evolclaw 3.1.3 → 3.1.4

package/dist/cli/net-check.js

@@ -1,12 +1,14 @@
 import fs from 'fs';
 import path from 'path';
-import os from 'os';
 import net from 'net';
 import tls from 'tls';
 import dns from 'dns/promises';
 import https from 'https';
 // @ts-ignore
 import { WebSocket } from 'ws';
+import { aunPath as defaultAunPath } from '../paths.js';
+import { createAunClient } from '../aun/aid/client.js';
+import { isHelpFlag } from './help.js';
 const GREEN = '\x1b[32m';
 const RED = '\x1b[31m';
 const YELLOW = '\x1b[33m';
@@ -217,10 +219,9 @@ async function runCheck(aid, formatJson) {
     let accessToken;
     try {
         const start = Date.now();
-        const aunPath = process.env.AUN_HOME || path.join(os.homedir(), '.aun');
-        const { AUNClient } = await import('@agentunion/fastaun');
+        const aunPath = process.env.AUN_HOME || defaultAunPath();
         const result = await suppressSdkOutput(async () => {
-            const client = new AUNClient({ aun_path: aunPath, debug: false });
+            const client = await createAunClient({ aunPath });
             await client.auth.createAid({ aid });
             const authResult = await client.auth.authenticate({ aid });
             await client.close().catch(() => { });
@@ -268,10 +269,9 @@ async function runCheck(aid, formatJson) {
     // ── Step 9: RPC 调用 (meta.ping) ──
     try {
         const start = Date.now();
-        const aunPath = process.env.AUN_HOME || path.join(os.homedir(), '.aun');
-        const { AUNClient } = await import('@agentunion/fastaun');
+        const aunPath = process.env.AUN_HOME || defaultAunPath();
         const sendResult = await suppressSdkOutput(async () => {
-            const client = new AUNClient({ aun_path: aunPath, debug: false });
+            const client = await createAunClient({ aunPath });
             await client.auth.createAid({ aid });
             const authResult = await client.auth.authenticate({ aid });
             const at = authResult?.access_token || client._access_token;
@@ -291,8 +291,7 @@ async function runCheck(aid, formatJson) {
     // CLI 模拟 app 发送 echo[nc]，向多个目标测试链路
     try {
         const echoStart = Date.now();
-        const aunPath = process.env.AUN_HOME || path.join(os.homedir(), '.aun');
-        const { AUNClient } = await import('@agentunion/fastaun');
+        const aunPath = process.env.AUN_HOME || defaultAunPath();
         // 选择 6 个测试目标，按消息数量、域、有无证书均衡选择
         const allAids = await getAidList();
         const myDomain = aid.split('.').slice(1).join('.');
@@ -421,7 +420,7 @@ async function runCheck(aid, formatJson) {
             const label = targetLabel(target);
             try {
                 const replyText = await suppressSdkOutput(async () => {
-                    const client = new AUNClient({ aun_path: aunPath, debug: false });
+                    const client = await createAunClient({ aunPath });
                     await client.auth.createAid({ aid });
                     const authResult = await client.auth.authenticate({ aid });
                     const at = authResult?.access_token || client._access_token;
@@ -564,7 +563,7 @@ function shuffle(arr) {
 export async function cmdNet(args) {
     const sub = args[0];
     const formatJson = args.includes('--format') && args.includes('json');
-    if (sub === 'help' || sub === '--help' || sub === '-h') {
+    if (isHelpFlag(sub)) {
         console.log(`用法: evolclaw net check [<aid>] [--format json]
 
