evolcore 0.0.23 → 0.0.25

package/dist/cli/stats.js

@@ -3,54 +3,55 @@
  */
 import { resolveRoot } from '../paths.js';
 import { wantsHelp } from './help.js';
+import { readBestTaskRuntimeContext } from './task-context.js';
 import { queryAggregated, querySessionTurns, queryContextBreakdown, queryTopPeers, queryTopModels, queryMessageAggregated, queryPeerList, querySummary, queryPeerDaily, queryTaskModelCalls, querySessionModelCalls } from '../stats/query.js';
 import { getBudgetStatus } from '../stats/budget.js';
-const HELP = `ec stats — Token 用量与费用统计
-
-Usage: ec stats [options]
-
-时间范围:
-  (无参数)                今日概览
-  --today                 同上
-  --hour                  最近 24 小时，按小时分组
-  --week                  本周
-  --month                 本月
-  --from <date> --to <date>   任意区间（YYYY-MM-DD）
-
-维度过滤（可组合）:
-  --agent <aid>           指定 agent
-  --peer <X>             对端（裸 AID 自动前缀 aun#，或 channel#id 格式）
-  --model <model-id>      指定模型
-  --session <id>          指定会话
-
-聚合粒度:
-  --by hour|day|week|month|model|peer|agent
-
-快捷视图:
-  --session <id>          单个会话明细
-  --session <id> --last   会话最后一轮用量 + 累计（等价 status.completed）
-  --context <id>          会话 context breakdown 细目
-  --budget                预算状态
-  --top-peers [--limit N] 对端排行
-  --top-models [--limit N] 模型排行
-  --traffic               消息收发条数与字节数
-  --sql "<query>"         直接执行只读 SQL
-  --rebuild               全量重建日聚合表 usage_daily（运维兜底/排查）
-  --peers [--limit N]     私聊对端列表（带累计 token/calls/活跃日）
-  --groups [--limit N]    群聊列表（同上）
-  --summary               指定时间范围总消耗汇总（token/USD/CNY）
-  --peer-detail <id>      指定对端 AID 或 peer_key，按天返回消耗明细
-  --task-calls <taskId>   一个 task 的逐次大模型调用明细
-  --session-calls <id>    一个会话的逐次大模型调用明细
-
-输出格式:
-  --format json           JSON 输出
-  --help, -h              显示此帮助
-
-示例:
-  ec stats
-  ec stats --month --agent bot.agentid.pub
-  ec stats --peer alice.aid.pub
+const HELP = `ec stats — Token 用量与费用统计
+
+Usage: ec stats [options]
+
+时间范围:
+  (无参数)                今日概览
+  --today                 同上
+  --hour                  最近 24 小时，按小时分组
+  --week                  本周
+  --month                 本月
+  --from <date> --to <date>   任意区间（YYYY-MM-DD）
+
+维度过滤（可组合）:
+  --agent <aid>           指定 agent
+  --peer <X>             对端（裸 AID 自动前缀 aun#，或 channel#id 格式）
+  --model <model-id>      指定模型
+  --session <id>          指定会话
+
+聚合粒度:
+  --by hour|day|week|month|model|peer|agent
+
+快捷视图:
+  --session <id>          单个会话明细
+  --session <id> --last   会话最后一轮用量 + 累计（等价 status.completed）
+  --context <id>          会话 context breakdown 细目
+  --budget                预算状态
+  --top-peers [--limit N] 对端排行
+  --top-models [--limit N] 模型排行
+  --traffic               消息收发条数与字节数
+  --sql "<query>"         直接执行只读 SQL
+  --rebuild               全量重建日聚合表 usage_daily（运维兜底/排查）
+  --peers [--limit N]     私聊对端列表（带累计 token/calls/活跃日）
+  --groups [--limit N]    群聊列表（同上）
+  --summary               指定时间范围总消耗汇总（token/USD/CNY）
+  --peer-detail <id>      指定对端 AID 或 peer_key，按天返回消耗明细
+  --task-calls <taskId>   一个 task 的逐次大模型调用明细
+  --session-calls <id>    一个会话的逐次大模型调用明细
+
+输出格式:
+  --format json           JSON 输出
+  --help, -h              显示此帮助
+
+示例:
+  ec stats
+  ec stats --month --agent bot.agentid.pub
+  ec stats --peer alice.aid.pub
   ec stats --session abc123 --format json`;
 const RESET = '\x1b[0m';
 const BOLD = '\x1b[1m';
@@ -102,6 +103,98 @@ function parseDateArg(s) {
