evolcore 0.0.7 → 0.0.8

package/CHANGELOG.md

@@ -3,6 +3,25 @@
 本文件记录 EvolCore 的重要变更。EvolClaw 版本线的历史记录已归档至
 [`docs/_archive/CHANGELOG-evolclaw.md`](docs/_archive/CHANGELOG-evolclaw.md)。
 
+## 0.0.8 (2026-08-04)
+
+### AID 与域名管理
+
+- 支持通过配置控制 AID 所属域名，并可在变更后自动迁移已有身份记录。
+
+### 运行稳定性
+
+- 完善数据迁移的归档与收尾清理逻辑，降低目录结构演进带来的遗留数据风险。
+- 增强 daemon 启停流程与运行状态诊断，异常时定位信息更准确。
+- 完善 Agent 运行时在失败场景下的状态标记与回退行为。
+- 修复 Windows 下 Codex CLI 的命令解析与进程启动兼容问题。
+
+### 交互体验
+
+- AUN 交互卡片有效期延长至 24 小时，与实际使用节奏匹配。
+- 修复 Web 控制台触发器视图中 daemon 控制触发器无处归属的问题，升级检查触发器包名一并修正。
+- 优化 EC Web 网关状态展示。
+
 ## 0.0.7 (2026-08-03)
 
 ### 运行可靠性

package/README.md

@@ -86,13 +86,13 @@ ResponseEngine.processMessage()
 **一行安装（macOS / Linux）**：
 
 ```bash
-curl -fsSL https://aun-network.oss-cn-hangzhou.aliyuncs.com/evolcore/install.sh | bash
+curl -fsSL https://download.evolai.cn/install.sh | bash
 ```
 
 **Windows PowerShell**：
 
 ```powershell
-irm https://aun-network.oss-cn-hangzhou.aliyuncs.com/evolcore/install.ps1 | iex
+irm https://download.evolai.cn/install.ps1 | iex
 ```
 
 安装器会自动进入 `ec init` 交互向导；只有已有配置同时包含控制 AID 和 Owner 时才跳过。绑定完成后运行 `ec start` 和 `ec status`。安装器不会停止或重启服务，详细流程见 [一键安装脚本说明](docs/evolcore-install-script.md)。
@@ -169,7 +169,7 @@ ec init aun
 ```
 
 **API 继承机制**：`agents.claude` 整个 section 可省略，系统自动按以下优先级继承：
-- `apiKey`：配置文件 → `ANTHROPIC_AUTH_TOKEN` 环境变量 → `~/.claude/settings.json`
+- `apiKey`：配置文件 → `ANTHROPIC_AUTH_TOKEN` / `ANTHROPIC_API_KEY` 环境变量 → `~/.claude/settings.json` 中对应变量
 - `baseUrl`：配置文件 → `ANTHROPIC_BASE_URL` 环境变量 → `~/.claude/settings.json`
 - `model`：配置文件 → `~/.claude/settings.json` → 默认 `sonnet`
 - `effort`：配置文件 → `~/.claude/settings.json` → SDK 默认值（`auto`）

package/dist/agents/baseagent.js

@@ -50,6 +50,10 @@ function directInferenceValue(...values) {
     }
     return undefined;
 }
+/** Claude Code accepts both names; AUTH_TOKEN is kept first for compatibility. */
+function resolveAnthropicApiKey(...values) {
+    return directInferenceValue(...values);
+}
 function loadClaudeSettings() {
     try {
         const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');
@@ -80,12 +84,9 @@ export function resolveAnthropicConfig(config, override) {
     const isPlaceholder = (v) => !v || v.includes('your-') || v.includes('placeholder');
     const overrideApiKey = isPlaceholder(override?.apiKey) ? undefined : override?.apiKey;
     const globalApiKey = isPlaceholder(config.agents?.claude?.apiKey) ? undefined : config.agents?.claude?.apiKey;
-    const apiKey = overrideApiKey
-        || globalApiKey
-        || process.env.ANTHROPIC_AUTH_TOKEN
-        || settings.env?.ANTHROPIC_AUTH_TOKEN;
+    const apiKey = resolveAnthropicApiKey(overrideApiKey, globalApiKey, process.env.ANTHROPIC_AUTH_TOKEN, process.env.ANTHROPIC_API_KEY, settings.env?.ANTHROPIC_AUTH_TOKEN, settings.env?.ANTHROPIC_API_KEY);
     if (!apiKey) {
-        throw new Error('No API key found. Set one of: baseagents.claude.apiKey (per-agent or defaults), env ANTHROPIC_AUTH_TOKEN, or ~/.claude/settings.json env.ANTHROPIC_AUTH_TOKEN');
+        throw new Error('No API key found for Claude. Set baseagents.claude.apiKey, env ANTHROPIC_AUTH_TOKEN or ANTHROPIC_API_KEY, or the corresponding variable in ~/.claude/settings.json');
     }
     const isPlaceholderUrl = (v) => !v || v.includes('api.anthropic.com');
     const overrideBaseUrl = isPlaceholderUrl(override?.baseUrl) ? undefined : override?.baseUrl;

package/dist/agents/claude-runner.js

@@ -562,6 +562,7 @@ export class AgentRunner {
         const env = {
             ...process.env,
             ANTHROPIC_AUTH_TOKEN: this.apiKey,
+            ANTHROPIC_API_KEY: this.apiKey,