 检查 AUN 网络链路连通性（10 步逐层诊断）。

package/dist/core/command-handler.js

@@ -410,8 +410,9 @@ export class CommandHandler {
             return { session };
         }
         const ct = chatType === 'group' ? 'group' : chatType === 'private' ? 'private' : undefined;
+        const channelType = this.resolveChannelType(channel);
         const session = await this.sessionManager.getActiveSession(channel, channelId)
-            ?? await this.sessionManager.getOrCreateSession(channel, channelId, this.getEffectiveDefaultPath(channel), undefined, undefined, undefined, undefined, ct);
+            ?? await this.sessionManager.getOrCreateSession(channel, channelId, this.getEffectiveDefaultPath(channel), undefined, undefined, undefined, undefined, ct, undefined, undefined, channelType);
         // 如果 session 已存在但 chatType 跟传入的不一致，更新
         if (ct && session.chatType !== ct) {
             await this.sessionManager.updateSession(session.id, { chatType: ct });
@@ -2185,16 +2186,14 @@ export class CommandHandler {
         // 尝试获取活跃会话（话题时直接查找话题 session）
         let session;
         if (threadId) {
-            session = await this.sessionManager.getOrCreateSession(channel, channelId, this.getEffectiveDefaultPath(channel), threadId);
+            session = await this.sessionManager.getOrCreateSession(channel, channelId, this.getEffectiveDefaultPath(channel), threadId, undefined, undefined, undefined, chatType, undefined, undefined, this.resolveChannelType(channel));
         }
         else {
             session = await this.sessionManager.getActiveSession(channel, channelId);
         }
-        // 对于需要会话的命令，如果没有会话则使用默认项目创建临时会话
-        if (!session && (normalizedContent.startsWith('/new') ||
-            normalizedContent === '/pwd' ||
-            normalizedContent === '/status')) {
-            session = await this.sessionManager.getOrCreateSession(channel, channelId, this.getEffectiveDefaultPath(channel));
+        // 如果没有会话，自动创建（所有后续命令都需要 session）
+        if (!session) {
+            session = await this.sessionManager.getOrCreateSession(channel, channelId, this.getEffectiveDefaultPath(channel), undefined, undefined, undefined, undefined, chatType, undefined, undefined, this.resolveChannelType(channel));
         }
         // /status 命令：显示会话状态
         if (normalizedContent === '/status') {

