evolcore 0.0.20 → 0.0.21

package/dist/utils/project-path.js

@@ -53,8 +53,7 @@ export function defaultProjectsRoot(evolcoreRoot, options = {}) {
 export function agentProjectRootFromDefaults(defaults, evolcoreRoot, options = {}) {
     const platform = options.platform ?? process.platform;
     const pathImpl = pathForPlatform(platform);
-    const configuredRoot = defaults?.projects?.rootPath
-        || (defaults?.projects?.defaultPath && pathImpl.dirname(defaults.projects.defaultPath))
+    const configuredRoot = defaults?.projects?.defaultPath
         || defaultProjectsRoot(evolcoreRoot, options);
     return sanitizeProjectRoot(configuredRoot, options);
 }

package/kits/docs/INDEX.md

@@ -25,7 +25,7 @@
 | 文档 | 路径 | 说明 |
 |------|------|------|
 | 命令集目录 | `evolcore/INDEX.md` | msg/group/agent/aid/storage/ctl/rpc/bench 全集索引 |
-| 联系人命令 | `evolcore/contact.md` | Contact Book 拉黑与托管会话权限边界 |
+| 联系人命令 | `evolcore/contact.md` | Contact Book 添加申请、拉黑与托管会话权限边界 |
 
 ## 身份
 

package/kits/docs/evolcore/INDEX.md

@@ -35,7 +35,7 @@
 | `ec fs` | AUN 文件系统统一入口 | 上传/下载/看文件/列目录/删文件/配额/群空间 | 任意有渠道场景 | `fs.md` |
 | `ec storage` | 文件存储底层调试入口 | storage 调试/旧命令/底层上传下载 | 任意有渠道场景 | `storage.md` |
 | `ec agent` | EvolAgent 生命周期 | 创建/启停/热重载/改配置 | 管理员（owner/admin） | `agent.md` |
-| `ec contact` | Contact Book 与访问控制 | 拉黑/解除拉黑/查拉黑 | 读 owner/admin；写仅 owner | `contact.md` |
+| `ec contact` | Contact Book 与访问控制 | 申请添加、拉黑/解除拉黑、查拉黑 | Agent 当前私聊可申请添加；管理写操作按角色限制 | `contact.md` |
 | `ec rpc` | 底层 AUN RPC（逃生通道） | 直接调协议方法 | 高级/兜底 | `rpc.md` |
 
 ## 会话自管理类（不连 AUN，操作当前会话）

package/kits/docs/evolcore/contact.md

@@ -6,6 +6,7 @@
 ## 命令
 
 ```bash
+ec contact add <aid> --self <agent-aid>
 ec contact block <aid> --self <agent-aid>
 ec contact unblock <aid> --self <agent-aid>
 ec contact list --blocked --self <agent-aid>
@@ -16,9 +17,13 @@ ec contact list --blocked --self <agent-aid>
 ## 约束
 
 - `<aid>` 和 `--self` 必须是合法 AID。
+- Agent 托管会话中的 `add` 只能针对当前 AUN 私聊对端；它创建/更新 `pending`，并向本 Agent Owner 发送审核卡片。
+- `add` 复用 `/request` 的联系人申请额度、过期和请求版本校验；已有 `pending`/`declined` 条目会重新走申请流程。
+- Owner 在审核卡片点击“通过”后才变为 active；`blocked` 必须先执行 `unblock`。
+- 直接从本机终端执行 `add` 属于本地管理操作，会直接创建或恢复 active 联系人；Connect `action=add` 同样是管理端直接操作。
 - 写入 Agent Owner 时，系统会自动创建该 Owner 的 active 联系人记录。
 - `block/unblock` 只接受已存在的联系人；不存在时返回 `NOT_FOUND`。
-- `block/unblock` 只改变本 Agent 的入站接收策略，不代表对端也拉黑了本 Agent。
+- `block/unblock` 至少改变本 Agent 的入站接收策略；托管任务的普通私聊 `ec msg send` 对 blocked 目标也会在 daemon 侧被拒绝。非托管 AUN CLI 发送不读取本地联系人簿。不代表对端也拉黑了本 Agent。
 - Agent owner 不能被拉黑。
 - `list --blocked` 只列出当前 blocked contact，并返回 `contactRevision`。
 
@@ -31,6 +36,7 @@ ec contact list --blocked --self <agent-aid>
 | 操作 | owner | admin | 普通角色 |
 |---|---:|---:|---:|
 | `list --blocked` | 允许 | 允许 | 拒绝 |
+| Agent 会话 `add` 当前私聊对端 | 允许 | 允许 | 由当前关系授权，受 AUN 私聊和申请限制 |
 | `block` / `unblock` | 允许 | 拒绝 | 拒绝 |
 
 缺少、伪造、撤销或跨会话 delegation token 时失败关闭。托管调用的 `--self` 必须等于当前任务所属 Agent。

package/kits/docs/evolcore/msg.md

@@ -48,6 +48,20 @@ ec msg send <from> <to> --payload '<json>'
 - `--text <说>` — 附件说明文字（仅 `--file`）
 - `--transcript <text>` — 语音转写（仅 `--as voice`）
 
+托管 Agent 通过 daemon 发送时，若发送方使用 `policyMode: contacts`，私聊普通出站只允许 Owner 或实际 `active` 联系人。无条目、`pending`、`declined` 会拒绝发送并提示：
+
+```bash
+ec contact add <target-aid> --self <self-aid>
+```
+
+该命令在托管会话中会创建/更新联系人申请并给 Owner 发送审核卡片；`blocked` 目标必须先执行：
+
+```bash
+ec contact unblock <target-aid> --self <self-aid>
+```
+
+非托管环境的 `ec msg send` 是独立 AUN CLI 发送，不读取或要求 `agents/<aid>/config.json`，因此不会触发这套 Agent 联系人准入判断。
+
 在 EvolCore 会话内，发送还会经过当前 session 的 self/peer/role 鉴权。`visitor` 或 `member`
 默认只允许回复当前对端；从一个 agent 会话转发给第三个 agent 属于 relay 操作，可能因
 `ownPeerOnly` 被拒绝。没有成功 JSON 回执（含 `message_id`/`status`）不得声称已发送。
@@ -113,6 +127,8 @@ ec msg history <self-aid> <target-aid> \
 
