diff --git a/.agents/skills/unidesk-code-queue/SKILL.md b/.agents/skills/unidesk-code-queue/SKILL.md
index 7389d8ef..f14baab9 100644
--- a/.agents/skills/unidesk-code-queue/SKILL.md
+++ b/.agents/skills/unidesk-code-queue/SKILL.md
@@ -18,6 +18,8 @@ bun scripts/cli.ts agentrun result <task>
 bun scripts/cli.ts agentrun send <session> --prompt-stdin
 ```
 
+资源命令未传 `--node/--lane` 时固定使用 `config/agentrun.yaml#controlPlane.default`，当前为 `NC01/nc01-v02`；只有查询非默认 lane 时才显式传目标参数。主机 direct HTTP auth 只保留独立诊断，固定 Secret 文件路径为 `/root/.unidesk/.env/agentrun.env`，不得回退到 worktree 或旧 `/root/.config/hwlab-*` 路径。
+
 AipodSpec/Artificer、task manifest 和 queue 渐进披露见 [references/resources.md](references/resources.md)；session 控制、HWLAB Code Agent 整合、trace/output 分页、judge、中断/取消见 [references/sessions.md](references/sessions.md)；旧队列归档见 [references/legacy.md](references/legacy.md)。
 
 ## P0 边界
diff --git a/config/agentrun.yaml b/config/agentrun.yaml
index e26d8d8f..6ff45205 100644
--- a/config/agentrun.yaml
+++ b/config/agentrun.yaml
@@ -23,7 +23,7 @@ publicExposure:
     responseHeaderTimeoutSeconds: 60
 auth:
   env: HWLAB_API_KEY
-  file: /root/.config/hwlab-v02/master-server-admin-api-key.env
+  file: /root/.unidesk/.env/agentrun.env
   header: Authorization
   scheme: Bearer
 client:
diff --git a/scripts/src/agentrun/rest-bridge.ts b/scripts/src/agentrun/rest-bridge.ts
index 9a2bcd5c..b0f1dfba 100644
--- a/scripts/src/agentrun/rest-bridge.ts
+++ b/scripts/src/agentrun/rest-bridge.ts
@@ -1028,8 +1028,10 @@ try {
 }
 
 export function resolveAgentRunRestTarget(config: UniDeskConfig | null, options: AgentRunRestTargetOptions): AgentRunRestTarget | null {
-  if (options.node === null && options.lane === null) return null;
-  if (config === null) throw new AgentRunRestError("validation-failed", "--node/--lane resource queries require UniDesk config");
+  if (config === null) {
+    if (options.node === null && options.lane === null) return null;
+    throw new AgentRunRestError("validation-failed", "--node/--lane resource queries require UniDesk config");
+  }
   const { configPath, spec } = resolveAgentRunLaneTarget(options);
   return { config, configPath, spec };
 }