrivateChatmodeRoleLocked, resolveChatModeForField } from '../message/peer-mode.js';
 import { PUBLIC_PERMISSION_MODES } from '../permission/mode.js';
-import { resolveRuntimePermissionMode, resolveRuntimeStringField, validateRuntimeStringFieldOverride, } from '../role/runtime-policy.js';
+import { isAgentFullAccessOwner, resolveRuntimePermissionMode, resolveRuntimeStringField, sessionFullAccessStatus, validateRuntimeStringFieldOverride, } from '../role/runtime-policy.js';
 import { isManagementRole } from '../../config/builtin-roles.js';
 import { SYSTEM_CONTROL_CHANNEL } from '../system-channels.js';
 import { logger } from '../../utils/logger.js';
@@ -2149,6 +2149,21 @@ export async function execMenuQuery(cmd, channel, channelId, userId, args, expli
             return menuResultFailure(error);
         }
     }
+    if (cmdBase === '/session' && args?.view === 'fullaccess') {
+        if (Object.keys(args).some(key => key !== 'view' && key !== 'context')) {
+            return { error: 'session.fullaccess query only accepts args.view', code: 'INVALID_ARGUMENT' };
+        }
+        if (!session || !subject.selfAid)
+            return { error: '当前没有可绑定的 EC 会话', code: 'NO_ACTIVE_SESSION' };
+        if (session.chatType !== 'private')
+            return { error: '/fa 仅支持私聊中的当前 EC 会话', code: 'NOT_SUPPORTED' };
+        const principalId = subject.principalId;
+        if (!principalId || !subject.isDaemonOwner || !isAgentFullAccessOwner(subject.selfAid, principalId)) {
+            return { error: '/fa 需要同一身份同时具备 Agent Owner 和 daemon Owner 权限', code: 'FORBIDDEN' };
+        }
+        const status = sessionFullAccessStatus(session, principalId);
+        return { data: { ...status, sessionId: session.id, scope: isTopicSession(session) ? 'session' : 'agent' } };
+    }
     const storageRequest = { type: 'menu.query', cmd, args };
     if (isAgentStorageMenuRequest(storageRequest)) {
         try {
@@ -2948,6 +2963,7 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
     if (!cmdBase)
         return { error: '缺少命令', code: 'MISSING_CMD' };
     const isLoopUpdate = cmdBase === '/session' && args?.resource === 'loop';
+    const isFullAccessUpdate = cmdBase === '/session' && args?.resource === 'fullaccess';
     if (isLoopUpdate) {
         if (typeof value !== 'boolean' || Object.keys(args ?? {}).some(key => key !== 'resource' && key !== 'idleSeconds' && key !== 'context')) {
             return { error: 'session.loop requires a boolean value and only accepts resource / idleSeconds', code: 'INVALID_ARGUMENT' };
@@ -2959,9 +2975,13 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
             return { error: `idleSeconds 必须是 ${MIN_SESSION_LOOP_SECONDS}-${MAX_SESSION_LOOP_SECONDS} 的整数`, code: 'INVALID_ARGUMENT' };
         }
     }
-    else if (typeof value !== 'string') {
+    else if (!isFullAccessUpdate && typeof value !== 'string') {
         return { error: 'value 必须是字符串', code: 'INVALID_ARGUMENT' };
     }
+    if (isFullAccessUpdate && (typeof value !== 'boolean'
+        || Object.keys(args ?? {}).some(key => key !== 'resource' && key !== 'context'))) {
+        return { error: 'session.fullaccess requires a boolean value and only accepts resource', code: 'INVALID_ARGUMENT' };
+    }
     if (cmdBase === '/perm') {
         return { error: 'permissionMode 只能通过角色策略编辑器修改', code: 'ROLE_POLICY_MANAGED' };
     }
@@ -3020,6 +3040,53 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
             return menuResultFailure(error);
         }
     }
+    if (isFullAccessUpdate) {
+        if (!session || !subject.selfAid)
+            return { error: '当前没有可绑定的 EC 会话', code: 'NO_ACTIVE_SESSION' };
+        const route = { channel, channelId, selfAid: subject.selfAid, threadId: transportReplyContext?.threadId };
+        let target;
+        try {
+            target = await resolveCurrentSessionLoopTarget(this.sessionManager, route);
+            if (target.session.id !== session.id)
+                return { error: '当前会话已发生变化，请重新查询', code: 'CONFLICT' };
+            target = await refreshSessionLoopTarget(this.sessionManager, route, target);
+            session = target.session;
+        }
+        catch (error) {
+            return menuResultFailure(error);
+        }
+        const principalId = subject.principalId;
+        if (session.chatType !== 'private' || !principalId || !subject.isDaemonOwner
+            || !isAgentFullAccessOwner(subject.selfAid, principalId)) {
+            return { error: '/fa 需要私聊中同一身份同时具备 Agent Owner 和 daemon Owner 权限', code: 'FORBIDDEN' };
+        }
