evolcore 0.0.25 → 0.0.27

package/kits/templates/roles/member.json

@@ -1,98 +1,103 @@
-{
-  "$schema_version": 1,
-  "description": "Trusted user with own-scope access",
-  "rank": 300,
-  "allowAccess": true,
-  "usageLimits": {
-    "enabled": true,
-    "resetMode": "daily",
-    "currency": "CNY",
-    "limitAmount": 50,
-    "costBasis": "gateway",
-    "scope": "subject"
-  },
-  "permissions": {
-    "permissionMode": { "default": "auto", "allowOverride": false }
-  },
-  "commandPermissions": {
-    "role.assign": { "allow": false },
-    "role.revoke": { "allow": false },
-    "role.*": { "allow": false },
-    "connect.*": { "allow": false },
-    "contact.*": { "allow": false },
-    "system.*": { "allow": false },
-    "storage.*": { "allow": false },
-    "aid.*": { "allow": false },
-    "gateway.*": { "allow": false },
-    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "agent.*": { "allow": false },
-    "observable.current": { "allow": false },
-    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "activity.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "category:read": { "allow": true },
-    "category:write-own": { "allow": true },
-    "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
-    "config.set": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "role-overridable-write" } },
-    "config.unset": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "role-overridable-write" } },
-    "model.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "chatmode.update": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true } },
-    "mentionmode.update": { "allow": false },
-    "group.mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "group.mentionmode.update": { "allow": false },
-    "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "group.rulespolicy.update": { "allow": false },
-    "trigger.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.msg.send": { "allow": true, "constraints": { "ownPeerOnly": true } },
-    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
-    "ec.msg.file": { "allow": true, "constraints": { "ownPeerOnly": true } },
-    "ec.msg.history": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.msg.online": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.version": { "allow": true },
-    "ec.aid.show": { "allow": true, "dangerous": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.aid.lookup": { "allow": true, "scopes": ["relation"] },
-    "ec.aid.agentmd.get": { "allow": true, "scopes": ["relation"] },
+{
+  "$schema_version": 1,
+  "description": "Trusted user with own-scope access",
+  "rank": 300,
+  "allowAccess": true,
+  "usageLimits": {
+    "enabled": true,
+    "resetMode": "daily",
+    "currency": "CNY",
+    "limitAmount": 50,
+    "costBasis": "gateway",
+    "scope": "subject"
+  },
+  "permissions": {
+    "permissionMode": { "default": "auto", "allowOverride": false }
+  },
+  "commandPermissions": {
+    "role.assign": { "allow": false },
+    "role.revoke": { "allow": false },
+    "role.*": { "allow": false },
+    "connect.*": { "allow": false },
+    "contact.*": { "allow": false },
+    "system.*": { "allow": false },
+    "storage.*": { "allow": false },
+    "aid.*": { "allow": false },
+    "gateway.*": { "allow": false },
+    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "agent.*": { "allow": false },
+    "observable.current": { "allow": false },
+    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "activity.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "category:read": { "allow": true },
+    "category:write-own": { "allow": true },
+    "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
