evolcore 0.0.4 → 0.0.6

package/dist/cli/init.js

@@ -1,4 +1,5 @@
 import fs from 'fs';
+import os from 'os';
 import path from 'path';
 import readline from 'readline';
 import { resolvePaths, ensureDataDirs } from '../paths.js';
@@ -7,28 +8,54 @@ import { scanInstances } from '../utils/instance-registry.js';
 import { saveDefaultsSafe, loadAllAgents, loadDaemonConfig, saveDaemonConfig } from '../config-store.js';
 import { generateControlAid, resolveControlIssuer } from '../aun/aid/control-aid.js';
 import { getCodexAppServerAvailability, isCodexAppServerAvailable } from '../agents/codex-runner.js';
+import { resolveEcagentConfig } from '../agents/baseagent.js';
 import { defaultProjectsRoot } from '../utils/project-path.js';
 import { WEB_CLI_BIN, WEB_PACKAGE_LATEST } from '../product.js';
 // ==================== Helpers ====================
 function ask(rl, question) {
     return new Promise(resolve => rl.question(question, resolve));
 }
-const BASEAGENT_CANDIDATES = ['claude', 'codex', 'gemini'];
+/** 展开用户在交互式输入中使用的 home 目录简写（shell 不会替 readline 自动做这件事）。 */
+export function expandLeadingTildePath(value, homeDir = os.homedir()) {
+    if (value === '~')
+        return homeDir;
+    if (value.startsWith('~/') || value.startsWith('~\\')) {
+        return path.join(homeDir, value.slice(2));
+    }
+    return value;
+}
+const BASEAGENT_CANDIDATES = ['claude', 'codex', 'gemini', 'ecagent'];
+const AUTO_BASEAGENT_CANDIDATES = ['claude', 'codex', 'gemini'];
 function isBaseagentAvailable(baseagent) {
     if (baseagent === 'codex')
         return isCodexAppServerAvailable();
+    if (baseagent === 'ecagent')
+        return true;
     return commandExists(baseagent);
 }
 function detectAvailable() {
     return BASEAGENT_CANDIDATES.filter(isBaseagentAvailable);
 }
 function pickDefault(available) {
-    return (available.includes('claude') ? 'claude' : available[0]);
+    return AUTO_BASEAGENT_CANDIDATES.find(candidate => available.includes(candidate));
+}
+function ecagentUnavailableReason() {
+    try {
+        resolveEcagentConfig({ agents: { ecagent: {} } });
+        return undefined;
+    }
+    catch (error) {
+        return error instanceof Error ? error.message : String(error);
+    }
 }
 function buildDefaults(chosen, available, projectsDefaultPath) {
     const baseagents = {};
-    for (const b of available)
+    for (const b of available) {
+        // ecagent is bundled but opt-in; do not declare it merely because it is available.
+        if (b === 'ecagent' && chosen !== 'ecagent')
+            continue;
         baseagents[b] = {};
+    }
     return {
         $schema_version: 1,
         active_baseagent: chosen,
@@ -94,7 +121,7 @@ export async function cmdInit(options) {
     // 云部署非交互式路径：当带 --owner 或 --format json 时走结构化分支，与交互式 tail 完全隔离。
     // 预留方案 B：当 daemon 支持 Control Plane 无 agent 启动时，可在此分支跳过 agent new 预创建。
     if (options?.nonInteractive && (options.owner || options.format === 'json' || options.projectpath || options.ecweb)) {
-        return cmdInitNonInteractive({
+        await cmdInitNonInteractive({
             owner: options.owner,
             baseagent: options.baseagent,
             projectpath: options.projectpath,
@@ -102,6 +129,7 @@ export async function cmdInit(options) {
             force: options.force,
             format: options.format,
         });
+        return true;
     }
     const p = resolvePaths();
     ensureDataDirs();
@@ -110,17 +138,17 @@ export async function cmdInit(options) {
     if (aliveMains.length > 0) {
