evolcore 0.0.8 → 0.0.9

package/dist/cli/aun-commands.js

@@ -808,7 +808,7 @@ Options:
   --app <name>          指定应用 slot（独立消费通道，不影响 daemon）
   --aun-path <path>     指定 AUN keystore 根
   --format json         输出 JSON 格式
-  --encrypt             启用端到端加密（密文发送）
+  --encrypt             强制端到端加密（未指定时使用 daemon 默认值）
   --no-encrypt          强制明文发送（优先于 --encrypt）
   --thread <id>         指定话题 ID（用于多话题路由）
   --session <latest|all|id> 按 EvolCore 逻辑会话过滤历史（默认 latest）
@@ -1048,9 +1048,10 @@ Options:
             }
             body = { mode: 'text', text };
         }
-        // 加密态：--encrypt 密文，--no-encrypt 明文，都不带默认明文（人类终端直用即此）。
-        // 模型自主发送时由系统提示规则要求按入站消息加密态显式带参。--no-encrypt 优先于 --encrypt。
-        const encrypt = args.includes('--encrypt') && !args.includes('--no-encrypt');
+        // 显式 flag 覆盖 daemon 默认值；未指定时保留 undefined。
+        const encrypt = args.includes('--no-encrypt')
+            ? false
+            : args.includes('--encrypt') ? true : undefined;
         const thread = getArgValue(args, '--thread');
         const returnPolicyRaw = getArgValue(args, '--return');
         if (returnPolicyRaw && returnPolicyRaw !== 'required' && returnPolicyRaw !== 'none') {
@@ -1292,7 +1293,7 @@ Options:
   --app <name>          指定应用 slot（独立消费通道，不影响 daemon）
   --aun-path <path>     指定 AUN keystore 根
   --format json         输出 JSON 格式
-  --encrypt             启用端到端加密（仅 send）
+  --encrypt             强制端到端加密（未指定时使用 daemon 默认值；仅 send）
   --no-encrypt          强制明文发送（优先于 --encrypt；仅 send）
   --thread <id>         指定话题 ID（仅 send）
   --return <none|required> 跨会话发送必填（仅 send；Trigger 只能使用 none）
@@ -1469,8 +1470,10 @@ Options:
             body = { mode: 'text', text };
         }
         const mentions = collectMentions();
-        // --encrypt 密文，--no-encrypt 明文，都不带默认明文。--no-encrypt 优先。
-        const encryptGroup = args.includes('--encrypt') && !args.includes('--no-encrypt');
+        // 显式 flag 覆盖 daemon 默认值；未指定时保留 undefined。
+        const encryptGroup = args.includes('--no-encrypt')
+            ? false
+            : args.includes('--encrypt') ? true : undefined;
         const thread = getArgValue(args, '--thread');
         const returnPolicyRaw = getArgValue(args, '--return');
         if (returnPolicyRaw && returnPolicyRaw !== 'required' && returnPolicyRaw !== 'none') {

