evolclaw 2.5.7 → 2.5.9

package/data/evolclaw.sample.json

@@ -9,13 +9,14 @@
       "agentProgressSummaries": true
     },
     "openai": {
-      "apiKey": "your-openai-api-key",
-      "baseUrl": "https://api.openai.com/v1",
+      "apiKey": "",
+      "baseUrl": "",
       "model": "gpt-5.2-codex",
       "effort": "medium"
     },
     "google": {
       "apiKey": "",
+      "baseUrl": "",
       "model": "gemini-2.5-flash",
       "cliPath": "",
       "mode": "cli"
@@ -23,29 +24,25 @@
     "defaultAgent": "claude"
   },
   "channels": {
-    "defaultChannel": "feishu",
+    "defaultChannel": "aun",
     "feishu": {
-      "enabled": true,
+      "enabled": false,
       "appId": "",
       "appSecret": "",
-      "owner": "",
-      "flushDelay": 10,
-      "debounce": 2,
-      "showActivities": "dm-only"
+      "owner": ""
     },
     "wechat": {
       "enabled": false,
       "baseUrl": "https://ilinkai.weixin.qq.com",
       "token": "",
-      "owner": "",
-      "flushDelay": 3,
-      "debounce": 2,
-      "showActivities": "all"
+      "owner": ""
     },
     "aun": {
       "enabled": false,
-      "aid": "your-agent.agentid.pub",
+      "aid": "",
       "owner": "",
+      "flushDelay": 4,
+      "debounce": 2,
       "showActivities": "owner-dm-only"
     }
   },
@@ -59,11 +56,6 @@
   "showActivities": "all",
   "idleMonitor": {
     "enabled": true,
-    "timeout": 120,
-    "safeModeThreshold": 0
-  },
-  "debug": {
-    "flusherDiag": false,
-    "aunTrace": false
+    "timeout": 120
   }
 }

package/dist/channels/aun.js

@@ -312,11 +312,25 @@ export class AUNChannel {
                 logger.info('[AUN] Agent already initialized, skipping welcome message');
                 return;
             }
+            // Fetch owner's agent.md to derive name and validate type
+            const ownerInfo = await this.fetchPeerInfo(owner);
+            if (ownerInfo.type !== null && ownerInfo.type !== 'human') {
+                logger.warn(`[AUN] Owner ${owner} type is "${ownerInfo.type}" (not human). Consider using a human AID as owner.`);
+            }
+            // Name: owner agent.md name (first 12 chars) → fallback to owner AID first label (first 12 chars)
+            const ownerAidClean = owner.startsWith('@') ? owner.slice(1) : owner;
+            let ownerDisplayName;
+            if (ownerInfo.name) {
+                ownerDisplayName = ownerInfo.name.slice(0, 12);
+            }
+            else {
+                ownerDisplayName = ownerAidClean.split('.')[0].slice(0, 12);
+            }
+            const agentDisplayName = `${ownerDisplayName}的Evol助手`;
             // Generate new agent.md with proper fields
-            const ownerShortId = owner.split('@')[0].slice(0, 8);
             const newAgentMd = `---
 aid: "${aid}"
-name: "${ownerShortId}的Evol助手"
+name: "${agentDisplayName}"
 type: "codeagent"
 version: "1.0.0"
 description: "EvolClaw AI Agent Gateway - 连接 Claude/Codex 到消息通道"
@@ -327,7 +341,7 @@ tags:
 initialized: true
 ---
 
-# ${ownerShortId}的Evol助手
+# ${agentDisplayName}
 
 EvolClaw AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
 `;

package/dist/config.js

@@ -377,11 +377,17 @@ function validateConfig(config) {
     // Feishu 配置可选，但如果配置了就要完整（支持 array / object 两种格式）
     const feishuInstances = normalizeChannelInstances(config.channels?.feishu, 'feishu');
     for (const inst of feishuInstances) {
+        if (inst.enabled === false)
+            continue;
+        const appId = inst.appId || '';
+        const appSecret = inst.appSecret || '';
+        if (!appId && !appSecret)
+            continue;
         const label = feishuInstances.length > 1 ? ` [${inst.name}]` : '';
-        if (!inst.appId || inst.appId.startsWith('YOUR_')) {
+        if (!appId || appId.startsWith('YOUR_')) {
             logger.warn(`⚠ Feishu${label} appId not configured (Feishu channel will be disabled)`);
         }
-        if (!inst.appSecret || inst.appSecret.startsWith('YOUR_')) {
+        if (!appSecret || appSecret.startsWith('YOUR_')) {
             logger.warn(`⚠ Feishu${label} appSecret not configured (Feishu channel will be disabled)`);
         }
     }