package/dist/core/message/message-processor.js

@@ -95,10 +95,11 @@ export class MessageProcessor {
         return [...this.agentMap.keys()];
     }
     /** 判断是否为后台会话（仅主会话参与判断，话题会话独立） */
-    async isBackgroundSession(session, channel, channelId) {
+    isBackgroundSession(session, _channel, _channelId) {
         if (session.threadId)
             return false;
-        const active = await this.sessionManager.getActiveSession(channel, channelId);
+        // 使用 session 自身的 channelType 精确定位 active.json，避免扫描误匹配
+        const active = this.sessionManager.getActiveSessionSync(session.channel, session.channelId, session.channelType, session.selfId);
         return active ? session.id !== active.id : false;
     }
     constructor(agentRunnerOrMap, sessionManager, globalSettings, messageCache, eventBus, commandHandler, primaryRunnerKey) {
@@ -245,7 +246,7 @@ export class MessageProcessor {
             monitor?.recordEvent(eventType || 'unknown', toolName);
         };
         // Cache background status to avoid async call inside setInterval
-        const isBackground = await this.isBackgroundSession(session, message.channel, message.channelId);
+        const isBackground = this.isBackgroundSession(session, message.channel, message.channelId);
         const timeoutPromise = new Promise((_, reject) => {
             rejectFn = reject;
             if (!monitorEnabled)
@@ -382,7 +383,7 @@ export class MessageProcessor {
             replyContext: taskReplyContext(),
         });
         try {
-            const isBackground = await this.isBackgroundSession(session, message.channel, message.channelId);
+            const isBackground = this.isBackgroundSession(session, message.channel, message.channelId);
             // 记录收到消息
             logger.message({
                 msgId: messageId,
@@ -439,7 +440,7 @@ export class MessageProcessor {
                     // （不支持 thought 的 channel 静默丢弃，避免降级为普通消息）
                     if (isProactive && payload.kind === 'activity.batch' && !adapter.capabilities?.thought)
                         return;
-                    const isCurrentlyBackground = await this.isBackgroundSession(session, message.channel, message.channelId);
+                    const isCurrentlyBackground = this.isBackgroundSession(session, message.channel, message.channelId);
                     if (isCurrentlyBackground)
                         return;
                     const opts = {};
@@ -516,18 +517,13 @@ export class MessageProcessor {
                 const selfAid = typeof adapterAny._selfAid === 'function' ? adapterAny._selfAid() : undefined;
                 const selfName = typeof adapterAny._selfName === 'function' ? adapterAny._selfName() : undefined;
                 const peerName = message.peerName || session.metadata?.peerName;
-                // 文件发送能力
-                let currentCanSend = false;
-                if (!isProactive) {
-                    currentCanSend = !!(channelInfo.adapter.capabilities?.file);
-                }
                 // 通道能力
                 const capParts = [];
                 if (options?.supportsImages)
                     capParts.push('图片输入');
                 if (channelInfo.adapter.capabilities?.image)
                     capParts.push('图片输出');
-                if (channelInfo.adapter.capabilities?.file)
+                if (!isProactive && channelInfo.adapter.capabilities?.file)
                     capParts.push('文件发送');
                 // Personal layer
                 const owningAgent = this.agentRegistry?.resolveByChannel(channelKey);
@@ -543,6 +539,7 @@ export class MessageProcessor {
                     ? `${currentChannelType}#${encodeURIComponent(peerIdRaw)}`
                     : undefined;
                 const normalizedBaseagent = normalizeBaseagent(agent.name);
+                const agentModel = (typeof agent.getModel === 'function') ? agent.getModel() : undefined;
                 // Kit renderer: 组装上下文
                 const kitCtx = {
                     vars: {
@@ -557,19 +554,23 @@ export class MessageProcessor {
                         peerKey,
                         peerName: peerName || undefined,
                         peerRole: session.identity?.role || 'unknown',
+                        peerType: message.peerType || undefined,
                         groupId: session.metadata?.groupId || undefined,
-                        scene: session.chatType ? (session.chatType === 'group' ? 'group' : 'private') : 'coding',
                         chatType: session.chatType || null,
                         channel: currentChannelType || null,
                         venueUid: undefined,
+                        capabilities: capParts.length > 0 ? capParts.join('、') : undefined,
                         project: path.basename(absoluteProjectPath),
+                        sessionId: session.id,
                         sessionName: session.name || undefined,
-                        chatmode: isProactive ? 'proactive' : 'interactive',
+                        sessionCreatedAt: session.createdAt ? new Date(session.createdAt).toISOString() : undefined,
+                        threadId: session.threadId || undefined,
+                        chatMode: isProactive ? 'proactive' : 'interactive',
                         readonly: session.metadata?.permissionMode === 'readonly',
-                        canSendFile: !isProactive && currentCanSend,
-                        capabilities: capParts.length > 0 ? capParts.join('、') : undefined,
                         baseAgent: normalizedBaseagent.canonical,
                         baseAgentName: normalizedBaseagent.displayName,
+                        baseAgentModel: agentModel || undefined,
+                        agentSessionId: session.agentSessionId || undefined,
                     },
                     sessionId: session.id,
                 };
@@ -752,7 +753,7 @@ export class MessageProcessor {
             if (finalReplyText) {
                 if (isProactive && !streamResult.hasReceivedText && /^Unknown skill:\s+\S+/i.test(finalReplyText.trim())) {
                     // Proactive 模式 + SDK 本地兜底：直接发送绕过 silent renderer
-                    const isCurrentlyBackground = await this.isBackgroundSession(session, message.channel, message.channelId);
+                    const isCurrentlyBackground = this.isBackgroundSession(session, message.channel, message.channelId);
                     if (!isCurrentlyBackground) {
                         await adapter.send({ ...envelope, replyContext: capturedReplyContext }, { kind: 'result.text', text: finalReplyText, isFinal: true });
                         logger.info(`[MessageProcessor] proactive SDK fallback replied task=${taskId} text="${finalReplyText.slice(0, 60)}"`);
@@ -868,7 +869,7 @@ export class MessageProcessor {
                 // 写入消息记录（出方向）已下沉到 aun.ts:deliverTextEntry，
                 // 所有 message.send 成功后统一写入 messages.jsonl，此处不再重复写入。
             }
-            const isFinallyBackground = await this.isBackgroundSession(session, message.channel, message.channelId);
+            const isFinallyBackground = this.isBackgroundSession(session, message.channel, message.channelId);
             if (isFinallyBackground && session.sessionMode !== 'autonomous') {
                 const projectName = path.basename(session.projectPath);
                 const count = this.messageCache.getCount(session.id);
@@ -1083,7 +1084,7 @@ export class MessageProcessor {
                     });
                     continue;
                 }
-                const isCurrentlyBackground = await this.isBackgroundSession(session, session.channel, session.channelId);
+                const isCurrentlyBackground = this.isBackgroundSession(session, session.channel, session.channelId);
                 // === 前台任务：正常处理所有事件 ===
                 if (!isCurrentlyBackground) {
                     // 流式文本

