myagent-ai 1.27.1 → 1.27.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "myagent-ai",
-  "version": "1.27.1",
+  "version": "1.27.2",
   "description": "本地桌面端执行型AI助手 - Open Interpreter 风格 | Local Desktop Execution-Oriented AI Assistant",
   "main": "main.py",
   "bin": {

package/web/api_server.py

@@ -3505,6 +3505,9 @@ window.addEventListener('beforeunload', function() {{
                     session_counts[ap] = session_counts.get(ap, 0) + r["cnt"]
             for a in agents_flat:
                 a["session_count"] = session_counts.get(a["path"], 0)
+            # [v1.27.2] 附加数字 agent_id 到每个 agent（供 URL 参数使用）
+            for a in agents_flat:
+                a["aid"] = self.core.memory.get_agent_id(a["path"])
         # 系统 agent 排在最前
         agents_flat.sort(key=lambda a: (0 if a.get("system") else 1, a.get("path", "")))
         tree = self._build_agent_tree(agents_flat)
@@ -4299,39 +4302,60 @@ window.addEventListener('beforeunload', function() {{
     async def handle_list_sessions(self, request):
         if not self.core.memory: return web.json_response([])
         agent = request.query.get("agent", "")
+        conn = self.core.memory._get_conn()
+
+        # [v1.27.2] 构建 agent_id → agent_name 的映射（数字 ID → 路径名）
+        _agent_id_map = {}  # {int_id: str_name}
+        try:
+            for ar in conn.execute("SELECT id, name FROM agents").fetchall():
+                _agent_id_map[int(ar["id"])] = ar["name"]
+        except Exception:
+            pass
+
+        _hidden = '(' + ','.join(["'llm_output'", "'llm_input'", "'tool_result_raw'", "'conversation_insight'"]) + ')'
         # 只统计用户可见的消息数（排除 llm_output 和 conversation_insight）
         if agent:
-            # [v1.25.7] 使用 agent_id 字段精确匹配，同时兼容旧数据（agent_id为空时回退到前缀匹配）
+            # [v1.27.2] 先将 agent 路径转为数字 ID，用数字 ID 精确过滤
+            target_aid = self.core.memory.get_agent_id(agent) if agent else 0
             if agent == "default":
-                # default agent: agent_id='' 或 agent_id='default' 或 旧格式 web_default/sess_*
-                rows = self.core.memory._get_conn().execute(
-                    """SELECT DISTINCT session_id, COUNT(*) as cnt, MAX(created_at) as last,
-                       MAX(CASE WHEN agent_id != '' AND agent_id != 'default' THEN agent_id ELSE NULL END) as agent_id FROM memories 
+                # default agent: agent_id=0（未分配）或 agent_id=1（default 的数字 ID）或 旧格式
+                rows = conn.execute(
+                    f"""SELECT DISTINCT session_id, COUNT(*) as cnt, MAX(created_at) as last,
+                       MAX(CASE WHEN agent_id > 1 THEN agent_id ELSE NULL END) as raw_agent_id FROM memories 
                        WHERE category = 'session' AND role != '' 
-                       AND key NOT IN ('llm_output', 'llm_input', 'tool_result_raw', 'conversation_insight') 
-                       AND (agent_id = '' OR agent_id = 'default' OR session_id = 'web_default' OR session_id LIKE 'sess_%')
-                       GROUP BY session_id ORDER BY last DESC LIMIT 100""").fetchall()
+                       AND key NOT IN {_hidden}
+                       AND (agent_id = 0 OR agent_id = ? OR session_id = 'web_default' OR session_id LIKE 'sess_%')
+                       GROUP BY session_id ORDER BY last DESC LIMIT 100""",
+                    (target_aid,)).fetchall()
             else:
-                # 其他 agent: agent_id=agent 或 session_id 前缀匹配（旧数据）
-                rows = self.core.memory._get_conn().execute(
-                    """SELECT DISTINCT session_id, COUNT(*) as cnt, MAX(created_at) as last,
-                       MAX(CASE WHEN agent_id != '' AND agent_id != ? THEN agent_id ELSE NULL END) as agent_id FROM memories 
+                # 其他 agent: agent_id=数字ID 或 session_id 前缀匹配（旧数据）
+                rows = conn.execute(
+                    f"""SELECT DISTINCT session_id, COUNT(*) as cnt, MAX(created_at) as last,
+                       MAX(CASE WHEN agent_id != ? THEN agent_id ELSE NULL END) as raw_agent_id FROM memories 
                        WHERE category = 'session' AND role != '' 
-                       AND key NOT IN ('llm_output', 'llm_input', 'tool_result_raw', 'conversation_insight') 
+                       AND key NOT IN {_hidden}
                        AND (agent_id = ? OR session_id LIKE ?)
                        GROUP BY session_id ORDER BY last DESC LIMIT 100""",
-                    (agent, agent, f"{agent}_%")).fetchall()
+                    (target_aid, target_aid, f"{agent}_%")).fetchall()
         else:
-            # [v1.25.7] 无 agent 过滤时也返回 agent_id，供后台管理页面使用
-            rows = self.core.memory._get_conn().execute(
-                "SELECT DISTINCT session_id, COUNT(*) as cnt, MAX(created_at) as last, "
-                "MAX(CASE WHEN agent_id != '' THEN agent_id ELSE NULL END) as agent_id FROM memories "
-                "WHERE category = 'session' AND role != '' "
-                "AND key NOT IN ('llm_output', 'llm_input', 'tool_result_raw', 'conversation_insight') "
-                "GROUP BY session_id ORDER BY last DESC LIMIT 100").fetchall()
-        sessions = [{"id": r["session_id"], "messages": r["cnt"], "last": r["last"],
-                      "agent_id": (r["agent_id"] or ""),
-                      "display_name": "", "preview": ""} for r in rows]
+            # [v1.27.2] 无 agent 过滤时也返回 agent_id，供后台管理页面使用
+            rows = conn.execute(
+                f"SELECT DISTINCT session_id, COUNT(*) as cnt, MAX(created_at) as last, "
+                f"MAX(CASE WHEN agent_id > 0 THEN agent_id ELSE NULL END) as raw_agent_id FROM memories "
+                f"WHERE category = 'session' AND role != '' "
+                f"AND key NOT IN {_hidden} "
