@arcships/morula-runtime 0.1.0-alpha.15 → 0.1.0-alpha.17

package/dist/index.js

@@ -740,7 +740,7 @@ var BUILD_ID, BUILD_CONTEXTS, BUILD_DEFAULT_CONTEXT;
 var init_build_env = __esm({
   "../morula-cli-core/dist/build-env.js"() {
     "use strict";
-    BUILD_ID = "20260924065153.0fc1a372";
+    BUILD_ID = "20260930065011.80ac5142";
     BUILD_CONTEXTS = {
       "local": "http://localhost:8080/api",
       "test": "https://morula.basecastle.com/api",
@@ -841,13 +841,6 @@ var init_attachment = __esm({
       getDownloadUrl(id) {
         return this.client.get(`/attachments/${encodeURIComponent(id)}/download-url`);
       }
-      /**
-       * 读取附件的解析产物全文（MinerU markdown）。
-       * 未解析/解析中/解析失败由服务端在返回体里说明，不当作 HTTP 错误。
-       */
-      content(id, maxChars) {
-        return this.client.get(`/attachments/${encodeURIComponent(id)}/content`, { maxChars });
-      }
       /** 更新附件关联的资源 ID */
       updateResourceId(id, resourceId) {
         return this.client.patch(`/attachments/${encodeURIComponent(id)}`, { resourceId });
@@ -2588,9 +2581,9 @@ async function setupAutostart(context) {
   await removeLegacyAutostart();
   const { command, args } = resolvePortalCommand();
   const stateDir2 = process.env.MORULA_CONFIG_DIR ?? join3(homedir2(), ".morula-cli");
-  const daemonDir2 = join3(stateDir2, "daemon");
-  mkdirSync2(daemonDir2, { recursive: true, mode: 448 });
-  const logFile = join3(daemonDir2, "portal.log");
+  const daemonDir = join3(stateDir2, "daemon");
+  mkdirSync2(daemonDir, { recursive: true, mode: 448 });
+  const logFile = join3(daemonDir, "portal.log");
   const plist = buildLaunchAgentPlist({ label: LABEL, command, args, logFile });
   const plistPath = launchAgentPath();
   mkdirSync2(join3(plistPath, ".."), { recursive: true });
@@ -2626,7 +2619,13 @@ var init_portal_autostart = __esm({
 // src/daemon/daemon-config.ts
 import { randomUUID } from "node:crypto";
 import { homedir as homedir4 } from "node:os";
-import { join as join5 } from "node:path";
+import { dirname as dirname4, join as join5 } from "node:path";
+function configFilePathForEnv(env = process.env) {
+  return env.MORULA_CONFIG ?? join5(env.MORULA_CONFIG_DIR ?? join5(homedir4(), ".morula-cli"), "config.yaml");
+}
+function daemonDirForEnv(env = process.env) {
+  return join5(dirname4(configFilePathForEnv(env)), "daemon");
+}
 function loadDaemonConfig(store) {
   const config = store.load();
   const d = config?.[DAEMON_KEY];
@@ -2666,7 +2665,7 @@ var init_daemon_config = __esm({
 // src/daemon/daemon-lock.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { closeSync as closeSync2, existsSync as existsSync5, mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync2, renameSync, rmSync as rmSync4, writeFileSync as writeFileSync3, writeSync } from "node:fs";
-import { dirname as dirname4, join as join6 } from "node:path";
+import { dirname as dirname5, join as join6 } from "node:path";
 function daemonPidPath(configDir) {
   return join6(configDir, "daemon", DAEMON_PID_FILE);
 }
@@ -2769,7 +2768,7 @@ function acquireDaemonLock(lockPath, input) {
     startedAt: (input.now?.() ?? /* @__PURE__ */ new Date()).toISOString(),
     workdir: input.workdir
   };
-  mkdirSync4(dirname4(lockPath), { recursive: true, mode: 448 });
+  mkdirSync4(dirname5(lockPath), { recursive: true, mode: 448 });
   try {
     const fd = openSync2(lockPath, "wx", 384);
     try {
@@ -2854,7 +2853,7 @@ __export(portal_instances_exports, {
 });
 import { readdirSync, statSync } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname5, join as join7 } from "node:path";
+import { dirname as dirname6, join as join7 } from "node:path";
 function parseBaseUrl(raw) {
   if (!raw)
     return null;
@@ -2922,7 +2921,7 @@ function createPortalEnvironmentResolver(options = {}) {
   const env = options.env ?? process.env;
   const log = options.log ?? (() => {
   });
-  const defaultConfigDir = dirname5(env.MORULA_CONFIG ?? join7(env.MORULA_CONFIG_DIR ?? join7(options.homeDir ?? homedir5(), ".morula-cli"), "config.yaml"));
+  const defaultConfigDir = dirname6(env.MORULA_CONFIG ?? join7(env.MORULA_CONFIG_DIR ?? join7(options.homeDir ?? homedir5(), ".morula-cli"), "config.yaml"));
   let index = [];
   let signature = "";
   function buildIndex() {
@@ -2939,7 +2938,7 @@ function createPortalEnvironmentResolver(options = {}) {
       const normalized = normalizeBaseUrl2(entry.url);
       if (!normalized)
         continue;
-      const configDir = dirname5(file);
+      const configDir = dirname6(file);
       built.push({
         configDir,
         context,
@@ -3482,7 +3481,7 @@ var init_dim_locate = __esm({
 // src/daemon/acp/acp-process-registry.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname6 } from "node:path";
+import { dirname as dirname7 } from "node:path";
 function parseLstartToMs(tokens) {
   if (tokens.length < 5)
     return null;
@@ -3595,7 +3594,7 @@ function persistRecords() {
   if (!recordFile)
     return;
   try {
-    mkdirSync5(dirname6(recordFile), { recursive: true });
+    mkdirSync5(dirname7(recordFile), { recursive: true });
     writeFileSync5(recordFile, JSON.stringify({
       v: RECORD_FILE_VERSION,
       children: [...ownedChildren.values()]
@@ -3838,9 +3837,9 @@ var init_acp_connection = __esm({
             process.stderr.write(`[daemon] dim spawn \u5931\u8D25 ${dimPath}\uFF08\u5C1D\u8BD5\u4E0B\u4E00\u4E2A\u5019\u9009\uFF09: ${message}
 `);
             try {
-              const { existsSync: existsSync19 } = await import("node:fs");
+              const { existsSync: existsSync21 } = await import("node:fs");
               process.stderr.write(
-                `[daemon]   diag: fileExists=${existsSync19(dimPath)} cwdExists=${this.options.cwd ? existsSync19(this.options.cwd) : "n/a"} PATH=${(process.env.PATH ?? "").slice(0, 140)} DYLD=${process.env.DYLD_LIBRARY_PATH ?? "-"} NODE_OPTIONS=${process.env.NODE_OPTIONS ?? "-"}
+                `[daemon]   diag: fileExists=${existsSync21(dimPath)} cwdExists=${this.options.cwd ? existsSync21(this.options.cwd) : "n/a"} PATH=${(process.env.PATH ?? "").slice(0, 140)} DYLD=${process.env.DYLD_LIBRARY_PATH ?? "-"} NODE_OPTIONS=${process.env.NODE_OPTIONS ?? "-"}
 `
               );
             } catch {
@@ -4424,14 +4423,13 @@ init_dist2();
 init_dist2();
 
 // src/build-env.ts
-var BUILD_VERSION2 = "0.1.0-alpha.15";
+var BUILD_VERSION2 = "0.1.0-alpha.17";
 
 // src/commands/daemon.ts
 init_dist();
 init_dist2();
-import { existsSync as existsSync18, mkdirSync as mkdirSync15, readFileSync as readFileSync12, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { dirname as dirname11, join as join22 } from "node:path";
+import { existsSync as existsSync19, mkdirSync as mkdirSync16, readFileSync as readFileSync12, rmSync as rmSync10, writeFileSync as writeFileSync14 } from "node:fs";
+import { dirname as dirname13, join as join23 } from "node:path";
 
 // src/daemon/daemon-autostart.ts
 init_portal_autostart();
@@ -4500,9 +4498,9 @@ init_portal_server();
 // src/daemon/runner.ts
 init_dist2();
 import { execFileSync as execFileSync11 } from "node:child_process";
-import { existsSync as existsSync16, mkdirSync as mkdirSync14, statSync as statSync4, writeFileSync as writeFileSync12 } from "node:fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync15, statSync as statSync4, writeFileSync as writeFileSync13 } from "node:fs";
 import { arch, hostname } from "node:os";
-import { dirname as dirname9, join as join20 } from "node:path";
+import { dirname as dirname11, join as join21 } from "node:path";
 
