evolcore 0.0.19 → 0.0.21

package/kits/schemas/daemon.schema.6.json

@@ -0,0 +1,131 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "daemon.schema.6.json",
+  "title": "ProcessConfig v6 (daemon.json)",
+  "description": "进程级配置：daemon 自身运行配置，链外独立作用域，不进覆盖链。",
+  "x-logical-name": "daemon",
+  "x-scope": "process",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "$schema_version": { "type": "number", "const": 6, "default": 6, "x-merge": "scalar" },
+    "aid": { "type": "string", "description": "daemon 默认身份 AID", "x-merge": "scalar" },
+    "owners": {
+      "type": "array",
+      "items": { "type": "string" },
+      "description": "进程控制面鉴权名单（谁能远程管 daemon）",
+      "x-merge": "list"
+    },
+    "fullaccess": {
+      "type": "object",
+      "description": "daemon-owner 批准的按调用宿主级执行功能；默认关闭",
+      "x-merge": "dict",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean", "default": false, "description": "启用 /fa 与 Trigger permissionMode=fullaccess" }
+      }
+    },
+    "debug": {
+      "type": "object",
+      "description": "进程级调试配置；唯一合法来源为 daemon.json，不参与 Agent 覆盖链",
+      "x-merge": "dict",
+      "additionalProperties": false,
+      "properties": {
+        "logLevel": { "type": "string", "enum": ["DEBUG", "INFO", "WARN", "ERROR"], "description": "daemon 日志级别" },
+        "aunTrace": { "type": "boolean", "description": "是否记录 AUN 协议 trace" },
+        "aunSdkLog": { "type": "boolean", "description": "是否启用 AUN SDK 调试日志" },
+        "upmsg": { "type": "boolean", "description": "是否向 Agent owner 发送 daemon 上线通知" },
+        "eckSnapshots": { "type": "boolean", "default": false, "description": "是否写入可能包含敏感上下文的 ECK 旁路调试快照" }
+      }
+    },
+    "tunnel": {
+      "type": "object",
+      "description": "内网穿透配置",
+      "x-merge": "dict",
+      "properties": {
+        "targets": { "type": "array", "description": "穿透目标列表", "items": { "type": "object" } }
+      }
+    },
+    "aun": {
+      "type": "object",
+      "description": "AUN 进程配置",
+      "x-merge": "dict",
+      "properties": {
+        "gatewayUrl": { "not": {}, "description": "已移除；网关由 fastaun 缓存和 AID discovery 决定" },
+        "defaultAidDomain": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)+$",
+          "description": "自动生成控制 AID 与 benchmark AID 使用的后缀域名；不影响已有 AID"
+        },
+        "minEvolVersion": { "type": "string", "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$", "description": "AUN Menu 允许的最低 Evol 客户端版本；省略时不限制" },
+        "menuTokenRequired": { "type": "boolean", "default": false, "description": "是否要求普通 AUN Menu 请求携带有效 menu_token；默认 false" },
+        "defaultEncrypt": { "type": "boolean", "description": "所有 daemon 管理的 AUN 通道共用的出站默认加密值；省略时为 true" }
+      }
+    },
+    "services": {
+      "type": "array",
+      "description": "daemon 管理的本机服务及其可选 AUN 代理",
+      "x-merge": "list",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "enabled"],
+        "properties": {
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z0-9_-]+$",
+            "description": "服务的逻辑标识，同时作为 AUN 代理路由名；ecweb 表示本机 EC Web 服务实例"
+          },
+          "enabled": { "type": "boolean", "default": true, "description": "是否启用本机服务实例" },
+          "port": { "type": "integer", "minimum": 1, "maximum": 65535, "description": "本机服务期望监听端口" },
+          "proxy": {
+            "type": "object",
+            "additionalProperties": false,
+            "allOf": [
+              {
+                "if": { "properties": { "enabled": { "const": true }, "source": { "const": "static" } }, "required": ["enabled", "source"] },
+                "then": { "required": ["endpoint", "visibility"] }
+              },
+              {
+                "if": { "properties": { "enabled": { "const": true } }, "required": ["enabled"] },
+                "then": { "required": ["source", "visibility"] }
+              }
+            ],
+            "properties": {
+              "enabled": { "type": "boolean", "default": false, "description": "是否通过 AUN Service Proxy 暴露该服务" },
+              "source": { "type": "string", "enum": ["instance", "static"], "description": "instance 表示自动发现同名本机服务；static 使用 endpoint 显式回连" },
+              "endpoint": { "type": "string", "maxLength": 2048, "description": "source=static 时使用的本机 HTTP/HTTPS 或 WS/WSS 回连地址" },
+              "serviceType": { "type": "string", "enum": ["http", "websocket", "ssh"], "default": "http", "description": "AUN 中公布的服务类型" },
+              "visibility": { "type": "string", "enum": ["public", "private", "aun-auth"], "default": "private", "description": "AUN Service Proxy 访问策略" },
+              "metadata": {
+                "type": "object",
+                "description": "非敏感服务描述；不得包含 endpoint、token、secret、cookie 等敏感信息",
+                "additionalProperties": { "type": "string", "maxLength": 8192 }
+              }
+            }
+          }
+        }
+      }
+    },
+    "configSnapshots": { "type": "boolean", "default": true, "description": "是否自动维护配置快照、启动日志和自检回落", "x-merge": "scalar" },
+    "idleMonitor": {
+      "type": "object",
+      "description": "流式输出空闲监控配置",
+      "x-merge": "dict",
+      "properties": {
+        "enabled": { "type": "boolean", "default": true, "description": "是否启用空闲监控" },
+        "timeout": { "type": "number", "default": 120, "description": "空闲超时秒数" },
+        "apiRetryTimeout": { "type": "number", "description": "API 重试尝试连续无事件时的超时秒数；未设置时继承 timeout" },
+        "maxExecutionTime": { "type": "number", "description": "单个任务总执行时限（秒）；未配置、非数字或小于等于 0 表示不限制" }
+      }
+    },
+    "watch": {
+      "type": "object",
+      "description": "日志监听配置",
+      "x-merge": "dict",
+      "properties": {
+        "logTypes": { "type": "array", "description": "要监听的日志类型", "items": { "type": "string" } }
+      }
+    }
+  }
+}