package/dist/cli/daemon-commands.js

@@ -15,9 +15,8 @@ import { cmdInit, needsControlAidInit, initTail } from './init.js';
 import * as platform from '../utils/cross-platform.js';
 import { EventBus } from '../core/event-bus.js';
 import { tryUpgrade, tryUpgradeAunSdk, tryUpgradeGlobalPkg, resolveGlobalPkg } from '../utils/npm-ops.js';
-import { fetchEcwebPairCode } from '../utils/ecweb-utils.js';
+import { ecwebVersionRequirementError, fetchEcwebPairCode, resolveEcwebLaunchCommand } from '../utils/ecweb-utils.js';
 import { isHostChinese } from '../utils/locale.js';
-import { resolveEcwebLaunchCommand } from '../utils/ecweb-utils.js';
 import { resolveAunCoreSdkPkg, AUN_CORE_SDK_PKG } from '../aun/aid/client.js';
 import { scanInstances, cleanupInstances, findOrphanProcesses, killOrphans } from '../utils/instance-registry.js';
 import { filterLogFiles, deriveLogTypes, computePreChecked, validateLogTypes, shortLogName as shortLogNameLocal } from './watch-logs.js';
@@ -2619,6 +2618,22 @@ export async function startEcwebIfEnabled(p) {
     const cfg = loadDaemonConfig();
     if (!cfg.ecweb?.enabled)
         return false;
+    const installedPkg = resolveGlobalPkg(WEB_PACKAGE_NAME);
+    if (!installedPkg) {
+        console.log(`⚠ EC Web 未安装，跳过启动（运行 npm i -g ${WEB_PACKAGE_NAME}@latest 后可用）`);
+        return false;
+    }
+    const versionError = ecwebVersionRequirementError(installedPkg.version);
+    if (versionError) {
+        try {
+            await stopEcwebIfRunning(p);
+        }
+        catch (error) {
+            console.log(`⚠ EC Web 旧进程未清理干净: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        console.log(`❌ ${versionError}`);
+        return false;
+    }
     let wasRunning = false;
     try {
         wasRunning = await stopEcwebIfRunning(p); // 先停旧进程（有则停），保证加载最新代码
@@ -2629,9 +2644,9 @@ export async function startEcwebIfEnabled(p) {
     }
     const port = cfg.ecweb.port ?? 42705;
     const args = ['--home', p.root, '--port', String(port)];
-    const launch = resolveEcwebLaunchCommand(args);
+    const launch = resolveEcwebLaunchCommand(args, { installedPkg });
     if (!launch) {
-        console.log(`⚠ EC Web 未安装，跳过启动（运行 npm i -g ${WEB_PACKAGE_NAME} 后可用）`);
+        console.log(`⚠ EC Web 启动入口不存在，请重新安装: npm i -g ${WEB_PACKAGE_NAME}@latest`);
         return false;
     }
     // 防御性检查：确保 command 和 args 有效

package/dist/cli/index.js

@@ -113,6 +113,8 @@ export async function main(args) {
     --baseagent <claude|codex|gemini|ecagent>    可选。默认从 PATH 检测，ecagent 需显式选择
     --projectpath <abs-path>             可选。默认项目目录（必须绝对路径，自动创建）
     --ecweb                              可选。安装 EC Web 并启用自启动
+    --auto-start                         Windows/macOS 上启用 EvolCore 登录自启动
+    --no-auto-start                      Windows/macOS 上禁用 EvolCore 登录自启动
     --format json                        可选但推荐。stdout 输出 init.result JSON
     --force                              已有不同 owner 时强制覆盖
 
@@ -162,14 +164,22 @@ export async function main(args) {
                 const { suppressSdkLogs } = await import('../aun/aid/index.js');
                 suppressSdkLogs();
                 const nonInteractive = args.includes('--non-interactive');
+                const wantsAutoStart = args.includes('--auto-start');
+                const wantsNoAutoStart = args.includes('--no-auto-start');
+                if (wantsAutoStart && wantsNoAutoStart) {
+                    console.error('❌ --auto-start 与 --no-auto-start 不能同时使用');
+                    process.exitCode = 1;
+                    break;
+                }
                 const initialized = await cmdInit({
                     nonInteractive,
                     baseagent: getArgValue(args, '--baseagent'),
                     force: args.includes('--force'),
                     owner: getArgValue(args, '--owner'),
                     projectpath: getArgValue(args, '--projectpath'),
-                    ecweb: args.includes('--ecweb'),
+                    ecweb: args.includes('--ecweb') ? true : undefined,
                     format: getArgValue(args, '--format'),
+                    autoStart: wantsAutoStart ? true : wantsNoAutoStart ? false : undefined,
                 });
                 if (!initialized)
                     process.exitCode = 1;

