oasis_test 0.1.95 → 0.1.96

package/dist/index.js

@@ -2516,6 +2516,100 @@ var init_runtime = __esm({
   }
 });
 
+// ../contract/src/parse-extra-args.ts
+function parseExtraArgs(input) {
+  const out = [];
+  const n = input.length;
+  let buf = "";
+  let hasToken = false;
+  let i = 0;
+  while (i < n) {
+    const c = input[i];
+    if (isSpace(c)) {
+      if (hasToken) {
+        out.push(buf);
+        buf = "";
+        hasToken = false;
+      }
+      i++;
+      continue;
+    }
+    if (c === "'") {
+      hasToken = true;
+      const start = i;
+      i++;
+      while (i < n && input[i] !== "'") {
+        buf += input[i];
+        i++;
+      }
+      if (i >= n) throw new BadExtraArgsError(`\u672A\u95ED\u5408\u7684\u5355\u5F15\u53F7\uFF08\u8D77\u4E8E\u7B2C ${start + 1} \u5217\uFF09`, start + 1);
+      i++;
+      continue;
+    }
+    if (c === '"') {
+      hasToken = true;
+      const start = i;
+      i++;
+      while (i < n && input[i] !== '"') {
+        if (input[i] === "\\") {
+          const next = input[i + 1];
+          if (next === void 0) throw new BadExtraArgsError(`\u53CC\u5F15\u53F7\u5185\u60AC\u7A7A\u53CD\u659C\u6760\uFF08\u7B2C ${i + 1} \u5217\uFF09`, i + 1);
+          if (next === "\\" || next === '"' || next === "$" || next === "`") {
+            buf += next;
+          } else {
+            buf += "\\" + next;
+          }
+          i += 2;
+        } else {
+          buf += input[i];
+          i++;
+        }
+      }
+      if (i >= n) throw new BadExtraArgsError(`\u672A\u95ED\u5408\u7684\u53CC\u5F15\u53F7\uFF08\u8D77\u4E8E\u7B2C ${start + 1} \u5217\uFF09`, start + 1);
+      i++;
+      continue;
+    }
+    if (c === "\\") {
+      const next = input[i + 1];
+      if (next === void 0) throw new BadExtraArgsError(`\u60AC\u7A7A\u53CD\u659C\u6760\uFF08\u7B2C ${i + 1} \u5217\uFF09`, i + 1);
+      hasToken = true;
+      buf += next;
+      i += 2;
+      continue;
+    }
+    hasToken = true;
+    buf += c;
+    i++;
+  }
+  if (hasToken) out.push(buf);
+  return out;
+}
+function normalizeExtraArgs(input) {
+  if (input === void 0) return void 0;
+  if (typeof input === "string") return parseExtraArgs(input);
+  if (!Array.isArray(input) || input.some((x2) => typeof x2 !== "string")) {
+    throw new BadExtraArgsError("extraArgs \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6216\u5B57\u7B26\u4E32\u6570\u7EC4", 0);
+  }
+  return [...input];
+}
+var ERR_BAD_EXTRA_ARGS, BadExtraArgsError, isSpace;
+var init_parse_extra_args = __esm({
+  "../contract/src/parse-extra-args.ts"() {
+    "use strict";
+    ERR_BAD_EXTRA_ARGS = "ERR_BAD_EXTRA_ARGS";
+    BadExtraArgsError = class extends Error {
+      /** @param column 1-based 列位（供 API 400 / CLI 报错定位） */
+      constructor(message, column) {
+        super(message);
+        this.column = column;
+      }
+      name = "BadExtraArgsError";
+      code = ERR_BAD_EXTRA_ARGS;
+    };
+    isSpace = (c) => c === " " || c === "	" || c === "\n" || c === "\r" || c === "\v" || c === "\f";
+  }
+});
+
 // ../contract/src/daemon-protocol.ts
 var init_daemon_protocol = __esm({
   "../contract/src/daemon-protocol.ts"() {
@@ -2685,6 +2779,7 @@ var init_src = __esm({
     init_storage();
     init_avatar();
     init_runtime();
+    init_parse_extra_args();
     init_daemon_protocol();
