evolcore 0.0.19 → 0.0.20

package/dist/cli/daemon-commands.js

@@ -58,15 +58,21 @@ function printNoSelfAgentHints(options) {
             console.log(`  - ${skippedAgent.dirName}: ${skippedAgent.reason}`);
     }
 }
-async function probeDaemon(socketPath, timeoutMs = 1000) {
+// Windows named-pipe connection setup can take a couple of seconds on a busy
+// host (especially on the first request after the daemon starts). A one-second
+// probe causes `ec stop` to skip the IPC shutdown path and fall back to
+// taskkill, even though the daemon is healthy and able to shut down gracefully.
+const DAEMON_PROBE_TIMEOUT_MS = platform.isWindows ? 5_000 : 1_000;
+export const DAEMON_SHUTDOWN_TIMEOUT_MS = platform.isWindows ? 10_000 : 3_000;
+async function probeDaemon(socketPath, timeoutMs = DAEMON_PROBE_TIMEOUT_MS) {
     const response = await ipcQuery(socketPath, { type: 'ping' }, timeoutMs);
     if (response?.pong !== true || !Number.isInteger(response.pid) || response.pid <= 0)
         return null;
     return response;
 }
 /** Ask the daemon to run its own graceful shutdown lifecycle. */
-export async function requestDaemonShutdown(socketPath, timeoutMs = 3_000, reason = 'cli', expectedPids) {
-    const daemon = await probeDaemon(socketPath, Math.min(timeoutMs, 1_000));
+export async function requestDaemonShutdown(socketPath, timeoutMs = DAEMON_SHUTDOWN_TIMEOUT_MS, reason = 'cli', expectedPids) {
+    const daemon = await probeDaemon(socketPath, Math.min(timeoutMs, DAEMON_PROBE_TIMEOUT_MS));
     if (!daemon || (expectedPids && !expectedPids.has(daemon.pid)))
         return null;
     const response = await ipcQuery(socketPath, {
@@ -654,7 +660,7 @@ export async function cmdStop() {
         console.log(`⚠ 检测到未登记的 EvolCore 进程，将一并停止: ${runtimeOrphans.map(orphan => orphan.pid).join(', ')}`);
     }
     const gracefulPid = ping && pids.has(ping.pid)
-        ? await requestDaemonShutdown(p.socket, 3_000, 'ec stop', pids)
+        ? await requestDaemonShutdown(p.socket, DAEMON_SHUTDOWN_TIMEOUT_MS, 'ec stop', pids)
         : null;
     const stopped = await Promise.all([...pids].map(pid => stopPid(pid, pid === gracefulPid)));
     if (stopped.some(result => !result)) {
@@ -726,7 +732,7 @@ export async function cmdRestart(opts = {}) {
         const mainPids = new Set(aliveMains.map(entry => entry.record.pid));
         const currentPing = await probeDaemon(socketPath);
         const gracefulPid = currentPing && mainPids.has(currentPing.pid)
-            ? await requestDaemonShutdown(socketPath, 3_000, 'ec restart', mainPids)
+            ? await requestDaemonShutdown(socketPath, DAEMON_SHUTDOWN_TIMEOUT_MS, 'ec restart', mainPids)
             : null;
         const stopped = await Promise.all(aliveMains.map(m => stopPid(m.record.pid, m.record.pid === gracefulPid)));
         if (stopped.some(result => !result)) {
@@ -759,7 +765,7 @@ export async function cmdRestart(opts = {}) {
             const orphanPids = new Set(runtimeOrphans.map(orphan => orphan.pid));
             const currentPing = await probeDaemon(socketPath);
             const gracefulPid = currentPing && orphanPids.has(currentPing.pid)
-                ? await requestDaemonShutdown(socketPath, 3_000, 'ec restart', orphanPids)
+                ? await requestDaemonShutdown(socketPath, DAEMON_SHUTDOWN_TIMEOUT_MS, 'ec restart', orphanPids)
                 : null;
             const stopped = await Promise.all(runtimeOrphans.map(o => stopPid(o.pid, o.pid === gracefulPid)));
             if (stopped.some(result => !result)) {