 历史查询读取本地 `messages.jsonl`，不调用 `message.pull`，不会读取或推进网络收件箱游标。
 
+托管任务限制：只能使用当前 self AID，并且只能读取当前 AUN 私聊对端；群聊、非 AUN 渠道和其他对端都会被拒绝。托管任务不支持 `--channel`、`--channel-name`、`--aun-path` 或 `--app`，仅可使用 `--session`、`--limit`、`--before`、`--after`、`--direction` 和 `--format`。
+
 - 不传 `--session`：等价于 `--session latest`。
 - `--session latest`：使用该 AID 对 `active.json` 中的最新激活会话；找不到时直接报错。
 - `--session all`：包含该 AID 对全部本地历史以及没有会话标识的旧记录。

package/kits/schemas/_meta.json

@@ -1,11 +1,11 @@
 {
   "schemas": {
-    "daemon":          { "currentVersion": 5 },
+    "daemon":          { "currentVersion": 6 },
     "defaults":        { "currentVersion": 5 },
     "agent-config":    { "currentVersion": 11 },
     "relation-config": { "currentVersion": 8 },
     "contact-book":    { "currentVersion": 3 },
-    "single-session":  { "currentVersion": 2 },
+    "single-session":  { "currentVersion": 3 },
     "role-registry":   { "currentVersion": 1 },
     "role-config":     { "currentVersion": 1 }
   },
@@ -33,6 +33,7 @@
     { "schema": "agent-config",    "version": 7, "date": "2026-07-27", "description": "remove Session Renew effort; auxiliary inference is response-mode owned" },
     { "schema": "relation-config", "version": 6, "date": "2026-07-27", "description": "remove relation Session Renew effort; auxiliary inference is response-mode owned" },
     { "schema": "single-session",  "version": 2, "date": "2026-07-27", "description": "add optional baseagent-aware auxiliaryModel and auxiliaryEffort without factory defaults" },
+    { "schema": "single-session",  "version": 3, "date": "2026-08-31", "description": "move Session Renew auxiliary model and effort from mode buckets into baseagent settings" },
     { "schema": "daemon",          "version": 3, "date": "2026-07-29", "description": "make daemon.json the exclusive source for all process debug settings" },
     { "schema": "daemon",          "version": 4, "date": "2026-08-04", "description": "add configurable default AID domain for generated identities" },
     { "schema": "defaults",        "version": 3, "date": "2026-07-29", "description": "remove debug from the Agent configuration inheritance chain" },
@@ -44,6 +45,7 @@
     { "schema": "agent-config",    "version": 10, "date": "2026-08-02", "description": "reject Agent-level fallback model chain" },
     { "schema": "relation-config", "version": 8, "date": "2026-08-02", "description": "reject relation-level fallback model chain" },
     { "schema": "daemon",          "version": 5, "date": "2026-08-27", "description": "remove EvolCore AUN gateway override" },
+    { "schema": "daemon",          "version": 6, "date": "2026-09-01", "description": "unify local service lifecycle and AUN proxy settings under services[]" },
     { "schema": "defaults",        "version": 5, "date": "2026-08-27", "description": "remove EvolCore AUN gateway override" },
     { "schema": "agent-config",    "version": 11, "date": "2026-08-27", "description": "remove EvolCore AUN gateway override" }
   ]

package/kits/schemas/agent-config.schema.11.json

@@ -195,7 +195,20 @@
             "type": "object",
             "propertyNames": { "minLength": 1 },
             "additionalProperties": { "type": "string" }
+          },
+          "auxiliaryModel": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Session Renew 语义连续性判断使用的 direct 辅助模型。"
+          },
+          "auxiliaryEffort": {
+            "type": "string",
+            "enum": ["low", "medium", "high", "xhigh", "max"],
+            "description": "Session Renew 辅助模型的可选推理强度。"
           }
+        },
+        "dependencies": {
+          "auxiliaryEffort": ["auxiliaryModel"]
         }
       }
     },

package/kits/schemas/daemon.schema.5.json

