evolcore 0.0.39 → 0.0.40

package/dist/cli/restart-monitor.js

@@ -130,6 +130,18 @@ export async function cmdRestartMonitor() {
     const hasCorrelatedRequest = requestId !== 'unknown';
     const upgradeJobId = hasCorrelatedRequest ? readRestartRequest(pendingFile, requestId)?.upgradeJobId : undefined;
     const upgradeJob = typeof upgradeJobId === 'string' ? readUpgradeJob(upgradeJobId) : null;
+    let configuredAutoUpgrade = true;
+    if (!upgradeJob && !process.argv.includes('--apply-package-upgrades') && !process.argv.includes('--skip-package-upgrades')) {
+        try {
+            configuredAutoUpgrade = loadDaemonConfig().upgrade?.autoOnStart !== false;
+        }
+        catch {
+            configuredAutoUpgrade = false;
+        }
+    }
+    const applyPackageUpgrades = !!upgradeJob
+        || process.argv.includes('--apply-package-upgrades')
+        || (!process.argv.includes('--skip-package-upgrades') && configuredAutoUpgrade);
     if (upgradeJobId && (!upgradeJob || upgradeJob.restartRequestId !== requestId || upgradeJob.released || upgradeJob.deadline <= Date.now())) {
         if (upgradeJob)
             updateUpgradeJob(upgradeJob.jobId, { status: 'timeout', success: false, released: true, code: 'UPGRADE_TIMEOUT', reason: 'Update expired before restart preflight' }, '更新已超时，未执行重启');
@@ -371,16 +383,24 @@ export async function cmdRestartMonitor() {
     const stoppedCodex = stopCodexAppServerOrphans();
     if (stoppedCodex)
         log(`Cleaned ${stoppedCodex} EvolCore codex app-server orphan(s)`);
-    // Apply only the preflight cache. There is no registry VERSION query after
-    // shutdown (npm still downloads the exact cached package when needed).
-    log('Applying cached version information...');
-    // 升级会原地替换整包，先留一个可回退的产物副本。备份放 EVOLCORE_HOME 而非包目录：
-    // Linux/macOS 的全局目录常常不可写，而 HOME 一定可写。
-    const upgradeBackup = await backupDistForUpgrade(p, log);
-    const [upgrade] = await applyCachedPackageUpgrades(undefined, {
-        log,
-        ...(upgradeJob ? { target: upgradeJob.target, distTag: upgradeJob.distTag, npmConfig: upgradeJob.npmConfig } : {}),
-    });
+    let upgradeBackup = null;
+    let upgrade;
+    if (applyPackageUpgrades) {
+        // Apply only the preflight cache. There is no registry VERSION query after
+        // shutdown (npm still downloads the exact cached package when needed).
+        log('Applying cached version information...');
+        // 升级会原地替换整包，先留一个可回退的产物副本。备份放 EVOLCORE_HOME 而非包目录：
+        // Linux/macOS 的全局目录常常不可写，而 HOME 一定可写。
+        upgradeBackup = await backupDistForUpgrade(p, log);
+        [upgrade] = await applyCachedPackageUpgrades(undefined, {
+            log,
+            ...(upgradeJob ? { target: upgradeJob.target, distTag: upgradeJob.distTag, npmConfig: upgradeJob.npmConfig } : {}),
+        });
+    }
+    else {
+        log('Skipping cached package upgrade because upgrade.autoOnStart=false');
+        upgrade = { status: 'skipped', error: 'Automatic package upgrades disabled by autoOnStart' };
+    }
     let upgradeRolledBack;
     switch (upgrade.status) {
         case 'upgraded':
@@ -405,9 +425,11 @@ export async function cmdRestartMonitor() {
             log(`Already up to date (${upgrade.from})`);
             break;
         case 'skipped':
-            log(upgrade.error
-                ? 'Skipped upgrade (network unavailable)'
-                : 'Skipped upgrade check (dev mode)');
+            log(upgrade.error === 'Automatic package upgrades disabled by autoOnStart'
+                ? 'Skipped package upgrade (autoOnStart=false)'
+                : upgrade.error
+                    ? 'Skipped upgrade (network unavailable)'
+                    : 'Skipped upgrade check (dev mode)');
             break;
         case 'failed':
             log(`⚠ Upgrade failed (${upgrade.from} → ${upgrade.to}): ${upgrade.error}`);

package/dist/cli/task-context.js

@@ -47,6 +47,7 @@ function normalizeTaskRuntimeContext(value) {
         executionSource: value.executionSource === 'fullaccess-command'
             || value.executionSource === 'trigger'
             || value.executionSource === 'agent-policy'
+            || value.executionSource === 'session-policy'
             ? value.executionSource : undefined,
         daemonRuntimeEpoch: optionalString(value.daemonRuntimeEpoch),
         threadId: optionalString(value.threadId),