package/dist/cli/index.js

@@ -118,6 +118,7 @@ export async function main(args) {
 
 仅初始化 defaults.json:
   ec init                          交互式（写完 defaults.json 后嵌套 agent new）
+                                  选择 ecagent 时会继续询问 API Key 和 Base URL
   ec init --non-interactive [选项]
     --baseagent <claude|codex|gemini|ecagent>    默认: PATH 中第一个可用项；ecagent 需显式选择
     --force                              已存在 defaults.json 时覆盖

package/dist/cli/init.js

@@ -8,7 +8,7 @@ import { scanInstances } from '../utils/instance-registry.js';
 import { saveDefaultsSafe, loadAllAgents, loadDaemonConfig, saveDaemonConfig } from '../config-store.js';
 import { generateControlAid, resolveControlAidDomain } from '../aun/aid/control-aid.js';
 import { getCodexAppServerAvailability } from '../agents/codex-runner.js';
-import { resolveEcagentConfig } from '../agents/baseagent.js';
+import { DEFAULT_ECAGENT_BASE_URL, resolveEcagentConfig } from '../agents/baseagent.js';
 import { defaultProjectsRoot } from '../utils/project-path.js';
 import { WEB_CLI_BIN, WEB_PACKAGE_LATEST } from '../product.js';
 import { autostartInstalled, autostartPlatformLabel, configureAutostart } from '../utils/autostart.js';
@@ -79,14 +79,14 @@ function ecagentUnavailableReason() {
         return error instanceof Error ? error.message : String(error);
     }
 }
-function buildDefaults(chosen, available, projectsDefaultPath) {
+function buildDefaults(chosen, available, projectsDefaultPath, ecagentConfig) {
     const baseagents = {};
     for (const b of available) {
         baseagents[b] = {};
     }
     // ecagent is bundled with EvolCore, so declare it even when the caller
     // supplies a reduced availability list (for example, a test probe).
-    baseagents.ecagent ??= {};
+    baseagents.ecagent = ecagentConfig ?? baseagents.ecagent ?? {};
     return {
         $schema_version: 1,
         active_baseagent: chosen,
@@ -94,8 +94,8 @@ function buildDefaults(chosen, available, projectsDefaultPath) {
         ...(projectsDefaultPath ? { projects: { defaultPath: projectsDefaultPath } } : {}),
     };
 }
-function writeDefaults(chosen, available, projectsDefaultPath) {
-    saveDefaultsSafe(buildDefaults(chosen, available, projectsDefaultPath));
+function writeDefaults(chosen, available, projectsDefaultPath, ecagentConfig) {
+    saveDefaultsSafe(buildDefaults(chosen, available, projectsDefaultPath, ecagentConfig));
 }
 function hasCompletedInitConfig() {
     const p = resolvePaths();
@@ -263,7 +263,7 @@ export async function cmdInit(options) {
         }
     }
     const available = detectAvailable(codexAvailability);
-    if (available.length === 0 || (available.length === 1 && available[0] === 'ecagent' && ecagentUnavailableReason())) {
+    if (available.length === 0) {
         console.log('❌ 未检测到可用 baseagent。请安装至少一款：');
         console.log('  - claude CLI');
         console.log('  - gemini CLI');
@@ -361,13 +361,6 @@ export async function cmdInit(options) {
                     console.log(`  ${input} 当前环境不可用（可用: ${available.join('/')}）`);
                     continue;
                 }
-                if (input === 'ecagent') {
-                    const reason = ecagentUnavailableReason();
-                    if (reason) {
-                        console.log(`  ecagent 当前环境不可用：${reason}`);
-                        continue;
-                    }
-                }
                 chosen = input;
             }
             return chosen;
@@ -405,13 +398,59 @@ export async function cmdInit(options) {
                 return resolved;
             }
         }
+        async function askEcagentConfig() {
+            let configured;
+            try {
+                const raw = JSON.parse(fs.readFileSync(defaultsPath, 'utf8'));
+                const candidate = raw?.baseagents?.ecagent;
+                if (candidate && typeof candidate === 'object' && !Array.isArray(candidate)) {
+                    configured = candidate;
+                }
+            }
+            catch {
+                // A malformed or missing defaults file should not prevent the user
+                // from supplying a fresh ecagent configuration during init.
+                configured = undefined;
+            }
+            const usable = (value) => {
+                if (typeof value !== 'string')
+                    return false;
+                const normalized = value.trim();
+                if (!normalized)
+                    return false;
+                const lower = normalized.toLowerCase();
+                return !lower.includes('your-') && !lower.includes('placeholder');
+            };
+            const configuredApiKey = usable(configured?.apiKey) ? configured.apiKey.trim() : undefined;
+            const environmentApiKeyName = !configuredApiKey
+                ? (usable(process.env.ECAGENT_API_KEY)
+                    ? 'ECAGENT_API_KEY'
+                    : usable(process.env.OPENAI_API_KEY) ? 'OPENAI_API_KEY' : undefined)
+                : undefined;
+            let apiKey = '';
+            while (!apiKey) {
+                const suffix = configuredApiKey || environmentApiKeyName ? '（回车保留当前配置）' : '（必填）';
+                const input = (await ask(rl, `ecagent API Key ${suffix}: `)).trim();
+                apiKey = input || configuredApiKey || (environmentApiKeyName ? '${' + environmentApiKeyName + '}' : '');
+                if (!apiKey)
+                    console.log('  API Key 不能为空，请重新输入');
+            }
+            const configuredBaseUrl = [
+                configured?.baseUrl,
+                process.env.ECAGENT_BASE_URL,
+                DEFAULT_ECAGENT_BASE_URL,
+            ].find(usable) || DEFAULT_ECAGENT_BASE_URL;
+            const baseUrl = (await ask(rl, `ecagent Base URL [${configuredBaseUrl}]: `)).trim() || configuredBaseUrl;
+            return { apiKey, baseUrl };
+        }
         try {
             if (defaultsExisted) {
                 const ans = (await ask(rl, `配置文件已存在: ${defaultsPath}\n  是否覆盖？[y/N] `)).trim().toLowerCase();
                 if (ans === 'y' || ans === 'yes') {
                     const chosen = await askBaseagent();
+                    const ecagentConfig = chosen === 'ecagent' ? await askEcagentConfig() : undefined;
                     const projectsDefaultPath = await askProjectsDefaultPath();
-                    writeDefaults(chosen, available, projectsDefaultPath);
+                    writeDefaults(chosen, available, projectsDefaultPath, ecagentConfig);
                     console.log(`\n✓ 已覆盖: ${defaultsPath}`);
                     console.log(`  active_baseagent: ${chosen}\n`);
                 }
@@ -421,8 +460,9 @@ export async function cmdInit(options) {
             }
             else {
                 const chosen = await askBaseagent();
+                const ecagentConfig = chosen === 'ecagent' ? await askEcagentConfig() : undefined;
                 const projectsDefaultPath = await askProjectsDefaultPath();
-                writeDefaults(chosen, available, projectsDefaultPath);
+                writeDefaults(chosen, available, projectsDefaultPath, ecagentConfig);
                 console.log(`\n✓ 已创建: ${defaultsPath}`);
                 console.log(`  active_baseagent: ${chosen}\n`);
             }

