evolcore 0.0.27 → 0.0.29-test.0

package/dist/config/config-field-policy.js

@@ -2,6 +2,8 @@ const BEHAVIOR_TOP_FIELDS = new Set([
     'active_baseagent',
     'chatmode',
     'mentionMode',
+    'autoMentionQuietWindowMs',
+    'sessionIdleSec',
     'groupSlashRequireMentions',
     'responseMode',
     'responseModeParams',
@@ -14,6 +16,7 @@ const BEHAVIOR_TOP_FIELDS = new Set([
     'render',
     'sessionManifests',
     'enable_rich_content',
+    'memory',
 ]);
 const BASEAGENT_BEHAVIOR_FIELDS = new Set([
     'model',
@@ -59,6 +62,7 @@ const SENSITIVE_TOP_FIELDS = new Set([
     'roles',
     'role',
     'extra_backup',
+    'decision_model',
 ]);
 const CRITICAL_AGENT_FIELDS = new Set(['owners', 'admins', 'roles', 'access']);
 const EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
@@ -75,7 +79,7 @@ export function isBehaviorConfigFieldPath(fieldPath) {
     }
     return BEHAVIOR_TOP_FIELDS.has(parts[0]);
 }
-export function resolveConfigFieldRule(fieldPath) {
+export function resolveConfigFieldRule(fieldPath, scope) {
     const field = fieldPath.trim();
     if (!field)
         return { class: 'unknown' };
@@ -122,6 +126,10 @@ export function resolveConfigFieldRule(fieldPath) {
         return scalar(field, 'nonnegative-number');
     if (field === 'mentionMode')
         return scalar(field, 'mention-mode');
+    if (field === 'autoMentionQuietWindowMs')
+        return scalar(field, 'nonnegative-number');
+    if (field === 'sessionIdleSec')
+        return scalar(field, 'finite-number');
     if (field === 'groupSlashRequireMentions')
         return scalar(field, 'boolean');
     if (field === 'show_activities')
@@ -132,6 +140,8 @@ export function resolveConfigFieldRule(fieldPath) {
         return scalar(field, 'string');
     if (field === 'configSnapshots')
         return scalar('configSnapshots', 'boolean');
+    if (field === 'restartRecovery.enabled')
+        return scalar('restartRecovery.enabled', 'boolean');
     if (top === 'chatmode') {
         if (parts.length === 1)
             return readonlyObject('chatmode');
@@ -158,6 +168,8 @@ export function resolveConfigFieldRule(fieldPath) {
             return scalar('session_renew', 'boolean');
         if (parts[1] === 'after_hours')
             return scalar('session_renew', 'positive-number');
+        if (parts[1] === 'new_probability_threshold')
+            return scalar('session_renew', 'probability');
         if (parts[1] === 'fallback_action')
             return scalar('session_renew', 'session-renew-action');
         return { class: 'unknown' };
@@ -188,6 +200,31 @@ export function resolveConfigFieldRule(fieldPath) {
         return parts.length === 1
             ? readonlyObject('group_venue_sync')
             : { class: 'unknown' };
+    if (top === 'memory') {
+        if (parts.length === 1)
+            return readonlyObject('memory');
+        if (field === 'memory.enableAgent')
+            return scalar('memory', 'boolean', 'owner-only');
+        if (field === 'memory.enableOwner')
+            return scalar('memory', 'boolean', 'owner-only');
+        if (field === 'memory.enableRelation') {
+            // relation scope：对端自主控制自己这条关系的记忆开关，role-overridable
+            // agent scope：owner 级管控，owner-only
+            return scope === 'relation'
+                ? scalar('memory', 'boolean')
+                : scalar('memory', 'boolean', 'owner-only');
+        }
+        // 数值参数：整理节奏与容量上限，均 owner-only
+        if (field === 'memory.idleHours'
+            || field === 'memory.checkIntervalHours'
+            || field === 'memory.backlogHours'
+            || field === 'memory.indexMaxBytes'
+            || field === 'memory.forgetAfterDays'
+            || field === 'memory.profileRegenDays') {
+            return scalar('memory', 'positive-number', 'owner-only');
+        }
+        return { class: 'unknown' };
+    }
     return { class: 'unknown' };
 }
 export function isSafeBehaviorConfigField(fieldPath) {
@@ -262,6 +299,18 @@ export function parseConfigFieldValue(fieldPath, rawValue) {
                 ? { ok: true, value }
                 : { ok: false, reason: `Config field ${fieldPath} must be a positive number` };
         }
+        case 'finite-number': {
+            const value = Number(raw);
+            return Number.isFinite(value)
+                ? { ok: true, value }
+                : { ok: false, reason: `Config field ${fieldPath} must be a finite number` };
+        }
+        case 'probability': {
+            const value = Number(raw);
+            return raw && Number.isFinite(value) && value >= 0 && value <= 1
+                ? { ok: true, value }
+                : { ok: false, reason: `Config field ${fieldPath} must be a number between 0 and 1` };
+        }
         case 'effort':
             return EFFORTS.has(raw)
                 ? { ok: true, value: raw }
@@ -271,9 +320,9 @@ export function parseConfigFieldValue(fieldPath, rawValue) {
                 ? { ok: true, value: raw }
                 : { ok: false, reason: `Config field ${fieldPath} must be interactive or proactive` };
         case 'mention-mode':
-            return raw === 'disabled' || raw === 'mention-only'
+            return raw === 'disabled' || raw === 'mention-only' || raw === 'auto'
                 ? { ok: true, value: raw }
-                : { ok: false, reason: `Config field ${fieldPath} must be disabled or mention-only` };
+                : { ok: false, reason: `Config field ${fieldPath} must be disabled, mention-only, or auto` };
         case 'show-activities':
             return raw === 'all' || raw === 'text' || raw === 'none'
                 ? { ok: true, value: raw }