package/dist/config/config-field-policy.js

@@ -227,6 +227,7 @@ export function resolveConfigFieldRule(fieldPath, scope) {
         }
         // 数值参数：整理节奏与容量上限，均 owner-only
         if (field === 'memory.idleHours'
+            || field === 'memory.maxUnconsolidatedHours'
             || field === 'memory.checkIntervalHours'
             || field === 'memory.backlogHours'
             || field === 'memory.indexMaxBytes'

package/dist/contracts/ecweb-service-protocol.js

@@ -0,0 +1,44 @@
+export const ECWEB_SERVICE_PROTOCOL = Object.freeze({
+    name: 'evolcore.ecweb',
+    major: 1,
+    minor: 1,
+    capabilities: Object.freeze([
+        'daemon.status',
+        'agent.directory',
+        'aun.directory',
+        'menu.execute',
+        'provider.management',
+        'basic-settings',
+        'model.catalog',
+        'baseagent.snapshot',
+        'monitor.snapshot',
+        'monitor.subscription',
+        'remote-auth',
+        'trigger.history',
+    ]),
+});
+export function validateEcwebClientProtocolRequirements(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return 'ECWeb client protocol requirements are missing or malformed';
+    }
+    const requirements = value;
+    if (requirements.name !== ECWEB_SERVICE_PROTOCOL.name) {
+        return `Unsupported ECWeb protocol name: ${String(requirements.name ?? 'missing')}`;
+    }
+    if (requirements.major !== ECWEB_SERVICE_PROTOCOL.major) {
+        return `Unsupported ECWeb protocol major version: ${String(requirements.major ?? 'missing')}`;
+    }
+    if (!Number.isInteger(requirements.minMinor) || requirements.minMinor < 0
+        || requirements.minMinor > ECWEB_SERVICE_PROTOCOL.minor) {
+        return `ECWeb requires protocol minor ${String(requirements.minMinor ?? 'missing')}, host supports ${ECWEB_SERVICE_PROTOCOL.minor}`;
+    }
+    if (!Array.isArray(requirements.requiredCapabilities)
+        || requirements.requiredCapabilities.some(capability => typeof capability !== 'string' || !capability.trim())) {
+        return 'ECWeb required capabilities are malformed';
+    }
+    const supported = new Set(ECWEB_SERVICE_PROTOCOL.capabilities);
+    const missing = requirements.requiredCapabilities.filter(capability => !supported.has(capability));
+    if (missing.length > 0)
+        return `ECWeb requires unsupported capabilities: ${missing.join(', ')}`;
+    return null;
+}

package/dist/core/agent-runtime.js

@@ -226,6 +226,11 @@ export function createAgentInitializationRuntime({ agentRegistry, agentMap, chan
         bindOwner: async (aid, ownerAid) => {
             await ownerResolver.bind(aid, ownerAid);
         },
+        ownerBindActive: (aid, ownerAid) => {
+            const task = ownerResolver.snapshot(aid).task;
+            return task?.operation === 'bind' && task.owner_aid === ownerAid
+                && (task.status === 'pending' || task.status === 'completed');
+        },
         checkOwner: async (aid, expectedOwnerAid) => {
             const view = await ownerResolver.refresh(aid, { maxAgeMs: OWNERSHIP_AUTHORIZATION_MAX_AGE_MS });
             if (view.consensusStatus === 'consensus')
@@ -257,6 +262,7 @@ export function createAgentInitializationRuntime({ agentRegistry, agentMap, chan
             const agent = agentRegistry.get(aid);
             return !!agent && agent.config.enabled !== false && agentMap.has(`${aid}::${agent.baseagent}`) && isConnected(aid);
         },
+        authorize: actor => actor === 'local-control' || ownerResolver.daemonOwners().includes(actor),
     });
 }
 export function recoverIncompleteAgentInitializations(service, agentsDir = resolvePaths().agentsDir) {

