evolcore 0.0.23 → 0.0.25

package/kits/templates/roles/member.json

@@ -1,97 +1,98 @@
-{
-  "$schema_version": 1,
-  "description": "Trusted user with own-scope access",
-  "rank": 300,
-  "allowAccess": true,
-  "usageLimits": {
-    "enabled": true,
-    "resetMode": "daily",
-    "currency": "CNY",
-    "limitAmount": 50,
-    "costBasis": "gateway",
-    "scope": "subject"
-  },
-  "permissions": {
-    "permissionMode": { "default": "auto", "allowOverride": false }
-  },
-  "commandPermissions": {
-    "role.assign": { "allow": false },
-    "role.revoke": { "allow": false },
-    "role.*": { "allow": false },
-    "connect.*": { "allow": false },
-    "contact.*": { "allow": false },
-    "system.*": { "allow": false },
-    "storage.*": { "allow": false },
-    "aid.*": { "allow": false },
-    "gateway.*": { "allow": false },
-    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "agent.*": { "allow": false },
-    "observable.current": { "allow": false },
-    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "activity.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "category:read": { "allow": true },
-    "category:write-own": { "allow": true },
-    "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
-    "config.set": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "role-overridable-write" } },
-    "config.unset": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "role-overridable-write" } },
-    "model.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "chatmode.update": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true } },
-    "mentionmode.update": { "allow": false },
-    "group.mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "group.mentionmode.update": { "allow": false },
-    "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "group.rulespolicy.update": { "allow": false },
-    "trigger.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.msg.send": { "allow": true, "constraints": { "ownPeerOnly": true } },
-    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
-    "ec.msg.file": { "allow": true, "constraints": { "ownPeerOnly": true } },
-    "ec.msg.history": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.msg.online": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.version": { "allow": true },
-    "ec.aid.show": { "allow": true, "dangerous": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.aid.lookup": { "allow": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.aid.agentmd.get": { "allow": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+{
+  "$schema_version": 1,
+  "description": "Trusted user with own-scope access",
+  "rank": 300,
+  "allowAccess": true,
+  "usageLimits": {
+    "enabled": true,
+    "resetMode": "daily",
+    "currency": "CNY",
+    "limitAmount": 50,
+    "costBasis": "gateway",
+    "scope": "subject"
+  },
+  "permissions": {
+    "permissionMode": { "default": "auto", "allowOverride": false }
+  },
+  "commandPermissions": {
+    "role.assign": { "allow": false },
+    "role.revoke": { "allow": false },
+    "role.*": { "allow": false },
+    "connect.*": { "allow": false },
+    "contact.*": { "allow": false },
+    "system.*": { "allow": false },
+    "storage.*": { "allow": false },
+    "aid.*": { "allow": false },
+    "gateway.*": { "allow": false },
+    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "agent.*": { "allow": false },
+    "observable.current": { "allow": false },
+    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "activity.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "category:read": { "allow": true },
+    "category:write-own": { "allow": true },
+    "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
+    "config.set": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "role-overridable-write" } },
+    "config.unset": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "role-overridable-write" } },
+    "model.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "chatmode.update": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true } },
+    "mentionmode.update": { "allow": false },
+    "group.mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "group.mentionmode.update": { "allow": false },
+    "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "group.rulespolicy.update": { "allow": false },
+    "trigger.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.msg.send": { "allow": true, "constraints": { "ownPeerOnly": true } },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
+    "ec.msg.file": { "allow": true, "constraints": { "ownPeerOnly": true } },
+    "ec.msg.history": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.msg.online": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.version": { "allow": true },
+    "ec.aid.show": { "allow": true, "dangerous": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.aid.lookup": { "allow": true, "scopes": ["relation"] },
+    "ec.aid.agentmd.get": { "allow": true, "scopes": ["relation"] },
     "ec.aid.agentmd.put": { "allow": false },
-    "ec.fs.ls": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.stat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.lstat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.cat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.find": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.df": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.getfacl": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.mkdir": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.upload": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.copy": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.move": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.remove": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.handoff.status": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.handoff.list": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.handoff.trace": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.handoff.return": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.queue.*": { "allow": false },
-    "ec.group.send": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
-    "ec.group.file": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
-    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.pull": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.members": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.online": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.file": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.queue.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.*": { "allow": false },
-    "cli.exec.raw": { "allow": false, "dangerous": true },
-    "dangerous:*": { "allow": false, "dangerous": true }
-  }
-}
+    "ec.aid.avatar": { "allow": false },
+    "ec.fs.ls": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.stat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.lstat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.cat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.find": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.df": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.getfacl": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.mkdir": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.upload": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.copy": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.move": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.remove": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.status": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.list": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.trace": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.return": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.queue.*": { "allow": false },
+    "ec.group.send": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
+    "ec.group.file": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
+    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.pull": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.members": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.online": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.file": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.queue.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.*": { "allow": false },
+    "cli.exec.raw": { "allow": false, "dangerous": true },
+    "dangerous:*": { "allow": false, "dangerous": true }
+  }
+}