+        try {
+            if (isTopicSession(session)) {
+                this.sessionManager.updateSessionFullAccess(session.id, { enabled: value, authorizedBy: principalId });
+            }
+            else {
+                const config = cfgRead(ConfigTarget.Agent, { self: subject.selfAid }, { cache: false });
+                if (!config)
+                    return { error: '找不到当前 Agent 配置', code: 'NOT_FOUND' };
+                config.fullaccess = { enabled: value };
+                cfgWrite(ConfigTarget.Agent, config, { self: subject.selfAid });
+            }
+            auditFullAccessEvent({
+                event: value ? 'fullaccess.session-policy.configured' : 'fullaccess.session-policy.deescalated',
+                source: 'session-policy',
+                actorId: principalId,
+                processRole: 'daemon-owner',
+                agentAid: subject.selfAid,
+                sessionId: session.id,
+                authorizedBy: principalId,
+                reason: isTopicSession(session) ? 'topic session fullaccess updated via Menu' : 'Agent main-session fullaccess updated via Menu',
+            });
+            return { data: { enabled: value, sessionId: session.id, scope: isTopicSession(session) ? 'session' : 'agent' } };
+        }
+        catch (error) {
+            return menuResultFailure(error);
+        }
+    }
     const arg = value.trim();
     if (!arg)
         return { error: '缺少 value 参数', code: 'MISSING_VALUE' };
@@ -4325,6 +4392,7 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
                 sessionId: sessionKey,
                 reason: 'stop',
                 agentName: this.agentRegistry?.resolveByChannel(channel)?.name ?? '<unknown>',
+                agentAid: session.selfAID,
             });
             await this.processor.interruptSession(sessionKey, 'stop');
             return { data: { action: 'stop', success: true } };
@@ -4691,8 +4759,8 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             }
             catch (error) {
                 const failure = ownershipFailure(error);
-                const code = ['INVALID_ARGUMENT', 'INVALID_AID', 'INVALID_OWNER'].includes(failure.code) ? 'INVALID_ARGUMENT'
-                    : ['SUBJECT_REQUIRED', 'SUBJECT_UNAVAILABLE'].includes(failure.code) ? 'NOT_FOUND'
+                const code = ['INVALID_ARGUMENT', 'INVALID_AID', 'INVALID_OWNER', 'INVALID_OPERATION'].includes(failure.code) ? 'INVALID_ARGUMENT'
+                    : ['SUBJECT_REQUIRED', 'SUBJECT_UNAVAILABLE', 'REQUEST_NOT_FOUND', 'not_found'].includes(failure.code) ? 'NOT_FOUND'
                         : ['OWNER_ALREADY_BOUND', 'BIND_CONFLICT', 'BIND_UNCERTAIN', 'CONSENSUS_REQUIRED', 'CLIENT_REPLACED', 'conflict', 'owner_locked'].includes(failure.code)
                             ? 'CONFLICT' : 'INTERNAL_ERROR';
                 rawExecution = { error: failure.error, code, data: failure };
@@ -5156,7 +5224,7 @@ async function execMenuForSystemControl(payload, context) {
 }
 /** ECWeb 专用入口：只信任 IPC 信封中的服务端认证上下文，不信任 Menu payload 自报身份。 */
 export async function execMenuForEcweb(payload, trusted) {
-    await refreshOwnershipForAuthorization(undefined, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS });
+    await refreshOwnershipForAuthorization(undefined, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS, allowTransient: true });
     const id = payload?.id ?? '';
     const name = payload?.name;
     const validationError = validateMenuRequest(payload ?? {});
@@ -5200,7 +5268,7 @@ export async function execMenuForEcweb(payload, trusted) {
  * process authorization path. The authenticated envelope peerId remains the
  * requester; token mode maps to a configured owner as its management actor. */
 export async function execMenuForControl(payload, peerId, auth = {}) {
-    await refreshOwnershipForAuthorization(undefined, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS });
+    await refreshOwnershipForAuthorization(undefined, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS, allowTransient: true });
     const id = payload?.id ?? '';
     const name = payload?.name;
     const validationError = validateMenuRequest(payload ?? {});

package/dist/core/command/menu-protocol.js

@@ -367,14 +367,33 @@ export function validateMenuRequest(request) {
             return { code: 'INVALID_ARGUMENT', message: 'idleSeconds is not allowed when session.loop is disabled' };
         }
     }
-    else if (type === 'menu.update' && (typeof request.value !== 'string' || request.value.length === 0)) {
