evolcore 0.0.7 → 0.0.9

package/dist/utils/windows-autostart.js

@@ -0,0 +1,130 @@
+import fs from 'fs';
+import path from 'path';
+import { spawnSync } from 'child_process';
+import { getPackageRoot } from '../paths.js';
+export const WINDOWS_AUTOSTART_TASK_NAME = 'EvolCore';
+function isWindows() {
+    return process.platform === 'win32';
+}
+function runSchtasks(args) {
+    return spawnSync('schtasks.exe', args, {
+        encoding: 'utf8',
+        windowsHide: true,
+        timeout: 15_000,
+    });
+}
+function commandError(result, fallback) {
+    return String(result.error?.message || result.stderr || result.stdout || fallback).trim();
+}
+function powershellLiteral(value) {
+    return `'${value.replace(/'/g, "''")}'`;
+}
+function windowsCommandLiteral(value) {
+    return `"${value}"`;
+}
+function wrapperPath(runtimeRoot) {
+    return path.join(runtimeRoot, 'data', 'evolcore-autostart.ps1');
+}
+export function windowsAutostartInstalled() {
+    if (!isWindows())
+        return false;
+    const result = runSchtasks(['/Query', '/TN', WINDOWS_AUTOSTART_TASK_NAME]);
+    return result.status === 0;
+}
+function createWrapper(runtimeRoot) {
+    const scriptPath = wrapperPath(runtimeRoot);
+    const cliEntry = path.join(getPackageRoot(), 'dist', 'cli', 'index.js');
+    if (!fs.existsSync(cliEntry)) {
+        throw new Error(`找不到 EvolCore CLI 入口: ${cliEntry}`);
+    }
+    const pathValue = process.env.PATH ?? '';
+    const script = [
+        `$env:EVOLCORE_HOME = ${powershellLiteral(runtimeRoot)}`,
+        `$env:Path = ${powershellLiteral(pathValue)}`,
+        `& ${powershellLiteral(process.execPath)} --no-warnings=ExperimentalWarning ${powershellLiteral(cliEntry)} start`,
+        'exit $LASTEXITCODE',
+        '',
+    ].join('\r\n');
+    fs.mkdirSync(path.dirname(scriptPath), { recursive: true });
+    fs.writeFileSync(scriptPath, script, 'utf8');
+    return scriptPath;
+}
+function restoreWrapper(file, previous) {
+    try {
+        if (previous === undefined)
+            fs.rmSync(file, { force: true });
+        else
+            fs.writeFileSync(file, previous, 'utf8');
+        return undefined;
+    }
+    catch (error) {
+        return error instanceof Error ? error.message : String(error);
+    }
+}
+export function configureWindowsAutostart(enabled, runtimeRoot) {
+    if (!isWindows()) {
+        return {
+            ok: !enabled,
+            enabled: false,
+            ...(!enabled ? {} : { error: 'Windows 开机自启仅支持 Windows 主机' }),
+        };
+    }
+    const absoluteRoot = path.resolve(runtimeRoot);
+    const scriptPath = wrapperPath(absoluteRoot);
+    if (!enabled) {
+        const result = runSchtasks(['/Delete', '/TN', WINDOWS_AUTOSTART_TASK_NAME, '/F']);
+        if (result.status !== 0 && windowsAutostartInstalled()) {
+            return {
+                ok: false,
+                enabled: true,
+                error: commandError(result, '删除 Windows 开机自启任务失败'),
+            };
+        }
+        try {
+            fs.rmSync(scriptPath, { force: true });
+        }
+        catch { }
+        return { ok: true, enabled: false };
+    }
+    let previousWrapper;
+    let previouslyInstalled = false;
+    try {
+        if (fs.existsSync(scriptPath))
+            previousWrapper = fs.readFileSync(scriptPath, 'utf8');
+        previouslyInstalled = windowsAutostartInstalled();
+        const taskScript = createWrapper(absoluteRoot);
+        const systemRoot = process.env.SystemRoot || 'C:\\Windows';
+        const powershell = path.join(systemRoot, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+        const taskCommand = `${windowsCommandLiteral(powershell)} -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -File ${windowsCommandLiteral(taskScript)}`;
+        // Omitting /RU keeps the task attached to the user creating it and avoids a password prompt.
+        const args = [
+            '/Create',
+            '/TN', WINDOWS_AUTOSTART_TASK_NAME,
+            '/SC', 'ONLOGON',
+            '/TR', taskCommand,
+            '/RL', 'LIMITED',
+            '/F',
+        ];
+        const result = runSchtasks(args);
+        if (result.status !== 0) {
+            const restoreError = restoreWrapper(scriptPath, previousWrapper);
+            const stillInstalled = windowsAutostartInstalled();
+            const rollbackSuffix = restoreError ? `; 恢复原启动脚本失败: ${restoreError}` : '';
+            return {
+                ok: false,
+                enabled: stillInstalled,
+                error: `${commandError(result, '创建 Windows 开机自启任务失败')}${rollbackSuffix}`,
+            };
+        }
+        return { ok: true, enabled: true };
+    }
+    catch (error) {
+        const restoreError = restoreWrapper(scriptPath, previousWrapper);
+        const rollbackSuffix = restoreError ? `; 恢复原启动脚本失败: ${restoreError}` : '';
+        return {
+            ok: false,
+            enabled: previouslyInstalled,
+            error: `${error instanceof Error ? error.message : String(error)}${rollbackSuffix}`,
+        };
+    }
+}