+                f"GROUP BY session_id ORDER BY last DESC LIMIT 100").fetchall()
+        # [v1.27.2] 将数字 agent_id 转为 agent 名称
+        sessions = []
+        for r in rows:
+            raw_aid = r["raw_agent_id"]
+            agent_name = ""
+            if raw_aid is not None:
+                agent_name = _agent_id_map.get(int(raw_aid), "")
+            sessions.append({"id": r["session_id"], "messages": r["cnt"], "last": r["last"],
+                          "agent_id": agent_name,  # 返回 agent 名称（非数字 ID）
+                          "agent_db_id": (int(raw_aid) if raw_aid is not None else 0),  # 数字 ID 供 URL 使用
+                          "display_name": "", "preview": ""})
         # 批量获取自定义会话名称
         sids = [s["id"] for s in sessions]
         name_map = self.core.memory.list_session_names(sids) if sids else {}
@@ -4360,22 +4384,24 @@ window.addEventListener('beforeunload', function() {{
         name = request.match_info["name"]
         if not self.core.memory:
             return web.json_response({"agent": name, "sessions": []})
-        # [v1.25.7] 使用 agent_id 字段精确匹配，同时兼容旧数据
+        # [v1.27.2] 使用数字 agent_id 精确过滤，同时兼容旧数据
+        target_aid = self.core.memory.get_agent_id(name)
         if name == "default":
-            # default agent: agent_id='' 或 agent_id='default' 或 旧格式 web_default/sess_*
+            # default agent: agent_id=0 或 agent_id=1 或 旧格式
             rows = self.core.memory._get_conn().execute(
                 """SELECT DISTINCT session_id, COUNT(*) as cnt, MAX(created_at) as last FROM memories 
                    WHERE category = 'session' 
-                   AND (agent_id = '' OR agent_id = 'default' OR session_id = 'web_default' OR session_id LIKE 'sess_%')
-                   GROUP BY session_id ORDER BY last DESC LIMIT 100""").fetchall()
+                   AND (agent_id = 0 OR agent_id = ? OR session_id = 'web_default' OR session_id LIKE 'sess_%')
+                   GROUP BY session_id ORDER BY last DESC LIMIT 100""",
+                (target_aid,)).fetchall()
         else:
-            # 其他 agent: agent_id=name 或 session_id 前缀匹配（旧数据）
+            # 其他 agent: agent_id=数字ID 或 session_id 前缀匹配（旧数据）
             rows = self.core.memory._get_conn().execute(
                 """SELECT DISTINCT session_id, COUNT(*) as cnt, MAX(created_at) as last FROM memories 
                    WHERE category = 'session' 
                    AND (agent_id = ? OR session_id LIKE ?)
                    GROUP BY session_id ORDER BY last DESC LIMIT 100""",
-                (name, f"{name}_%")).fetchall()
+                (target_aid, f"{name}_%")).fetchall()
         sessions = [{"id": r["session_id"], "messages": r["cnt"], "last": r["last"]} for r in rows]
         # 批量获取自定义会话名称
         sids = [s["id"] for s in sessions]
@@ -4398,30 +4424,34 @@ window.addEventListener('beforeunload', function() {{
     async def handle_get_messages(self, request):
         sid = request.match_info["sid"]
         if not self.core.memory: return web.json_response([])
-        limit = min(int(request.query.get("limit", 500)), 500)
-        offset = int(request.query.get("offset", 0))
-        entries = self.core.memory.get_conversation(sid, limit=limit + offset)
-        entries = entries[offset:]
-        # Filter out internal entries (LLM raw output only)
-        entries = [e for e in entries if (e.key or "") not in self._HIDDEN_KEYS]
-        result = []
-        for e in entries:
-            msg = {"role": e.role, "content": e.content, "time": e.created_at, "key": e.key or ""}
-            # [v1.16.17] 附加附件元数据
-            meta = e.metadata or {}
-            if meta.get("images"):
-                msg["images"] = meta["images"]
-            # [v1.23.19] 分离 _files 和 _media（前端用 msg._files 和 msg._media）
-            _raw_files = meta.get("files") or []
-            if _raw_files:
-                _file_items = [f for f in _raw_files if f.get("_type") != "media"]
-                _media_items = [f for f in _raw_files if f.get("_type") == "media"]
-                if _file_items:
-                    msg["_files"] = _file_items
-                if _media_items:
-                    msg["_media"] = _media_items
+        try:
+            limit = min(int(request.query.get("limit", 500)), 500)
+            offset = int(request.query.get("offset", 0))
+            entries = self.core.memory.get_conversation(sid, limit=limit + offset)
+            entries = entries[offset:]
+            # Filter out internal entries (LLM raw output only)
+            entries = [e for e in entries if (e.key or "") not in self._HIDDEN_KEYS]
+            result = []
+            for e in entries:
+                msg = {"role": e.role, "content": e.content, "time": e.created_at, "key": e.key or ""}
+                # [v1.16.17] 附加附件元数据
+                meta = e.metadata or {}
+                if meta.get("images"):
+                    msg["images"] = meta["images"]
+                # [v1.23.19] 分离 _files 和 _media（前端用 msg._files 和 msg._media）
+                _raw_files = meta.get("files") or []
+                if _raw_files:
+                    _file_items = [f for f in _raw_files if f.get("_type") != "media"]
+                    _media_items = [f for f in _raw_files if f.get("_type") == "media"]
+                    if _file_items:
+                        msg["_files"] = _file_items
+                    if _media_items:
+                        msg["_media"] = _media_items
             result.append(msg)
         return web.json_response(result)
+        except Exception as ex:
+            logger.error(f"加载会话消息失败 sid={sid}: {ex}")
+            return web.json_response({"error": f"加载消息失败: {str(ex)[:200]}"}, status=500)
 
