@kenhkl/agent-moss 0.11.0 → 0.11.3

package/dist/cli.js

@@ -43,6 +43,90 @@ var init_esm_shims = __esm({
   }
 });
 
+// src/infra/paths.ts
+import { join } from "path";
+import { homedir } from "os";
+import { readFileSync } from "fs";
+function isRoot() {
+  const getuid = process.getuid;
+  return typeof getuid === "function" && getuid() === 0;
+}
+function resolveOwnerHome() {
+  for (const name of [process.env.SUDO_USER, process.env.LOGNAME, process.env.USER]) {
+    if (name && name !== "root" && name !== "") {
+      const home = homeOf(name);
+      if (home) return home;
+    }
+  }
+  try {
+    const passwd = readFileSync("/etc/passwd", "utf-8");
+    for (const line of passwd.split("\n")) {
+      if (!line || line.startsWith("#")) continue;
+      const parts = line.split(":");
+      if (parts.length < 6) continue;
+      const uid = parseInt(parts[2], 10);
+      const name = parts[0];
+      if (uid >= 1e3 && name && !name.startsWith("_")) {
+        return parts[5];
+      }
+    }
+  } catch {
+  }
+  return null;
+}
+function homeOf(name) {
+  try {
+    const passwd = readFileSync("/etc/passwd", "utf-8");
+    for (const line of passwd.split("\n")) {
+      if (!line || line.startsWith("#")) continue;
+      const parts = line.split(":");
+      if (parts.length >= 6 && parts[0] === name) {
+        return parts[5];
+      }
+    }
+  } catch {
+  }
+  return null;
+}
+function getDataRoot() {
+  const envPath = process.env[ENV_DATA_ROOT];
+  if (envPath) return envPath;
+  if (isRoot()) {
+    const ownerHome = resolveOwnerHome();
+    if (ownerHome) {
+      return join(ownerHome, ".config", "agentmoss");
+    }
+  }
+  return DEFAULT_DATA_ROOT;
+}
+function getInstance() {
+  const v = process.env[ENV_INSTANCE] || "";
+  return v.trim().replace(/^[/\\]+|[/\\]+$/g, "");
+}
+function getConfigDir() {
+  return getDataRoot();
+}
+function getRuntimeConfigDir() {
+  return getDataRoot();
+}
+function getTokenStatsPath() {
+  const instance = getInstance();
+  if (instance) {
+    return join(getDataRoot(), instance, "agent_moss_token_stats.json");
+  }
+  return join(getDataRoot(), "agent_moss_token_stats.json");
+}
+var ENV_DATA_ROOT, ENV_INSTANCE, DEFAULT_DATA_ROOT;
+var init_paths = __esm({
+  "src/infra/paths.ts"() {
+    "use strict";
+    init_esm_shims();
+    ENV_DATA_ROOT = "AGENT_MOSS_DATA_DIR";
+    ENV_INSTANCE = "AGENT_MOSS_INSTANCE";
+    DEFAULT_DATA_ROOT = join(homedir(), ".config", "agentmoss");
+  }
+});
+
 // src/config.ts
 var config_exports = {};
 __export(config_exports, {
@@ -61,7 +145,6 @@ __export(config_exports, {
 });
 import fs from "fs";
 import path2 from "path";
-import os from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function loadConfigFile(filePath) {
   try {
@@ -74,7 +157,7 @@ function loadConfigFile(filePath) {
 function resolveConfigPath() {
   const envPath = process.env.AGENT_MOSS_CONFIG_PATH;
   if (envPath) return envPath;
-  const userConfig = path2.join(os.homedir(), ".config", "agentmoss", "config.json");
+  const userConfig = path2.join(getConfigDir(), "config.json");
   if (fs.existsSync(userConfig)) return userConfig;
   const defaultConfig = path2.join(__dirname, "..", "..", "agent_moss", "infra", "config.json.example");
   if (fs.existsSync(defaultConfig)) {
@@ -243,6 +326,7 @@ var init_config = __esm({
   "src/config.ts"() {
     "use strict";
     init_esm_shims();
+    init_paths();
     llmConfig = (() => {
       const configPath = resolveConfigPath();
       const fileConfig = fs.existsSync(configPath) ? loadLLMConfigFromFile(configPath) : {};
@@ -1073,7 +1157,7 @@ var init_logic_rules = __esm({