@@ -63,7 +63,6 @@
       "description": "AUN 进程配置",
       "x-merge": "dict",
       "properties": {
-        "encryptionSeed": { "type": ["string", "null"], "description": "已废弃兼容字段；EvolCore 固定使用内置值，检测到其他值时拒绝启动并提示联系管理人员" },
         "gatewayUrl": {
           "not": {},
           "description": "已移除；网关由 fastaun 缓存和 AID discovery 决定"

package/kits/schemas/daemon.schema.6.json

@@ -0,0 +1,131 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "daemon.schema.6.json",
+  "title": "ProcessConfig v6 (daemon.json)",
+  "description": "进程级配置：daemon 自身运行配置，链外独立作用域，不进覆盖链。",
+  "x-logical-name": "daemon",
+  "x-scope": "process",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "$schema_version": { "type": "number", "const": 6, "default": 6, "x-merge": "scalar" },
+    "aid": { "type": "string", "description": "daemon 默认身份 AID", "x-merge": "scalar" },
+    "owners": {
+      "type": "array",
+      "items": { "type": "string" },
+      "description": "进程控制面鉴权名单（谁能远程管 daemon）",
+      "x-merge": "list"
+    },
+    "fullaccess": {
+      "type": "object",
+      "description": "daemon-owner 批准的按调用宿主级执行功能；默认关闭",
+      "x-merge": "dict",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean", "default": false, "description": "启用 /fa 与 Trigger permissionMode=fullaccess" }
+      }
+    },
+    "debug": {
+      "type": "object",
+      "description": "进程级调试配置；唯一合法来源为 daemon.json，不参与 Agent 覆盖链",
+      "x-merge": "dict",
+      "additionalProperties": false,
+      "properties": {
+        "logLevel": { "type": "string", "enum": ["DEBUG", "INFO", "WARN", "ERROR"], "description": "daemon 日志级别" },
+        "aunTrace": { "type": "boolean", "description": "是否记录 AUN 协议 trace" },
+        "aunSdkLog": { "type": "boolean", "description": "是否启用 AUN SDK 调试日志" },
+        "upmsg": { "type": "boolean", "description": "是否向 Agent owner 发送 daemon 上线通知" },
+        "eckSnapshots": { "type": "boolean", "default": false, "description": "是否写入可能包含敏感上下文的 ECK 旁路调试快照" }
+      }
+    },
+    "tunnel": {
+      "type": "object",
+      "description": "内网穿透配置",
+      "x-merge": "dict",
+      "properties": {
+        "targets": { "type": "array", "description": "穿透目标列表", "items": { "type": "object" } }
+      }
+    },
+    "aun": {
+      "type": "object",
+      "description": "AUN 进程配置",
+      "x-merge": "dict",
+      "properties": {
+        "gatewayUrl": { "not": {}, "description": "已移除；网关由 fastaun 缓存和 AID discovery 决定" },
+        "defaultAidDomain": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)+$",
+          "description": "自动生成控制 AID 与 benchmark AID 使用的后缀域名；不影响已有 AID"
+        },
+        "minEvolVersion": { "type": "string", "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$", "description": "AUN Menu 允许的最低 Evol 客户端版本；省略时不限制" },
+        "menuTokenRequired": { "type": "boolean", "default": false, "description": "是否要求普通 AUN Menu 请求携带有效 menu_token；默认 false" },
+        "defaultEncrypt": { "type": "boolean", "description": "所有 daemon 管理的 AUN 通道共用的出站默认加密值；省略时为 true" }
+      }
+    },
+    "services": {
+      "type": "array",
+      "description": "daemon 管理的本机服务及其可选 AUN 代理",
+      "x-merge": "list",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "enabled"],
+        "properties": {
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z0-9_-]+$",
+            "description": "服务的逻辑标识，同时作为 AUN 代理路由名；ecweb 表示本机 EC Web 服务实例"
+          },
+          "enabled": { "type": "boolean", "default": true, "description": "是否启用本机服务实例" },
+          "port": { "type": "integer", "minimum": 1, "maximum": 65535, "description": "本机服务期望监听端口" },
+          "proxy": {
+            "type": "object",
+            "additionalProperties": false,
+            "allOf": [