 // src/daemon/acp/acp-connection-pool.ts
 var DEFAULT_IDLE_MS = 30 * 60 * 1e3;
@@ -4637,6 +4635,10 @@ var DaemonApi = class {
    * D1（daemon-server-connection-unstable）：心跳是「设备存活」的唯一信号，显式 10s 超时——
    * 慢请求快速失败，避免占住单飞槽位（客户端默认 30s，对心跳过松）。
    * 说明：`client.post()` 的第三参是 query，不支持 RequestOptions，故直接走 `client.request`。
+   *
+   * `upgradeRequested`（runtime-self-upgrade，沿用 stop 的一次性认领模式）：服务端置了
+   * upgradeRequestedAt → 本次心跳认领（服务端已清指令）→ daemon 触发自升级；`upgradeVersion`
+   * 为置指令时的目标版本（可空 = daemon 自行解析 latest）。
    */
   heartbeat(runtimeId, runningTaskCount = 0) {
     return this.client.request(
@@ -4647,6 +4649,13 @@ var DaemonApi = class {
   pollTasks(runtimeId, max = 1) {
     return this.client.get("/agent-tasks/poll", { runtimeId, max });
   }
+  /**
+   * runtime-self-upgrade：自升级结果回报（机器协议，设备级凭证）。
+   * best-effort 语义由调用方掌握（失败只 log，不影响本地升级结果）。
+   */
+  reportUpgradeResult(runtimeId, body) {
+    return this.client.post(`/agent-runtimes/${runtimeId}/upgrade-result`, body);
+  }
   claim(taskId, runtimeId) {
     const res = this.client.post(`/agent-tasks/${taskId}/claim`, void 0, { runtimeId });
     res.then((r) => {
@@ -5205,8 +5214,9 @@ var COLLABORATION_SKILL_BODY = `# Working on Morula issues\uFF08\u534F\u4F5C\u59
 - **git / gh \u547D\u4EE4\u4E00\u5F8B\u5728\u5BF9\u5E94\u4ED3\u5E93\u76EE\u5F55\u5185\u6267\u884C**\uFF08\`cd <\u5DE5\u4F5C\u533A\u6839>/<\u4ED3\u5E93\u76EE\u5F55>\`\uFF0C\u6216 \`git -C <\u4ED3\u5E93\u76EE\u5F55> ...\`\uFF09\uFF1A
   \u5DE5\u4F5C\u533A\u6839\u4E0D\u662F git \u4ED3\u5E93\uFF0C\u5728\u6839\u76EE\u5F55\u8DD1 git \u547D\u4EE4\u5FC5\u7136\u5931\u8D25\u3002\`morula\` CLI \u53EF\u5728\u5DE5\u4F5C\u533A\u6839\u6216\u5176\u4EFB\u610F\u5B50\u76EE\u5F55\u6267\u884C\uFF08\u89C1 0.4\uFF09\u3002
 - **\u4E3B\u4ED3\u5E93**\uFF1A\u5E73\u53F0\u5DF2\u89E3\u6790\u51FA\u7684\u4ED3\u5E93\u5728**\u5DE5\u4F5C\u533A\u6839\u4E0B\u5C31\u7EEA**\uFF08\u76EE\u5F55\u540D = \u4ED3\u5E93\u5168\u540D\u628A \`/\` \u6362\u6210 \`-\`\uFF0C\u5982 \`human-resources/xxx\` \u2192 \`human-resources-xxx\`\uFF09\uFF1B\`ls\` \u5DE5\u4F5C\u533A\u6839\u5373\u53EF\u770B\u5230\uFF0C\u76F4\u63A5\u5728\u8BE5\u76EE\u5F55\u5185\u5EFA\u5206\u652F/\u63D0\u4EA4/\u63A8\u5206\u652F/\u63D0 PR\u3002**\u9700\u8981\u7A7A\u95F4\u7ED1\u5B9A\u4E86\u54EA\u4E9B\u4ED3\u5E93\u65F6\u81EA\u5DF1\u67E5**\uFF1A\`morula repo list --space <spaceId>\`\uFF08spaceId \u89C1\u7CFB\u7EDF\u63D0\u793A\u300C\u57FA\u672C\u4FE1\u606F\u300D\u6BB5\uFF09\u3002
-- **\u26A0\uFE0F \`morula repo checkout\` \u7684\u8BED\u4E49 = \u300C\u58F0\u660E/\u5207\u6362\u672C\u4EFB\u52A1\u7684**\u4E3B\u4ED3\u5E93**\u300D**\uFF08\u670D\u52A1\u7AEF generation+1 + daemon \u7269\u5316\u5DE5\u4F5C\u533A\uFF09\uFF1A
-  **\u5B83\u51B3\u5B9A\u540E\u7EED\u5F00\u53D1\u9636\u6BB5\u5728\u54EA\u4E2A\u4ED3\u5E93\u5E72\u6D3B**\u3002\u56E0\u6B64\u53EA\u5728**\u5224\u5B9A\u51FA\u4E3B\u4ED3\u5E93\u4E4B\u540E**\u8C03\u7528\uFF0C**\u4E00\u6B21\u4EFB\u52A1\u53EA\u58F0\u660E\u4E00\u6B21**\uFF08\u5224\u9519\u8981\u7EA0\u6B63\u65F6\u624D\u518D\u8C03\u4E00\u6B21\uFF09\u3002
+- **\u26A0\uFE0F \`morula repo checkout\` \u7684\u8BED\u4E49 = \u300C\u58F0\u660E/\u5207\u6362\u672C\u4EFB\u52A1\u7684\u4E3B\u4ED3\u5E93\u300D**\uFF08\u670D\u52A1\u7AEF generation+1 + daemon \u7269\u5316\u5DE5\u4F5C\u533A\uFF09\uFF1A
+  \u58F0\u660E\u53EA\u4F5C\u7528\u4E8E\u5F53\u524D\u4EFB\u52A1\uFF08\u5F53\u524D\u9636\u6BB5\u7684\u6267\u884C\u8005\uFF09\uFF1B**\u5F00\u53D1\u9636\u6BB5\u4EFB\u52A1\u4E0D\u7EE7\u627F\u5206\u6790\u9636\u6BB5\u7684\u58F0\u660E**\u2014\u2014\u9700\u8981\u6539\u4EE3\u7801\u65F6\u7531\u4F60\u81EA\u5DF1
+  \u6309\u4EFB\u52A1\u63CF\u8FF0/\u5206\u6790\u7ED3\u8BBA checkout\u3002\u56E0\u6B64\u53EA\u5728**\u5224\u5B9A\u51FA\u4E3B\u4ED3\u5E93\u4E4B\u540E**\u8C03\u7528\uFF0C**\u4E00\u6B21\u4EFB\u52A1\u53EA\u58F0\u660E\u4E00\u6B21**\uFF08\u5224\u9519\u8981\u7EA0\u6B63\u65F6\u624D\u518D\u8C03\u4E00\u6B21\uFF09\u3002
   \u4E0D\u8981\u7528\u5B83\u300C\u628A\u7A7A\u95F4\u91CC\u7684\u4ED3\u5E93\u9010\u4E2A\u901B\u4E00\u904D\u300D\u2014\u2014\u6BCF\u8C03\u4E00\u6B21\u4E3B\u4ED3\u5E93\u5C31\u8DDF\u7740\u6362\u4E00\u6B21\uFF08\u771F\u673A\u8E29\u5230\uFF1A\u5206\u6790\u9636\u6BB5\u4E3A\u67E5\u8BC1 checkout \u4E86 3 \u4E2A\u4ED3\u5E93\uFF0C
   \u4E3B\u4ED3\u5E93\u6700\u7EC8\u505C\u5728\u6700\u540E\u90A3\u4E2A\u300C\u53EA\u770B\u4E86\u4E00\u773C\u300D\u7684\u4ED3\u5E93\u4E0A\uFF09\u3002
 - **\u82E5\u4EFB\u52A1\u9700\u8981\u4E86\u89E3\u4ED3\u5E93\u5185\u5BB9/\u4EE3\u7801/\u63D0\u4EA4\u72B6\u6001\uFF08\u8BFB\u573A\u666F\uFF0C\u542B\u7EAF\u95EE\u7B54\uFF09**\uFF1A
@@ -5241,8 +5251,9 @@ var COLLABORATION_SKILL_BODY = `# Working on Morula issues\uFF08\u534F\u4F5C\u59
   morula repo checkout <taskId> <repoFullName> [--ref <branch|sha>]   # \u62C9\u53D6/\u5207\u6362\u4ED3\u5E93\uFF08\u8FD4\u56DE\u7269\u5316\u8DEF\u5F84\uFF0C\u89C1 0.5\uFF09
   morula repo prepare <taskId> <repoFullName>   # \u591A\u4ED3\u5E93\u4EFB\u52A1\uFF1A\u7269\u5316\u5176\u4ED6\u4ED3\u5E93\u5230\u4EFB\u52A1\u5DE5\u4F5C\u533A\u6839\u4E0B\uFF08\u89C1 0.5\uFF09
   morula comment list --object <objectId>   # \u8BFB\u8BC4\u8BBA\uFF08\u4EFB\u52A1=objectId\uFF09
+  morula comment add --object <objectId> --content <\u6587\u672C>   # \u53D1\u8BC4\u8BBA\uFF08\u6700\u7EC8\u603B\u7ED3\u52A0 --final\uFF0C\u89C1\u7B2C 5 \u6761\uFF09
   morula task inbox [--peek]                # \u8FD0\u884C\u4E2D\u68C0\u67E5\u70B9\uFF1A\u53D6\u672C\u7EBF\u7A0B\u672A\u6D88\u8D39\u6D88\u606F\uFF0C\u7EB3\u5165\u672C\u56DE\u5408\uFF08\u89C1 1.3\uFF09
-  # \u6CE8\uFF1A\u6700\u7EC8\u603B\u7ED3\u8BC4\u8BBA\u7531\u670D\u52A1\u7AEF\u7EDF\u4E00\u53D1\u9001\uFF08\u4F5C\u8005=\u667A\u80FD\u4F53\uFF09\uFF0C\u4E0D\u8981\u8C03\u7528 comment add \u81EA\u884C\u7F6E\u8BC4\u3002
+  # \u6CE8\uFF1A\u4EFB\u52A1\u6536\u5C3E\u5148\u53D1 final \u603B\u7ED3\u8BC4\u8BBA\uFF08morula comment add --final\uFF09\uFF0C\u518D\u4E0A\u62A5\u7ED3\u679C\uFF1B\u670D\u52A1\u7AEF\u53EA\u5728\u4F60\u6CA1\u53D1\u65F6\u515C\u5E95\u4EE3\u53D1\u4E00\u6761\u3002
   \`\`\`
 - **\u53EF\u7528\u4ED3\u5E93\u6E05\u5355**\uFF1A\u7CFB\u7EDF\u63D0\u793A**\u4E0D\u518D\u5217\u51FA**\u4ED3\u5E93\u2014\u2014\u9700\u8981\u679A\u4E3E\u7A7A\u95F4\u7ED1\u5B9A\u7684\u4ED3\u5E93\u65F6\u7528
   \`morula repo list --space <spaceId>\`\uFF08\`<spaceId>\` \u89C1\u7CFB\u7EDF\u63D0\u793A\u300C\u57FA\u672C\u4FE1\u606F\u300D\u6BB5\uFF0C\u6216 \`morula task get\` \u8FD4\u56DE\u7684 \`contextSnapshot.spaceId\`\uFF09\u3002
@@ -5372,26 +5383,34 @@ morula task inbox --peek     # \u53EA\u770B\u4E0D\u53D6\uFF08\u786E\u8BA4\u6709\
 - PR \u521B\u5EFA\u88AB\u963B\u585E\uFF08\u6743\u9650/\u6D4B\u8BD5\u5931\u8D25/\u8FDC\u7AEF\u72B6\u6001\u5F02\u5E38\uFF09\u2192 \u5728\u6700\u7EC8\u603B\u7ED3\u4E2D**\u62A5\u544A\u963B\u585E\u539F\u56E0**\uFF0C\u4E0D\u8981\u5047\u88C5\u4EFB\u52A1\u5DF2\u5B8C\u6210\uFF1B
 - **\u4E0D\u8981**\u5207\u56DE \`main\` \u6216 \`master\` \u76F4\u63A5\u63D0\u4EA4\u3002
 
-## 4. \u72B6\u6001\u53D8\u66F4\u7531\u670D\u52A1\u7AEF\u9A71\u52A8\uFF0C\u4E0D\u8981\u624B\u52A8\u7FFB\u72B6\u6001
+## 4. \u72B6\u6001\u4E0E\u4EFB\u52A1\u64CD\u4F5C\uFF1A\u7ED3\u8BBA\u4F18\u5148\uFF0C\u52A8\u4F5C\u4E3A\u8F85
 
-- \u4EFB\u52A1\u72B6\u6001\u63A8\u8FDB\uFF08\u5982\u5B8C\u6210\uFF09\u7531 PR merge \u4E8B\u4EF6\u81EA\u52A8\u89E6\u53D1\uFF08\u914D\u5408\u7B2C 2 \u6761\u7684\u5173\u5355\u5199\u6CD5\uFF09\u3002
-- \u4E0D\u8981\u76F4\u63A5\u8C03 CLI \u6539\u4EFB\u52A1\u72B6\u6001\uFF1B\u628A\u72B6\u6001\u6D41\u8F6C\u4EA4\u7ED9\u670D\u52A1\u7AEF\u3002
+- **\u72B6\u6001\u63A8\u8FDB\u7531\u7ED3\u8BBA\u534F\u8BAE\u4E0E\u4E8B\u5B9E\u4E8B\u4EF6\u9A71\u52A8**\uFF1A\u5206\u6790\u4EFB\u52A1\u4E0A\u62A5 \`analysis-verdict\`\u3001\u8BC4\u5BA1\u4EFB\u52A1\u7528 \`morula review submit\`\u3001\u5408\u5E76/\u53D1\u5E03\u7531 PR \u4E8B\u4EF6\u9A71\u52A8\u2014\u2014**\u4E0D\u8981**\u7528\u72B6\u6001\u52A8\u4F5C\u66FF\u4EE3\u7ED3\u8BBA\u534F\u8BAE\u3002
+- **\u4F60\u53EF\u4EE5\u5728\u4EFB\u52A1\u4E0A\u505A\u57FA\u7840\u64CD\u4F5C**\uFF08\u50CF\u4EBA\u4E00\u6837\uFF0C\u4F5C\u7528\u57DF\u4EC5\u9650\u672C\u4EFB\u52A1\uFF09\uFF1A
+  - \`morula task state <taskId> --state <in_progress|review> [--reason <\u6587\u672C>]\`\uFF1A\u5728\u300C\u5F00\u53D1\u4E2D / \u5F85\u8BC4\u5BA1\u300D\u8303\u56F4\u5185\u81EA\u63A8\u72B6\u6001\uFF1B**\u5F85\u8BC4\u5BA1 \u2192 \u5F00\u53D1\u4E2D = \u9000\u56DE\u5F00\u53D1**\u2014\u2014\u5E73\u53F0\u4F1A\u81EA\u52A8\u56DE\u9000\u72B6\u6001\u3001\u8BB0\u8BC4\u5BA1\u8F6E\u6B21\u5E76\u6D3E\u53D1\u4FEE\u590D\u4EFB\u52A1\uFF08\u540C\u4E00 PR \u8FED\u4EE3\uFF09\uFF0C**\u4E0D\u9700\u8981\u3001\u4E5F\u4E0D\u5E94\u8BE5**\u518D\u81EA\u5DF1 @ \u5F00\u53D1\u6267\u884C\u5668\uFF1B\`--reason\` \u5199\u660E\u9000\u56DE\u539F\u56E0\uFF08\u4F1A\u8FDB\u4FEE\u590D\u4EFB\u52A1 prompt\uFF09\u3002
+  - \`morula comment add\`\uFF1A\u89C1\u7B2C 5 \u6761\u8BC4\u8BBA\u7EAA\u5F8B\u3002
+  - \`morula task assign <taskId> --to <principalId>\`\uFF1A\u6307\u6D3E\u672C\u4EFB\u52A1\u8D1F\u8D23\u4EBA\uFF08\u672C\u7A7A\u95F4\u6210\u5458\u6216\u9636\u6BB5\u6267\u884C\u5668\uFF1B\u76EE\u6807\u4E0D\u5B58\u5728\u4F1A\u663E\u5F0F\u62A5\u9519\uFF09\u3002
+- **\u7EC8\u6001\uFF08\u5DF2\u5408\u5E76/\u5DF2\u53D1\u5E03/\u5DF2\u5173\u95ED\uFF09\u4E0E\u9700\u6C42\u6C60\u72B6\u6001\u4E0D\u7531\u4F60\u58F0\u660E**\uFF1B\u540C\u6001\u91CD\u590D\u63A8\u9001\u662F\u5E42\u7B49\u7684\uFF08\u65E0\u5BB3\uFF09\u3002
 