package/dist/cli/restart-monitor.js

@@ -14,7 +14,7 @@ import { WEB_PACKAGE_NAME } from '../product.js';
 import { shouldSuppressRealRestart } from '../utils/restart-safety.js';
 import { rotateStdoutLog } from '../utils/log-writer.js';
 import { inspectDataMigrationRequirement } from '../core/data-migration.js';
-import { requestDaemonShutdown } from './daemon-commands.js';
+import { DAEMON_SHUTDOWN_TIMEOUT_MS, requestDaemonShutdown } from './daemon-commands.js';
 const execFileAsync = promisify(execFile);
 // 清理 Claude Code 环境变量，防止 SDK 认为是嵌套会话
 function cleanEnv() {
@@ -107,7 +107,7 @@ export async function cmdRestartMonitor() {
         const pids = runtimeOrphans.map(o => o.pid).join(', ');
         log(`Stopping unregistered EvolCore process(es): ${pids}`);
         const orphanPids = new Set(runtimeOrphans.map(orphan => orphan.pid));
-        const ping = await requestDaemonShutdown(p.socket, 3_000, 'restart-monitor orphan cleanup', orphanPids);
+        const ping = await requestDaemonShutdown(p.socket, DAEMON_SHUTDOWN_TIMEOUT_MS, 'restart-monitor orphan cleanup', orphanPids);
         for (const orphan of runtimeOrphans) {
             if (orphan.pid !== ping)
                 platform.killProcess(orphan.pid, false);
@@ -134,7 +134,7 @@ export async function cmdRestartMonitor() {
     if (aliveMains.length > 0) {
         const oldPids = aliveMains.map(m => m.record.pid);
         log(`Monitoring ${oldPids.length} main process(es): ${oldPids.join(', ')}`);
-        const gracefulPid = await requestDaemonShutdown(p.socket, 3_000, 'restart-monitor', new Set(oldPids));
+        const gracefulPid = await requestDaemonShutdown(p.socket, DAEMON_SHUTDOWN_TIMEOUT_MS, 'restart-monitor', new Set(oldPids));
         // 没有收到 IPC shutdown 确认的进程才走信号兜底
         for (const pid of oldPids) {
             if (pid !== gracefulPid) {