+              {
+                "if": { "properties": { "enabled": { "const": true }, "source": { "const": "static" } }, "required": ["enabled", "source"] },
+                "then": { "required": ["endpoint", "visibility"] }
+              },
+              {
+                "if": { "properties": { "enabled": { "const": true } }, "required": ["enabled"] },
+                "then": { "required": ["source", "visibility"] }
+              }
+            ],
+            "properties": {
+              "enabled": { "type": "boolean", "default": false, "description": "是否通过 AUN Service Proxy 暴露该服务" },
+              "source": { "type": "string", "enum": ["instance", "static"], "description": "instance 表示自动发现同名本机服务；static 使用 endpoint 显式回连" },
+              "endpoint": { "type": "string", "maxLength": 2048, "description": "source=static 时使用的本机 HTTP/HTTPS 或 WS/WSS 回连地址" },
+              "serviceType": { "type": "string", "enum": ["http", "websocket", "ssh"], "default": "http", "description": "AUN 中公布的服务类型" },
+              "visibility": { "type": "string", "enum": ["public", "private", "aun-auth"], "default": "private", "description": "AUN Service Proxy 访问策略" },
+              "metadata": {
+                "type": "object",
+                "description": "非敏感服务描述；不得包含 endpoint、token、secret、cookie 等敏感信息",
+                "additionalProperties": { "type": "string", "maxLength": 8192 }
+              }
+            }
+          }
+        }
+      }
+    },
+    "configSnapshots": { "type": "boolean", "default": true, "description": "是否自动维护配置快照、启动日志和自检回落", "x-merge": "scalar" },
+    "idleMonitor": {
+      "type": "object",
+      "description": "流式输出空闲监控配置",
+      "x-merge": "dict",
+      "properties": {
+        "enabled": { "type": "boolean", "default": true, "description": "是否启用空闲监控" },
+        "timeout": { "type": "number", "default": 120, "description": "空闲超时秒数" },
+        "apiRetryTimeout": { "type": "number", "description": "API 重试尝试连续无事件时的超时秒数；未设置时继承 timeout" },
+        "maxExecutionTime": { "type": "number", "description": "单个任务总执行时限（秒）；未配置、非数字或小于等于 0 表示不限制" }
+      }
+    },
+    "watch": {
+      "type": "object",
+      "description": "日志监听配置",
+      "x-merge": "dict",
+      "properties": {
+        "logTypes": { "type": "array", "description": "要监听的日志类型", "items": { "type": "string" } }
+      }
+    }
+  }
+}

package/kits/schemas/defaults.schema.5.json

@@ -24,7 +24,7 @@
     },
     "active_baseagent": {
       "type": "string",
-      "description": "当前活跃的 base agent（claude/codex/gemini）。暂存于此，待权限体系实现后迁移。",
+      "description": "当前活跃的 base agent（claude/codex/gemini/ecagent）。暂存于此，待权限体系实现后迁移。",
       "x-merge": "scalar"
     },
     "baseagents": {
@@ -45,6 +45,16 @@
             "propertyNames": { "minLength": 1 },
             "additionalProperties": { "type": "string" }
           },
+          "auxiliaryModel": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Session Renew 语义连续性判断使用的 direct 辅助模型。"
+          },
+          "auxiliaryEffort": {
+            "type": "string",
+            "enum": ["low", "medium", "high", "xhigh", "max"],
+            "description": "Session Renew 辅助模型的可选推理强度。"
+          },
           "fallbackModels": {
             "type": "array",
             "maxItems": 3,
@@ -59,6 +69,9 @@
               }
             }
           }
+        },
+        "dependencies": {
+          "auxiliaryEffort": ["auxiliaryModel"]
         }
       }
     },
@@ -66,8 +79,8 @@
       "type": "object",
       "description": "项目路径配置",
       "x-merge": "dict",
+      "additionalProperties": false,
       "properties": {
-        "rootPath": { "type": "string", "description": "全局项目根路径" },
         "defaultPath": { "type": "string", "description": "全局默认项目路径" }