 ## 4.1 \u5206\u6790\u4EFB\u52A1\uFF1A\u5FC5\u987B\u4E0A\u62A5\u5206\u6790\u7ED3\u8BBA\uFF08verdict\uFF09
 
 > **\u4EC5\u5F53\u672C\u4EFB\u52A1\u662F\u300C\u5F85\u5206\u6790\u300D\u4EFB\u52A1\u65F6\u9002\u7528**\uFF08\u4EFB\u52A1\u505C\u5728\u300C\u5F85\u5206\u6790\u300D\u9636\u6BB5\u3001\u8981\u6C42\u505A\u9700\u6C42\u5206\u6790\u4E0E\u65B9\u6848\u62C6\u89E3\u3001\u4E0D\u5199\u4EE3\u7801\uFF09\u3002
 > \u5176\u4F59\u4EFB\u52A1\uFF08\u5F00\u53D1 / \u8BC4\u5BA1 / \u8C03\u7814 / \u95EE\u7B54\uFF09\u8DF3\u8FC7\u672C\u8282\uFF0C\u4E0D\u8981\u8C03\u7528\u8BE5\u547D\u4EE4\u3002
 
-- \u5206\u6790\u7ED3\u8BBA\u5206\u4E24\u90E8\u5206\uFF0C**\u90FD\u8981\u7ED9**\uFF1A
-  1. **\u4EBA\u770B\u7684**\uFF1A\u5206\u6790\u7ED3\u8BBA\u5199\u8FDB\u6700\u7EC8\u8F93\u51FA\uFF08\u9700\u6C42\u662F\u5426\u6E05\u6670\u3001\u600E\u4E48\u505A\u3001\u8303\u56F4\u4E0E\u98CE\u9669\u3001\u9A8C\u6536\u70B9\uFF09\u2014\u2014\u670D\u52A1\u7AEF\u4F5C\u4E3A\u4EFB\u52A1\u8BC4\u8BBA\u53D1\u5E03\uFF1B
-  2. **\u673A\u5668\u5224\u5B9A\u7684**\uFF1A\u6267\u884C \`morula task analysis-verdict <taskId> --verdict ready|blocked [--reason "\u2026"]\` \u4E0A\u62A5\u7ED3\u8BBA\u3002
+- \u5206\u6790\u7ED3\u8BBA\u5206\u4E24\u90E8\u5206\uFF0C**\u90FD\u8981\u7ED9**\uFF08\u987A\u5E8F\uFF1A\u5148\u53D1\u8BC4\u8BBA\uFF0C\u518D\u4E0A\u62A5 verdict\uFF09\uFF1A
+  1. **\u4EBA\u770B\u7684**\uFF1A\u7528**\u4F60\u81EA\u5DF1\u7684\u8BDD**\u628A\u5206\u6790\u7ED3\u8BBA\u53D1\u6210\u6700\u7EC8\u603B\u7ED3\u8BC4\u8BBA\u2014\u2014\u9700\u6C42\u662F\u5426\u6E05\u6670\u3001\u600E\u4E48\u505A\u3001\u8303\u56F4\u4E0E\u98CE\u9669\u3001\u9A8C\u6536\u70B9\uFF1A
+     \`\`\`bash
+     morula comment add --object <objectId> --final --content <\u4F60\u7684\u5206\u6790\u7ED3\u8BBA>
+     \`\`\`
+     \u8FD9\u662F\u7528\u6237\u770B\u5230\u7684\u5206\u6790\u4EA4\u4ED8\uFF1A\u7528\u81EA\u5DF1\u7684\u8BDD\u5199\uFF0C\u4E0D\u8981\u5957\u56FA\u5B9A\u683C\u5F0F\uFF0C\u66F4\u4E0D\u8981\u590D\u8FF0\u4EFB\u52A1\u63CF\u8FF0\uFF1B\u7ED3\u8BBA\u5148\u8BF4\u3001\u7406\u7531\u8DDF\u4E0A\u3002
+  2. **\u673A\u5668\u5224\u5B9A\u7684**\uFF1A\u6267\u884C \`morula task analysis-verdict <taskId> --verdict ready|blocked [--reason "\u2026"]\` \u4E0A\u62A5\u7ED3\u8BBA\uFF08\`--reason\` \u53EA\u9700\u4E00\u53E5\u8BDD\uFF0C\u8BE6\u7EC6\u5185\u5BB9\u5728\u8BC4\u8BBA\u91CC\uFF09\u3002
 - \`<taskId>\` = \`morula task get\`\uFF08\u65E0\u53C2\uFF09\u8FD4\u56DE\u7684 \`id\`\uFF08\u672C\u4EFB\u52A1 AgentTask UUID\uFF09\u3002
 - **\`ready\`** = \u9700\u6C42\u6E05\u6670\u3001\u53EF\u76F4\u63A5\u5F00\u53D1\uFF08\`--reason\` \u53EF\u5199\u4E00\u53E5\u8BDD\u8303\u56F4\u6458\u8981\uFF09\uFF1B
   **\`blocked\`** = \u4E0D\u53EF\u505A / \u9700\u6F84\u6E05\uFF08**\u5FC5\u987B**\u5728 \`--reason\` \u6216\u6700\u7EC8\u8F93\u51FA\u91CC\u5199\u6E05\u963B\u585E\u70B9\u4E0E\u9700\u8981\u6F84\u6E05\u7684\u95EE\u9898\uFF09\u3002
 - **\u670D\u52A1\u7AEF\u636E\u6B64\u81EA\u52A8\u63A8\u8FDB\uFF0C\u4E0D\u9700\u8981\u4EFB\u4F55\u4EBA\u70B9\u786E\u8BA4**\uFF1A\`ready\` \u2192 \u4EFB\u52A1\u81EA\u52A8\u8FDB\u5165\u300C\u5F00\u53D1\u4E2D\u300D\u5E76\u6D3E\u53D1\u5F00\u53D1\u4EFB\u52A1\uFF1B
   \`blocked\` / \u672A\u4E0A\u62A5 \u2192 \u4EFB\u52A1**\u505C\u5728\u300C\u5F85\u5206\u6790\u300D**\uFF0C\u7531\u7528\u6237\u8865\u5145\u9700\u6C42\u540E\u91CD\u6D3E\u5206\u6790\u3002
 - **\u5FC5\u987B\u4E0A\u62A5**\uFF1A\u6F0F\u62A5\u4F1A\u8BA9\u4EFB\u52A1\u9759\u9ED8\u505C\u5728\u300C\u5F85\u5206\u6790\u300D\uFF1B\u540C\u4E00\u4EFB\u52A1\u53EA\u9700\u4E0A\u62A5\u4E00\u6B21\uFF08\u91CD\u590D\u4E0A\u62A5\u4EE5\u9996\u6B21\u4E3A\u51C6\uFF0C\u4E0D\u4F1A\u6539\u5199\uFF09\u3002
-- **\u4E0D\u8981\u624B\u52A8\u6D41\u8F6C\u672C\u4EFB\u52A1\u72B6\u6001**\uFF08\u4E0D\u8981\u8C03 \`morula task state\`\uFF09\uFF1A\u5206\u6790\u4EFB\u52A1\u7684\u63A8\u8FDB\u7531\u670D\u52A1\u7AEF\u6309 verdict \u51B3\u5B9A\u3002
+- \u5206\u6790\u4EFB\u52A1\u7684\u63A8\u8FDB\u7531\u670D\u52A1\u7AEF\u6309 verdict \u51B3\u5B9A\u2014\u2014**\u4E0D\u8981\u7528\u72B6\u6001\u52A8\u4F5C\u66FF\u4EE3\u5206\u6790\u7ED3\u8BBA**\uFF08\u4E0D\u8981\u8C03 \`morula task state\`\uFF09\u3002
 
