evolcore 0.0.23 → 0.0.25

package/kits/schemas/role-config.schema.1.json

@@ -1,201 +1,201 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "role-config.schema.1.json",
-  "title": "RoleConfig (agents/{aid}/roles/{roleId}.json)",
-  "description": "单个角色的独立策略配置。角色 ID 由文件名表达，本文件定义访问权限、行为字段约束、命令权限和用量额度。",
-  "x-logical-name": "role-config",
-  "x-scope": "role",
-  "x-permission-fields": [
-    { "value": "permissionMode", "label": "Permission Mode", "description": "角色的工具调用审批模式；只能由角色策略决定，关系级不可覆盖。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": false, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "readonly", "label": "Readonly" }, { "value": "auto", "label": "Auto" }, { "value": "request", "label": "Request" }, { "value": "bypass", "label": "Bypass" }] },
-    { "value": "chatmode.private", "label": "Private Chat Mode", "description": "角色在私聊场景中的响应方式策略。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "interactive", "label": "Interactive" }, { "value": "proactive", "label": "Proactive" }] },
-    { "value": "chatmode.group", "label": "Group Chat Mode", "description": "角色在群聊场景中的响应方式策略。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "interactive", "label": "Interactive" }, { "value": "proactive", "label": "Proactive" }] },
-    { "value": "mentionMode", "label": "Group Mention Mode", "description": "角色在群聊场景中的提及响应策略。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "disabled", "label": "Disabled" }, { "value": "mention-only", "label": "Mention Only" }] },
-    { "value": "baseagents.claude.model", "label": "Claude Model", "description": "角色可使用的 Claude 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Claude models" }, { "value": "claude-opus-*", "label": "Claude Opus family" }, { "value": "claude-sonnet-*", "label": "Claude Sonnet family" }, { "value": "claude-haiku-*", "label": "Claude Haiku family" }] },
-    { "value": "baseagents.claude.effort", "label": "Claude Effort", "description": "角色使用 Claude 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }, { "value": "max", "label": "Max" }] },
-    { "value": "baseagents.codex.model", "label": "Codex Model", "description": "角色可使用的 Codex 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Codex models" }, { "value": "gpt-5.4*", "label": "GPT-5.4 family" }, { "value": "gpt-5.3-codex*", "label": "GPT-5.3 Codex family" }] },
-    { "value": "baseagents.codex.effort", "label": "Codex Effort", "description": "角色使用 Codex 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }] },
-    { "value": "baseagents.gemini.model", "label": "Gemini Model", "description": "角色可使用的 Gemini 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Gemini models" }, { "value": "gemini-*", "label": "Gemini model family" }] }
-  ],
-  "type": "object",
-  "additionalProperties": false,
-  "required": ["$schema_version", "description", "permissions"],
-  "properties": {
-    "$schema_version": { "type": "number", "const": 1, "default": 1, "description": "角色配置 Schema 版本，固定为 1。" },
-    "description": { "type": "string", "description": "角色的用途、信任级别和授权边界说明。" },
-    "rank": { "type": "integer", "enum": [100, 300, 500, 700, 900], "description": "角色排序系数；内置角色固定，自定义角色固定为 500。旧文件缺省时由角色加载器补齐。" },
-    "allowAccess": { "type": "boolean", "default": true, "description": "是否允许该角色访问 Agent；缺省为 true。" },
-    "permissions": {
-      "type": "object",
-      "required": ["permissionMode"],
-      "description": "角色对运行时行为字段施加的默认值、关系级覆盖权及候选值约束。",
-      "properties": {
-        "permissionMode": {
-          "type": "object",
-          "required": ["default", "allowOverride"],
-          "additionalProperties": false,
-          "description": "工具调用审批模式策略；该策略必须存在且不允许关系级覆盖。",
-          "properties": {
-            "default": { "type": "string", "enum": ["readonly", "auto", "request", "bypass"], "description": "该角色实际使用的工具调用审批模式。", "x-enumDescriptions": { "readonly": "只读模式：明确只读工具和普通路径上的受限只读 Shell 自动执行；写入、H/L 类读取、未知 Shell 和未知工具拒绝；EC 命令仍由 daemon 鉴权", "auto": "自动模式：常规 workspace 操作自动执行，已识别危险操作和扩权请求拒绝", "request": "请求模式：常规操作自动执行，危险 Bash 和沙箱扩权请求人工审批", "bypass": "放行模式：沙箱内常规和普通审批命令自动执行，强危险 Git 和越界扩权仍需审批" } },
-            "allowOverride": { "const": false, "default": false, "description": "权限模式禁止关系级覆盖，固定为 false。" },
-            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["readonly", "auto", "request", "bypass"], "description": "一个可列入权限模式候选集合的值。", "x-enumDescriptions": { "readonly": "只读模式", "auto": "自动模式", "request": "请求人工审批模式", "bypass": "受强制危险规则约束的放行模式" } }, "uniqueItems": true, "description": "保留的权限模式候选集合；permissionMode 当前不可由关系级覆盖，通常无需配置。" },