     init_registry();
     init_credential_ref();
@@ -7426,6 +7521,7 @@ var init_dispatcher = __esm({
           ...spec.part !== void 0 ? { OASIS_PART: spec.part } : {}
         };
         const resolvedModel3 = this.opts.resolveModel ? await this.opts.resolveModel(dispatchSpec.actor) : void 0;
+        const resolvedExtraArgs = this.opts.resolveExtraArgs ? await this.opts.resolveExtraArgs(dispatchSpec.actor) : void 0;
         this.assertSpawnAttemptCurrent(jobKey, attempt);
         const freshWorkdir = workdirKey !== void 0 && !priorConsistent;
         const job = {
@@ -7438,6 +7534,7 @@ var init_dispatcher = __esm({
           server: { url: serverUrl },
           limits,
           ...resolvedModel3 ? { model: resolvedModel3 } : {},
+          ...resolvedExtraArgs && resolvedExtraArgs.length > 0 ? { extraArgs: resolvedExtraArgs } : {},
           ...binding !== void 0 ? { binding } : {},
           ...runtimeSessionId !== void 0 ? { runtimeSessionId } : {},
           ...workdirKey !== void 0 ? { workdirKey } : {},
@@ -145408,6 +145505,52 @@ var init_transcript = __esm({
   }
 });
 
+// ../adapters/src/_core/filter-extra-args.ts
+function filterBlockedFlags(args, blocked, onFiltered) {
+  if (!blocked || blocked.size === 0) return [...args];
+  const out = [];
+  for (let i = 0; i < args.length; i++) {
+    const tok = args[i];
+    const eq = tok.startsWith("-") ? tok.indexOf("=") : -1;
+    const name = eq >= 0 ? tok.slice(0, eq) : tok;
+    const kind = blocked.get(name);
+    if (kind !== void 0) {
+      onFiltered?.(name);
+      if (kind === "value" && eq < 0) i++;
+      continue;
+    }
+    out.push(tok);
+  }
+  return out;
+}
+function prepareExtraArgs(jobExtra, staticExtra, blocked, tel) {
+  const merged = [...jobExtra ?? [], ...staticExtra ?? []];
+  if (merged.length === 0) return [];
+  const filtered = [];
+  const kept = filterBlockedFlags(merged, blocked, (f2) => filtered.push(f2));
+  if (filtered.length > 0) {
+    console.warn(`[adapter:${tel.runtime}] ` + JSON.stringify({
+      event: "extra_args_filtered",
+      actor: tel.actor,
+      runtime: tel.runtime,
+      dispatchId: tel.dispatchId,
+      filtered
+    }));
+  }
+  console.debug(`[adapter:${tel.runtime}] ` + JSON.stringify({
+    event: "spawn_argv_prepared",
+    runtime: tel.runtime,
+    argv_lengths: { extra: merged.length, filtered: kept.length },
+    extra_flags_kept: kept.filter((t) => t.startsWith("-"))
+  }));
+  return kept;
+}
+var init_filter_extra_args = __esm({
+  "../adapters/src/_core/filter-extra-args.ts"() {
+    "use strict";
+  }
+});
+
 // ../adapters/src/claude-code/index.ts
 function normalizeClaudeStreamLine(line) {
   let parsed;
@@ -145584,7 +145727,7 @@ function classifyExit(result) {
   if (status === 429 || status === 529) return "rate-limit";
   return "error";
 }
-var import_node_child_process8, import_node_crypto12, fs9, path7, readline, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
+var import_node_child_process8, import_node_crypto12, fs9, path7, readline, CLAUDE_BLOCKED_FLAGS, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
 var init_claude_code = __esm({
   "../adapters/src/claude-code/index.ts"() {
     "use strict";
@@ -145598,6 +145741,33 @@ var init_claude_code = __esm({
     init_resume_classify();
     init_session_paths();