         throw new Error(`Invalid date: ${s}`);
     return d.getTime();
 }
+/**
+ * Views that read the whole stats database rather than one authorized scope.
+ * `--sql` is a read-only escape hatch over every table, and `--rebuild` writes.
+ * Neither can be narrowed to a relation, so both stay outside managed tasks.
+ */
+const MANAGED_FORBIDDEN_FLAGS = ['sql', 'rebuild'];
+/**
+ * Views that enumerate peers other than the caller. They are meaningful only
+ * for an agent-wide scope, so a relation-scoped caller cannot use them.
+ */
+const AGENT_SCOPE_FLAGS = ['peers', 'groups', 'top-peers'];
+/** Relation roles allowed to read usage across the whole agent. */
+const AGENT_SCOPE_ROLES = new Set(['owner', 'admin']);
+/**
+ * Resolve the authorized stats scope for a managed Agent task.
+ *
+ * `ec stats` reads the usage database directly, so authorization has to happen
+ * here: owner and admin may read the whole agent, and every other relation role
+ * is confined to its own relation and session. Returns undefined outside a
+ * managed task, leaving direct terminal usage unchanged.
+ */
+async function resolveManagedStatsScope(flags, isJson) {
+    if (!process.env.EVOLCORE_SESSION_ID)
+        return undefined;
+    const runtime = await readBestTaskRuntimeContext();
+    const role = runtime?.peerRole?.trim();
+    const selfAid = runtime?.selfAid?.trim();
+    // Fail closed: without a resolved identity and role there is no scope to
+    // authorize against, and a managed caller must never fall back to full access.
+    if (!selfAid || !role || role === 'none') {
+        fail(isJson, 'NOT_ALLOWED', 'stats 在托管任务中需要已解析的关系身份与角色');
+    }
+    for (const flag of MANAGED_FORBIDDEN_FLAGS) {
+        if (flags[flag])
+            fail(isJson, 'NOT_ALLOWED', `--${flag} 在托管任务中不可用`);
+    }
+    if (AGENT_SCOPE_ROLES.has(role))
+        return { agentWide: true, agentAid: selfAid, role };
+    for (const flag of AGENT_SCOPE_FLAGS) {
+        if (flags[flag])
+            fail(isJson, 'NOT_ALLOWED', `--${flag} 仅 owner/admin 可用`);
+    }
+    const channel = runtime?.channel?.trim();
+    const peerId = runtime?.peerId?.trim();
+    if (!channel || !peerId) {
+        fail(isJson, 'NOT_ALLOWED', `角色 ${role} 只能查看自己的关系用量，但当前对端标识不完整`);
+    }
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    return {
+        agentWide: false,
+        agentAid: selfAid,
+        peerKey: `${channel}#${encodeURIComponent(peerId)}`,
+        sessionId,
+        role,
+    };
+}
+/**
+ * Reject an explicit selector that points outside the authorized scope instead
+ * of silently narrowing it, so a caller never reads a value as their own.
+ */
+function enforceManagedSelector(scope, flags, isJson) {
+    // owner/admin read across the host, so an explicit --agent stays available to
+    // them. Every other role is pinned to the agent that owns this task.
+    if (scope.agentWide)
+        return;
+    const requestedAgent = typeof flags.agent === 'string' ? flags.agent.trim() : undefined;
+    if (requestedAgent && requestedAgent !== scope.agentAid) {
+        fail(isJson, 'NOT_ALLOWED', `角色 ${scope.role} 只能查看 ${scope.agentAid} 的用量`);
+    }
+    const normalizePeer = (value) => value.includes('#') ? value : `aun#${encodeURIComponent(value)}`;
+    for (const flag of ['peer', 'peer-detail']) {
+        const raw = flags[flag];
+        if (typeof raw !== 'string' || !raw.trim())