package/ecagent/dist/agent-loop.d.ts

@@ -2,7 +2,7 @@
  * Agent loop that works with AgentMessage throughout.
  * Transforms to Message[] only at the LLM call boundary.
  */
-import { EventStream } from "ecagent/runtime/compat";
+import { EventStream } from "./runtime/compat.ts";
 import type { AgentContext, AgentEvent, AgentLoopConfig, AgentMessage, StreamFn } from "./types.ts";
 export type AgentEventSink = (event: AgentEvent) => Promise<void> | void;
 /**

package/ecagent/dist/agent-loop.js

@@ -2,7 +2,7 @@
  * Agent loop that works with AgentMessage throughout.
  * Transforms to Message[] only at the LLM call boundary.
  */
-import { EventStream, streamSimple, validateToolArguments, } from "ecagent/runtime/compat";
+import { EventStream, streamSimple, validateToolArguments, } from "./runtime/compat.js";
 /**
  * Start an agent loop with a new prompt message.
  * The prompt is added to the context and events are emitted for it.

package/ecagent/dist/agent.d.ts

@@ -1,4 +1,4 @@
-import { type ImageContent, type Message, type SimpleStreamOptions, type ThinkingBudgets, type Transport } from "ecagent/runtime/compat";
+import { type ImageContent, type Message, type SimpleStreamOptions, type ThinkingBudgets, type Transport } from "./runtime/compat.ts";
 import type { AfterToolCallContext, AfterToolCallResult, AgentEvent, AgentLoopTurnUpdate, AgentMessage, AgentState, BeforeToolCallContext, BeforeToolCallResult, PrepareNextTurnContext, QueueMode, StreamFn, ToolExecutionMode } from "./types.ts";
 export type { QueueMode } from "./types.ts";
 /** Options for constructing an {@link Agent}. */

package/ecagent/dist/agent.js

@@ -1,4 +1,4 @@
-import { streamSimple, } from "ecagent/runtime/compat";
+import { streamSimple, } from "./runtime/compat.js";
 import { runAgentLoop, runAgentLoopContinue } from "./agent-loop.js";
 function defaultConvertToLlm(messages) {
     return messages.filter((message) => message.role === "user" || message.role === "assistant" || message.role === "toolResult");