     init_transcript();
+    init_filter_extra_args();
+    CLAUDE_BLOCKED_FLAGS = /* @__PURE__ */ new Map([
+      ["-p", "value"],
+      // 本 adapter 用 `-p <prompt>` 驱动 CLI；覆盖会替掉真正的 prompt
+      ["--print", "value"],
+      // 同 -p
+      ["--output-format", "value"],
+      // 遥测链依赖 stream-json；覆盖会让 dispatcher/telemetry 读不到事件
+      ["--input-format", "value"],
+      // 与 append-mode 强绑；覆盖会破坏 stream-json 输入
+      ["--permission-mode", "value"],
+      // adapter 强制 bypassPermissions（一次性会话协议前置）
+      ["--mcp-config", "value"],
+      // 会替换 adapter 注入的 MCP 配置目录，agent 认不到工具
+      ["--append-system-prompt", "value"],
+      // 已由 job.systemPrompt 走同一 flag 注入；重复不确定谁生效
+      ["--model", "value"],
+      // 已由 job.model 走同一 flag 注入；同上
+      ["--session-id", "value"],
+      // adapter 自己按 runtimeSessionId 决定续跑（ADR-0053/0060）
+      ["--resume", "value"],
+      // 同上
+      ["--verbose", "boolean"],
+      // 与 --output-format stream-json 配对；单独无意义、成对是重复
+      ["--include-partial-messages", "boolean"]
+      // 同上
+    ]);
     ONE_SHOT_UNSAFE_TOOLS = ["ScheduleWakeup", "CronCreate", "CronDelete", "CronList"];
     ClaudeCodeAdapter = class {
       constructor(opts = {}) {
@@ -145682,7 +145852,14 @@ var init_claude_code = __esm({
           // ADR-0093：stream-json 输入模式——让 claude 逐条从 stdin 读 user 消息（支持多轮追加）。
           ...appendMode ? ["--input-format", "stream-json"] : [],
           ...job.model ?? this.opts.model ? ["--model", job.model ?? this.opts.model] : [],
-          ...this.opts.extraArgs ?? []
+          // ADR「agent CLI 启动参数员工级可配置化」：员工配置 job.extraArgs（在前）+ opts.extraArgs（静态默认，在后），
+          // 过 CLAUDE_BLOCKED_FLAGS 拦截打破协议契约的 flag（剔除 + warn），追加到 argv 末尾。
+          ...prepareExtraArgs(
+            job.extraArgs,
+            this.opts.extraArgs,
+            CLAUDE_BLOCKED_FLAGS,
+            { runtime: "claude-code", actor: job.actor, ...job.dispatchId ? { dispatchId: job.dispatchId } : {} }
+          )
         ];
         const otelEnv = this.resolveOtelEnv(job, id);
         const child = (0, import_node_child_process8.spawn)(this.opts.claudeBin ?? "claude", args, {
@@ -146996,7 +147173,7 @@ function normalizeCodexConsoleLine(line, state = createCodexNormalizeState()) {
   tool.output.push(line);
   return [];
 }
-var import_node_child_process10, import_node_crypto13, fs10, os4, path9, readline2, CODEX_ARGV_PROMPT_MAX_BYTES, CodexAdapter;
+var import_node_child_process10, import_node_crypto13, fs10, os4, path9, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CodexAdapter;
 var init_codex = __esm({
   "../adapters/src/codex/index.ts"() {
     "use strict";
@@ -147012,6 +147189,25 @@ var init_codex = __esm({
     init_session_paths();
     init_claude_code();
     init_transcript();
+    init_filter_extra_args();
+    CODEX_BLOCKED_FLAGS = /* @__PURE__ */ new Map([
+      ["exec", "boolean"],
+      // adapter argv 首 token 已是 exec；重复成非法子命令
+      ["-C", "value"],
+      // adapter 用 -C <dir> 指定 cwd；覆盖会把 cwd 换成任意路径
+      ["--json", "boolean"],
+      // 遥测链前置
+      ["--dangerously-bypass-approvals-and-sandbox", "boolean"],
+      // 权限模式前置（重复无害但语义混乱）
+      ["--skip-git-repo-check", "boolean"],
+      // 会话前置
+      ["--model", "value"],
+      // 由 job.model 走同一 flag 注入
+      ["resume", "value"],
+      // 位置参数，续会话通过 job.runtimeSessionId 走同 flag 注入