+    else if (type === 'menu.update'
+        && !((request.name === 'session' || request.cmd === '/session')
+            && request.args?.resource === 'fullaccess')
+        && (typeof request.value !== 'string' || request.value.length === 0)) {
         return { code: 'INVALID_ARGUMENT', message: 'Menu request value is required' };
     }
+    const isSessionFullAccessUpdate = type === 'menu.update'
+        && (request.name === 'session' || request.cmd === '/session')
+        && request.args?.resource === 'fullaccess';
+    if (isSessionFullAccessUpdate) {
+        if (typeof request.value !== 'boolean')
+            return { code: 'INVALID_ARGUMENT', message: 'session.fullaccess value must be a boolean' };
+        const args = request.args;
+        const unknown = Object.keys(args ?? {}).find(key => !['resource', 'context'].includes(key));
+        if (unknown)
+            return { code: 'INVALID_ARGUMENT', message: 'session.fullaccess update does not accept args.' + unknown };
+    }
     if (type === 'menu.query' && (request.name === 'session' || request.cmd === '/session')
         && request.args?.view === 'loop'
         && Object.keys(request.args).some(key => key !== 'view' && key !== 'context')) {
         return { code: 'INVALID_ARGUMENT', message: 'session.loop query only accepts args.view' };
     }
+    if (type === 'menu.query' && (request.name === 'session' || request.cmd === '/session')
+        && request.args?.view === 'fullaccess'
+        && Object.keys(request.args).some(key => key !== 'view' && key !== 'context')) {
+        return { code: 'INVALID_ARGUMENT', message: 'session.fullaccess query only accepts args.view' };
+    }
     if (type === 'menu.action' && (typeof request.action !== 'string' || request.action.trim().length === 0)) {
         return { code: 'INVALID_ARGUMENT', message: 'Menu request action is required' };
     }

package/dist/core/command/slash-gate.js

@@ -43,7 +43,7 @@ export function probeSessionActivity(evidence, probes) {
     return evaluateSessionActivity(collected);
 }
 // 支持的命令列表
-const commands = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/stop', '/pause', '/compact', '/renew', '/repair', '/fork', '/del', '/perm', '/file', '/check', '/rewind', '/activity', '/observable', '/chatmode', '/mention', '/loop', '/ask', '/resume', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair', '/memory', '/skill', '/thread'];
+const commands = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/stop', '/pause', '/compact', '/renew', '/repair', '/fork', '/del', '/perm', '/file', '/check', '/rewind', '/activity', '/observable', '/chatmode', '/mention', '/loop', '/fa', '/fullaccess', '/ask', '/resume', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair', '/memory', '/skill', '/thread'];
 const deprecatedCommands = ['/clear'];
 commands.push('/diag');
 const exactBoundaryCommands = new Set(['/pause', '/resume', '/stop', '/pair', '/diag']);
@@ -55,7 +55,14 @@ export function parseFullAccessCommand(content) {
     return {
         matched: true,
         command: match[1],
-        prompt: match[2].trim(),
+        action: match[2].trim() === ''
+            ? 'status'
+            : match[2].trim() === 'on'
+                ? 'on'
+                : match[2].trim() === 'off'
+                    ? 'off'
+                    : 'invalid',
+        raw: match[2].trim(),
     };
 }
 // 命令别名映射
@@ -78,6 +85,13 @@ export function guardGroupSlashCommand(content, chatType) {
         return undefined;
     const [inputCommand, ...args] = content.trim().split(/\s+/);
     const command = aliases[inputCommand] ?? inputCommand;
+    if (command === '/fa' || command === '/fullaccess') {
+        return {
+            kind: 'command.error',
+            text: '❌ 群聊中不支持 /fa，请在私聊会话操作',
+            reason: 'GROUP_COMMAND_UNSUPPORTED',
+        };
+    }
     if (GROUP_READ_ONLY_COMMANDS.has(command)) {
         if (!args.length || (command === '/model' && args.length === 1 && ['current', 'list', 'check'].includes(args[0]))) {
             return undefined;
@@ -97,7 +111,7 @@ export function guardGroupSlashCommand(content, chatType) {
     };
 }
 // 命令快速路径前缀（所有命令都不进入消息队列）
-const quickCommandPrefixes = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/repair', '/fork', '/stop', '/pause', '/clear', '/compact', '/renew', '/del', '/perm', '/file', '/check', '/s ', '/name', '/rewind', '/rw', '/rw ', '/activity', '/observable', '/chatmode', '/mention', '/loop', '/ask', '/resume', '/base ', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair', '/memory', '/skill', '/thread'];