package/dist/config/aun-gateway-config.js

@@ -0,0 +1,2 @@
+/** Compatibility exports for retired AUN gateway override handling. */
+export { legacyAunGatewayConfigPaths, stripLegacyAunGatewayConfig, } from './config-manager.js';

package/dist/config/config-manager.js

@@ -29,6 +29,74 @@ import { clearRoleStoreCache, isRoleName } from './role-store.js';
 import { writeRoleDefinition, writeRoleRegistry } from './role-service.js';
 import { mutateContactBookTransactionSync } from './contact-book-store.js';
 import { DAEMON_SCHEMA_NAME } from '../product.js';
+// AUN gateway discovery belongs to fastaun. Keep the retired gatewayUrl
+// compatibility handling beside the rest of the configuration read/write
+// policy so all config callers share one implementation.
+const warnedLegacyGatewayFiles = new Set();
+export function legacyAunGatewayConfigPaths(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return [];
+    const record = value;
+    const paths = [];
+    if (record.aun && typeof record.aun === 'object' && !Array.isArray(record.aun)
+        && Object.prototype.hasOwnProperty.call(record.aun, 'gatewayUrl')) {
+        paths.push('/aun/gatewayUrl');
+    }
+    if (Array.isArray(record.channels)) {
+        record.channels.forEach((channel, index) => {
+            if (channel && typeof channel === 'object'
+                && channel.type === 'aun'
+                && Object.prototype.hasOwnProperty.call(channel, 'gatewayUrl')) {
+                paths.push(`/channels/${index}/gatewayUrl`);
+            }
+        });
+    }
+    return paths;
+}
+export function legacyAunGatewayConfigError(file, paths) {
+    return `${file}: AUN gatewayUrl at ${paths.join(', ')} ${paths.length === 1 ? 'is' : 'are'} no longer supported; `
+        + 'fastaun owns gateway discovery';
+}
+/** Reject newly submitted gateway overrides. Legacy persisted values are handled on read. */
+export function assertNoLegacyAunGatewayConfig(value, file) {
+    const paths = legacyAunGatewayConfigPaths(value);
+    if (paths.length > 0)
+        throw new Error(legacyAunGatewayConfigError(file, paths));
+}
+/** Remove retired AUN gateway overrides without mutating the input. */
+export function stripLegacyAunGatewayConfig(value, file, warn) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return value;
+    const record = value;
+    const next = { ...record };
+    let changed = false;
+    if (record.aun && typeof record.aun === 'object' && !Array.isArray(record.aun)
+        && Object.prototype.hasOwnProperty.call(record.aun, 'gatewayUrl')) {
+        const { gatewayUrl: _legacyGatewayUrl, ...aun } = record.aun;
+        next.aun = aun;
+        changed = true;
+    }
+    if (Array.isArray(record.channels)) {
+        const channels = record.channels.map(channel => {
+            if (!channel || typeof channel !== 'object'
+                || channel.type !== 'aun'
+                || !Object.prototype.hasOwnProperty.call(channel, 'gatewayUrl'))
+                return channel;
+            const { gatewayUrl: _legacyGatewayUrl, ...rest } = channel;
+            changed = true;
+            return rest;
+        });
+        if (changed)
+            next.channels = channels;
+    }
+    if (!changed)
+        return value;
+    if (!warnedLegacyGatewayFiles.has(file)) {
+        warnedLegacyGatewayFiles.add(file);
+        warn(`[config] ${file}: AUN gatewayUrl is no longer supported and will be ignored; fastaun owns gateway discovery`);
+    }
+    return next;
+}
 export function shouldFailFastForMissingOwners(env = process.env) {
     const value = (env.EVOLCORE_REQUIRE_OWNERS || '').trim().toLowerCase();
     return value === '1' || value === 'true' || value === 'yes';
@@ -114,6 +182,7 @@ export function assertRoleConfigV4Ready() {
             issues.push({ file, detail: `invalid JSON: ${error instanceof Error ? error.message : String(error)}` });
             return;
         }
+        value = stripLegacyAunGatewayConfig(value, file, message => configWarn(message));
         const actualVersion = value && typeof value === 'object'
             ? value.$schema_version
             : undefined;
@@ -207,7 +276,10 @@ export function assertRoleConfigV5Ready() {
         if (!fs.existsSync(agentFile))
             continue;
         const agent = readJson(agentFile);
-        const agentVersion = agent?.$schema_version;
+        const sanitizedAgent = agent