     async def handle_get_raw_messages(self, request):
         """GET /api/sessions/{sid}/raw - 获取会话全部原始消息（含 llm_output 等）"""
@@ -4459,30 +4489,34 @@ window.addEventListener('beforeunload', function() {{
         if not sid:
             return web.json_response([])
         if not self.core.memory: return web.json_response([])
-        limit = min(int(request.query.get("limit", 500)), 500)
-        offset = int(request.query.get("offset", 0))
-        entries = self.core.memory.get_conversation(sid, limit=limit + offset)
-        entries = entries[offset:]
-        # Filter out internal entries (LLM raw output only)
-        entries = [e for e in entries if (e.key or "") not in self._HIDDEN_KEYS]
-        result = []
-        for e in entries:
-            msg = {"role": e.role, "content": e.content, "time": e.created_at, "key": e.key or ""}
-            # [v1.16.17] 附加附件元数据
-            meta = e.metadata or {}
-            if meta.get("images"):
-                msg["images"] = meta["images"]
-            # [v1.23.19] 分离 _files 和 _media（前端用 msg._files 和 msg._media）
-            _raw_files = meta.get("files") or []
-            if _raw_files:
-                _file_items = [f for f in _raw_files if f.get("_type") != "media"]
-                _media_items = [f for f in _raw_files if f.get("_type") == "media"]
-                if _file_items:
-                    msg["_files"] = _file_items
-                if _media_items:
-                    msg["_media"] = _media_items
-            result.append(msg)
-        return web.json_response(result)
+        try:
+            limit = min(int(request.query.get("limit", 500)), 500)
+            offset = int(request.query.get("offset", 0))
+            entries = self.core.memory.get_conversation(sid, limit=limit + offset)
+            entries = entries[offset:]
+            # Filter out internal entries (LLM raw output only)
+            entries = [e for e in entries if (e.key or "") not in self._HIDDEN_KEYS]
+            result = []
+            for e in entries:
+                msg = {"role": e.role, "content": e.content, "time": e.created_at, "key": e.key or ""}
+                # [v1.16.17] 附加附件元数据
+                meta = e.metadata or {}
+                if meta.get("images"):
+                    msg["images"] = meta["images"]
+                # [v1.23.19] 分离 _files 和 _media（前端用 msg._files 和 msg._media）
+                _raw_files = meta.get("files") or []
+                if _raw_files:
+                    _file_items = [f for f in _raw_files if f.get("_type") != "media"]
+                    _media_items = [f for f in _raw_files if f.get("_type") == "media"]
+                    if _file_items:
+                        msg["_files"] = _file_items
+                    if _media_items:
+                        msg["_media"] = _media_items
+                result.append(msg)
+            return web.json_response(result)
+        except Exception as ex:
+            logger.error(f"加载会话消息失败 sid={sid}: {ex}")
+            return web.json_response({"error": f"加载消息失败: {str(ex)[:200]}"}, status=500)
 