+const quickCommandPrefixes = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/repair', '/fork', '/stop', '/pause', '/clear', '/compact', '/renew', '/del', '/perm', '/file', '/check', '/s ', '/name', '/rewind', '/rw', '/rw ', '/activity', '/observable', '/chatmode', '/mention', '/loop', '/fa', '/fullaccess', '/ask', '/resume', '/base ', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair', '/memory', '/skill', '/thread'];
 quickCommandPrefixes.push('/diag');
 /**
  * 计算两个字符串的 Levenshtein 距离（编辑距离）

package/dist/core/command/slash-handler.js

@@ -10,8 +10,9 @@ import crypto from 'crypto';
 import path from 'path';
 import fs from 'fs';
 import { ensureFreshPackageVersionInfo, refreshManagedPackageVersions } from '../../utils/package-version-info.js';
+import { loadDaemonConfig } from '../../config-store.js';
 import { remoteAccessService } from '../auth/remote-access-store.js';
-import { read as cfgRead, resolveEffective, routeFieldPath, write as cfgWrite, } from '../../config/config-manager.js';
+import { read as cfgRead, resolveEffective, routeFieldPath, write as cfgWrite, ConfigTarget, } from '../../config/config-manager.js';
 import { execAgentAction } from './agent-control.js';
 import { handleMemorySlash, memoryHelpEntries } from './memory-slash.js';
 import { handleSkillSlash, skillHelpEntries } from './skill-slash.js';
@@ -21,11 +22,12 @@ import { getDaemonOwners, ownerResolver, refreshOwnershipForAuthorization, OWNER
 import { authorizationNextStep, formatAuthorizationDenial } from '../auth/authorization-denial.js';
 import { resolvePermissionMode, writeScope } from '../model/config-scope.js';
 import { formatPeerKey } from '../relation/peer-identity.js';
+import { auditFullAccessEvent } from '../auth/authorization-audit.js';
 import { isMainSession, isTopicSession, isTopicThreadId, sessionTopicThreadId } from '../thread/topic-id.js';
 import { modelMatches, getCatalog, assertCatalogSelectable, resolveCatalogModel, CONFIGURABLE_EFFORTS, configurableEfforts } from '../model/model-catalog.js';
 import { formatModelCheck, runModelCheck } from '../model/model-diagnostics.js';
 import { constrainResolvedModelForRole, filterModelsForRole, validateModelSelectionForRole } from '../model/model-permission.js';
-import { resolveRuntimeStringField } from '../role/runtime-policy.js';
+import { isAgentFullAccessOwner, resolveRuntimeStringField, sessionFullAccessStatus, } from '../role/runtime-policy.js';
 import { displaySessionTitle } from '../session/session-title.js';
 import { chatmodeFieldForPeer, isPrivateChatmodeRoleLocked, resolveChatModeForField } from '../message/peer-mode.js';
 import { normalizePermissionMode as normalizePermissionModeContract, PUBLIC_PERMISSION_MODES } from '../permission/mode.js';
@@ -33,7 +35,7 @@ import { isManagementRole } from '../../config/builtin-roles.js';
 import { isSystemControlChannel } from '../system-channels.js';
 import { launchMonitorAndConfirm, resolveMonitorLaunch, cleanupMonitorStage, isProcessRunning } from '../../utils/cross-platform.js';
 import { scanInstances } from '../../utils/instance-registry.js';
-import { guardIdleCommand, guardGroupSlashCommand, guardKnownCommand, guardRoleCommand, guardThreadCommand, isRecognizedSlashCommand, normalizeSlashContent, probeSessionActivity, } from './slash-gate.js';
+import { guardIdleCommand, guardGroupSlashCommand, guardKnownCommand, guardRoleCommand, guardThreadCommand, isRecognizedSlashCommand, normalizeSlashContent, parseFullAccessCommand, probeSessionActivity, } from './slash-gate.js';
 import { MAX_AUN_ATTACHMENT_SIZE } from '../../aun/msg/upload.js';
 import { DEFAULT_SESSION_LOOP_SECONDS, MAX_SESSION_LOOP_SECONDS, MIN_SESSION_LOOP_SECONDS, refreshSessionLoopTarget, resolveCurrentSessionLoopTarget, sessionLoopPayload, validateIdleSeconds, writeSessionLoopConfig, } from '../session/session-idle-monitor.js';
 const allEfforts = CONFIGURABLE_EFFORTS;
@@ -400,6 +402,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
     const narrowedChatType = chatType === 'group' ? 'group' : chatType === 'private' ? 'private' : undefined;
     await refreshOwnershipForAuthorization(selfAID ?? this.agentRegistry?.resolveByChannel(channel)?.aid ?? this.resolveSelfAID(channel), {
         maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS,
+        allowTransient: true,
     });
     const identityConversationId = narrowedChatType === 'group' ? channelId : userId;
     const resolvedIdentity = overrideIdentity ?? this.sessionManager.resolveIdentity(channel, userId, narrowedChatType, identityConversationId);