package/dist/config/config-manager.js

@@ -747,6 +747,10 @@ export function normalizeProcessConfigCompat(value) {
     const debug = value.debug;
     let changed = false;
     let normalized = value;
+    if (Object.prototype.hasOwnProperty.call(normalized, 'fullaccess')) {
+        normalized = { ...normalized };
+        delete normalized.fullaccess;
+    }
     if (idleMonitor && typeof idleMonitor === 'object' && !Array.isArray(idleMonitor)) {
         const nextIdleMonitor = { ...idleMonitor };
         if (nextIdleMonitor.apiRetryTimeout === undefined && nextIdleMonitor.retryAttemptTimeout !== undefined) {
@@ -1337,7 +1341,7 @@ export function normalizeDefaultsBehaviorCompat(defaults) {
     if (!normalized.chatmode && (chatMode === 'interactive' || chatMode === 'proactive')) {
         normalized.chatmode = { private: chatMode, group: chatMode, nothuman: chatMode };
     }
-    if (normalized.mentionMode === undefined && (config.mentionMode === 'disabled' || config.mentionMode === 'mention-only')) {
+    if (normalized.mentionMode === undefined && (config.mentionMode === 'disabled' || config.mentionMode === 'mention-only' || config.mentionMode === 'auto')) {
         normalized.mentionMode = config.mentionMode;
     }
     if (normalized.show_activities === undefined && ['all', 'text', 'none'].includes(config.show_activities)) {
@@ -1362,9 +1366,10 @@ function stripStaticOwnerField(config) {
 }
 function stripRelationRoleData(config) {
     if (!config || (!Object.prototype.hasOwnProperty.call(config, 'role')
-        && !Object.prototype.hasOwnProperty.call(config, 'roles')))
+        && !Object.prototype.hasOwnProperty.call(config, 'roles')
+        && !Object.prototype.hasOwnProperty.call(config, 'decision_model')))
         return config;
-    const { role: _role, roles: _legacyRoles, ...rest } = config;
+    const { role: _role, roles: _legacyRoles, decision_model: _decisionModel, ...rest } = config;
     return rest;
 }
 // ── effective（合并视图）─────────────────────────────────────────────────
@@ -1374,6 +1379,7 @@ function stripRelationRoleData(config) {
 export function resolveEffective(sel, opts = {}) {
     const config = resolveAgentConfig(sel, opts);
     const observableDefault = loadSchema('agent-config').fields.get('observable')?.default;
+    const autoMentionQuietWindowMsDefault = loadSchema('agent-config').fields.get('autoMentionQuietWindowMs')?.default;
     const effective = {
         $schema_version: config.$schema_version ?? currentVersion('agent-config'),
         aid: config.aid ?? sel.self ?? '',
@@ -1384,6 +1390,7 @@ export function resolveEffective(sel, opts = {}) {
         owners: config.owners,
         fullaccess: config.fullaccess,
         aun: config.aun,
+        decision_model: config.decision_model,
         channels: config.channels ?? [],
         models: config.models,