package/dist/core/auth/agent-delegation.js

@@ -440,7 +440,7 @@ export async function authorizeDelegatedAunMsgSend(registry, input) {
     catch {
         return { ok: false, code: 'INVALID_DELEGATION', reason: 'Delegation relation key is invalid' };
     }
-    await refreshOwnershipForAuthorization(grant.selfAid);
+    await refreshOwnershipForAuthorization(grant.selfAid, { allowTransient: true });
     const builtSubject = buildAuthSubject({
         selfAid: grant.selfAid,
         actorId: grant.actorId,
@@ -503,10 +503,13 @@ function isValidFullAccessExecutionIdentity(identity) {
         || identity.processRole !== 'fullaccess-run'
         || identity.dataScope !== 'daemon')
         return false;
-    if (identity.source === 'fullaccess-command' || identity.source === 'agent-policy') {
+    if (identity.source === 'fullaccess-command' || identity.source === 'agent-policy' || identity.source === 'session-policy') {
         return typeof identity.authorizedBy === 'string' && identity.authorizedBy.length > 0
-            && (identity.source !== 'agent-policy'
-                || (typeof identity.agentAid === 'string' && identity.agentAid.length > 0));
+            && (identity.source === 'fullaccess-command'
+                || (typeof identity.agentAid === 'string'
+                    && identity.agentAid.length > 0
+                    && (identity.source !== 'session-policy'
+                        || (typeof identity.sessionId === 'string' && identity.sessionId.length > 0))));
     }
     return identity.source === 'trigger'
         && typeof identity.authorizedBy === 'string' && identity.authorizedBy.length > 0

package/dist/core/auth/auth-gateway.js

@@ -107,7 +107,8 @@ export async function authorizeFreshOperation(params) {
         const configCommand = params.resolvedConfigCommand;
         const changesOwner = configCommand?.kind === 'field' && configCommand.subcommand !== 'get'
             && ['owner', 'owners'].includes(configCommand.field.split('.')[0]);
-        const force = changesOwner || params.intent.operation === 'ec.aid.bind' || params.intent.operation === 'config.restore';
+        const force = changesOwner || ['ec.aid.bind', 'ec.aid.bind.status', 'ec.aid.unbind', 'ec.aid.transfer']
+            .includes(params.intent.operation) || params.intent.operation === 'config.restore';
         const operation = getOperationMeta(params.intent.operation);
         const sensitive = force || params.intent.dangerous || operation?.dangerous || operation?.category !== 'read'
             || configCommand?.dangerous || subject.processRole === 'fullaccess-run';
@@ -116,6 +117,7 @@ export async function authorizeFreshOperation(params) {
             ...(sensitive ? {} : { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS }),
             includeDaemon: subject.isDaemonOwner || subject.processRole === 'fullaccess-run'
                 || params.intent.scope === 'process' || params.intent.scope === 'control' || force,
+            allowTransient: !force,
         });
         const current = buildAuthSubject({
             selfAid: subject.selfAid, agentName: subject.agentName, actorId: subject.actorId,

package/dist/core/auth/authorization-audit.js

@@ -25,11 +25,15 @@ export function auditCommandAuthorization(event) {
 }
 export function auditFullAccessEvent(input) {
     const configurationEvent = input.event === 'fullaccess.trigger.configured'
-        || input.event === 'fullaccess.trigger.deescalated';
+        || input.event === 'fullaccess.trigger.deescalated'
+        || input.event === 'fullaccess.session-policy.configured'
+        || input.event === 'fullaccess.session-policy.deescalated';
     const executionEvent = input.event === 'fullaccess.execution.started'
         || input.event === 'fullaccess.execution.ended'
         || input.event === 'fullaccess.agent-policy.execution.started'
         || input.event === 'fullaccess.agent-policy.execution.ended'
+        || input.event === 'fullaccess.session-policy.execution.started'
+        || input.event === 'fullaccess.session-policy.execution.ended'
         || input.event === 'fullaccess.trigger.execution.started'
         || input.event === 'fullaccess.trigger.execution.ended';
     // The scheduler triggers a run, but the executing subject is the task-bound

package/dist/core/auth/debug-context.js

@@ -127,7 +127,11 @@ export function buildDebugTaskContext(input) {
         chatType,
         selfAid: session.selfAID,
         peerId,
-        peerKey: channel && peerKeyId ? formatPeerKey(channel, peerKeyId) : undefined,
+        // 系统会话的目标关系在 metadata.peerKey（与 response-engine 的任务上下文同源），
+        // 不能从后台伪对端 peerId 推。
+        peerKey: meta.systemSession && typeof meta.peerKey === 'string' && meta.peerKey
+            ? meta.peerKey
+            : (channel && peerKeyId ? formatPeerKey(channel, peerKeyId) : undefined),
         peerName: meta.peerName,
         peerType: meta.peerType,
         threadId,

package/dist/core/auth/operation-catalog.js

@@ -323,6 +323,22 @@ const OPERATIONS = [
         description: '更新当前主会话或话题的 idle 触发设置',
         sources: ['slash', 'menu', 'ecweb', 'control'],
     },
+    {
+        id: 'session.fullaccess.current',
+        category: 'read',
+        dangerous: true,
+        defaultScopes: ['relation'],
+        description: '查看当前 EC 会话的 fullaccess 状态',
+        sources: ['slash', 'menu'],
+    },
+    {
+        id: 'session.fullaccess.update',
+        category: 'dangerous',
+        dangerous: true,
+        defaultScopes: ['relation'],
+        description: '更新当前 EC 会话的 fullaccess 状态',
+        sources: ['slash', 'menu'],
+    },
     {
         id: 'session.topic.current',
         category: 'read',