+            continue;
+        if (normalizePeer(raw.trim()) !== scope.peerKey) {
+            fail(isJson, 'NOT_ALLOWED', `角色 ${scope.role} 只能查看自己的关系用量`);
+        }
+    }
+    for (const flag of ['session', 'context', 'session-calls']) {
+        const raw = flags[flag];
+        if (typeof raw !== 'string' || !raw.trim())
+            continue;
+        if (raw.trim() !== scope.sessionId) {
+            fail(isJson, 'NOT_ALLOWED', `角色 ${scope.role} 只能查看当前会话的用量`);
+        }
+    }
+    // A task id cannot be checked against this relation without a second lookup,
+    // and it addresses one runQuery across the whole agent. Keep it privileged.
+    if (typeof flags['task-calls'] === 'string' && flags['task-calls'].trim()) {
+        fail(isJson, 'NOT_ALLOWED', '--task-calls 仅 owner/admin 可用');
+    }
+}
 export async function handleStats(args) {
     // Help
     if (wantsHelp(args)) {
@@ -130,6 +223,11 @@ export async function handleStats(args) {
         }
     }
     const isJson = flags.format === 'json';
+    // Authorize before any branch runs: `--rebuild` writes, and every read view
+    // below would otherwise see the whole database.
+    const managedScope = await resolveManagedStatsScope(flags, isJson);
+    if (managedScope)
+        enforceManagedSelector(managedScope, flags, isJson);
     // 全量重建日聚合表（运维兜底/排查），不依赖时间范围。
     if (flags.rebuild) {
         const { rebuildDailyRollup, getDb } = await import('../stats/db.js');
@@ -148,11 +246,11 @@ export async function handleStats(args) {
             const batch = allEvents.slice(i, i + batchSize);
             for (const event of batch) {
                 const prices = resolvePrices(home, event); // 不传 gatewayPricing，全走本地 JSONL
-                db.prepare(`
-          UPDATE usage_events
-          SET cost_official_usd = ?, cost_official_cny = ?,
-              cost_gateway_usd = ?, cost_gateway_cny = ?
-          WHERE id = ?
+                db.prepare(`
+          UPDATE usage_events
+          SET cost_official_usd = ?, cost_official_cny = ?,
+              cost_gateway_usd = ?, cost_gateway_cny = ?
+          WHERE id = ?
         `).run(prices.official?.usd ?? null, prices.official?.cny ?? null, prices.gateway?.usd ?? null, prices.gateway?.cny ?? null, event.id);
                 updated++;
             }
@@ -223,6 +321,18 @@ export async function handleStats(args) {
         filter.model = flags.model;
     if (flags.session && typeof flags.session === 'string')
         filter.session_id = flags.session;
+    // Pin the authorized scope into the filter itself. Rejecting an out-of-scope
+    // selector is not enough: a relation-scoped caller that passes no selector at
+    // all would otherwise aggregate across every agent and peer in the database.
+    if (managedScope && !managedScope.agentWide) {
+        filter.agent_aid = managedScope.agentAid;
+        filter.peer_key = managedScope.peerKey;
+        // A bare peer id would take the LIKE branch below and could also match the
+        // same id on another channel. Pin the exact key that was authorized.
+        if (typeof flags['peer-detail'] === 'string' && managedScope.peerKey) {
+            flags['peer-detail'] = managedScope.peerKey;
+        }
+    }
     // ── 结构化查询：私聊/群聊列表、总消耗汇总、对端按天明细 ──────────────────
     if (flags.peers || flags.groups) {
         const peerType = flags.peers ? 'private' : 'group';

