evolcore 0.0.7 → 0.0.8

package/dist/ipc.js

@@ -247,6 +247,8 @@ export class IpcServer {
         return roots;
     }
     start() {
+        if (this.server)
+            return Promise.resolve();
         // Remove stale socket file (Unix only — named pipes auto-cleanup on process exit)
         if (!isNamedPipe(this.socketPath)) {
             try {

package/dist/utils/codex-cli.js

@@ -0,0 +1,39 @@
+import { execFileSync } from 'child_process';
+import { isWindows, resolveCommandPath } from './cross-platform.js';
+/**
+ * Resolve the installed Codex CLI entrypoint. npm creates a `.cmd` shim on
+ * Windows, which is not the same executable as the extensionless Unix shim.
+ */
+export function resolveCodexCliPath() {
+    return resolveCommandPath('codex');
+}
+/**
+ * Build a child-process invocation that works for npm's Windows command shim.
+ * The options are injectable so platform-specific behavior can be tested on
+ * non-Windows CI hosts.
+ */
+export function resolveCodexLaunchCommand(args, options = {}) {
+    const windows = options.isWindows ?? isWindows;
+    const commandPath = options.commandPath !== undefined
+        ? options.commandPath
+        : resolveCodexCliPath();
+    if (!commandPath)
+        return null;
+    if (windows && /\.(cmd|bat)$/i.test(commandPath)) {
+        return {
+            command: options.comSpec ?? process.env.ComSpec ?? 'cmd.exe',
+            args: ['/d', '/s', '/c', commandPath, ...args],
+        };
+    }
+    return { command: commandPath, args };
+}
+/** Execute a Codex CLI command using the resolved npm shim/path. */
+export function execCodexCliSync(args, options) {
+    const commandPath = resolveCodexCliPath();
+    if (!commandPath)
+        throw new Error('Codex CLI not found');
+    const launchCommand = resolveCodexLaunchCommand(args, { commandPath });
+    if (!launchCommand)
+        throw new Error('Codex CLI not found');
+    return execFileSync(launchCommand.command, launchCommand.args, options);
+}