package/dist/core/relation/peer-identity.js

@@ -2,11 +2,11 @@
  * PeerIdentityCache - 对端身份缓存管理
  *
  * 职责：
- * 1. 从对端的 agent.md 确定身份（human / agent）
- * 2. 缓存到关系层文件（30天时效）
+ * 1. 通过 agentmdSync 标准流程获取对端 agent.md（check → fetch if changed）
+ * 2. 仅在 agent.md 内容变化时重写 peer-identity.json
  * 3. 支持入站和出站消息的身份查询
  *
- * 信源：对端的 agent.md（通过 AUN SDK 下载并验签）
+ * 信源：对端的 agent.md（通过 AUN SDK checkAgentMd + fetchAgentMd）
  * 判定规则：type !== 'human' → agent
  * 缓存位置：$AGENT_DIR/relations/<channel>#<urlEncode(peerId)>/peer-identity.json
  */
@@ -14,6 +14,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as crypto from 'crypto';
 import { logger } from '../../utils/logger.js';
+import { agentMdPath } from '../../paths.js';
 /**
  * 对端身份缓存管理器
  */
@@ -54,29 +55,26 @@ export class PeerIdentityCache {
     }
     /**
      * 从 agent.md 更新身份信息
-     * @param agentMd 已验签的 agent.md 内容
      */
     static updateFromAgentMd(channel, peerId, agentDir, agentMd, verifiedAt) {
-        // 解析 type 和 name
         const typeMatch = agentMd.match(/^type:\s*["']?(\w+)["']?/m);
         const nameMatch = agentMd.match(/^name:\s*["']?(.+?)["']?\s*$/m);
         const type = typeMatch?.[1] || 'unknown';
         const isAgent = type !== 'human';
         const name = nameMatch?.[1]?.trim();
-        // 计算 hash
         const agentMdHash = 'sha256:' + crypto.createHash('sha256').update(agentMd, 'utf-8').digest('hex');
-        // 构建身份信息
+        const now = Date.now();
         const identity = {
             aid: peerId,
             type,
             isAgent,
             name,
             agentMdHash,
+            agentMdUpdatedAt: now,
             verifiedAt,
-            lastCheckedAt: Date.now(),
+            lastCheckedAt: now,
             source: 'agentmd',
         };
-        // 写入文件
         const filePath = this.getFilePath(channel, peerId, agentDir);
         try {
             fs.mkdirSync(path.dirname(filePath), { recursive: true });
@@ -88,6 +86,18 @@ export class PeerIdentityCache {
         }
         return identity;
     }
+    /**
+     * 仅更新 lastCheckedAt（内容未变时的轻量操作）
+     */
+    static touchLastChecked(channel, peerId, agentDir, cached) {
+        const updated = { ...cached, lastCheckedAt: Date.now() };
+        const filePath = this.getFilePath(channel, peerId, agentDir);
+        try {
+            fs.writeFileSync(filePath, JSON.stringify(updated, null, 2), 'utf-8');
+        }
+        catch { /* ignore */ }
+        return updated;
+    }
     /**
      * 标记为 unknown（验签失败或无 agent.md）
      */
@@ -95,8 +105,9 @@ export class PeerIdentityCache {
         const identity = {
             aid: peerId,
             type: 'unknown',
-            isAgent: true, // 验签失败 → 当做 agent（安全策略）
+            isAgent: true,
             agentMdHash: '',
+            agentMdUpdatedAt: 0,
             verifiedAt: 0,
             lastCheckedAt: Date.now(),
             source: 'unknown',
@@ -113,17 +124,17 @@ export class PeerIdentityCache {
         return identity;
     }
     /**
-     * 完整流程：检查缓存 → 需要刷新则下载 agent.md → 更新缓存
+     * 完整流程：缓存检查 → agentmdSync（check+fetch）→ 按 changed 决定是否重写
      *
      * @param channel 渠道类型（如 'aun'）
      * @param peerId 对端 ID（AUN 是 AID）
      * @param agentDir agent 数据根目录
-     * @param aunClient AUN SDK client（需要有 fetchAgentMd 方法）
+     * @param aunClient AUN SDK client（需要有 checkAgentMd / fetchAgentMd 方法）
      * @param forceRefresh 强制刷新（忽略缓存时效）
      * @returns PeerIdentity
      */