 });
 
 // src/engine/skill-loader.ts
-import { readFileSync, readdirSync as readdirSync2, existsSync as existsSync2 } from "fs";
+import { readFileSync as readFileSync2, readdirSync as readdirSync2, existsSync as existsSync2 } from "fs";
 import { resolve, dirname } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function loadAllSkills() {
@@ -1087,7 +1171,7 @@ function loadAllSkills() {
   const files = readdirSync2(dir).filter((f) => f.endsWith(".md"));
   for (const f of files) {
     const name = f.replace(".md", "");
-    cachedSkills[name] = readFileSync(resolve(dir, f), "utf-8");
+    cachedSkills[name] = readFileSync2(resolve(dir, f), "utf-8");
   }
   console.log(`[AgentMoss] Loaded ${Object.keys(cachedSkills).length} skills from ${dir}`);
   return cachedSkills;
@@ -1218,11 +1302,13 @@ __export(runtime_config_exports, {
   updateSkillCategoryEnabled: () => updateSkillCategoryEnabled,
   updateSkillEnabled: () => updateSkillEnabled
 });
-import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync3, mkdirSync, unlinkSync, readdirSync as readdirSync3 } from "fs";
-import { join } from "path";
-import { homedir } from "os";
+import { readFileSync as readFileSync3, writeFileSync, existsSync as existsSync3, mkdirSync, unlinkSync, readdirSync as readdirSync3 } from "fs";
+import { join as join2 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { dirname as dirname2 } from "path";
+function runtimeDir() {
+  return getRuntimeConfigDir();
+}
 function getRuntimeConfigPath() {
   const envPath = process.env[ENV_RUNTIME_CONFIG_PATH];
   if (envPath) return envPath;
@@ -1255,7 +1341,7 @@ function loadRuntimeConfig() {
     return seeded;
   }
   try {
-    const data = JSON.parse(readFileSync2(p, "utf-8"));
+    const data = JSON.parse(readFileSync3(p, "utf-8"));
     const merged = mergeConfig(data, generateSourceDefaults());
     return {
       version: data.version || 1,
@@ -1325,7 +1411,7 @@ function hasRuntimeConfig() {
   const p = getRuntimeConfigPath();
   if (!existsSync3(p)) return false;
   try {
-    JSON.parse(readFileSync2(p, "utf-8"));
+    JSON.parse(readFileSync3(p, "utf-8"));
     return true;
   } catch {
     return false;
@@ -1513,11 +1599,11 @@ function _agentRulesToDefaults() {
     return out;
   }
   for (const agentId of entries) {
-    const rulesFile = join(agentsDir, agentId, "rules.json");
+    const rulesFile = join2(agentsDir, agentId, "rules.json");
     if (!existsSync3(rulesFile)) continue;
     let data;
     try {
-      data = JSON.parse(readFileSync2(rulesFile, "utf-8"));
+      data = JSON.parse(readFileSync3(rulesFile, "utf-8"));
     } catch {
       continue;
     }
@@ -1933,12 +2019,12 @@ function deleteCustomRule(layer, category, ruleId) {
 function addCustomSkill(skillId, category, keywords, content) {
   _validateSkillId(skillId);
   const runtime = loadRuntimeConfig();
-  const skillsDir = join(RUNTIME_CONFIG_DIR, "agent_moss_skills");
+  const skillsDir = join2(RUNTIME_CONFIG_DIR, "agent_moss_skills");
   try {
     mkdirSync(skillsDir, { recursive: true });
   } catch {
   }
-  writeFileSync(join(skillsDir, `${skillId}.md`), content, "utf-8");
+  writeFileSync(join2(skillsDir, `${skillId}.md`), content, "utf-8");
   const l3 = runtime.L3_skills || (runtime.L3_skills = {});
   const cat = l3[category] || (l3[category] = { category_enabled: true, category_desc: "", skills: [] });
   (cat.skills || (cat.skills = [])).push({ id: skillId, keywords, enabled: true, builtin: false });
@@ -1953,7 +2039,7 @@ function deleteCustomSkill(skillId, category) {
   if (idx >= 0) {
     if (skills[idx].builtin) return null;