         projects: config.projects,
@@ -1398,6 +1405,8 @@ export function resolveEffective(sel, opts = {}) {
         baseagents: config.baseagents,
         chatmode: config.chatmode,
         mentionMode: config.mentionMode,
+        autoMentionQuietWindowMs: config.autoMentionQuietWindowMs
+            ?? (typeof autoMentionQuietWindowMsDefault === 'number' ? autoMentionQuietWindowMsDefault : 3000),
         groupSlashRequireMentions: config.groupSlashRequireMentions ?? true,
         model: config.model,
         responseMode: config.responseMode,
@@ -1410,6 +1419,7 @@ export function resolveEffective(sel, opts = {}) {
         render: config.render,
         sessionManifests: config.sessionManifests,
         enable_rich_content: config.enable_rich_content,
+        memory: config.memory,
     };
     return normalizeEffectiveCompatibility(effective);
 }
@@ -1430,6 +1440,7 @@ const EFFECTIVE_BEHAVIOR_FIELDS = [
     'baseagents',
     'chatmode',
     'mentionMode',
+    'autoMentionQuietWindowMs',
     'groupSlashRequireMentions',
     'flush_delay',
     'debounce',
@@ -1456,7 +1467,9 @@ export function routeFieldPath(fieldPath, scope) {
     if (scope === 'process')
         return routeIn(DAEMON_SCHEMA_NAME, ConfigTarget.Process, topField);
     if (scope === 'defaults') {
-        if (isBehaviorConfigFieldPath(fieldPath) && topField !== 'session_renew') {
+        if (isBehaviorConfigFieldPath(fieldPath)
+            && topField !== 'session_renew'
+            && topField !== 'autoMentionQuietWindowMs') {
             throw new ConfigError('DEFAULT_BEHAVIOR_REJECT', `--default 不支持行为字段: ${fieldPath}`);
         }
         return routeIn('defaults', ConfigTarget.Defaults, topField);

package/dist/config/contact-book-store.js

@@ -3,7 +3,7 @@ import fs from 'fs';
 import path from 'path';
 import { isValidAid } from '../aun/aid/validation.js';
 import { isExplicitGroupId } from '../aun/group/index.js';
-import { agentConfig, agentContactConfig, agentDir, resolvePaths } from '../paths.js';
+import { agentConfig, agentContactAuditPath, agentContactConfig, agentDir, resolvePaths } from '../paths.js';
 import { atomicReadJson, atomicWrite, atomicWriteJson } from '../utils/atomic-write.js';
 import { fileCache } from '../core/daemon-file-cache.js';
 import { ensureManagedLockParent, resolveManagedLockPath } from '../core/runtime-lock.js';
@@ -601,7 +601,7 @@ function journalFile(selfAid) {
     return path.join(agentDir(selfAid), JOURNAL_NAME);
 }
 function appendAudit(selfAid, request, previousContactRevision, contactRevisionValue) {
-    const file = path.join(agentDir(selfAid), 'data', 'contact-audit.jsonl');
+    const file = agentContactAuditPath(selfAid);
     fs.mkdirSync(path.dirname(file), { recursive: true });
     fs.appendFileSync(file, `${JSON.stringify({
         timestamp: new Date().toISOString(),