@@ -523,6 +526,10 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         || normalizedContent === '/reload'
         || normalizedContent.startsWith('/reload ')
         || normalizedContent === '/pair'
+        || normalizedContent === '/fa'
+        || normalizedContent === '/fullaccess'
+        || normalizedContent.startsWith('/fa ')
+        || normalizedContent.startsWith('/fullaccess ')
         || /^\/diag(?:\s|$)/.test(normalizedContent);
     const roleGuard = guardRoleCommand(normalizedContent, activeChatType, isAdmin || (isDaemonOwner && isProcessLevelSlash));
     if (roleGuard)
@@ -622,6 +629,71 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             return { kind: 'command.error', text: `❌ ${error instanceof Error ? error.message : String(error)}` };
         }
     }
+    const fullAccessControl = parseFullAccessCommand(normalizedContent);
+    if (fullAccessControl.matched) {
+        if (activeChatType === 'group' || source === 'card-trigger') {
+            return { kind: 'command.error', text: '❌ /fa 仅支持私聊中的当前 EC 会话' };
+        }
+        const commandSession = await getExistingSessionForCommand();
+        const agentAid = authSubject.selfAid ?? selfAID;
+        const principalId = authSubject.principalId;
+        if (!commandSession || !agentAid) {
+            return { kind: 'command.error', text: '❌ 当前没有可绑定的 EC 会话' };
+        }
+        if (this.messageQueue.isProcessing(commandSession.id) || this.messageQueue.getQueueLength(commandSession.id) > 0) {
+            return { kind: 'command.error', text: '❌ 当前会话有任务执行中，结束后再修改 fullaccess' };
+        }
+        if (!principalId || !authSubject.isDaemonOwner || !isAgentFullAccessOwner(agentAid, principalId)) {
+            return { kind: 'command.error', text: '❌ /fa 需要同一身份同时具备 Agent Owner 和 daemon Owner 权限' };
+        }
+        if (fullAccessControl.action === 'status') {
+            const status = sessionFullAccessStatus(commandSession, principalId);
+            const scope = isTopicSession(commandSession) ? 'session' : 'agent';
+            return {
+                kind: 'command.result',
+                text: '当前 fullaccess（' + scope + '，session=' + commandSession.id + '）：'
+                    + (status.effective ? '开启' : '关闭'),
+            };
+        }
+        const enabled = fullAccessControl.action === 'on';
+        try {
+            if (isTopicSession(commandSession)) {
+                const latest = await this.sessionManager.getThreadSession(channel, channelId, threadId);
+                if (!latest || latest.id !== commandSession.id || !isTopicSession(latest)) {
+                    return { kind: 'command.error', text: '❌ 当前话题已发生变化，请重新执行 /fa' };
+                }
+                this.sessionManager.updateSessionFullAccess(latest.id, { enabled, authorizedBy: principalId });
+            }
+            else {
+                const latest = await this.sessionManager.getActiveSession(channel, channelId);
+                if (!latest || latest.id !== commandSession.id || !isMainSession(latest)) {
+                    return { kind: 'command.error', text: '❌ 当前主会话已发生变化，请重新执行 /fa' };
+                }
+                const config = cfgRead(ConfigTarget.Agent, { self: agentAid }, { cache: false });
+                if (!config)
+                    return { kind: 'command.error', text: '❌ 找不到当前 Agent 配置' };
+                config.fullaccess = { enabled };
+                cfgWrite(ConfigTarget.Agent, config, { self: agentAid });
+            }
+            auditFullAccessEvent({
+                event: enabled ? 'fullaccess.session-policy.configured' : 'fullaccess.session-policy.deescalated',
+                source: 'session-policy',
+                actorId: principalId,
+                processRole: 'daemon-owner',
+                agentAid,
+                sessionId: commandSession.id,
+                authorizedBy: principalId,
+                reason: isTopicSession(commandSession) ? 'topic session fullaccess updated' : 'Agent main-session fullaccess updated',
+            });
+            return {
+                kind: 'command.result',
+                text: '✅ 当前 EC 会话 fullaccess 已' + (enabled ? '开启' : '关闭'),
+            };
+        }
+        catch (error) {
+            return { kind: 'command.error', text: '❌ ' + (error instanceof Error ? error.message : String(error)) };
+        }
+    }
     const interruptPausedSessionBeforeReplacement = async (commandSession) => {
         if (commandSession && (this.processor?.isPauseRequested?.(commandSession.id) ?? false)) {