       }
     },
@@ -77,7 +90,6 @@
       "x-merge": "dict",
       "properties": {
         "keystorePath": { "type": "string" },
-        "encryptionSeed": { "type": "string" },
         "gatewayUrl": { "not": {}, "description": "已移除；网关由 fastaun 缓存和 AID discovery 决定" },
         "defaultEncrypt": {
           "not": {},

package/kits/schemas/migrations/README.md

@@ -25,4 +25,6 @@ export function migrate(old: object): object;   // 旧版本完整 JSON → 新
 - 历史 schema 文件全部保留（`{逻辑名}.schema.{版本}.json`）。
 - 每个迁移函数 default-export `migrate`，由 ConfigManager 动态 import。
 
-当前所有 schema 均为 v1，无迁移函数。
+当前完整配置 schema 的历史迁移仍按各自模块维护。响应模式桶的
+`single-session` v2→v3 数据迁移集中在 `src/config/schema-migration.ts`，
+扫描并更新 defaults、Agent、Relation 配置文件，并在 daemon 启动前自动执行。

package/kits/schemas/relation-config.schema.8.json

@@ -46,7 +46,20 @@
             "type": "object",
             "propertyNames": { "minLength": 1 },
             "additionalProperties": { "type": "string" }
+          },
+          "auxiliaryModel": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Session Renew 语义连续性判断使用的 direct 辅助模型。"
+          },
+          "auxiliaryEffort": {
+            "type": "string",
+            "enum": ["low", "medium", "high", "xhigh", "max"],
+            "description": "Session Renew 辅助模型的可选推理强度。"
           }
+        },
+        "dependencies": {
+          "auxiliaryEffort": ["auxiliaryModel"]
         }
       }
     },

package/kits/schemas/role-config.schema.1.json

@@ -14,8 +14,7 @@
     { "value": "baseagents.claude.effort", "label": "Claude Effort", "description": "角色使用 Claude 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }, { "value": "max", "label": "Max" }] },
     { "value": "baseagents.codex.model", "label": "Codex Model", "description": "角色可使用的 Codex 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Codex models" }, { "value": "gpt-5.4*", "label": "GPT-5.4 family" }, { "value": "gpt-5.3-codex*", "label": "GPT-5.3 Codex family" }] },
     { "value": "baseagents.codex.effort", "label": "Codex Effort", "description": "角色使用 Codex 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }] },
-    { "value": "baseagents.gemini.model", "label": "Gemini Model", "description": "角色可使用的 Gemini 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Gemini models" }, { "value": "gemini-*", "label": "Gemini model family" }] },
-    { "value": "baseagents.hermes.model", "label": "Hermes Model", "description": "角色可使用的 Hermes 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Hermes models" }] }
+    { "value": "baseagents.gemini.model", "label": "Gemini Model", "description": "角色可使用的 Gemini 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Gemini models" }, { "value": "gemini-*", "label": "Gemini model family" }] }
   ],
   "type": "object",
   "additionalProperties": false,

package/kits/schemas/single-session.schema.3.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "single-session.schema.3.json",
+  "title": "SingleSessionParams (responseModeParams['single-session'])",
+  "description": "Single-session mode parameters. Session Renew auxiliary model settings belong to baseagents.<name>.",
+  "x-logical-name": "single-session",
+  "x-scope": "mode",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "pre_tool_1stmsgchk": {
+      "type": "boolean",
+      "enum": [true, false],
+      "default": true,
+      "description": "proactive 首个本地工具表态检查（仅 chatmode=proactive 生效）：首个可被 PreToolUse 覆盖的本地工具必须是当前会话精确对应的 ec msg/group send，否则拦截；WebSearch、图像生成、浏览器和 Computer Use 等 hosted 工具不进入此硬拒绝边界。",
+      "x-enumDescriptions": {
+        "true": "启用：首个 hook 可覆盖的本地工具必须是精确会话 send",
+        "false": "禁用：不执行 proactive 首个本地工具 send 检查"
+      }
+    },
+    "tool_use_reminder": {