package/dist/config/mention-mode.js

@@ -1,5 +1,4 @@
-/** AUN `mention_mode` and EvolCore `mentionMode` share these wire values. */
-export function normalizeMentionMode(mode) {
+export function normalizeAunMentionMode(mode) {
     if (typeof mode !== 'string')
         return undefined;
     const normalized = mode.trim().toLowerCase();
@@ -9,3 +8,9 @@ export function normalizeMentionMode(mode) {
         return 'mention-only';
     return undefined;
 }
+export function normalizeMentionMode(mode) {
+    const normalized = typeof mode === 'string' ? mode.trim().toLowerCase() : '';
+    if (normalized === 'auto')
+        return 'auto';
+    return normalizeAunMentionMode(mode);
+}

package/dist/config/merge.js

@@ -1,12 +1,14 @@
 /**
  * merge —— 类型驱动的覆盖链合并（design §三，全项目唯一实现点）+ ${VAR} 展开。
  *
- * 合并三规则（按字段的 x-merge 语义）：
+ * 合并规则（按字段的 x-merge 语义）：
  *   - scalar：高优先级整体覆盖
  *   - list：  并集追加去重（只能加，不能减）
- *   - dict：  键并集；同键 → 高优先级值直接覆盖（**不递归**，合并粒度=第一层键）
+ *   - dict：  键并集；同键 → 高优先级值直接覆盖（合并粒度=第一层键）
+ *             若字段在 schema 中声明了 x-merge-logic: AND 的子字段，
+ *             则该子字段做 AND 合并而非覆盖（任意层为 false 结果为 false）
  *
- * 合并代码永远只有这三条规则；所有"覆盖 vs 追加"通过 schema 的 x-merge 选择表达，不为字段写特判。
+ * 合并代码永远只有这几条规则；所有"覆盖 vs 追加 vs AND"通过 schema 的 x-merge / x-merge-logic 选择表达，不为字段写特判。
  */
 import fs from 'fs';
 import path from 'path';
@@ -24,11 +26,20 @@ function unionList(base, overlay) {
     }
     return out;
 }
-/** dict 第一层键合并：键并集，同键高优先级整体覆盖（不递归）。 */
-function mergeDict(base, overlay) {
+/** dict 第一层键合并：键并集，同键按子字段 FieldSpec 决定合并语义。
+ *  若子字段声明了 mergeLogic: AND 且两值均为 boolean，做 AND；否则高优先级覆盖。 */
+function mergeDictWithSchema(base, overlay, children) {
     const out = { ...base };
-    for (const [k, v] of Object.entries(overlay))
-        out[k] = v;
+    for (const [k, v] of Object.entries(overlay)) {
+        const childSpec = children?.get(k);
+        const prev = out[k];
+        if (prev !== undefined && childSpec?.mergeLogic === 'AND' && typeof prev === 'boolean' && typeof v === 'boolean') {
+            out[k] = prev && v;
+        }
+        else {
+            out[k] = v;
+        }
+    }
     return out;
 }
 function isPlainObject(v) {
@@ -38,6 +49,9 @@ function isPlainObject(v) {
  * 按 schema 字段表，对覆盖链上"存在的每一级"做类型驱动合并。
  * layers 从低优先级到高优先级；低优先级独有字段保留，冲突点高优先级胜。
  * 字段未在 schema 中（理论上 ajv 已拦）按 scalar 处理。
+ *
+ * x-merge-logic: AND 语义：所有层的布尔值做 AND 合并，任意层为 false 则结果为 false。
+ * 仅对 boolean 类型的 scalar 字段有意义；值缺失的层不参与 AND（按 true 处理）。
  */
 export function mergeLayers(layers, fields) {
     const out = {};
@@ -54,11 +68,16 @@ export function mergeLayers(layers, fields) {
                 out[k] = v;
                 continue;
             }
-            if (kind === 'list' && Array.isArray(prev) && Array.isArray(v)) {
+            // x-merge-logic: AND — 任意层为 false 则结果为 false
+            if (spec?.mergeLogic === 'AND' && typeof v === 'boolean' && typeof prev === 'boolean') {
+                out[k] = prev && v;
+            }
+            else if (kind === 'list' && Array.isArray(prev) && Array.isArray(v)) {
                 out[k] = unionList(prev, v);
             }
             else if (kind === 'dict' && isPlainObject(prev) && isPlainObject(v)) {
-                out[k] = mergeDict(prev, v);
+                // 传入 children，让 dict 子字段能感知 x-merge-logic: AND
+                out[k] = mergeDictWithSchema(prev, v, spec?.children);
             }
             else {
                 out[k] = v; // scalar 覆盖（或类型不一致时高优先级胜）