     skills.splice(idx, 1);
-    const skillPath = join(RUNTIME_CONFIG_DIR, "agent_moss_skills", `${skillId}.md`);
+    const skillPath = join2(RUNTIME_CONFIG_DIR, "agent_moss_skills", `${skillId}.md`);
     try {
       if (existsSync3(skillPath)) unlinkSync(skillPath);
     } catch {
@@ -2069,18 +2155,19 @@ function updateAgentCategoryEnabled(agentId, category, enabled) {
   saveRuntimeConfig(runtime);
   return runtime;
 }
-var __dirname3, RUNTIME_CONFIG_DIR, RUNTIME_CONFIG_PATH, ENV_RUNTIME_CONFIG_PATH, LAYER_DISABLE_ENV, DENY_MODE_LABELS, _AGENTS_DIR_PROD, _AGENTS_DIR_DEV, SKILL_ID_RE;
+var __dirname3, ENV_RUNTIME_CONFIG_PATH, RUNTIME_CONFIG_DIR, RUNTIME_CONFIG_PATH, LAYER_DISABLE_ENV, DENY_MODE_LABELS, _AGENTS_DIR_PROD, _AGENTS_DIR_DEV, SKILL_ID_RE;
 var init_runtime_config = __esm({
   "src/infra/runtime-config.ts"() {
     "use strict";
     init_esm_shims();
+    init_paths();
     init_heuristic();
     init_logic_rules();
     init_skill_loader();
     __dirname3 = dirname2(fileURLToPath4(import.meta.url));
-    RUNTIME_CONFIG_DIR = join(homedir(), ".config", "agentmoss");
-    RUNTIME_CONFIG_PATH = join(RUNTIME_CONFIG_DIR, "agent_moss_runtime.json");
     ENV_RUNTIME_CONFIG_PATH = "AGENT_MOSS_RUNTIME_CONFIG_PATH";
+    RUNTIME_CONFIG_DIR = runtimeDir();
+    RUNTIME_CONFIG_PATH = join2(RUNTIME_CONFIG_DIR, "agent_moss_runtime.json");
     LAYER_DISABLE_ENV = {
       L1_heuristic: "AGENT_MOSS_DISABLE_HEURISTIC",
       L2_logic_rules: "AGENT_MOSS_DISABLE_LOGIC_RULES",
@@ -2091,14 +2178,14 @@ var init_runtime_config = __esm({
       deny_read: "\u4EC5\u62E6\u622A\u8BFB\u53D6",
       deny_both: "\u8BFB\u5199\u5747\u62E6\u622A"
     };
-    _AGENTS_DIR_PROD = join(__dirname3, "agents");
-    _AGENTS_DIR_DEV = join(__dirname3, "..", "..", "..", "agent_moss", "agents");
+    _AGENTS_DIR_PROD = join2(__dirname3, "agents");
+    _AGENTS_DIR_DEV = join2(__dirname3, "..", "..", "..", "agent_moss", "agents");
     SKILL_ID_RE = /^[A-Za-z0-9_-]+$/;
   }
 });
 
 // src/agents/index.ts
-import { readFileSync as readFileSync3, existsSync as existsSync4 } from "fs";
+import { readFileSync as readFileSync4, existsSync as existsSync4 } from "fs";
 import { resolve as resolve2, dirname as dirname3 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function resolveAgentsDir() {
@@ -2125,7 +2212,7 @@ function getAgentExtensions(agentId) {
       return null;
     }
     try {
-      const raw = readFileSync3(rulesFile, "utf-8");
+      const raw = readFileSync4(rulesFile, "utf-8");
       ext = JSON.parse(raw);
       if (!ext.agent_id) {
         console.warn(`[AgentMoss agents] rules.json \u7F3A\u5C11 agent_id \u5B57\u6BB5: ${rulesFile}`);
@@ -2765,7 +2852,7 @@ var init_heuristic = __esm({
 });
 
 // src/engine/template-loader.ts
-import { readFileSync as readFileSync4, existsSync as existsSync5 } from "fs";
+import { readFileSync as readFileSync5, existsSync as existsSync5 } from "fs";
 import { resolve as resolve3, dirname as dirname4 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 function loadTemplates() {
@@ -2780,7 +2867,7 @@ function loadTemplates() {
     const filePath = resolve3(dir, file);
     if (existsSync5(filePath)) {
       const key = file.replace(".txt", "").replace("_template", "");
-      cachedTemplates[key] = readFileSync4(filePath, "utf-8");
+      cachedTemplates[key] = readFileSync5(filePath, "utf-8");
     }
   }
   console.log(`[AgentMoss] Loaded ${Object.keys(cachedTemplates).length} templates from ${dir}`);
@@ -2801,8 +2888,8 @@ var init_template_loader = __esm({
 });
 
 // src/engine/script-analyzer.ts
-import { readFileSync as readFileSync5 } from "fs";