         const pids = aliveMains.map(m => m.record.pid).join(', ');
         console.log(`❌ EvolCore 正在运行 (PID: ${pids})，请先执行 ec stop`);
-        return;
+        return false;
     }
     // ── 2. 探测 baseagent ──
     const available = detectAvailable();
-    if (available.length === 0) {
+    if (available.length === 0 || (available.length === 1 && available[0] === 'ecagent' && ecagentUnavailableReason())) {
         console.log('❌ 未检测到可用 baseagent。请安装至少一款：');
         console.log('  - claude CLI');
         console.log('  - gemini CLI');
         console.log('  - codex CLI with app-server');
         console.log('\n安装后重新运行 ec init');
-        return;
+        return false;
     }
     console.log('检测到可用的 baseagent:');
     for (const b of available)
@@ -142,19 +170,31 @@ export async function cmdInit(options) {
             if (options.baseagent) {
                 if (!BASEAGENT_CANDIDATES.includes(options.baseagent)) {
                     console.log(`❌ 无效 baseagent: ${options.baseagent}（可选: ${BASEAGENT_CANDIDATES.join('/')}）`);
-                    return; // 硬错误：不落 tail
+                    return false; // 硬错误：不落 tail
                 }
                 if (!available.includes(options.baseagent)) {
                     const reason = options.baseagent === 'codex'
                         ? getCodexAppServerAvailability().reason
                         : undefined;
                     console.log(`❌ ${options.baseagent} 当前环境不可用${reason ? `：${reason}` : `（可用: ${available.join('/')}）`}`);
-                    return; // 硬错误：不落 tail
+                    return false; // 硬错误：不落 tail
+                }
+                if (options.baseagent === 'ecagent') {
+                    const reason = ecagentUnavailableReason();
+                    if (reason) {
+                        console.log(`❌ ecagent 当前环境不可用：${reason}`);
+                        return false;
+                    }
                 }
                 chosen = options.baseagent;
             }
             else {
-                chosen = pickDefault(available);
+                const defaultBaseagent = pickDefault(available);
+                if (!defaultBaseagent) {
+                    console.log('❌ ecagent 为可选 baseagent，请显式使用 --baseagent ecagent，并配置 API key');
+                    return false;
+                }
+                chosen = defaultBaseagent;
             }
             writeDefaults(chosen, available);
             console.log(`✓ 已${defaultsExisted ? '覆盖' : '创建'}: ${defaultsPath}`);
@@ -167,19 +207,24 @@ export async function cmdInit(options) {
         await runInteractive();
     }
     // ── 共享 tail（单一出口）：提示创建 agent + 生成控制 AID ──
-    await initTail();
+    return initTail({ invokedByStart: options?.invokedByStart });
     // ── 内部函数 ──
     async function runInteractive() {
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         async function askBaseagent() {
             const defaultBa = pickDefault(available);
-            if (available.length === 1) {
+            if (available.length === 1 && defaultBa) {
                 console.log(`  baseagent: ${defaultBa}`);
                 return defaultBa;
             }
             let chosen = null;
             while (chosen === null) {
-                const input = (await ask(rl, `默认 baseagent (${available.join('/')}) [${defaultBa}]: `)).trim() || defaultBa;
+                const defaultHint = defaultBa ? ` [${defaultBa}]` : '';
+                const input = (await ask(rl, `默认 baseagent (${available.join('/')})${defaultHint}: `)).trim() || defaultBa;
+                if (!input) {
