evolcore 0.0.11 → 0.0.13

package/kits/rules/05-venue.md

@@ -5,7 +5,7 @@
 | 变量 | 取值 | 说明 |
 |------|------|------|
 | `chatType` | `private` / `group` / null | null = 无渠道的本地 coding 会话 |
-| `mentionMode` | `mention-only` / `disabled` | 群内响应策略；取 agent/relation 配置，缺省时由服务器 `dispatchMode` 翻译（mention→mention-only，broadcast→disabled） |
+| `mentionMode` | `mention-only` / `disabled` | 群内响应策略；取 agent/relation 配置，缺省时使用群服务器下发的 `mention_mode` |
 | `clientType` | `desktop` / `web` / `mobile` | 有值时额外加载客户端场景文档 |
 | `permissionMode` | readonly/auto/request/bypass | 当前生效权限模式 |
 | `venueUid` | 恒为 undefined | 声明了但源码固定不填，模板有 `{{?}}` 守卫所以永不渲染——**不要依赖它** |
@@ -39,7 +39,7 @@
 ## Venue 类型抽象
 
 环境层关注的是**类型**，而非具体实例。类型只有 `private` 和 `group` 两种（即 `chatType` 的两个非空取值）——
-没有 `broadcast` 这个 venue 类型，`broadcast` 是**群分发模式** `dispatchMode` 的取值之一（另一个是 `mention`）。
+没有 `broadcast` 这个 venue 类型；群响应策略统一由 `mentionMode` 表达。
 
 "张三所在的 team-alpha 这个**具体群**"不属于环境层，它是关系层的对端实例，数据落 `relations/<peerKey>/`。
 

package/kits/schemas/role-config.schema.1.json

@@ -132,6 +132,7 @@
         "properties": {
           "allow": { "type": "boolean", "description": "是否允许该角色执行匹配的 operation。" },
           "dangerous": { "type": "boolean", "default": false, "description": "是否将该授权规则标记为危险操作规则；危险操作还会应用额外安全约束。" },
+          "permissionMode": { "type": "string", "enum": ["readonly", "auto", "request", "bypass"], "description": "临时 operation 级权限模式；后续迁移到作用域模式规则。" },
           "scopes": {
             "type": "array",
             "items": { "type": "string", "enum": ["relation", "role", "agent", "process", "filesystem", "control", "raw-cli"], "description": "该命令权限适用的一个配置或执行作用域。", "x-enumDescriptions": { "relation": "当前 Agent 与对端的关系配置域", "role": "独立角色注册表或角色策略配置域", "agent": "单个 Agent 的配置与生命周期域", "process": "EvolCore 进程级配置与运行域", "filesystem": "受控文件系统操作域", "control": "控制面命令和管理通道域", "raw-cli": "未经结构化 operation 封装的原始 CLI 执行域" } },

package/kits/schemas/single-session.schema.1.json

@@ -11,10 +11,10 @@
       "type": "boolean",
       "enum": [true, false],
       "default": true,
-      "description": "proactive 首工具表态检查（仅 chatmode=proactive 生效）：首个工具调用前必须先向对端表态，否则拦截。",
+      "description": "proactive 首个本地工具表态检查（仅 chatmode=proactive 生效）：首个可被 PreToolUse 覆盖的本地工具必须是当前会话精确对应的 ec msg/group send，否则拦截；WebSearch、图像生成、浏览器和 Computer Use 等 hosted 工具不进入此硬拒绝边界。",
       "x-enumDescriptions": {
-        "true": "启用：首工具前必须先发送消息或文件",
-        "false": "禁用：允许直接调用工具"
+        "true": "启用：首个 hook 可覆盖的本地工具必须是精确会话 send",
+        "false": "禁用：不执行 proactive 首个本地工具 send 检查"
       }
     },
     "tool_use_reminder": {