     def _cleanup_session_state(self, sid: str):
         """删除会话时清理所有关联的后端状态"""

package/web/ui/admin/admin-agents.js

@@ -557,8 +557,9 @@ function confirmDeleteAgent(path,name){
 }
 
 // 直接以执行模式打开与指定 Agent 的对话
+// [v1.27.2] 使用 a 参数（UrlCodec 编码），不再明文暴露 agent 路径
 function chatWithAgent(path){
-  window.location.href='/ui/chat/chat_container.html?agent='+encodeURIComponent(path)+'&mode=exec';
+  window.location.href='/ui/chat/chat_container.html?mode=exec&a='+UrlCodec.encode(path);
 }
 
 if (typeof window._adminRenderers === 'undefined') window._adminRenderers = {};

package/web/ui/admin/admin-core.js

@@ -7,6 +7,9 @@ let allAgentsCache=[];
 let allModelsCache=[];
 let allDeptsCache=[];
 
+// [v1.27.2] UrlCodec: 与 chat 页面共享的 URL 编解码（避免 agent/session 明文暴露）
+var UrlCodec=(function(){var _p='x';function _encode(str){if(!str)return'';try{var bytes=new TextEncoder().encode(str);var bin='';for(var i=0;i<bytes.length;i++)bin+=String.fromCharCode(bytes[i]);return _p+btoa(bin).replace(/=/g,'').replace(/\+/g,'-').replace(/\//g,'_')}catch(e){return str}}function _decode(encoded){if(!encoded||encoded[0]!==_p)return encoded;try{var b64=encoded.substring(1).replace(/-/g,'+').replace(/_/g,'/');while(b64.length%4)b64+='=';var bin=atob(b64);var bytes=new Uint8Array(bin.length);for(var i=0;i<bin.length;i++)bytes[i]=bin.charCodeAt(i);return new TextDecoder().decode(bytes)}catch(e){return encoded}}return{encode:_encode,decode:_decode}})();
+
 function esc(s){if(!s)return'';return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');}
 