             this.eventBus.publish({
@@ -629,6 +701,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 sessionId: commandSession.id,
                 reason: 'stop',
                 agentName: this.agentRegistry?.resolveByChannel(channel)?.name ?? '<unknown>',
+                agentAid: commandSession.selfAID,
             });
             await this.processor.interruptSession(commandSession.id, 'stop');
             this.processor?.clearPauseSession?.(commandSession.id);
@@ -775,7 +848,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
         const appendProcessCommands = (lines) => {
             if (!isDaemonOwner)
                 return;
-            lines.push('', '🛠️ 进程级运维：', '  /restart - 重启服务', '  /upgrade - 检查版本更新', '  /reload [aid] - 热重载 Agent 配置', '  /fa <提示词> - 单次使用宿主级 fullaccess 执行（别名: /fullaccess）', '  /pair - 获取远程控制配对码', '  /diag <问题描述> - 邀请或追加远程诊断；/diag stop 撤销授权');
+            lines.push('', '🛠️ 进程级运维：', '  /restart - 重启服务', '  /upgrade - 检查版本更新', '  /reload [aid] - 热重载 Agent 配置', '  /fa [on|off] - 查看或切换当前 EC 会话 fullaccess', '  /pair - 获取远程控制配对码', '  /diag <问题描述> - 邀请或追加远程诊断；/diag stop 撤销授权');
         };
         if (!isAdmin && activeChatType === 'group') {
             const lines = [
@@ -907,7 +980,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             ...(isDaemonOwner ? [
                 '  /restart - 重启服务',
                 '  /reload [aid] - 热重载 Agent 配置',
-                '  /fa <提示词> - 单次使用宿主级 fullaccess 执行（别名: /fullaccess）',
+                '  /fa [on|off] - 查看或切换当前 EC 会话 fullaccess',
                 '  /pair - 获取远程控制配对码',
             ] : []),
             ...(!isDaemonOwner && isAdmin ? [
@@ -1067,7 +1140,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             cmds.push({ command: '/observable', args: '[true|false]', description: '查看或切换观察者模式', category: '运维', roles: ['owner'] });
         }
         if (isDaemonOwner) {
-            cmds.push({ command: '/fa', aliases: ['/fullaccess'], args: '<提示词>', description: '仅让当前提示词对应的 run 使用宿主级 fullaccess', category: '权限管理', roles: ['daemon-owner'] });
+            cmds.push({ command: '/fa', aliases: ['/fullaccess'], args: '[on|off]', description: '查看或切换当前 EC 会话 fullaccess', category: '权限管理', roles: ['daemon-owner'] });
             cmds.push({ command: '/restart', description: '重启服务', category: '运维', roles: ['daemon-owner'] });
             cmds.push({ command: '/upgrade', description: '检查版本更新', category: '运维', roles: ['daemon-owner'] });
             cmds.push({ command: '/reload', args: '[aid]', description: '热重载 Agent 配置', category: '运维', roles: ['daemon-owner'] });
@@ -2475,6 +2548,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
             sessionId: sessionKey,
             reason: 'stop',
             agentName: this.agentRegistry?.resolveByChannel(channel)?.name ?? '<unknown>',
+            agentAid: stopSession.selfAID,
         });
         await this.processor.interruptSession(sessionKey, 'stop');
         return { kind: 'command.result', text: '✓ 已发送中断信号，任务将尽快停止' };
@@ -3214,7 +3288,16 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                 logger.warn(`[System] Refusing restart without a valid explicit delivery route: channel=${channel} channelId=${channelId}`);
                 return false;
             }
+            let autoUpgrade = true;
             if (!suppressRealRestart) {
+                try {
+                    autoUpgrade = loadDaemonConfig().upgrade?.autoOnStart !== false;
+                }
+                catch {
+                    autoUpgrade = false;
+                }
+            }
+            if (!suppressRealRestart && autoUpgrade) {
                 await ensureFreshPackageVersionInfo(undefined, {
                     source: 'slash-restart',
                     log: message => logger.info(`[System] ${message}`),
@@ -3251,7 +3334,7 @@ export async function handleSlashCommand(content, channel, channelId, sendMessag
                         cleanupMonitorStage(monitorEntry.stageDir);
                     return { code: 'RESTART_PENDING_CONFIRMATION', reason: '已有重启请求正在处理', requestId: restartInfo.requestId };
                 }
-                const confirmation = await launchMonitorAndConfirm([...monitorEntry.args, 'restart-monitor'], { EVOLCORE_HOME: resolvePaths().root, ...monitorEntry.env, [RESTART_REQUEST_ID_ENV]: restartInfo.requestId }, pid => scanInstances().restartMonitors.some(m => m.alive && m.record.pid === pid