package/dist/cli/trigger-command.js

@@ -81,62 +81,62 @@ export async function cmdTrigger(args) {
     }
 }
 function printHelp() {
-    console.log(`用法: ec trigger <subcommand>
-
-命令:
-  list [--agent <aid>] [--all] [--json]
-  show [--agent <aid>] <triggerId> [--json]
-  history [--agent <aid>] [triggerId] [--limit <n>] [--json]
-  create --exec <script|trigger-session|target-session> --file <trigger.json|trigger-dir> [--enable] [--json]
-    OR
-  create [--agent <aid>] --exec <script|trigger-session|target-session> --cron <expr>|--event <pattern> (--prompt <text>|--prompt-file <path>) [--enable] [其他flag]
-  set ...  (create 的兼容别名)
-  update [--agent <aid>] <triggerId> <参数...> [--if-revision <sha256:...>] [--json]
-  enable [--agent <aid>] <triggerId>
-  disable [--agent <aid>] <triggerId>
-  cancel [--agent <aid>] <triggerId>  (disable 的兼容别名)
-  delete|remove|rm [--agent <aid>] <triggerId>
-  run [--agent <aid>] <triggerId> [--dry-run] [--json]
-  template list|show <name> [--json]
-
-Create 参数模式支持:
-  --once | --delay <时长> | --at <ISO时间> | --cron <表达式> | --every <时长> | --event <事件模式>
-  --exec <script|trigger-session|target-session>  (必填)
-  --prompt <文本> | --prompt-file <路径>
-    Shell 双引号内的双引号、反引号和变量形式的美元符号都需在前面加反斜杠；trigger 保存的是还原后的原文
-  --script-path <路径> --script-runtime <node|python|bash>
-  --script-args <JSON> --script-timeout <时长>
-  --feedback <target>  (origin/silent 仅可通过 --file 导入)
-  --baseagent <name>  (仅 --exec trigger-session)
-  --model <模型>  --effort <low|medium|high|xhigh|max>
-  --max-runs <次数>  --max-duration <时长: 30s|15m|2h|1d>
-  --permission <readonly|auto|request|bypass|fullaccess>（省略则继承当前身份配置；fullaccess 仅 daemon-owner 且 feature flag 开启时可用）
-  --tz <时区> (仅 cron)
-  --target-channel <channelKey> --target-channel-id <ID>  (AUN 可简写为 aun)
-  --target-chat-type <private|group>  (AUN 目标必填；channelId 同时作为群聊 ID)
-  --target-session <main|thread> [--target-thread-id <threadId>]
-  --trigger-thread <by-run|by-trigger>  (兼容旧值 per-run)
-  --name <名称>
-
-通用输出参数:
-  --json | --format json
-
-Update 参数:
-  --once | --delay | --at | --cron | --every | --event [--tz]
-  --prompt <文本> | --prompt-file <路径>  --script-file <路径>  --name <名称>
-  --description <文本>  (空字符串删除)
-  --model <模型>  --effort <强度>  --permission <权限模式|inherit>（inherit 清除覆盖）
-  --max-runs <次数>  --max-duration <时长>
-  --concurrency <forbid|replace|allow>  --missed-policy <skip|run-once|run-all>
-  --feedback <origin|target|silent>
-  --target-channel <channelKey> --target-channel-id <ID>  (必须同时指定)
-  --target-chat-type <private|group>  --target-session <main|thread> [--target-thread-id <threadId>]
-  --trigger-thread <by-run|by-trigger>  --baseagent <name>  (仅 trigger_session 之间)
-  --on-error <fail|retry>  --noop-sentinel <文本>
-  --retry-attempts <次数>  --retry-backoff <毫秒>
-  --script-runtime <node|python|bash>  --script-args <JSON>  --script-timeout <时长>
-
-省略 --agent 时使用当前 agent AID；无会话上下文或跨身份操作时需要显式指定。