-import { resolve as resolve4, join as join2 } from "path";
+import { readFileSync as readFileSync6 } from "fs";
+import { resolve as resolve4, join as join3 } from "path";
 function emptyResult() {
   return { scriptPath: "", scriptContent: "", matchedKeywords: [], lineCount: 0, isSuspicious: false, error: "", riskLevel: "", riskReason: "" };
 }
@@ -2855,8 +2942,8 @@ function assessKeywordCombinationRisk(matchedKeywords, scriptContent) {
 }
 function readScriptContent(scriptPath, maxLines = 500) {
   try {
-    const expandedPath = scriptPath.startsWith("~") ? join2(process.env.HOME || "/home/user", scriptPath.slice(2)) : resolve4(scriptPath);
-    const raw = readFileSync5(expandedPath, "utf-8");
+    const expandedPath = scriptPath.startsWith("~") ? join3(process.env.HOME || "/home/user", scriptPath.slice(2)) : resolve4(scriptPath);
+    const raw = readFileSync6(expandedPath, "utf-8");
     const lines = raw.split("\n").slice(0, maxLines);
     return { content: lines.join("\n"), lineCount: lines.length, error: "" };
   } catch (e) {
@@ -2994,8 +3081,8 @@ var init_script_analyzer = __esm({
 });
 
 // src/engine/script-content-analyzer.ts
-import { readFileSync as readFileSync6, statSync, existsSync as existsSync6 } from "fs";
-import { resolve as resolve5, join as join3, isAbsolute, dirname as dirname5 } from "path";
+import { readFileSync as readFileSync7, statSync, existsSync as existsSync6 } from "fs";
+import { resolve as resolve5, join as join4, isAbsolute, dirname as dirname5 } from "path";
 import { homedir as homedir2 } from "os";
 function emptyChain() {
   return {
@@ -3154,7 +3241,7 @@ function extractInlineScriptPath(actionDetail) {
 function resolvePath(p) {
   let expanded = p;
   if (expanded.startsWith("~/") || expanded === "~") {
-    expanded = join3(homedir2(), expanded.slice(1));
+    expanded = join4(homedir2(), expanded.slice(1));
   }
   return resolve5(expanded);
 }
@@ -3167,7 +3254,7 @@ function readScriptContent2(scriptPath, maxFileSize = 2 * 1024 * 1024) {
     if (stat.size > maxFileSize) {
       return { content: "", lineCount: 0, fileSize: stat.size, error: `\u811A\u672C\u6587\u4EF6\u8FC7\u5927 (${stat.size} bytes)\uFF0C\u8DF3\u8FC7\u8BFB\u53D6` };
     }
-    const content = readFileSync6(path3, "utf-8");
+    const content = readFileSync7(path3, "utf-8");
     const lineCount = content ? content.split("\n").length : 0;
     return { content, lineCount, fileSize: stat.size, error: "" };
   } catch (e) {
@@ -3184,7 +3271,7 @@ function extractChildScriptPaths(content, baseDir) {
       const pathStr = m[1];
       if (pathStr.startsWith("-") || pathStr.startsWith("$")) continue;
       if (pathStr.includes("/dev/") || pathStr.startsWith("|") || pathStr.startsWith(";")) continue;
-      const full = isAbsolute(pathStr) ? pathStr : join3(baseDir, pathStr);
+      const full = isAbsolute(pathStr) ? pathStr : join4(baseDir, pathStr);
       const resolved = resolvePath(full);
       if (existsSync6(resolved)) {
         try {
@@ -3537,17 +3624,16 @@ __export(token_stats_exports, {
   recordTokenUsage: () => recordTokenUsage,
   resetTokenStats: () => resetTokenStats
 });
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync2, existsSync as existsSync7, mkdirSync as mkdirSync2, unlinkSync as unlinkSync2 } from "fs";
-import { join as join4 } from "path";
-import { homedir as homedir3 } from "os";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync2, existsSync as existsSync7, mkdirSync as mkdirSync2, unlinkSync as unlinkSync2 } from "fs";
 function getStatsPath() {
   const envPath = process.env[ENV_STATS_PATH];
-  return envPath || STATS_FILE;