-            "reason": { "type": "string", "description": "采用该权限模式策略的可审计原因或管理备注。" }
-          }
-        },
-        "chatmode.private": {
-          "type": "object",
-          "required": ["default", "allowOverride"],
-          "additionalProperties": false,
-          "description": "该角色在私聊场景中的响应方式策略。",
-          "properties": {
-            "default": { "type": "string", "enum": ["interactive", "proactive"], "description": "未设置有效关系级覆盖时使用的私聊响应方式。", "x-enumDescriptions": { "interactive": "同步交互：输出即回复", "proactive": "主动推送：CLI 回复 + 思考投影" } },
-            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖私聊响应方式；缺省为 false。" },
-            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["interactive", "proactive"], "description": "一个可用于私聊响应方式覆盖的值。", "x-enumDescriptions": { "interactive": "同步交互：输出即回复", "proactive": "主动推送：CLI 回复 + 思考投影" } }, "uniqueItems": true, "description": "允许关系级覆盖到的私聊响应方式白名单；若提供，必须包含 default。" },
-            "reason": { "type": "string", "description": "采用该私聊响应策略的可审计原因或管理备注。" }
-          }
-        },
-        "chatmode.group": {
-          "type": "object",
-          "required": ["default", "allowOverride"],
-          "additionalProperties": false,
-          "description": "该角色在群聊场景中的响应方式策略。",
-          "properties": {
-            "default": { "type": "string", "enum": ["interactive", "proactive"], "description": "未设置有效关系级覆盖时使用的群聊响应方式。", "x-enumDescriptions": { "interactive": "同步交互：输出即回复", "proactive": "主动推送：CLI 回复 + 思考投影" } },
-            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖群聊响应方式；缺省为 false。" },
-            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["interactive", "proactive"], "description": "一个可用于群聊响应方式覆盖的值。", "x-enumDescriptions": { "interactive": "同步交互：输出即回复", "proactive": "主动推送：CLI 回复 + 思考投影" } }, "uniqueItems": true, "description": "允许关系级覆盖到的群聊响应方式白名单；若提供，必须包含 default。" },
-            "reason": { "type": "string", "description": "采用该群聊响应策略的可审计原因或管理备注。" }
-          }
-        },
-        "mentionMode": {
-          "type": "object",
-          "required": ["default", "allowOverride"],
-          "additionalProperties": false,
-          "description": "该角色在群聊场景中的提及响应策略。",
-          "properties": {
-            "default": { "type": "string", "enum": ["disabled", "mention-only"], "description": "未设置有效关系级覆盖时使用的群聊提及响应策略。", "x-enumDescriptions": { "disabled": "不要求被提及即可响应", "mention-only": "仅在被明确提及时响应" } },
-            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖群聊提及响应策略；缺省为 false。" },
-            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["disabled", "mention-only"], "description": "一个可用于群聊提及响应策略覆盖的值。", "x-enumDescriptions": { "disabled": "不要求被提及即可响应", "mention-only": "仅在被明确提及时响应" } }, "uniqueItems": true, "description": "允许关系级覆盖到的群聊提及响应策略白名单；若提供，必须包含 default。" },
-            "reason": { "type": "string", "description": "采用该群聊提及响应策略的可审计原因或管理备注。" }
-          }
-        },
-        "baseagents.claude.effort": {
-          "type": "object",
-          "required": ["default", "allowOverride"],
-          "additionalProperties": false,
-          "description": "该角色使用 Claude runner 时的推理强度策略。",
-          "properties": {
-            "default": { "type": "string", "enum": ["auto", "low", "medium", "high", "xhigh", "max"], "description": "角色默认的 Claude 推理强度。", "x-enumDescriptions": { "auto": "由 Claude runner 自动选择", "low": "低", "medium": "中", "high": "高", "xhigh": "很高", "max": "最高" } },
-            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖 Claude 推理强度；缺省为 false。" },
-            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["auto", "low", "medium", "high", "xhigh", "max"], "description": "一个允许覆盖到的 Claude 推理强度。", "x-enumDescriptions": { "auto": "由 Claude runner 自动选择", "low": "低", "medium": "中", "high": "高", "xhigh": "很高", "max": "最高" } }, "uniqueItems": true, "description": "允许关系级覆盖到的 Claude 推理强度白名单；若提供，必须包含 default。" },
-            "reason": { "type": "string", "description": "采用该 Claude 推理强度策略的可审计原因或管理备注。" }
-          }
-        },
-        "baseagents.codex.effort": {
-          "type": "object",
-          "required": ["default", "allowOverride"],
-          "additionalProperties": false,
-          "description": "该角色使用 Codex runner 时的推理强度策略。",
-          "properties": {