+            ? stripLegacyAunGatewayConfig(agent, agentFile, message => configWarn(message))
+            : agent;
+        const agentVersion = sanitizedAgent?.$schema_version;
         let agentSchema = null;
         if (typeof agentVersion === 'number' && agentVersion >= 5) {
             try {
@@ -215,8 +287,8 @@ export function assertRoleConfigV5Ready() {
             }
             catch { }
         }
-        if (!agent || !agentSchema || !agentSchema.validate(agent)) {
-            if (agent)
+        if (!sanitizedAgent || !agentSchema || !agentSchema.validate(sanitizedAgent)) {
+            if (sanitizedAgent)
                 issues.push({
                     file: agentFile,
                     detail: agentSchema
@@ -266,6 +338,7 @@ export function assertContactBookV2Ready() {
             issues.push({ file, detail: `invalid JSON: ${error instanceof Error ? error.message : String(error)}` });
             return;
         }
+        value = stripLegacyAunGatewayConfig(value, file, message => configWarn(message));
         const candidates = Array.isArray(schemas) ? schemas : [schemas];
         if (!candidates.some(schema => schema.validate(value))) {
             const detail = (candidates.at(-1)?.validate.errors ?? [])
@@ -519,6 +592,7 @@ export function read(target, sel, opts = {}) {
     }
     if (raw === null)
         return null;
+    raw = stripLegacyAunGatewayConfig(raw, file, message => configWarn(message));
     // schema 版本迁移（read 时若 $schema_version < current）
     const migrated = migrateIfNeeded(target, raw, file);
     const normalized = target === ConfigTarget.Agent
@@ -702,9 +776,12 @@ export function write(target, value, sel, opts = {}) {
     const schema = target === ConfigTarget.Contact && requestedVersion === 2
         ? loadSchema('contact-book', 2)
         : loadSchema(TARGET_SCHEMA[target]);
+    const retiredGatewayPaths = legacyAunGatewayConfigPaths(value);
+    if (retiredGatewayPaths.length > 0) {
+        throw new ConfigError('AUN_GATEWAY_URL_REMOVED', legacyAunGatewayConfigError(file, retiredGatewayPaths), { paths: retiredGatewayPaths });
+    }
     const withVer = ensureSchemaVersion(value, schema.version);
-    const migrated = withVer;
-    const canonicalized = normalizeBaseagentEffortCompat(migrated);
+    const canonicalized = normalizeBaseagentEffortCompat(withVer);
     // Agent config 写入规范化（aid 校验、projects 字段清理）
     const normalized = target === ConfigTarget.Agent
         ? normalizeAgentConfigForWrite(canonicalized)
@@ -1014,10 +1091,14 @@ export function validateConfig(target, value) {
     ];
 }
 export function validateConfigFile(target, sel) {
-    const value = atomicReadJson(targetPath(target, sel));
+    const file = targetPath(target, sel);
+    const value = atomicReadJson(file);
     if (value === null)
         return { exists: false, errors: [] };
-    return { exists: true, errors: validateConfig(target, value) };
+    // Persisted pre-removal files remain readable: validate the same sanitized
+    // view used by runtime reads, while new writes are still rejected by write().
+    const sanitized = stripLegacyAunGatewayConfig(value, file, message => configWarn(message));
+    return { exists: true, errors: validateConfig(target, sanitized) };
 }
 function fileCacheAvailable() {
     try {
@@ -1108,6 +1189,7 @@ function stripRelationRoleData(config) {
  */
 export function resolveEffective(sel, opts = {}) {
     const config = resolveAgentConfig(sel, opts);
+    const observableDefault = loadSchema('agent-config').fields.get('observable')?.default;
     const effective = {
         $schema_version: config.$schema_version ?? currentVersion('agent-config'),
         aid: config.aid ?? sel.self ?? '',
@@ -1121,7 +1203,9 @@ export function resolveEffective(sel, opts = {}) {
         projects: config.projects,
         capabilities: config.capabilities,
         readonlySourceDiagnostics: config.readonlySourceDiagnostics,
-        observable: config.observable,
+        // Schema defaults are not applied by AJV during reads; apply the current
+        // factory default here so omitted observable fields are enabled at runtime.
+        observable: config.observable ?? (typeof observableDefault === 'boolean' ? observableDefault : true),
         extra_backup: config.extra_backup,
         // Runtime configuration parameters
         active_baseagent: config.active_baseagent,