+  if (envPath) return envPath;
+  return getTokenStatsPath();
 }
 function loadAllRecords(statsPath) {
   if (!existsSync7(statsPath)) return [];
   try {
-    const data = JSON.parse(readFileSync7(statsPath, "utf-8"));
+    const data = JSON.parse(readFileSync8(statsPath, "utf-8"));
     if (Array.isArray(data)) return data;
     if (data && Array.isArray(data.records)) return data.records;
     return [];
@@ -3687,13 +3773,12 @@ function resetTokenStats() {
     }
   }
 }
-var STATS_DIR, STATS_FILE, ENV_STATS_PATH, MAX_RECORDS;
+var ENV_STATS_PATH, MAX_RECORDS;
 var init_token_stats = __esm({
   "src/engine/token-stats.ts"() {
     "use strict";
     init_esm_shims();
-    STATS_DIR = join4(homedir3(), ".config", "agentmoss");
-    STATS_FILE = join4(STATS_DIR, "agent_moss_token_stats.json");
+    init_paths();
     ENV_STATS_PATH = "AGENT_MOSS_TOKEN_STATS_PATH";
     MAX_RECORDS = 1e4;
   }
@@ -5285,7 +5370,7 @@ init_esm_shims();
 init_runtime_config();
 init_token_stats();
 import { Hono } from "hono";
-import { readFileSync as readFileSync8, existsSync as existsSync9 } from "fs";
+import { readFileSync as readFileSync9, existsSync as existsSync9 } from "fs";
 import { join as join5, dirname as dirname6 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 var __dirname6 = dirname6(fileURLToPath7(import.meta.url));
@@ -5315,7 +5400,7 @@ function createConsoleRouter() {
   const serveIndex = (c) => {
     const indexFile = join5(STATIC_DIR, "index.html");
     if (existsSync9(indexFile)) {
-      return c.html(readFileSync8(indexFile, "utf-8"));
+      return c.html(readFileSync9(indexFile, "utf-8"));
     }
     return c.html("<h1>AgentMoss Policy Console</h1><p>Frontend not built. Use /console/api/* endpoints.</p>");
   };
@@ -5323,12 +5408,12 @@ function createConsoleRouter() {
   console2.get("", serveIndex);
   console2.get("/api/layers", (c) => {
     const rc = loadRuntimeConfig();
-    return c.json({ layers: rc.layers });
+    return c.json({ layers: rc.layers, env_overrides: getEnvOverrides() });
   });
   console2.put("/api/layers", async (c) => {
     const body = await c.req.json();
     const rc = updateLayerEnabled(body.layer_key, body.enabled);
-    return c.json({ layers: rc.layers });
+    return c.json({ layers: rc.layers, env_overrides: getEnvOverrides() });
   });
   console2.get("/api/rules", (c) => {
     const rc = loadRuntimeConfig();
@@ -5337,22 +5422,22 @@ function createConsoleRouter() {
   console2.put("/api/rules/enabled", async (c) => {
     const b = await c.req.json();
     const rc = updateRuleEnabled(b.layer, b.category, b.rule_id, b.enabled);
-    return c.json({ L1_rules: rc.L1_rules, L2_rules: rc.L2_rules });
+    return c.json(rc);
   });
   console2.put("/api/rules/deny_mode", async (c) => {
     const b = await c.req.json();
     const rc = updateRuleDenyMode(b.layer, b.category, b.rule_id, b.deny_mode);
-    return c.json({ L1_rules: rc.L1_rules, L2_rules: rc.L2_rules });
+    return c.json(rc);
   });
   console2.put("/api/rules/skip_l3", async (c) => {
     const b = await c.req.json();
     const rc = updateRuleSkipL3(b.layer, b.category, b.rule_id, b.skip_l3_on_disabled);
-    return c.json({ L1_rules: rc.L1_rules, L2_rules: rc.L2_rules });
+    return c.json(rc);
   });
   console2.put("/api/categories/enabled", async (c) => {
     const b = await c.req.json();
     const rc = updateCategoryEnabled(b.layer, b.category, b.enabled);
-    return c.json({ L1_rules: rc.L1_rules, L2_rules: rc.L2_rules });
+    return c.json(rc);
   });
   console2.post("/api/rules", async (c) => {
     const b = await c.req.json();