package/kits/templates/roles/owner.json

@@ -1,9 +1,9 @@
-{
-  "$schema_version": 1,
-  "description": "Agent owner with full Agent management authority",
-  "rank": 900,
-  "allowAccess": true,
-  "permissions": {
-    "permissionMode": { "default": "bypass", "allowOverride": false }
-  }
-}
+{
+  "$schema_version": 1,
+  "description": "Agent owner with full Agent management authority",
+  "rank": 900,
+  "allowAccess": true,
+  "permissions": {
+    "permissionMode": { "default": "bypass", "allowOverride": false }
+  }
+}

package/kits/templates/roles/visitor.json

@@ -1,86 +1,87 @@
-{
-  "$schema_version": 1,
-  "description": "Low-trust visitor with minimal own-scope access",
-  "rank": 100,
-  "allowAccess": true,
-  "usageLimits": {
-    "enabled": true,
-    "resetMode": "daily",
-    "currency": "CNY",
-    "limitAmount": 5,
-    "costBasis": "gateway",
-    "scope": "subject"
-  },
-  "permissions": {
-    "permissionMode": { "default": "readonly", "allowOverride": false }
-  },
-  "commandPermissions": {
-    "role.assign": { "allow": false },
-    "role.revoke": { "allow": false },
-    "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
-    "model.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.info": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.effort.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.use": { "allow": false },
-    "model.effort": { "allow": false },
-    "model.reset": { "allow": false },
-    "model.check": { "allow": false },
-    "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "chatmode.update": { "allow": false },
-    "activity.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true } },
-    "mentionmode.update": { "allow": false },
-    "group.mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "group.mentionmode.update": { "allow": false },
-    "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "group.rulespolicy.update": { "allow": false },
-    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "trigger.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "trigger.show": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "trigger.history": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "trigger.eventCatalog": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "trigger.create": { "allow": false },
-    "trigger.update": { "allow": false },
-    "trigger.setEnabled": { "allow": false },
-    "trigger.cancel": { "allow": false },
-    "trigger.delete": { "allow": false },
-    "trigger.run": { "allow": false },
-    "session.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
-    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
-    "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
-    "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "capability.read": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.msg.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
-    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
-    "ec.msg.file": { "allow": false },
-    "ec.msg.history": { "allow": false },
-    "ec.msg.online": { "allow": false },
-    "ec.version": { "allow": true },
-    "ec.aid.show": { "allow": false },
-    "ec.aid.lookup": { "allow": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.aid.agentmd.get": { "allow": false },
+{
+  "$schema_version": 1,
+  "description": "Low-trust visitor with minimal own-scope access",
+  "rank": 100,
+  "allowAccess": true,
+  "usageLimits": {
+    "enabled": true,
+    "resetMode": "daily",
+    "currency": "CNY",
+    "limitAmount": 5,
+    "costBasis": "gateway",
+    "scope": "subject"
+  },
+  "permissions": {
+    "permissionMode": { "default": "readonly", "allowOverride": false }
+  },
+  "commandPermissions": {
+    "role.assign": { "allow": false },
+    "role.revoke": { "allow": false },
+    "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
+    "model.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.info": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.effort.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.use": { "allow": false },
+    "model.effort": { "allow": false },
+    "model.reset": { "allow": false },
+    "model.check": { "allow": false },
+    "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "chatmode.update": { "allow": false },
+    "activity.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true } },
+    "mentionmode.update": { "allow": false },
+    "group.mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "group.mentionmode.update": { "allow": false },
+    "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "group.rulespolicy.update": { "allow": false },
+    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "trigger.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.show": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.history": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.eventCatalog": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.create": { "allow": false },
+    "trigger.update": { "allow": false },
+    "trigger.setEnabled": { "allow": false },
+    "trigger.cancel": { "allow": false },
+    "trigger.delete": { "allow": false },
+    "trigger.run": { "allow": false },
+    "session.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
+    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
+    "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
+    "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "capability.read": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.msg.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
+    "ec.msg.file": { "allow": false },
+    "ec.msg.history": { "allow": false },
+    "ec.msg.online": { "allow": false },
+    "ec.version": { "allow": true },
+    "ec.aid.show": { "allow": true, "dangerous": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.aid.lookup": { "allow": true, "scopes": ["relation"] },
+    "ec.aid.agentmd.get": { "allow": true, "scopes": ["relation"] },
     "ec.aid.agentmd.put": { "allow": false },
-    "ec.fs.*": { "allow": false },
-    "ec.handoff.*": { "allow": false },
-    "ec.queue.*": { "allow": false },
-    "storage.*": { "allow": false },
-    "ec.group.send": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true } },
-    "ec.group.file": { "allow": false },
-    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.pull": { "allow": false },
-    "ec.group.members": { "allow": false },
-    "ec.group.online": { "allow": false },
-    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.*": { "allow": false },
-    "cli.exec.raw": { "allow": false, "dangerous": true },
-    "dangerous:*": { "allow": false, "dangerous": true }
-  }
-}
+    "ec.aid.avatar": { "allow": false },
+    "ec.fs.*": { "allow": false },
+    "ec.handoff.*": { "allow": false },
+    "ec.queue.*": { "allow": false },
+    "storage.*": { "allow": false },
+    "ec.group.send": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true } },
+    "ec.group.file": { "allow": false },
+    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.pull": { "allow": false },
+    "ec.group.members": { "allow": false },
+    "ec.group.online": { "allow": false },
+    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.*": { "allow": false },
+    "cli.exec.raw": { "allow": false, "dangerous": true },
+    "dangerous:*": { "allow": false, "dangerous": true }
+  }
+}