-            "default": { "type": "string", "enum": ["auto", "low", "medium", "high", "xhigh"], "description": "角色默认的 Codex 推理强度。", "x-enumDescriptions": { "auto": "由 Codex runner 自动选择", "low": "低", "medium": "中", "high": "高", "xhigh": "很高" } },
-            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖 Codex 推理强度；缺省为 false。" },
-            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["auto", "low", "medium", "high", "xhigh"], "description": "一个允许覆盖到的 Codex 推理强度。", "x-enumDescriptions": { "auto": "由 Codex runner 自动选择", "low": "低", "medium": "中", "high": "高", "xhigh": "很高" } }, "uniqueItems": true, "description": "允许关系级覆盖到的 Codex 推理强度白名单；若提供，必须包含 default。" },
-            "reason": { "type": "string", "description": "采用该 Codex 推理强度策略的可审计原因或管理备注。" }
-          }
-        }
-      },
-      "patternProperties": {
-        "^baseagents\\.[a-z0-9_-]+\\.model$": {
-          "type": "object",
-          "required": ["default", "allowOverride", "allowedModels"],
-          "additionalProperties": false,
-          "description": "指定 base agent 的角色模型策略；默认模型必须匹配 allowedModels。",
-          "properties": {
-            "default": { "type": "string", "minLength": 1, "description": "该角色默认使用的模型标识；必须被 allowedModels 中的精确值或通配符允许。" },
-            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖模型；缺省为 false。" },
-            "allowedModels": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1, "description": "一个允许使用的模型标识或以 * 表达的通配符模式。" }, "uniqueItems": true, "description": "该角色可用的模型白名单；支持通配符，且至少包含一个条目。" },
-            "reason": { "type": "string", "description": "采用该角色模型策略的可审计原因或管理备注。" }
-          }
-        }
-      },
-      "additionalProperties": false
-    },
-    "commandPermissions": {
-      "type": "object",
-      "x-optionsSource": "operation-catalog",
-      "description": "按 operation 标识定义角色的命令执行权限；候选 operation 来自运行时 operation catalog。",
-      "propertyNames": { "type": "string", "minLength": 1, "description": "非空 operation 标识，支持精确名称及系统识别的通配规则。" },
-      "additionalProperties": {
-        "type": "object",
-        "required": ["allow"],
-        "additionalProperties": false,
-        "description": "一个 operation 的角色授权规则。",
-        "properties": {
-          "allow": { "type": "boolean", "description": "是否允许该角色执行匹配的 operation。" },
-          "dangerous": { "type": "boolean", "default": false, "description": "是否将该授权规则标记为危险操作规则；危险操作还会应用额外安全约束。" },
-          "permissionMode": { "type": "string", "enum": ["readonly", "auto", "request", "bypass"], "description": "临时 operation 级权限模式；后续迁移到作用域模式规则。" },
-          "scopes": {
-            "type": "array",
-            "items": { "type": "string", "enum": ["relation", "role", "agent", "process", "filesystem", "control", "raw-cli"], "description": "该命令权限适用的一个配置或执行作用域。", "x-enumDescriptions": { "relation": "当前 Agent 与对端的关系配置域", "role": "独立角色注册表或角色策略配置域", "agent": "单个 Agent 的配置与生命周期域", "process": "EvolCore 进程级配置与运行域", "filesystem": "受控文件系统操作域", "control": "控制面命令和管理通道域", "raw-cli": "未经结构化 operation 封装的原始 CLI 执行域" } },
-            "uniqueItems": true,
-            "description": "该授权规则允许生效的作用域白名单；未配置时由 operation 自身和鉴权器决定。"
-          },
-          "constraints": {
-            "type": "object",
-            "additionalProperties": false,
-            "description": "operation 级附加约束，例如对端、Agent、群聊、控制通道、参数或工作目录限制。",
-            "properties": {
-              "ownPeerOnly": { "type": "boolean" },
-              "ownAgentOnly": { "type": "boolean" },
-              "targetCurrentAgentOnly": { "type": "boolean" },
-              "requireAgentAdmin": { "type": "boolean" },
-              "requireAgentOwner": { "type": "boolean" },
-              "privateOnly": { "type": "boolean" },
-              "groupOnly": { "type": "boolean" },
-              "requireDaemonOwner": { "type": "boolean" },
-              "requireControlChannel": { "type": "boolean" },
-              "requireExplicitDangerousGrant": { "type": "boolean" },
-              "currentRelationOnly": { "type": "boolean" },
-              "requireFieldOverride": { "type": "string", "minLength": 1 },
-              "configFieldPolicy": { "type": "string", "enum": ["behavior-read", "role-overridable-write"] },
-              "allowedArgs": { "$ref": "#/definitions/argumentConstraints" },
-              "deniedArgs": { "$ref": "#/definitions/argumentConstraints" },
-              "forbiddenFlags": { "$ref": "#/definitions/stringList" },
-              "allowedConfigKeys": { "$ref": "#/definitions/stringList" },
-              "allowedPrefixes": { "$ref": "#/definitions/stringList" },