package/dist/config/resolved-config-op.js

@@ -125,7 +125,7 @@ function resolveFieldCommand(argv, subcommand, options = {}) {
             reason: 'fallbackModels is configured only by editing agents/defaults.json',
         };
     }
-    const fieldRule = resolveConfigFieldRule(field);
+    const fieldRule = resolveConfigFieldRule(field, selector.scope);
     if (subcommand !== 'get' && fieldRule.class === 'safe-readonly-object') {
         return {
             ok: false,

package/dist/config/runtime-env.js

@@ -0,0 +1,137 @@
+import fs from 'fs';
+import path from 'path';
+import { execFileSync } from 'child_process';
+import { agentDir, resolvePaths } from '../paths.js';
+export const RUNTIME_ENVIRONMENT_NAMES = [
+    'ANTHROPIC_BASE_URL',
+    'ANTHROPIC_AUTH_TOKEN',
+    'ANTHROPIC_API_KEY',
+];
+const cache = new Map();
+const overrides = new Map();
+const startupValues = new Map();
+function captureStartupValues() {
+    startupValues.clear();
+    for (const name of RUNTIME_ENVIRONMENT_NAMES)
+        startupValues.set(name, process.env[name]);
+}
+captureStartupValues();
+function isSafeAid(aid) {
+    const labels = aid.split('.');
+    return aid.length > 0 && aid.length <= 256 && path.basename(aid) === aid
+        && labels.length >= 3
+        && labels.every(label => /^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?$/u.test(label));
+}
+function normalizeScope(aid) {
+    if (!aid || aid === '*')
+        return '*';
+    if (!isSafeAid(aid))
+        throw new Error('Invalid agent aid');
+    return aid;
+}
+function envFileValue(file, name) {
+    try {
+        for (const line of fs.readFileSync(file, 'utf8').split(/\r?\n/u)) {
+            const match = line.match(/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/u);
+            if (!match || match[1] !== name)
+                continue;
+            const value = match[2].trim();
+            return value.length > 1 && ((value[0] === '"' && value.at(-1) === '"')
+                || (value[0] === "'" && value.at(-1) === "'")) ? value.slice(1, -1) : value;
+        }
+    }
+    catch { }
+    return undefined;
+}
+function windowsValue(hive, name) {
+    if (process.platform !== 'win32')
+        return undefined;
+    const registryPath = hive === 'user' ? 'HKCU\\Environment'
+        : 'HKLM\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Environment';
+    try {
+        const output = execFileSync(path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'reg.exe'), ['query', registryPath, '/v', name], {
+            encoding: 'utf8', windowsHide: true, timeout: 1500, stdio: ['ignore', 'pipe', 'ignore'],
+        });
+        const line = output.split(/\r?\n/u).find(entry => entry.trimStart().startsWith(`${name} `));
+        return line?.match(/\sREG_[A-Z0-9_]+\s+(.+?)\s*$/u)?.[1];
+    }
+    catch {
+        return undefined;
+    }
+}
+function readOverride(name, aid) {
+    return overrides.get(normalizeScope(aid))?.get(name) ?? overrides.get('*')?.get(name);
+}
+export function readRuntimeEnvironmentVariable(name, aid, projectPath) {
+    if (!RUNTIME_ENVIRONMENT_NAMES.includes(name)) {
+        throw new Error('Unsupported gateway environment variable');
+    }
+    const typedName = name;
+    const scope = normalizeScope(aid);
+    const cacheKey = `${scope}:${projectPath || ''}:${typedName}`;
+    const now = Date.now();
+    const hit = cache.get(cacheKey);
+    if (hit && hit.expires > now)
+        return hit.result;
+    const agentValue = aid && isSafeAid(aid)
+        ? envFileValue(path.join(agentDir(aid), '.env'), typedName)