package/dist/utils/cross-platform.js

@@ -3,7 +3,7 @@ import { fileURLToPath } from 'url';
 import { execFileSync, execFile, spawn, spawnSync } from 'child_process';
 import { promisify } from 'util';
 import fs from 'fs';
-import { getProcessStartTime } from './process-introspect.js';
+import { getProcessStartTime, parseCimDate } from './process-introspect.js';
 const execFileAsync = promisify(execFile);
 export const isWindows = process.platform === 'win32';
 const ENCODE_PATH_MAX = 200;
@@ -38,6 +38,10 @@ export function encodePath(projectPath) {
  * Cross-platform process liveness check.
  */
 export function isProcessRunning(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    if (isWindows)
+        return isWindowsProcessRunning(pid);
     try {
         process.kill(pid, 0);
         return true;
@@ -47,23 +51,65 @@ export function isProcessRunning(pid) {
         return e.code === 'EPERM';
     }
 }
+function isWindowsProcessRunning(pid) {
+    try {
+        const result = spawnSync('tasklist', ['/FI', `PID eq ${pid}`, '/FO', 'CSV', '/NH'], { encoding: 'utf-8', timeout: 3000, stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true });
+        if (result.status === 0 && new RegExp(`,"${pid}",`, 'i').test(result.stdout || ''))
+            return true;
+    }
+    catch { }
+    // Keep a conservative fallback for restricted Windows environments where
+    // tasklist is unavailable. A failed probe must never be treated as proof of
+    // process exit by lifecycle code.
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (e) {
+        return e?.code === 'EPERM';
+    }
+}
 /**
  * Cross-platform process termination.
  */
 export function killProcess(pid, force = false) {
-    if (isWindows && force) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    if (isWindows) {
         try {
-            spawnSync('taskkill', ['/PID', String(pid), '/F'], { windowsHide: true });
+            const args = ['/PID', String(pid), '/T'];
+            if (force)
+                args.push('/F');
+            const result = spawnSync('taskkill', args, {
+                encoding: 'utf-8',
+                timeout: 10_000,
+                stdio: ['ignore', 'pipe', 'pipe'],
+                windowsHide: true,
+            });
+            return result.status === 0 || !isProcessRunning(pid);
         }
-        catch { }
-    }
-    else {
-        try {
-            process.kill(pid, force ? 'SIGKILL' : 'SIGTERM');
+        catch {
+            return !isProcessRunning(pid);
         }
-        catch { }
+    }
+    try {
+        process.kill(pid, force ? 'SIGKILL' : 'SIGTERM');
+        return true;
+    }
+    catch {
+        return !isProcessRunning(pid);
     }
 }
+/** Wait until a process has really disappeared from the host process table. */
+export async function waitForProcessExit(pid, timeoutMs = 10_000, intervalMs = 250) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (!isProcessRunning(pid))
+            return true;
+        await new Promise(resolve => setTimeout(resolve, intervalMs));
+    }
+    return !isProcessRunning(pid);
+}
 /**
  * Cross-platform process search by command line pattern.
  * Returns list of matching PIDs.
@@ -71,11 +117,37 @@ export function killProcess(pid, force = false) {
 export function findProcesses(pattern) {
     try {
         if (isWindows) {
-            const result = spawnSync('wmic', ['process', 'where', `CommandLine like '%${pattern}%'`, 'get', 'ProcessId'], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true });
-            const output = result.stdout || '';
-            return output.split('\n')
-                .map(line => parseInt(line.trim(), 10))
-                .filter(pid => !isNaN(pid) && pid !== process.pid);
+            // WMI LIKE is wildcard matching, not JavaScript regex matching. Query a
+            // stable literal anchor first, then apply the requested regex locally.
+            const anchor = windowsProcessSearchAnchor(pattern);
+            const escapedAnchor = anchor.replace(/'/g, "''");
+            const script = `$a='${escapedAnchor}'; Get-CimInstance Win32_Process | Where-Object { $_.CommandLine -and $_.CommandLine -like ('*' + $a + '*') } | Select-Object ProcessId,CommandLine | ConvertTo-Json -Compress`;
+            const result = spawnSync('powershell', ['-NoProfile', '-Command', script], { encoding: null, timeout: 8000, stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true });
+            const raw = decodeWindowsOutput(result.stdout).trim();
+            if (raw) {
+                const parsed = JSON.parse(raw);
+                const rows = !parsed ? [] : Array.isArray(parsed) ? parsed : [parsed];
+                const matcherCandidates = [pattern, pattern.replace(/\\\\/g, '\\')]
+                    .filter((value, index, values) => values.indexOf(value) === index)
+                    .map((value) => {
+                    try {
+                        return new RegExp(value, 'i');
+                    }
+                    catch {
+                        return null;
+                    }
+                })
+                    .filter((value) => value !== null);
+                return rows
+                    .filter(row => Number.isInteger(row.ProcessId) && row.ProcessId !== process.pid)
+                    .filter(row => {
+                    const commandLine = row.CommandLine || '';
+                    const normalized = commandLine.replace(/\\/g, '/');
+                    return matcherCandidates.some(matcher => matcher.test(commandLine) || matcher.test(normalized));
+                })
+                    .map(row => row.ProcessId);
+            }