 ## 4.2 \u8BC4\u5BA1\u4EFB\u52A1\uFF1A\u53EA\u8BFB\u8BC4\u5BA1 + \u5FC5\u987B\u56DE\u4F20\u7ED3\u8BBA\uFF08verdict\uFF09
 
@@ -5412,9 +5431,11 @@ morula task inbox --peek     # \u53EA\u770B\u4E0D\u53D6\uFF08\u786E\u8BA4\u6709\
   - \`<objectId>\` = \`morula task get\`\uFF08\u65E0\u53C2\uFF09\u8FD4\u56DE\u7684 \`objectId\`\uFF1B
   - \`--verdict\`\uFF1A\`approved\`\uFF08\u901A\u8FC7\uFF09/ \`changes_requested\`\uFF08\u4E0D\u901A\u8FC7\uFF0C**\u5FC5\u987B**\u5728 \`--details\` \u5199\u660E\u5177\u4F53\u610F\u89C1\uFF1A\u6587\u4EF6/\u884C/\u95EE\u9898/\u5EFA\u8BAE\uFF0C\u5426\u5219\u5F00\u53D1\u65E0\u6CD5\u4FEE\u590D\uFF09/ \`commented\`\uFF08\u6709\u610F\u89C1\u4F46\u4E0D\u963B\u585E\uFF09\uFF1B
   - \`--pr-number\`\uFF1A\u8BC4\u5BA1\u5BF9\u8C61\u7684 PR \u7F16\u53F7\uFF08\u6709\u5219\u586B\uFF09\u3002
+- **\u8BC4\u5BA1\u4EFB\u52A1\u7684\u4EA4\u4ED8\u5C31\u662F\u8FD9\u4EFD\u7ED3\u8BBA**\uFF1A\u5E73\u53F0\u4F1A\u6309\u7ED3\u8BBA\u5199\u6743\u5A01\u8BC4\u8BBA\uFF08\u2705/\u{1F4AC}/\u{1F501}\uFF09\u2014\u2014**\u4E0D\u8981**\u518D\u53D1\u6700\u7EC8\u603B\u7ED3\u8BC4\u8BBA\uFF08\`--final\` \u4F1A\u88AB\u670D\u52A1\u7AEF\u62D2\u7EDD\uFF09\uFF0C\u4E5F\u4E0D\u8981\u5728\u8BC4\u8BBA\u533A\u590D\u8FF0\u7ED3\u8BBA\u3002
+- **\u7ED3\u8BBA\u65B0\u9C9C\u5EA6\uFF08\u65E0\u65B0\u63D0\u4EA4\u4E0D\u91CD\u590D\u6295 \`approved\`\uFF09**\uFF1A\u63D0\u4EA4\u7ED3\u8BBA\u524D\u5148\u6838\u5BF9\u88AB\u8BC4\u5BA1 MR \u7684 head commit \u4E0E\u4E0A\u4E00\u8F6E\u7ED3\u8BBA\u65F6\u662F\u5426\u76F8\u540C\uFF08\`morula repo mr list\` / \`mr-detail\`\uFF1B\u8BC4\u8BBA\u533A\u4E5F\u6709\u4E0A\u4E00\u8F6E\u7ED3\u8BBA\uFF09\u3002**\u76F8\u540C\u4E14\u65E0\u65B0\u63D0\u4EA4\u65F6\u4E0D\u8981\u91CD\u590D\u6295 \`approved\`**\uFF1A\u672C\u8F6E\u4EFB\u52A1\u4E0A\u4E0B\u6587\u91CC\u6709\u4EBA\u7684\u65B0\u8981\u6C42\uFF08\u5982\u8981\u6C42\u4FEE\u590D\u4E0A\u4E00\u8F6E\u610F\u89C1\uFF09\u2192 \u6309\u4EBA\u7684\u8981\u6C42\u5904\u7406\uFF08\u610F\u89C1\u672A\u4FEE\u590D\u5C31\u6295 \`changes_requested\`\uFF09\uFF1B\u786E\u5B9E\u65E0\u53EF\u8BC4\u5BA1\u5185\u5BB9 \u2192 \u6295 \`commented\` \u8BF4\u660E\u300C\u65E0\u65B0\u63D0\u4EA4\u300D\u5373\u53EF\u3002\u590D\u8FF0\u4E0A\u4E00\u8F6E\u7ED3\u8BBA\u5BF9\u4EFB\u52A1\u6CA1\u6709\u4EFB\u4F55\u63A8\u8FDB\u3002
 - **\u7981\u6B62\u8BC4\u5BA1\u81EA\u5DF1\u5F00\u53D1\u7684\u4EFB\u52A1**\uFF1A\u82E5\u5F85\u8BC4\u5BA1\u6539\u52A8\u7531\u4F60\u81EA\u5DF1\u63D0\u4EA4\uFF08\u540C\u4E00\u667A\u80FD\u4F53\u65E2\u5F00\u53D1\u53C8\u8BC4\u5BA1\uFF09\uFF0C\u4E0D\u4E0B\u7ED3\u8BBA\uFF0C\u76F4\u63A5\u62A5\u544A\u8BE5\u914D\u7F6E\u95EE\u9898\u3002
-- **\u4E0D\u8981\u624B\u52A8\u6D41\u8F6C\u672C\u4EFB\u52A1\u72B6\u6001**\uFF08\u4E0D\u8981\u8C03 \`morula task state\`\uFF09\uFF1A\u8BC4\u5BA1\u7ED3\u8BBA\u7531\u670D\u52A1\u7AEF\u636E\u6B64\u63A8\u8FDB\u3002
 - **\u5FC5\u987B\u4E0A\u62A5**\uFF1A\u6F0F\u62A5\u4F1A\u8BA9\u4EFB\u52A1\u505C\u5728\u300C\u5F85\u8BC4\u5BA1\u300D\uFF0C\u5F00\u53D1\u65E0\u6CD5\u8FDB\u5165\u4E0B\u4E00\u8F6E\u3002
+- \u9000\u56DE\u5F00\u53D1**\u9996\u9009\u7ED3\u8BBA\u534F\u8BAE**\uFF1A\`--verdict changes_requested\`\uFF08\u5E26\u5177\u4F53\u610F\u89C1\uFF09\u4E0E\u670D\u52A1\u7AEF\u7ED3\u8BBA\u94FE\u8DEF\u5B8C\u5168\u7B49\u4EF7\uFF1B\`morula task state --state in_progress\` \u662F\u7B49\u4EF7\u7684\u66FF\u4EE3\u5165\u53E3\uFF08\u89C1\u7B2C 4 \u6761\uFF09\uFF0C\u4E0D\u662F\u7ED5\u8FC7\u3002
 
 ## 4.3 \u5728 MR/PR \u4E0A\u7559\u8BC4\u5BA1\u610F\u89C1\uFF08\u5DE1\u68C0/\u5BA1\u67E5\u7C7B\u4EFB\u52A1\uFF0C\u975E\u8BC4\u5BA1\u4EFB\u52A1\u65F6\uFF09
 
@@ -5430,36 +5451,30 @@ morula task inbox --peek     # \u53EA\u770B\u4E0D\u53D6\uFF08\u786E\u8BA4\u6709\
 - \u82E5\u672C\u81EA\u52A8\u5316\u5DF2\u5C31\u540C\u4E00\u95EE\u9898\u7559\u8FC7\u8BC4\u8BBA\u3001\u7ED3\u8BBA\u4E0E\u8FD9\u6B21\u4E00\u81F4 \u2192 **\u4E0D\u8981\u91CD\u590D\u8BC4\u8BBA**\uFF1B
 - \u26D4 **\u4E0D\u8981\u7528 \`morula review submit\`**\uFF08\u90A3\u662F\u8BC4\u5BA1\u4EFB\u52A1\u7684\u673A\u5668\u534F\u8BAE\uFF0C\u4F1A\u9A71\u52A8\u4E1A\u52A1\u4EFB\u52A1\u72B6\u6001\u56DE\u9000\uFF09\u3002
 
-## 5. \u8BC4\u8BBA\u4EA4\u4ED8\u7EAA\u5F8B
-
-- **\u4F55\u65F6\u53D1\u8BC4\u8BBA**\uFF1A**\u6700\u7EC8\u603B\u7ED3\u8BC4\u8BBA\u7531\u670D\u52A1\u7AEF\u7EDF\u4E00\u4EE5\u667A\u80FD\u4F53\u8EAB\u4EFD\u53D1\u9001**\uFF08\u4EFB\u52A1\u5B8C\u6210\u65F6\u81EA\u52A8\u53D1\u5E03\u5230\u4EFB\u52A1\u5BF9\u8C61\uFF0C\u4F5C\u8005=\u5F53\u524D\u667A\u80FD\u4F53\uFF09\u3002**\u4F60\u4E0D\u9700\u8981\u3001\u4E5F\u4E0D\u5E94\u8C03\u7528 \`morula comment add\`**\u2014\u2014\u53EA\u8981\u5728\u6700\u7EC8\u8F93\u51FA\u91CC\u7ED9\u51FA\u7528\u6237\u5173\u5FC3\u7684\u7ED3\u8BBA\u5373\u53EF\uFF0C\u670D\u52A1\u7AEF\u4F1A\u4F5C\u4E3A\u8BE5\u667A\u80FD\u4F53\u7684\u5B8C\u6210\u8BC4\u8BBA\u53D1\u5E03\u3002chat \u4F1A\u8BDD\u65E0 objectId \u7684\u4EFB\u52A1\uFF08\u7EAF\u5BF9\u8BDD\u6D3E\u53D1\uFF09\u4E0D\u56DE\u8BC4\u8BBA\u2014\u2014\u6700\u7EC8\u4EA4\u4ED8\u7531 daemon \u56DE\u586B assistant \u6D88\u606F\u3002
-- **\u7EC8\u7AEF\u8F93\u51FA\u3001\u601D\u8003\u8FC7\u7A0B\u3001\u5DE5\u5177\u65E5\u5FD7\u7528\u6237\u90FD\u770B\u4E0D\u5230**\u2014\u2014\u7528\u6237\u770B\u5230\u7684\u53EA\u6709\u670D\u52A1\u7AEF\u6574\u5408\u540E\u53D1\u5E03\u7684\u6700\u7EC8\u603B\u7ED3\u8BC4\u8BBA\u3002
-- **\u8BC4\u8BBA @\u89E6\u53D1\u4EFB\u52A1\uFF08\u672C\u4EFB\u52A1\u7531\u8BC4\u8BBA\u89E6\u53D1\uFF09**\uFF1A\u670D\u52A1\u7AEF\u4F1A\u628A\u6700\u7EC8\u603B\u7ED3\u81EA\u52A8\u4F5C\u4E3A**\u8BE5\u89E6\u53D1\u8BC4\u8BBA\u7684\u56DE\u590D**\u53D1\u51FA\uFF08\u6302\u5728\u88AB @ \u7684\u8BC4\u8BBA\u4E0B\uFF09\u3002\u4F60\u65E0\u9700\u3001\u4E5F\u4E0D\u8981\u81EA\u5DF1\u8C03\u7528 \`morula comment add\`/add_comment\u3002
-- **\u9632\u91CD\u590D\uFF08\u670D\u52A1\u7AEF\u4FDD\u8BC1\uFF09**\uFF1A\u670D\u52A1\u7AEF\u5BF9\u300C\u540C\u4E00\u4E2A\u4EFB\u52A1\u53EA\u53D1\u4E00\u6761\u5B8C\u6210\u8BC4\u8BBA\u300D\u505A\u5E42\u7B49\uFF0C\u4E0D\u4F1A\u91CD\u590D\u5237\u5C4F\u3002\u4F60\u4E0D\u9700\u8981\u3001\u4E5F\u4E0D\u8981\u53BB\u67E5/\u53D1\u591A\u6761\u3002
-- **\u6700\u7EC8\u8F93\u51FA = \u53EA\u7559\u7ED3\u8BBA**\uFF08\u4E0D\u8BBE\u5B57\u6570\u4E0A\u9650\u3001\u4E0D\u8981\u6C42\u56FA\u5B9A\u683C\u5F0F\uFF0C\u81EA\u7136\u7EC4\u7EC7\u5373\u53EF\uFF09\uFF1A
-  - \u5FC5\u7B54\uFF1A**\u505A\u4E86\u4EC0\u4E48\u3001\u7ED3\u679C\u5982\u4F55\u3001\u7528\u6237\u9700\u8981\u77E5\u9053\u7684\u540E\u7EED**\u3002
-  - **PR \u6C47\u62A5\u4EC5\u5F53\u300C\u4EFB\u52A1\u6D89\u53CA\u4EE3\u7801\u6539\u52A8\u300D\u6216\u300C\u7528\u6237\u660E\u786E\u95EE\u5230 PR/\u5408\u5E76\u300D\u65F6\u7ED9\u51FA**\uFF1B\u7EAF\u95EE\u7B54/\u8C03\u7814\u7C7B\u4EFB\u52A1\u4E0D\u8981\u51FA\u73B0 PR/\u5206\u652F\u7AE0\u8282\uFF0C\u76F4\u63A5\u56DE\u7B54\u95EE\u9898\u3002
-  - **\u4E0D\u8981\u5199**\uFF1A\u601D\u8003\u8FC7\u7A0B\u3001\u63A2\u7D22\u6B65\u9AA4\u3001\u5DE5\u5177\u65E5\u5FD7\u3001\u7EC8\u7AEF\u8F93\u51FA\u3001\u82F1\u6587\u8FC7\u7A0B\u6027\u53D9\u8FF0\u2014\u2014\u7528\u6237\u53EA\u5173\u5FC3\u300C\u505A\u4E86\u4EC0\u4E48\u3001\u7ED3\u679C\u600E\u6837\u300D\uFF0C\u4E0D\u5173\u5FC3\u300C\u600E\u4E48\u505A\u7684\u300D\u3002
-  - \u5185\u5BB9\u8F83\u591A\u65F6\u7528\u5C0F\u6807\u9898/\u5217\u8868\u7EC4\u7EC7\uFF0C\u8BA9\u7ED3\u8BBA\u5148\u7F6E\u9876\u3002
-- **\u8FC7\u7A0B\u6587\u672C\u5FC5\u987B\u52A0\u5206\u9694\u7B26**\uFF1A\u670D\u52A1\u7AEF\u53D6\u4F60\u7684\u6700\u7EC8\u8F93\u51FA\u65F6\u6309\u4F18\u5148\u7EA7\u622A\u53D6\u300C\u603B\u7ED3\u6BB5\u300D\uFF0C**\u6700\u9AD8\u4F18\u5148\u7EA7\u662F\u5206\u9694\u7B26 \`---FINAL---\`**\uFF08\u72EC\u5360\u4E00\u884C\u3001\u524D\u540E\u5404\u7A7A\u4E00\u884C\uFF09\u3002\u82E5\u4F60\u7684\u8F93\u51FA\u91CC\u6DF7\u5165\u4E86\u4E2D\u95F4\u8FC7\u7A0B\uFF08\u82F1\u6587\u63A2\u7D22\u53D9\u8FF0\u3001\u5DE5\u5177\u5C1D\u8BD5\u8BB0\u5F55\u3001\u601D\u8003\u7247\u6BB5\uFF09\uFF0C**\u5FC5\u987B**\u5728\u771F\u6B63\u7684\u603B\u7ED3\u4E4B\u524D\u63D2\u5165\u8BE5\u5206\u9694\u7B26\u2014\u2014\u670D\u52A1\u7AEF\u53EA\u4FDD\u7559\u5B83\u4E4B\u540E\u7684\u5185\u5BB9\uFF1A
+## 5. \u8BC4\u8BBA\u4EA4\u4ED8\u7EAA\u5F8B\uFF08\u6700\u7EC8\u603B\u7ED3\u7531\u4F60\u81EA\u5DF1\u53D1\u5E03\uFF09
 