     static async resolve(channel, peerId, agentDir, aunClient, forceRefresh = false) {
-        // 1. 检查缓存
+        // 1. 缓存检查
         if (!forceRefresh && !this.needsRefresh(channel, peerId, agentDir)) {
             const cached = this.get(channel, peerId, agentDir);
             if (cached) {
@@ -131,17 +142,49 @@ export class PeerIdentityCache {
                 return cached;
             }
         }
-        // 2. 下载并验签 agent.md（SDK 自动验签）
+        // 2. 标准流程：checkAgentMd → fetchAgentMd（如果有变化）
         try {
-            logger.debug(`[PeerIdentityCache] Fetching agent.md: ${channel}#${peerId}`);
-            const result = await aunClient.fetchAgentMd(peerId);
-            const agentMd = result.content;
-            // 3. 更新缓存
-            return this.updateFromAgentMd(channel, peerId, agentDir, agentMd, Date.now());
+            logger.debug(`[PeerIdentityCache] Syncing agent.md: ${channel}#${peerId}`);
+            const state = await aunClient.checkAgentMd(peerId, 30);
+            let content;
+            if (state.in_sync && state.local_found) {
+                // 本地已是最新，读本地文件
+                const localPath = agentMdPath(peerId);
+                try {
+                    content = fs.readFileSync(localPath, 'utf-8');
+                }
+                catch { /* ignore */ }
+            }
+            if (!content) {
+                // 需要下载（不同步或本地不存在）
+                const info = await aunClient.fetchAgentMd(peerId);
+                content = info.content;
+            }
+            // 3. 比较 hash，仅在变化时重写 peer-identity.json
+            const newHash = 'sha256:' + crypto.createHash('sha256').update(content, 'utf-8').digest('hex');
+            const cached = this.get(channel, peerId, agentDir);
+            if (cached && cached.agentMdHash === newHash && cached.source === 'agentmd') {
+                return this.touchLastChecked(channel, peerId, agentDir, cached);
+            }
+            return this.updateFromAgentMd(channel, peerId, agentDir, content, Date.now());
         }
         catch (err) {
-            // 验签失败或下载失败 → 标记为 unknown，当做 agent
-            logger.warn(`[PeerIdentityCache] Failed to fetch agent.md: ${channel}#${peerId} err=${err instanceof Error ? err.message : String(err)}`);
+            // 4. 网络失败，fallback 本地文件
+            const localPath = agentMdPath(peerId);
+            try {
+                if (fs.existsSync(localPath)) {
+                    const localContent = fs.readFileSync(localPath, 'utf-8');
+                    logger.info(`[PeerIdentityCache] Network failed, using local agent.md for ${peerId}`);
+                    const localHash = 'sha256:' + crypto.createHash('sha256').update(localContent, 'utf-8').digest('hex');
+                    const cached = this.get(channel, peerId, agentDir);
+                    if (cached && cached.agentMdHash === localHash && cached.source === 'agentmd') {
+                        return this.touchLastChecked(channel, peerId, agentDir, cached);
+                    }
+                    return this.updateFromAgentMd(channel, peerId, agentDir, localContent, cached?.verifiedAt ?? 0);
+                }
+            }
+            catch { /* ignore fs errors */ }
+            logger.warn(`[PeerIdentityCache] Failed to resolve: ${channel}#${peerId} err=${err instanceof Error ? err.message : String(err)}`);
             return this.markUnknown(channel, peerId, agentDir);
         }
     }