+            return [];
         }
         else {
             const output = execFileSync('pgrep', ['-f', pattern], { encoding: 'utf-8' }).trim();
@@ -86,6 +158,10 @@ export function findProcesses(pattern) {
         return [];
     }
 }
+function windowsProcessSearchAnchor(pattern) {
+    const tokens = pattern.match(/[A-Za-z0-9][A-Za-z0-9._-]{2,}/g) || [];
+    return tokens.sort((a, b) => b.length - a.length)[0] || pattern;
+}
 /**
  * Cross-platform: find PIDs listening on a TCP port.
  * Used to clean up stale/orphaned listeners (e.g. manually-spawned ecweb
@@ -124,13 +200,35 @@ export function findProcessByPort(port) {
 export function getProcessInfo(pid) {
     try {
         if (isWindows) {
+            // WMIC was removed from recent Windows installations. Prefer the
+            // supported CIM API and keep WMIC as a compatibility fallback.
+            const psScript = `(Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}' | Select-Object WorkingSetSize,CreationDate | ConvertTo-Json -Compress)`;
+            const ps = spawnSync('powershell', ['-NoProfile', '-Command', psScript], {
+                encoding: null, timeout: 5000, stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true,
+            });
+            const raw = decodeWindowsOutput(ps.stdout).trim();
+            if (raw) {
+                const processInfo = JSON.parse(raw);
+                const memory = Number(processInfo.WorkingSetSize);
+                const createdAt = processInfo.CreationDate
+                    ? parseCimDate(processInfo.CreationDate) ?? parseDateString(processInfo.CreationDate)
+                    : null;
+                return {
+                    ...(Number.isFinite(memory) && memory > 0 ? { memory: String(Math.round(memory / 1024)) } : {}),
+                    ...(createdAt !== null ? { uptime: formatUptime(Math.max(0, Math.floor((Date.now() - createdAt) / 1000))) } : {}),
+                };
+            }
             const result = spawnSync('wmic', ['process', 'where', `ProcessId=${pid}`, 'get', 'WorkingSetSize,CreationDate'], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true });
             const output = result.stdout || '';
             const lines = output.trim().split('\n').filter(l => l.trim());
             if (lines.length >= 2) {
                 const parts = lines[1].trim().split(/\s+/);
                 const memKB = parts[1] ? Math.round(parseInt(parts[1], 10) / 1024) : undefined;
-                return { memory: memKB ? `${memKB}` : undefined };
+                const createdAt = parts[0] ? parseCimDate(parts[0]) ?? parseDateString(parts[0]) : null;
+                return {
+                    ...(memKB ? { memory: `${memKB}` } : {}),
+                    ...(createdAt !== null ? { uptime: formatUptime(Math.max(0, Math.floor((Date.now() - createdAt) / 1000))) } : {}),
+                };
             }
         }
         else {
@@ -167,6 +265,37 @@ function formatUptime(totalSeconds) {
         parts.push(`${seconds}s`);
     return parts.join(' ');
 }
+function parseDateString(value) {
+    const microsoftJsonDate = value.match(/^\\?\/Date\(([-+]?\d+)\)\\?\/$/);
+    if (microsoftJsonDate)
+        return Number(microsoftJsonDate[1]);
+    const parsed = Date.parse(value);
+    return Number.isNaN(parsed) ? null : parsed;
+}
+/** Decode PowerShell output consistently across Windows 5.1 and pwsh. */
+function decodeWindowsOutput(value) {
+    if (!value)
+        return '';
+    const bytes = Buffer.isBuffer(value) ? value : Buffer.from(value);
+    if (bytes.length >= 2 && bytes[0] === 0xff && bytes[1] === 0xfe) {
+        return bytes.subarray(2).toString('utf16le');
+    }
+    if (bytes.length >= 2 && bytes[0] === 0xfe && bytes[1] === 0xff) {
+        const swapped = Buffer.allocUnsafe(bytes.length - 2);
+        for (let i = 2; i + 1 < bytes.length; i += 2) {
+            swapped[i - 2] = bytes[i + 1];
+            swapped[i - 1] = bytes[i];
+        }
+        return swapped.toString('utf16le');
+    }
+    const utf8 = bytes.toString('utf8').replace(/^\uFEFF/, '');
+    if (utf8.includes('\u0000')) {
+        const utf16 = bytes.toString('utf16le').replace(/^\uFEFF/, '');
+        if (utf16.includes('{') || utf16.includes('[') || utf16.includes('CommandLine'))
+            return utf16;
+    }
+    return utf8;
+}
 /**
  * Cross-platform command existence check.
  */
@@ -178,7 +307,7 @@ export function commandExists(cmd) {
     let exists = false;
     try {
         if (isWindows) {
-            const r = spawnSync('where', [cmd], { encoding: 'utf-8', stdio: 'pipe', windowsHide: true });
+            const r = spawnSync('where.exe', [cmd], { encoding: 'utf-8', stdio: 'pipe', windowsHide: true });
             exists = r.status === 0;
         }
         else {
@@ -194,7 +323,7 @@ export function commandExists(cmd) {
 }
 /**
  * 解析命令的真实可执行文件绝对路径。
- * Windows: `where` 会列出全部同名文件（npm 全局 bin 同时生成无后缀 sh 包装、.cmd、.ps1），
+ * Windows: `where.exe` 会列出全部同名文件（npm 全局 bin 同时生成无后缀 sh 包装、.cmd、.ps1），
  *   其中无后缀的那个是 Unix sh 脚本，Windows 无法直接 spawn（ENOENT）。
  *   因此优先选 PATHEXT 可执行后缀（.cmd/.exe/.bat/.com），都没有才退回首行。
  * 失败返回 null。不缓存——刚安装的命令需要重新探测。
@@ -202,7 +331,7 @@ export function commandExists(cmd) {
 export function resolveCommandPath(cmd) {
     try {
         if (isWindows) {
-            const r = spawnSync('where', [cmd], { encoding: 'utf-8', stdio: 'pipe', windowsHide: true });
+            const r = spawnSync('where.exe', [cmd], { encoding: 'utf-8', stdio: 'pipe', windowsHide: true });
             if (r.status !== 0 || !r.stdout)
                 return null;
             const candidates = r.stdout.split(/\r?\n/).map(s => s.trim()).filter(Boolean);