+- **\u6700\u7EC8\u603B\u7ED3\u8BC4\u8BBA\u7531\u4F60\u81EA\u5DF1\u53D1\u5E03**\uFF1A\u4EFB\u52A1\u6536\u5C3E\u65F6\u6267\u884C
+  \`\`\`bash
+  morula comment add --object <objectId> --final --content <\u7ED3\u8BBA>
   \`\`\`
-  ...\uFF08\u524D\u9762\u7684\u8FC7\u7A0B\u6587\u672C\uFF0C\u4F1A\u88AB\u670D\u52A1\u7AEF\u81EA\u52A8\u622A\u6389\uFF09...
-
-  ---FINAL---
-
-  ## \u603B\u7ED3
-
-  ...\uFF08\u771F\u6B63\u7684\u603B\u7ED3\u5185\u5BB9\uFF0C\u4F1A\u5C55\u793A\u7ED9\u7528\u6237\uFF09...
+  \u4F5C\u8005=\u4F60\uFF08\u667A\u80FD\u4F53\u8EAB\u4EFD\uFF09\uFF1B\u8BC4\u8BBA\u89E6\u53D1\u4EFB\u52A1\u65F6\u670D\u52A1\u7AEF\u4F1A**\u81EA\u52A8\u628A\u5B83\u6302\u5230\u89E6\u53D1\u8BC4\u8BBA\u4E0B**\u4F5C\u4E3A\u56DE\u590D\uFF08\u65E0\u9700\u81EA\u5DF1\u67E5\u8BC4\u8BBA ID\uFF09\u3002
+  **\u5148\u53D1 final \u8BC4\u8BBA\u3001\u518D\u4E0A\u62A5\u4EFB\u52A1\u7ED3\u679C**\u2014\u2014\u670D\u52A1\u7AEF\u5728\u4F60\u5B8C\u6210\u65F6\u68C0\u67E5\uFF1A\u6CA1\u53D1\u8FC7 final \u624D\u4F1A\u515C\u5E95\u4EE3\u53D1\u4E00\u6761\uFF08\u540C\u4E00\u4EFB\u52A1\u53EA\u4F1A\u4FDD\u7559\u4E00\u6761\u6700\u7EC8\u603B\u7ED3\uFF0C\u91CD\u590D\u53D1\u9001\u4F1A\u88AB\u670D\u52A1\u7AEF\u62D2\u7EDD\uFF0C\u8FD9\u662F\u9884\u671F\u5185\u7684\u5E42\u7B49\u4FDD\u62A4\uFF09\u3002
+- **\u4F8B\u5916\uFF1A\u8BC4\u5BA1\u4EFB\u52A1\u4E0D\u9700\u8981\uFF08\u4E5F\u4E0D\u5E94\uFF09\u53D1 final**\u2014\u2014\u4F60\u7684\u7ED3\u8BBA\u5DF2\u7ECF\u901A\u8FC7 \`morula review submit\` \u673A\u5668\u534F\u8BAE\u4E0A\u62A5\uFF0C\u5E73\u53F0\u4F1A\u636E\u6B64\u5199\u6743\u5A01\u7ED3\u8BBA\u8BC4\u8BBA\uFF08\u2705 \u901A\u8FC7 / \u{1F4AC} \u975E\u963B\u585E / \u{1F501} \u672A\u901A\u8FC7\uFF09\uFF1B\u518D\u53D1\u4E00\u6761 final \u603B\u7ED3\u4F1A\u8BA9\u540C\u4E00\u7ED3\u8BBA\u5728\u8BC4\u8BBA\u533A**\u8BF4\u4E24\u904D**\uFF08\u670D\u52A1\u7AEF\u4E5F\u4F1A\u62D2\u7EDD\u8BC4\u5BA1\u4EFB\u52A1\u7684 final\uFF09\u3002\u9700\u8981\u53D1 final \u7684\u662F\u5F00\u53D1 / \u4FEE\u590D / \u5206\u6790 / \u95EE\u7B54 / \u8BC4\u8BBA\u89E6\u53D1\u7C7B\u4EFB\u52A1\u2014\u2014\u5185\u5BB9**\u7528\u4F60\u81EA\u5DF1\u7684\u8BDD\u5199**\uFF0C\u4E0D\u8981\u5957\u6A21\u677F\u3002
+- **\u666E\u901A\u8BC4\u8BBA**\uFF08\u8BF4\u660E\u8FDB\u5C55\u3001@ \u5176\u4ED6\u4EBA\u6216\u8FD0\u884C\u65F6\uFF09\u968F\u65F6\u53EF\u53D1\uFF1A
+  \`\`\`bash
+  morula comment add --object <objectId> --content <\u6587\u672C>
+  morula comment add --object <objectId> --content <\u6587\u672C> --mention-agent <stageExecutorId>   # @ \u9636\u6BB5\u8FD0\u884C\u65F6\uFF08\u89E6\u53D1\u8BE5\u6267\u884C\u5668\u5728\u672C\u4EFB\u52A1\u4E0A\u5E72\u6D3B\uFF09
   \`\`\`
-
-  \u670D\u52A1\u7AEF\u540C\u65F6\u517C\u5BB9 \`---SUMMARY---\`\u3002**\u4E0D\u5199\u5206\u9694\u7B26\u65F6**\uFF0C\u670D\u52A1\u7AEF\u53EA\u80FD\u9000\u56DE\u300C\u6309\u603B\u7ED3\u7C7B\u6807\u9898 / \u6C34\u5E73\u7EBF\u731C\u6D4B\u300D\uFF0C\u731C\u4E0D\u4E2D\u5C31\u4F1A\u628A\u4F60\u7684\u8FC7\u7A0B\u6587\u672C\u4E00\u8D77\u53D1\u7ED9\u7528\u6237\u2014\u2014\u6240\u4EE5\u6DF7\u4E86\u8FC7\u7A0B\u5C31\u4E00\u5B9A\u8981\u52A0\u3002
-- \u4E0D\u8981\u5305\u542B\u5DE5\u5177\u8C03\u8BD5\u8FC7\u7A0B\u3001\u5185\u90E8\u65E5\u5FD7\u3001\u4EFB\u4F55\u51ED\u636E\u6216 token \u4FE1\u606F\u3002
+  chat \u4F1A\u8BDD\u65E0 objectId \u7684\u4EFB\u52A1\uFF08\u7EAF\u5BF9\u8BDD\u6D3E\u53D1\uFF09\u4E0D\u53D1\u8BC4\u8BBA\u2014\u2014\u6700\u7EC8\u4EA4\u4ED8\u7531 daemon \u56DE\u586B assistant \u6D88\u606F\u3002
+- **\u8BC4\u8BBA\u7EAA\u5F8B\uFF1A\u53EA\u5199\u7ED3\u8BBA\u4E0E\u4E8B\u5B9E**\u2014\u2014\u505A\u4E86\u4EC0\u4E48\u3001\u7ED3\u679C\u5982\u4F55\u3001\u7528\u6237\u9700\u8981\u77E5\u9053\u7684\u540E\u7EED\uFF1B**\u4E0D\u5199**\u601D\u8003\u8FC7\u7A0B\u3001\u63A2\u7D22\u6B65\u9AA4\u3001\u5DE5\u5177\u65E5\u5FD7\u3001\u7EC8\u7AEF\u8F93\u51FA\u3001\u547D\u4EE4\u56DE\u663E\u3002\u7528\u6237\u53EA\u5173\u5FC3\u300C\u505A\u4E86\u4EC0\u4E48\u3001\u7ED3\u679C\u600E\u6837\u300D\uFF0C\u4E0D\u5173\u5FC3\u300C\u600E\u4E48\u505A\u7684\u300D\u3002\u5185\u5BB9\u8F83\u591A\u65F6\u7528\u5C0F\u6807\u9898/\u5217\u8868\u7EC4\u7EC7\uFF0C\u7ED3\u8BBA\u5148\u7F6E\u9876\u3002
+- **PR \u6C47\u62A5\u4EC5\u5F53\u300C\u4EFB\u52A1\u6D89\u53CA\u4EE3\u7801\u6539\u52A8\u300D\u6216\u300C\u7528\u6237\u660E\u786E\u95EE\u5230 PR/\u5408\u5E76\u300D\u65F6\u7ED9\u51FA**\uFF1B\u7EAF\u95EE\u7B54/\u8C03\u7814\u7C7B\u4EFB\u52A1\u4E0D\u8981\u51FA\u73B0 PR/\u5206\u652F\u7AE0\u8282\u3002
+- **\u4EFB\u52A1\u7ED3\u679C\u6587\u672C\u540C\u6837\u53EA\u5199\u7ED3\u8BBA**\uFF1A\u4E0A\u62A5\u7684\u4EFB\u52A1\u7ED3\u679C\u4F1A\u88AB\u670D\u52A1\u7AEF\u7528\u4E8E\u7F3A\u5931\u515C\u5E95\u4E0E\u901A\u77E5\u6458\u8981\u2014\u2014\u82E5\u7ED3\u679C\u91CC\u6DF7\u5165\u4E86\u4E2D\u95F4\u8FC7\u7A0B\uFF08\u82F1\u6587\u63A2\u7D22\u53D9\u8FF0\u3001\u5DE5\u5177\u5C1D\u8BD5\u8BB0\u5F55\u3001\u601D\u8003\u7247\u6BB5\uFF09\uFF0C**\u5FC5\u987B**\u5728\u771F\u6B63\u7684\u603B\u7ED3\u4E4B\u524D\u63D2\u5165\u72EC\u5360\u4E00\u884C\u7684 \`---FINAL---\` \u5206\u9694\u7B26\uFF0C\u670D\u52A1\u7AEF\u515C\u5E95\u65F6\u53EA\u4FDD\u7559\u5B83\u4E4B\u540E\u7684\u5185\u5BB9\uFF08\`---SUMMARY---\` \u540C\u6837\u517C\u5BB9\uFF1B\u4E0D\u5199\u65F6\u670D\u52A1\u7AEF\u9000\u56DE\u300C\u6309\u603B\u7ED3\u7C7B\u6807\u9898 / \u6C34\u5E73\u7EBF\u731C\u6D4B\u300D\uFF0C\u731C\u4E0D\u4E2D\u4F1A\u628A\u8FC7\u7A0B\u6587\u672C\u4E00\u8D77\u515C\u5E95\u51FA\u53BB\uFF09\u3002
 - **\u4E0D\u8981\u628A\u672C\u5730\u7EDD\u5BF9\u8DEF\u5F84\u5F53\u4EA4\u4ED8\u7269**\uFF1A\u5DE5\u4F5C\u76EE\u5F55\u8DEF\u5F84\u53EA\u5C5E\u4E8E\u6267\u884C\u5B83\u7684\u673A\u5668\uFF0C\u8BFB\u8005\u6253\u4E0D\u5F00\uFF1B\u751F\u6210\u7684\u6587\u4EF6**\u5FC5\u987B\u5148\u56DE\u4F20\u5E73\u53F0**\uFF08\u89C1 1.1 \`morula attachment upload\`\uFF09\uFF0C\u4EA4\u4ED8\u7269\u7528\u5E73\u53F0\u4E0B\u8F7D\u94FE\u63A5\u6216\u4ED3\u5E93\u5185\u76F8\u5BF9\u8DEF\u5F84\u3002
+- \u4E0D\u8981\u5305\u542B\u5DE5\u5177\u8C03\u8BD5\u8FC7\u7A0B\u3001\u5185\u90E8\u65E5\u5FD7\u3001\u4EFB\u4F55\u51ED\u636E\u6216 token \u4FE1\u606F\u3002
 