package/kits/schemas/defaults.schema.5.json

@@ -0,0 +1,119 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "defaults.schema.5.json",
+  "title": "DefaultsConfig v5 (agents/defaults.json)",
+  "description": "全局默认配置。覆盖链最低层；模型降级候选链仅允许定义在本文件。",
+  "x-logical-name": "defaults",
+  "x-scope": "defaults",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "$schema_version": { "type": "number", "const": 5, "default": 5, "x-merge": "scalar" },
+    "models": {
+      "type": "object",
+      "description": "模型配置",
+      "x-merge": "dict",
+      "properties": {
+        "default": { "type": "string", "description": "全局默认模型" },
+        "allowed": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "全局模型白名单"
+        }
+      }
+    },
+    "active_baseagent": {
+      "type": "string",
+      "description": "当前活跃的 base agent（claude/codex/gemini/ecagent）。暂存于此，待权限体系实现后迁移。",
+      "x-merge": "scalar"
+    },
+    "baseagents": {
+      "type": "object",
+      "description": "各 base agent 配置（model/effort/apiKey/baseUrl 等），以及仅 defaults 可定义的备用模型链。",
+      "x-merge": "dict",
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": true,
+        "properties": {
+          "headers": {
+            "type": "object",
+            "propertyNames": { "pattern": "^[!#$%&'*+.^_`|~0-9A-Za-z-]+$" },
+            "additionalProperties": { "type": "string", "pattern": "^[^\\u0000\\r\\n]*$" }
+          },
+          "queryParams": {
+            "type": "object",
+            "propertyNames": { "minLength": 1 },
+            "additionalProperties": { "type": "string" }
+          },
+          "auxiliaryModel": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Session Renew 语义连续性判断使用的 direct 辅助模型。"
+          },
+          "auxiliaryEffort": {
+            "type": "string",
+            "enum": ["low", "medium", "high", "xhigh", "max"],
+            "description": "Session Renew 辅助模型的可选推理强度。"
+          },
+          "fallbackModels": {
+            "type": "array",
+            "maxItems": 3,
+            "description": "同 base agent 的有序备用模型链；为空时禁用自动模型降级。",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["model"],
+              "properties": {
+                "model": { "type": "string", "minLength": 1 },
+                "effort": { "type": "string", "minLength": 1 }
+              }
+            }
+          }
+        },
+        "dependencies": {
+          "auxiliaryEffort": ["auxiliaryModel"]
+        }
+      }
+    },
+    "projects": {
+      "type": "object",
+      "description": "项目路径配置",
+      "x-merge": "dict",
+      "additionalProperties": false,
+      "properties": {
+        "defaultPath": { "type": "string", "description": "全局默认项目路径" }
+      }
+    },
+    "aun": {
+      "type": "object",
+      "description": "全局 AUN 配置",
+      "x-merge": "dict",
+      "properties": {
+        "keystorePath": { "type": "string" },
+        "gatewayUrl": { "not": {}, "description": "已移除；网关由 fastaun 缓存和 AID discovery 决定" },
+        "defaultEncrypt": {
+          "not": {},
+          "description": "不支持在 Agent defaults 配置；请使用 daemon.json.aun.defaultEncrypt"
+        }
+      }
+    },
+    "responseMode": { "type": "string", "x-merge": "scalar" },
+    "responseModeParams": {
+      "type": "object",
+      "x-merge": "dict",
+      "description": "响应模式特有参数的全局默认字典，按模式 id 分桶：{ [modeId]: {...} }"
+    },
+    "config": { "type": "object", "x-merge": "dict" },
+    "session_renew": {
+      "type": "object",
+      "description": "会话超时后的续接判定策略，默认关闭",
+      "x-merge": "dict",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean", "default": false, "description": "是否启用超时后的会话连续性判定" },
+        "after_hours": { "type": "number", "exclusiveMinimum": 0, "default": 24, "description": "距最后一条有效对话超过该小时数才触发判定" },
+        "fallback_action": { "type": "string", "enum": ["continue", "new"], "default": "continue", "description": "无法判定时的兜底动作", "x-enumDescriptions": { "continue": "继续沿用当前会话", "new": "开启新会话" } }
+      }
+    }
+  }
+}