+      "type": "boolean",
+      "enum": [true, false],
+      "default": true,
+      "description": "proactive 工具汇报提醒（仅 chatmode=proactive 生效）：启用队列未读提醒 + 每 10 次工具调用的汇报提醒。",
+      "x-enumDescriptions": {
+        "true": "启用：自动汇报工具使用情况",
+        "false": "禁用：静默执行工具"
+      }
+    }
+  }
+}

package/kits/templates/roles/admin.json

@@ -8,6 +8,7 @@
   },
   "commandPermissions": {
     "contact.read": { "allow": true, "scopes": ["agent"] },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
     "contact.block": {
       "allow": true,
       "scopes": ["agent"],

package/kits/templates/roles/member.json

@@ -52,6 +52,7 @@
     "group.rulespolicy.update": { "allow": false },
     "trigger.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
     "ec.msg.send": { "allow": true, "constraints": { "ownPeerOnly": true } },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
     "ec.msg.file": { "allow": true, "constraints": { "ownPeerOnly": true } },
     "ec.msg.history": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
     "ec.msg.online": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },

package/kits/templates/roles/visitor.json

@@ -56,6 +56,7 @@
     "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
     "capability.read": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
     "ec.msg.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
     "ec.msg.file": { "allow": false },
     "ec.msg.history": { "allow": false },
     "ec.msg.online": { "allow": false },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evolcore",
-  "version": "0.0.20",
+  "version": "0.0.21",
   "description": "AI Agent gateway connecting Claude, Codex, Gemini, and the bundled ecagent runner to messaging channels with multi-project session management",
   "type": "module",
   "main": "dist/index.js",
@@ -11,6 +11,8 @@
     "dist/",
     "ecagent/dist/",
     "!ecagent/dist/**/*.map",
+    "!dist/**/*.test.js",
+    "!dist/**/*.spec.js",
     "ecagent/LICENSE",
     "ecagent/NOTICE",
     "ecagent/README.md",
@@ -18,6 +20,7 @@
     "bin/",
     "!dist/experimental/",
     "skills/",
+    "!skills/eclink/IDENTITIES.md",
     "kits/",
     "!kits/.kits-version",
     "*.md",
@@ -45,7 +48,7 @@
     "prepublishOnly": "npm test"
   },
   "dependencies": {
-    "@agentunion/fastaun": "0.5.6",
+    "@agentunion/fastaun": "0.5.10",
     "@anthropic-ai/claude-agent-sdk": "0.3.220",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "ajv": "^8.20.0",
@@ -78,6 +81,6 @@
     "vitest": "^4.1.0"
   },
   "engines": {
-    "node": ">=22.19.0"
+    "node": ">=22.16.0"
   }
 }

package/skills/eclink/SKILL.md

@@ -10,6 +10,8 @@ Use the installed `ec` CLI as the message interface. This skill is only for a st
 
 If the runtime exposes an EvolCore task/session context (for example `EVOLCORE_SESSION_ID`, `EVOLCORE_DELEGATION_TOKEN`, or an ECK-managed channel prompt), stop using this skill. Do not shell out to `ec`; let the EvolCore runtime's delegated sender enforce the current session, peer, role, and audit constraints.
 
+After confirming that this is a standalone session, read [IDENTITIES.md](IDENTITIES.md) for the machine-local Codex AID registry. Do not read that registry from an EvolCore-managed task.
+
 ## Shell and approval boundary
 
 Every `exec_command` invocation must run exactly one `ec` command. Do not combine commands with `&&`, `||`, `;`, `|`, redirects, subshells, command substitutions, scripts, `command -v`, or wrappers such as `sh -c`/`bash -lc`.

package/dist/config/aun-gateway-config.js

@@ -1,2 +0,0 @@
-/** Compatibility exports for retired AUN gateway override handling. */
-export { legacyAunGatewayConfigPaths, stripLegacyAunGatewayConfig, } from './config-manager.js';