+                const confirmation = await launchMonitorAndConfirm([...monitorEntry.args, 'restart-monitor', autoUpgrade ? '--apply-package-upgrades' : '--skip-package-upgrades'], { EVOLCORE_HOME: resolvePaths().root, ...monitorEntry.env, [RESTART_REQUEST_ID_ENV]: restartInfo.requestId }, pid => scanInstances().restartMonitors.some(m => m.alive && m.record.pid === pid
                     && m.record.requestId === restartInfo.requestId && m.record.phase === 'accepted'), pid => scanInstances().restartMonitors.some(m => m.alive && m.record.pid !== pid
                     && m.record.requestId === restartInfo.requestId && m.record.phase === 'accepted'), {
                     requestId: restartInfo.requestId,

package/dist/core/event-catalog.js

@@ -318,6 +318,7 @@ const CATALOG = [
             { path: 'durationMs', type: 'number', optional: true },
             { path: 'terminalReason', type: 'string', optional: true },
             { path: 'agentName', type: 'string', optional: true },
+            { path: 'agentAid', type: 'string', optional: true },
             { path: 'numTurns', type: 'number', optional: true },
             { path: 'encrypted', type: 'boolean', optional: true },
             { path: 'timestamp', type: 'number', optional: true },
@@ -354,6 +355,7 @@ const CATALOG = [
             { path: 'generation', type: 'number', optional: true },
             { path: 'reason', type: 'string', optional: true },
             { path: 'agentName', type: 'string', optional: true },
+            { path: 'agentAid', type: 'string', optional: true },
             { path: 'encrypted', type: 'boolean', optional: true },
         ],
     },

package/dist/core/interaction-router.js

@@ -290,7 +290,8 @@ export function renderActionAsText(req) {
     lines.push('', '回复:');
     for (const btn of action.buttons) {
         const arg = fb.buttonArgMap?.[btn.key] ?? btn.key;
-        lines.push(`  /${fb.command} ${arg}    ← ${btn.label}`);
+        const label = action.recommendedOption === btn.key ? `💡 ${btn.label}` : btn.label;
+        lines.push(`  /${fb.command} ${arg}    ← ${label}`);
     }
     if (fb.acceptFreeText && fb.freeTextHint) {
         lines.push(`  ${fb.freeTextHint}`);

package/dist/core/ipc-registration.js

@@ -11,7 +11,6 @@ import { agentDir } from '../paths.js';
 import { parsePeerKey } from './relation/peer-identity.js';
 import { resolvePeerRoleDetail } from '../config/peer-role-resolver.js';
 import { buildDebugTaskContext } from './auth/debug-context.js';
-import { computeBuildId } from '../utils/evolcore-version.js';
 import { loadAgent } from '../config-store.js';
 import { executeLocalInitializationCommand, hasSuppliedInitialization } from '../cli/agent-create.js';
 import { remoteAccessService } from './auth/remote-access-store.js';
@@ -25,7 +24,7 @@ import { createTriggerBaseagentResolver, registerTriggerIpcExecutor } from '../t
 import { createThreadOperationExecutor } from './thread/ipc-operation.js';
 import { isLinkedInstall } from '../utils/npm-ops.js';
 import { buildSystemSessionContext, getSystemSessionModule } from './system-session/registry.js';
-export function registerDaemonIpc({ ipcServer, agentRegistry, agentDelegationRegistry, sessionManager, statsCollector, aidStatsCollector, responseEngine, messageQueue, agentMap, commandHandler, channelInstances, eventBus, handoffRuntime, reloadCoordinator, agentApplicationService, agentInitializationService, enqueueConsolidation, completeAgentBootstrap, contactBinds, bindService, diagService, getProcessOwners, getControlAidState, daemonAid, triggerControlToken, triggerSchedulers, daemonTriggerOwner, primaryAgent, triggerAuthorization, }) {
+export function registerDaemonIpc({ ipcServer, agentRegistry, agentDelegationRegistry, sessionManager, statsCollector, aidStatsCollector, responseEngine, messageQueue, agentMap, commandHandler, channelInstances, eventBus, handoffRuntime, reloadCoordinator, agentApplicationService, agentInitializationService, enqueueConsolidation, requestRelationSweep, completeAgentBootstrap, contactBinds, bindService, diagService, getProcessOwners, getControlAidState, daemonAid, triggerControlToken, triggerSchedulers, daemonTriggerOwner, primaryAgent, triggerAuthorization, }) {
     const authorizeManagedAgentOperation = createDelegationAuthorizer({
         agentDelegationRegistry,
         sessionManager,
@@ -229,7 +228,7 @@ export function registerDaemonIpc({ ipcServer, agentRegistry, agentDelegationReg
     });
     registerAunIpcSender({ ipcServer, channelInstances, agentDelegationRegistry, responseEngine, handoffRuntime, triggerSchedulers, sessionManager });
     ipcServer.setAgentReloadExecutor((aid, options) => reloadCoordinator.reload(aid, options));