+      ["--listen", "value"]
+      // Multica 实证：codex --listen stdio:// 是 daemon↔CLI 传输协议；改会断链
+    ]);
     CODEX_ARGV_PROMPT_MAX_BYTES = 1e5;
     CodexAdapter = class {
       constructor(opts = {}) {
@@ -147076,7 +147272,14 @@ var init_codex = __esm({
           // 打开 reasoning 摘要通道：默认 auto，让 codex 产出 reasoning item（→ thought → 前端思考块）。
           ...this.opts.reasoningSummary !== "none" ? ["-c", `model_reasoning_summary=${this.opts.reasoningSummary ?? "auto"}`] : [],
           ...this.opts.reasoningEffort ? ["-c", `model_reasoning_effort=${this.opts.reasoningEffort}`] : [],
-          ...this.opts.extraArgs ?? [],
+          // ADR「agent CLI 启动参数员工级可配置化」：员工配置 job.extraArgs（在前）+ opts.extraArgs（静态默认，在后），
+          // 过 CODEX_BLOCKED_FLAGS 拦截。追加在**位置 prompt 之前**（codex exec 的 [PROMPT] 必须是末位参数）。
+          ...prepareExtraArgs(
+            job.extraArgs,
+            this.opts.extraArgs,
+            CODEX_BLOCKED_FLAGS,
+            { runtime: "codex", actor: job.actor, ...job.dispatchId ? { dispatchId: job.dispatchId } : {} }
+          ),
           promptViaStdin ? "-" : prompt
         ];
         const child = (0, import_node_child_process10.spawn)(this.opts.codexBin ?? "codex", args, {
@@ -147808,7 +148011,12 @@ async function runACPSession(job, cfg) {
     });
   }
   const task = materializeBundle(dir, job.bundle);
-  const child = (0, import_node_child_process11.spawn)(cfg.bin, [...cfg.args ?? [], ...cfg.extraArgs ?? []], {
+  const child = (0, import_node_child_process11.spawn)(cfg.bin, [...cfg.args ?? [], ...prepareExtraArgs(
+    job.extraArgs,
+    cfg.extraArgs,
+    cfg.blockedFlags,
+    { runtime: cfg.runtimeKind ?? "acp", actor: job.actor, ...job.dispatchId ? { dispatchId: job.dispatchId } : {} }
+  )], {
     cwd: dir,
     env: {
       ...scrubLeakyEnv(process.env),
@@ -148096,6 +148304,7 @@ var init_acp = __esm({
     init_usage();
     init_pricing();
     init_transcript();
+    init_filter_extra_args();
     ACPClient = class {
       constructor(write, onOutput, onTelemetry, onStop, acceptNotification = () => true, finalUsageIsAuthoritative = false) {
         this.write = write;
@@ -148516,7 +148725,12 @@ function makeFinish(id, cfg, transcriptRefPtr, transcriptOut, dir, workdirKey, e
 }
 async function runStreamJson(job, cfg) {
   const { id, dir, task: _task } = await materialize(job, cfg);
-  const args = [...cfg.buildArgs(job, dir), ...cfg.extraArgs ?? []];
+  const args = [...cfg.buildArgs(job, dir), ...prepareExtraArgs(
+    job.extraArgs,
+    cfg.extraArgs,
+    cfg.blockedFlags,
+    { runtime: cfg.runtimeKind ?? "subprocess", actor: job.actor, ...job.dispatchId ? { dispatchId: job.dispatchId } : {} }
+  )];
   const child = (0, import_node_child_process12.spawn)(cfg.bin, args, {
     cwd: dir,
     env: buildEnv(job, cfg.env),
@@ -148593,7 +148807,12 @@ async function runStreamJson(job, cfg) {
 }
 async function runOneShotText(job, cfg) {
   const { id, dir } = await materialize(job, cfg);
-  const args = [...cfg.buildArgs(job, dir), ...cfg.extraArgs ?? []];
+  const args = [...cfg.buildArgs(job, dir), ...prepareExtraArgs(
+    job.extraArgs,
+    cfg.extraArgs,
+    cfg.blockedFlags,
+    { runtime: cfg.runtimeKind ?? "subprocess", actor: job.actor, ...job.dispatchId ? { dispatchId: job.dispatchId } : {} }
+  )];