package/dist/config/config-operation-service.js

@@ -287,8 +287,7 @@ function relPath(absolute) {
 }
 /**
  * 各存储层都无值时的兜底：若 schema 为该字段声明了 `default`，展示出厂默认并标记
- * schemaDefault=true（仅影响 `ec config get` 的展示；运行时 resolveEffective 不受影响，
- * 未设值仍为 undefined，以保留协议层回退等既有语义）。
+ * schemaDefault=true。运行时 resolveEffective 也会应用 Agent schema 的 observable 默认值。
  */
 function getWithSchemaDefault(op, absent, note) {
     const nt = note ? { note } : {};

package/dist/config/gateway-config.js

@@ -20,7 +20,7 @@ import { buildModelRequestHeaders } from '../agents/request-identity.js';
 import { resolvePriceRow } from '../stats/billing.js';
 import { ipcQuery } from '../ipc.js';
 import { logger } from '../utils/logger.js';
-import { ConfigTarget, read as readConfig } from './config-manager.js';
+import { ConfigTarget, read as readConfig, stripLegacyAunGatewayConfig } from './config-manager.js';
 /** 已知 baseagent 类型（网关可管理范围）。 */
 const GATEWAY_TYPES = ['claude', 'codex', 'gemini', 'ecagent'];
 const DISPLAY_NAMES = {
@@ -84,8 +84,9 @@ function readDefaultsRaw() {
     // loadDefaults 会展开 $ENV，掩码逻辑需看原始引用，故直接读盘
     try {
         const p = path.join(resolvePaths().agentsDir, 'defaults.json');
-        if (fs.existsSync(p))
-            return JSON.parse(fs.readFileSync(p, 'utf-8'));
+        if (fs.existsSync(p)) {
+            return stripLegacyAunGatewayConfig(JSON.parse(fs.readFileSync(p, 'utf-8')), p, message => logger.warn(message));
+        }
     }
     catch (e) {
         logger.warn(`[gateway] read defaults.json failed: ${e}`);
@@ -95,8 +96,9 @@ function readDefaultsRaw() {
 function readAgentRaw(aid) {
     try {
         const p = path.join(resolvePaths().agentsDir, aid, 'config.json');
-        if (fs.existsSync(p))
-            return JSON.parse(fs.readFileSync(p, 'utf-8'));
+        if (fs.existsSync(p)) {
+            return stripLegacyAunGatewayConfig(JSON.parse(fs.readFileSync(p, 'utf-8')), p, message => logger.warn(message));
+        }
     }
     catch (e) {
         logger.warn(`[gateway] read agents/${aid}/config.json failed: ${e}`);
@@ -780,7 +782,7 @@ export async function gatewaySyncEnv(args) {
                 }
                 if (hasChanges) {
                     const defaultsPath = path.join(resolvePaths().agentsDir, 'defaults.json');
-                    fs.writeFileSync(defaultsPath, JSON.stringify(defaults, null, 2), 'utf-8');
+                    saveDefaultsSafe(stripLegacyAunGatewayConfig(defaults, defaultsPath, message => logger.warn(message)));
                     synced.push('全局配置 (defaults.json)');
                 }
             }
@@ -826,7 +828,7 @@ export async function gatewaySyncEnv(args) {
                 }
                 if (hasChanges) {
                     const agentConfigPath = path.join(resolvePaths().agentsDir, aid, 'config.json');
-                    fs.writeFileSync(agentConfigPath, JSON.stringify(agentRaw, null, 2), 'utf-8');
+                    saveAgent(stripLegacyAunGatewayConfig(agentRaw, agentConfigPath, message => logger.warn(message)));
                     synced.push(`${aid} (config.json)`);
                 }
             }