package/dist/core/command/command-handler.js

@@ -1380,6 +1380,7 @@ export class CommandHandler {
                     ? {
                         kind: 'system.error',
                         text: result.text,
+                        ...(result.raw !== undefined ? { raw: result.raw } : {}),
                         subtype: `session.${content.trim().toLowerCase().startsWith('/new') ? 'new' : 'renew'}.error`,
                         recoverable: true,
                     }
@@ -1394,7 +1395,12 @@ export class CommandHandler {
         catch (error) {
             if (error instanceof BaseagentRunnerUnavailableError) {
                 logger.error(`[CommandHandler] baseagent mismatch blocked: channel=${channel} requested=${error.baseagent} owner=${error.evolagentName} available=${error.availableBaseagents.join(',') || '<none>'}`);
-                return { kind: 'command.error', text: this.formatBaseagentUnavailable(error), reason: error.code };
+                return {
+                    kind: 'command.error',
+                    text: this.formatBaseagentUnavailable(error),
+                    raw: error.message,
+                    reason: error.code,
+                };
             }
             throw error;
         }

package/dist/core/command/menu-catalog.js

@@ -6,6 +6,7 @@ import { authorizationDenialData, formatAuthorizationDenial } from '../auth/auth
 import { ConfigTarget, read as readConfig } from '../../config/config-manager.js';
 import { readRolesConfig } from '../../config/roles.js';
 import { normalizeMenuError } from './menu-protocol.js';
+import { isAgentFullAccessOwner } from '../role/runtime-policy.js';
 import { isValidAid } from '../../aun/aid/validation.js';
 import { DEFAULT_SESSION_LOOP_SECONDS, MAX_SESSION_LOOP_SECONDS, MIN_SESSION_LOOP_SECONDS } from '../session/session-idle-monitor.js';
 const DEFAULT_DIRECTORY = { getGroup: groupInfo, getMembers: groupMembers };
@@ -79,6 +80,19 @@ const ENTRIES = [
         valueSchema: { type: 'boolean' },
         control: 'toggle-with-number',
     },
+    {
+        id: 'session.fullaccess',
+        type: 'setting',
+        contexts: ['private_relation'],
+        name: 'session',
+        label: '当前 EC 会话 fullaccess',
+        section: 'relation_behavior',
+        order: 6,
+        query: { cmd: '/session', args: { view: 'fullaccess' }, operation: 'session.fullaccess.current', scope: 'relation' },
+        update: { cmd: '/session', args: { resource: 'fullaccess' }, operation: 'session.fullaccess.update', scope: 'relation' },
+        valueSchema: { type: 'boolean' },
+        control: 'toggle',
+    },
     relation('model.relation', 'model', '模型', 10, '/model', 'model.current', { options: { cmd: '/model', operation: 'model.list', scope: 'relation', mode: 'dynamic' }, update: { cmd: '/model', operation: 'model.use', scope: 'relation' }, control: 'select' }),
     relation('effort.relation', 'effort', '推理强度', 20, '/effort', 'model.effort.current', { options: { cmd: '/effort', operation: 'model.effort.current', scope: 'relation', mode: 'dynamic', dependsOn: ['model.relation'] }, update: { cmd: '/effort', operation: 'model.effort', scope: 'relation' }, control: 'select' }),
     relation('chatmode.relation', 'chatmode', '对话模式', 30, '/chatmode', 'chatmode.current', { options: { cmd: '/chatmode', operation: 'chatmode.current', scope: 'relation', mode: 'static', items: [{ value: 'interactive', label: '交互模式' }, { value: 'proactive', label: '主动模式' }] }, update: { cmd: '/chatmode', operation: 'chatmode.update', scope: 'relation' }, control: 'select' }),
@@ -290,8 +304,8 @@ export function bindMenuExecutionContextArgs(args, context) {
     if (!args && context.kind !== 'group_relation')
         return args;
     const { context: _context, ...bound } = args ?? {};
-    const isSessionLoop = bound.resource === 'loop' || bound.view === 'loop';
-    if (isSessionLoop)
+    const isSessionScoped = ['loop', 'fullaccess'].includes(String(bound.resource ?? bound.view ?? ''));
+    if (isSessionScoped)
         return bound;
     if (context.kind === 'private_relation' || context.kind === 'group_relation') {
         if (bound.scope !== 'role')
@@ -368,6 +382,17 @@ async function operationView(binding, context, options = {}) {
             reason: { code: 'NOT_ALLOWED', message: 'Pairing code issuance requires encrypted DaemonOwner authentication' },
         };
     }
+    if (binding.operation.startsWith('session.fullaccess.')) {
+        const allowed = context.kind === 'private_relation'