 async function api(url,opts={}){

package/web/ui/admin/admin-sessions.js

@@ -7,7 +7,7 @@ async function renderSessions(){
   }
   let html='<div class="table-wrap"><table><tr><th>会话</th><th>Agent</th><th>消息数</th><th>最后活动</th><th>操作</th></tr>';
   for(const s of (ss||[])){
-    // [v1.25.7] 优先使用后端返回的 agent_id，不再从 session_id 猜测
+    // [v1.27.2] 优先使用后端返回的 agent_id（现在是 agent 名称），回退从前缀猜测
     let agentName=s.agent_id||'';
     if(!agentName){
       // 回退：从 session_id 前缀提取（兼容旧格式）
@@ -20,8 +20,9 @@ async function renderSessions(){
       }
     }
     const displayName=s.display_name||s.id;
+    const dbId=s.agent_db_id||1;
     html+=`<tr><td title="${escHtml(s.id)}">${escHtml(displayName.length>30?displayName.slice(0,30)+'...':displayName)}</td><td>${escHtml(agentName)}</td><td>${s.messages}</td><td>${s.last?.slice(0,19)||''}</td>
-      <td><button class="btn btn-sm" style="background:var(--success);color:#fff" onclick="enterSession('${escHtml(s.id)}','${escHtml(agentName)}')">切入</button>
+      <td><button class="btn btn-sm" style="background:var(--success);color:#fff" onclick="enterSession('${escHtml(s.id)}',${dbId})">切入</button>
       <button class="btn btn-sm btn-ghost" onclick="viewSession('${escHtml(s.id)}')">查看</button>
       <button class="btn btn-sm btn-danger" onclick="clearSession('${escHtml(s.id)}')">清除</button></td></tr>`;}
   html+='</table></div>';
@@ -86,7 +87,7 @@ async function _loadSessionMessages(){
   if(hasMore)html+=`<button class="btn btn-ghost mt-8" onclick="window._viewSessionOffset=${offset+100};_loadSessionMessages()">加载更多...</button>`;
   html+='<div class="flex gap-8 mt-8"><button class="btn btn-ghost" onclick="goBack()">返回</button>';
   html+=`<button class="btn" style="background:var(--accent);color:#fff" onclick="viewSessionRaw('${escHtml(sid)}')">Raw 原始消息</button>`;
-  html+=`<button class="btn btn-primary" onclick="enterSession('${escHtml(sid)}','${escHtml(sid.split('_web_')[0]||'default')}')">在聊天中查看完整记录</button></div>`;
+  html+=`<button class="btn btn-primary" onclick="enterSession('${escHtml(sid)}',1)">在聊天中查看完整记录</button></div>`;
   $('content').innerHTML=html;
 }
 // ========== Raw 原始消息查看 ==========
@@ -233,8 +234,9 @@ function _buildTimeNav(msgs){
 }
 async function clearSession(sid){await api(`/api/sessions/${encodeURIComponent(sid)}`,{method:'DELETE'});renderSessions()}
 // 切入会话: 打开聊天页面并自动加载指定会话
-function enterSession(sid,agentName){
-  window.location.href='/ui/chat/chat_container.html?agent='+encodeURIComponent(agentName)+'&mode=exec&session='+encodeURIComponent(sid);
+// [v1.27.2] 使用 aid（数字 agent ID）+ s（编码 session ID），不再暴露明文 agent 名字
+function enterSession(sid,agentDbId){
+  window.location.href='/ui/chat/chat_container.html?aid='+encodeURIComponent(agentDbId||1)+'&mode=exec&s='+UrlCodec.encode(sid);
 }
 
 if (typeof window._adminRenderers === 'undefined') window._adminRenderers = {};

package/web/ui/chat/chat_main.js

@@ -136,10 +136,12 @@ function popoutChat() {
   if (isMobile()) return;
   // Build URL with current agent + session + mode, plus popout flag
   // Note: chat_container.html is always at /ui/chat/chat_container.html
+  // [v1.27.2] 使用 aid + s，不再暴露明文 agent 名字
   const baseUrl = window.location.origin + '/ui/chat/chat_container.html';
   const params = new URLSearchParams();
-  if (state.activeAgent) params.set('agent', state.activeAgent);
-  if (state.activeSessionId && state.activeSessionId !== '__new__') params.set('session', state.activeSessionId);
+  var _popAgent = findAgentByPath(state.activeAgent);
+  if (_popAgent && _popAgent.aid) params.set('aid', _popAgent.aid);
+  if (state.activeSessionId && state.activeSessionId !== '__new__') params.set('s', UrlCodec.encode(state.activeSessionId));
   if (state.chatMode) params.set('mode', state.chatMode);
   params.set('popout', '1');
   const popoutUrl = baseUrl + '?' + params.toString();
@@ -373,9 +375,12 @@ async function initChat() {
   // [v1.16.12] 初始化附件上传 UI
   initAttachmentUI();
 