package/ecagent/dist/harness/agent-harness.d.ts

@@ -1,4 +1,4 @@
-import type { AssistantMessage, ImageContent, Model, Models } from "ecagent/runtime";
+import type { AssistantMessage, ImageContent, Model, Models } from "../runtime/index.ts";
 import type { AgentMessage, AgentTool, QueueMode, ThinkingLevel } from "../types.ts";
 import type { AbortResult, AgentHarnessEvent, AgentHarnessEventResultMap, AgentHarnessOptions, AgentHarnessOwnEvent, AgentHarnessResources, AgentHarnessStreamOptions, ExecutionEnv, NavigateTreeResult, PromptTemplate, Skill } from "./types.ts";
 export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate extends PromptTemplate = PromptTemplate, TTool extends AgentTool = AgentTool> {

package/ecagent/dist/harness/compaction/branch-summarization.d.ts

@@ -1,4 +1,4 @@
-import type { Model, Models } from "ecagent/runtime";
+import type { Model, Models } from "../../runtime/index.ts";
 import type { AgentMessage } from "../../types.ts";
 import type { BranchSummaryResult, Session, SessionTreeEntry } from "../types.ts";
 import { BranchSummaryError, type Result } from "../types.ts";

package/ecagent/dist/harness/compaction/compaction.d.ts

@@ -1,4 +1,4 @@
-import type { Model, Models, Usage } from "ecagent/runtime";
+import type { Model, Models, Usage } from "../../runtime/index.ts";
 import type { AgentMessage, ThinkingLevel } from "../../types.ts";
 import { CompactionError, type Result, type SessionTreeEntry } from "../types.ts";
 import { type FileOperations } from "./utils.ts";

package/ecagent/dist/harness/compaction/utils.d.ts

@@ -1,4 +1,4 @@
-import type { Message } from "ecagent/runtime";
+import type { Message } from "../../runtime/index.ts";
 import type { AgentMessage } from "../../types.ts";
 /** File paths touched by a session branch or compaction range. */
 export interface FileOperations {

package/ecagent/dist/harness/messages.d.ts

@@ -1,4 +1,4 @@
-import type { ImageContent, Message, TextContent } from "ecagent/runtime";
+import type { ImageContent, Message, TextContent } from "../runtime/index.ts";
 import type { AgentMessage } from "../types.ts";
 export declare const COMPACTION_SUMMARY_PREFIX = "The conversation history before this point was compacted into the following summary:\n\n<summary>\n";
 export declare const COMPACTION_SUMMARY_SUFFIX = "\n</summary>";

package/ecagent/dist/harness/session/session.d.ts

@@ -1,4 +1,4 @@
-import type { ImageContent, TextContent } from "ecagent/runtime";
+import type { ImageContent, TextContent } from "../../runtime/index.ts";
 import type { AgentMessage } from "../../types.ts";
 import type { CustomEntry, SessionContext, SessionMetadata, SessionStorage, SessionTreeEntry } from "../types.ts";
 export type ContextEntryTransform = (entries: readonly SessionTreeEntry[]) => readonly SessionTreeEntry[];

package/ecagent/dist/harness/types.d.ts

@@ -1,4 +1,4 @@
-import type { ImageContent, Model, Models, SimpleStreamOptions, TextContent, Transport } from "ecagent/runtime";
+import type { ImageContent, Model, Models, SimpleStreamOptions, TextContent, Transport } from "../runtime/index.ts";
 import type { AgentEvent, AgentMessage, AgentTool, QueueMode, ThinkingLevel } from "../index.ts";
 import type { Session } from "./session/session.ts";
 /** Result of a fallible operation. Expected failures are returned as `ok: false` instead of thrown. */

package/ecagent/dist/proxy.d.ts

@@ -2,7 +2,7 @@
  * Proxy stream function for apps that route LLM calls through a server.
  * The server manages auth and proxies requests to LLM providers.
  */
-import { type AssistantMessage, type AssistantMessageEvent, type Context, EventStream, type Model, type SimpleStreamOptions, type StopReason } from "ecagent/runtime";
+import { type AssistantMessage, type AssistantMessageEvent, type Context, EventStream, type Model, type SimpleStreamOptions, type StopReason } from "./runtime/index.ts";
 declare class ProxyMessageEventStream extends EventStream<AssistantMessageEvent, AssistantMessage> {
     constructor();
 }