+        : undefined;
+    const projectValue = projectPath
+        ? envFileValue(path.join(projectPath, '.env'), typedName)
+        : undefined;
+    const rootValue = envFileValue(path.join(resolvePaths().root, '.env'), typedName);
+    const localSelections = [
+        [readOverride(typedName, aid), 'ipc-process'],
+        [agentValue, 'agent-env'],
+        [projectValue, 'project-env'],
+        [rootValue, 'root-env'],
+    ];
+    const local = localSelections.find(([value]) => value !== undefined && value !== '');
+    if (local) {
+        const result = { name: typedName, value: local[0], source: local[1], checkedAt: now };
+        cache.set(cacheKey, { result, expires: now + 3000 });
+        return result;
+    }
+    const startup = startupValues.get(typedName);
+    const user = windowsValue('user', typedName);
+    const machine = windowsValue('machine', typedName);
+    const selections = [
+        [user && user !== startup ? user : undefined, 'windows-user'],
+        [machine && machine !== startup ? machine : undefined, 'windows-machine'],
+        [startup, 'process-startup'],
+        [user, 'windows-user'],
+        [machine, 'windows-machine'],
+    ];
+    const selected = selections.find(([value]) => value !== undefined && value !== '');
+    const result = {
+        name: typedName,
+        value: selected?.[0],
+        source: selected?.[1] ?? 'unset',
+        checkedAt: now,
+    };
+    cache.set(cacheKey, { result, expires: now + 3000 });
+    return result;
+}
+export function setRuntimeEnvironmentOverride(aid, values) {
+    const scope = normalizeScope(aid);
+    const next = new Map(overrides.get(scope));
+    for (const name of RUNTIME_ENVIRONMENT_NAMES) {
+        if (!Object.prototype.hasOwnProperty.call(values, name))
+            continue;
+        const value = values[name]?.trim();
+        if (value)
+            next.set(name, value);
+        else
+            next.delete(name);
+    }
+    if (next.size)
+        overrides.set(scope, next);
+    else
+        overrides.delete(scope);
+    cache.clear();
+}
+export function resetRuntimeEnvironmentForTests() {
+    overrides.clear();
+    cache.clear();
+    captureStartupValues();
+}

package/dist/config/schema-registry.js

@@ -99,12 +99,20 @@ function schemaFilePath(name, version) {
     return path.join(kitsSchemasDir(), `${name}.schema.${version}.json`);
 }
 function extractFields(raw) {
+    return extractFieldsFromProps(raw.properties || {});
+}
+function extractFieldsFromProps(props) {
     const fields = new Map();
-    const props = raw.properties || {};
     for (const [name, spec] of Object.entries(props)) {
         if (name === '$schema_version')
             continue;
         const merge = spec['x-merge'] || inferMerge(spec);
+        const mergeLogic = spec['x-merge-logic'] === 'AND' ? 'AND' : undefined;
+        // 递归提取嵌套 object 字段的子字段，用于 mergeLayers 感知嵌套字段的 x-merge-logic
+        const childProps = spec.properties;
+        const children = (childProps && typeof childProps === 'object')
+            ? extractFieldsFromProps(childProps)
+            : undefined;
         fields.set(name, {
             name,
             type: spec.type,
@@ -112,6 +120,8 @@ function extractFields(raw) {
             enum: spec.enum,
             default: spec.default,
             description: spec.description,
+            ...(mergeLogic ? { mergeLogic } : {}),
+            ...(children && children.size > 0 ? { children } : {}),
         });
     }
     return fields;