-  // URL 参数处理: ?a=xxx&mode=exec&s=xxx&g=xxx&popout=1（agent/session 使用 UrlCodec 编码）
+  // URL 参数处理: ?aid=数字ID&mode=exec&s=编码session&g=群聊ID&popout=1
+  // [v1.27.2] 使用 aid（数字 agent ID）代替明文 agent 名字
   const urlParams = new URLSearchParams(window.location.search);
-  const urlAgent = UrlCodec.decode(urlParams.get('a') || '') || UrlCodec.decode(urlParams.get('agent') || '');
+  const urlAid = parseInt(urlParams.get('aid') || '', 10) || 0;
+  // 兼容旧格式 ?a= 编码 或 ?agent= 明文
+  const urlAgentLegacy = UrlCodec.decode(urlParams.get('a') || '') || UrlCodec.decode(urlParams.get('agent') || '');
   const urlMode = urlParams.get('mode');
   const urlSession = UrlCodec.decode(urlParams.get('s') || '') || UrlCodec.decode(urlParams.get('session') || '');
   const isPopout = urlParams.get('popout') === '1';
@@ -463,25 +468,47 @@ async function initChat() {
   await loadAgents();
 
   // loadAgents 完成后，agent 列表和 sessions 已加载完毕
-  // 现在可以安全地做 agent/session 选择（不会再和 sendMessage 竞态）
+  // [v1.27.2] 构建 aid → path 映射表
+  var _aidToPath = {};
+  state.agentsFlat.forEach(function(a) {
+    if (a.aid) _aidToPath[a.aid] = a.path;
+  });
+  // 从 URL 解析 agent: 优先 aid（数字），兼容 a/agent（编码/明文）
+  var urlAgent = '';
+  if (urlAid && _aidToPath[urlAid]) {
+    urlAgent = _aidToPath[urlAid];
+  } else if (urlAgentLegacy) {
+    urlAgent = urlAgentLegacy;
+  }
+  // 清理 URL 中的旧格式参数（agent/a/session），统一使用 aid/s
+  try {
+    var _cleanUrl = new URL(window.location.href);
+    _cleanUrl.searchParams.delete('agent');
+    _cleanUrl.searchParams.delete('a');
+    _cleanUrl.searchParams.delete('session');
+    if (urlAgent && !urlAid) {
+      // 如果没有 aid 但有旧格式 agent，添加 aid
+      var _agentObj = findAgentByPath(urlAgent);
+      if (_agentObj && _agentObj.aid) _cleanUrl.searchParams.set('aid', _agentObj.aid);
+    }
+    window.history.replaceState({}, '', _cleanUrl.toString());
+  } catch (_) {}
+
   if (isPopout) {
     const agentObj = findAgentByPath(urlAgent);
     document.title = (agentObj ? agentObj.name : urlAgent || 'MyAgent') + ' - MyAgent';
   }
 
   // [v1.23.81] 群聊恢复逻辑：从 URL 的 ?g= 纯数字 session ID 恢复（优先级最高）
-  // 不再依赖 JS 状态传递（from_group），完全通过 URL session ID 恢复
-  state._pendingGroupRestore = null;  // 不再使用 localStorage 中的群聊状态
+  state._pendingGroupRestore = null;
 
   async function _restoreGroupBySession(sessionId) {
-    // 通过 API 将纯数字 session ID 解析为 group_id
     try {
       var resolveData = await api('/api/group-session/' + encodeURIComponent(sessionId));
       if (resolveData && resolveData.group_id) {
         if (typeof groups !== 'undefined' && groups.length > 0) {
           selectGroup(resolveData.group_id);
         } else {
-          // groups 尚未加载，等待后重试
           setTimeout(function() { _restoreGroupBySession(sessionId); }, 200);
         }
       } else {
@@ -494,14 +521,12 @@ async function initChat() {
 