@@ -5368,38 +5453,38 @@ function createConsoleRouter() {
       credential: b.credential,
       deny_mode: b.deny_mode
     });
-    return c.json({ L1_rules: rc.L1_rules, L2_rules: rc.L2_rules });
+    return c.json(rc);
   });
   console2.delete("/api/rules", async (c) => {
     const b = await c.req.json();
     deleteCustomRule(b.layer, b.category, b.rule_id);
     const rc = loadRuntimeConfig();
-    return c.json({ L1_rules: rc.L1_rules, L2_rules: rc.L2_rules });
+    return c.json(rc);
   });
   console2.get("/api/skills", (c) => {
     const rc = loadRuntimeConfig();
-    return c.json({ L3_skills: rc.L3_skills });
+    return c.json(rc.L3_skills);
   });
   console2.put("/api/skills/enabled", async (c) => {
     const b = await c.req.json();
     const rc = updateSkillEnabled(b.skill_id, b.enabled);
-    return c.json({ L3_skills: rc.L3_skills });
+    return c.json(rc);
   });
   console2.put("/api/skill-categories/enabled", async (c) => {
     const b = await c.req.json();
     const rc = updateSkillCategoryEnabled(b.category, b.enabled);
-    return c.json({ L3_skills: rc.L3_skills });
+    return c.json(rc);
   });
   console2.post("/api/skills", async (c) => {
     const b = await c.req.json();
     const rc = addCustomSkill(b.skill_id, b.category || "user_custom", b.keywords || [], b.content);
-    return c.json({ L3_skills: rc.L3_skills });
+    return c.json(rc);
   });
   console2.delete("/api/skills", async (c) => {
     const b = await c.req.json();
     deleteCustomSkill(b.skill_id, b.category);
     const rc = loadRuntimeConfig();
-    return c.json({ L3_skills: rc.L3_skills });
+    return c.json(rc);
   });
   console2.get("/api/skills/:skill_id/content", async (c) => {
     const skillId = c.req.param("skill_id");
@@ -5409,10 +5494,10 @@ function createConsoleRouter() {
     const skillPath = join5(dirname6(getRuntimeConfigPath()), "agent_moss_skills", `${skillId}.md`);
     if (!existsSync9(skillPath)) {
       const builtinPath = join5(__dirname6, "..", "..", "agent_moss", "skills", `${skillId}.md`);
-      if (existsSync9(builtinPath)) return c.text(readFileSync8(builtinPath, "utf-8"));
+      if (existsSync9(builtinPath)) return c.text(readFileSync9(builtinPath, "utf-8"));
       return c.json({ error: "skill not found" }, 404);
     }
-    return c.text(readFileSync8(skillPath, "utf-8"));
+    return c.text(readFileSync9(skillPath, "utf-8"));
   });
   console2.get("/api/agents", (c) => {
     const rc = loadRuntimeConfig();
@@ -5454,7 +5539,7 @@ function createConsoleRouter() {
   });
   console2.get("/api/config", (c) => {
     const rc = loadRuntimeConfig();
-    return c.json({ config: rc, config_path: getRuntimeConfigPath() });
+    return c.json(rc);
   });
   console2.get("/api/env-overrides", (c) => {
     return c.json({ overrides: getEnvOverrides() });
@@ -5462,7 +5547,7 @@ function createConsoleRouter() {
   console2.post("/api/reset", (c) => {
     const defaults = generateSourceDefaults();
     saveRuntimeConfig(defaults);
-    return c.json({ config: defaults });
+    return c.json(defaults);
   });
   console2.get("/api/token-stats", (c) => {
     const days = parseInt(c.req.query("days") || "7", 10);
@@ -5470,7 +5555,7 @@ function createConsoleRouter() {
   });
   console2.get("/api/token-stats/recent", (c) => {
     const limit = parseInt(c.req.query("limit") || "20", 10);
-    return c.json({ records: getRecentRecords(limit) });
+    return c.json(getRecentRecords(limit));
   });
   console2.get("/api/token-stats/trend", (c) => {
     const days = parseInt(c.req.query("days") || "7", 10);
@@ -5646,18 +5731,18 @@ async function main() {