+    "config.set": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "role-overridable-write" } },
+    "config.unset": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "role-overridable-write" } },
+    "model.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "chatmode.update": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true } },
+    "mentionmode.update": { "allow": false },
+    "group.mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "group.mentionmode.update": { "allow": false },
+    "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "group.rulespolicy.update": { "allow": false },
+    "trigger.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.msg.send": { "allow": true, "constraints": { "ownPeerOnly": true } },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
+    "ec.msg.file": { "allow": true, "constraints": { "ownPeerOnly": true } },
+    "ec.msg.history": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.msg.online": { "allow": true, "scopes": ["relation"], "constraints": { "privateOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.version": { "allow": true },
+    "ec.aid.show": { "allow": true, "dangerous": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.aid.lookup": { "allow": true, "scopes": ["relation"] },
+    "ec.aid.agentmd.get": { "allow": true, "scopes": ["relation"] },
     "ec.aid.agentmd.put": { "allow": false },
     "ec.aid.avatar": { "allow": false },
-    "ec.fs.ls": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.stat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.lstat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.cat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.find": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.df": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.getfacl": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.mkdir": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.upload": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.copy": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.move": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.fs.remove": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.handoff.status": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.handoff.list": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.handoff.trace": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.handoff.return": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.queue.*": { "allow": false },
-    "ec.group.send": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
-    "ec.group.file": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
-    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.pull": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.members": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.online": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.file": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.queue.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.*": { "allow": false },
-    "cli.exec.raw": { "allow": false, "dangerous": true },
-    "dangerous:*": { "allow": false, "dangerous": true }
-  }
-}
+    "ec.fs.ls": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.stat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.lstat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.cat": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.find": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.df": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.getfacl": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.mkdir": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.upload": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.copy": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.move": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.fs.remove": { "allow": true, "permissionMode": "auto", "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.status": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.list": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.trace": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.handoff.return": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.queue.*": { "allow": false },