+                    console.log('  ecagent 为可选项，请显式输入 ecagent');
+                    continue;
+                }
                 if (!BASEAGENT_CANDIDATES.includes(input)) {
                     console.log(`  无效选择，可选: ${BASEAGENT_CANDIDATES.join('/')}`);
                     continue;
@@ -188,35 +233,49 @@ export async function cmdInit(options) {
                     console.log(`  ${input} 当前环境不可用（可用: ${available.join('/')}）`);
                     continue;
                 }
+                if (input === 'ecagent') {
+                    const reason = ecagentUnavailableReason();
+                    if (reason) {
+                        console.log(`  ecagent 当前环境不可用：${reason}`);
+                        continue;
+                    }
+                }
                 chosen = input;
             }
             return chosen;
         }
         async function askProjectsDefaultPath() {
             const defaultDir = path.join(defaultProjectsRoot(p.root), 'default');
-            const input = (await ask(rl, `项目默认目录 [${defaultDir}]: `)).trim();
-            const resolved = input || defaultDir;
-            if (!path.isAbsolute(resolved)) {
-                console.log('  ⚠ 需要绝对路径，已跳过');
-                return undefined;
-            }
-            if (!fs.existsSync(resolved)) {
-                const create = (await ask(rl, `  目录不存在，是否创建？[Y/n]: `)).trim().toLowerCase();
-                if (create === '' || create === 'y' || create === 'yes') {
-                    try {
-                        fs.mkdirSync(resolved, { recursive: true });
+            while (true) {
+                const input = (await ask(rl, `项目默认目录 [${defaultDir}]（输入 skip 跳过）: `)).trim();
+                if (input.toLowerCase() === 'skip') {
+                    console.log('  已跳过项目默认目录配置');
+                    return undefined;
+                }
+                const resolved = expandLeadingTildePath(input || defaultDir);
+                if (!path.isAbsolute(resolved)) {
+                    console.log('  ⚠ 请输入绝对路径或回车使用默认值；输入 skip 可跳过');
+                    continue;
+                }
+                if (!fs.existsSync(resolved)) {
+                    const create = (await ask(rl, `  目录不存在，是否创建？[Y/n]: `)).trim().toLowerCase();
+                    if (create === '' || create === 'y' || create === 'yes') {
+                        try {
+                            fs.mkdirSync(resolved, { recursive: true });
+                        }
+                        catch (e) {
+                            console.log(`  ⚠ 创建目录失败: ${e?.message || e}`);
+                            continue;
+                        }
+                        console.log(`  ✓ 已创建 ${resolved}`);
                     }
-                    catch (e) {
-                        console.log(`  ⚠ 创建目录失败: ${e?.message || e}`);
-                        return undefined;
+                    else {
+                        console.log('  未创建目录，请重新输入路径；输入 skip 可跳过');
+                        continue;
                     }
-                    console.log(`  ✓ 已创建 ${resolved}`);
-                }
-                else {
-                    return undefined;
                 }
+                return resolved;
             }
-            return resolved;
         }
         try {
             if (defaultsExisted) {
@@ -249,15 +308,16 @@ export async function cmdInit(options) {
     }
 }
 /** 补全控制 AID + owners（可单独调用，不走 baseagent 向导）。 */
-export async function initTail() {
+export async function initTail(options = {}) {
     // 提示创建 agent（两分支汇合后执行一次）