   const child = (0, import_node_child_process12.spawn)(cfg.bin, args, {
     cwd: dir,
     env: buildEnv(job, cfg.env),
@@ -148672,6 +148891,7 @@ var init_subprocess = __esm({
     init_sync_skills();
     init_session_paths();
     init_transcript();
+    init_filter_extra_args();
   }
 });
 
@@ -160651,6 +160871,7 @@ var init_service4 = __esm({
           connectorIds: patch.connectorIds ?? latest?.connectorIds ?? [],
           maxConcurrent: patch.maxConcurrent ?? latest?.maxConcurrent ?? 4,
           batchedContinuation: patch.batchedContinuation ?? latest?.batchedContinuation ?? false,
+          extraArgs: patch.extraArgs ?? latest?.extraArgs ?? [],
           createdBy: by,
           createdAt: this.now(),
           source: "patch"
@@ -160677,6 +160898,7 @@ var init_service4 = __esm({
           connectorIds: [...target.connectorIds],
           maxConcurrent: target.maxConcurrent,
           batchedContinuation: target.batchedContinuation ?? false,
+          extraArgs: [...target.extraArgs ?? []],
           createdBy: by,
           createdAt: this.now(),
           source: "rollback",
@@ -161325,7 +161547,7 @@ ${input.description}
     };
     mask = (plain) => plain.length <= 4 ? "\u2022\u2022\u2022\u2022" : `${"\u2022".repeat(4)}${plain.slice(-4)}`;
     changedKeys = (prev, next) => {
-      if (!prev) return ["prompt", "model", "skills", "connectorIds", "maxConcurrent", "batchedContinuation"];
+      if (!prev) return ["prompt", "model", "skills", "connectorIds", "maxConcurrent", "batchedContinuation", "extraArgs"];
       const keys = [];
       if (prev.prompt !== next.prompt) keys.push("prompt");
       if (prev.model !== next.model) keys.push("model");
@@ -161333,6 +161555,7 @@ ${input.description}
       if (JSON.stringify(prev.connectorIds) !== JSON.stringify(next.connectorIds)) keys.push("connectorIds");
       if ((prev.batchedContinuation ?? false) !== (next.batchedContinuation ?? false)) keys.push("batchedContinuation");
       if (prev.maxConcurrent !== next.maxConcurrent) keys.push("maxConcurrent");
+      if (JSON.stringify(prev.extraArgs ?? []) !== JSON.stringify(next.extraArgs ?? [])) keys.push("extraArgs");
       return keys;
     };
   }
@@ -162602,6 +162825,19 @@ function actorsDomain(opts) {
       checkStringArray("skills");
       checkStringArray("connectorIds");
       checkBoolean("batchedContinuation");
+      const rawExtra = b2.extraArgs;
+      if (rawExtra !== void 0 && typeof rawExtra !== "string" && !(Array.isArray(rawExtra) && rawExtra.every((x2) => typeof x2 === "string"))) {
+        throw new ApiError(400, "BAD_REQUEST", "extraArgs \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6216\u5B57\u7B26\u4E32\u6570\u7EC4");
+      }
+      let extraArgs;
+      try {
+        extraArgs = normalizeExtraArgs(rawExtra);
+      } catch (e) {
+        if (e instanceof BadExtraArgsError) {
+          throw new ApiError(400, "ERR_BAD_EXTRA_ARGS", `extraArgs \u89E3\u6790\u5931\u8D25\uFF08\u7B2C ${e.column} \u5217\uFF09\uFF1A${e.message}`);
+        }
+        throw e;
+      }
       const cfg = await service.patchConfig(
         req.params.id,
         {
@@ -162610,7 +162846,8 @@ function actorsDomain(opts) {
           ...b2.skills !== void 0 ? { skills: b2.skills } : {},
           ...b2.connectorIds !== void 0 ? { connectorIds: b2.connectorIds } : {},