+    console.log(`用法: ec trigger <subcommand>
+
+命令:
+  list [--agent <aid>] [--all] [--json]
+  show [--agent <aid>] <triggerId> [--json]
+  history [--agent <aid>] [triggerId] [--limit <n>] [--json]
+  create --exec <script|trigger-session|target-session> --file <trigger.json|trigger-dir> [--enable] [--json]
+    OR
+  create [--agent <aid>] --exec <script|trigger-session|target-session> --cron <expr>|--event <pattern> (--prompt <text>|--prompt-file <path>) [--enable] [其他flag]
+  set ...  (create 的兼容别名)
+  update [--agent <aid>] <triggerId> <参数...> [--if-revision <sha256:...>] [--json]
+  enable [--agent <aid>] <triggerId>
+  disable [--agent <aid>] <triggerId>
+  cancel [--agent <aid>] <triggerId>  (disable 的兼容别名)
+  delete|remove|rm [--agent <aid>] <triggerId>
+  run [--agent <aid>] <triggerId> [--dry-run] [--json]
+  template list|show <name> [--json]
+
+Create 参数模式支持:
+  --once | --delay <时长> | --at <ISO时间> | --cron <表达式> | --every <时长> | --event <事件模式>
+  --exec <script|trigger-session|target-session>  (必填)
+  --prompt <文本> | --prompt-file <路径>
+    Shell 双引号内的双引号、反引号和变量形式的美元符号都需在前面加反斜杠；trigger 保存的是还原后的原文
+  --script-path <路径> --script-runtime <node|python|bash>
+  --script-args <JSON> --script-timeout <时长>
+  --feedback <target>  (origin/silent 仅可通过 --file 导入)
+  --baseagent <name>  (仅 --exec trigger-session)
+  --model <模型>  --effort <low|medium|high|xhigh|max>
+  --max-runs <次数>  --max-duration <时长: 30s|15m|2h|1d>
+  --permission <readonly|auto|request|bypass|fullaccess>（省略则继承当前身份配置；fullaccess 仅 daemon-owner 且 feature flag 开启时可用）
+  --tz <时区> (仅 cron)
+  --target-channel <channelKey> --target-channel-id <ID>  (AUN 可简写为 aun)
+  --target-chat-type <private|group>  (AUN 目标必填；channelId 同时作为群聊 ID)
+  --target-session <main|thread> [--target-thread-id <threadId>]
+  --trigger-thread <by-run|by-trigger>  (兼容旧值 per-run)
+  --name <名称>
+
+通用输出参数:
+  --json | --format json
+
+Update 参数:
+  --once | --delay | --at | --cron | --every | --event [--tz]
+  --prompt <文本> | --prompt-file <路径>  --script-file <路径>  --name <名称>
+  --description <文本>  (空字符串删除)
+  --model <模型>  --effort <强度>  --permission <权限模式|inherit>（inherit 清除覆盖）
+  --max-runs <次数>  --max-duration <时长>
+  --concurrency <forbid|replace|allow>  --missed-policy <skip|run-once|run-all>
+  --feedback <origin|target|silent>
+  --target-channel <channelKey> --target-channel-id <ID>  (必须同时指定)
+  --target-chat-type <private|group>  --target-session <main|thread> [--target-thread-id <threadId>]
+  --trigger-thread <by-run|by-trigger>  --baseagent <name>  (仅 trigger_session 之间)
+  --on-error <fail|retry>  --noop-sentinel <文本>
+  --retry-attempts <次数>  --retry-backoff <毫秒>
+  --script-runtime <node|python|bash>  --script-args <JSON>  --script-timeout <时长>
+
+省略 --agent 时使用当前 agent AID；无会话上下文或跨身份操作时需要显式指定。
 任务会话中的跨身份操作仅允许目标 Agent 上具备 owner/admin 权限的调用者执行 list/show/history；创建、修改、启停、删除和运行仍只允许当前 Agent。`);
 }
 async function listTriggers(args, json) {