package/kits/schemas/single-session.schema.2.json

@@ -34,10 +34,10 @@
       "type": "boolean",
       "enum": [true, false],
       "default": true,
-      "description": "proactive 首工具表态检查（仅 chatmode=proactive 生效）：首个工具调用前必须先向对端表态，否则拦截。",
+      "description": "proactive 首个本地工具表态检查（仅 chatmode=proactive 生效）：首个可被 PreToolUse 覆盖的本地工具必须是当前会话精确对应的 ec msg/group send，否则拦截；WebSearch、图像生成、浏览器和 Computer Use 等 hosted 工具不进入此硬拒绝边界。",
       "x-enumDescriptions": {
-        "true": "启用：首工具前必须先发送消息或文件",
-        "false": "禁用：允许直接调用工具"
+        "true": "启用：首个 hook 可覆盖的本地工具必须是精确会话 send",
+        "false": "禁用：不执行 proactive 首个本地工具 send 检查"
       }
     },
     "tool_use_reminder": {

package/kits/templates/roles/admin.json

@@ -27,11 +27,21 @@
     "role.revoke": { "allow": true, "scopes": ["agent"] },
     "role.policy.read": { "allow": true, "scopes": ["agent"] },
     "role.relation.read": { "allow": true, "scopes": ["agent"] },
+    "agent.baseagent.update": {
+      "allow": true,
+      "scopes": ["agent"],
+      "constraints": { "requireAgentOwner": true, "targetCurrentAgentOnly": true }
+    },
     "observable.current": {
       "allow": true,
       "scopes": ["agent"],
       "constraints": { "requireAgentOwner": true }
     },
+    "observable.update": {
+      "allow": true,
+      "scopes": ["agent"],
+      "constraints": { "requireAgentOwner": true, "targetCurrentAgentOnly": true }
+    },
     "config.get": { "allow": true, "scopes": ["agent", "relation"] },
     "config.set": { "allow": true, "scopes": ["agent", "relation"] },
     "config.unset": { "allow": true, "scopes": ["agent", "relation"] },
@@ -41,6 +51,23 @@
       "scopes": ["agent"],
       "constraints": { "requireAgentAdmin": true }
     },
+    "ec.aid.show": {
+      "allow": true,
+      "dangerous": true,
+      "scopes": ["agent"],
+      "constraints": { "targetCurrentAgentOnly": true, "requireAgentAdmin": true }
+    },
+    "ec.aid.agentmd.put": {
+      "allow": true,
+      "dangerous": true,
+      "scopes": ["agent"],
+      "constraints": { "targetCurrentAgentOnly": true, "requireAgentAdmin": true }
+    },
+    "ec.fs.mkdir": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.upload": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.copy": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.move": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.remove": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
     "*": { "allow": true },
     "agent.reload": {
       "allow": true,

package/kits/templates/roles/member.json

@@ -24,7 +24,7 @@
     "storage.*": { "allow": false },
     "aid.*": { "allow": false },
     "gateway.*": { "allow": false },
-    "group.list": { "allow": false },
+    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
     "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
     "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
     "agent.*": { "allow": false },
@@ -53,8 +53,41 @@
     "trigger.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
     "ec.msg.send": { "allow": true, "constraints": { "ownPeerOnly": true } },
     "ec.msg.file": { "allow": true, "constraints": { "ownPeerOnly": true } },
+    "ec.msg.history": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.msg.online": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.version": { "allow": true },
+    "ec.aid.show": { "allow": true, "dangerous": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.aid.lookup": { "allow": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.aid.agentmd.get": { "allow": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.aid.agentmd.put": { "allow": false },
+    "ec.fs.ls": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.stat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.lstat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.cat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.find": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.df": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.mkdir": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.upload": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.copy": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.move": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.remove": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.status": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.list": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.trace": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.return": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.queue.*": { "allow": false },
     "ec.group.send": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
     "ec.group.file": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
+    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.pull": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.members": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.online": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.file": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.queue.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
     "ec.ctl.*": { "allow": false },
     "cli.exec.raw": { "allow": false, "dangerous": true },
     "dangerous:*": { "allow": false, "dangerous": true }