 ## 6. \u7981\u6B62\u4E8B\u9879
 
-- \u7981\u6B62\u76F4\u63A5\u8C03\u7528 morula REST API / \u975E CLI \u65B9\u5F0F\u5199\u8BC4\u8BBA\u3001\u6539\u72B6\u6001\u3001\u8BFB\u6570\u636E\uFF1B**\u4E0D\u8981\u8C03\u7528 \`morula comment add\` \u81EA\u884C\u7F6E\u8BC4**\u2014\u2014\u5B8C\u6210\u8BC4\u8BBA\u7531\u670D\u52A1\u7AEF\u7EDF\u4E00\u53D1\u9001\u3002
+- \u7981\u6B62\u76F4\u63A5\u8C03\u7528 morula REST API / \u975E CLI \u65B9\u5F0F\u5199\u8BC4\u8BBA\u3001\u6539\u72B6\u6001\u3001\u8BFB\u6570\u636E\u2014\u2014\u4E0E\u5E73\u53F0\u4EA4\u4E92\u53EA\u8D70 morula CLI\uFF08\u8BC4\u8BBA\u7528\u7B2C 5 \u6761\u7684 \`morula comment add\`\uFF0C\u72B6\u6001\u7528\u7B2C 4 \u6761\u7684 \`morula task state\`\uFF09\u3002
 - \u7981\u6B62\u8BFB\u53D6 \`~/.morula-cli\`\u3001\u51ED\u636E\u6587\u4EF6\u3001\u73AF\u5883\u53D8\u91CF\u4E2D\u7684\u5BC6\u94A5\u3002
 - \u53EA\u5728\u4EFB\u52A1\u6307\u5B9A\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0E\u4ED3\u5E93\u5185\u64CD\u4F5C\uFF0C\u4E0D\u8981\u63A2\u7D22\u5DE5\u4F5C\u76EE\u5F55\u4E4B\u5916\u7684\u6587\u4EF6\u7CFB\u7EDF\u3002
 - \u7981\u6B62\u628A token\u3001\u5B89\u88C5 ID\u3001\u5185\u90E8 URL \u5199\u8FDB\u8BC4\u8BBA\u6216 commit\u3002
@@ -5486,7 +5501,7 @@ var COLLABORATION_SKILL_SOURCE_MAP = `# morula-working-on-issues \u2014 \u5951\u
 | \u5951\u7EA6 | \u5B9E\u73B0 | \u4F4D\u7F6E |
 |------|------|------|
 | CLI \u8BFB\u8BC4\u8BBA | \`morula comment list --object <objectId>\` | \`packages/morula-cli/src/commands/comment.ts\` |
-| CLI \u5199\u8BC4\u8BBA\uFF08**\u5951\u7EA6\u7981\u6B62 agent \u81EA\u884C\u8C03\u7528**\uFF1A\u5B8C\u6210\u8BC4\u8BBA\u7531\u670D\u52A1\u7AEF\u7EDF\u4E00\u53D1\u9001\uFF0C\u89C1\u672C\u6587\u4EF6\u7B2C 5 \u6761\uFF09 | \`morula comment add\`\uFF08\u547D\u4EE4\u5B58\u5728\uFF0C\u4F46\u672C\u5951\u7EA6\u8981\u6C42\u4E0D\u8C03\u7528\uFF09 | \`packages/morula-cli/src/commands/comment.ts\` |
+| CLI \u5199\u8BC4\u8BBA\uFF08**\u7531 agent \u81EA\u5DF1\u53D1**\uFF0C\u542B \`--final\` \u6700\u7EC8\u603B\u7ED3\u4E0E \`--mention-agent\` @ \u8FD0\u884C\u65F6\uFF1B\u89C1\u672C\u6587\u4EF6\u7B2C 5 \u6761\uFF09 | \`morula comment add\` \u2192 \`POST /comments\`\uFF08agent_task \u51ED\u8BC1\uFF1B\`kind='final'\` \u6309 \`(taskId, kind)\` \u552F\u4E00\u9632\u91CD\uFF09 | \`packages/morula-cli/src/commands/comment.ts\`\u3001\`src/modules/task-management/comment/comment.service.ts\` |
 | CLI \u4EFB\u52A1\u8BE6\u60C5\uFF08**\u65E0\u53C2**\u53D6\u672C\u4EFB\u52A1\uFF1B\u5E26\u53C2\u53D6\u4E1A\u52A1\u5BF9\u8C61\uFF09 | \`morula task get\` \u2192 \`GET /agent-tasks/:id\`\uFF1B\`morula task get <objectId>\` \u2192 \`GET /objects/:id\` | \`packages/morula-cli/src/commands/task.ts\` |
 | daemon \u6CE8\u5165\u51ED\u636E\uFF08agent \u65E0\u9700\u81EA\u884C\u767B\u5F55\uFF09 | runner \u6CE8\u5165 \`env\` \u7ED9 Provider \u5B50\u8FDB\u7A0B | \`packages/runtime/src/daemon/runner.ts\` |
 | \u8C03 CLI \u7528 \`$MORULA_CLI\`\uFF08\u7EDD\u5BF9\u8DEF\u5F84\uFF0C\u4E0E\u5F53\u524D daemon \u540C\u6E90\uFF1BPATH \u4E0A\u7684\u88F8 \`morula\` \u53EF\u80FD\u662F\u5BBF\u4E3B\u81EA\u5E26\u7684\u65E7\u7248\uFF09 | \`resolveAgentCliPath\`\uFF08\u4F18\u5148\u672C\u5305 \`dist/morula.js\`\uFF0C\u4EA7\u7269\u7F3A\u5931\u56DE\u9000\u63D2\u4EF6\u542F\u52A8\u5668\uFF09\uFF1B\u6CE8\u5165\u70B9\uFF1A\u4EFB\u52A1\u94FE\u8DEF \`env\`\u3001\u4F1A\u8BDD\u94FE\u8DEF \`env\` | \`packages/runtime/src/daemon/plugin-register.ts\`\u3001\`runner.ts\`\u3001\`session-host.ts\` |
@@ -5505,12 +5520,15 @@ var COLLABORATION_SKILL_SOURCE_MAP = `# morula-working-on-issues \u2014 \u5951\u
 | delivery \u4EE5\u672C\u5730\u5B9E\u9645\u5206\u652F\u4E3A\u51C6 | \`reportPrDelivery\` \u8BFB \`git branch --show-current\`\uFF0C\u8DF3\u8FC7\u5360\u4F4D/\u4E3B\u5E72 | \`packages/runtime/src/daemon/runner.ts\` |
 | \u4EA4\u4ED8\u4E0A\u62A5\u904D\u5386\u672C\u4EFB\u52A1\u5168\u90E8\u4ED3\u5E93 | \u4E3B\u4ED3\u5E93\u76EE\u5F55\uFF08\u5DE5\u4F5C\u533A\u6839\u4E0B\u7684\u4ED3\u5E93\u5B50\u76EE\u5F55\uFF09+ \u5176\u4F59\u540C\u7EA7\u4ED3\u5E93\u5B50\u76EE\u5F55\uFF08prepare \u4EA7\u7269\uFF0C\u78C1\u76D8\u4E8B\u5B9E\uFF1B\u6309 repoFullName \u5F52\u5C5E\u6392\u9664\u4E3B\u4ED3\u5E93\uFF09\uFF0C\u9010\u4ED3\u4E0A\u62A5 branch/pushState\u3001\u9010\u4ED3\u72EC\u7ACB\u6210\u8D25\uFF1B\u6B21\u4ED3\u5E93 \`workContextId\` \u7701\u7565\u65F6\u670D\u52A1\u7AEF\u6309 \`(lastAgentTaskId, repoFullName)\` \u53CD\u67E5 | \`reportPrDelivery\`/\`reportRepoTargets\`\uFF08\`runner.ts\`\uFF09\u3001\`collectMaterializedRepoDeliveryTargets\`\uFF08\`repo-checkout-service.ts\`\uFF09 |
 
-## 4. \u72B6\u6001\u7531\u670D\u52A1\u7AEF\u9A71\u52A8\uFF08agent \u4E0D\u624B\u52A8\u7FFB\u72B6\u6001\uFF09
+## 4. \u72B6\u6001\u4E0E\u4EFB\u52A1\u64CD\u4F5C\uFF08\u7ED3\u8BBA\u4F18\u5148\u3001\u52A8\u4F5C\u4E3A\u8F85\uFF1Bproposal stage-runtime-as-task-actor\uFF09
 
 | \u5951\u7EA6 | \u5B9E\u73B0 | \u4F4D\u7F6E |
 |------|------|------|
-| merge \u81EA\u52A8\u5173\u5355\uFF08\u670D\u52A1\u7AEF\u9A71\u52A8\u72B6\u6001\uFF09 | webhook merged \u2192 \u6309\u5E73\u53F0\u4E8B\u5B9E\u5B9A\u4F4D\u5DF2\u5173\u8054\u94FE\u63A5 \u2192 \u6C47\u603B \u2192 Object \u5B8C\u6210 | \`src/modules/vcs-integration/webhook/vcs-event.service.ts\`\u3001\`link/vcs-link.service.ts\` |
-| agent \u4E0D\u8C03 CLI \u6539\u72B6\u6001 | \u534F\u4F5C\u5951\u7EA6\u7B2C 4 \u6761\u3002**\u6CE8\u610F\uFF1ACLI \u6709 \`morula task state <id> --state <code>\`**\uFF08\u673A\u5668\u534F\u8BAE \`POST /agent-tasks/:id/state\`\uFF0C\u4F9B\u5E73\u53F0/\u81EA\u6D41\u8F6C\u4F7F\u7528\uFF09\u2014\u2014\u662F**\u5951\u7EA6\u8981\u6C42 agent \u4E0D\u8C03\u7528**\u5B83\uFF0C\u4E0D\u662F\u300CCLI \u6CA1\u6709\u8FD9\u4E2A\u547D\u4EE4\u300D | \`packages/morula-cli/src/commands/task.ts\`\uFF08action \`state\`\uFF09\u3001\`src/modules/agent-task/agent-task.controller.ts\`\uFF08\u7AEF\u70B9\uFF09 |
+| merge \u81EA\u52A8\u5173\u5355\uFF08\u4E8B\u5B9E\u4E8B\u4EF6\u9A71\u52A8\u72B6\u6001\uFF09 | webhook merged \u2192 \u6309\u5E73\u53F0\u4E8B\u5B9E\u5B9A\u4F4D\u5DF2\u5173\u8054\u94FE\u63A5 \u2192 \u6C47\u603B \u2192 Object \u5B8C\u6210 | \`src/modules/vcs-integration/webhook/vcs-event.service.ts\`\u3001\`link/vcs-link.service.ts\` |
+| \u8FD0\u884C\u65F6\u53EF\u58F0\u660E\u72B6\u6001\u96C6\u5408 = \`in_progress\` / \`review\`\uFF08D8 \u843D\u5730\u53E3\u5F84\uFF1B\u7EC8\u6001\u4E0E backlog/todo \u4E0D\u53EF\u58F0\u660E\uFF0CD5\uFF09 | \`resolveRuntimeStateTransition\`\uFF08\u552F\u4E00\u5B9A\u4E49\uFF1A\u63A7\u5236\u5668\u7AEF\u70B9\u4E0E change_object_status \u5DE5\u5177\u5171\u7528\uFF09\uFF1B\u6B63\u5411\u8D70\u4E8B\u4EF6\u7EA7\u89C4\u5219 + ObjectService.update | \`src/modules/agent-task/domain/runtime-state-actions.ts\`\u3001\`agent-task.controller.ts\`\uFF08\`POST :id/state\`\uFF09 |
+| **\u5F85\u8BC4\u5BA1 \u2192 \u5F00\u53D1\u4E2D = \u9000\u56DE\u5F00\u53D1\uFF0C\u5355\u4E00\u6548\u5E94\u5165\u53E3**\uFF08\u8BB0\u8D26 + \u56DE\u9000 + \u6D3E\u4FEE\u590D + \u53CC\u89E6\u53D1\u53BB\u91CD\uFF1B\u4E0D\u505A\u88F8\u72B6\u6001\u5199\uFF09 | \`ReviewLoopService.runtimeRevertToDev\`\uFF08\u4E0E verdict \u8DEF\u5F84 \`handleRejected\` \u5171\u7528 \`dispatchDevRework\`\uFF1B\u4E8B\u5B9E\u53BB\u91CD = \u5BF9\u8C61\u5DF2\u6709\u672A\u5B8C\u6210 dev \u4EFB\u52A1\u5219\u53EA\u8BB0\u8D26\u4E0D\u6D3E\u5355\uFF09 | \`src/modules/agent-task/review-loop.service.ts\` |
+| \u4EFB\u52A1\u6D3B\u8DC3\u95E8\u7981\uFF08\u7EC8\u6001\u4EFB\u52A1\u7684 token \u4E0D\u5F97\u518D\u63A8\u72B6\u6001/\u6307\u6D3E\uFF09 | \`ACTIVE_TASK_STATUSES\`\uFF08queued/dispatched/running/awaiting_approval\uFF09 | \`src/modules/agent-task/domain/runtime-state-actions.ts\` |
+| \u6307\u6D3E\u8D1F\u8D23\u4EBA\uFF08\u76EE\u6807 = \u672C\u7A7A\u95F4\u6210\u5458\u6216\u9636\u6BB5\u6267\u884C\u5668 principal\uFF1B\u5931\u8D25\u663E\u5F0F\u62A5\u9519\uFF09 | \`POST /agent-tasks/:id/assignee\`\uFF08ObjectService.update \u843D\u5E93\uFF0Cagent_task \u5B57\u6BB5\u767D\u540D\u5355\u542B assigneePrincipalId\uFF09 | \`agent-task.controller.ts\`\u3001\`object.service.ts\` |
 