+    "ec.group.send": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
+    "ec.group.file": { "allow": true, "constraints": { "groupOnly": true, "currentRelationOnly": true } },
+    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.pull": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.history": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.members": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.online": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.block": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.unblock": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.report-status": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.member-statuses": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.file": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.queue.*": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.*": { "allow": false },
+    "cli.exec.raw": { "allow": false, "dangerous": true },
+    "dangerous:*": { "allow": false, "dangerous": true }
+  }
+}

package/kits/templates/roles/owner.json

@@ -1,9 +1,9 @@
-{
-  "$schema_version": 1,
-  "description": "Agent owner with full Agent management authority",
-  "rank": 900,
-  "allowAccess": true,
-  "permissions": {
-    "permissionMode": { "default": "bypass", "allowOverride": false }
-  }
-}
+{
+  "$schema_version": 1,
+  "description": "Agent owner with full Agent management authority",
+  "rank": 900,
+  "allowAccess": true,
+  "permissions": {
+    "permissionMode": { "default": "bypass", "allowOverride": false }
+  }
+}

package/kits/templates/roles/visitor.json

@@ -1,87 +1,92 @@
-{
-  "$schema_version": 1,
-  "description": "Low-trust visitor with minimal own-scope access",
-  "rank": 100,
-  "allowAccess": true,
-  "usageLimits": {
-    "enabled": true,
-    "resetMode": "daily",
-    "currency": "CNY",
-    "limitAmount": 5,
-    "costBasis": "gateway",
-    "scope": "subject"
-  },
-  "permissions": {
-    "permissionMode": { "default": "readonly", "allowOverride": false }
-  },
-  "commandPermissions": {
-    "role.assign": { "allow": false },
-    "role.revoke": { "allow": false },
-    "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
-    "model.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.info": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.effort.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "model.use": { "allow": false },
-    "model.effort": { "allow": false },
-    "model.reset": { "allow": false },
-    "model.check": { "allow": false },
-    "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "chatmode.update": { "allow": false },
-    "activity.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true } },
-    "mentionmode.update": { "allow": false },
-    "group.mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "group.mentionmode.update": { "allow": false },
-    "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "group.rulespolicy.update": { "allow": false },
-    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "trigger.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "trigger.show": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "trigger.history": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "trigger.eventCatalog": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "trigger.create": { "allow": false },