-              "timeoutMs": { "type": "integer", "minimum": 0 },
-              "outputLimitBytes": { "type": "integer", "minimum": 0 },
-              "cwdPolicy": { "type": "string", "enum": ["agentProject", "evolcoreHome", "none"] },
-              "envAllowlist": { "$ref": "#/definitions/stringList" }
-            }
-          },
-          "reason": { "type": "string", "description": "采用该命令权限规则的可审计原因或管理备注。" }
-        }
-      }
-    },
-    "usageLimits": {
-      "type": "object",
-      "additionalProperties": false,
-      "description": "角色用量额度策略；enabled 未开启或未配置时不启用额度限制。",
-      "properties": {
-        "enabled": { "type": "boolean", "default": false, "description": "是否启用该角色的用量额度限制；缺省为 false。" },
-        "resetMode": { "type": "string", "enum": ["never", "daily", "weekly", "monthly"], "description": "用量额度的重置周期。", "x-enumDescriptions": { "never": "累计额度，从不自动重置", "daily": "每日重置", "weekly": "每周重置", "monthly": "每月重置" } },
-        "currency": { "type": "string", "enum": ["CNY", "USD"], "description": "额度金额使用的计价货币。", "x-enumDescriptions": { "CNY": "人民币", "USD": "美元" } },
-        "limitAmount": { "type": ["number", "null"], "minimum": 0, "description": "额度上限金额；非负数表示上限，null 表示不限。" },
-        "costBasis": { "type": "string", "enum": ["gateway", "official"], "description": "额度统计采用的模型计费口径。", "x-enumDescriptions": { "gateway": "按实际网关计费价统计", "official": "按模型提供商官方定价统计" } },
-        "scope": { "type": "string", "enum": ["subject", "role"], "description": "额度累计和重置的统计范围。", "x-enumDescriptions": { "subject": "按对端主体分别统计", "role": "同一角色的所有主体共享统计" } }
-      }
-    }
-  },
-  "definitions": {
-    "stringList": {
-      "type": "array",
-      "items": { "type": "string" }
-    },
-    "argumentConstraints": {
-      "type": "object",
-      "additionalProperties": {
-        "type": "array",
-        "items": { "type": ["string", "number", "boolean"] }
-      }
-    }
-  }
-}
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "role-config.schema.1.json",
+  "title": "RoleConfig (agents/{aid}/roles/{roleId}.json)",
+  "description": "单个角色的独立策略配置。角色 ID 由文件名表达，本文件定义访问权限、行为字段约束、命令权限和用量额度。",
+  "x-logical-name": "role-config",
+  "x-scope": "role",
+  "x-permission-fields": [
+    { "value": "permissionMode", "label": "Permission Mode", "description": "角色的工具调用审批模式；只能由角色策略决定，关系级不可覆盖。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": false, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "readonly", "label": "Readonly" }, { "value": "auto", "label": "Auto" }, { "value": "request", "label": "Request" }, { "value": "bypass", "label": "Bypass" }] },
+    { "value": "chatmode.private", "label": "Private Chat Mode", "description": "角色在私聊场景中的响应方式策略。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "interactive", "label": "Interactive" }, { "value": "proactive", "label": "Proactive" }] },
+    { "value": "chatmode.group", "label": "Group Chat Mode", "description": "角色在群聊场景中的响应方式策略。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "interactive", "label": "Interactive" }, { "value": "proactive", "label": "Proactive" }] },
+    { "value": "mentionMode", "label": "Group Mention Mode", "description": "角色在群聊场景中的提及响应策略。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "disabled", "label": "Disabled" }, { "value": "mention-only", "label": "Mention Only" }] },
+    { "value": "baseagents.claude.model", "label": "Claude Model", "description": "角色可使用的 Claude 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Claude models" }, { "value": "claude-opus-*", "label": "Claude Opus family" }, { "value": "claude-sonnet-*", "label": "Claude Sonnet family" }, { "value": "claude-haiku-*", "label": "Claude Haiku family" }] },
+    { "value": "baseagents.claude.effort", "label": "Claude Effort", "description": "角色使用 Claude 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }, { "value": "max", "label": "Max" }] },
+    { "value": "baseagents.codex.model", "label": "Codex Model", "description": "角色可使用的 Codex 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Codex models" }, { "value": "gpt-5.4*", "label": "GPT-5.4 family" }, { "value": "gpt-5.3-codex*", "label": "GPT-5.3 Codex family" }] },
+    { "value": "baseagents.codex.effort", "label": "Codex Effort", "description": "角色使用 Codex 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }] },
+    { "value": "baseagents.gemini.model", "label": "Gemini Model", "description": "角色可使用的 Gemini 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Gemini models" }, { "value": "gemini-*", "label": "Gemini model family" }] }