package/dist/utils/instance-registry.js

@@ -350,12 +350,20 @@ export function findOrphanProcesses() {
     // 1. 已登记 PID（自己 HOME 下的 main + 自己进程）
     const known = new Set([process.pid]);
     const status = scanInstances();
-    for (const m of status.mains)
-        known.add(m.record.pid);
-    for (const m of status.restartMonitors)
-        known.add(m.record.pid);
+    for (const m of status.mains) {
+        if (m.alive)
+            known.add(m.record.pid);
+    }
+    for (const m of status.restartMonitors) {
+        if (m.alive)
+            known.add(m.record.pid);
+    }
     // 2. 系统中所有跑 dist/index.js 的 node 进程
-    const candidates = findProcesses('node.*dist/index.js');
+    // Use a stable filename anchor for the Windows CIM query. The full path
+    // regex contains escaped separators and is applied after command lines have
+    // been fetched; embedding it in the CIM pre-filter can silently miss a
+    // backslash-delimited `dist\\index.js` command on some PowerShell builds.
+    const candidates = findProcesses('index\\.js');
     const orphans = [];
     for (const pid of candidates) {
         if (known.has(pid))
@@ -395,11 +403,21 @@ export function killOrphans(orphans) {
 }
 function readCmdline(pid) {
     if (isWindows) {
+        // WMIC is removed from recent Windows installations. Keep it as the
+        // first probe for older hosts, then use the supported CIM API when it is
+        // unavailable or returns no row.
         try {
             const result = spawnSync('wmic', ['process', 'where', `ProcessId=${pid}`, 'get', 'CommandLine', '/value'], { encoding: 'utf-8', timeout: 3000, stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true });
             const out = result.stdout || '';
             const m = out.match(/CommandLine=([^\r\n]+)/);
-            return m ? m[1].trim() : '';
+            if (m?.[1]?.trim())
+                return m[1].trim();
+        }
+        catch { }
+        try {
+            const script = `(Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}').CommandLine`;
+            const result = spawnSync('powershell', ['-NoProfile', '-Command', script], { encoding: null, timeout: 5000, stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true });
+            return decodeWindowsOutput(result.stdout).trim();
         }
         catch {
             return '';
@@ -422,6 +440,25 @@ function readCmdline(pid) {
         }
     }
 }
+function decodeWindowsOutput(value) {
+    if (!value)
+        return '';
+    const bytes = Buffer.isBuffer(value) ? value : Buffer.from(value);
+    if (bytes.length >= 2 && bytes[0] === 0xff && bytes[1] === 0xfe)
+        return bytes.subarray(2).toString('utf16le');
+    if (bytes.length >= 2 && bytes[0] === 0xfe && bytes[1] === 0xff) {
+        const swapped = Buffer.allocUnsafe(bytes.length - 2);
+        for (let i = 2; i + 1 < bytes.length; i += 2) {
+            swapped[i - 2] = bytes[i + 1];
+            swapped[i - 1] = bytes[i];
+        }
+        return swapped.toString('utf16le');
+    }
+    const utf8 = bytes.toString('utf8').replace(/^\uFEFF/, '');
+    if (utf8.includes('\u0000'))
+        return bytes.toString('utf16le').replace(/^\uFEFF/, '');
+    return utf8;
+}
 function readProcessEnvironment(pid) {
     // Linux: /proc/<pid>/environ
     if (!isWindows && process.platform !== 'darwin') {