package/kits/schemas/migrations/README.md

@@ -25,4 +25,6 @@ export function migrate(old: object): object;   // 旧版本完整 JSON → 新
 - 历史 schema 文件全部保留（`{逻辑名}.schema.{版本}.json`）。
 - 每个迁移函数 default-export `migrate`，由 ConfigManager 动态 import。
 
-当前所有 schema 均为 v1，无迁移函数。
+当前完整配置 schema 的历史迁移仍按各自模块维护。响应模式桶的
+`single-session` v2→v3 数据迁移集中在 `src/config/schema-migration.ts`，
+扫描并更新 defaults、Agent、Relation 配置文件，并在 daemon 启动前自动执行。

package/kits/schemas/relation-config.schema.8.json

@@ -46,7 +46,20 @@
             "type": "object",
             "propertyNames": { "minLength": 1 },
             "additionalProperties": { "type": "string" }
+          },
+          "auxiliaryModel": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Session Renew 语义连续性判断使用的 direct 辅助模型。"
+          },
+          "auxiliaryEffort": {
+            "type": "string",
+            "enum": ["low", "medium", "high", "xhigh", "max"],
+            "description": "Session Renew 辅助模型的可选推理强度。"
           }
+        },
+        "dependencies": {
+          "auxiliaryEffort": ["auxiliaryModel"]
         }
       }
     },

package/kits/schemas/role-config.schema.1.json

@@ -14,8 +14,7 @@
     { "value": "baseagents.claude.effort", "label": "Claude Effort", "description": "角色使用 Claude 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }, { "value": "max", "label": "Max" }] },
     { "value": "baseagents.codex.model", "label": "Codex Model", "description": "角色可使用的 Codex 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Codex models" }, { "value": "gpt-5.4*", "label": "GPT-5.4 family" }, { "value": "gpt-5.3-codex*", "label": "GPT-5.3 Codex family" }] },
     { "value": "baseagents.codex.effort", "label": "Codex Effort", "description": "角色使用 Codex 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }] },
-    { "value": "baseagents.gemini.model", "label": "Gemini Model", "description": "角色可使用的 Gemini 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Gemini models" }, { "value": "gemini-*", "label": "Gemini model family" }] },
-    { "value": "baseagents.hermes.model", "label": "Hermes Model", "description": "角色可使用的 Hermes 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Hermes models" }] }
+    { "value": "baseagents.gemini.model", "label": "Gemini Model", "description": "角色可使用的 Gemini 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Gemini models" }, { "value": "gemini-*", "label": "Gemini model family" }] }
   ],
   "type": "object",
   "additionalProperties": false,