   // 如果 URL 中有 ?g= 纯数字 session ID，优先恢复群聊
   if (_effectiveGroupSession && /^[0-9]+$/.test(_effectiveGroupSession)) {
-    // 群聊模式：如果有 from_agent 参数，更新 state.activeAgent 以便后续群聊私聊时使用
     if (urlAgent && urlAgent !== state.activeAgent) {
       state.activeAgent = urlAgent;
       StatePersistence.save('activeAgent', urlAgent);
     }
     _restoreGroupBySession(_effectiveGroupSession);
   } else if (urlAgent) {
-    // URL 指定了 agent，校验后切换
     var resolved = urlAgent;
     if (!findAgentByPath(resolved)) {
       console.warn('URL agent not found, fallback to default:', resolved);
@@ -2798,11 +2823,17 @@ function newChat() {
   state.activeSessionId = '__new__';
   state._selectedSessionLabel = null;  // [v1.18.9] 清除选中的会话名称
   // ── 更新 URL（新对话移除 session 参数） ──
+  // [v1.27.2] 使用 aid 代替 a
   try {
     const url = new URL(window.location.href);
     url.searchParams.delete('s');
     url.searchParams.delete('session');
-    url.searchParams.set('a', UrlCodec.encode(state.activeAgent || 'default'));
+    url.searchParams.delete('a');
+    url.searchParams.delete('agent');
+    var _ncAgentObj = findAgentByPath(state.activeAgent);
+    if (_ncAgentObj && _ncAgentObj.aid) {
+      url.searchParams.set('aid', _ncAgentObj.aid);
+    }
     window.history.replaceState({}, '', url.toString());
   } catch (_) {}
   state.messages = [];
@@ -2948,10 +2979,19 @@ async function selectSession(id) {
   state._msgLoadTotal = 0;
 
   // ── 更新 URL 参数，保留会话 ID（刷新页面可恢复会话） ──
+  // [v1.27.2] 使用 aid（数字）代替 a（编码），移除明文 agent/session 参数
   try {
     const url = new URL(window.location.href);
     url.searchParams.set('s', UrlCodec.encode(id));
-    url.searchParams.set('a', UrlCodec.encode(state.activeAgent || 'default'));
+    // 移除旧格式参数
+    url.searchParams.delete('a');
+    url.searchParams.delete('agent');
+    url.searchParams.delete('session');
+    // 设置 aid（数字 agent ID）
+    var _selAgentObj = findAgentByPath(state.activeAgent);
+    if (_selAgentObj && _selAgentObj.aid) {
+      url.searchParams.set('aid', _selAgentObj.aid);
+    }
     if (state.chatMode) url.searchParams.set('mode', state.chatMode);
     window.history.replaceState({}, '', url.toString());
   } catch (_) {}

package/web/ui/chat/flow_engine.js

@@ -1648,7 +1648,12 @@ async function sendMessage(opts) {
     try {
       const url = new URL(window.location.href);
       url.searchParams.set('s', UrlCodec.encode(sessionId));
-      url.searchParams.set('a', UrlCodec.encode(state.activeAgent || 'default'));
+      // [v1.27.2] 使用 aid 代替 a
+      url.searchParams.delete('a');
+      url.searchParams.delete('agent');
+      url.searchParams.delete('session');
+      var _feAgentObj = (typeof findAgentByPath === 'function') ? findAgentByPath(state.activeAgent) : null;
+      if (_feAgentObj && _feAgentObj.aid) url.searchParams.set('aid', _feAgentObj.aid);
       window.history.replaceState({}, '', url.toString());
     } catch (_) {}
   }
@@ -2874,7 +2879,12 @@ const StreamingRecovery = {
         try {
             const url = new URL(window.location.href);
             url.searchParams.set('s', UrlCodec.encode(sessionId));
-            url.searchParams.set('a', UrlCodec.encode(state.activeAgent || 'default'));
+            // [v1.27.2] 使用 aid 代替 a
+            url.searchParams.delete('a');
+            url.searchParams.delete('agent');
+            url.searchParams.delete('session');
+            var _rvAgentObj = (typeof findAgentByPath === 'function') ? findAgentByPath(state.activeAgent) : null;
+            if (_rvAgentObj && _rvAgentObj.aid) url.searchParams.set('aid', _rvAgentObj.aid);
             window.history.replaceState({}, '', url.toString());
         } catch (e) {
             console.error('[Recovery] 更新URL失败:', e);