package/kits/templates/roles/visitor.json

@@ -20,7 +20,11 @@
     "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
     "model.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
     "model.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.use": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.info": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.use": { "allow": false },
+    "model.effort": { "allow": false },
+    "model.reset": { "allow": false },
+    "model.check": { "allow": false },
     "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
     "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
     "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
@@ -32,9 +36,19 @@
     "group.mentionmode.update": { "allow": false },
     "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
     "group.rulespolicy.update": { "allow": false },
-    "trigger.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "trigger.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.show": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.history": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.eventCatalog": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.create": { "allow": false },
+    "trigger.update": { "allow": false },
+    "trigger.setEnabled": { "allow": false },
+    "trigger.cancel": { "allow": false },
+    "trigger.delete": { "allow": false },
+    "trigger.run": { "allow": false },
     "session.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
-    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
+    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
     "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
     "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
     "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
@@ -43,8 +57,26 @@
     "capability.read": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
     "ec.msg.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
     "ec.msg.file": { "allow": false },
+    "ec.msg.history": { "allow": false },
+    "ec.msg.online": { "allow": false },
+    "ec.version": { "allow": true },
+    "ec.aid.show": { "allow": false },
+    "ec.aid.lookup": { "allow": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.aid.agentmd.get": { "allow": false },
+    "ec.aid.agentmd.put": { "allow": false },
+    "ec.fs.*": { "allow": false },
+    "ec.handoff.*": { "allow": false },
+    "ec.queue.*": { "allow": false },
+    "storage.*": { "allow": false },
     "ec.group.send": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true } },
     "ec.group.file": { "allow": false },
+    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.pull": { "allow": false },
+    "ec.group.members": { "allow": false },
+    "ec.group.online": { "allow": false },
+    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
     "ec.ctl.*": { "allow": false },
     "cli.exec.raw": { "allow": false, "dangerous": true },
     "dangerous:*": { "allow": false, "dangerous": true }

package/kits/templates/system-fragments/bootstrap.md

@@ -17,6 +17,6 @@ phase: bootstrapping
 5. owner 明确确认后，只编辑本地 agent.md（`$EVOLCORE_HOME/AIDs/{{selfAid}}/agent.md`）YAML frontmatter 中的 `name`、`description`、`tags`，保留其它字段和正文，并检查 YAML 与字段格式有效。
 6. 调用 `ec aid agentmd put {{selfAid}}` 签名并发布 agent.md。只有命令明确成功后，才调用 `ec agent ready {{selfAid}}` 完成 bootstrap。
 7. 任一步骤失败时，不调用 ready，不盲目重复尝试；说明具体失败原因并在修正后继续。
-8. `ec agent ready {{selfAid}}` 必须是 bootstrap 的最后一个操作。成功后不要再生成一段完成说明，系统会发送正式欢迎消息。
+8. `ec agent ready {{selfAid}}` 必须是 bootstrap 的最后一个操作。成功后系统会结束当前 bootstrap 上下文、创建全新的主会话并发送正式欢迎消息；不要再生成一段完成说明，也不要在旧上下文中继续处理任务。
 
 完成前不要承诺已经进入正常工作状态，也不要尝试与上述流程无关的文件修改、网络通信或系统配置操作。

package/kits/templates/system-fragments/channel.md

@@ -22,7 +22,7 @@ chatMode: {{chatMode}} # interactive=同步对话 / proactive=主动推送
 # 设计意图：避免 agent↔agent 无限循环；某一方不再发送 → 对话自然终止。
 # 拿不到 self-aid 时可用 ec ctl send "<text>"（自动继承当前 AID 和对端）。
 # Shell 调用边界：每次工具调用只能执行一条完整的 ec 命令。
-# 禁止拼接 command -v、ec aid、&&、||、;、|、重定向、子 shell、bash -lc/sh -c 或其它脚本。
+# 禁止拼接 command -v。`ec aid` 仅允许对 {{selfAid}} 精确执行 show、lookup、agentmd get；仅 request/bypass 可执行 agentmd put。可选后缀仅限 --format json；禁止 &&、||、;、|、重定向、子 shell、bash -lc/sh -c 或其它脚本。
 # 不要先做 CLI 探测；直接执行下方的单条 ec 命令，读取 JSON/回执后再决定下一步。
 # 工具审批拒绝时原样报告并停止，不要通过追加其它命令或提权重试绕过审批。
 {{/}}