     const { agents } = loadAllAgents();
-    if (agents.length === 0) {
+    if (agents.length === 0 && !options.invokedByStart) {
         console.log('\n提示：尚无 agent，运行以下命令创建：');
         console.log('  ec agent new <aid>.agentid.pub');
     }
     // 控制 AID：daemon 进程身份。缺失则生成并写回 daemon.json（幂等：已存在则跳过）。
     const daemonConfig = loadDaemonConfig();
+    let controlAidReady = !!daemonConfig.aid;
     if (daemonConfig.aid) {
         const targetIssuer = resolveControlIssuer();
         const currentIssuer = daemonConfig.aid.split('.').slice(1).join('.');
@@ -271,10 +331,12 @@ export async function initTail() {
         try {
             const { aid } = await generateControlAid();
             saveDaemonConfig({ ...daemonConfig, $schema_version: daemonConfig.$schema_version ?? 1, aid });
+            controlAidReady = true;
             console.log(`✓ 已生成控制 AID: ${aid}`);
         }
         catch (e) {
             console.error(`⚠️ 控制 AID 生成失败（Gateway 不可达？联网后重跑 ec init 补全）: ${e?.message || e}`);
+            controlAidReady = false;
         }
     }
     // 交互式询问：使用单一 readline 实例避免 stdin 状态混乱
@@ -368,6 +430,13 @@ export async function initTail() {
             }
         }
     }
+    // ec start 会接着启动 daemon，并在其 ready 后给出可用的 Agent 创建入口。
+    if (options.invokedByStart)
+        return controlAidReady;
+    if (!controlAidReady) {
+        console.error('\n❌ EvolCore 初始化未完成：控制 AID 未配置。联网后重新运行 ec init。');
+        return false;
+    }
     // 初始化完成总结
     console.log('\n✓ EvolCore 初始化完成');
     const finalCfg = loadDaemonConfig();
@@ -385,6 +454,7 @@ export async function initTail() {
         console.log(`\n✓ 已有 ${finalAgents.length} 个 agent，可直接运行:`);
         console.log('  ec start');
     }
+    return controlAidReady;
 }
 /**
  * Present instance selection menu when existing instances are found.
@@ -480,8 +550,8 @@ export async function cmdInitNonInteractive(opts, dependencies = {}) {
     }
     // ── 3. baseagent 探测 + 校验 ──
     const available = dependencies.availableBaseagents ?? detectAvailable();
-    if (available.length === 0) {
-        fail('BASEAGENT_UNAVAILABLE', 'no baseagent CLI detected (install claude/codex/gemini)', EXIT_USAGE, format);
+    if (available.length === 0 || (available.length === 1 && available[0] === 'ecagent' && ecagentUnavailableReason())) {
+        fail('BASEAGENT_UNAVAILABLE', 'no usable baseagent detected (install claude/codex/gemini or configure bundled ecagent)', EXIT_USAGE, format);
     }
     let chosenBaseagent;
     if (opts.baseagent) {
@@ -492,10 +562,19 @@ export async function cmdInitNonInteractive(opts, dependencies = {}) {
             const reason = opts.baseagent === 'codex' ? getCodexAppServerAvailability().reason : undefined;
             fail('BASEAGENT_UNAVAILABLE', `${opts.baseagent} not available${reason ? `: ${reason}` : ''}`, EXIT_USAGE, format);
         }
+        if (opts.baseagent === 'ecagent') {
+            const reason = ecagentUnavailableReason();
+            if (reason)
+                fail('BASEAGENT_UNAVAILABLE', reason, EXIT_USAGE, format);
+        }
         chosenBaseagent = opts.baseagent;
     }
     else {
-        chosenBaseagent = pickDefault(available);
+        const defaultBaseagent = pickDefault(available);
+        if (!defaultBaseagent) {
+            fail('BASEAGENT_UNAVAILABLE', 'ecagent is optional; pass --baseagent ecagent after configuring its API key', EXIT_USAGE, format);
+        }
+        chosenBaseagent = defaultBaseagent;
     }
     // ── 4. projectpath 校验 + 创建 ──
     let projectsDefaultPath;