package/dist/config-store.js

@@ -57,8 +57,8 @@ export function loadDaemonConfig() {
     const sanitized = stripLegacyAunGatewayConfig(raw ?? {}, resolvePaths().daemonConfig, message => logger.warn(message));
     return validateDaemonConfig(normalizeProcessConfigCompat(normalizeDaemonServices(sanitized)), false);
 }
-export function isFullAccessEnabled(config = loadDaemonConfig()) {
-    return config.fullaccess?.enabled === undefined || config.fullaccess.enabled === true;
+export function isRestartRecoveryEnabled(config = loadDaemonConfig()) {
+    return config.restartRecovery?.enabled === true;
 }
 let eckSnapshotsConfigCache;
 /** Parse the process-level snapshot gate once for the current daemon lifecycle. */
@@ -91,16 +91,16 @@ export function saveDaemonConfig(value) {
     atomicWriteJson(configPath, validateDaemonConfig({ ...normalized, $schema_version: currentVersion('daemon') }, validateAidDomain));
 }
 function validateDaemonConfig(value, validateAidDomain) {
-    if (value.fullaccess !== undefined) {
-        if (!value.fullaccess || typeof value.fullaccess !== 'object' || Array.isArray(value.fullaccess)) {
-            throw new Error('daemon.json.fullaccess must be an object');
+    if (value.restartRecovery !== undefined) {
+        if (!value.restartRecovery || typeof value.restartRecovery !== 'object' || Array.isArray(value.restartRecovery)) {
+            throw new Error('daemon.json.restartRecovery must be an object');
         }
-        const unknownFullAccessFields = Object.keys(value.fullaccess).filter(key => key !== 'enabled');
-        if (unknownFullAccessFields.length > 0) {
-            throw new Error(`daemon.json.fullaccess contains unsupported fields: ${unknownFullAccessFields.join(', ')}`);
+        const unknownRestartRecoveryFields = Object.keys(value.restartRecovery).filter(key => key !== 'enabled');
+        if (unknownRestartRecoveryFields.length > 0) {
+            throw new Error('daemon.json.restartRecovery contains unsupported fields: ' + unknownRestartRecoveryFields.join(', '));
         }
-        if (value.fullaccess.enabled !== undefined && typeof value.fullaccess.enabled !== 'boolean') {
-            throw new Error('daemon.json.fullaccess.enabled must be a boolean');
+        if (value.restartRecovery.enabled !== undefined && typeof value.restartRecovery.enabled !== 'boolean') {
+            throw new Error('daemon.json.restartRecovery.enabled must be a boolean');
         }
     }
     const minEvolVersion = value.aun?.minEvolVersion;

package/dist/core/audit/event-key.js

@@ -40,5 +40,7 @@ export function buildAuthorizationEventKey(input) {
             requestId: input.requestId,
         })}:authorization:${stableDigest([input.operation])}`;
     }
-    return `authorization:${stableDigest([input.sessionId ?? 'unknown', input.operation])}`;
+    // Anonymous authorizations cannot be joined safely. Keep them as distinct
+    // records so daily analysis never merges unrelated calls by session/operation.
+    return `authorization:unlinked:${crypto.randomUUID()}`;
 }

package/dist/core/audit/log-integrity.js

@@ -137,6 +137,10 @@ function stableHash(value) {
         permissionMode: firstDefined(value, nested, ['permissionMode', 'permission_mode']),
         isError: firstDefined(value, nested, ['isError', 'is_error']) ?? (value.ok === false || nested?.ok === false ? true : undefined),
         errorCode: firstDefined(value, nested, ['errorCode', 'error_code']),
+        errorDetailCode: firstDefined(value, nested, ['errorDetailCode', 'detail_code', 'detailCode']),
+        classificationMissing: firstDefined(value, nested, ['classificationMissing', 'classification_missing']),
+        classificationConflict: firstDefined(value, nested, ['classificationConflict', 'classification_conflict']),
+        exitCode: firstDefined(value, nested, ['exitCode', 'exit_code']),
         decision: firstDefined(value, nested, ['decision']),
         decisionSource: firstDefined(value, nested, ['decisionSource', 'decision_source']),
         policyCode: firstDefined(value, nested, ['policyCode', 'policy_code']),