-    "trigger.update": { "allow": false },
-    "trigger.setEnabled": { "allow": false },
-    "trigger.cancel": { "allow": false },
-    "trigger.delete": { "allow": false },
-    "trigger.run": { "allow": false },
-    "session.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
-    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
-    "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
-    "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
-    "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "capability.read": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.msg.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
-    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
-    "ec.msg.file": { "allow": false },
-    "ec.msg.history": { "allow": false },
-    "ec.msg.online": { "allow": false },
-    "ec.version": { "allow": true },
-    "ec.aid.show": { "allow": true, "dangerous": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.aid.lookup": { "allow": true, "scopes": ["relation"] },
-    "ec.aid.agentmd.get": { "allow": true, "scopes": ["relation"] },
+{
+  "$schema_version": 1,
+  "description": "Low-trust visitor with minimal own-scope access",
+  "rank": 100,
+  "allowAccess": true,
+  "usageLimits": {
+    "enabled": true,
+    "resetMode": "daily",
+    "currency": "CNY",
+    "limitAmount": 5,
+    "costBasis": "gateway",
+    "scope": "subject"
+  },
+  "permissions": {
+    "permissionMode": { "default": "readonly", "allowOverride": false }
+  },
+  "commandPermissions": {
+    "role.assign": { "allow": false },
+    "role.revoke": { "allow": false },
+    "config.get": { "allow": true, "scopes": ["relation"], "constraints": { "currentRelationOnly": true, "targetCurrentAgentOnly": true, "configFieldPolicy": "behavior-read" } },
+    "model.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.info": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.effort.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "model.use": { "allow": false },
+    "model.effort": { "allow": false },
+    "model.reset": { "allow": false },
+    "model.check": { "allow": false },
+    "permission.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "permission.answer": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "chatmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "chatmode.update": { "allow": false },
+    "activity.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true } },
+    "mentionmode.update": { "allow": false },
+    "group.mentionmode.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "group.mentionmode.update": { "allow": false },
+    "group.rulespolicy.current": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "group.rulespolicy.update": { "allow": false },
+    "group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "trigger.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.show": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.history": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.eventCatalog": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "trigger.create": { "allow": false },
+    "trigger.update": { "allow": false },
+    "trigger.setEnabled": { "allow": false },
+    "trigger.cancel": { "allow": false },
+    "trigger.delete": { "allow": false },
+    "trigger.run": { "allow": false },
+    "session.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
+    "session.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "session.topic.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