package/dist/cli/net-check.js

@@ -307,31 +307,20 @@ async function runCheck(aid, formatJson, kickTest) {
         // 统计每个 AID 的总消息活跃度（遍历所有本地 AID 的 sessions）
         const { resolvePaths } = await import('../paths.js');
         const p = resolvePaths();
-        const sessAunDir = path.join(p.sessionsDir, 'aun');
-        const encode = (s) => s.replace(/[/%\\:*?"<>|]/g, ch => '%' + ch.charCodeAt(0).toString(16).toUpperCase().padStart(2, '0'));
-        const decode = (s) => s.replace(/%([0-9A-Fa-f]{2})/g, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
+        const { scanChatDirs } = await import('../core/session/session-fs-store.js');
         function getGlobalMessageCounts() {
             const counts = new Map();
             try {
-                const localDirs = fs.readdirSync(sessAunDir, { withFileTypes: true });
-                for (const localDir of localDirs) {
-                    if (!localDir.isDirectory())
+                for (const chat of scanChatDirs(p.sessionsDir)) {
+                    if (chat.channelType !== 'aun')
                         continue;
-                    const localAid = decode(localDir.name);
-                    const peerDirs = fs.readdirSync(path.join(sessAunDir, localDir.name), { withFileTypes: true });
-                    for (const peerDir of peerDirs) {
-                        if (!peerDir.isDirectory())
-                            continue;
-                        const peerId = decode(peerDir.name);
-                        const msgFile = path.join(sessAunDir, localDir.name, peerDir.name, 'messages.jsonl');
-                        try {
-                            const content = fs.readFileSync(msgFile, 'utf-8');
-                            const lineCount = content.split('\n').filter(l => l.trim()).length;
-                            counts.set(peerId, (counts.get(peerId) ?? 0) + lineCount);
-                            counts.set(localAid, (counts.get(localAid) ?? 0) + lineCount);
-                        }
-                        catch { }
+                    const msgFile = path.join(chat.dirPath, 'messages.jsonl');
+                    try {
+                        const lineCount = fs.readFileSync(msgFile, 'utf-8').split('\n').filter(l => l.trim()).length;
+                        counts.set(chat.channelId, (counts.get(chat.channelId) ?? 0) + lineCount);
+                        counts.set(chat.selfAID, (counts.get(chat.selfAID) ?? 0) + lineCount);
                     }
+                    catch { }
                 }
             }
             catch { }

package/dist/cli/restart-monitor.js

@@ -2,7 +2,7 @@ import fs from 'fs';
 import path from 'path';
 import { spawn, execFile } from 'child_process';
 import { promisify } from 'util';
-import { resolvePaths, getPackageRoot } from '../paths.js';
+import { resolvePaths, getPackageRoot, daemonControlDir } from '../paths.js';
 import { loadDaemonConfig } from '../config-store.js';
 import * as platform from '../utils/cross-platform.js';
 import { EventBus } from '../core/event-bus.js';
@@ -14,6 +14,7 @@ import { scanInstances, cleanupInstances, writeRestartMonitor, removeRestartMoni
 import { WEB_PACKAGE_NAME } from '../product.js';
 import { shouldSuppressRealRestart } from '../utils/restart-safety.js';
 import { rotateStdoutLog } from '../utils/log-writer.js';
+import { inspectDataMigrationRequirement } from '../core/data-migration.js';
 const execFileAsync = promisify(execFile);
 // 清理 Claude Code 环境变量，防止 SDK 认为是嵌套会话
 function cleanEnv() {
@@ -72,6 +73,14 @@ export async function cmdRestartMonitor() {
         return s.mains.some(m => m.alive);
     };
     log('Restart monitor started');
+    const migrationRequirement = inspectDataMigrationRequirement(p.root);
+    if (migrationRequirement.required) {
+        const message = `Pending user-data migration (${migrationRequirement.operationCount} operations); leaving the current service running. Run ec data migrate --dry-run, then ec data migrate --apply.`;
+        log(message);
+        console.error(`❌ ${message}`);
+        process.exitCode = 2;
+        return;
+    }
     // Test daemons live in one temporary HOME per test, so the current HOME's
     // instance registry cannot see them. Their strict environment markers make
     // them safe to reap globally on every real restart.
@@ -84,7 +93,7 @@ export async function cmdRestartMonitor() {
         }
     }
     // restart-pending.json 只留给新主进程发送发起会话内的“重启成功”回执。
-    const pendingFile = path.join(p.dataDir, 'restart-pending.json');
+    const pendingFile = path.join(daemonControlDir(), 'restart-pending.json');
     // 等待所有活 main 进程退出（可能不止一个）
     const oldStatus = scanInstances();
     const aliveMains = oldStatus.mains.filter(m => m.alive);