package/dist/core/session/session-manager.js

@@ -36,8 +36,8 @@ export class SessionManager {
         // 来源2：群聊强制 proactive
         if (ct === 'group')
             return 'proactive';
-        // 来源3：非 human 对端（ai/bot）强制 proactive，无视 agent 的默认 chatmode 配置
-        if (peerType && peerType !== 'human' && peerType !== 'unknown')
+        // 来源3：非 human 对端强制 proactive，无视 agent 的默认 chatmode 配置
+        if (peerType && peerType !== 'human')
             return 'proactive';
         // 来源1：agent 配置默认值
         const resolved = this.sessionModeResolver?.(channel, ct, peerType);
@@ -850,6 +850,10 @@ export class SessionManager {
     async getActiveSession(channel, channelId) {
         return this.readActive(channel, channelId);
     }
+    /** 同步版 getActiveSession，支持精确路径定位（避免扫描） */
+    getActiveSessionSync(channel, channelId, channelType, selfId) {
+        return this.readActive(channel, channelId, channelType, selfId);
+    }
     async getThreadSession(channel, channelId, threadId) {
         let chatDir;
         try {

package/dist/core/trigger/manager.js

@@ -1,6 +1,7 @@
 import fs from 'fs';
 import path from 'path';
 import { atomicWriteJson, appendJsonl } from '../session/session-fs-store.js';
+import { formatChannelKey } from '../channel-loader.js';
 import { logger } from '../../utils/logger.js';
 export class TriggerManager {
     aid;
@@ -22,6 +23,26 @@ export class TriggerManager {
             const raw = fs.readFileSync(this.triggersPath, 'utf8');
             const data = JSON.parse(raw);
             this.triggers = new Map(Object.entries(data.triggers ?? {}));
+            // Migrate old channel key format: "selfPeerId#type#name" → "type#selfPeerId#name"
+            let migrated = false;
+            for (const trigger of this.triggers.values()) {
+                const fixed = this.migrateChannelKey(trigger.targetChannel);
+                if (fixed !== trigger.targetChannel) {
+                    trigger.targetChannel = fixed;
+                    migrated = true;
+                }
+                if (trigger.createdByChannel) {
+                    const fixedBy = this.migrateChannelKey(trigger.createdByChannel);
+                    if (fixedBy !== trigger.createdByChannel) {
+                        trigger.createdByChannel = fixedBy;
+                        migrated = true;
+                    }
+                }
+            }
+            if (migrated) {
+                logger.info(`[TriggerManager] Migrated old channel key format`);
+                this.save();
+            }
             return [...this.triggers.values()];
         }
         catch (e) {
@@ -30,6 +51,22 @@ export class TriggerManager {
             return [];
         }
     }
+    /**
+     * Detect and fix old format "selfPeerId#type#name" → current "type#selfPeerId#name".
+     * Old format: first segment contains '.' (AID like "evolai.agentid.pub").
+     */
+    migrateChannelKey(key) {
+        if (!key || !key.includes('#'))
+            return key;
+        const parts = key.split('#');
+        if (parts.length !== 3)
+            return key;
+        const [first, second, third] = parts;
+        if (first.includes('.') && !second.includes('.')) {
+            return formatChannelKey({ type: second, selfPeerId: first, name: third });
+        }
+        return key;
+    }
     save() {
         const data = {
             version: 1,