package/dist/utils/init-channel.js

@@ -627,6 +627,44 @@ export function resolveAunCoreSdkPkg() {
     catch { /* not found */ }
     return null;
 }
+/**
+ * Download AUN CA root certificate to ~/.aun/CA/root/root.crt.
+ * Idempotent: skips if file already exists. Returns true if a cert is on disk
+ * after the call (either pre-existing or freshly downloaded).
+ *
+ * Must be called BEFORE constructing any AUNClient that needs to verify
+ * gateway-issued certificates (e.g. for uploadAgentMd) — the SDK loads trusted
+ * roots from disk at client construction time and won't pick up later writes.
+ */
+export async function downloadCaRoot(aunPath, gatewayUrl, indent = '') {
+    const caDir = path.join(aunPath, 'CA', 'root');
+    const caCertPath = path.join(caDir, 'root.crt');
+    if (fs.existsSync(caCertPath))
+        return true;
+    if (!gatewayUrl)
+        return false;
+    try {
+        fs.mkdirSync(caDir, { recursive: true });
+        const gwHttp = gatewayUrl.replace(/^wss?:/, 'https:').replace(/\/aun$/, '');
+        const resp = await fetch(`${gwHttp}/pki/chain`, { redirect: 'follow' });
+        if (!resp.ok) {
+            console.warn(`${indent}⚠ CA 根证书下载失败: HTTP ${resp.status}`);
+            return false;
+        }
+        const body = await resp.text();
+        if (!body.includes('BEGIN CERTIFICATE')) {
+            console.warn(`${indent}⚠ CA 根证书响应内容无效，跳过写入`);
+            return false;
+        }
+        fs.writeFileSync(caCertPath, body);
+        console.log(`${indent}✓ CA 根证书已下载`);
+        return true;
+    }
+    catch (e) {
+        console.warn(`${indent}⚠ CA 根证书下载失败: ${e}，可稍后手动下载`);
+        return false;
+    }
+}
 export async function checkAunEnvironment(rl) {
     console.log('\n🔍 AUN 环境检查...\n');
     const minVer = MIN_AUN_CORE_SDK.join('.');
@@ -718,7 +756,7 @@ export async function setupAunAid(rl, _config) {
         let failed = false;
         try {
             const { AUNClient } = await import('@agentunion/aun-node');
-            const client = new AUNClient({ aun_path: aunPath });
+            let client = new AUNClient({ aun_path: aunPath });
             // 如果用户指定了自定义端口，手动设置 gateway URL；否则让 SDK 自动发现
             if (gatewayPort) {
                 const domain = aid.split('.').slice(1).join('.');
@@ -727,26 +765,19 @@ export async function setupAunAid(rl, _config) {
             const result = await client.auth.createAid({ aid });
             console.log(`  ✓ AID ${result.aid} 创建成功`);
             // 下载 CA 根证书（如果本地不存在），从 SDK 返回的实际网关 URL 派生
-            const caDir = path.join(aunPath, 'CA', 'root');
-            const caCertPath = path.join(caDir, 'root.crt');
-            if (!fs.existsSync(caCertPath) && result.gateway) {
+            const caDownloaded = await downloadCaRoot(aunPath, result.gateway || '', '  ');
+            // 关键：SDK 默认 rootCaPath=null，只读取包内 bundled certs。
+            // 必须显式传 root_ca_path 指向刚下载的 root.crt，uploadAgentMd 才能验证 server cert。
+            const caCertPath = path.join(aunPath, 'CA', 'root', 'root.crt');
+            if (caDownloaded && fs.existsSync(caCertPath)) {
                 try {
-                    fs.mkdirSync(caDir, { recursive: true });
-                    const gwHttp = result.gateway.replace(/^wss?:/, 'https:').replace(/\/aun$/, '');
-                    const resp = await fetch(`${gwHttp}/pki/chain`, { redirect: 'follow' });
-                    if (resp.ok) {
-                        const body = await resp.text();
-                        if (body.includes('BEGIN CERTIFICATE')) {
-                            fs.writeFileSync(caCertPath, body);
-                            console.log('  ✓ CA 根证书已下载');
-                        }
-                        else {
-                            console.warn('  ⚠ CA 根证书响应内容无效，跳过写入');
-                        }
-                    }
+                    await client.close();
                 }
-                catch (e) {
-                    console.warn(`  ⚠ CA 根证书下载失败: ${e}，可稍后手动下载`);
+                catch { /* ignore */ }
+                client = new AUNClient({ aun_path: aunPath, root_ca_path: caCertPath });
+                if (gatewayPort) {
+                    const domain = aid.split('.').slice(1).join('.');
+                    client._gatewayUrl = `wss://gateway.${domain}:${gatewayPort}/aun`;
                 }
             }
             // Collect agent.md info and publish
@@ -760,7 +791,7 @@ export async function setupAunAid(rl, _config) {
                 console.log('  ✓ agent.md 已发布');
             }
             catch (e) {
-                console.log(`  ⚠ agent.md 发布失败（可稍后用 /agentmd put 重试）: ${String(e.message || e).slice(0, 100)}`);
+                console.log(`  ⚠ agent.md 发布失败（首次连接将自动重试）: ${String(e.message || e).slice(0, 100)}`);
             }
             fs.writeFileSync(agentMdPath, agentMdContent, 'utf-8');
             if (!fs.existsSync(agentMdPath)) {