       const binPath = which || `${process.execPath} ${path3.join(__dirname7, "cli.js")}`;
       let content = fs4.readFileSync(srcPath, "utf-8");
       content = content.replace("__AGENT_MOSS_BIN__", binPath);
-      const dst = "/etc/systemd/system/agent_moss.service";
+      const dst = "/etc/systemd/system/agent-moss.service";
       fs4.writeFileSync(dst, content, "utf-8");
       fs4.chmodSync(dst, 420);
       console.log(`\u2705 \u5DF2\u5B89\u88C5 systemd service: ${dst}`);
       execSync("systemctl daemon-reload", { stdio: "inherit" });
       console.log("\u2705 systemctl daemon-reload \u5B8C\u6210");
       if (enable) {
-        execSync("systemctl enable agent_moss", { stdio: "inherit" });
-        console.log("\u2705 systemctl enable agent_moss \u5B8C\u6210");
+        execSync("systemctl enable agent-moss", { stdio: "inherit" });
+        console.log("\u2705 systemctl enable agent-moss \u5B8C\u6210");
       }
-      console.log("\n\u542F\u52A8\u670D\u52A1\uFF1A  sudo systemctl start agent_moss");
-      console.log("\u67E5\u770B\u72B6\u6001\uFF1A  sudo systemctl status agent_moss");
+      console.log("\n\u542F\u52A8\u670D\u52A1\uFF1A  sudo systemctl start agent-moss");
+      console.log("\u67E5\u770B\u72B6\u6001\uFF1A  sudo systemctl status agent-moss");
       console.log("\u67E5\u770B\u65E5\u5FD7\uFF1A  journalctl -u agent_moss -f");
       break;
     }
@@ -5666,9 +5751,9 @@ async function main() {
       const { execSync } = await import("child_process");
       let systemdInfo = "";
       try {
-        const out = execSync("systemctl is-active agent_moss 2>/dev/null || true", { encoding: "utf-8" }).trim();
+        const out = execSync("systemctl is-active agent-moss 2>/dev/null || true", { encoding: "utf-8" }).trim();
         if (out === "active") {
-          const show = execSync("systemctl show agent_moss --property=MainPID,ActiveEnterTimestamp,ExecStart 2>/dev/null || true", { encoding: "utf-8" });
+          const show = execSync("systemctl show agent-moss --property=MainPID,ActiveEnterTimestamp,ExecStart 2>/dev/null || true", { encoding: "utf-8" });
           for (const line of show.trim().split("\n")) {
             const [key, ...vals] = line.split("=");
             const val = vals.join("=");
@@ -5746,10 +5831,10 @@ async function main() {
         }
         console.log();
         console.log("   \u542F\u505C\u547D\u4EE4\uFF1A");
-        console.log("     systemctl start agent_moss   \u542F\u52A8");
-        console.log("     systemctl stop agent_moss    \u505C\u6B62");
-        console.log("     systemctl restart agent_moss \u91CD\u542F");
-        console.log("     systemctl status agent_moss  \u72B6\u6001");
+        console.log("     systemctl start agent-moss   \u542F\u52A8");
+        console.log("     systemctl stop agent-moss    \u505C\u6B62");
+        console.log("     systemctl restart agent-moss \u91CD\u542F");
+        console.log("     systemctl status agent-moss  \u72B6\u6001");
         console.log("     journalctl -u agent_moss -f  \u65E5\u5FD7");
       } else {
         console.log(`\u274C AgentMoss \u670D\u52A1\u672A\u8FD0\u884C`);
@@ -5758,7 +5843,7 @@ async function main() {
           console.log(`   \u68C0\u67E5\u65E5\u5FD7\uFF1Ajournalctl -u agent_moss -n 20 --no-pager`);
         } else {
           console.log(`   \u542F\u52A8\u65B9\u5F0F\uFF1A`);
-          console.log(`     systemctl start agent_moss  \uFF08systemd\uFF09`);
+          console.log(`     systemctl start agent-moss  \uFF08systemd\uFF09`);
           console.log(`     agent-moss server           \uFF08\u524D\u53F0\uFF09`);
         }
         process.exit(1);