package/kits/templates/system-fragments/session.md

@@ -44,7 +44,7 @@ readonly: true — 禁止写入项目目录及临时目录；如需生成文件
 #   - 每 {{proactiveToolReportInterval}} 次非发送工具调用后，必须先用发送命令汇报当前进展和下一步，否则后续非发送工具会被拒绝
 {{/}}
 # 命令速查：
-# 每次工具调用只执行一条完整的 ec 命令；禁止 command -v、ec aid、&&、||、;、|、重定向、子 shell、bash -lc/sh -c 或其它脚本与其串联。
+# 每次工具调用只执行一条完整的 ec 命令；禁止 command -v。`ec aid` 仅允许对 {{selfAid}} 精确执行 show、lookup、agentmd get；仅 request/bypass 可执行 agentmd put。可选后缀仅限 --format json；禁止 &&、||、;、|、重定向、子 shell、bash -lc/sh -c 或其它脚本与其串联。
 # 审批拒绝时原样报告并停止；必须收到包含 message_id/status 的成功回执后才能声称已发送。
 {{?chatType=group}}
 #   ec group send {{selfAid}} {{groupId}} "<text>" [--return none|required] [--file <path>] [--mention <aid>]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evolcore",
-  "version": "0.0.11",
+  "version": "0.0.13",
   "description": "AI Agent gateway connecting Claude, Codex, Gemini, and the bundled ecagent runner to messaging channels with multi-project session management",
   "type": "module",
   "main": "dist/index.js",
@@ -44,7 +44,7 @@
     "prepublishOnly": "npm test"
   },
   "dependencies": {
-    "@agentunion/fastaun": "^0.5.4",
+    "@agentunion/fastaun": "0.5.6",
     "@anthropic-ai/claude-agent-sdk": "0.3.220",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "ajv": "^8.20.0",

package/dist/aun/msg/payload-type.js

@@ -1,27 +0,0 @@
-import path from 'path';
-const EXT_TYPE_MAP = {
-    // image
-    '.png': 'image', '.jpg': 'image', '.jpeg': 'image',
-    '.gif': 'image', '.webp': 'image', '.svg': 'image',
-    '.bmp': 'image', '.heic': 'image', '.heif': 'image',
-    // video
-    '.mp4': 'video', '.mov': 'video', '.webm': 'video',
-    '.avi': 'video', '.mkv': 'video', '.m4v': 'video',
-    // voice
-    '.opus': 'voice', '.mp3': 'voice', '.aac': 'voice',
-    '.m4a': 'voice', '.wav': 'voice', '.flac': 'voice', '.ogg': 'voice',
-};
-/**
- * 按扩展名推断 payload.type。
- * 未识别的扩展名归类为 'file'。
- */
-export function inferPayloadType(filename) {
-    const ext = path.extname(filename).toLowerCase();
-    return EXT_TYPE_MAP[ext] ?? 'file';
-}
-/**
- * 校验显式传入的 --as 值。
- */
-export function isValidPayloadType(value) {
-    return value === 'image' || value === 'video' || value === 'voice' || value === 'file';
-}

package/dist/aun/rpc/caller.js

@@ -1,42 +0,0 @@
-import { createShortConnection } from './connection.js';
-export async function rpcCall(aid, method, params, opts) {
-    const conn = await createShortConnection(aid, opts);
-    try {
-        const result = await conn.call(method, params);
-        return { ok: true, result };
-    }
-    catch (e) {
-        if (e.code !== undefined && e.message !== undefined) {
-            return { ok: false, error: { code: e.code, message: e.message, data: e.data } };
-        }
-        return { ok: false, error: { code: -1, message: String(e.message || e) } };
-    }
-    finally {
-        await conn.close();
-    }
-}
-export async function rpcBatch(aid, calls, opts) {
-    const conn = await createShortConnection(aid, opts);
-    const results = [];
-    try {
-        for (const { method, params } of calls) {
-            try {
-                const result = await conn.call(method, params);
-                results.push({ ok: true, result });
-            }
-            catch (e) {
-                if (e.code !== undefined && e.message !== undefined) {
-                    results.push({ ok: false, error: { code: e.code, message: e.message, data: e.data } });
-                }
-                else {
-                    results.push({ ok: false, error: { code: -1, message: String(e.message || e) } });
-                }
-                break; // stop on first failure
-            }
-        }
-    }
-    finally {
-        await conn.close();
-    }
-    return results;
-}