package/dist/cli/init.js

@@ -11,6 +11,7 @@ import { getCodexAppServerAvailability, isCodexAppServerAvailable } from '../age
 import { resolveEcagentConfig } from '../agents/baseagent.js';
 import { defaultProjectsRoot } from '../utils/project-path.js';
 import { WEB_CLI_BIN, WEB_PACKAGE_LATEST } from '../product.js';
+import { autostartInstalled, autostartPlatformLabel, configureAutostart } from '../utils/autostart.js';
 // ==================== Helpers ====================
 function ask(rl, question) {
     return new Promise(resolve => rl.question(question, resolve));
@@ -66,6 +67,40 @@ function buildDefaults(chosen, available, projectsDefaultPath) {
 function writeDefaults(chosen, available, projectsDefaultPath) {
     saveDefaultsSafe(buildDefaults(chosen, available, projectsDefaultPath));
 }
+function hasCompletedInitConfig() {
+    const p = resolvePaths();
+    const daemon = loadDaemonConfig();
+    if (!daemon.aid || !Array.isArray(daemon.owners) || daemon.owners.length === 0)
+        return false;
+    try {
+        const defaults = JSON.parse(fs.readFileSync(p.defaultsConfig, 'utf8'));
+        return typeof defaults?.active_baseagent === 'string' && defaults.active_baseagent.trim().length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+function isAutostartOnlyRequest(options) {
+    return options?.autoStart !== undefined
+        && !options.baseagent
+        && !options.force
+        && !options.owner
+        && options.projectpath === undefined
+        && options.ecweb === undefined
+        && options.format === undefined;
+}
+function applyExplicitAutostart(enabled, runtimeRoot) {
+    const result = configureAutostart(enabled, runtimeRoot);
+    if (!result.ok) {
+        console.log(`❌ ${autostartPlatformLabel() || '登录自启'}配置失败: ${result.error || '未知错误'}`);
+    }
+    else {
+        console.log(enabled
+            ? `✓ 已启用 ${autostartPlatformLabel() || '登录'}自启`
+            : `✓ 已禁用 ${autostartPlatformLabel() || '登录'}自启`);
+    }
+    return result.ok;
+}
 /** 启动门禁判定：缺控制 AID 且处于交互式终端时，应进 init 向导补全。
  *  非 TTY（restart-monitor/systemd/管道）即使缺 aid 也不进 init（无法交互），由 daemon 侧 warn 兜底。 */
 export function needsControlAidInit(aid, isTty) {
@@ -128,14 +163,29 @@ export async function cmdInit(options) {
             ecweb: options.ecweb,
             force: options.force,
             format: options.format,
+            autoStart: options.autoStart,
         });
         return true;
     }
+    if (options?.autoStart === true && !autostartPlatformLabel()) {
+        console.log('❌ --auto-start 仅支持 Windows 和 macOS 主机');
+        return false;
+    }
     const p = resolvePaths();
     ensureDataDirs();
+    // A bound installation may toggle login autostart independently of the
+    // Baseagent setup wizard. This is also the path used by public installers.
+    if (isAutostartOnlyRequest(options) && hasCompletedInitConfig()) {
+        return applyExplicitAutostart(options.autoStart, p.root);
+    }
     // ── 1. 单进程互斥 ──
     const aliveMains = scanInstances().mains.filter(m => m.alive);
     if (aliveMains.length > 0) {
+        // Explicit autostart flags only change the login task; they do not need
+        // to rewrite init configuration or stop an already running daemon.
+        if (isAutostartOnlyRequest(options)) {
+            return applyExplicitAutostart(options.autoStart, p.root);
+        }
         const pids = aliveMains.map(m => m.record.pid).join(', ');
         console.log(`❌ EvolCore 正在运行 (PID: ${pids})，请先执行 ec stop`);
         return false;
@@ -207,7 +257,11 @@ export async function cmdInit(options) {
         await runInteractive();
     }
     // ── 共享 tail（单一出口）：提示创建 agent + 生成控制 AID ──
-    return initTail({ invokedByStart: options?.invokedByStart });
+    return initTail({
+        invokedByStart: options?.invokedByStart,
+        nonInteractive: options?.nonInteractive,
+        autoStart: options?.autoStart,
+    });
     // ── 内部函数 ──
     async function runInteractive() {
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
@@ -318,6 +372,7 @@ export async function initTail(options = {}) {
     // 控制 AID：daemon 进程身份。缺失则生成并写回 daemon.json（幂等：已存在则跳过）。
     const daemonConfig = loadDaemonConfig();
     let controlAidReady = !!daemonConfig.aid;
+    let autoStartReady = true;
     if (daemonConfig.aid) {