package/dist/core/auth/agent-delegation.js

@@ -3,6 +3,7 @@ import crypto from 'crypto';
 import { authorizeOperation, buildAuthSubject } from './auth-gateway.js';
 import { formatPeerKey, parsePeerKey } from '../relation/peer-identity.js';
 import { logger } from '../../utils/logger.js';
+import { canonicalizeEvolcoreCommandArgv } from '../permission/ec-command-parser.js';
 export const AGENT_DELEGATION_TOKEN_ENV = 'EVOLCORE_DELEGATION_TOKEN';
 export const CODEX_SESSION_TOKEN_ENV = 'EVOLCORE_CODEX_SESSION_TOKEN';
 export const AGENT_DELEGATION_COMMAND_TTL_MS = 5 * 60_000;
@@ -279,5 +280,5 @@ export function hashDelegatedCommandArgv(argv) {
 export function hashCurrentDelegatedCommand(processArgv = process.argv) {
     if (processArgv.length < 3)
         return undefined;
-    return hashDelegatedCommandArgv(['ec', ...processArgv.slice(2)]);
+    return hashDelegatedCommandArgv(canonicalizeEvolcoreCommandArgv(['ec', ...processArgv.slice(2)]));
 }

package/dist/core/auth/auth-gateway.js

@@ -76,6 +76,7 @@ export function buildAuthSubject(input) {
             : roleDetail.allowAccess && checkRoleAccess(role, input.selfAid)),
         canApprovePersistentFullAccess: input.canApprovePersistentFullAccess
             ?? (isDaemonOwner && !isDaemonService),
+        auditMetadata: input.auditMetadata,
         permissionMode: isFullAccessRun
             ? 'fullaccess'
             : input.permissionMode
@@ -184,9 +185,12 @@ function resolveRoleDetail(input) {
     });
 }
 function auditDecision(params, decision) {
+    const roleDenial = !decision.allow && decision.code === 'ROLE_ACCESS_DENIED';
     auditCommandAuthorization({
         ts: Date.now(),
         ...params.auditMetadata,
+        ...params.subject.auditMetadata,
+        eventPhase: params.auditMetadata?.eventPhase ?? 'final',
         correlationId: params.auditMetadata?.correlationId ?? params.auditMetadata?.requestId ?? params.subject.requestId,
         requestId: params.auditMetadata?.requestId ?? params.subject.requestId,
         sessionId: params.auditMetadata?.sessionId ?? params.subject.sessionId,
@@ -198,13 +202,16 @@ function auditDecision(params, decision) {
         errorCode: params.auditMetadata?.errorCode
             ?? (decision.allow
                 ? undefined
-                : params.auditMetadata?.decisionSource === 'approval'
-                    ? 'USER_DENIED'
-                    : params.auditMetadata?.decisionSource === 'infrastructure'
-                        ? 'EXECUTION_FAILED'
-                        : 'POLICY_DENIED'),
+                : roleDenial
+                    ? 'ROLE_DENIED'
+                    : params.auditMetadata?.decisionSource === 'approval'
+                        ? 'USER_DENIED'
+                        : params.auditMetadata?.decisionSource === 'infrastructure'
+                            ? 'EXECUTION_FAILED'
+                            : 'POLICY_DENIED'),
         policyCode: params.auditMetadata?.policyCode ?? (decision.allow ? undefined : decision.code),
-        decisionSource: params.auditMetadata?.decisionSource ?? (decision.allow ? 'command' : 'policy'),
+        decisionSource: params.auditMetadata?.decisionSource
+            ?? (decision.allow ? 'command' : roleDenial ? 'role' : 'policy'),
         source: params.source,
         operation: params.intent.operation,
         scope: params.intent.scope,