+            && context.subject.chatType === 'private'
+            && context.subject.isDaemonOwner === true
+            && isAgentFullAccessOwner(context.subject.selfAid ?? '', context.subject.principalId);
+        return {
+            supported: true,
+            allowed,
+            ...(allowed ? {} : { reason: { code: 'FORBIDDEN', message: 'session fullaccess requires the Agent Owner and daemon Owner identity' } }),
+        };
+    }
     if (binding.operation === 'group.rulespolicy.update' && context.subject.role !== 'owner') {
         return { supported: true, allowed: false, reason: { code: 'PERMISSION_DENIED', message: 'rulesPolicy can only be changed by an Agent owner' } };
     }
@@ -377,7 +402,7 @@ async function operationView(binding, context, options = {}) {
 function wireBinding(binding, context) {
     if (!binding || binding.supported === false)
         return undefined;
-    if (binding.operation.startsWith('session.loop.'))
+    if (binding.operation.startsWith('session.loop.') || binding.operation.startsWith('session.fullaccess.'))
         return {
             args: context.kind === 'group_relation'
                 ? { ...(binding.args ?? {}), context: { kind: context.kind, ...(context.groupId ? { groupId: context.groupId } : {}) } }
@@ -406,10 +431,10 @@ export async function getMenuCatalog(input) {
                 operations[key] = view;
         }
         entries.push({ id: entry.id, type: entry.type, name: entry.name, label: entry.label, section: entry.section, order: entry.order, target: { scope: context.kind === 'agent' ? 'agent' : context.kind === 'process' ? 'process' : 'relation', ...(context.self ? { self: context.self } : {}), ...(context.peerKey ? { peerKey: context.peerKey } : {}) }, valueSchema: entry.valueSchema ?? { type: 'object' }, operations, wire: { name: entry.name, operations: { ...(wireBinding(entry.query, context) ? { query: wireBinding(entry.query, context) } : {}), ...(wireBinding(entry.options, context) ? { options: wireBinding(entry.options, context) } : {}), ...(wireBinding(entry.update, context) ? { update: wireBinding(entry.update, context) } : {}), ...(wireBinding(entry.action, context) ? { action: wireBinding(entry.action, context) } : {}) } }, ui: { control: entry.control ?? 'action' } });
-        if (entry.id === 'session.loop') {
+        if (entry.id === 'session.loop' || entry.id === 'session.fullaccess') {
             const loopEntry = entries[entries.length - 1];
-            let target = { level: 'relation-main' };
-            if (input.resolveLoopTarget) {
+            let target = { level: 'relation-main', scope: 'agent' };
+            if ((entry.id === 'session.loop' || entry.id === 'session.fullaccess') && input.resolveLoopTarget) {
                 try {
                     target = await input.resolveLoopTarget(context);
                 }
@@ -420,12 +445,23 @@ export async function getMenuCatalog(input) {
                     }
                 }
             }
-            loopEntry.target = target;
-            loopEntry.label = target.level === 'topic-session' ? '当前话题闲置触发' : '关系主会话闲置触发';
-            loopEntry.ui = {
-                control: entry.control,
-                idleSeconds: { type: 'integer', minimum: MIN_SESSION_LOOP_SECONDS, maximum: MAX_SESSION_LOOP_SECONDS, default: DEFAULT_SESSION_LOOP_SECONDS, unit: 'seconds' },
-            };
+            if (entry.id === 'session.loop') {
+                loopEntry.target = target;
+                loopEntry.label = target.level === 'topic-session' ? '当前话题闲置触发' : '关系主会话闲置触发';
+                loopEntry.ui = {
+                    control: entry.control,
+                    idleSeconds: { type: 'integer', minimum: MIN_SESSION_LOOP_SECONDS, maximum: MAX_SESSION_LOOP_SECONDS, default: DEFAULT_SESSION_LOOP_SECONDS, unit: 'seconds' },
+                };
+            }
+            else {
+                loopEntry.target = {
+                    level: target.level,
+                    sessionId: target.sessionId,
+                    scope: target.level === 'topic-session' ? 'session' : 'agent',
+                };
+                loopEntry.label = '当前 EC 会话 fullaccess';
+                loopEntry.ui = { control: entry.control };
+            }
         }
     }
     const policyRevision = hash({ role: context.subject.role, self: context.subject.selfAid, peerKey: context.subject.peerKey, groupMembershipRole: context.groupMembershipRole, baselineRole: context.baselineRole, paircodeAllowed, roles: readRolesConfig(context.subject.selfAid) });