         console.log(`✓ 控制 AID 已存在: ${daemonConfig.aid}`);
     }
@@ -335,11 +390,12 @@ export async function initTail(options = {}) {
         }
     }
     // 交互式询问：使用单一 readline 实例避免 stdin 状态混乱
-    if (process.stdin.isTTY) {
+    if (!options.nonInteractive && process.stdin.isTTY) {
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         try {
             await handleOwnersPrompt(rl);
             await handleEcwebPrompt(rl);
+            await handleAutostartPrompt(rl);
         }
         finally {
             try {
@@ -348,6 +404,38 @@ export async function initTail(options = {}) {
             catch { /* ignore */ }
         }
     }
+    else if (options.autoStart !== undefined) {
+        autoStartReady = applyAutostart(options.autoStart);
+    }
+    async function handleAutostartPrompt(rl) {
+        if (options.autoStart !== undefined) {
+            autoStartReady = applyAutostart(options.autoStart);
+            return;
+        }
+        if (!autostartPlatformLabel())
+            return;
+        if (autostartInstalled()) {
+            console.log(`✓ ${autostartPlatformLabel()} 登录自启已启用`);
+            return;
+        }
+        const platform = autostartPlatformLabel();
+        const answer = (await ask(rl, `\n是否启用 ${platform} 登录自启？[y/N] `)).trim().toLowerCase();
+        if (answer === 'y' || answer === 'yes')
+            autoStartReady = applyAutostart(true);
+        else
+            console.log(`  已跳过 ${platform} 登录自启（可日后重新运行 ec init 开启）`);
+    }
+    function applyAutostart(enabled) {
+        const result = configureAutostart(enabled, resolvePaths().root);
+        if (!result.ok) {
+            console.log(`  ❌ ${autostartPlatformLabel() || '登录自启'}配置失败: ${result.error || '未知错误'}`);
+            return false;
+        }
+        console.log(enabled
+            ? `  ✓ 已启用 ${autostartPlatformLabel() || '登录'}自启`
+            : `  ✓ 已禁用 ${autostartPlatformLabel() || '登录'}自启`);
+        return true;
+    }
     async function handleOwnersPrompt(rl) {
         const daemonConfigForOwners = loadDaemonConfig();
         if (daemonConfigForOwners.aid && (!daemonConfigForOwners.owners || daemonConfigForOwners.owners.length === 0)) {
@@ -427,11 +515,13 @@ export async function initTail(options = {}) {
     }
     // ec start 会接着启动 daemon，并在其 ready 后给出可用的 Agent 创建入口。
     if (options.invokedByStart)
-        return controlAidReady;
+        return controlAidReady && autoStartReady;
     if (!controlAidReady) {
         console.error('\n❌ EvolCore 初始化未完成：控制 AID 未配置。联网后重新运行 ec init。');
         return false;
     }
+    if (!autoStartReady)
+        return false;
     // 初始化完成总结
     console.log('\n✓ EvolCore 初始化完成');
     const finalCfg = loadDaemonConfig();
@@ -525,6 +615,9 @@ export async function cmdInitNonInteractive(opts, dependencies = {}) {
     if (format !== undefined && format !== 'json') {
         fail('INVALID_FORMAT', `--format only supports json: ${format}`, EXIT_USAGE, format);
     }
+    if (opts.autoStart === true && !autostartPlatformLabel()) {
+        fail('AUTOSTART_UNSUPPORTED', '--auto-start is supported only on Windows and macOS hosts', EXIT_USAGE, format);
+    }
     // ── 1. owner 校验 ──
     if (!opts.owner) {
         fail('MISSING_OWNER', '--owner is required in non-interactive mode', EXIT_USAGE, format);
@@ -649,6 +742,12 @@ export async function cmdInitNonInteractive(opts, dependencies = {}) {
     catch (e) {
         fail('IO_ERROR', `failed to write daemon.json: ${e?.message || e}`, EXIT_RUNTIME, format);
     }
+    if (opts.autoStart !== undefined) {
+        const autostart = configureAutostart(opts.autoStart, p.root);
+        if (!autostart.ok) {
+            fail('AUTOSTART_CONFIG_FAILED', autostart.error || 'failed to configure login autostart', EXIT_RUNTIME, format);
+        }
+    }
     // ── 10. 输出 init.result ──
     const result = {
         type: 'init.result',
@@ -656,7 +755,7 @@ export async function cmdInitNonInteractive(opts, dependencies = {}) {
         controlAid: controlAid,
         ownerAid,
         owners: [ownerAid],
-        ecwebEnabled: opts.ecweb === true,
+        ecwebEnabled: opts.ecweb === true || existingCfg.ecweb?.enabled === true,
         baseagent: chosenBaseagent,
         projectsDefaultPath: projectsDefaultPath ?? null,
         defaultsPath: p.defaultsConfig,