package/dist/utils/process-introspect.js

@@ -115,12 +115,12 @@ function winPowerShellCreationDate(pid) {
     const result = spawnSync('powershell', [
         '-NoProfile',
         '-Command',
-        `(Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}').CreationDate`,
+        `(Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}').CreationDate.ToUniversalTime().ToString('o')`,
     ], { encoding: 'utf-8', timeout: 8000, stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true });
     const out = result.stdout?.trim();
     if (!out)
         return null;
-    return parseCimDate(out);
+    return parseCimDate(out) ?? parseDateString(out);
 }
 function winWmicCreationDate(pid) {
     const result = spawnSync('wmic', ['process', 'where', `ProcessId=${pid}`, 'get', 'CreationDate', '/value'], { encoding: 'utf-8', timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true });
@@ -128,7 +128,11 @@ function winWmicCreationDate(pid) {
     const m = out.match(/CreationDate=([^\r\n]+)/);
     if (!m)
         return null;
-    return parseCimDate(m[1].trim());
+    return parseCimDate(m[1].trim()) ?? parseDateString(m[1].trim());
+}
+function parseDateString(value) {
+    const parsed = Date.parse(value);
+    return Number.isNaN(parsed) ? null : parsed;
 }
 /**
  * 解析 CIM/WMI 日期格式：yyyyMMddHHmmss.ffffff±TZZZ

package/kits/rules/01-overview.md

@@ -14,8 +14,9 @@ AUN（Agent Union Network）是 agent 间安全通信的网络协议，SDK 的 n
 
 AID（Agent Identifier）是主体在 AUN 网络中的唯一身份标识，格式为 `{name}.{issuer}`（如 `alice.agentid.pub`）。任何拥有域名的组织都可以作为 Issuer 签发 AID——去中心化，无需中央权威。AID 同时也是通信地址：身份即入口。
 
-> 本机 evolcore 新建 AID 时的默认 issuer 是 `agentid.pub`（`src/aun/aid/control-aid.ts` 的
-> `resolveControlIssuer()`，可用 `EVOLCORE_ISSUER` 覆盖）。文档里出现的 `xxx.aid.pub` 是旧例子。
+> 本机 evolcore 自动生成控制 AID 时的默认 AID domain 是 `agentid.cn`（`src/aun/aid/control-aid.ts` 的
+> `resolveControlAidDomain()`；可用 `daemon.json.aun.defaultAidDomain` 或 `EVOLCORE_AID_DOMAIN` 覆盖）。
+> 已存在的 AID 保持原域名不变；`EVOLCORE_ISSUER` 仍作为废弃兼容别名支持。
 
 访问 `https://{aid}` 可获取该主体的个人主页。
 

package/kits/schemas/_meta.json

@@ -1,6 +1,6 @@
 {
   "schemas": {
-    "daemon":          { "currentVersion": 3 },
+    "daemon":          { "currentVersion": 4 },
     "defaults":        { "currentVersion": 4 },
     "agent-config":    { "currentVersion": 10 },
     "relation-config": { "currentVersion": 8 },
@@ -34,6 +34,7 @@
     { "schema": "relation-config", "version": 6, "date": "2026-07-27", "description": "remove relation Session Renew effort; auxiliary inference is response-mode owned" },
     { "schema": "single-session",  "version": 2, "date": "2026-07-27", "description": "add optional baseagent-aware auxiliaryModel and auxiliaryEffort without factory defaults" },
     { "schema": "daemon",          "version": 3, "date": "2026-07-29", "description": "make daemon.json the exclusive source for all process debug settings" },
+    { "schema": "daemon",          "version": 4, "date": "2026-08-04", "description": "add configurable default AID domain for generated identities" },
     { "schema": "defaults",        "version": 3, "date": "2026-07-29", "description": "remove debug from the Agent configuration inheritance chain" },
     { "schema": "agent-config",    "version": 8, "date": "2026-07-29", "description": "reject Agent-level debug because debug is process-owned" },
     { "schema": "agent-config",    "version": 9, "date": "2026-07-29", "description": "add owner-controlled AUN group rules loading and Agent message access policy" },