package/dist/config/builtin-roles.js

@@ -48,7 +48,10 @@ export function getManagementCommandPermissions(role) {
         'config.unset': { allow: true, scopes: ['agent', 'relation'] },
         'role.policy.write': { allow: true, dangerous: true, scopes: ['agent'], constraints: { requireAgentAdmin: true } },
         'ec.aid.show': { allow: true, dangerous: true, scopes: ['agent'], constraints: { targetCurrentAgentOnly: true, requireAgentAdmin: true } },
+        'ec.aid.lookup': { allow: true, scopes: ['agent'] },
+        'ec.aid.agentmd.get': { allow: true, scopes: ['agent'] },
         'ec.aid.agentmd.put': { allow: true, dangerous: true, scopes: ['agent'], constraints: { targetCurrentAgentOnly: true, requireAgentAdmin: true } },
+        'ec.aid.avatar': { allow: true, dangerous: true, scopes: ['agent'], constraints: { targetCurrentAgentOnly: true, requireAgentOwner: true } },
         'ec.fs.mkdir': { allow: true, permissionMode: 'auto', scopes: ['relation'], constraints: { groupOnly: true, currentRelationOnly: true, targetCurrentAgentOnly: true } },
         'ec.fs.upload': { allow: true, permissionMode: 'auto', scopes: ['relation'], constraints: { groupOnly: true, currentRelationOnly: true, targetCurrentAgentOnly: true } },
         'ec.fs.copy': { allow: true, permissionMode: 'auto', scopes: ['relation'], constraints: { groupOnly: true, currentRelationOnly: true, targetCurrentAgentOnly: true } },

package/dist/config/config-manager.js

@@ -679,6 +679,21 @@ function groupFor(target, sel) {
 function normalizeAgentConfigForWrite(value) {
     const mutable = normalizeBaseagentEffortCompat({ ...value });
     normalizeShowActivitiesCompat(mutable);
+    if (Object.prototype.hasOwnProperty.call(mutable, 'owners')) {
+        if (!Array.isArray(mutable.owners)) {
+            throw new ConfigError('VALIDATION_ERROR', 'owners must be an array');
+        }
+        const owners = [];
+        for (const rawOwner of mutable.owners) {
+            if (typeof rawOwner !== 'string' || !rawOwner.trim() || !isValidAid(rawOwner.trim())) {
+                throw new ConfigError('VALIDATION_ERROR', `Invalid owner AID: ${JSON.stringify(rawOwner)}`);
+            }
+            const owner = rawOwner.trim();
+            if (!owners.includes(owner))
+                owners.push(owner);
+        }
+        mutable.owners = owners;
+    }
     // AID 格式校验
     if (mutable.aid && !isValidAid(mutable.aid)) {
         throw new ConfigError('VALIDATION_ERROR', `Invalid aid "${mutable.aid}" (must be a valid multi-level domain like mybot.agentid.pub)`);

package/dist/config/config-operation-service.js

@@ -301,7 +301,15 @@ function executeSet(op, options) {
     if (!op.route)
         return { ok: false, code: 'UNKNOWN_FIELD', error: `Unknown config field: ${op.field}` };
     const selector = selectorFor(op, options);
-    mutateConfig(op.route.target, selector, existing => {
+    const mutation = mutateConfig(op.route.target, selector, existing => {
+        if (op.field === 'owners' && op.route.target === ConfigTarget.Agent) {
+            const nextOwners = Array.isArray(op.value) ? op.value : [];
+            if (nextOwners.length === 0) {
+                throw new ConfigError('LAST_OWNER_PROTECTED', 'owners must contain at least one owner');
+            }
+            setNested(existing, op.field, nextOwners);
+            return nextOwners;
+        }
         if (op.route.merge === 'list') {
             const previous = getNested(existing, op.field);
             const previousItems = Array.isArray(previous) ? previous : [];
@@ -316,16 +324,18 @@ function executeSet(op, options) {
                 }
             });
             setNested(existing, op.field, merged);
+            return merged;
         }
         else {
             setNested(existing, op.field, op.value);
+            return op.value;
         }
     });
     return {
         ok: true,
         subcommand: 'set',
         field: op.field,
-        value: op.value,
+        value: mutation.value,
         scope: op.configScope,
         file: op.route.schema,
     };
@@ -334,7 +344,14 @@ function executeUnset(op, options) {
     if (!op.route)
         return { ok: false, code: 'UNKNOWN_FIELD', error: `Unknown config field: ${op.field}` };
     const selector = selectorFor(op, options);
-    const { value: removed } = mutateConfig(op.route.target, selector, existing => {
+    const target = op.route.target;
+    const { value: removed } = mutateConfig(target, selector, existing => {
+        if (op.field === 'owners' && target === ConfigTarget.Agent) {
+            const current = getNested(existing, op.field);
+            if (Array.isArray(current) && current.length > 0) {
+                throw new ConfigError('LAST_OWNER_PROTECTED', 'cannot unset owners while an Agent still has owners; use owners replace with another owner');
+            }
+        }
         const parts = op.field.split('.');
         let current = existing;
         for (let i = 0; i < parts.length - 1; i++) {