package/dist/cli/model.js

@@ -205,7 +205,7 @@ function modelScopeFromSource(source) {
     return undefined;
 }
 function resolveModelConfig(sel, baseagent) {
-    const effortKey = baseagent === 'codex' ? 'reasoning' : 'effort';
+    const effortKey = 'effort';
     const model = resolveEffectiveFieldWithSource(`baseagents.${baseagent}.model`, sel, { cache: true });
     const effort = resolveEffectiveFieldWithSource(`baseagents.${baseagent}.${effortKey}`, sel, { cache: true });
     const modelDecision = sel.role
@@ -448,12 +448,12 @@ async function cmdUse(args, formatJson) {
     const effortVal = effort === 'auto' ? null : (effort ?? undefined);
     if (isManagedTargetedWriteEnv(args)) {
         if (effortVal !== undefined) {
-            const effortKey = ba === 'codex' ? 'reasoning' : 'effort';
+            const effortKey = 'effort';
             preflightManagedFieldOverride(sel, role, `baseagents.${ba}.${effortKey}`, effortVal, formatJson);
         }
         await setManagedModelField(sel, `baseagents.${ba}.model`, modelId, formatJson);
         if (effortVal !== undefined) {
-            const effortKey = ba === 'codex' ? 'reasoning' : 'effort';
+            const effortKey = 'effort';
             await setManagedModelField(sel, `baseagents.${ba}.${effortKey}`, effortVal, formatJson);
         }
         describeWrite(scope, sel, modelId, effort ?? null, formatJson);
@@ -490,7 +490,7 @@ async function cmdEffort(args, formatJson) {
     const ba = activeBaseagent(sel.self);
     const val = level === 'auto' ? null : level;
     if (isManagedTargetedWriteEnv(args)) {
-        const effortKey = ba === 'codex' ? 'reasoning' : 'effort';
+        const effortKey = 'effort';
         preflightManagedFieldOverride(sel, explicitOrDerivedRole(args, sel), `baseagents.${ba}.${effortKey}`, val, formatJson);
         await setManagedModelField(sel, `baseagents.${ba}.${effortKey}`, val, formatJson);
         describeWrite(scope, sel, null, level, formatJson);
@@ -520,7 +520,7 @@ async function cmdReset(args, formatJson) {
     const scope = determineWriteScope(sel, formatJson);
     const ba = activeBaseagent(sel.self);
     if (isManagedTargetedWriteEnv(args)) {
-        const effortKey = ba === 'codex' ? 'reasoning' : 'effort';
+        const effortKey = 'effort';
         const role = explicitOrDerivedRole(args, sel);
         preflightManagedFieldOverride(sel, role, `baseagents.${ba}.model`, null, formatJson);
         preflightManagedFieldOverride(sel, role, `baseagents.${ba}.${effortKey}`, null, formatJson);

package/dist/config/builtin-role-templates.js

@@ -1,18 +1,19 @@
 import path from 'path';
 import { kitsRoleTemplatesDir } from '../paths.js';
 import { createErrorCapturingReader, fileCache } from '../core/daemon-file-cache.js';
-import { validateRoleConfig } from './role-schema.js';
+import { normalizeRoleEffortCompat, validateRoleConfig } from './role-schema.js';
 import { expectedRoleRank } from './role-ranks.js';
 export const BUILTIN_ROLE_IDS = ['owner', 'admin', 'member', 'visitor'];
 export function validateBuiltinRoleTemplateDefinition(roleId, raw) {
-    const issues = validateRoleConfig(raw);
+    const normalizedRaw = normalizeRoleEffortCompat(raw);
+    const issues = validateRoleConfig(normalizedRaw);
     if (issues.length) {
         return {
             definition: null,
             error: `built-in role template failed validation: ${issues.map(issue => `${issue.field} ${issue.message}`).join('; ')}`,
         };
     }
-    const { $schema_version: _schemaVersion, ...definition } = raw;
+    const { $schema_version: _schemaVersion, ...definition } = normalizedRaw;
     if (BUILTIN_ROLE_IDS.includes(roleId)) {
         const expectedRank = expectedRoleRank(roleId);
         if (definition.rank !== expectedRank) {

package/dist/config/config-field-policy.js

@@ -75,7 +75,7 @@ export function resolveConfigFieldRule(fieldPath) {
         const [, baseagent, leaf] = parts;
         if (!SUPPORTED_BASEAGENTS.has(baseagent))
             return { class: 'unknown' };
-        const permissionKey = `baseagents.${baseagent}.${leaf}`;
+        const permissionKey = `baseagents.${baseagent}.${leaf === 'reasoning' ? 'effort' : leaf}`;
         if (leaf === 'model' && parts.length === 3)
             return scalar(permissionKey, 'string');
         if ((leaf === 'effort' || leaf === 'reasoning') && parts.length === 3)
@@ -178,7 +178,11 @@ export function resolveRoleFieldPermission(permissions, fieldPath) {
     const rule = resolveConfigFieldRule(fieldPath);
     if (!rule.rolePermissionKey)
         return undefined;
-    return permissions[fieldPath] ?? permissions[rule.rolePermissionKey];
+    return permissions[fieldPath]
+        ?? permissions[rule.rolePermissionKey]
+        ?? (rule.rolePermissionKey === 'baseagents.codex.effort'
+            ? permissions['baseagents.codex.reasoning']
+            : undefined);
 }
 /**
  * Map relation-scoped config fields back to their public command capability.