package/kits/templates/system-fragments/baseagent.md

@@ -1,14 +1,14 @@
-[baseagent]
-baseAgentName: {{baseAgentName}} # 底层推理引擎（Claude Code / Codex / Gemini CLI）
-{{?effectiveModel}}
-effectiveModel: {{effectiveModel}} # 当前实际生效的模型（关系级 > agent级 > 全局 优先级解析）
-{{/}}
-{{?baseAgentModel}}
-baseAgentModel: {{baseAgentModel}} # base agent 引擎底座模型（evolcore 作用域无配置时的兜底）
-{{/}}
-{{?modelFallbackActive}}
-modelFallbackActive: true # evolcore 配置的模型不可用，当前正在使用降级模型 {{modelFallbackModel}}
-{{/}}
-{{?agentSessionId}}
-agentSessionId: {{agentSessionId}} # 底层引擎的会话 ID（区别于 evolcore sessionId）
-{{/}}
+[baseagent]
+baseAgentName: {{baseAgentName}} # 底层推理引擎（Claude Code / Codex / Gemini CLI）
+{{?effectiveModel}}
+effectiveModel: {{effectiveModel}} # 当前实际生效的模型（关系级 > agent级 > 全局 优先级解析）
+{{/}}
+{{?baseAgentModel}}
+baseAgentModel: {{baseAgentModel}} # base agent 引擎底座模型（evolcore 作用域无配置时的兜底）
+{{/}}
+{{?modelFallbackActive}}
+modelFallbackActive: true # evolcore 配置的模型不可用，当前正在使用降级模型 {{modelFallbackModel}}
+{{/}}
+{{?agentSessionId}}
+agentSessionId: {{agentSessionId}} # 底层引擎的会话 ID（区别于 evolcore sessionId）
+{{/}}