-    registerConsolidationCheckExecutor({ ipcServer, agentRegistry, enqueueConsolidation });
+    registerConsolidationCheckExecutor({ ipcServer, agentRegistry, enqueueConsolidation, requestRelationSweep });
     ipcServer.setInitializationExecutor(async (command) => executeLocalInitializationCommand(agentInitializationService, command));
     ipcServer.setAgentApplicationService(agentApplicationService);
     registerQueueIpcProviders({ ipcServer, statsCollector, agentRegistry, messageQueue });
@@ -288,10 +287,12 @@ export function createIpcStatusProvider(dependencies) {
         return {
             pid: process.pid,
             uptime: snapshot.uptimeMs,
+            ...(dependencies.runMode ? { runMode: dependencies.runMode } : {}),
+            ...(dependencies.host ? { host: dependencies.host } : {}),
             build: {
                 runtimeMode: dependencies.runtimeIsDist ? 'dist' : 'source',
                 runtimeId: dependencies.runtimeBuildIdentity.id,
-                diskDistId: computeBuildId(dependencies.diskDistDir),
+                diskDistId: dependencies.diskDistId ?? null,
                 entry: dependencies.runtimeBuildIdentity.entry,
                 version: dependencies.runtimeBuildIdentity.version,
             },
@@ -302,9 +303,26 @@ export function createIpcStatusProvider(dependencies) {
                 runningAgents: agents.filter(agent => agent.status === 'running').length,
                 ...(runtimeError ? { error: runtimeError } : {}),
             },
+            ...(dependencies.baseagents ? {
+                baseagents: {
+                    source: 'runtime-cache',
+                    items: dependencies.baseagents.baseagents.map(baseagent => ({
+                        ...baseagent,
+                        state: baseagent.loaded === true
+                            ? 'ready'
+                            : baseagent.detected === true
+                                ? 'available'
+                                : baseagent.detected === false
+                                    ? 'unavailable'
+                                    : 'unknown',
+                    })),
+                },
+            } : {}),
             channels,
             channelsByType,
             queue: { pending: dependencies.messageQueue.getGlobalQueueLength(), processing: dependencies.messageQueue.getGlobalProcessingCount() },
+            ...(dependencies.getTriggerSummary ? { triggers: dependencies.getTriggerSummary() } : {}),
+            ...(dependencies.getStatusSnapshot ? dependencies.getStatusSnapshot() : {}),
             stats: {
                 received: snapshot.lastHour.received,
                 sent: snapshot.lastHour.sent,
@@ -455,6 +473,7 @@ export function registerQueueIpcProviders({ ipcServer, statsCollector, agentRegi
         const snapshots = statsCollector.getSnapshots(agents.map(agent => agent.aid));
         return agents.map((agent) => {
             const snapshot = snapshots.get(agent.aid);
+            const queueAgentName = agentRegistry.get(agent.aid)?.name ?? agent.aid;
             return {
                 aid: agent.aid,
                 received: snapshot.lastHour.received,
@@ -463,9 +482,9 @@ export function registerQueueIpcProviders({ ipcServer, statsCollector, agentRegi
                 errors: snapshot.lastHour.errors,
                 interrupts: snapshot.lastHour.interrupts,
                 avgResponseMs: snapshot.lastHour.avgResponseMs,
-                processing: messageQueue.getProcessingCountByAgent(agent.aid),
-                queued: messageQueue.getQueueLengthByAgent(agent.aid),
-                muted: messageQueue.isAgentMuted(agent.aid),
+                processing: messageQueue.getProcessingCountByAgent(queueAgentName),
+                queued: messageQueue.getQueueLengthByAgent(queueAgentName),
+                muted: messageQueue.isAgentMuted(queueAgentName),
             };
         });
     });

package/dist/core/memory/batch-meta.js

@@ -95,6 +95,8 @@ export function updateBatchMeta(batchDir, updates) {
             finishedAt: updates.finishedAt,
             success: updates.success,
             ...(updates.agentSessionId ? { agentSessionId: updates.agentSessionId } : {}),
+            ...(updates.requestedModel ? { requestedModel: updates.requestedModel } : {}),
+            ...(updates.actualModel ? { actualModel: updates.actualModel } : {}),
             ...(updates.failureReason ? { failureReason: updates.failureReason } : {}),
         };
         // 更新 feedback 正文