package/dist/config/config-manager.js

@@ -505,10 +505,40 @@ export function read(target, sel, opts = {}) {
         : target === ConfigTarget.Relation
             ? foldLegacyProactiveBlock(migrated)
             : migrated;
+    // Agent read compatibility may move the legacy top-level `agents` block to
+    // `baseagents`, so canonicalize effort after that structural migration.
+    const canonicalized = normalizeBaseagentEffortCompat(normalized);
     if (!opts.expand)
-        return normalized;
+        return canonicalized;
     const resolver = buildEnvResolver(envScopeFor(sel));
-    return expandVars(normalized, resolver);
+    return expandVars(canonicalized, resolver);
+}
+/**
+ * Canonicalize the legacy Codex `reasoning` config key to the public `effort`
+ * key.  The runner may still accept `reasoning` as an input alias, but all
+ * config scopes resolve and persist the same `effort` field.
+ */
+function normalizeBaseagentEffortCompat(value) {
+    const rawBaseagents = value?.baseagents;
+    if (!rawBaseagents || typeof rawBaseagents !== 'object' || Array.isArray(rawBaseagents))
+        return value;
+    const baseagents = { ...rawBaseagents };
+    let changed = false;
+    for (const [name, rawBlock] of Object.entries(baseagents)) {
+        if (!rawBlock || typeof rawBlock !== 'object' || Array.isArray(rawBlock))
+            continue;
+        const block = { ...rawBlock };
+        if (Object.prototype.hasOwnProperty.call(block, 'reasoning')) {
+            if (block.effort === undefined)
+                block.effort = block.reasoning;
+            delete block.reasoning;
+            baseagents[name] = block;
+            changed = true;
+        }
+    }
+    if (!changed)
+        return value;
+    return { ...value, baseagents };
 }
 function normalizeAgentConfigForRead(value, aid) {
     const config = foldLegacyProactiveBlock(normalizeAgentLifecycle(value));
@@ -549,7 +579,7 @@ function groupFor(target, sel) {
     return 'config';
 }
 function normalizeAgentConfigForWrite(value) {
-    const mutable = { ...value };
+    const mutable = normalizeBaseagentEffortCompat({ ...value });
     normalizeShowActivitiesCompat(mutable);
     // AID 格式校验
     if (mutable.aid && !isValidAid(mutable.aid)) {
@@ -587,7 +617,7 @@ function normalizeProcessConfigForWrite(value) {
     }
 }
 function normalizeRelationConfigForWrite(value) {
-    const mutable = { ...value };
+    const mutable = normalizeBaseagentEffortCompat({ ...value });
     normalizeShowActivitiesCompat(mutable);
     return mutable;
 }
@@ -653,14 +683,15 @@ export function write(target, value, sel, opts = {}) {
         : loadSchema(TARGET_SCHEMA[target]);
     const withVer = ensureSchemaVersion(value, schema.version);
     const migrated = withVer;
+    const canonicalized = normalizeBaseagentEffortCompat(migrated);
     // Agent config 写入规范化（aid 校验、projects 字段清理）
     const normalized = target === ConfigTarget.Agent
-        ? normalizeAgentConfigForWrite(migrated)
+        ? normalizeAgentConfigForWrite(canonicalized)
         : target === ConfigTarget.Relation
-            ? normalizeRelationConfigForWrite(migrated)
+            ? normalizeRelationConfigForWrite(canonicalized)
             : target === ConfigTarget.Process
-                ? normalizeProcessConfigForWrite(migrated)
-                : migrated;
+                ? normalizeProcessConfigForWrite(canonicalized)
+                : canonicalized;
     // 1. Schema 校验
     if (!opts.skipValidate) {
         validateOrThrow(schema, normalized, target);
@@ -870,9 +901,15 @@ function validateOrThrow(schema, value, target) {
 function validateProcessOnlyFields(target, value) {
     if (target === ConfigTarget.Process || !value || typeof value !== 'object')
         return [];
-    if (!Object.prototype.hasOwnProperty.call(value, 'debug'))
-        return [];
-    return ['/debug is only allowed in process config'];
+    const errors = [];
+    if (Object.prototype.hasOwnProperty.call(value, 'debug')) {
+        errors.push('/debug is only allowed in process config');
+    }
+    const aun = value.aun;
+    if (aun && typeof aun === 'object' && Object.prototype.hasOwnProperty.call(aun, 'defaultEncrypt')) {
+        errors.push('/aun/defaultEncrypt is only allowed in process config');
+    }
+    return errors;
 }
 function validateProcessAidDomain(target, value) {
     if (target !== ConfigTarget.Process || !value || typeof value !== 'object')