 ## 4.1 \u8BC4\u5BA1\u4EFB\u52A1\u7ED3\u8BBA\u56DE\u4F20\uFF08morula review submit\uFF09
 
@@ -5519,15 +5537,17 @@ var COLLABORATION_SKILL_SOURCE_MAP = `# morula-working-on-issues \u2014 \u5951\u
 | \u8BC4\u5BA1\u7ED3\u8BBA\u673A\u5668\u534F\u8BAE\uFF08approved / changes_requested / commented\uFF0Cchanges_requested \u5FC5\u987B\u5E26 details\uFF09 | \`morula review submit <objectId> --verdict ... [--details] [--pr-number]\` \u2192 \`POST /agent-collaborations/review/submit\`\uFF08\u670D\u52A1\u7AEF\u6821\u9A8C\u8C03\u7528\u8005 = \u8BC4\u5BA1\u4EFB\u52A1\u540E\u843D\u5E93\u5E76\u9A71\u52A8\u56DE\u73AF\uFF09 | \`packages/morula-cli/src/commands/review.ts\`\u3001\`src/modules/agent-task/review-loop.service.ts\` |
 | \u8BC4\u5BA1\u5BF9\u8C61\uFF08objectId\uFF09\u7ECF AgentTask \u672C\u4F53\u4E0B\u53D1\uFF08\`morula task get\` \u65E0\u53C2\u8FD4\u56DE\uFF09 | AgentTask \u8BB0\u5F55 \`objectId\` \u5B57\u6BB5\uFF08enqueue \u65F6\u5199\u5165\uFF09 | \`src/modules/agent-task/review-loop.service.ts\` |
 
-## 5. \u8BC4\u8BBA\u4EA4\u4ED8\u7EAA\u5F8B\uFF08\u4E00\u6761\u6700\u7EC8\u8BC4\u8BBA\uFF0C\u7ED3\u679C\u4E0A\u5E73\u53F0\uFF09
+## 5. \u8BC4\u8BBA\u4EA4\u4ED8\u7EAA\u5F8B\uFF08\u6700\u7EC8\u603B\u7ED3\u7531\u8FD0\u884C\u65F6\u81EA\u53D1\uFF0C\u670D\u52A1\u7AEF\u9632\u91CD\u515C\u5E95\uFF09
 
 | \u5951\u7EA6 | \u5B9E\u73B0 | \u4F4D\u7F6E |
 |------|------|------|
-| \u8BC4\u8BBA\u662F\u7528\u6237\u53EF\u89C1\u7684\u552F\u4E00\u901A\u9053\uFF1B**\u5B8C\u6210\u8BC4\u8BBA\u7531\u670D\u52A1\u7AEF\u7EDF\u4E00\u4EE5\u667A\u80FD\u4F53\u8EAB\u4EFD\u53D1\u9001**\uFF08agent \u4E0D\u8C03 \`comment add\`\uFF09 | \u670D\u52A1\u7AEF \`finalOutput\` \u56DE\u586B + \u805A\u5408\u53D1\u5E03\uFF1B\u8BC4\u8BBA @\u89E6\u53D1\u4EFB\u52A1\u7684\u603B\u7ED3\u81EA\u52A8\u6302\u5230\u89E6\u53D1\u8BC4\u8BBA\u4E0B\uFF08hasAgentRepliedToTrigger \u53BB\u91CD\uFF09 | \`src/modules/agent-task/task-lifecycle.service.ts\`\u3001\u672C SKILL \u7B2C 5 \u6761 |
-| \u6700\u7EC8\u8F93\u51FA\u622A\u53D6\u300C\u603B\u7ED3\u6BB5\u300D\uFF08\u6700\u9AD8\u4F18\u5148\u7EA7 = \`---FINAL---\` \u5206\u9694\u7B26\uFF09 | \`cleanFinalOutput\`\uFF1A\u5206\u9694\u7B26 \u2192 \u603B\u7ED3\u7C7B\u6807\u9898 \u2192 \u6C34\u5E73\u7EBF \u2192 \u539F\u6587\u515C\u5E95 | \`src/modules/agent-task/task-lifecycle.service.ts\` |
-| **\u8BC4\u8BBA @\u89E6\u53D1\u4EFB\u52A1 \u2192 \u6700\u7EC8\u603B\u7ED3\u7531\u670D\u52A1\u7AEF\u81EA\u52A8\u56DE\u590D\u5230\u89E6\u53D1\u8BC4\u8BBA\u4E0B**\uFF08agent \u65E0\u9700\u8BC4\u8BBA ID\uFF0C\u4E0D\u6CE8\u5165\u63D0\u793A\u8BCD\uFF09 | \u7ED3\u6784\u6027\u6302\u9760\uFF1A\`CommentService.create\`\uFF08resolveCommentAuthor \u8FD4\u56DE triggerCommentId \u2192 parentCommentId \u9ED8\u8BA4\u503C\uFF09\uFF1B\u751F\u547D\u5468\u671F\u515C\u5E95\uFF1A\`task-lifecycle.service.ts\` hasAgentRepliedToTrigger / isMentionReply | LOCAL-AGENT-COMMENT-REPLY-001 |
+| \u8BC4\u8BBA\u662F\u7528\u6237\u53EF\u89C1\u7684\u4EA7\u51FA\u901A\u9053\uFF1B**\u6700\u7EC8\u603B\u7ED3\u7531 agent \u81EA\u5DF1\u53D1**\uFF08\`morula comment add --final\`\uFF0C\u4F5C\u8005=\u667A\u80FD\u4F53\uFF09 | \`POST /comments\`\uFF08agent_task \u51ED\u8BC1\uFF1B\`kind='final'\` \u670D\u52A1\u7AEF\u56DE\u586B \`taskId\`\uFF0C\`(tenantId, taskId, kind)\` \u552F\u4E00\u7EA6\u675F \u2192 \u540C\u4E00\u4EFB\u52A1\u4E00\u6761\uFF09 | \`packages/morula-cli/src/commands/comment.ts\`\u3001\`src/modules/task-management/comment/comment.service.ts\`\uFF08FINAL-COMMENT-001\uFF09 |
+| **\u670D\u52A1\u7AEF\u7F3A\u5931\u515C\u5E95**\uFF08DP-1\uFF09\uFF1A\u4EFB\u52A1\u5B8C\u6210\u65F6\u68C0\u67E5\u6CA1\u53D1\u8FC7 final \u624D\u4EE3\u53D1\u4E00\u6761\uFF08\u5360\u4F4F\u552F\u4E00\u952E\uFF1B\u8FD0\u884C\u65F6\u8FDF\u5230\u8865\u53D1\u88AB\u62D2\u7EDD\uFF09 | \`task-lifecycle.service.ts\` onTaskCompleted\uFF1A\`runtimeFinalExists\` \u68C0\u67E5 + \u515C\u5E95 create \u5E26 \`taskId/kind\`\uFF08\u5E76\u53D1\u7531 P2002 \u6355\u83B7\uFF09 | \`src/modules/agent-task/task-lifecycle.service.ts\` |
+| \u515C\u5E95\u8DEF\u5F84\u622A\u53D6\u300C\u603B\u7ED3\u6BB5\u300D\uFF08\`---FINAL---\` \u5206\u9694\u7B26 \u2192 \u603B\u7ED3\u6807\u9898 \u2192 \u6C34\u5E73\u7EBF \u2192 \u539F\u6587\u515C\u5E95\uFF09 | \`cleanFinalOutput\`\uFF08\u4EC5\u515C\u5E95\u4EE3\u53D1\u8DEF\u5F84\u4F7F\u7528\uFF1B\u8FD0\u884C\u65F6\u81EA\u53D1\u8DEF\u5F84\u5185\u5BB9\u7EAA\u5F8B\u9760\u5951\u7EA6\uFF09 | \`src/modules/agent-task/task-lifecycle.service.ts\` |
+| **\u8BC4\u8BBA @\u89E6\u53D1\u4EFB\u52A1 \u2192 agent \u7684 final \u81EA\u52A8\u6302\u5230\u89E6\u53D1\u8BC4\u8BBA\u4E0B**\uFF08agent \u65E0\u9700\u8BC4\u8BBA ID\uFF09 | \u7ED3\u6784\u6027\u6302\u9760\uFF1A\`CommentService.create\`\uFF08resolveCommentAuthor \u8FD4\u56DE triggerCommentId \u2192 parentCommentId \u9ED8\u8BA4\u503C\uFF09\uFF1B\u751F\u547D\u5468\u671F\u515C\u5E95\uFF1AhasAgentRepliedToTrigger / isMentionReply | LOCAL-AGENT-COMMENT-REPLY-001 |
+| **@ \u9636\u6BB5\u8FD0\u884C\u65F6**\uFF08\`--mention-agent <stageExecutorId>\`\uFF09\u2192 \u89E6\u53D1\u8BE5\u6267\u884C\u5668\u5728\u4EFB\u52A1\u4E0A\u5E72\u6D3B | mentions \u6570\u7EC4 agent \u7C7B\u578B\u9879 \u2192 \`comment.mentioned\` \u4E8B\u4EF6 \u2192 AgentCollaborationService \u6D3E\u53D1 | \`comment.service.ts\`\u3001\`agent-collaboration.service.ts\` |
 | \u7981\u6B62\u672C\u5730\u7EDD\u5BF9\u8DEF\u5F84\u4F5C\u4E3A\u4EA4\u4ED8\u7269 | \u5951\u7EA6\u7B2C 5 \u6761\uFF1B\`reportPrDelivery\` \u53EA\u56DE\u62A5\u4ED3\u5E93\u76F8\u5BF9\u4FE1\u606F | \`packages/runtime/src/daemon/runner.ts\` |
-| \u5355\u6761\u6700\u7EC8\u8BC4\u8BBA\uFF08\u4E0D\u5237\u8FDB\u5EA6\uFF09 | \u5951\u7EA6\u7B2C 5 \u6761 | \u672C SKILL |
+| \u5355\u6761\u6700\u7EC8\u8BC4\u8BBA\uFF08\u4E0D\u5237\u8FDB\u5EA6\uFF1B\u8BC4\u8BBA\u53EA\u5199\u7ED3\u8BBA\u4E0E\u4E8B\u5B9E\uFF0CD10\uFF09 | \u5951\u7EA6\u7B2C 5 \u6761 + \u552F\u4E00\u7EA6\u675F | \u672C SKILL |
 