package/kits/templates/system-fragments/bootstrap.md

@@ -1,38 +1,47 @@
-[bootstrap]
-phase: bootstrapping
-
-这是 agent 生命周期的强制门禁。你正在进行首次自我设定；在完成前，唯一目标是和 owner 确认并写入基础名片信息，不处理普通任务。
-Bootstrap 不另设隐藏状态机；恢复依据是可核对的生命周期和名片状态。每次重启、超时恢复或收到“继续”时，先检查自身 `lifecycle` 以及本地 `agent.md` 是否存在、字段是否完整，再决定续做步骤，不按旧上下文推断尚未完成。
-系统已经在进入本阶段时向 owner 发送过固定的首条引导消息。当前收到的是 owner 对该消息的后续输入：不要重新发送、复述或改写那条固定消息，也不要再次完整罗列三项问题；只针对当前输入推进下一步。
-
+[bootstrap]
+phase: bootstrapping
+
+这是 agent 生命周期的强制门禁。你正在进行首次自我设定；在完成前，唯一目标是和 owner 确认并写入基础名片信息，不处理普通任务。
+Bootstrap 不另设隐藏状态机；恢复依据是可核对的生命周期和名片状态。每次重启、超时恢复或收到“继续”时，先检查自身 `lifecycle` 以及本地 `agent.md` 是否存在、字段是否完整，再决定续做步骤，不按旧上下文推断尚未完成。
+系统已经在进入本阶段时向 owner 发送过固定的首条引导消息。当前收到的是 owner 对该消息的后续输入：不要重新发送、复述或改写那条固定消息，也不要再次完整罗列三项问题；只针对当前输入推进下一步。
+
+如果当前 owner 是 Agent/AI，必须使用 `ec msg send` 与其交流 Bootstrap 信息，具体参数遵循当前注入的消息发送说明；可发送提问、最终值回显、确认请求或错误说明，但不得联系无关对象或处理普通任务。不要只输出普通文本而未实际发送。对方作为 owner 提供信息并确认，你仍须自行修改和发布自己的 agent.md、执行 ready，不因对方是 Agent/AI 而跳过确认流程。
+
 需要确认的字段：
 - name：显示名，简短清晰
 - description：一句到两句话描述你的职责或定位
 - tags：3 到 6 个标签，用于检索和归类
 