package/dist/core/command/menu-handler.js

@@ -42,7 +42,7 @@ import { isUnsupportedBaseagentConfigField } from '../../config/config-field-pol
 import { splitConfigBatchGetArgv } from '../../cli/cli-argv.js';
 import { chatmodeFieldForPeer, isPrivateChatmodeRoleLocked, resolveChatModeForField } from '../message/peer-mode.js';
 import { PUBLIC_PERMISSION_MODES } from '../permission/mode.js';
-import { resolveRuntimePermissionMode, resolveRuntimeStringField, validateRuntimeStringFieldOverride, } from '../role/runtime-policy.js';
+import { isAgentFullAccessOwner, resolveRuntimePermissionMode, resolveRuntimeStringField, sessionFullAccessStatus, validateRuntimeStringFieldOverride, } from '../role/runtime-policy.js';
 import { isManagementRole } from '../../config/builtin-roles.js';
 import { SYSTEM_CONTROL_CHANNEL } from '../system-channels.js';
 import { logger } from '../../utils/logger.js';
@@ -2149,6 +2149,21 @@ export async function execMenuQuery(cmd, channel, channelId, userId, args, expli
             return menuResultFailure(error);
         }
     }
+    if (cmdBase === '/session' && args?.view === 'fullaccess') {
+        if (Object.keys(args).some(key => key !== 'view' && key !== 'context')) {
+            return { error: 'session.fullaccess query only accepts args.view', code: 'INVALID_ARGUMENT' };
+        }
+        if (!session || !subject.selfAid)
+            return { error: '当前没有可绑定的 EC 会话', code: 'NO_ACTIVE_SESSION' };
+        if (session.chatType !== 'private')
+            return { error: '/fa 仅支持私聊中的当前 EC 会话', code: 'NOT_SUPPORTED' };
+        const principalId = subject.principalId;
+        if (!principalId || !subject.isDaemonOwner || !isAgentFullAccessOwner(subject.selfAid, principalId)) {
+            return { error: '/fa 需要同一身份同时具备 Agent Owner 和 daemon Owner 权限', code: 'FORBIDDEN' };
+        }
+        const status = sessionFullAccessStatus(session, principalId);
+        return { data: { ...status, sessionId: session.id, scope: isTopicSession(session) ? 'session' : 'agent' } };
+    }
     const storageRequest = { type: 'menu.query', cmd, args };
     if (isAgentStorageMenuRequest(storageRequest)) {
         try {
@@ -2948,6 +2963,7 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
     if (!cmdBase)
         return { error: '缺少命令', code: 'MISSING_CMD' };
     const isLoopUpdate = cmdBase === '/session' && args?.resource === 'loop';
+    const isFullAccessUpdate = cmdBase === '/session' && args?.resource === 'fullaccess';
     if (isLoopUpdate) {
         if (typeof value !== 'boolean' || Object.keys(args ?? {}).some(key => key !== 'resource' && key !== 'idleSeconds' && key !== 'context')) {
             return { error: 'session.loop requires a boolean value and only accepts resource / idleSeconds', code: 'INVALID_ARGUMENT' };
@@ -2959,9 +2975,13 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
             return { error: `idleSeconds 必须是 ${MIN_SESSION_LOOP_SECONDS}-${MAX_SESSION_LOOP_SECONDS} 的整数`, code: 'INVALID_ARGUMENT' };
         }
     }
-    else if (typeof value !== 'string') {
+    else if (!isFullAccessUpdate && typeof value !== 'string') {
         return { error: 'value 必须是字符串', code: 'INVALID_ARGUMENT' };
     }
+    if (isFullAccessUpdate && (typeof value !== 'boolean'
+        || Object.keys(args ?? {}).some(key => key !== 'resource' && key !== 'context'))) {
+        return { error: 'session.fullaccess requires a boolean value and only accepts resource', code: 'INVALID_ARGUMENT' };
+    }
     if (cmdBase === '/perm') {
         return { error: 'permissionMode 只能通过角色策略编辑器修改', code: 'ROLE_POLICY_MANAGED' };
     }
@@ -3020,6 +3040,53 @@ export async function execMenuUpdate(cmd, value, channel, channelId, userId, ove
             return menuResultFailure(error);
         }
     }
+    if (isFullAccessUpdate) {
+        if (!session || !subject.selfAid)
+            return { error: '当前没有可绑定的 EC 会话', code: 'NO_ACTIVE_SESSION' };
+        const route = { channel, channelId, selfAid: subject.selfAid, threadId: transportReplyContext?.threadId };