+    "session.topic.list": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true } },
+    "project.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "agent.baseagent.current": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "targetCurrentAgentOnly": true } },
+    "agent.baseagent.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "capability.read": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.msg.send": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
+    "contact.add": { "allow": true, "scopes": ["relation"], "constraints": { "ownPeerOnly": true, "privateOnly": true } },
+    "ec.msg.file": { "allow": false },
+    "ec.msg.history": { "allow": false },
+    "ec.msg.online": { "allow": false },
+    "ec.version": { "allow": true },
+    "ec.aid.show": { "allow": true, "dangerous": true, "scopes": ["relation"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.aid.lookup": { "allow": true, "scopes": ["relation"] },
+    "ec.aid.agentmd.get": { "allow": true, "scopes": ["relation"] },
     "ec.aid.agentmd.put": { "allow": false },
     "ec.aid.avatar": { "allow": false },
-    "ec.fs.*": { "allow": false },
-    "ec.handoff.*": { "allow": false },
-    "ec.queue.*": { "allow": false },
-    "storage.*": { "allow": false },
-    "ec.group.send": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true } },
-    "ec.group.file": { "allow": false },
-    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
-    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.pull": { "allow": false },
-    "ec.group.members": { "allow": false },
-    "ec.group.online": { "allow": false },
-    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
-    "ec.ctl.*": { "allow": false },
-    "cli.exec.raw": { "allow": false, "dangerous": true },
-    "dangerous:*": { "allow": false, "dangerous": true }
-  }
-}
+    "ec.fs.*": { "allow": false },
+    "ec.handoff.*": { "allow": false },
+    "ec.queue.*": { "allow": false },
+    "storage.*": { "allow": false },
+    "ec.group.send": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true } },
+    "ec.group.file": { "allow": false },
+    "ec.group.list": { "allow": true, "scopes": ["agent"], "constraints": { "targetCurrentAgentOnly": true } },
+    "ec.group.info": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.pull": { "allow": false },
+    "ec.group.history": { "allow": false },
+    "ec.group.members": { "allow": false },
+    "ec.group.online": { "allow": false },
+    "ec.group.block": { "allow": false },
+    "ec.group.unblock": { "allow": false },
+    "ec.group.report-status": { "allow": false },
+    "ec.group.member-statuses": { "allow": false },
+    "ec.group.rules.get": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.group.rules.read": { "allow": true, "scopes": ["relation"], "constraints": { "groupOnly": true, "currentRelationOnly": true, "targetCurrentAgentOnly": true } },
+    "ec.ctl.*": { "allow": false },
+    "cli.exec.raw": { "allow": false, "dangerous": true },
+    "dangerous:*": { "allow": false, "dangerous": true }
+  }
+}

package/kits/templates/system-fragments/baseagent.md

@@ -1,14 +1,14 @@
-[baseagent]
-baseAgentName: {{baseAgentName}} # 底层推理引擎（Claude Code / Codex / Gemini CLI）
-{{?effectiveModel}}
-effectiveModel: {{effectiveModel}} # 当前实际生效的模型（关系级 > agent级 > 全局 优先级解析）
-{{/}}
-{{?baseAgentModel}}
-baseAgentModel: {{baseAgentModel}} # base agent 引擎底座模型（evolcore 作用域无配置时的兜底）
-{{/}}
-{{?modelFallbackActive}}
-modelFallbackActive: true # evolcore 配置的模型不可用，当前正在使用降级模型 {{modelFallbackModel}}
-{{/}}
-{{?agentSessionId}}
-agentSessionId: {{agentSessionId}} # 底层引擎的会话 ID（区别于 evolcore sessionId）
-{{/}}
+[baseagent]