package/dist/utils/init.js

@@ -406,7 +406,7 @@ export async function cmdInit(options) {
         }
         if (options.channel === 'aun' && options.aunAid) {
             // 自动安装 AUN SDK
-            const { resolveAunCoreSdkPkg, npmInstallGlobal } = await import('./init-channel.js');
+            const { resolveAunCoreSdkPkg, npmInstallGlobal, downloadCaRoot } = await import('./init-channel.js');
             if (!resolveAunCoreSdkPkg()) {
                 console.log('正在安装 @agentunion/aun-node...');
                 await npmInstallGlobal('@agentunion/aun-node@latest');
@@ -416,31 +416,20 @@ export async function cmdInit(options) {
             const aidDir = path.join(aunPath, 'AIDs', options.aunAid);
             if (!fs.existsSync(path.join(aidDir, 'private'))) {
                 const { AUNClient } = await import('@agentunion/aun-node');
-                const client = new AUNClient({ aun_path: aunPath });
+                let client = new AUNClient({ aun_path: aunPath });
                 // 让 SDK 通过 well-known 自动发现网关
                 const result = await client.auth.createAid({ aid: options.aunAid });
                 // 下载 CA 根证书（如果本地不存在），从 SDK 返回的实际网关 URL 派生
-                const caDir = path.join(aunPath, 'CA', 'root');
-                const caCertPath = path.join(caDir, 'root.crt');
-                if (!fs.existsSync(caCertPath) && result.gateway) {
+                const caDownloaded = await downloadCaRoot(aunPath, result.gateway || '');
+                // 关键：SDK 默认 rootCaPath=null，只读取包内 bundled certs。
+                // 必须显式传 root_ca_path 指向刚下载的 root.crt，uploadAgentMd 才能验证 server cert。
+                const caCertPath = path.join(aunPath, 'CA', 'root', 'root.crt');
+                if (caDownloaded && fs.existsSync(caCertPath)) {
                     try {
-                        fs.mkdirSync(caDir, { recursive: true });
-                        const gwHttp = result.gateway.replace(/^wss?:/, 'https:').replace(/\/aun$/, '');
-                        const resp = await fetch(`${gwHttp}/pki/chain`, { redirect: 'follow' });
-                        if (resp.ok) {
-                            const body = await resp.text();
-                            if (body.includes('BEGIN CERTIFICATE')) {
-                                fs.writeFileSync(caCertPath, body);
-                                console.log('✓ CA 根证书已下载');
-                            }
-                            else {
-                                console.warn('⚠ CA 根证书响应内容无效，跳过写入');
-                            }
-                        }
-                    }
-                    catch (e) {
-                        console.warn(`⚠ CA 根证书下载失败: ${e}，可稍后手动下载`);
+                        await client.close();
                     }
+                    catch { }
+                    client = new AUNClient({ aun_path: aunPath, root_ca_path: caCertPath });
                 }
                 // 写入初始 agent.md（initialized: false）
                 const agentName = options.aunAid.split('.')[0];
@@ -450,7 +439,7 @@ export async function cmdInit(options) {
                     await client.auth.uploadAgentMd(agentMd);
                 }
                 catch (e) {
-                    console.warn(`⚠ agent.md 网络发布失败（可稍后重试）: ${String(e?.message || e).slice(0, 100)}`);
+                    console.warn(`⚠ agent.md 网络发布失败（首次连接将自动重试）: ${String(e?.message || e).slice(0, 100)}`);
                 }
                 fs.writeFileSync(agentMdPath, agentMd, 'utf-8');
                 if (!fs.existsSync(agentMdPath)) {

package/evolclaw-install-aun.md

@@ -70,7 +70,7 @@ evolclaw init --non-interactive \
 
 此命令自动完成：
 1. 创建配置文件 `~/.evolclaw/data/evolclaw.json`
-2. 安装 `@eleans/aun-core-sdk`
+2. 安装 `@agentunion/aun-node`
 3. 创建 AID 密钥对（如本地不存在）
 4. 下载 CA 根证书到 `~/.aun/CA/root/root.crt`
 5. 写入初始 `agent.md`（`initialized: false`）

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evolclaw",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "description": "Lightweight AI Agent gateway connecting Claude Agent SDK to messaging channels (Feishu, ACP) with multi-project session management",
   "type": "module",
   "main": "dist/index.js",