+        let target;
+        try {
+            target = await resolveCurrentSessionLoopTarget(this.sessionManager, route);
+            if (target.session.id !== session.id)
+                return { error: '当前会话已发生变化，请重新查询', code: 'CONFLICT' };
+            target = await refreshSessionLoopTarget(this.sessionManager, route, target);
+            session = target.session;
+        }
+        catch (error) {
+            return menuResultFailure(error);
+        }
+        const principalId = subject.principalId;
+        if (session.chatType !== 'private' || !principalId || !subject.isDaemonOwner
+            || !isAgentFullAccessOwner(subject.selfAid, principalId)) {
+            return { error: '/fa 需要私聊中同一身份同时具备 Agent Owner 和 daemon Owner 权限', code: 'FORBIDDEN' };
+        }
+        try {
+            if (isTopicSession(session)) {
+                this.sessionManager.updateSessionFullAccess(session.id, { enabled: value, authorizedBy: principalId });
+            }
+            else {
+                const config = cfgRead(ConfigTarget.Agent, { self: subject.selfAid }, { cache: false });
+                if (!config)
+                    return { error: '找不到当前 Agent 配置', code: 'NOT_FOUND' };
+                config.fullaccess = { enabled: value };
+                cfgWrite(ConfigTarget.Agent, config, { self: subject.selfAid });
+            }
+            auditFullAccessEvent({
+                event: value ? 'fullaccess.session-policy.configured' : 'fullaccess.session-policy.deescalated',
+                source: 'session-policy',
+                actorId: principalId,
+                processRole: 'daemon-owner',
+                agentAid: subject.selfAid,
+                sessionId: session.id,
+                authorizedBy: principalId,
+                reason: isTopicSession(session) ? 'topic session fullaccess updated via Menu' : 'Agent main-session fullaccess updated via Menu',
+            });
+            return { data: { enabled: value, sessionId: session.id, scope: isTopicSession(session) ? 'session' : 'agent' } };
+        }
+        catch (error) {
+            return menuResultFailure(error);
+        }
+    }
     const arg = value.trim();
     if (!arg)
         return { error: '缺少 value 参数', code: 'MISSING_VALUE' };
@@ -4325,6 +4392,7 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
                 sessionId: sessionKey,
                 reason: 'stop',
                 agentName: this.agentRegistry?.resolveByChannel(channel)?.name ?? '<unknown>',
+                agentAid: session.selfAID,
             });
             await this.processor.interruptSession(sessionKey, 'stop');
             return { data: { action: 'stop', success: true } };
@@ -5156,7 +5224,7 @@ async function execMenuForSystemControl(payload, context) {
 }
 /** ECWeb 专用入口：只信任 IPC 信封中的服务端认证上下文，不信任 Menu payload 自报身份。 */
 export async function execMenuForEcweb(payload, trusted) {
-    await refreshOwnershipForAuthorization(undefined, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS });
+    await refreshOwnershipForAuthorization(undefined, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS, allowTransient: true });
     const id = payload?.id ?? '';
     const name = payload?.name;
     const validationError = validateMenuRequest(payload ?? {});
@@ -5200,7 +5268,7 @@ export async function execMenuForEcweb(payload, trusted) {
  * process authorization path. The authenticated envelope peerId remains the
  * requester; token mode maps to a configured owner as its management actor. */
 export async function execMenuForControl(payload, peerId, auth = {}) {
-    await refreshOwnershipForAuthorization(undefined, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS });
+    await refreshOwnershipForAuthorization(undefined, { maxAgeMs: OWNERSHIP_CACHE_MAX_AGE_MS, allowTransient: true });
     const id = payload?.id ?? '';
     const name = payload?.name;
     const validationError = validateMenuRequest(payload ?? {});