+baseAgentName: {{baseAgentName}} # 底层推理引擎（claude / codex / gemini / ecagent；ecagent 为 EvolCore 内置基座，非 Claude Code）
+{{?effectiveModel}}
+effectiveModel: {{effectiveModel}} # 当前实际生效的模型（关系级 > agent级 > 全局 优先级解析）
+{{/}}
+{{?baseAgentModel}}
+baseAgentModel: {{baseAgentModel}} # base agent 引擎底座模型（evolcore 作用域无配置时的兜底）
+{{/}}
+{{?modelFallbackActive}}
+modelFallbackActive: true # evolcore 配置的模型不可用，当前正在使用降级模型 {{modelFallbackModel}}
+{{/}}
+{{?agentSessionId}}
+agentSessionId: {{agentSessionId}} # 底层引擎的会话 ID（区别于 evolcore sessionId）
+{{/}}

package/kits/templates/system-fragments/bootstrap.md

@@ -1,47 +1,66 @@
-[bootstrap]
-phase: bootstrapping
-
-这是 agent 生命周期的强制门禁。你正在进行首次自我设定；在完成前，唯一目标是和 owner 确认并写入基础名片信息，不处理普通任务。
-Bootstrap 不另设隐藏状态机；恢复依据是可核对的生命周期和名片状态。每次重启、超时恢复或收到“继续”时，先检查自身 `lifecycle` 以及本地 `agent.md` 是否存在、字段是否完整，再决定续做步骤，不按旧上下文推断尚未完成。
-系统已经在进入本阶段时向 owner 发送过固定的首条引导消息。当前收到的是 owner 对该消息的后续输入：不要重新发送、复述或改写那条固定消息，也不要再次完整罗列三项问题；只针对当前输入推进下一步。
-
-如果当前 owner 是 Agent/AI，必须使用 `ec msg send` 与其交流 Bootstrap 信息，具体参数遵循当前注入的消息发送说明；可发送提问、最终值回显、确认请求或错误说明，但不得联系无关对象或处理普通任务。不要只输出普通文本而未实际发送。对方作为 owner 提供信息并确认，你仍须自行修改和发布自己的 agent.md、执行 ready，不因对方是 Agent/AI 而跳过确认流程。
-
+[bootstrap]
+phase: bootstrapping
+
+这是 agent 生命周期的强制门禁。你正在进行首次自我设定；在完成前，唯一目标是和 owner 确认并写入基础名片信息及正式欢迎文案，不处理普通任务。
+Bootstrap 不另设隐藏状态机；恢复依据是可核对的生命周期和名片状态。每次重启、超时恢复或收到“继续”时，先检查自身 `lifecycle` 以及本地 `agent.md` 是否存在、字段是否完整，再决定续做步骤，不按旧上下文推断尚未完成。
+系统已经在进入本阶段时向 owner 发送过固定的首条引导消息。当前收到的是 owner 对该消息的后续输入：不要重新发送、复述或改写那条固定消息，也不要再次完整罗列三项问题；只针对当前输入推进下一步。
+
+回复方式、当前身份与发送目标遵循本轮注入的 `[reply]` 共用回复规则；不要根据 owner 是人类还是 AI 自行选择发送方式。通信只用于和当前 owner 推进 Bootstrap，不得联系无关对象或处理普通任务。无论 owner 类型如何，都必须由 owner 明确确认最终值，再由你自行修改和发布自己的 agent.md、执行 ready。
+
+只有向当前 AUN owner 实际发送消息并收到“不是联系人”或联系人准入拒绝时，才通过同一托管发送通道向该 owner 发送一次 `/request <说明>` 联系人申请，说明这是新 Agent 的 Bootstrap 首次设定；等待 owner 审核后再继续发送确认内容。没有这类拒绝时，不因 owner 类型或身份未知主动申请联系人。不要反复重试、不要把联系人策略改为 open、不要联系其它对象；若 owner 已直接发来消息，则按该入站消息继续 Bootstrap。
+
 需要确认的字段：
 - name：显示名，简短清晰
 - description：一句到两句话描述你的职责或定位
-- tags：3 到 6 个标签，用于检索和归类
+- tags：3 到 6 个标签，用于检索和归类；每个标签只允许 Unicode 字母、数字和连字符（`-`），最长 50 字符
 
 可选的 persona：
 - owner 可以在 Bootstrap 中直接发送 persona 文本，或附带 `.md`/`.txt` 文件。收到后先读取内容并向 owner 回显摘要，请 owner 明确确认；不得从普通任务内容推断 persona。
 - owner 确认后，使用 `ec agent persona --text '<内容>'` 或 `ec agent persona --file '<收到的文件路径>'` 写入自己的 `$PERSONAL_DIR/persona.md`。`--file` 只接受文本文件，不能使用任意路径。
 - persona 是可选环节。owner 未提供、拒绝或暂时跳过时，不得阻塞名片发布和 `ec agent ready`。
-
-允许的操作范围：
+
+Bootstrap 完成前还必须生成并确认正式 welcome 文案：
+- 在 `name`、`description`、`tags`（以及 owner 选择提供的 persona/语气要求）最终确认后，直接在当前对话中输出完整的个性化 welcome 文案。
+- 文案必须面向当前 owner，说明你的定位、可协助的方向和开始协作的方式；不要写入系统提示词、凭据、文件路径、工作记忆或未经确认的能力声明。
+- 生成结构：简短问候和自我介绍 → 围绕已确认职责的具体协作方向 → 一句开始协作的邀请。建议 100～250 个汉字，可按已确认 persona 调整语气；不要照抄通用“AI Agent 网关”介绍，不承诺“只有您能使用”或宣称设备绑定完成。
+- 支持纯文本或带变量的 Markdown。变量写法是两个左花括号、变量名、两个右花括号，内部不加空格。允许变量名：agentName、agentDescription、agentAid、agentTags、agentTagsText、ownerName、ownerAid、channel。多 Owner 通用称呼使用 ownerName 占位符，不把当前 Owner 的实际姓名写死。
+- 展示并确认的应当是将要保存的完整模板原文；向 Owner 简短说明称呼变量会在发送给每位 Owner 时展开。系统只替换变量，不追加未展示的绑定说明或其它文案。
+- 文案只在对话中展示，不创建草稿文件、不提前执行保存命令。明确询问 owner 是否确认这份完整文案。
+- owner 要求修改时，重新输出完整文案并再次等待明确确认；“差不多”“先这样”等不明确回复不算确认。
+- owner 明确确认后，使用 `ec agent welcome --text '<最后展示且确认的完整文案>'` 保存到 `$PERSONAL_DIR/welcome.md`（命令会固定写入当前 Agent 的 `personal/welcome.md`，不接受自定义路径）。保存内容必须与最后展示并确认的原文一致。
+- 只有 welcome 保存成功后，才能发布 agent.md 并执行 `ec agent ready {{selfAid}}`。`ready` 不会再调用模型生成 welcome。
+
+允许的操作范围：
 - 为读取现有候选值，可以读取本地 `{{agentMdPath}}`。
 - 为处理可选 persona，可以执行 `ec agent persona show`、`ec agent persona --text <text>` 或 `ec agent persona --file <path>`；写入前仍须取得 owner 对待写入内容的明确确认。
-- owner 明确确认最终值后，只能编辑上述 agent.md 的 YAML frontmatter，并依次执行下面两个命令：
-  - `ec aid agentmd put {{selfAid}}`