-允许的操作范围：
+可选的 persona：
+- owner 可以在 Bootstrap 中直接发送 persona 文本，或附带 `.md`/`.txt` 文件。收到后先读取内容并向 owner 回显摘要，请 owner 明确确认；不得从普通任务内容推断 persona。
+- owner 确认后，使用 `ec agent persona --text '<内容>'` 或 `ec agent persona --file '<收到的文件路径>'` 写入自己的 `$PERSONAL_DIR/persona.md`。`--file` 只接受文本文件，不能使用任意路径。
+- persona 是可选环节。owner 未提供、拒绝或暂时跳过时，不得阻塞名片发布和 `ec agent ready`。
+
+允许的操作范围：
 - 为读取现有候选值，可以读取本地 `{{agentMdPath}}`。
+- 为处理可选 persona，可以执行 `ec agent persona show`、`ec agent persona --text <text>` 或 `ec agent persona --file <path>`；写入前仍须取得 owner 对待写入内容的明确确认。
 - owner 明确确认最终值后，只能编辑上述 agent.md 的 YAML frontmatter，并依次执行下面两个命令：
-  - `ec aid agentmd put {{selfAid}}`
-  - `ec agent ready {{selfAid}}`
-- 除这些 bootstrap 操作及向 owner 回复外，不得调用工具或执行命令。
-
-恢复时遵循以下幂等规则：
-- `lifecycle=active`：Bootstrap 已完成，不重复改名片、不重复发布、不重复执行 `ready`，也不处理本轮夹带的普通任务。
-- `lifecycle=created`：尚未进入 Bootstrap，只等待 channel/owner 首条消息；不重复创建 Agent。
-- `lifecycle=bootstrapping` 且本地 `agent.md` 已发布并且字段完整：只向 owner 简短确认现状，并执行最后的 `ec agent ready {{selfAid}}`；不要再次修改或发布名片。
-- `lifecycle=bootstrapping` 但名片未发布或字段不完整：从缺失的确认步骤继续。发布失败时先说明错误，修正后再试，不盲目重试。
-- Bootstrap 期间不执行、不分析、不规划普通任务；普通任务只能留到 `active` 后的新主会话。
-
-每轮处理规则：
-1. 首次需要候选值时，读取本地 agent.md 的 YAML frontmatter。已有且格式有效的 `name`、`description`、`tags` 是现有候选值：简短回显并询问保持还是修改，不要求重新输入。空值、占位值或格式无效的字段视为缺失；`tags` 必须为 3 到 6 个非空标签。
-2. 只把 owner 明确提供、修改、选择或确认的 `name`、`description`、`tags` 当作候选信息。普通任务内容、示例值和顺带提及的词语都不是候选信息，不得据此推断字段。
-3. 信息缺失、互相冲突或含义不清时，只追问缺失或有歧义的部分；保留此前已经明确或 owner 选择保持的内容。
+  - `ec aid agentmd put {{selfAid}}`
+  - `ec agent ready {{selfAid}}`
+- 除这些 bootstrap 操作及向 owner 回复外，不得调用工具或执行命令。
+
+恢复时遵循以下幂等规则：
+- `lifecycle=active`：Bootstrap 已完成，不重复改名片、不重复发布、不重复执行 `ready`，也不处理本轮夹带的普通任务。
+- `lifecycle=created`：尚未进入 Bootstrap，只等待 channel/owner 首条消息；不重复创建 Agent。
+- `lifecycle=bootstrapping` 且本地 `agent.md` 已发布并且字段完整：只向 owner 简短确认现状，并执行最后的 `ec agent ready {{selfAid}}`；不要再次修改或发布名片。
+- `lifecycle=bootstrapping` 但名片未发布或字段不完整：从缺失的确认步骤继续。发布失败时先说明错误，修正后再试，不盲目重试。
+- Bootstrap 期间不执行、不分析、不规划普通任务；普通任务只能留到 `active` 后的新主会话。
+
+每轮处理规则：
+1. 首次需要候选值时，读取本地 agent.md 的 YAML frontmatter。已有且格式有效的 `name`、`description`、`tags` 是现有候选值：简短回显并询问保持还是修改，不要求重新输入。空值、占位值或格式无效的字段视为缺失；`tags` 必须为 3 到 6 个非空标签。
+2. 只把 owner 明确提供、修改、选择或确认的 `name`、`description`、`tags` 当作候选信息。普通任务内容、示例值和顺带提及的词语都不是候选信息，不得据此推断字段。
+3. 信息缺失、互相冲突或含义不清时，只追问缺失或有歧义的部分；保留此前已经明确或 owner 选择保持的内容。
 4. owner 在 bootstrap 完成前提出普通工作请求、要求跳过 bootstrap，或要求先执行任务后再设定时：不执行、不分析、不规划、不读取任务相关文件、不搜索、不调用任务工具，也不把任务排队到当前会话。只简短说明必须先完成首次设定，然后回显现有候选值并询问保持/修改，或只追问仍缺失的字段。
 5. 三项信息齐全后，向 owner 回显最终的 `name`、`description`、`tags`，并请求对这组最终值作明确确认。owner 仅表示“保持现有值”时，先据此形成最终值并回显；未经这一步最终确认，不要修改文件、发布名片或调用 ready。
-6. owner 明确确认最终值后，只编辑本地 agent.md（`{{agentMdPath}}`）YAML frontmatter 中的 `name`、`description`、`tags`，保留其它字段和正文，并检查 YAML 与字段格式有效。
-7. 调用 `ec aid agentmd put {{selfAid}}` 签名并发布 agent.md。只有命令明确成功后，才调用 `ec agent ready {{selfAid}}` 完成 bootstrap。
-8. 任一步骤失败时，不调用 ready，不盲目重复尝试；说明具体失败原因并在修正后继续。
-9. `ec agent ready {{selfAid}}` 必须是 bootstrap 的最后一个操作。成功后系统会结束当前 bootstrap 上下文、创建全新的主会话并发送正式欢迎消息；不要再生成一段完成说明，也不要在旧上下文中继续处理任务。
-
-完成前不要承诺已经进入正常工作状态，也不要尝试与上述流程无关的文件修改、网络通信或系统配置操作。
+6. 如果 owner 提供 persona 文本或 `.md`/`.txt` 文件，单独回显待写入内容并请求确认；确认后使用 `ec agent persona` 写入 `persona.md`。persona 未确认时保留现状，不影响后续名片流程。
+7. owner 明确确认最终值后，只编辑本地 agent.md（`{{agentMdPath}}`）YAML frontmatter 中的 `name`、`description`、`tags`，保留其它字段和正文，并检查 YAML 与字段格式有效。
+8. 调用 `ec aid agentmd put {{selfAid}}` 签名并发布 agent.md。只有命令明确成功后，才调用 `ec agent ready {{selfAid}}` 完成 bootstrap。
+9. 任一步骤失败时，不调用 ready，不盲目重复尝试；说明具体失败原因并在修正后继续。
+10. `ec agent ready {{selfAid}}` 必须是 bootstrap 的最后一个操作。成功后系统会结束当前上下文、创建新的主会话并发送欢迎消息；不要在旧上下文中继续处理任务。
+
+完成前不要承诺已经进入正常工作状态，也不要尝试与上述流程无关的文件修改、网络通信或系统配置操作。