package/dist/index.js

@@ -5,6 +5,7 @@ import { ensureDataDirs, resolvePaths, getPackageRoot, agentMdPath } from './pat
 import { resolveAnthropicConfig } from './agents/resolve.js';
 import { loadDefaults, autoMigrateIfNeeded, migrateIdentitiesIfNeeded } from './config-store.js';
 import { CONFIG_SCHEMA_VERSION } from './types.js';
+import dotenv from 'dotenv';
 import { SessionManager } from './core/session/session-manager.js';
 import { ClaudeAgentPlugin } from './agents/claude-runner.js';
 import { CodexAgentPlugin } from './agents/codex-runner.js';
@@ -183,6 +184,8 @@ async function main() {
     logger.info(`EvolClaw v${readEvolclawVersion()} starting... (fastaun v${readFastaunVersion()})`);
     // 确保数据目录存在
     ensureDataDirs();
+    // 加载 $EVOLCLAW_HOME/.env 到 process.env（不覆盖已存在的变量）
+    dotenv.config({ path: path.join(resolvePaths().root, '.env') });
     // ── 单实例保护（pre-check + post-write self-check）──
     // pre-check：发现已有活 main 直接退出，避免起任何副作用
     {
@@ -313,7 +316,7 @@ async function main() {
         // 优先级：群聊 > nothuman > private
         if (chatType === 'group')
             return cm.group;
-        if (peerType && peerType !== 'human' && peerType !== 'unknown')
+        if (peerType && peerType !== 'human')
             return cm.nothuman;
         return cm.private;
     });

package/dist/paths.js

@@ -46,6 +46,14 @@ export function resolvePaths() {
     };
 }
 // ── AID 路径（agent.md 存放在 $EVOLCLAW_HOME/AIDs/<aid>/）──
+/**
+ * AUN SDK 数据根路径（密钥/证书/AgentMDs 等）。
+ * 与 evolclaw 数据共用 $EVOLCLAW_HOME 根，避免散落到 ~/.aun。
+ * 启动时 SDK 通过 aun_path 选项指向这里；agent.md 子目录通过 setAgentMdPath(aidsDir()) 单独设置。
+ */
+export function aunPath() {
+    return resolveRoot();
+}
 export function aidsDir() {
     return path.join(resolveRoot(), 'AIDs');
 }
@@ -109,30 +117,93 @@ export function ensureDataDirs() {
     fs.mkdirSync(p.eckDir, { recursive: true });
     fs.mkdirSync(eckDebugDir(), { recursive: true });
     fs.mkdirSync(aidsDir(), { recursive: true });
-    migrateAgentMdFromAun();
+    seedConfigTemplates();
+    migrateFromAun();
 }
+const MIGRATION_MARKER = '.migrated-from-aun';
 /**
- * One-time migration: copy agent.md from ~/.aun/AIDs/<aid>/ to $EVOLCLAW_HOME/AIDs/<aid>/
- * if the new location doesn't have it yet.
+ * 一次性迁移：把 ~/.aun 下的 SDK 数据搬到 $EVOLCLAW_HOME 下。
+ * 通过标记文件判断是否已迁移，完成后写入标记，后续版本可删除此函数。
  */
-function migrateAgentMdFromAun() {
-    const aunAidsDir = path.join(os.homedir(), '.aun', 'AIDs');
-    const ecAids = aidsDir();
-    if (!fs.existsSync(aunAidsDir) || aunAidsDir === ecAids)
+function migrateFromAun() {
+    const newRoot = resolveRoot();
+    const markerPath = path.join(newRoot, MIGRATION_MARKER);
+    if (fs.existsSync(markerPath))
+        return;
+    const oldRoot = path.join(os.homedir(), '.aun');
+    if (!fs.existsSync(oldRoot) || oldRoot === newRoot) {
+        try {
+            fs.writeFileSync(markerPath, new Date().toISOString(), 'utf-8');
+        }
+        catch { }
         return;
+    }
+    const copyFileIfMissing = (src, dst) => {
+        if (!fs.existsSync(src) || fs.existsSync(dst))
+            return;
+        fs.mkdirSync(path.dirname(dst), { recursive: true });
+        fs.copyFileSync(src, dst);
+    };
+    const copyDirIfMissing = (src, dst) => {
+        if (!fs.existsSync(src))
+            return;
+        if (!fs.statSync(src).isDirectory())
+            return;
+        for (const entry of fs.readdirSync(src, { withFileTypes: true })) {
+            const s = path.join(src, entry.name);
+            const d = path.join(dst, entry.name);