           ...typeof b2.maxConcurrent === "number" ? { maxConcurrent: b2.maxConcurrent } : {},
-          ...b2.batchedContinuation !== void 0 ? { batchedContinuation: b2.batchedContinuation } : {}
+          ...b2.batchedContinuation !== void 0 ? { batchedContinuation: b2.batchedContinuation } : {},
+          ...extraArgs !== void 0 ? { extraArgs } : {}
         },
         req.auth.actor
       );
@@ -179454,6 +179691,8 @@ var init_postgres_registry = __esm({
         reviewer_ids      jsonb NOT NULL DEFAULT '[]'::jsonb,
         max_concurrent    integer NOT NULL DEFAULT 4,
         batched_continuation boolean NOT NULL DEFAULT false,
+        -- ADR\u300Cagent CLI \u542F\u52A8\u53C2\u6570\u5458\u5DE5\u7EA7\u53EF\u914D\u7F6E\u5316\u300D\uFF1A\u6BCF\u6B21\u6D3E\u53D1\u8FFD\u52A0\u5230\u5E95\u5C42 CLI argv \u7684\u542F\u52A8\u53C2\u6570\uFF08\u5DF2\u5207\u597D\u7684 string[]\uFF09\u3002
+        extra_args        jsonb NOT NULL DEFAULT '[]'::jsonb,
         -- memory_enabled \u5217\u4FDD\u7559\uFF082026-08-10 \u65E9\u5148\u7248\u672C\u5199\u8FC7\uFF09\u4F46\u4E0D\u518D\u8BFB\u5199\uFF1A\u8BB0\u5FC6\u5F00\u5173\u5DF2\u632A\u5230
         -- agent_prefs\uFF08\u72EC\u7ACB\u8BBE\u7F6E\uFF0C\u4E0D\u8FDB\u7248\u672C\u94FE\uFF09\u3002\u4E0E reviewer_ids \u540C\u89C4\u683C\u7684\u6B7B\u5217\u3002
         memory_enabled    boolean NOT NULL DEFAULT true,
@@ -179466,6 +179705,7 @@ var init_postgres_registry = __esm({
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS max_concurrent integer NOT NULL DEFAULT 4`);
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS reviewer_ids jsonb NOT NULL DEFAULT '[]'::jsonb`);
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS batched_continuation boolean NOT NULL DEFAULT false`);
+        await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS extra_args jsonb NOT NULL DEFAULT '[]'::jsonb`);
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS memory_enabled boolean NOT NULL DEFAULT true`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".agent_prefs (
@@ -179706,8 +179946,8 @@ var init_postgres_registry = __esm({
         const r = await this.pool.query(
           // reviewer_ids 列保留（历史数据）但不再写入——决策 0029 删了 actor 级 reviewer override；列有 DEFAULT '[]' 自动填。
           `INSERT INTO ${this.s}.actor_configs
-         (actor_id, version, prompt, model, skills, connector_ids, max_concurrent, batched_continuation, created_by, created_at, source, rolled_back_from)
-       SELECT $1,$2::int,$3,$4,$5::jsonb,$6::jsonb,$7::int,$8::boolean,$9,$10,$11,$12
+         (actor_id, version, prompt, model, skills, connector_ids, max_concurrent, batched_continuation, extra_args, created_by, created_at, source, rolled_back_from)
+       SELECT $1,$2::int,$3,$4,$5::jsonb,$6::jsonb,$7::int,$8::boolean,$9::jsonb,$10,$11,$12,$13
        WHERE (SELECT COALESCE(MAX(version), 0) + 1 FROM ${this.s}.actor_configs WHERE actor_id = $1) = $2::int`,
           [
             c.actorId,
@@ -179718,6 +179958,7 @@ var init_postgres_registry = __esm({
             JSON.stringify(c.connectorIds),
             c.maxConcurrent,
             c.batchedContinuation ?? false,
+            JSON.stringify(c.extraArgs ?? []),
             c.createdBy,
             c.createdAt,
             c.source,
@@ -180129,6 +180370,7 @@ var init_postgres_registry = __esm({