+  ],
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["$schema_version", "description", "permissions"],
+  "properties": {
+    "$schema_version": { "type": "number", "const": 1, "default": 1, "description": "角色配置 Schema 版本，固定为 1。" },
+    "description": { "type": "string", "description": "角色的用途、信任级别和授权边界说明。" },
+    "rank": { "type": "integer", "enum": [100, 300, 500, 700, 900], "description": "角色排序系数；内置角色固定，自定义角色固定为 500。旧文件缺省时由角色加载器补齐。" },
+    "allowAccess": { "type": "boolean", "default": true, "description": "是否允许该角色访问 Agent；缺省为 true。" },
+    "permissions": {
+      "type": "object",
+      "required": ["permissionMode"],
+      "description": "角色对运行时行为字段施加的默认值、关系级覆盖权及候选值约束。",
+      "properties": {
+        "permissionMode": {
+          "type": "object",
+          "required": ["default", "allowOverride"],
+          "additionalProperties": false,
+          "description": "工具调用审批模式策略；该策略必须存在且不允许关系级覆盖。",
+          "properties": {
+            "default": { "type": "string", "enum": ["readonly", "auto", "request", "bypass"], "description": "该角色实际使用的工具调用审批模式。", "x-enumDescriptions": { "readonly": "只读模式：明确只读工具和普通路径上的受限只读 Shell 自动执行；写入、H/L 类读取、未知 Shell 和未知工具拒绝；EC 命令仍由 daemon 鉴权", "auto": "自动模式：常规 workspace 操作自动执行，已识别危险操作和扩权请求拒绝", "request": "请求模式：常规操作自动执行，危险 Bash 和沙箱扩权请求人工审批", "bypass": "放行模式：沙箱内常规和普通审批命令自动执行，强危险 Git 和越界扩权仍需审批" } },
+            "allowOverride": { "const": false, "default": false, "description": "权限模式禁止关系级覆盖，固定为 false。" },
+            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["readonly", "auto", "request", "bypass"], "description": "一个可列入权限模式候选集合的值。", "x-enumDescriptions": { "readonly": "只读模式", "auto": "自动模式", "request": "请求人工审批模式", "bypass": "受强制危险规则约束的放行模式" } }, "uniqueItems": true, "description": "保留的权限模式候选集合；permissionMode 当前不可由关系级覆盖，通常无需配置。" },
+            "reason": { "type": "string", "description": "采用该权限模式策略的可审计原因或管理备注。" }
+          }
+        },
+        "chatmode.private": {
+          "type": "object",
+          "required": ["default", "allowOverride"],
+          "additionalProperties": false,
+          "description": "该角色在私聊场景中的响应方式策略。",
+          "properties": {
+            "default": { "type": "string", "enum": ["interactive", "proactive"], "description": "未设置有效关系级覆盖时使用的私聊响应方式。", "x-enumDescriptions": { "interactive": "同步交互：输出即回复", "proactive": "主动推送：CLI 回复 + 思考投影" } },
+            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖私聊响应方式；缺省为 false。" },
+            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["interactive", "proactive"], "description": "一个可用于私聊响应方式覆盖的值。", "x-enumDescriptions": { "interactive": "同步交互：输出即回复", "proactive": "主动推送：CLI 回复 + 思考投影" } }, "uniqueItems": true, "description": "允许关系级覆盖到的私聊响应方式白名单；若提供，必须包含 default。" },
+            "reason": { "type": "string", "description": "采用该私聊响应策略的可审计原因或管理备注。" }
+          }
+        },
+        "chatmode.group": {
+          "type": "object",
+          "required": ["default", "allowOverride"],
+          "additionalProperties": false,
+          "description": "该角色在群聊场景中的响应方式策略。",
+          "properties": {
+            "default": { "type": "string", "enum": ["interactive", "proactive"], "description": "未设置有效关系级覆盖时使用的群聊响应方式。", "x-enumDescriptions": { "interactive": "同步交互：输出即回复", "proactive": "主动推送：CLI 回复 + 思考投影" } },
+            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖群聊响应方式；缺省为 false。" },
+            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["interactive", "proactive"], "description": "一个可用于群聊响应方式覆盖的值。", "x-enumDescriptions": { "interactive": "同步交互：输出即回复", "proactive": "主动推送：CLI 回复 + 思考投影" } }, "uniqueItems": true, "description": "允许关系级覆盖到的群聊响应方式白名单；若提供，必须包含 default。" },
+            "reason": { "type": "string", "description": "采用该群聊响应策略的可审计原因或管理备注。" }
+          }
+        },
+        "mentionMode": {
+          "type": "object",
+          "required": ["default", "allowOverride"],
+          "additionalProperties": false,
+          "description": "该角色在群聊场景中的提及响应策略。",
+          "properties": {
+            "default": { "type": "string", "enum": ["disabled", "mention-only"], "description": "未设置有效关系级覆盖时使用的群聊提及响应策略。", "x-enumDescriptions": { "disabled": "不要求被提及即可响应", "mention-only": "仅在被明确提及时响应" } },
+            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖群聊提及响应策略；缺省为 false。" },