package/dist/cli/trigger-command.js

@@ -110,7 +110,7 @@ Create 参数模式支持:
   --tz <时区> (仅 cron)
   --target-channel <channelKey> --target-channel-id <ID>  (AUN 可简写为 aun)
   --target-session <main|thread> [--target-thread-id <threadId>]
-  --trigger-thread <per-run|by-trigger>
+  --trigger-thread <by-run|by-trigger>  (兼容旧值 per-run)
   --name <名称>
 
 通用输出参数:

package/dist/cli/watch-msg.js

@@ -1,7 +1,7 @@
 import fs from 'fs';
 import path from 'path';
 import { resolvePaths } from '../paths.js';
-import { decodeDirSegment, readAllJsonlLines } from '../core/session/session-fs-store.js';
+import { chatDirPath, readAllJsonlLines, scanChatDirs } from '../core/session/session-fs-store.js';
 import { isTransientProtocolMessage } from '../core/message/message-log.js';
 // ==================== ANSI ====================
 const isTTY = !!process.stdout.isTTY;
@@ -135,36 +135,26 @@ function shortAid(aid) {
 // ==================== Data Layer ====================
 export function getSessionsAunDir() {
     const p = resolvePaths();
-    return path.join(p.sessionsDir, 'aun');
+    return p.sessionsDir;
 }
 export function listLocalAids(aunDir) {
-    try {
-        return fs.readdirSync(aunDir, { withFileTypes: true })
-            .filter(e => e.isDirectory())
-            .map(e => decodeDirSegment(e.name));
-    }
-    catch {
-        return [];
-    }
+    return [...new Set(scanChatDirs(aunDir)
+            .filter(chat => chat.channelType === 'aun')
+            .map(chat => chat.selfAID))].sort();
 }
 export function listPeers(aunDir, localAid) {
-    const aidDir = path.join(aunDir, encodeSegment(localAid));
-    try {
-        return fs.readdirSync(aidDir, { withFileTypes: true })
-            .filter(e => e.isDirectory() && !e.name.startsWith('_'))
-            .map(e => decodeDirSegment(e.name));
-    }
-    catch {
-        return [];
-    }
+    return scanChatDirs(aunDir)
+        .filter(chat => chat.channelType === 'aun' && chat.selfAID === localAid)
+        .map(chat => chat.channelId)
+        .sort();
 }
 export function readMessages(aunDir, localAid, peerId) {
-    const msgPath = path.join(aunDir, encodeSegment(localAid), encodeSegment(peerId), 'messages.jsonl');
+    const msgPath = path.join(chatDirPath(aunDir, 'aun', peerId, localAid), 'messages.jsonl');
     return readAllJsonlLines(msgPath)
         .filter(m => !isTransientProtocolMessage(m));
 }
 function readPeerName(aunDir, localAid, peerId) {
-    const activePath = path.join(aunDir, encodeSegment(localAid), encodeSegment(peerId), 'active.json');
+    const activePath = path.join(chatDirPath(aunDir, 'aun', peerId, localAid), 'active.json');
     try {
         const data = JSON.parse(fs.readFileSync(activePath, 'utf-8'));
         return data?.metadata?.peerName || null;
@@ -173,9 +163,6 @@ function readPeerName(aunDir, localAid, peerId) {
         return null;
     }
 }
-function encodeSegment(s) {
-    return s.replace(/[/%\\:*?"<>|]/g, ch => '%' + ch.charCodeAt(0).toString(16).toUpperCase().padStart(2, '0'));
-}
 export function loadAidInfo(aunDir, aid) {
     const peers = listPeers(aunDir, aid);
     let totalIn = 0, totalOut = 0;
@@ -457,7 +444,7 @@ export async function cmdWatchMsg() {
             watcher.close();
             watcher = null;
         }
-        const aidDir = path.join(aunDir, encodeSegment(aid));
+        const aidDir = path.dirname(path.dirname(chatDirPath(aunDir, 'aun', '__watch__', aid)));
         try {
             watcher = fs.watch(aidDir, { recursive: true }, (_, filename) => {
                 if (filename && filename.endsWith('messages.jsonl')) {