package/ecagent/dist/proxy.js

@@ -3,7 +3,7 @@
  * The server manages auth and proxies requests to LLM providers.
  */
 // Internal import for JSON parsing utility
-import { EventStream, parseStreamingJson, } from "ecagent/runtime";
+import { EventStream, parseStreamingJson, } from "./runtime/index.js";
 // Create stream class matching ProxyMessageEventStream
 class ProxyMessageEventStream extends EventStream {
     constructor() {

package/ecagent/dist/types.d.ts

@@ -1,4 +1,4 @@
-import type { Api, AssistantMessage, AssistantMessageEvent, AssistantMessageEventStream, Context, ImageContent, Message, Model, SimpleStreamOptions, TextContent, Tool, ToolResultMessage } from "ecagent/runtime";
+import type { Api, AssistantMessage, AssistantMessageEvent, AssistantMessageEventStream, Context, ImageContent, Message, Model, SimpleStreamOptions, TextContent, Tool, ToolResultMessage } from "./runtime/index.ts";
 import type { Static, TSchema } from "typebox";
 /**
  * Stream function used by the agent loop. `Models.streamSimple` satisfies

package/kits/migrations/migrate-role-config-v5.mjs

@@ -45,6 +45,17 @@ function isRecord(value) {
   return !!value && typeof value === 'object' && !Array.isArray(value);
 }
 
+function normalizeRoleEffortCompat(value) {
+  if (!isRecord(value) || !isRecord(value.permissions)
+    || !Object.prototype.hasOwnProperty.call(value.permissions, 'baseagents.codex.reasoning')) return value;
+  const permissions = { ...value.permissions };
+  if (!Object.prototype.hasOwnProperty.call(permissions, 'baseagents.codex.effort')) {
+    permissions['baseagents.codex.effort'] = permissions['baseagents.codex.reasoning'];
+  }
+  delete permissions['baseagents.codex.reasoning'];
+  return { ...value, permissions };
+}
+
 function isValidAid(name) {
   const labels = name.split('.');
   return labels.length >= 3 && labels.every(label => /^[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?$/.test(label));
@@ -111,7 +122,21 @@ function planMigration(home) {
     if (fs.existsSync(registryFile) && input.roles !== undefined) {
       throw new Error(`${agentFile}: both config.roles and roles/index.json exist; resolve the ambiguous role source before migration`);
     }
-    if (input.$schema_version === 5 && input.roles === undefined && fs.existsSync(registryFile)) continue;
+    if (input.$schema_version === 5 && input.roles === undefined && fs.existsSync(registryFile)) {
+      const { value: registry } = readJson(registryFile);
+      validateOrThrow(validators.registry, registry, registryFile);
+      for (const roleId of registry.roles) {
+        const roleFile = path.join(rolesDir, `${roleId}.json`);
+        if (!fs.existsSync(roleFile)) continue;
+        const { value: roleValue, text: roleText } = readJson(roleFile);
+        const normalizedRole = normalizeRoleEffortCompat(roleValue);
+        validateRoleOrThrow(validators.role, normalizedRole, roleFile);
+        if (appendChange(changes, roleFile, 'role-config', roleText, normalizedRole)) {
+          summary.rolesWritten += 1;
+        }
+      }
+      continue;
+    }
 
     const policy = isRecord(input.roles) ? input.roles : {};
     const definitions = isRecord(policy.definitions) ? policy.definitions : {};
@@ -156,7 +181,7 @@ function planMigration(home) {
     appendChange(changes, registryFile, 'role-registry', existingRegistry, registry);
     for (const [roleId, definition] of Object.entries(definitions)) {
       const roleFile = path.join(rolesDir, `${roleId}.json`);
-      const roleValue = { $schema_version: 1, ...definition };
+      const roleValue = normalizeRoleEffortCompat({ $schema_version: 1, ...definition });
       validateRoleOrThrow(validators.role, roleValue, roleFile);
       if (appendChange(changes, roleFile, 'role-config', fs.existsSync(roleFile) ? fs.readFileSync(roleFile, 'utf8') : null, roleValue)) {
         summary.rolesWritten += 1;