             PATH: process.env.PATH,
             DISABLE_AUTOUPDATER: '1',
             ...(this.baseUrl ? { ANTHROPIC_BASE_URL: this.baseUrl } : {}),

package/dist/agents/codex-app-server-client.js

@@ -2,6 +2,7 @@ import { spawn } from 'child_process';
 import readline from 'readline';
 import { logger } from '../utils/logger.js';
 import { buildHClassGuardCommand } from '../core/permission/sandbox-runtime.js';
+import { resolveCodexLaunchCommand } from '../utils/codex-cli.js';
 function hasPermissionProfile(config) {
     if (!config || typeof config.default_permissions !== 'string' || !config.default_permissions)
         return false;
@@ -330,11 +331,14 @@ export class CodexAppServerClient {
             env.OPENAI_BASE_URL = this.options.baseUrl;
         }
         const args = this.buildProcessArgs();
-        const guardedCommand = buildHClassGuardCommand('codex', args);
+        const launchCommand = resolveCodexLaunchCommand(args);
+        if (!launchCommand)
+            throw new Error('Codex CLI not found');
+        const guardedCommand = buildHClassGuardCommand(launchCommand.command, launchCommand.args);
         if (process.platform === 'linux' && !guardedCommand) {
             throw new Error('Codex 缺少 EvolCore H 类路径隔离运行时，已拒绝启动 app-server');
         }
-        this.proc = spawn(guardedCommand?.command ?? 'codex', guardedCommand?.args ?? args, {
+        this.proc = spawn(guardedCommand?.command ?? launchCommand.command, guardedCommand?.args ?? launchCommand.args, {
             cwd: this.options.cwd,
             env,
             stdio: ['pipe', 'pipe', 'pipe'],

package/dist/agents/codex-runner.js

@@ -23,6 +23,7 @@ import { compareVersions } from '../utils/npm-ops.js';
 import { resolvePaths, resolveRoot } from '../paths.js';
 import { buildSessionTurnList } from '../core/session/session-turns.js';
 import { execFileSync } from 'child_process';
+import { execCodexCliSync, resolveCodexCliPath } from '../utils/codex-cli.js';
 import { createHash, randomBytes } from 'crypto';
 import fs from 'fs';
 import path from 'path';
@@ -128,7 +129,7 @@ export function isCodexCliVersionSupported(version) {
 }
 export function getCodexCliVersion() {
     try {
-        const output = execFileSync('codex', ['--version'], {
+        const output = execCodexCliSync(['--version'], {
             encoding: 'utf-8',
             timeout: 3000,
             stdio: ['pipe', 'pipe', 'pipe'],
@@ -140,6 +141,10 @@ export function getCodexCliVersion() {
     }
 }
 export function getCodexAppServerAvailability() {
+    if (!resolveCodexCliPath()) {
+        const upgradeHint = '请升级 Codex CLI：npm install -g @openai/codex@latest';
+        return { available: false, reason: `未检测到可用 Codex CLI。${upgradeHint}` };
+    }
     const version = getCodexCliVersion();
     const upgradeHint = '请升级 Codex CLI：npm install -g @openai/codex@latest';
     if (!version) {
@@ -153,7 +158,7 @@ export function getCodexAppServerAvailability() {
         };
     }
     try {
-        execFileSync('codex', ['app-server', '--help'], {
+        execCodexCliSync(['app-server', '--help'], {
             encoding: 'utf-8',
             timeout: 3000,
             stdio: ['pipe', 'pipe', 'pipe'],
@@ -171,7 +176,7 @@ function fetchCodexCatalog() {
     if (codexCatalogCache)
         return codexCatalogCache;
     try {
-        const output = execFileSync('codex', ['debug', 'models'], {
+        const output = execCodexCliSync(['debug', 'models'], {
             encoding: 'utf-8',
             timeout: 5000,
             stdio: ['pipe', 'pipe', 'pipe'],