package/dist/config/role-schema.js

@@ -1,4 +1,18 @@
 import { loadSchema } from './schema-registry.js';
+const LEGACY_CODEX_EFFORT_FIELD = 'baseagents.codex.reasoning';
+const CODEX_EFFORT_FIELD = 'baseagents.codex.effort';
+/** Convert the legacy flattened Codex role permission key to `effort`. */
+export function normalizeRoleEffortCompat(value) {
+    if (!isRecord(value) || !isRecord(value.permissions)
+        || !Object.hasOwn(value.permissions, LEGACY_CODEX_EFFORT_FIELD))
+        return value;
+    const permissions = { ...value.permissions };
+    if (!Object.hasOwn(permissions, CODEX_EFFORT_FIELD)) {
+        permissions[CODEX_EFFORT_FIELD] = permissions[LEGACY_CODEX_EFFORT_FIELD];
+    }
+    delete permissions[LEGACY_CODEX_EFFORT_FIELD];
+    return { ...value, permissions };
+}
 export function rolePermissionFields() {
     const raw = loadSchema('role-config').raw['x-permission-fields'];
     if (!Array.isArray(raw))
@@ -41,9 +55,10 @@ export function rolePermissionFieldPatterns(field) {
 }
 /** Shared RoleService/Menu validation backed by the published role schema. */
 export function validateRoleConfig(value) {
-    const normalized = isRecord(value) && !Object.hasOwn(value, '$schema_version')
-        ? { ...value, $schema_version: 1 }
-        : value;
+    const compatible = normalizeRoleEffortCompat(value);
+    const normalized = isRecord(compatible) && !Object.hasOwn(compatible, '$schema_version')
+        ? { ...compatible, $schema_version: 1 }
+        : compatible;
     const schema = loadSchema('role-config');
     if (!schema.validate(normalized)) {
         return (schema.validate.errors ?? []).map(error => ({

package/dist/config/role-service.js

@@ -6,7 +6,7 @@ import { loadSchema } from './schema-registry.js';
 import { clearRoleStoreCache, getStoredRoleRegistry, isRoleName, readRoleStore, roleRegistryExists, } from './role-store.js';
 import { expectedRoleRank, isManagementRole } from './builtin-roles.js';
 import { readBuiltinRoleTemplate } from './builtin-role-templates.js';
-import { validateRoleConfig } from './role-schema.js';
+import { normalizeRoleEffortCompat, validateRoleConfig } from './role-schema.js';
 export class RoleServiceError extends Error {
     code;
     data;
@@ -43,7 +43,7 @@ export function writeRoleRegistry(selfAid, value) {
 export function writeRoleDefinition(selfAid, roleId, value) {
     if (!isRoleName(roleId))
         throw new RoleServiceError('INVALID_ROLE_ID', `Invalid role id: ${roleId}`);
-    const normalized = { ...value, rank: expectedRoleRank(roleId), $schema_version: 1 };
+    const normalized = normalizeRoleEffortCompat({ ...value, rank: expectedRoleRank(roleId), $schema_version: 1 });
     validateRoleDefinition(normalized);
     const registry = readRoleRegistry(selfAid);
     if (!registry.roles.includes(roleId)) {
@@ -93,7 +93,7 @@ export function listRoleDiagnostics(selfAid) {
     return readRoleStore(selfAid).diagnostics;
 }
 function writeRoleDefinitionFile(selfAid, roleId, value) {
-    const normalized = { ...value, rank: expectedRoleRank(roleId), $schema_version: 1 };
+    const normalized = normalizeRoleEffortCompat({ ...value, rank: expectedRoleRank(roleId), $schema_version: 1 });
     validateRoleDefinition(normalized);
     const file = agentRoleConfig(selfAid, roleId);
     fs.mkdirSync(path.dirname(file), { recursive: true });