package/kits/rules/01-overview.md

@@ -14,8 +14,9 @@ AUN（Agent Union Network）是 agent 间安全通信的网络协议，SDK 的 n
 
 AID（Agent Identifier）是主体在 AUN 网络中的唯一身份标识，格式为 `{name}.{issuer}`（如 `alice.agentid.pub`）。任何拥有域名的组织都可以作为 Issuer 签发 AID——去中心化，无需中央权威。AID 同时也是通信地址：身份即入口。
 
-> 本机 evolcore 新建 AID 时的默认 issuer 是 `agentid.pub`（`src/aun/aid/control-aid.ts` 的
-> `resolveControlIssuer()`，可用 `EVOLCORE_ISSUER` 覆盖）。文档里出现的 `xxx.aid.pub` 是旧例子。
+> 本机 evolcore 自动生成控制 AID 时的默认 AID domain 是 `agentid.cn`（`src/aun/aid/control-aid.ts` 的
+> `resolveControlAidDomain()`；可用 `daemon.json.aun.defaultAidDomain` 或 `EVOLCORE_AID_DOMAIN` 覆盖）。
+> 已存在的 AID 保持原域名不变；`EVOLCORE_ISSUER` 仍作为废弃兼容别名支持。
 
 访问 `https://{aid}` 可获取该主体的个人主页。
 

package/kits/schemas/_meta.json

@@ -1,6 +1,6 @@
 {
   "schemas": {
-    "daemon":          { "currentVersion": 3 },
+    "daemon":          { "currentVersion": 4 },
     "defaults":        { "currentVersion": 4 },
     "agent-config":    { "currentVersion": 10 },
     "relation-config": { "currentVersion": 8 },
@@ -34,6 +34,7 @@
     { "schema": "relation-config", "version": 6, "date": "2026-07-27", "description": "remove relation Session Renew effort; auxiliary inference is response-mode owned" },
     { "schema": "single-session",  "version": 2, "date": "2026-07-27", "description": "add optional baseagent-aware auxiliaryModel and auxiliaryEffort without factory defaults" },
     { "schema": "daemon",          "version": 3, "date": "2026-07-29", "description": "make daemon.json the exclusive source for all process debug settings" },
+    { "schema": "daemon",          "version": 4, "date": "2026-08-04", "description": "add configurable default AID domain for generated identities" },
     { "schema": "defaults",        "version": 3, "date": "2026-07-29", "description": "remove debug from the Agent configuration inheritance chain" },
     { "schema": "agent-config",    "version": 8, "date": "2026-07-29", "description": "reject Agent-level debug because debug is process-owned" },
     { "schema": "agent-config",    "version": 9, "date": "2026-07-29", "description": "add owner-controlled AUN group rules loading and Agent message access policy" },

package/kits/schemas/agent-config.schema.10.json

@@ -144,7 +144,13 @@
     "aun": {
       "type": "object",
       "x-merge": "dict",
-      "description": "Agent 级 AUN 通信配置"
+      "description": "Agent 级 AUN 通信配置",
+      "properties": {
+        "defaultEncrypt": {
+          "not": {},
+          "description": "不支持在 Agent 配置；请使用 daemon.json.aun.defaultEncrypt"
+        }
+      }
     },
     "models": {
       "type": "object",
@@ -164,6 +170,18 @@
         "not": {
           "type": "object",
           "required": ["fallbackModels"]
+        },
+        "properties": {
+          "headers": {
+            "type": "object",
+            "propertyNames": { "pattern": "^[!#$%&'*+.^_`|~0-9A-Za-z-]+$" },
+            "additionalProperties": { "type": "string", "pattern": "^[^\\u0000\\r\\n]*$" }
+          },
+          "queryParams": {
+            "type": "object",
+            "propertyNames": { "minLength": 1 },
+            "additionalProperties": { "type": "string" }
+          }
         }
       }
     },