package/dist/aun/rpc/connection.js

@@ -1,25 +0,0 @@
-import { getAidStore, loadClient, SLOT } from '../aid/store.js';
-export async function createShortConnection(aid, opts) {
-    const store = await getAidStore({ slotId: opts?.slotId ?? SLOT.cli, aunPath: opts?.aunPath });
-    try {
-        const client = await loadClient(store, aid);
-        await client.connect({ connection_kind: 'short', short_ttl_ms: 30000, auto_reconnect: false });
-        return {
-            async call(method, params) {
-                return client.call(method, params);
-            },
-            async close() {
-                try {
-                    await client.close();
-                }
-                finally {
-                    store.close();
-                }
-            },
-        };
-    }
-    catch (e) {
-        store.close();
-        throw e;
-    }
-}

package/dist/aun/storage/manage.js

@@ -1,10 +0,0 @@
-import { rpcCall } from '../rpc/caller.js';
-export async function storageLs(aid, prefix, opts) {
-    return rpcCall(aid, 'storage.list_objects', { prefix: prefix || '' }, { aunPath: opts?.aunPath });
-}
-export async function storageRm(aid, remotePath, opts) {
-    return rpcCall(aid, 'storage.delete_object', { object_key: remotePath }, { aunPath: opts?.aunPath });
-}
-export async function storageQuota(aid, opts) {
-    return rpcCall(aid, 'storage.get_quota', {}, { aunPath: opts?.aunPath });
-}

package/dist/config/access-policy-domain.js

@@ -1,18 +0,0 @@
-import { isValidAid } from '../aun/aid/validation.js';
-export function validAgentOwnerIds(agent) {
-    return [...new Set((agent?.owners ?? [])
-            .map(value => String(value || '').trim())
-            .filter(isValidAid))];
-}
-export function validateAccessPolicyDomain(selfAid, agent) {
-    const access = agent.access;
-    if (!access)
-        return undefined;
-    if (access.policyMode !== 'open' && validAgentOwnerIds(agent).length === 0) {
-        return {
-            code: 'restricted_mode_without_owner',
-            message: `Agent ${selfAid} cannot use ${access.policyMode} without an Owner`,
-        };
-    }
-    return undefined;
-}

package/dist/config/config-batch-get.js

@@ -1,11 +0,0 @@
-import { normalizeCliArgv } from '../cli/cli-argv.js';
-export function splitConfigBatchGetArgv(inputArgv) {
-    const argv = normalizeCliArgv(inputArgv);
-    if (argv[0] !== 'config' || argv[1] !== 'get')
-        return null;
-    const fields = [];
-    let i = 2;
-    for (; i < argv.length && !argv[i].startsWith('-'); i++)
-        fields.push(argv[i]);
-    return { fields, rest: argv.slice(i) };
-}

package/dist/config/owner-policy.js

@@ -1,4 +0,0 @@
-export function shouldFailFastForMissingOwners(env = process.env) {
-    const value = (env.EVOLCORE_REQUIRE_OWNERS || '').trim().toLowerCase();
-    return value === '1' || value === 'true' || value === 'yes';
-}