package/kits/schemas/daemon.schema.4.json

@@ -0,0 +1,132 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "daemon.schema.4.json",
+  "title": "ProcessConfig v4 (daemon.json)",
+  "description": "进程级配置：daemon 自身运行配置，链外独立作用域，不进覆盖链。",
+  "x-logical-name": "daemon",
+  "x-scope": "process",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "$schema_version": { "type": "number", "const": 4, "default": 4, "x-merge": "scalar" },
+    "aid": { "type": "string", "description": "daemon 默认身份 AID", "x-merge": "scalar" },
+    "owners": {
+      "type": "array",
+      "items": { "type": "string" },
+      "description": "进程控制面鉴权名单（谁能远程管 daemon）",
+      "x-merge": "list"
+    },
+    "debug": {
+      "type": "object",
+      "description": "进程级调试配置；唯一合法来源为 daemon.json，不参与 Agent 覆盖链",
+      "x-merge": "dict",
+      "additionalProperties": false,
+      "properties": {
+        "logLevel": {
+          "type": "string",
+          "enum": ["DEBUG", "INFO", "WARN", "ERROR"],
+          "description": "daemon 日志级别"
+        },
+        "flusherDiag": {
+          "type": "boolean",
+          "description": "是否启用消息 flusher 诊断"
+        },
+        "aunTrace": {
+          "type": "boolean",
+          "description": "是否记录 AUN 协议 trace"
+        },
+        "aunSdkLog": {
+          "type": "boolean",
+          "description": "是否启用 AUN SDK 调试日志"
+        },
+        "upmsg": {
+          "type": "boolean",
+          "description": "是否向 Agent owner 发送 daemon 上线通知"
+        },
+        "eckSnapshots": {
+          "type": "boolean",
+          "default": false,
+          "description": "是否写入可能包含敏感上下文的 ECK 旁路调试快照"
+        }
+      }
+    },
+    "tunnel": {
+      "type": "object",
+      "description": "内网穿透配置",
+      "x-merge": "dict",
+      "properties": {
+        "targets": { "type": "array", "description": "穿透目标列表", "items": { "type": "object" } }
+      }
+    },
+    "aun": {
+      "type": "object",
+      "description": "AUN 进程配置",
+      "x-merge": "dict",
+      "properties": {
+        "encryptionSeed": { "type": ["string", "null"], "description": "已废弃兼容字段；EvolCore 固定使用内置值，检测到其他值时拒绝启动并提示联系管理人员" },
+        "gatewayUrl": {
+          "type": "string",
+          "description": "控制 AID 使用的显式 AUN WebSocket 网关；省略时由 SDK 缓存和 AID 发现决定"
+        },
+        "defaultAidDomain": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)+$",
+          "description": "自动生成控制 AID 与 benchmark AID 使用的后缀域名；不影响已有 AID"
+        },
+        "minEvolVersion": {
+          "type": "string",
+          "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+          "description": "AUN Menu 允许的最低 Evol 客户端版本；省略时不限制"
+        },
+        "menuTokenRequired": {
+          "type": "boolean",
+          "default": false,
+          "description": "是否要求普通 AUN Menu 请求携带有效 menu_token；默认 false"
+        }
+      }
+    },
+    "serviceProxy": {
+      "type": "object",
+      "description": "AUN Service Proxy：把一个本地 HTTP/WS 服务暴露到 AUN 网络",
+      "x-merge": "dict",
+      "properties": {
+        "enabled": { "type": "boolean", "description": "是否启用 Service Proxy" },
+        "services": { "type": "array", "description": "暴露到 AUN 的本地服务列表", "items": { "type": "object" } }
+      }
+    },
+    "configSnapshots": {
+      "type": "boolean",
+      "default": true,
+      "description": "是否自动维护配置快照、启动日志和自检回落",
+      "x-merge": "scalar"
+    },
+    "idleMonitor": {
+      "type": "object",
+      "description": "流式输出空闲监控配置",
+      "x-merge": "dict",
+      "properties": {
+        "enabled": { "type": "boolean", "default": true, "description": "是否启用空闲监控" },
+        "timeout": { "type": "number", "default": 120, "description": "空闲超时秒数" },
+        "retryAttemptTimeout": { "type": "number", "description": "API 重试尝试连续无事件时的超时秒数；未设置时继承 timeout" },
+        "maxExecutionTime": { "type": "number", "default": 3600, "description": "单个任务总执行时限（秒），等待审批期间仍继续计时" }
+      }
+    },
+    "ecweb": {
+      "type": "object",
+      "description": "web 控制台开关/端口",
+      "x-merge": "dict",
+      "properties": {
+        "enabled": { "type": "boolean", "description": "是否启用 web 控制台" },
+        "port": { "type": "number", "description": "web 控制台监听端口" }
+      }
+    },
+    "watch": {
+      "type": "object",
+      "description": "日志监听配置",
+      "x-merge": "dict",
+      "properties": {
+        "logTypes": { "type": "array", "description": "要监听的日志类型", "items": { "type": "string" } }
+      }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evolcore",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "description": "AI Agent gateway connecting Claude, Codex, Gemini, and the bundled ecagent runner to messaging channels with multi-project session management",
   "type": "module",
   "main": "dist/index.js",