package/dist/aun/aid/control-aid.js

@@ -1,35 +1,46 @@
 import crypto from 'crypto';
 import { aidCreate } from './index.js';
+import { DEFAULT_AID_DOMAIN, normalizeAidDomain } from './domain.js';
 import { getAidStore, SLOT } from './store.js';
 import { logger } from '../../utils/logger.js';
 const MAX_ATTEMPTS = 5;
-/** 解析控制 AID 的 issuer：环境变量 EVOLCORE_ISSUER → 兜底 agentid.pub */
-export function resolveControlIssuer() {
-    const env = process.env.EVOLCORE_ISSUER?.trim();
-    if (env) {
-        // Validate issuer format: must be valid domain-like structure
-        if (!/^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i.test(env)) {
-            logger.error(`[control-aid] Invalid EVOLCORE_ISSUER format: ${env}, using default`);
-            return 'agentid.pub';
-        }
-        // Prevent localhost/local domains
-        if (env === 'localhost' || env.endsWith('.localhost') || env.startsWith('127.') || env.startsWith('0.')) {
-            logger.error(`[control-aid] EVOLCORE_ISSUER cannot be localhost/local: ${env}, using default`);
-            return 'agentid.pub';
-        }
-        // Length limit
-        if (env.length > 253) {
-            logger.error(`[control-aid] EVOLCORE_ISSUER too long: ${env.length} chars, using default`);
-            return 'agentid.pub';
-        }
+export { DEFAULT_AID_DOMAIN } from './domain.js';
+function environmentValue(name) {
+    if (!Object.prototype.hasOwnProperty.call(process.env, name))
+        return undefined;
+    return process.env[name]?.trim() ?? '';
+}
+/**
+ * Resolve the AID domain for automatically generated control identities.
+ *
+ * Explicit values fail closed. This avoids silently registering an identity
+ * under a different domain when deployment configuration is malformed.
+ */
+export function resolveControlAidDomain(configuredAidDomain) {
+    const environmentDomain = environmentValue('EVOLCORE_AID_DOMAIN');
+    if (environmentDomain !== undefined)
+        return normalizeAidDomain(environmentDomain, 'EVOLCORE_AID_DOMAIN');
+    const legacyEnvironmentDomain = environmentValue('EVOLCORE_ISSUER');
+    if (legacyEnvironmentDomain !== undefined) {
+        logger.warn('[control-aid] EVOLCORE_ISSUER is deprecated; use EVOLCORE_AID_DOMAIN instead');
+        return normalizeAidDomain(legacyEnvironmentDomain, 'EVOLCORE_ISSUER');
     }
-    return env || 'agentid.pub';
+    if (configuredAidDomain !== undefined) {
+        return normalizeAidDomain(configuredAidDomain, 'daemon.json.aun.defaultAidDomain');
+    }
+    return DEFAULT_AID_DOMAIN;
+}
+/** @deprecated Use resolveControlAidDomain(). */
+export function resolveControlIssuer(configuredAidDomain) {
+    return resolveControlAidDomain(configuredAidDomain);
 }
-/** 生成候选控制 AID：ec + 5位随机数字 + .{issuer} */
-export function candidateAid(issuer) {
+/** 生成候选控制 AID：ec + 5位随机数字 + .{aidDomain} */
+export function candidateAid(aidDomain) {
     const n = crypto.randomInt(10000, 100000); // 5 位：10000-99999
-    const finalIssuer = issuer || resolveControlIssuer();
-    return `ec${n}.${finalIssuer}`;
+    const finalAidDomain = aidDomain === undefined
+        ? resolveControlAidDomain()
+        : normalizeAidDomain(aidDomain, 'aidDomain');
+    return `ec${n}.${finalAidDomain}`;
 }
 /**
  * 候选 AID 是否已在 PKI 注册。
@@ -56,12 +67,14 @@ async function candidateExists(store, candidate) {
  * - fail-fast：查重探测失败（网关不可达）立即抛错，不掩盖成"均冲突"
  * - agent.md 不上传：aidCreate 仅注册身份 + 写私钥，不调 agentmdPut
  */
-export async function generateControlAid() {
-    const issuer = resolveControlIssuer();
+export async function generateControlAid(aidDomain) {