package/dist/config/role-config-v4-startup.js

@@ -1,32 +0,0 @@
-import path from 'path';
-import { pathToFileURL } from 'url';
-import { getPackageRoot, resolvePaths } from '../paths.js';
-import { assertRoleConfigV4Ready, ConfigError } from './config-manager.js';
-/**
- * Automatically applies the one-off role config migration before daemon startup.
- * The migration script owns backup, validation, atomic writes, rollback, and locking.
- */
-export async function ensureRoleConfigV4OnStartup() {
-    try {
-        assertRoleConfigV4Ready();
-        return null;
-    }
-    catch (error) {
-        if (!(error instanceof ConfigError) || error.code !== 'ROLE_CONFIG_MIGRATION_REQUIRED')
-            throw error;
-    }
-    const home = resolvePaths().root;
-    const script = path.join(getPackageRoot(), 'kits', 'migrations', 'migrate-role-config-v4.mjs');
-    try {
-        const migration = await import(pathToFileURL(script).href);
-        const result = migration.runMigration({ home, apply: true });
-        assertRoleConfigV4Ready();
-        return result;
-    }
-    catch (error) {
-        const detail = error instanceof Error ? error.message : String(error);
-        throw new ConfigError('ROLE_CONFIG_MIGRATION_FAILED', `Automatic role config v4 migration failed: ${detail}\n` +
-            `Fix the reported config or run manually:\n` +
-            `node kits/migrations/migrate-role-config-v4.mjs --apply --home ${JSON.stringify(home)}`, { cause: error });
-    }
-}

package/dist/config/role-config-v5-startup.js

@@ -1,27 +0,0 @@
-import path from 'path';
-import { pathToFileURL } from 'url';
-import { getPackageRoot, resolvePaths } from '../paths.js';
-import { assertRoleConfigV5Ready, ConfigError } from './config-manager.js';
-export async function ensureRoleConfigV5OnStartup() {
-    try {
-        assertRoleConfigV5Ready();
-        return null;
-    }
-    catch (error) {
-        if (!(error instanceof ConfigError) || error.code !== 'ROLE_CONFIG_V5_MIGRATION_REQUIRED')
-            throw error;
-    }
-    const home = resolvePaths().root;
-    const script = path.join(getPackageRoot(), 'kits', 'migrations', 'migrate-role-config-v5.mjs');
-    try {
-        const migration = await import(pathToFileURL(script).href);
-        const result = migration.runMigration({ home, apply: true });
-        assertRoleConfigV5Ready();
-        return result;
-    }
-    catch (error) {
-        const detail = error instanceof Error ? error.message : String(error);
-        throw new ConfigError('ROLE_CONFIG_V5_MIGRATION_FAILED', `Automatic standalone role migration failed: ${detail}\n` +
-            `node kits/migrations/migrate-role-config-v5.mjs --apply --home ${JSON.stringify(home)}`, { cause: error });
-    }
-}

package/dist/core/auth/trigger-authorization.js

@@ -1,15 +0,0 @@
-const CROSS_AGENT_READ_OPERATIONS = new Set([
-    'trigger.list',
-    'trigger.show',
-    'trigger.history',
-]);
-export function isCrossAgentTriggerOperationAllowed(input) {
-    if (input.control || input.taskAgentAid === input.targetAgentAid)
-        return true;
-    if (!input.taskAgentAid || !input.targetManagement)
-        return false;
-    return CROSS_AGENT_READ_OPERATIONS.has(input.operation);
-}
-export function isCrossAgentTriggerReadOperation(operation) {
-    return CROSS_AGENT_READ_OPERATIONS.has(operation);
-}