+            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["disabled", "mention-only"], "description": "一个可用于群聊提及响应策略覆盖的值。", "x-enumDescriptions": { "disabled": "不要求被提及即可响应", "mention-only": "仅在被明确提及时响应" } }, "uniqueItems": true, "description": "允许关系级覆盖到的群聊提及响应策略白名单；若提供，必须包含 default。" },
+            "reason": { "type": "string", "description": "采用该群聊提及响应策略的可审计原因或管理备注。" }
+          }
+        },
+        "baseagents.claude.effort": {
+          "type": "object",
+          "required": ["default", "allowOverride"],
+          "additionalProperties": false,
+          "description": "该角色使用 Claude runner 时的推理强度策略。",
+          "properties": {
+            "default": { "type": "string", "enum": ["auto", "low", "medium", "high", "xhigh", "max"], "description": "角色默认的 Claude 推理强度。", "x-enumDescriptions": { "auto": "由 Claude runner 自动选择", "low": "低", "medium": "中", "high": "高", "xhigh": "很高", "max": "最高" } },
+            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖 Claude 推理强度；缺省为 false。" },
+            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["auto", "low", "medium", "high", "xhigh", "max"], "description": "一个允许覆盖到的 Claude 推理强度。", "x-enumDescriptions": { "auto": "由 Claude runner 自动选择", "low": "低", "medium": "中", "high": "高", "xhigh": "很高", "max": "最高" } }, "uniqueItems": true, "description": "允许关系级覆盖到的 Claude 推理强度白名单；若提供，必须包含 default。" },
+            "reason": { "type": "string", "description": "采用该 Claude 推理强度策略的可审计原因或管理备注。" }
+          }
+        },
+        "baseagents.codex.effort": {
+          "type": "object",
+          "required": ["default", "allowOverride"],
+          "additionalProperties": false,
+          "description": "该角色使用 Codex runner 时的推理强度策略。",
+          "properties": {
+            "default": { "type": "string", "enum": ["auto", "low", "medium", "high", "xhigh"], "description": "角色默认的 Codex 推理强度。", "x-enumDescriptions": { "auto": "由 Codex runner 自动选择", "low": "低", "medium": "中", "high": "高", "xhigh": "很高" } },
+            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖 Codex 推理强度；缺省为 false。" },
+            "allowedValues": { "type": "array", "items": { "type": "string", "enum": ["auto", "low", "medium", "high", "xhigh"], "description": "一个允许覆盖到的 Codex 推理强度。", "x-enumDescriptions": { "auto": "由 Codex runner 自动选择", "low": "低", "medium": "中", "high": "高", "xhigh": "很高" } }, "uniqueItems": true, "description": "允许关系级覆盖到的 Codex 推理强度白名单；若提供，必须包含 default。" },
+            "reason": { "type": "string", "description": "采用该 Codex 推理强度策略的可审计原因或管理备注。" }
+          }
+        }
+      },
+      "patternProperties": {
+        "^baseagents\\.[a-z0-9_-]+\\.model$": {
+          "type": "object",
+          "required": ["default", "allowOverride", "allowedModels"],
+          "additionalProperties": false,
+          "description": "指定 base agent 的角色模型策略；默认模型必须匹配 allowedModels。",
+          "properties": {
+            "default": { "type": "string", "minLength": 1, "description": "该角色默认使用的模型标识；必须被 allowedModels 中的精确值或通配符允许。" },
+            "allowOverride": { "type": "boolean", "default": false, "description": "是否允许该角色在关系级覆盖模型；缺省为 false。" },
+            "allowedModels": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1, "description": "一个允许使用的模型标识或以 * 表达的通配符模式。" }, "uniqueItems": true, "description": "该角色可用的模型白名单；支持通配符，且至少包含一个条目。" },
+            "reason": { "type": "string", "description": "采用该角色模型策略的可审计原因或管理备注。" }
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "commandPermissions": {
+      "type": "object",
+      "x-optionsSource": "operation-catalog",
+      "description": "按 operation 标识定义角色的命令执行权限；候选 operation 来自运行时 operation catalog。",
+      "propertyNames": { "type": "string", "minLength": 1, "description": "非空 operation 标识，支持精确名称及系统识别的通配规则。" },
+      "additionalProperties": {
+        "type": "object",
+        "required": ["allow"],
+        "additionalProperties": false,
+        "description": "一个 operation 的角色授权规则。",
+        "properties": {
+          "allow": { "type": "boolean", "description": "是否允许该角色执行匹配的 operation。" },
+          "dangerous": { "type": "boolean", "default": false, "description": "是否将该授权规则标记为危险操作规则；危险操作还会应用额外安全约束。" },
+          "permissionMode": { "type": "string", "enum": ["readonly", "auto", "request", "bypass"], "description": "临时 operation 级权限模式；后续迁移到作用域模式规则。" },
+          "scopes": {
+            "type": "array",