+            if (entry.isDirectory()) {
+                copyDirIfMissing(s, d);
+            }
+            else if (entry.isFile()) {
+                copyFileIfMissing(s, d);
+            }
+        }
+    };
     try {
-        for (const entry of fs.readdirSync(aunAidsDir, { withFileTypes: true })) {
-            if (!entry.isDirectory())
-                continue;
-            const oldMd = path.join(aunAidsDir, entry.name, 'agent.md');
-            const newMd = path.join(ecAids, entry.name, 'agent.md');
-            if (fs.existsSync(oldMd) && !fs.existsSync(newMd)) {
-                fs.mkdirSync(path.join(ecAids, entry.name), { recursive: true });
-                fs.copyFileSync(oldMd, newMd);
+        const oldAids = path.join(oldRoot, 'AIDs');
+        const newAids = aidsDir();
+        if (fs.existsSync(oldAids)) {
+            for (const entry of fs.readdirSync(oldAids, { withFileTypes: true })) {
+                if (!entry.isDirectory())
+                    continue;
+                copyDirIfMissing(path.join(oldAids, entry.name), path.join(newAids, entry.name));
             }
         }
+        copyDirIfMissing(path.join(oldRoot, 'CA'), path.join(newRoot, 'CA'));
+        for (const f of ['.seed', '.device_id']) {
+            copyFileIfMissing(path.join(oldRoot, f), path.join(newRoot, f));
+        }
+    }
+    catch { /* best-effort */ }
+    try {
+        fs.writeFileSync(markerPath, new Date().toISOString(), 'utf-8');
+    }
+    catch { }
+}
+/**
+ * 首次运行时从 assets/ 模板拷贝 config.json 和 .env 到 $EVOLCLAW_HOME。
+ * 已存在则跳过，不覆盖用户修改。
+ */
+function seedConfigTemplates() {
+    const root = resolveRoot();
+    const assetsDir = path.join(getPackageRoot(), 'assets');
+    const templates = [
+        { src: 'config.json.template', dst: 'config.json' },
+        { src: '.env.template', dst: '.env' },
+    ];
+    for (const { src, dst } of templates) {
+        const dstPath = path.join(root, dst);
+        if (fs.existsSync(dstPath))
+            continue;
+        const srcPath = path.join(assetsDir, src);
+        if (!fs.existsSync(srcPath))
+            continue;
+        try {
+            fs.copyFileSync(srcPath, dstPath);
+        }
+        catch { /* best-effort */ }
     }
-    catch { /* best-effort migration */ }
 }
 // ── kits 路径（始终从包内读取，不复制到 EVOLCLAW_HOME）──
 export function kitsDir() {

package/dist/utils/npm-ops.js

@@ -84,19 +84,26 @@ export function getLocalVersion() {
 }
 /**
  * 查询 npm registry 上指定包的最新版本。
- * 超时 15 秒，失败返回 null。
+ * 使用 HTTP fetch 直接查 registry API，不依赖 npm CLI。
+ * 超时 10 秒，失败返回 null。
  */
-export function checkLatestVersion(pkg = 'evolclaw') {
-    return new Promise((resolve) => {
-        execFile('npm', ['view', pkg, 'version'], { timeout: 15000 }, (err, stdout) => {
-            if (err) {
-                resolve(null);
-                return;
-            }
-            const ver = stdout.trim();
-            resolve(ver || null);
+export async function checkLatestVersion(pkg = 'evolclaw') {
+    try {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 10000);
+        const res = await fetch(`https://registry.npmjs.org/${pkg}/latest`, {
+            signal: controller.signal,
+            headers: { 'Accept': 'application/json' },
         });
-    });
+        clearTimeout(timer);
+        if (!res.ok)
+            return null;
+        const data = await res.json();
+        return data.version || null;
+    }
+    catch {
+        return null;
+    }
 }
 /**
  * 完整升级流程：检查 → 比较 → 安装（失败重试一次）