       connectorIds: row.connector_ids,
       maxConcurrent: row.max_concurrent ?? 4,
       batchedContinuation: row.batched_continuation ?? false,
+      extraArgs: row.extra_args ?? [],
       // 注意：memory_enabled 是死列，不映射进 ActorConfig——记忆开关在 agent_prefs。
       createdBy: row.created_by,
       createdAt: new Date(row.created_at).toISOString(),
@@ -187248,6 +187490,13 @@ async function startServe(opts) {
           }
           return candidate;
         },
+        // ADR「agent CLI 启动参数员工级可配置化」：每次派发解析员工 actor_configs.extraArgs 下发（形态同 resolveModel）。
+        // 只读员工配置，不叠 runtime 默认、不做「没有员工就找 runtime」回退（ADR §3.3 / §4-A）。
+        resolveExtraArgs: async (actorId) => {
+          const actors2 = await runActors();
+          const cfg = await actors2.service.latestConfig(actorId);
+          return cfg?.extraArgs && cfg.extraArgs.length > 0 ? cfg.extraArgs : void 0;
+        },
         ...opts.backoff !== void 0 ? { backoff: opts.backoff } : {},
         ...opts.maxConcurrentProduce !== void 0 ? { maxConcurrentProduce: opts.maxConcurrentProduce } : {},
         // 每 agent 并发产出上限默认 5（工单数 / 全局总量默认不限）；--max-produce-per-agent N 覆盖。
@@ -189567,12 +189816,21 @@ var COMMAND_DECLS = {
     examples: ["oasis actors --role dev", "oasis actors --kind agent"]
   },
   actor: {
-    usage: "oasis actor <actorId>",
-    description: "\u8FD9\u4E2A id \u5230\u5E95\u662F\u8C01\u2014\u2014\u5355\u4EBA\u5B8C\u6574\u6863\u6848\uFF08\u59D3\u540D/\u5C97\u4F4D/\u56E2\u961F/\u6C47\u62A5/\u80FD\u529B\u4ECB\u7ECD/\u64C5\u957F/\u90AE\u7BB1/\u72B6\u6001\uFF09\u3002",
+    usage: "oasis actor <actorId>  |  oasis actor config <actorId> [--show | --extra-args-json '[...]']\uFF08\u4E00\u884C\u6587\u672C\u4ECE stdin \u8BFB\uFF09",
+    description: "\u8FD9\u4E2A id \u5230\u5E95\u662F\u8C01\u2014\u2014\u5355\u4EBA\u5B8C\u6574\u6863\u6848\uFF08\u59D3\u540D/\u5C97\u4F4D/\u56E2\u961F/\u6C47\u62A5/\u80FD\u529B\u4ECB\u7ECD/\u64C5\u957F/\u90AE\u7BB1/\u72B6\u6001\uFF09\u3002\u5B50\u547D\u4EE4 `config` \u8BFB/\u5199\u5458\u5DE5\u7684 extraArgs\uFF08\u5E95\u5C42 CLI \u542F\u52A8\u53C2\u6570\uFF0C\u6BCF\u6B21\u6D3E\u53D1\u8FFD\u52A0\u5230 argv\uFF1B\u4EC5\u4EBA\u7C7B operator token \u53EF\u5199\uFF09\u3002",
     positional: [
-      { name: "<actorId>", required: true, desc: "\u89D2\u8272 id" }
+      { name: "<actorId>", required: true, desc: "\u89D2\u8272 id\uFF08\u5199 extraArgs \u65F6\u662F `config` \u540E\u7684\u90A3\u4E2A id\uFF09" }
+    ],
+    flags: [
+      { name: "show", boolean: true, desc: "config \u5B50\u547D\u4EE4\uFF1A\u53EA\u663E\u793A\u5F53\u524D extraArgs\uFF0C\u4E0D\u5199\u5165" },
+      { name: "extra-args-json", desc: "config \u5B50\u547D\u4EE4\uFF1AJSON \u5B57\u7B26\u4E32\u6570\u7EC4\uFF0C\u76F4\u63A5\u843D\u5E93\uFF08\u5DF2\u81EA\u5207\uFF09\u3002\u4E0D\u7ED9\u5219\u4ECE stdin \u8BFB\u4E00\u884C\u6587\u672C\u3001\u670D\u52A1\u7AEF shell-words \u5207\u5206" }
     ],
-    examples: ["oasis actor agent-dev-001"]
+    examples: [
+      "oasis actor agent-dev-001",
+      "oasis actor config agent-dev-001 --show",
+      "printf %s '--disallowedTools WebSearch,AskUserQuestion --effort max' | oasis actor config agent-dev-001",
+      `oasis actor config agent-dev-001 --extra-args-json '["--disallowedTools","WebSearch,AskUserQuestion"]'`
+    ]
   },
   roles: {
     usage: "oasis roles",