package/dist/config/role-store.js

@@ -5,7 +5,7 @@ import { agentRoleConfig, agentRolesDir, agentRolesIndex, kitsRoleTemplatesDir,
 import { applyManagementRoleCeiling, expectedRoleRank, getManagementRoleDefinition } from './builtin-roles.js';
 import { readBuiltinRoleTemplate } from './builtin-role-templates.js';
 import { loadSchema } from './schema-registry.js';
-import { validateRoleConfig } from './role-schema.js';
+import { normalizeRoleEffortCompat, validateRoleConfig } from './role-schema.js';
 const ROLE_NAME_RE = /^[a-z0-9_-]+$/;
 const BUILTIN_ROLES = ['owner', 'admin', 'member', 'visitor'];
 const cache = new Map();
@@ -154,9 +154,10 @@ function readDefinition(selfAid, roleId, diagnostics) {
         }
         if (raw === null)
             continue;
-        const issues = validateRoleConfig(raw);
+        const normalizedRaw = normalizeRoleEffortCompat(raw);
+        const issues = validateRoleConfig(normalizedRaw);
         if (issues.length === 0) {
-            const { $schema_version: _schemaVersion, ...definition } = raw;
+            const { $schema_version: _schemaVersion, ...definition } = normalizedRaw;
             const expectedRank = expectedRoleRank(roleId);
             if (definition.rank !== undefined && definition.rank !== expectedRank) {
                 diagnostics.push({

package/dist/config-store.js

@@ -69,6 +69,10 @@ function validateDaemonConfig(value, validateAidDomain) {
     if (menuTokenRequired !== undefined && typeof menuTokenRequired !== 'boolean') {
         throw new Error('daemon.json.aun.menuTokenRequired must be a boolean');
     }
+    const defaultEncrypt = value.aun?.defaultEncrypt;
+    if (defaultEncrypt !== undefined && typeof defaultEncrypt !== 'boolean') {
+        throw new Error('daemon.json.aun.defaultEncrypt must be a boolean');
+    }
     if (validateAidDomain && value.aun?.defaultAidDomain !== undefined) {
         const defaultAidDomain = normalizeAidDomain(value.aun.defaultAidDomain, 'daemon.json.aun.defaultAidDomain');
         return { ...value, aun: { ...value.aun, defaultAidDomain } };

package/dist/core/auth/operation-authorizer.js

@@ -673,7 +673,9 @@ function parseLegacyChannelType(peerKey) {
 }
 function checkFieldOverride(ctx, field) {
     const roleDef = getRoleDefinition(ctx.role, ctx.selfAid);
-    const fieldPermission = roleDef?.permissions?.[field];
+    const fieldPermission = roleDef
+        ? resolveRoleFieldPermission(roleDef.permissions || {}, field)
+        : undefined;
     if (!fieldPermission) {
         return { ok: false, reason: `Role ${ctx.role} has no field permission for ${field}` };
     }

package/dist/core/bootstrap-service.js

@@ -74,7 +74,6 @@ export class BootstrapService {
                 agentName: aid,
             }), { kind: 'result.text', text, isFinal: true });
             this.eventBus.publish({ type: 'agent:bootstrap-started', aid, channel: channelType || ctx.channelKey, timestamp: Date.now() });
-            await this.sendAunBindingCredentialIfSupported(ctx.adapter, recipientId, agentName, baseagent);
             logger.info(`[Bootstrap] Started for ${aid} via ${ctx.channelKey} (${ctx.source})`);
             return true;
         }
@@ -154,15 +153,4 @@ export class BootstrapService {
             logger.warn(`[Bootstrap] Failed to publish agent.md for ${aid}: ${e instanceof Error ? e.message : String(e)}`);
         }
     }
-    async sendAunBindingCredentialIfSupported(adapter, owner, name, baseagent) {
-        const sendBinding = adapter._sendBindingCredential;
-        if (typeof sendBinding !== 'function')
-            return;
-        try {
-            await sendBinding(owner, name, baseagent);
-        }
-        catch (e) {
-            logger.warn(`[Bootstrap] Binding credential failed: ${e instanceof Error ? e.message : String(e)}`);
-        }
-    }
 }