package/dist/core/command/menu-protocol.js

@@ -367,14 +367,33 @@ export function validateMenuRequest(request) {
             return { code: 'INVALID_ARGUMENT', message: 'idleSeconds is not allowed when session.loop is disabled' };
         }
     }
-    else if (type === 'menu.update' && (typeof request.value !== 'string' || request.value.length === 0)) {
+    else if (type === 'menu.update'
+        && !((request.name === 'session' || request.cmd === '/session')
+            && request.args?.resource === 'fullaccess')
+        && (typeof request.value !== 'string' || request.value.length === 0)) {
         return { code: 'INVALID_ARGUMENT', message: 'Menu request value is required' };
     }
+    const isSessionFullAccessUpdate = type === 'menu.update'
+        && (request.name === 'session' || request.cmd === '/session')
+        && request.args?.resource === 'fullaccess';
+    if (isSessionFullAccessUpdate) {
+        if (typeof request.value !== 'boolean')
+            return { code: 'INVALID_ARGUMENT', message: 'session.fullaccess value must be a boolean' };
+        const args = request.args;
+        const unknown = Object.keys(args ?? {}).find(key => !['resource', 'context'].includes(key));
+        if (unknown)
+            return { code: 'INVALID_ARGUMENT', message: 'session.fullaccess update does not accept args.' + unknown };
+    }
     if (type === 'menu.query' && (request.name === 'session' || request.cmd === '/session')
         && request.args?.view === 'loop'
         && Object.keys(request.args).some(key => key !== 'view' && key !== 'context')) {
         return { code: 'INVALID_ARGUMENT', message: 'session.loop query only accepts args.view' };
     }
+    if (type === 'menu.query' && (request.name === 'session' || request.cmd === '/session')
+        && request.args?.view === 'fullaccess'
+        && Object.keys(request.args).some(key => key !== 'view' && key !== 'context')) {
+        return { code: 'INVALID_ARGUMENT', message: 'session.fullaccess query only accepts args.view' };
+    }
     if (type === 'menu.action' && (typeof request.action !== 'string' || request.action.trim().length === 0)) {
         return { code: 'INVALID_ARGUMENT', message: 'Menu request action is required' };
     }

package/dist/core/command/slash-gate.js

@@ -43,7 +43,7 @@ export function probeSessionActivity(evidence, probes) {
     return evaluateSessionActivity(collected);
 }
 // 支持的命令列表
-const commands = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/stop', '/pause', '/compact', '/renew', '/repair', '/fork', '/del', '/perm', '/file', '/check', '/rewind', '/activity', '/observable', '/chatmode', '/mention', '/loop', '/ask', '/resume', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair', '/memory', '/skill', '/thread'];
+const commands = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/stop', '/pause', '/compact', '/renew', '/repair', '/fork', '/del', '/perm', '/file', '/check', '/rewind', '/activity', '/observable', '/chatmode', '/mention', '/loop', '/fa', '/fullaccess', '/ask', '/resume', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair', '/memory', '/skill', '/thread'];
 const deprecatedCommands = ['/clear'];
 commands.push('/diag');
 const exactBoundaryCommands = new Set(['/pause', '/resume', '/stop', '/pair', '/diag']);
@@ -55,7 +55,14 @@ export function parseFullAccessCommand(content) {
     return {
         matched: true,
         command: match[1],
-        prompt: match[2].trim(),
+        action: match[2].trim() === ''
+            ? 'status'
+            : match[2].trim() === 'on'
+                ? 'on'
+                : match[2].trim() === 'off'
+                    ? 'off'
+                    : 'invalid',
+        raw: match[2].trim(),
     };
 }
 // 命令别名映射
@@ -78,6 +85,13 @@ export function guardGroupSlashCommand(content, chatType) {
         return undefined;
     const [inputCommand, ...args] = content.trim().split(/\s+/);
     const command = aliases[inputCommand] ?? inputCommand;
+    if (command === '/fa' || command === '/fullaccess') {
+        return {
+            kind: 'command.error',
+            text: '❌ 群聊中不支持 /fa，请在私聊会话操作',
+            reason: 'GROUP_COMMAND_UNSUPPORTED',
+        };
+    }
     if (GROUP_READ_ONLY_COMMANDS.has(command)) {
         if (!args.length || (command === '/model' && args.length === 1 && ['current', 'list', 'check'].includes(args[0]))) {
             return undefined;
@@ -97,7 +111,7 @@ export function guardGroupSlashCommand(content, chatType) {
     };
 }
 // 命令快速路径前缀（所有命令都不进入消息队列）
-const quickCommandPrefixes = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/repair', '/fork', '/stop', '/pause', '/clear', '/compact', '/renew', '/del', '/perm', '/file', '/check', '/s ', '/name', '/rewind', '/rw', '/rw ', '/activity', '/observable', '/chatmode', '/mention', '/loop', '/ask', '/resume', '/base ', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair', '/memory', '/skill', '/thread'];
+const quickCommandPrefixes = ['/new', '/pwd', '/help', '/evolhelp', '/status', '/restart', '/reload', '/model', '/effort', '/baseagent', '/slist', '/session', '/rename', '/repair', '/fork', '/stop', '/pause', '/clear', '/compact', '/renew', '/del', '/perm', '/file', '/check', '/s ', '/name', '/rewind', '/rw', '/rw ', '/activity', '/observable', '/chatmode', '/mention', '/loop', '/fa', '/fullaccess', '/ask', '/resume', '/base ', '/aid', '/rpc', '/storage', '/agent', '/trigger', '/upgrade', '/pair', '/memory', '/skill', '/thread'];
 quickCommandPrefixes.push('/diag');
 /**
  * 计算两个字符串的 Levenshtein 距离（编辑距离）