+            "items": { "type": "string", "enum": ["relation", "role", "agent", "process", "filesystem", "control", "raw-cli"], "description": "该命令权限适用的一个配置或执行作用域。", "x-enumDescriptions": { "relation": "当前 Agent 与对端的关系配置域", "role": "独立角色注册表或角色策略配置域", "agent": "单个 Agent 的配置与生命周期域", "process": "EvolCore 进程级配置与运行域", "filesystem": "受控文件系统操作域", "control": "控制面命令和管理通道域", "raw-cli": "未经结构化 operation 封装的原始 CLI 执行域" } },
+            "uniqueItems": true,
+            "description": "该授权规则允许生效的作用域白名单；未配置时由 operation 自身和鉴权器决定。"
+          },
+          "constraints": {
+            "type": "object",
+            "additionalProperties": false,
+            "description": "operation 级附加约束，例如对端、Agent、群聊、控制通道、参数或工作目录限制。",
+            "properties": {
+              "ownPeerOnly": { "type": "boolean" },
+              "ownAgentOnly": { "type": "boolean" },
+              "targetCurrentAgentOnly": { "type": "boolean" },
+              "requireAgentAdmin": { "type": "boolean" },
+              "requireAgentOwner": { "type": "boolean" },
+              "privateOnly": { "type": "boolean" },
+              "groupOnly": { "type": "boolean" },
+              "requireDaemonOwner": { "type": "boolean" },
+              "requireControlChannel": { "type": "boolean" },
+              "requireExplicitDangerousGrant": { "type": "boolean" },
+              "currentRelationOnly": { "type": "boolean" },
+              "requireFieldOverride": { "type": "string", "minLength": 1 },
+              "configFieldPolicy": { "type": "string", "enum": ["behavior-read", "role-overridable-write"] },
+              "allowedArgs": { "$ref": "#/definitions/argumentConstraints" },
+              "deniedArgs": { "$ref": "#/definitions/argumentConstraints" },
+              "forbiddenFlags": { "$ref": "#/definitions/stringList" },
+              "allowedConfigKeys": { "$ref": "#/definitions/stringList" },
+              "allowedPrefixes": { "$ref": "#/definitions/stringList" },
+              "timeoutMs": { "type": "integer", "minimum": 0 },
+              "outputLimitBytes": { "type": "integer", "minimum": 0 },
+              "cwdPolicy": { "type": "string", "enum": ["agentProject", "evolcoreHome", "none"] },
+              "envAllowlist": { "$ref": "#/definitions/stringList" }
+            }
+          },
+          "reason": { "type": "string", "description": "采用该命令权限规则的可审计原因或管理备注。" }
+        }
+      }
+    },
+    "usageLimits": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "角色用量额度策略；enabled 未开启或未配置时不启用额度限制。",
+      "properties": {
+        "enabled": { "type": "boolean", "default": false, "description": "是否启用该角色的用量额度限制；缺省为 false。" },
+        "resetMode": { "type": "string", "enum": ["never", "daily", "weekly", "monthly"], "description": "用量额度的重置周期。", "x-enumDescriptions": { "never": "累计额度，从不自动重置", "daily": "每日重置", "weekly": "每周重置", "monthly": "每月重置" } },
+        "currency": { "type": "string", "enum": ["CNY", "USD"], "description": "额度金额使用的计价货币。", "x-enumDescriptions": { "CNY": "人民币", "USD": "美元" } },
+        "limitAmount": { "type": ["number", "null"], "minimum": 0, "description": "额度上限金额；非负数表示上限，null 表示不限。" },
+        "costBasis": { "type": "string", "enum": ["gateway", "official"], "description": "额度统计采用的模型计费口径。", "x-enumDescriptions": { "gateway": "按实际网关计费价统计", "official": "按模型提供商官方定价统计" } },
+        "scope": { "type": "string", "enum": ["subject", "role"], "description": "额度累计和重置的统计范围。", "x-enumDescriptions": { "subject": "按对端主体分别统计", "role": "同一角色的所有主体共享统计" } }
+      }
+    }
+  },
+  "definitions": {
+    "stringList": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "argumentConstraints": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "array",
+        "items": { "type": ["string", "number", "boolean"] }
+      }
+    }
+  }
+}

package/kits/schemas/role-registry.schema.1.json

@@ -1,35 +1,35 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "role-registry.schema.1.json",
-  "title": "RoleRegistry (agents/{aid}/roles/index.json)",
-  "description": "Agent 的角色注册表。声明可加载的角色 ID，并配置未显式分配角色时私聊和群聊使用的默认角色。",
-  "x-logical-name": "role-registry",
-  "x-scope": "role",
-  "type": "object",
-  "additionalProperties": false,
-  "required": ["$schema_version", "roles", "defaultRoles"],
-  "properties": {
-    "$schema_version": { "type": "number", "const": 1, "default": 1, "x-merge": "scalar", "description": "角色注册表 Schema 版本，固定为 1。" },
-    "roles": {
-      "type": "array",
-      "minItems": 1,
-      "uniqueItems": true,
-      "contains": { "const": "visitor", "description": "注册表必须包含 visitor，以保证始终存在低权限安全回退角色。" },