package/dist/config/lifecycle.js

@@ -1,13 +1,24 @@
 import { CONFIG_SCHEMA_VERSION } from '../types.js';
 const VALID_LIFECYCLES = new Set(['created', 'bootstrapping', 'active']);
-export function normalizeAgentLifecycle(config) {
+export function isAgentLifecycle(value) {
+    return typeof value === 'string' && VALID_LIFECYCLES.has(value);
+}
+/** Resolve the effective lifecycle. Null means an explicit invalid value. */
+export function resolveAgentLifecycle(config) {
     const current = config.lifecycle;
-    if (current && VALID_LIFECYCLES.has(current)) {
+    if (isAgentLifecycle(current))
+        return current;
+    if (current !== undefined)
+        return null;
+    return config.initialized === false ? 'created' : 'active';
+}
+export function normalizeAgentLifecycle(config) {
+    const lifecycle = resolveAgentLifecycle(config);
+    // Preserve explicit invalid values so validation and runtime gates can fail
+    // closed. Only an omitted lifecycle receives the compatibility default.
+    if (lifecycle === null || config.lifecycle === lifecycle) {
         return config;
     }
-    const lifecycle = config.initialized === true ? 'active'
-        : config.initialized === false ? 'created'
-            : 'active';
     return { ...config, lifecycle };
 }
 export function withLifecycleForWrite(config, lifecycle) {