package/kits/schemas/daemon.schema.4.json

@@ -0,0 +1,136 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "daemon.schema.4.json",
+  "title": "ProcessConfig v4 (daemon.json)",
+  "description": "进程级配置：daemon 自身运行配置，链外独立作用域，不进覆盖链。",
+  "x-logical-name": "daemon",
+  "x-scope": "process",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "$schema_version": { "type": "number", "const": 4, "default": 4, "x-merge": "scalar" },
+    "aid": { "type": "string", "description": "daemon 默认身份 AID", "x-merge": "scalar" },
+    "owners": {
+      "type": "array",
+      "items": { "type": "string" },
+      "description": "进程控制面鉴权名单（谁能远程管 daemon）",
+      "x-merge": "list"
+    },
+    "debug": {
+      "type": "object",
+      "description": "进程级调试配置；唯一合法来源为 daemon.json，不参与 Agent 覆盖链",
+      "x-merge": "dict",
+      "additionalProperties": false,
+      "properties": {
+        "logLevel": {
+          "type": "string",
+          "enum": ["DEBUG", "INFO", "WARN", "ERROR"],
+          "description": "daemon 日志级别"
+        },
+        "flusherDiag": {
+          "type": "boolean",
+          "description": "是否启用消息 flusher 诊断"
+        },
+        "aunTrace": {
+          "type": "boolean",
+          "description": "是否记录 AUN 协议 trace"
+        },
+        "aunSdkLog": {
+          "type": "boolean",
+          "description": "是否启用 AUN SDK 调试日志"
+        },
+        "upmsg": {
+          "type": "boolean",
+          "description": "是否向 Agent owner 发送 daemon 上线通知"
+        },
+        "eckSnapshots": {
+          "type": "boolean",
+          "default": false,
+          "description": "是否写入可能包含敏感上下文的 ECK 旁路调试快照"
+        }
+      }
+    },
+    "tunnel": {
+      "type": "object",
+      "description": "内网穿透配置",
+      "x-merge": "dict",
+      "properties": {
+        "targets": { "type": "array", "description": "穿透目标列表", "items": { "type": "object" } }
+      }
+    },
+    "aun": {
+      "type": "object",
+      "description": "AUN 进程配置",
+      "x-merge": "dict",
+      "properties": {
+        "encryptionSeed": { "type": ["string", "null"], "description": "已废弃兼容字段；EvolCore 固定使用内置值，检测到其他值时拒绝启动并提示联系管理人员" },
+        "gatewayUrl": {
+          "type": "string",
+          "description": "控制 AID 使用的显式 AUN WebSocket 网关；省略时由 SDK 缓存和 AID 发现决定"
+        },
+        "defaultAidDomain": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)+$",
+          "description": "自动生成控制 AID 与 benchmark AID 使用的后缀域名；不影响已有 AID"
+        },
+        "minEvolVersion": {
+          "type": "string",
+          "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+          "description": "AUN Menu 允许的最低 Evol 客户端版本；省略时不限制"
+        },
+        "menuTokenRequired": {
+          "type": "boolean",
+          "default": false,
+          "description": "是否要求普通 AUN Menu 请求携带有效 menu_token；默认 false"
+        },
+        "defaultEncrypt": {
+          "type": "boolean",
+          "description": "所有 daemon 管理的 AUN 通道共用的出站默认加密值；省略时为 true"
+        }
+      }
+    },
+    "serviceProxy": {
+      "type": "object",
+      "description": "AUN Service Proxy：把一个本地 HTTP/WS 服务暴露到 AUN 网络",
+      "x-merge": "dict",
+      "properties": {
+        "enabled": { "type": "boolean", "description": "是否启用 Service Proxy" },
+        "services": { "type": "array", "description": "暴露到 AUN 的本地服务列表", "items": { "type": "object" } }
+      }
+    },
+    "configSnapshots": {
+      "type": "boolean",
+      "default": true,
+      "description": "是否自动维护配置快照、启动日志和自检回落",
+      "x-merge": "scalar"
+    },
+    "idleMonitor": {
+      "type": "object",
+      "description": "流式输出空闲监控配置",
+      "x-merge": "dict",
+      "properties": {
+        "enabled": { "type": "boolean", "default": true, "description": "是否启用空闲监控" },
+        "timeout": { "type": "number", "default": 120, "description": "空闲超时秒数" },
+        "retryAttemptTimeout": { "type": "number", "description": "API 重试尝试连续无事件时的超时秒数；未设置时继承 timeout" },
+        "maxExecutionTime": { "type": "number", "default": 3600, "description": "单个任务总执行时限（秒），等待审批期间仍继续计时" }
+      }
+    },
+    "ecweb": {
+      "type": "object",
+      "description": "web 控制台开关/端口",
+      "x-merge": "dict",
+      "properties": {
+        "enabled": { "type": "boolean", "description": "是否启用 web 控制台" },
+        "port": { "type": "number", "description": "web 控制台监听端口" }
+      }
+    },
+    "watch": {
+      "type": "object",
+      "description": "日志监听配置",
+      "x-merge": "dict",
+      "properties": {
+        "logTypes": { "type": "array", "description": "要监听的日志类型", "items": { "type": "string" } }
+      }
+    }
+  }
+}