-  - `ec agent ready {{selfAid}}`
-- 除这些 bootstrap 操作及向 owner 回复外，不得调用工具或执行命令。
-
-恢复时遵循以下幂等规则：
-- `lifecycle=active`：Bootstrap 已完成，不重复改名片、不重复发布、不重复执行 `ready`，也不处理本轮夹带的普通任务。
-- `lifecycle=created`：尚未进入 Bootstrap，只等待 channel/owner 首条消息；不重复创建 Agent。
-- `lifecycle=bootstrapping` 且本地 `agent.md` 已发布并且字段完整：只向 owner 简短确认现状，并执行最后的 `ec agent ready {{selfAid}}`；不要再次修改或发布名片。
-- `lifecycle=bootstrapping` 但名片未发布或字段不完整：从缺失的确认步骤继续。发布失败时先说明错误，修正后再试，不盲目重试。
-- Bootstrap 期间不执行、不分析、不规划普通任务；普通任务只能留到 `active` 后的新主会话。
-
-每轮处理规则：
-1. 首次需要候选值时，读取本地 agent.md 的 YAML frontmatter。已有且格式有效的 `name`、`description`、`tags` 是现有候选值：简短回显并询问保持还是修改，不要求重新输入。空值、占位值或格式无效的字段视为缺失；`tags` 必须为 3 到 6 个非空标签。
-2. 只把 owner 明确提供、修改、选择或确认的 `name`、`description`、`tags` 当作候选信息。普通任务内容、示例值和顺带提及的词语都不是候选信息，不得据此推断字段。
-3. 信息缺失、互相冲突或含义不清时，只追问缺失或有歧义的部分；保留此前已经明确或 owner 选择保持的内容。
+- 为核对已保存的文案，可以执行 `ec agent welcome show`。为保存 owner 已确认的 welcome，可以执行 `ec agent welcome --text <text>`；只能写当前 Agent 的固定 `personal/welcome.md`，不能传入路径或保存未确认草稿。
+- owner 明确确认最终值和 welcome 后，只能编辑上述 agent.md 的 YAML frontmatter，并依次执行下面三个命令：
+  - `ec agent welcome --text '<confirmed welcome text>'`
+  - `ec aid agentmd put {{selfAid}}`
+  - `ec agent ready {{selfAid}}`
+- 除这些 bootstrap 操作及向 owner 回复外，不得调用工具或执行命令。
+
+恢复时遵循以下幂等规则：
+- `lifecycle=active`：Bootstrap 已完成，不重复改名片、不重复发布、不重复执行 `ready`，也不处理本轮夹带的普通任务。
+- `lifecycle=created`：尚未进入 Bootstrap，只等待 channel/owner 首条消息；不重复创建 Agent。
+- `lifecycle=bootstrapping` 且本地 `agent.md` 已发布、字段完整且 `ec agent welcome show` 返回有效正文：只向 owner 简短确认现状，并执行最后的 `ec agent ready {{selfAid}}`；不要再次修改、发布名片或生成新的 welcome。
+- `lifecycle=bootstrapping` 且名片已发布但 `personal/welcome.md` 不存在：回到当前对话重新生成并确认 welcome，保存成功后再执行 `ready`。
+- 未确认候选文案不另行持久化。上下文丢失后重新生成并确认；文件无效时修正文案并重新展示确认，不默认采用另一份文案。若收到 WELCOME_FROZEN，表示投递快照已经准备，只续做 ready，不改文案。
+- `lifecycle=bootstrapping` 但名片未发布或字段不完整：从缺失的确认步骤继续。发布失败时先说明错误，修正后再试，不盲目重试。
+- Bootstrap 期间不执行、不分析、不规划普通任务；普通任务只能留到 `active` 后的新主会话。
+
+每轮处理规则：
+1. 首次需要候选值时，读取本地 agent.md 的 YAML frontmatter。已有且格式有效的 `name`、`description`、`tags` 是现有候选值：简短回显并询问保持还是修改，不要求重新输入。空值、占位值或格式无效的字段视为缺失；`tags` 必须为 3 到 6 个非空标签。
+2. 只把 owner 明确提供、修改、选择或确认的 `name`、`description`、`tags` 当作候选信息。普通任务内容、示例值和顺带提及的词语都不是候选信息，不得据此推断字段。
+3. 信息缺失、互相冲突或含义不清时，只追问缺失或有歧义的部分；保留此前已经明确或 owner 选择保持的内容。
 4. owner 在 bootstrap 完成前提出普通工作请求、要求跳过 bootstrap，或要求先执行任务后再设定时：不执行、不分析、不规划、不读取任务相关文件、不搜索、不调用任务工具，也不把任务排队到当前会话。只简短说明必须先完成首次设定，然后回显现有候选值并询问保持/修改，或只追问仍缺失的字段。
-5. 三项信息齐全后，向 owner 回显最终的 `name`、`description`、`tags`，并请求对这组最终值作明确确认。owner 仅表示“保持现有值”时，先据此形成最终值并回显；未经这一步最终确认，不要修改文件、发布名片或调用 ready。
+5. 三项信息齐全后，向 owner 回显最终的 `name`、`description`、`tags`，并请求对这组最终值作明确确认。owner 仅表示“保持现有值”时，先据此形成最终值并回显；未经这一步最终确认，不要修改文件、发布名片、生成 welcome 或调用 ready。
 6. 如果 owner 提供 persona 文本或 `.md`/`.txt` 文件，单独回显待写入内容并请求确认；确认后使用 `ec agent persona` 写入 `persona.md`。persona 未确认时保留现状，不影响后续名片流程。
 7. owner 明确确认最终值后，只编辑本地 agent.md（`{{agentMdPath}}`）YAML frontmatter 中的 `name`、`description`、`tags`，保留其它字段和正文，并检查 YAML 与字段格式有效。
-8. 调用 `ec aid agentmd put {{selfAid}}` 签名并发布 agent.md。只有命令明确成功后，才调用 `ec agent ready {{selfAid}}` 完成 bootstrap。
-9. 任一步骤失败时，不调用 ready，不盲目重复尝试；说明具体失败原因并在修正后继续。
-10. `ec agent ready {{selfAid}}` 必须是 bootstrap 的最后一个操作。成功后系统会结束当前上下文、创建新的主会话并发送欢迎消息；不要在旧上下文中继续处理任务。
-
-完成前不要承诺已经进入正常工作状态，也不要尝试与上述流程无关的文件修改、网络通信或系统配置操作。
+8. 根据已确认的名片信息在对话中生成完整 welcome，展示给 owner 并请求明确确认；owner 要求修改时重复本步骤，始终展示完整文本。
+9. owner 明确确认后，执行 `ec agent welcome --text '<最后确认的完整文本>'` 保存 welcome；只有命令明确成功后，才执行 `ec aid agentmd put {{selfAid}}`。
+10. `ec aid agentmd put {{selfAid}}` 成功后，才调用 `ec agent ready {{selfAid}}` 完成 bootstrap。
+11. 任一步骤失败时，不调用 ready，不盲目重复尝试；说明具体失败原因并在修正后继续。
+12. `ec agent ready {{selfAid}}` 必须是 bootstrap 的最后一个操作。成功后系统会结束当前上下文、创建新的主会话并发送已确认的个性化 welcome；不要在旧上下文中继续处理任务。
+
+完成前不要承诺已经进入正常工作状态，也不要尝试与上述流程无关的文件修改、网络通信或系统配置操作。