package/kits/schemas/single-session.schema.3.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "single-session.schema.3.json",
+  "title": "SingleSessionParams (responseModeParams['single-session'])",
+  "description": "Single-session mode parameters. Session Renew auxiliary model settings belong to baseagents.<name>.",
+  "x-logical-name": "single-session",
+  "x-scope": "mode",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "pre_tool_1stmsgchk": {
+      "type": "boolean",
+      "enum": [true, false],
+      "default": true,
+      "description": "proactive 首个本地工具表态检查（仅 chatmode=proactive 生效）：首个可被 PreToolUse 覆盖的本地工具必须是当前会话精确对应的 ec msg/group send，否则拦截；WebSearch、图像生成、浏览器和 Computer Use 等 hosted 工具不进入此硬拒绝边界。",
+      "x-enumDescriptions": {
+        "true": "启用：首个 hook 可覆盖的本地工具必须是精确会话 send",
+        "false": "禁用：不执行 proactive 首个本地工具 send 检查"
+      }
+    },
+    "tool_use_reminder": {
+      "type": "boolean",
+      "enum": [true, false],
+      "default": true,
+      "description": "proactive 工具汇报提醒（仅 chatmode=proactive 生效）：启用队列未读提醒 + 每 10 次工具调用的汇报提醒。",
+      "x-enumDescriptions": {
+        "true": "启用：自动汇报工具使用情况",
+        "false": "禁用：静默执行工具"
+      }
+    }
+  }
+}

package/kits/templates/roles/admin.json

@@ -8,6 +8,7 @@
   },
   "commandPermissions": {
     "contact.read": { "allow": true, "scopes": ["agent"] },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
     "contact.block": {
       "allow": true,
       "scopes": ["agent"],

package/kits/templates/roles/member.json

@@ -52,6 +52,7 @@
     "group.rulespolicy.update": { "allow": false },
     "trigger.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
     "ec.msg.send": { "allow": true, "constraints": { "ownPeerOnly": true } },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
     "ec.msg.file": { "allow": true, "constraints": { "ownPeerOnly": true } },
     "ec.msg.history": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
     "ec.msg.online": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },

package/kits/templates/roles/visitor.json

@@ -56,6 +56,7 @@
     "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
     "capability.read": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
     "ec.msg.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
     "ec.msg.file": { "allow": false },
     "ec.msg.history": { "allow": false },
     "ec.msg.online": { "allow": false },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evolcore",
-  "version": "0.0.19",
+  "version": "0.0.21",
   "description": "AI Agent gateway connecting Claude, Codex, Gemini, and the bundled ecagent runner to messaging channels with multi-project session management",
   "type": "module",
   "main": "dist/index.js",
@@ -11,6 +11,8 @@
     "dist/",
     "ecagent/dist/",
     "!ecagent/dist/**/*.map",
+    "!dist/**/*.test.js",
+    "!dist/**/*.spec.js",
     "ecagent/LICENSE",
     "ecagent/NOTICE",
     "ecagent/README.md",
@@ -18,6 +20,7 @@
     "bin/",
     "!dist/experimental/",
     "skills/",
+    "!skills/eclink/IDENTITIES.md",
     "kits/",
     "!kits/.kits-version",
     "*.md",
@@ -32,6 +35,7 @@
     "!evolcore-install-aun.md"
   ],
   "scripts": {
+    "postinstall": "node bin/install-codex-managed-hooks.mjs",
     "predev": "npm run build:ecagent",
     "dev": "tsx watch src/index.ts",
     "build:ecagent": "npm --prefix ecagent run build",
@@ -44,7 +48,7 @@
     "prepublishOnly": "npm test"
   },
   "dependencies": {
-    "@agentunion/fastaun": "0.5.6",
+    "@agentunion/fastaun": "0.5.10",
     "@anthropic-ai/claude-agent-sdk": "0.3.220",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "ajv": "^8.20.0",
@@ -77,6 +81,6 @@
     "vitest": "^4.1.0"
   },
   "engines": {
-    "node": ">=22.19.0"
+    "node": ">=22.16.0"
   }
 }

package/skills/eclink/SKILL.md

@@ -10,6 +10,8 @@ Use the installed `ec` CLI as the message interface. This skill is only for a st
 
 If the runtime exposes an EvolCore task/session context (for example `EVOLCORE_SESSION_ID`, `EVOLCORE_DELEGATION_TOKEN`, or an ECK-managed channel prompt), stop using this skill. Do not shell out to `ec`; let the EvolCore runtime's delegated sender enforce the current session, peer, role, and audit constraints.
 
+After confirming that this is a standalone session, read [IDENTITIES.md](IDENTITIES.md) for the machine-local Codex AID registry. Do not read that registry from an EvolCore-managed task.
+
 ## Shell and approval boundary
 
 Every `exec_command` invocation must run exactly one `ec` command. Do not combine commands with `&&`, `||`, `;`, `|`, redirects, subshells, command substitutions, scripts, `command -v`, or wrappers such as `sh -c`/`bash -lc`.