package/kits/schemas/defaults.schema.4.json

@@ -35,6 +35,16 @@
         "type": "object",
         "additionalProperties": true,
         "properties": {
+          "headers": {
+            "type": "object",
+            "propertyNames": { "pattern": "^[!#$%&'*+.^_`|~0-9A-Za-z-]+$" },
+            "additionalProperties": { "type": "string", "pattern": "^[^\\u0000\\r\\n]*$" }
+          },
+          "queryParams": {
+            "type": "object",
+            "propertyNames": { "minLength": 1 },
+            "additionalProperties": { "type": "string" }
+          },
           "fallbackModels": {
             "type": "array",
             "maxItems": 3,
@@ -68,7 +78,11 @@
       "properties": {
         "keystorePath": { "type": "string" },
         "encryptionSeed": { "type": "string" },
-        "gatewayUrl": { "type": "string" }
+        "gatewayUrl": { "type": "string" },
+        "defaultEncrypt": {
+          "not": {},
+          "description": "不支持在 Agent defaults 配置；请使用 daemon.json.aun.defaultEncrypt"
+        }
       }
     },
     "responseMode": { "type": "string", "x-merge": "scalar" },

package/kits/schemas/relation-config.schema.8.json

@@ -9,7 +9,16 @@
   "not": {
     "anyOf": [
       { "required": ["permissionMode"] },
-      { "required": ["roles"] }
+      { "required": ["roles"] },
+      {
+        "required": ["aun"],
+        "properties": {
+          "aun": {
+            "type": "object",
+            "required": ["defaultEncrypt"]
+          }
+        }
+      }
     ]
   },
   "properties": {
@@ -26,6 +35,18 @@
         "not": {
           "type": "object",
           "required": ["fallbackModels"]
+        },
+        "properties": {
+          "headers": {
+            "type": "object",
+            "propertyNames": { "pattern": "^[!#$%&'*+.^_`|~0-9A-Za-z-]+$" },
+            "additionalProperties": { "type": "string", "pattern": "^[^\\u0000\\r\\n]*$" }
+          },
+          "queryParams": {
+            "type": "object",
+            "propertyNames": { "minLength": 1 },
+            "additionalProperties": { "type": "string" }
+          }
         }
       }
     },