+    const finalAidDomain = aidDomain === undefined
+        ? resolveControlAidDomain()
+        : normalizeAidDomain(aidDomain, 'aidDomain');
     const store = await getAidStore({ slotId: SLOT.cli });
     try {
         for (let i = 0; i < MAX_ATTEMPTS; i++) {
-            const candidate = candidateAid(issuer);
+            const candidate = candidateAid(finalAidDomain);
             if (await candidateExists(store, candidate)) {
                 logger.info(`[control-aid] ${candidate} 已注册，重试 (${i + 1}/${MAX_ATTEMPTS})`);
                 continue;

package/dist/aun/aid/domain.js

@@ -0,0 +1,23 @@
+export const DEFAULT_AID_DOMAIN = 'agentid.cn';
+const DOMAIN_RE = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+$/i;
+const IPV4_RE = /^(?:\d{1,3}\.){3}\d{1,3}$/;
+/** Normalize and validate the suffix domain used to construct an AID. */
+export function normalizeAidDomain(value, source) {
+    if (typeof value !== 'string') {
+        throw new Error(`[aid-domain] ${source} must be a string`);
+    }
+    const aidDomain = value.trim().toLowerCase();
+    if (!DOMAIN_RE.test(aidDomain)) {
+        throw new Error(`[aid-domain] ${source} must be a valid multi-level domain: ${value}`);
+    }
+    if (IPV4_RE.test(aidDomain)) {
+        throw new Error(`[aid-domain] ${source} cannot be an IP address: ${value}`);
+    }
+    if (aidDomain.endsWith('.localhost')) {
+        throw new Error(`[aid-domain] ${source} cannot be a localhost/local domain: ${value}`);
+    }
+    if (aidDomain.length > 253) {
+        throw new Error(`[aid-domain] ${source} is too long: ${aidDomain.length} chars`);
+    }
+    return aidDomain;
+}

package/dist/channels/aun.js

@@ -35,6 +35,7 @@ import { isExplicitGroupId } from '../aun/group-identity.js';
 import { refreshAgentDisplayName, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
 import { readInstalledEvolcoreVersion } from '../utils/evolcore-version.js';
 export const AUN_HANDOFF_MARKER_FIELD = '_evolcore_handoff_id';
+const AUN_INTERACTION_CARD_TTL_MS = 24 * 60 * 60 * 1000;
 /**
  * 构造 connect extra_info：自描述本进程身份。
  *
@@ -275,8 +276,8 @@ export class AUNChannel {
         }
     }
     /** 判断 channelId 是否为群组 ID
-     *  - 新格式：group.{issuer}/{group_no|group_name}
-     *  - 数字群号：{group_no}.{issuer}（如 11117.agentid.pub）
+     *  - 新格式：group.{aidDomain}/{group_no|group_name}
+     *  - 数字群号：{group_no}.{aidDomain}（如 11117.example.com）
      *  - 兼容旧格式：grp_xxx、g-xxx.agentid.pub
      */
     /** 判断 channelId 是否群组 ID（public：plugin adapter 闭包需调用） */
@@ -495,7 +496,7 @@ export class AUNChannel {
                     }
                 }
                 else if (this.ownedCardMsgIds.has(cardMsgId)) {
-                    // 本 agent 发出的卡片，但 entry 已过期（20min TTL）
+                    // 本 agent 发出的卡片，但 entry 已过期（24h TTL）
                     logger.debug(`${this.logPrefix()} action_card_reply expired: cardMsgId=${cardMsgId}`);
                     this.notifyCardActionFailure(channelId, '⚠️ 卡片已失效，请重新发起');
                 }
@@ -884,8 +885,12 @@ export class AUNChannel {
         this.store = store;
         const client = await loadClient(store, aidName);
         this.client = client;
-        // 仅作为配置/状态展示。当前 SDK public API 不接受 authenticate gateway override；
-        // 实际 gateway 由 SDK discovery + token-store metadata cache 解析。
+        // fastaun gives a preset in-memory gateway precedence over its metadata
+        // cache and AID discovery. authenticate({ gateway }) is deliberately
+        // rejected by its public API, so set the documented client preset before
+        // authentication instead.