-      "items": { "type": "string", "pattern": "^[a-z0-9_-]+$", "description": "一个已注册角色 ID；对应 roles/{roleId}.json 或同名内置模板。" },
-      "x-merge": "list",
-      "description": "允许加载、展示和分配的角色 ID 列表；未注册的角色文件不产生运行时权限。"
-    },
-    "defaultRoles": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["private", "group"],
-      "default": { "private": null, "group": null },
-      "description": "未显式分配角色时，私聊和群聊分别采用的默认角色；null 表示不自动授予角色。",
-      "properties": {
-        "private": { "type": ["string", "null"], "pattern": "^(?!owner$)[a-z0-9_-]+$", "default": null, "description": "私聊默认角色；必须已注册且不能为 owner。" },
-        "group": { "type": ["string", "null"], "pattern": "^(?!owner$)[a-z0-9_-]+$", "default": null, "description": "群聊默认角色；必须已注册且不能为 owner。" }
-      },
-      "x-merge": "dict"
-    }
-  }
-}
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "role-registry.schema.1.json",
+  "title": "RoleRegistry (agents/{aid}/roles/index.json)",
+  "description": "Agent 的角色注册表。声明可加载的角色 ID，并配置未显式分配角色时私聊和群聊使用的默认角色。",
+  "x-logical-name": "role-registry",
+  "x-scope": "role",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["$schema_version", "roles", "defaultRoles"],
+  "properties": {
+    "$schema_version": { "type": "number", "const": 1, "default": 1, "x-merge": "scalar", "description": "角色注册表 Schema 版本，固定为 1。" },
+    "roles": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "contains": { "const": "visitor", "description": "注册表必须包含 visitor，以保证始终存在低权限安全回退角色。" },
+      "items": { "type": "string", "pattern": "^[a-z0-9_-]+$", "description": "一个已注册角色 ID；对应 roles/{roleId}.json 或同名内置模板。" },
+      "x-merge": "list",
+      "description": "允许加载、展示和分配的角色 ID 列表；未注册的角色文件不产生运行时权限。"
+    },
+    "defaultRoles": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["private", "group"],
+      "default": { "private": null, "group": null },
+      "description": "未显式分配角色时，私聊和群聊分别采用的默认角色；null 表示不自动授予角色。",
+      "properties": {
+        "private": { "type": ["string", "null"], "pattern": "^(?!owner$)[a-z0-9_-]+$", "default": null, "description": "私聊默认角色；必须已注册且不能为 owner。" },
+        "group": { "type": ["string", "null"], "pattern": "^(?!owner$)[a-z0-9_-]+$", "default": null, "description": "群聊默认角色；必须已注册且不能为 owner。" }
+      },
+      "x-merge": "dict"
+    }
+  }
+}

package/kits/schemas/single-session.schema.1.json

@@ -1,31 +1,31 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "single-session.schema.1.json",
-  "title": "SingleSessionParams (responseModeParams['single-session'])",
-  "x-logical-name": "single-session",
-  "x-scope": "mode",
-  "type": "object",
-  "additionalProperties": false,
-  "properties": {
-    "pre_tool_1stmsgchk": {
-      "type": "boolean",
-      "enum": [true, false],
-      "default": true,
-      "description": "proactive 首个本地工具表态检查（仅 chatmode=proactive 生效）：首个可被 PreToolUse 覆盖的本地工具必须是当前会话精确对应的 ec msg/group send，否则拦截；WebSearch、图像生成、浏览器和 Computer Use 等 hosted 工具不进入此硬拒绝边界。",
-      "x-enumDescriptions": {
-        "true": "启用：首个 hook 可覆盖的本地工具必须是精确会话 send",
-        "false": "禁用：不执行 proactive 首个本地工具 send 检查"
-      }
-    },
-    "tool_use_reminder": {
-      "type": "boolean",
-      "enum": [true, false],
-      "default": true,
-      "description": "proactive 工具汇报提醒（仅 chatmode=proactive 生效）：启用队列未读提醒 + 每 10 次工具调用的汇报提醒。",
-      "x-enumDescriptions": {
-        "true": "启用：自动汇报工具使用情况",
-        "false": "禁用：静默执行工具"
-      }
-    }
-  }
-}
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "single-session.schema.1.json",
+  "title": "SingleSessionParams (responseModeParams['single-session'])",
+  "x-logical-name": "single-session",
+  "x-scope": "mode",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "pre_tool_1stmsgchk": {
+      "type": "boolean",
+      "enum": [true, false],
+      "default": true,
+      "description": "proactive 首个本地工具表态检查（仅 chatmode=proactive 生效）：首个可被 PreToolUse 覆盖的本地工具必须是当前会话精确对应的 ec msg/group send，否则拦截；WebSearch、图像生成、浏览器和 Computer Use 等 hosted 工具不进入此硬拒绝边界。",
+      "x-enumDescriptions": {
+        "true": "启用：首个 hook 可覆盖的本地工具必须是精确会话 send",
+        "false": "禁用：不执行 proactive 首个本地工具 send 检查"
+      }
+    },
+    "tool_use_reminder": {
+      "type": "boolean",
+      "enum": [true, false],
+      "default": true,
+      "description": "proactive 工具汇报提醒（仅 chatmode=proactive 生效）：启用队列未读提醒 + 每 10 次工具调用的汇报提醒。",
+      "x-enumDescriptions": {
+        "true": "启用：自动汇报工具使用情况",
+        "false": "禁用：静默执行工具"
+      }
+    }
+  }
+}