package/dist/config/access-policy-domain.js

@@ -4,18 +4,6 @@ export function validAgentOwnerIds(agent) {
             .map(value => String(value || '').trim())
             .filter(isValidAid))];
 }
-export function configuredChannelKeys(selfAid, agent) {
-    const keys = (agent?.channels ?? [])
-        .filter(channel => channel && channel.enabled !== false)
-        .map(channel => {
-        const type = String(channel.type || '').trim().toLowerCase();
-        const name = String(channel.name || '').trim();
-        return type && name ? `${type}#${selfAid}#${name}` : '';
-    })
-        .filter(Boolean);
-    keys.push(`aun#${selfAid}#main`);
-    return [...new Set(keys)];
-}
 export function validateAccessPolicyDomain(selfAid, agent) {
     const access = agent.access;
     if (!access)
@@ -26,13 +14,5 @@ export function validateAccessPolicyDomain(selfAid, agent) {
             message: `Agent ${selfAid} cannot use ${access.policyMode} without an Owner`,
         };
     }
-    const configured = new Set(configuredChannelKeys(selfAid, agent));
-    const unknown = access.allowedGroupChannels.find(channelKey => !configured.has(channelKey));
-    if (unknown) {
-        return {
-            code: 'unknown_group_access_channel',
-            message: `Group access channel is not configured or enabled for ${selfAid}: ${unknown}`,
-        };
-    }
     return undefined;
 }