@@ -192462,6 +192720,57 @@ ${res.warning}`);
     // 员工」而非 500。命令签名与 status <id> / content <id> 同形（位置参数，不用 --id）；不加 --company（公司
     // 由 token 定死，加了服务端也会忽略 = 假承诺）。每字段一行、人话标签、id 完整不截断。
     case "actor": {
+      if (positional[0] === "config") {
+        const actorId = needPos(
+          positional,
+          1,
+          "oasis actor config <actorId> [--show | --extra-args-json '[...]']\uFF08\u4E00\u884C\u6587\u672C\u4ECE stdin \u8BFB\uFF09"
+        );
+        const cfgPath = `/api/actors/${encodeURIComponent(actorId)}/config`;
+        const forbiddenWrite = (e) => e instanceof ApiRequestError && e.status === 403 ? new Error("\u5199\u5458\u5DE5\u914D\u7F6E\u4EC5\u9650\u4EBA\u7C7B\u63A7\u5236\u53F0\u7528\u6237\uFF08operator token\uFF09\u3002") : void 0;
+        const jsonFlag = flags.get("extra-args-json");
+        const stdinRaw = jsonFlag === void 0 ? await readStdin() : "";
+        const wantWrite = jsonFlag !== void 0 || stdinRaw.length > 0;
+        if (flags.get("show") === "true" || !wantWrite) {
+          let cfg2 = null;
+          try {
+            cfg2 = await api.request("GET", cfgPath);
+          } catch (e) {
+            if (e instanceof ApiRequestError && e.status === 404) {
+              println("\u8BE5\u5458\u5DE5\u8FD8\u6CA1\u6709\u914D\u7F6E\u7248\u672C");
+              break;
+            }
+            throw e;
+          }
+          const ea2 = cfg2?.extraArgs ?? [];
+          println(`extraArgs: ${ea2.length ? ea2.join(" ") : "(\u7A7A)"}`);
+          break;
+        }
+        let body;
+        if (jsonFlag !== void 0) {
+          let parsed;
+          try {
+            parsed = JSON.parse(jsonFlag);
+          } catch {
+            throw new Error("--extra-args-json \u4E0D\u662F\u5408\u6CD5 JSON");
+          }
+          if (!Array.isArray(parsed) || parsed.some((x2) => typeof x2 !== "string")) {
+            throw new Error(`--extra-args-json \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6570\u7EC4\uFF0C\u5982 '["--disallowedTools","A,B"]'`);
+          }
+          body = { extraArgs: parsed };
+        } else {
+          body = { extraArgs: stdinRaw };
+        }
+        let cfg;
+        try {
+          cfg = await api.request("POST", cfgPath, body);
+        } catch (e) {
+          throw forbiddenWrite(e) ?? e;
+        }
+        const ea = cfg.extraArgs ?? [];
+        println(`\u5DF2\u5199\u5165\u914D\u7F6E v${cfg.version}\uFF1AextraArgs = ${ea.length ? ea.join(" ") : "(\u7A7A)"}`);
+        break;
+      }
       const id = needPos(positional, 0, "oasis actor <actorId>");
       const a = await api.request("GET", `/api/actors/${encodeURIComponent(id)}`);
       println(`id\uFF1A${a.id}`);
@@ -192984,7 +193293,7 @@ function syncRuntimeAssets(candidateRoots, binDir) {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "0.1.95" : "dev";
+var PKG_VERSION = true ? "0.1.96" : "dev";
 var OASIS_DIR = path29.join(os10.homedir(), ".oasis");
 var CONFIG_FILE = path29.join(OASIS_DIR, "node-config.json");
 var PID_FILE = path29.join(OASIS_DIR, "node.pid");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oasis_test",
-  "version": "0.1.95",
+  "version": "0.1.96",
   "description": "Oasis node daemon + CLI — background daemon, auto-start, full server CLI",
   "bin": {
     "oasis": "./dist/index.js"