package/dist/config/resolved-config-op.js

@@ -2,6 +2,7 @@ import { normalizeCliArgv } from '../cli/cli-argv.js';
 import { parseConfigSelector } from '../cli/config-selector.js';
 import { parseConfigFieldValue, resolveConfigFieldRule, } from './config-field-policy.js';
 import { ConfigError, routeFieldPath } from './config-manager.js';
+import { isValidAid } from '../aun/aid/validation.js';
 const SELECTOR_OPTIONS = {
     '--self': 'value',
     '--peer': 'value',
@@ -166,7 +167,13 @@ function resolveFieldCommand(argv, subcommand, options = {}) {
     const rawValue = subcommand === 'set' ? business.values[1] : undefined;
     let value;
     if (subcommand === 'set') {
-        if (fieldRule.class === 'safe-scalar') {
+        if (field === 'owners') {
+            const parsedOwners = parseOwnersValue(rawValue);
+            if (!parsedOwners.ok)
+                return parsedOwners;
+            value = parsedOwners.value;
+        }
+        else if (fieldRule.class === 'safe-scalar') {
             const parsedValue = parseConfigFieldValue(field, rawValue);
             if (!parsedValue.ok)
                 return { ok: false, code: 'INVALID_CONFIG_VALUE', reason: parsedValue.reason };
@@ -486,6 +493,37 @@ function coerceConfigValue(raw, route) {
         return Number(raw);
     return raw;
 }
+function parseOwnersValue(raw) {
+    let values;
+    const trimmed = raw.trim();
+    if (trimmed.startsWith('[')) {
+        try {
+            values = JSON.parse(trimmed);
+        }
+        catch {
+            return { ok: false, code: 'INVALID_CONFIG_VALUE', reason: 'owners must be a valid JSON array of AIDs' };
+        }
+        if (!Array.isArray(values)) {
+            return { ok: false, code: 'INVALID_CONFIG_VALUE', reason: 'owners must be a JSON array of AIDs' };
+        }
+    }
+    else {
+        values = [raw];
+    }
+    if (!Array.isArray(values) || values.length === 0) {
+        return { ok: false, code: 'INVALID_CONFIG_VALUE', reason: 'owners must contain at least one AID' };
+    }
+    const owners = [];
+    for (const value of values) {
+        if (typeof value !== 'string' || !value.trim() || !isValidAid(value.trim())) {
+            return { ok: false, code: 'INVALID_CONFIG_VALUE', reason: `Invalid owner AID: ${JSON.stringify(value)}` };
+        }
+        const owner = value.trim();
+        if (!owners.includes(owner))
+            owners.push(owner);
+    }
+    return { ok: true, value: owners };
+}
 function configErrorResult(error) {
     if (error instanceof ConfigError)
         return { ok: false, code: error.code, reason: error.message };

package/dist/core/auth/auth-gateway.js

@@ -33,10 +33,11 @@ export function buildAuthSubject(input) {
         && fullAccessAuthorization.processRole === 'fullaccess-run'
         && fullAccessAuthorization.dataScope === 'daemon';
     const isDaemonService = input.trustedProcessRole === 'daemon-service';
-    const isDaemonOwner = !isDaemonService && !isFullAccessRun && isProcessOwner({
+    const isTrustedDaemonOwner = input.trustedProcessRole === 'daemon-owner';
+    const isDaemonOwner = !isDaemonService && !isFullAccessRun && (isTrustedDaemonOwner || isProcessOwner({
         actor: roleDetail.actor,
         processOwners,
-    });
+    }));
     const suppliedRole = input.identity?.role && input.identity.role !== 'none' ? input.identity.role : undefined;
     const role = suppliedRole ?? roleDetail.effectiveRole ?? 'none';
     const processRole = isFullAccessRun