package/dist/config-store.js

@@ -23,14 +23,15 @@ import { checkAgentDir, isValidAid } from './aun/aid/validation.js';
 import { normalizeAidDomain } from './aun/aid/domain.js';
 import { isValidChannelName } from './core/channel-loader.js';
 import { CONFIG_SCHEMA_VERSION } from './types.js';
-import { ConfigTarget, read as cfgRead, write as cfgWrite } from './config/config-manager.js';
+import { ConfigTarget, assertNoLegacyAunGatewayConfig, read as cfgRead, stripLegacyAunGatewayConfig, write as cfgWrite, } from './config/config-manager.js';
 import { expandVars, buildEnvResolver } from './config/merge.js';
+import { isAgentLifecycle } from './config/lifecycle.js';
 import { logger } from './utils/logger.js';
 import { parseStableSemver } from './utils/stable-semver.js';
 /** 读 {root}/daemon.json。文件不存在返回 {}，不报错。 */
 export function loadDaemonConfig() {
     const raw = atomicReadJson(resolvePaths().daemonConfig);
-    return validateDaemonConfig(raw ?? {}, false);
+    return validateDaemonConfig(stripLegacyAunGatewayConfig(raw ?? {}, resolvePaths().daemonConfig, message => logger.warn(message)), false);
 }
 let eckSnapshotsConfigCache;
 /** Parse the process-level snapshot gate once for the current daemon lifecycle. */
@@ -52,13 +53,14 @@ export function isEckSnapshotsEnabled() {
 /** 原子写入 {root}/daemon.json。调用方负责传完整对象（含要保留的字段）。 */
 export function saveDaemonConfig(value) {
     const configPath = resolvePaths().daemonConfig;
+    assertNoLegacyAunGatewayConfig(value, configPath);
     const current = atomicReadJson(configPath);
     // A legacy default is irrelevant while an existing control AID is retained.
     // Validate the field when it is created or changed, but do not make unrelated
     // daemon.json updates fail because of a persisted, unused legacy value.
     const validateAidDomain = current === null
         || current.aun?.defaultAidDomain !== value.aun?.defaultAidDomain;
-    atomicWriteJson(configPath, validateDaemonConfig(value, validateAidDomain));
+    atomicWriteJson(configPath, validateDaemonConfig(stripLegacyAunGatewayConfig(value, configPath, message => logger.warn(message)), validateAidDomain));
 }
 function validateDaemonConfig(value, validateAidDomain) {
     const minEvolVersion = value.aun?.minEvolVersion;
@@ -105,11 +107,12 @@ export function loadDefaults() {
     if (typeof raw.$schema_version !== 'number') {
         logger.warn(`[config] ${p}: missing $schema_version, treating as ${CONFIG_SCHEMA_VERSION}`);
     }
-    return expandEnvRefs(raw);
+    return expandEnvRefs(stripLegacyAunGatewayConfig(raw, p, message => logger.warn(message)));
 }
 export function saveDefaults(value) {
+    assertNoLegacyAunGatewayConfig(value, resolvePaths().defaultsConfig);
     backupDefaults(resolvePaths().defaultsConfig);
-    atomicWriteJson(resolvePaths().defaultsConfig, value);
+    atomicWriteJson(resolvePaths().defaultsConfig, stripLegacyAunGatewayConfig(value, resolvePaths().defaultsConfig, message => logger.warn(message)));
 }
 /**
  * 备份 defaults.json 为 defaults_YYYYMMDDhhmmss.json。文件不存在时为 no-op。
@@ -141,6 +144,7 @@ function backupDefaults(filePath) {
  */
 export function saveDefaultsSafe(patch) {
     const p = resolvePaths().defaultsConfig;
+    assertNoLegacyAunGatewayConfig(patch, p);
     let existing = null;
     try {
         existing = atomicReadJson(p);
@@ -153,7 +157,7 @@ export function saveDefaultsSafe(patch) {
     const merged = existing
         ? deepMergeObject(existing, patch)
         : { $schema_version: CONFIG_SCHEMA_VERSION, ...patch };
-    atomicWriteJson(p, merged);
+    atomicWriteJson(p, stripLegacyAunGatewayConfig(merged, p, message => logger.warn(message)));
 }
 /** 递归对象合并：overlay 覆盖 base；标量与数组按 overlay 替换；plain object 递归。
  *  saveDefaultsSafe 内部用（保留现有"补丁式写 defaults"语义，与覆盖链合并无关）。 */
@@ -300,6 +304,9 @@ export function validateAgentConfig(cfg) {
     const errs = [];
     if (!cfg.aid || !isValidAid(cfg.aid))
         errs.push(`invalid aid: ${cfg.aid}`);
+    if (cfg.lifecycle !== undefined && !isAgentLifecycle(cfg.lifecycle)) {
+        errs.push(`invalid lifecycle: ${String(cfg.lifecycle)}`);
+    }
     if (!Array.isArray(cfg.channels)) {
         errs.push('channels must be an array');
         return errs;

package/dist/core/auth/authorization-audit.js

@@ -37,7 +37,10 @@ export function auditToolPreflightDenial(input) {
         toolName: input.toolName,
         policyCode: input.policyCode,
         protectionClass: input.protectionClass ?? protectionClassForPolicy(input.policyCode),
-        matchedPath: input.matchedPath ?? extractAuditPath(input.summary),
+        // Path provenance must come from the policy parser. Do not infer it from
+        // localized summaries: words such as `daemon.json` or `.lock` may only be
+        // regex/string literals in an otherwise harmless diagnostic command.
+        matchedPath: input.matchedPath,
         reason: input.reason,
         argsSummary: input.summary ? { summary: input.summary } : undefined,
         sessionId: input.sessionId ?? 'unknown',
@@ -341,7 +344,7 @@ function protectionClassForPolicy(policyCode) {
         return 'L';
     return undefined;
 }
-function extractAuditPath(summary) {
+function extractAuditPath_UNUSED(summary) {
     if (!summary)
         return undefined;
     const match = summary.match(/(?:^|\s)(\/[^\s'"`;]+|[A-Za-z]:[\\/][^\s'"`;]+|(?:src|ecagent|ecweb|scripts|tests?)\/[^\s'"`;]+)/);

package/dist/core/bootstrap-messages.js

@@ -70,11 +70,11 @@ export function bindPostBootstrapWelcomeOutboxSession(aid, sessionId) {
         return false;
     if (entry.context?.sessionId === sessionId)
         return true;
-    return outbox.replace(aid, {
+    return outbox.replaceIfRouteMatches(aid, entry, {
         ...entry,
         context: {
             ...(entry.context ?? {}),
             sessionId,
         },
-    });
+    }) === 'replaced';
 }