package/kits/schemas/role-config.schema.1.json

@@ -13,7 +13,7 @@
     { "value": "baseagents.claude.model", "label": "Claude Model", "description": "角色可使用的 Claude 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Claude models" }, { "value": "claude-opus-*", "label": "Claude Opus family" }, { "value": "claude-sonnet-*", "label": "Claude Sonnet family" }, { "value": "claude-haiku-*", "label": "Claude Haiku family" }] },
     { "value": "baseagents.claude.effort", "label": "Claude Effort", "description": "角色使用 Claude 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }, { "value": "max", "label": "Max" }] },
     { "value": "baseagents.codex.model", "label": "Codex Model", "description": "角色可使用的 Codex 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Codex models" }, { "value": "gpt-5.4*", "label": "GPT-5.4 family" }, { "value": "gpt-5.3-codex*", "label": "GPT-5.3 Codex family" }] },
-    { "value": "baseagents.codex.reasoning", "label": "Codex Reasoning", "description": "角色使用 Codex 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }] },
+    { "value": "baseagents.codex.effort", "label": "Codex Effort", "description": "角色使用 Codex 时的默认推理强度及可覆盖范围。", "valueType": "enum", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "static-enum", "options": [{ "value": "auto", "label": "Auto" }, { "value": "low", "label": "Low" }, { "value": "medium", "label": "Medium" }, { "value": "high", "label": "High" }, { "value": "xhigh", "label": "Xhigh" }] },
     { "value": "baseagents.gemini.model", "label": "Gemini Model", "description": "角色可使用的 Gemini 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Gemini models" }, { "value": "gemini-*", "label": "Gemini model family" }] },
     { "value": "baseagents.hermes.model", "label": "Hermes Model", "description": "角色可使用的 Hermes 默认模型和模型白名单。", "valueType": "model", "hasOptions": true, "relationOverrideApplied": true, "constraintsApplied": true, "editable": true, "x-runtimeApplied": true, "x-optionsSource": "model-catalog", "patterns": [{ "value": "*", "label": "All Hermes models" }] }
   ],
@@ -90,7 +90,7 @@
             "reason": { "type": "string", "description": "采用该 Claude 推理强度策略的可审计原因或管理备注。" }
           }
         },
-        "baseagents.codex.reasoning": {
+        "baseagents.codex.effort": {
           "type": "object",
           "required": ["default", "allowOverride"],
           "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evolcore",
-  "version": "0.0.7",
+  "version": "0.0.9",
   "description": "AI Agent gateway connecting Claude, Codex, Gemini, and the bundled ecagent runner to messaging channels with multi-project session management",
   "type": "module",
   "main": "dist/index.js",
@@ -9,10 +9,8 @@
   },
   "files": [
     "dist/",
-    "ecagent/src/",
     "ecagent/dist/",
-    "ecagent/package.json",
-    "ecagent/tsconfig.build.json",
+    "!ecagent/dist/**/*.map",
     "ecagent/LICENSE",
     "ecagent/NOTICE",
     "ecagent/README.md",

package/ecagent/dist/agent-loop.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-loop.d.ts","sourceRoot":"","sources":["../src/agent-loop.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAGN,WAAW,EAIX,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACX,YAAY,EACZ,UAAU,EACV,eAAe,EACf,YAAY,EAIZ,QAAQ,EACR,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEzE;;;GAGG;AACH,wBAAgB,SAAS,CACxB,OAAO,EAAE,YAAY,EAAE,EACvB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,MAAM,CAAC,EAAE,WAAW,EACpB,QAAQ,CAAC,EAAE,QAAQ,GACjB,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAiBzC;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,MAAM,CAAC,EAAE,WAAW,EACpB,QAAQ,CAAC,EAAE,QAAQ,GACjB,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAwBzC;AAED,wBAAsB,YAAY,CACjC,OAAO,EAAE,YAAY,EAAE,EACvB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,cAAc,EACpB,MAAM,CAAC,EAAE,WAAW,EACpB,QAAQ,CAAC,EAAE,QAAQ,GACjB,OAAO,CAAC,YAAY,EAAE,CAAC,CAgBzB;AAED,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,cAAc,EACpB,MAAM,CAAC,EAAE,WAAW,EACpB,QAAQ,CAAC,EAAE,QAAQ,GACjB,OAAO,CAAC,YAAY,EAAE,CAAC,CAiBzB"}