+        if (configuredGateway)
+            client._gatewayUrl = configuredGateway;
         this.gatewayUrl = configuredGateway;
         // Register event handlers before connecting
         client.on('message.received', (data) => {
@@ -1364,24 +1369,24 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         return null;
     }
     isTrustedStorageHost(host, normalizedOwner) {
-        const trustedIssuers = new Set();
-        // 对端 issuer（文件所有者 owner_aid）
-        const peerIssuer = this.extractIssuer(normalizedOwner);
-        if (peerIssuer)
-            trustedIssuers.add(peerIssuer);
-        // 本端 issuer（自己的 AID）
-        const selfIssuer = this.extractIssuer((this.getAid() || '').toLowerCase());
-        if (selfIssuer)
-            trustedIssuers.add(selfIssuer);
-        // 校验 host 是否为任一可信 issuer 的存储域名
-        for (const issuer of trustedIssuers) {
-            if (host === `storage.${issuer}`)
+        const trustedAidDomains = new Set();
+        // 对端 AID domain（文件所有者 owner_aid）
+        const peerAidDomain = this.extractAidDomain(normalizedOwner);
+        if (peerAidDomain)
+            trustedAidDomains.add(peerAidDomain);
+        // 本端 AID domain（自己的 AID）
+        const selfAidDomain = this.extractAidDomain((this.getAid() || '').toLowerCase());
+        if (selfAidDomain)
+            trustedAidDomains.add(selfAidDomain);
+        // 校验 host 是否为任一可信 AID domain 的存储域名
+        for (const aidDomain of trustedAidDomains) {
+            if (host === `storage.${aidDomain}`)
                 return true;
         }
         return false;
     }
-    /** 从 AID 提取 issuer（去掉首段 label）。`mybot.agentid.pub` → `agentid.pub` */
-    extractIssuer(aid) {
+    /** 从 AID 提取后缀 domain（去掉首段 label）。`mybot.example.com` → `example.com` */
+    extractAidDomain(aid) {
         if (!aid || !aid.includes('.'))
             return '';
         return aid.split('.').slice(1).join('.');
@@ -2595,7 +2600,7 @@ EvolCore AI Agent 网关，支持多项目会话管理和多 AI 后端切换。
         const now = Date.now();
         const mapTtl = action.expiresAt && action.expiresAt > now
             ? action.expiresAt - now
-            : 20 * 60 * 1000;
+            : AUN_INTERACTION_CARD_TTL_MS;
         const mapTimer = setTimeout(() => {
             this.cardMessageIdMap.delete(messageId);
             const ids = this.interactionCardMessageIds.get(action.requestId);
@@ -4147,7 +4152,7 @@ export class AUNChannelPlugin {
                         return;
                     case 'interaction': {
                         const req = payload.interaction;
-                        const cardTtlMs = 20 * 60 * 1000;
+                        const cardTtlMs = AUN_INTERACTION_CARD_TTL_MS;
                         if (req.kind.kind === 'action') {
                             const action = req.kind;
                             const aunCard = {

package/dist/cli/bench.js

@@ -5,9 +5,10 @@ import os from 'os';
 import { execFile } from 'child_process';
 import { promisify } from 'util';
 import { aidList, aidCreate } from '../aun/aid/identity.js';
-import { resolveControlIssuer } from '../aun/aid/control-aid.js';
+import { resolveControlAidDomain } from '../aun/aid/control-aid.js';
 import { msgSend, msgPull } from '../aun/msg/index.js';
 import { getPackageRoot, aunPath as defaultAunPath } from '../paths.js';
+import { loadDaemonConfig } from '../config-store.js';
 import { getAidStore, loadClient, SLOT } from '../aun/aid/store.js';
 import { isHelpFlag, wantsHelp, getArgValue } from './help.js';
 const execFileAsync = promisify(execFile);
@@ -476,10 +477,10 @@ Options:
         const need = numAids - usableAids.length;
         if (!formatJson)
             console.log(warn(`仅 ${usableAids.length} 个可用，需创建 ${need} 个新 AID`));
-        const issuer = resolveControlIssuer();
+        const aidDomain = resolveControlAidDomain(loadDaemonConfig().aun?.defaultAidDomain);
         for (let i = 0; i < need; i++) {
             const hex = crypto.randomBytes(4).toString('hex');
-            const newAid = `bench-${hex}.${issuer}`;
+            const newAid = `bench-${hex}.${aidDomain}`;
             try {
                 await aidCreate(newAid, { aunPath });
                 aids.push(newAid);