package/dist/config/access-policy.js

@@ -1,6 +1,6 @@
 import crypto from 'crypto';
 import { ConfigError, ConfigTarget, mutateConfig, read, validateConfig, } from './config-manager.js';
-import { configuredChannelKeys, validAgentOwnerIds, validateAccessPolicyDomain, } from './access-policy-domain.js';
+import { validAgentOwnerIds, validateAccessPolicyDomain, } from './access-policy-domain.js';
 export class AccessPolicyError extends Error {
     code;
     data;
@@ -13,20 +13,13 @@ export class AccessPolicyError extends Error {
 }
 export const DEFAULT_ACCESS_POLICY = Object.freeze({
     policyMode: 'open',
-    allowedGroupChannels: Object.freeze([]),
     requestLimit: Object.freeze({ maxTimes: 600, coolDown: 60 * 60 }),
 });
 export function listAgentOwners(selfAid) {
     const agent = read(ConfigTarget.Agent, { self: selfAid }, { cache: true });
     return validAgentOwnerIds(agent);
 }
-export function listConfiguredChannelKeys(selfAid) {
-    const agent = read(ConfigTarget.Agent, { self: selfAid }, { cache: true });
-    if (!agent)
-        return [];
-    return configuredChannelKeys(selfAid, agent);
-}
-/** Missing AgentConfig.access uses the compatibility view; malformed Agent config never does. */
+/** Missing AgentConfig.access uses the default open policy; malformed Agent config never does. */
 export function readAccessPolicy(selfAid) {
     return readAccessPolicySnapshot(selfAid).policy;
 }
@@ -49,7 +42,7 @@ export function mutateAccessPolicy(input) {
                 });
             }
             const next = input.update(clonePolicy(current.policy));
-            assertAccessPolicyWrite(input, agent, current.policy, next);
+            assertAccessPolicyWrite(input, agent, next);
             agent.access = clonePolicy(next);
             return {
                 policy: clonePolicy(next),
@@ -85,37 +78,20 @@ function accessPolicySnapshotFromAgent(selfAid, agent) {
     const policy = clonePolicy(access);
     return { policy, accessRevision: accessPolicyRevision(policy) };
 }
-function assertAccessPolicyWrite(input, agent, current, policy) {
+function assertAccessPolicyWrite(input, agent, policy) {
     const owners = validAgentOwnerIds(agent);
     const normalizedActorAid = String(input.actorAid || '').trim();
     const isOwner = input.actorRole === 'owner' || owners.includes(normalizedActorAid);
-    const isGroupChannelAdmin = input.actorRole === 'admin' && input.resource === 'access.allowedGroupChannels';
-    if (!isOwner && !isGroupChannelAdmin) {
-        if (input.resource === 'access.allowedGroupChannels') {
-            throw new AccessPolicyError('access_policy_manager_required', 'Only an Agent Owner or Admin can change allowed group channels');
-        }
+    if (!isOwner) {
         throw new AccessPolicyError('access_policy_owner_required', 'Only an Agent Owner can change access policy');
     }
-    if (isGroupChannelAdmin) {
-        if (current.policyMode !== policy.policyMode
-            || current.requestLimit.maxTimes !== policy.requestLimit.maxTimes
-            || current.requestLimit.coolDown !== policy.requestLimit.coolDown) {
-            throw new AccessPolicyError('access_policy_owner_required', 'An Agent Admin may only change allowed group channels');
-        }
-    }
     if (policy.policyMode !== 'open' && owners.length === 0) {
         throw new AccessPolicyError('restricted_mode_without_owner', `Agent ${input.selfAid} cannot use ${policy.policyMode} without an Owner`);
     }
-    const configured = new Set(configuredChannelKeys(input.selfAid, agent));
-    const unknown = policy.allowedGroupChannels.find(channelKey => !configured.has(channelKey));
-    if (unknown) {
-        throw new AccessPolicyError('unknown_group_access_channel', `Group access channel is not configured or enabled for ${input.selfAid}: ${unknown}`);
-    }
 }
 function clonePolicy(policy) {
     return {
         policyMode: policy.policyMode,
-        allowedGroupChannels: [...policy.allowedGroupChannels],
         requestLimit: { ...policy.requestLimit },
     };
 }

package/dist/config/builtin-roles.js

@@ -40,7 +40,9 @@ export function getManagementCommandPermissions(role) {
         'config.unset': { allow: true, scopes: ['agent', 'relation'] },
         'role.policy.write': { allow: true, dangerous: true, scopes: ['agent'], constraints: { requireAgentAdmin: true } },
         '*': { allow: true },
-        'agent.reload': { allow: true, dangerous: true, scopes: ['agent'], constraints: { targetCurrentAgentOnly: true, requireAgentAdmin: true } },
+        // Reload is valid from an Agent's own channel and the daemon control plane.
+        // The control-channel gate still requires a daemon owner for cross-Agent reloads.
+        'agent.reload': { allow: true, dangerous: true, scopes: ['agent', 'control'], constraints: { targetCurrentAgentOnly: true, requireAgentAdmin: true } },
         'dangerous:*': { allow: true, dangerous: true, constraints: { requireDaemonOwner: true } },
     };
 }

package/dist/config/config-field-policy.js

@@ -25,7 +25,7 @@ const BASEAGENT_BEHAVIOR_FIELDS = new Set([
     'mode',
     'useVertex',
 ]);
-const SUPPORTED_BASEAGENTS = new Set(['claude', 'codex', 'gemini', 'hermes']);
+const SUPPORTED_BASEAGENTS = new Set(['claude', 'codex', 'gemini', 'ecagent', 'hermes']);
 const SENSITIVE_TOP_FIELDS = new Set([
     '$schema_version',
     'aid',