package/dist/core/command/evol-menu-version-gate.js

@@ -1,39 +0,0 @@
-import { loadDaemonConfig } from '../../config-store.js';
-import { readInstalledEvolcoreVersion } from '../../utils/evolcore-version.js';
-import { compareStableSemver, parseStableSemver } from '../../utils/stable-semver.js';
-export function evaluateEvolMenuVersionGate(input) {
-    const minimum = loadDaemonConfig().aun?.minEvolVersion;
-    if (!minimum)
-        return null;
-    const minimumVersion = parseStableSemver(minimum);
-    if (!minimumVersion) {
-        throw new Error('daemon.json.aun.minEvolVersion must use stable X.Y.Z format');
-    }
-    const received = input.protectedHeaders?.evol_version;
-    const receivedVersion = input.encrypted ? parseStableSemver(received) : null;
-    if (!receivedVersion || compareStableSemver(receivedVersion, minimumVersion) < 0) {
-        return {
-            code: 'UPGRADE_REQUIRED',
-            message: `Evol ${minimum} or later is required`,
-            data: {
-                minimum,
-                received: receivedVersion ? received : null,
-            },
-        };
-    }
-    return null;
-}
-export function isEvolMenuVersionGateEnabled() {
-    return loadDaemonConfig().aun?.minEvolVersion !== undefined;
-}
-/** Token may be issued while disabled, but only this flag makes it an access requirement. */
-export function isAunMenuTokenRequired() {
-    return loadDaemonConfig().aun?.menuTokenRequired === true;
-}
-export function evolMenuResponseTransportMetadata() {
-    return {
-        // Clear inherited request state so AUNChannel applies daemon aun.defaultEncrypt.
-        encrypted: undefined,
-        protectedHeaders: { ec_version: readInstalledEvolcoreVersion() },
-    };
-}

package/dist/core/interaction-registration.js

@@ -1,10 +0,0 @@
-/** Bind an adapter response to its runtime-owned channel identity domain. */
-export function registerAdapterInteractions(adapter, router) {
-    const channelKey = adapter.channelKey;
-    adapter.onInteraction?.(async (response) => {
-        return router.handleAsync({ ...response, channelKey });
-    });
-    adapter.onInteractionInvalidated?.((interactionId, reason) => {
-        return router.cancelFromChannel(interactionId, reason);
-    });
-}

package/dist/core/permission/execution-sandbox.js

@@ -1,16 +0,0 @@
-import { normalizePermissionMode } from './mode.js';
-/**
- * Phase one only disables the task execution sandbox for an authenticated
- * owner running in bypass mode. Every other combination remains fail-closed.
- */
-export function resolvePhaseOneExecutionSandbox(permissionMode, role) {
-    const normalizedMode = normalizePermissionMode(permissionMode).mode;
-    const normalizedRole = role ?? undefined;
-    const sandboxOff = normalizedMode === 'bypass' && normalizedRole === 'owner';
-    return {
-        permissionMode: normalizedMode,
-        role: normalizedRole,
-        state: sandboxOff ? 'off' : 'active',
-        reason: sandboxOff ? 'owner-bypass' : 'phase-one-required',
-    };
-}

package/dist/core/relation/peer-key.js

@@ -1 +0,0 @@
-export * from './peer-identity.js';

package/dist/core/session/session-key.js

@@ -1,24 +0,0 @@
-/**
- * sessionKey: agent 内部会话路由键。
- * 格式: channelType#urlEncode(channelId)#urlEncode(threadId)
- * 无话题时 threadId 固定为 'main'。
- */
-export const DEFAULT_THREAD_ID = 'main';
-export function formatSessionKey(channelType, channelId, threadId) {
-    const tid = threadId || DEFAULT_THREAD_ID;
-    return `${channelType}#${encodeURIComponent(channelId)}#${encodeURIComponent(tid)}`;
-}
-export function parseSessionKey(key) {
-    const first = key.indexOf('#');
-    if (first <= 0)
-        throw new Error(`Invalid session key: ${key}`);
-    const rest = key.slice(first + 1);
-    const second = rest.indexOf('#');
-    if (second <= 0)
-        throw new Error(`Invalid session key (missing threadId): ${key}`);
-    return {
-        channelType: key.slice(0, first),
-        channelId: decodeURIComponent(rest.slice(0, second)),
-        threadId: decodeURIComponent(rest.slice(second + 1)),
-    };
-}

package/dist/eck/baseagent-caps.js

@@ -1,18 +0,0 @@
-export const BASEAGENT_CAPS = {
-    'claude-code': {
-        autoLoadsRules: true,
-        supportsSystemPrompt: true,
-    },
-    'claude': {
-        autoLoadsRules: true,
-        supportsSystemPrompt: true,
-    },
-    'codex': {
-        autoLoadsRules: false,
-        supportsSystemPrompt: true,
-    },
-    'gemini': {
-        autoLoadsRules: false,
-        supportsSystemPrompt: true,
-    },
-};