 ## 6. \u7981\u6B62\u4E8B\u9879
 
@@ -5778,7 +5798,7 @@ function outboxAge(entry) {
 // src/daemon/plugin-register.ts
 import { chmodSync as chmodSync3, cpSync, existsSync as existsSync10, mkdirSync as mkdirSync9, readdirSync as readdirSync3, readFileSync as readFileSync7, rmSync as rmSync8, statSync as statSync2, writeFileSync as writeFileSync7 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { dirname as dirname7, join as join13 } from "node:path";
+import { dirname as dirname8, join as join13 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var PLUGIN_NAME = "morula-cli";
 var MANIFEST_DIR_NAME = ".codex-plugin";
@@ -5793,9 +5813,9 @@ function defaultPluginsRoot(env = process.env, home = homedir10()) {
   return join13(resolveDimcodeHome(env, home), "plugins");
 }
 function resolvePackagePaths(entryUrl) {
-  const distDir = dirname7(fileURLToPath2(entryUrl));
+  const distDir = dirname8(fileURLToPath2(entryUrl));
   return {
-    packageRoot: dirname7(distDir),
+    packageRoot: dirname8(distDir),
     distDir,
     assetsDir: join13(distDir, "plugin")
   };
@@ -5811,7 +5831,25 @@ if [ -z "$NODE" ]; then
   echo '{"code":"ERROR","message":"node not found; reinstall or re-run: morula-runtime setup"}' >&2
   exit 127
 fi
-exec "$NODE" ${JSON.stringify(entry)} "$@"
+ENTRY=${JSON.stringify(entry)}
+# \u81EA\u6108\u56DE\u9000\uFF1A\u70D8\u7119\u7684\u5B89\u88C5\u76EE\u5F55\u88AB\u6E05\u7406/\u632A\u52A8\u65F6\uFF0C\u6309 daemon \u6CE8\u5165\u7684\u540C\u6E90\u5165\u53E3\u6216\u5F53\u524D morula-runtime \u91CD\u65B0\u5B9A\u4F4D
+if [ ! -f "$ENTRY" ] && [ -n "$MORULA_CLI" ] && [ -f "$MORULA_CLI" ]; then
+  ENTRY="$MORULA_CLI"
+fi
+if [ ! -f "$ENTRY" ]; then
+  RT="$(command -v morula-runtime 2>/dev/null || true)"
+  if [ -n "$RT" ]; then
+    ALT="$("$NODE" -e 'const{realpathSync}=require("fs");const{dirname,join}=require("path");try{const p=realpathSync(process.argv[1]);process.stdout.write(join(dirname(dirname(p)),"dist","morula.js"))}catch(e){}' "$RT" 2>/dev/null || true)"
+    if [ -n "$ALT" ] && [ -f "$ALT" ]; then
+      ENTRY="$ALT"
+    fi
+  fi
+fi
+if [ ! -f "$ENTRY" ]; then
+  echo '{"code":"ERROR","message":"morula.js not found: the install dir was removed or moved; fix: morula-runtime setup (or npm i -g @arcships/morula-runtime)"}' >&2
+  exit 127
+fi
+exec "$NODE" "$ENTRY" "$@"
 `;
 }
 function assetsReady(paths) {
@@ -6068,7 +6106,7 @@ function isAcpInitRetryableError(error) {
 async function withAcpInitRetry(setupOnce, deps = {}) {
   const delays = deps.delaysMs ?? ACP_INIT_RETRY_DELAYS_MS;
   const isRetryable = deps.isRetryable ?? isAcpInitRetryableError;
-  const sleep2 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const maxAttempts = delays.length + 1;
   let lastError;
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
@@ -6083,7 +6121,7 @@ async function withAcpInitRetry(setupOnce, deps = {}) {
         error: lastError instanceof Error ? lastError.message : String(lastError ?? "")
       });
       if (delayMs > 0)
-        await sleep2(delayMs);
+        await sleep(delayMs);
       if (deps.isAborted?.())
         throw new Error("\u4EFB\u52A1\u88AB\u53D6\u6D88");
     }
@@ -6835,8 +6873,8 @@ var DimAgentAdapter = class {
     }
   }
   async probe() {
-    const { existsSync: existsSync19 } = await import("node:fs");
-    const installed = existsSync19(this.dimPath) || this.dimPath === "dim";
+    const { existsSync: existsSync21 } = await import("node:fs");
+    const installed = existsSync21(this.dimPath) || this.dimPath === "dim";
     let authStatus = installed ? "unknown" : "error";
     let lastProbeErrorCode = installed ? void 0 : "DIM_CLI_NOT_FOUND";
     let lastProbeError = installed ? void 0 : `\u672A\u627E\u5230 dim CLI\uFF08${this.dimPath}\uFF09`;
@@ -7129,7 +7167,7 @@ function pickLegacyDimModels(inventory) {
 // src/daemon/repo-cache.ts
 import { execFileSync as execFileSync8 } from "node:child_process";
 import { existsSync as existsSync12, mkdirSync as mkdirSync10 } from "node:fs";
-import { dirname as dirname8, join as join15 } from "node:path";
+import { dirname as dirname9, join as join15 } from "node:path";
 function ownerOf(repoFullName) {
   const idx = repoFullName.indexOf("/");
   return idx > 0 ? repoFullName.slice(0, idx) : "_default";
@@ -7164,7 +7202,7 @@ function openRepoCache(workdir, tenantId, runtimeId, repoFullName, env, agentRem
         syncRemoteUrl(repoCachePath, originUrl(), env);
         return;
       }
-      mkdirSync10(dirname8(repoCachePath), { recursive: true });
+      mkdirSync10(dirname9(repoCachePath), { recursive: true });
       const cloneUrl = fetchUrl();
       try {
         execFileSync8("git", ["clone", "--filter=blob:none", cloneUrl, repoCachePath], { env, stdio: "pipe" });
@@ -8282,11 +8320,333 @@ function materializeAdditionalRepo(input) {
   return input.targetPath;
 }
 
+// src/daemon/self-upgrade.ts
+import { spawn as spawn4 } from "node:child_process";
+import { closeSync as closeSync4, existsSync as existsSync16, mkdirSync as mkdirSync13, openSync as openSync4, writeFileSync as writeFileSync11 } from "node:fs";
+import { dirname as dirname10, join as join19 } from "node:path";
+var RUNTIME_PACKAGE = "@arcships/morula-runtime";
+var DEFAULT_NPM_REGISTRY = "https://registry.npmjs.org";
+var REGISTRY_TIMEOUT_MS = 1e4;
+var NPM_INSTALL_TIMEOUT_MS = 10 * 60 * 1e3;
+var NPM_ROLLBACK_TIMEOUT_MS = 10 * 60 * 1e3;
+var RESTART_LOCK_WAIT_MS = 6e4;
+var RESTART_LIVENESS_CHECK_MS = 5e3;
+function resolveRegistry(env = process.env) {
+  return (env.MORULA_NPM_REGISTRY ?? DEFAULT_NPM_REGISTRY).replace(/\/+$/, "");
+}
+function parseVersion(input) {
+  if (typeof input !== "string")
+    return null;
+  const match = input.trim().match(/^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/);
+  if (!match)
+    return null;
+  const prerelease = match[4] ? match[4].split(".").map((part) => /^\d+$/.test(part) ? Number(part) : part) : [];
+  return { major: Number(match[1]), minor: Number(match[2]), patch: Number(match[3]), prerelease };
+}
+function compareVersions(a, b) {
+  const pa = parseVersion(a);
+  const pb = parseVersion(b);
+  if (!pa || !pb)
+    return a === b ? 0 : a < b ? -1 : 1;
+  for (const key of ["major", "minor", "patch"]) {
+    if (pa[key] !== pb[key])
+      return pa[key] < pb[key] ? -1 : 1;
+  }
+  if (pa.prerelease.length === 0 && pb.prerelease.length === 0)
+    return 0;
+  if (pa.prerelease.length === 0)
+    return 1;
+  if (pb.prerelease.length === 0)
+    return -1;
+  for (let i = 0; i < Math.max(pa.prerelease.length, pb.prerelease.length); i++) {
+    const sa = pa.prerelease[i];
+    const sb = pb.prerelease[i];
+    if (sa === void 0)
+      return -1;
+    if (sb === void 0)
+      return 1;
+    if (sa === sb)
+      continue;
+    if (typeof sa === "number" && typeof sb === "number")
+      return sa < sb ? -1 : 1;
+    if (typeof sa === "number")
+      return -1;
+    if (typeof sb === "number")
+      return 1;
+    return sa < sb ? -1 : 1;
+  }
+  return 0;
+}
+function isUpgradeAvailable(current, latest) {
+  if (!parseVersion(current) || !parseVersion(latest))
+    return false;
+  return compareVersions(current, latest) < 0;
+}
+function run2(command, args, opts) {
+  return new Promise((resolve2) => {
+    let child;
+    try {
+      child = spawn4(command, args, { env: opts.env ?? process.env, stdio: ["ignore", "pipe", "pipe"] });
+    } catch (error) {
+      resolve2({ ok: false, code: null, stdout: "", stderr: "", error: error instanceof Error ? error.message : String(error) });
+      return;
+    }
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    const timer = setTimeout(() => {
+      if (!settled) {
+        settled = true;
+        try {
+          child.kill("SIGKILL");
+        } catch {
+        }
+        resolve2({ ok: false, code: null, stdout, stderr, error: `timeout after ${Math.round(opts.timeoutMs / 1e3)}s` });
+      }
+    }, opts.timeoutMs);
+    timer.unref?.();
+    child.stdout?.on("data", (d) => {
+      stdout += d.toString();
+    });
+    child.stderr?.on("data", (d) => {
+      stderr += d.toString();
+    });
+    child.on("error", (error) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      resolve2({ ok: false, code: null, stdout, stderr, error: error.message });
+    });
+    child.on("close", (code) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      resolve2({ ok: code === 0, code, stdout, stderr });
+    });
+  });
+}
+async function resolveNpmCommand() {
+  const nodeDir = dirname10(process.execPath);
+  const candidates = [
+    { command: "npm", args: [] },
+    { command: join19(nodeDir, "npm"), args: [] },
+    { command: process.execPath, args: [join19(nodeDir, "..", "lib", "node_modules", "npm", "bin", "npm-cli.js")] }
+  ];
+  for (const candidate of candidates) {
+    const res = await run2(candidate.command, [...candidate.args, "--version"], { timeoutMs: 15e3 });
+    if (res.ok && /^\d+\.\d+\.\d+/.test(res.stdout.trim()))
+      return candidate;
+  }
+  return null;
+}
+async function resolveNpmGlobalLayout() {
+  const npm = await resolveNpmCommand();
+  if (!npm)
+    throw new Error("\u672A\u627E\u5230\u53EF\u7528\u7684 npm\uFF08\u5347\u7EA7\u9700\u8981 npm install -g\uFF1B\u8BF7\u786E\u8BA4 node/npm \u5B89\u88C5\u5B8C\u6574\uFF09");
+  const prefixRes = await run2(npm.command, [...npm.args, "prefix", "-g"], { timeoutMs: 3e4 });
+  const rootRes = await run2(npm.command, [...npm.args, "root", "-g"], { timeoutMs: 3e4 });
+  const prefix = prefixRes.ok ? prefixRes.stdout.trim() : "";
+  const nodeModulesRoot = rootRes.ok ? rootRes.stdout.trim() : "";
+  if (!prefix || !nodeModulesRoot)
+    throw new Error(`\u89E3\u6790 npm \u5168\u5C40\u5E03\u5C40\u5931\u8D25\uFF08prefix=${prefix || "?"} root=${nodeModulesRoot || "?"}\uFF09`);
+  return {
+    prefix,
+    nodeModulesRoot,
+    runtimePackageRoot: join19(nodeModulesRoot, RUNTIME_PACKAGE),
+    runtimeBinPath: process.platform === "win32" ? join19(prefix, `${RUNTIME_PACKAGE.split("/")[1] ?? "morula-runtime"}.cmd`) : join19(prefix, "bin", "morula-runtime")
+  };
+}
+async function fetchLatestRuntimeVersion(opts = {}) {
+  const registry2 = opts.registry ?? resolveRegistry();
+  const url = `${registry2}/${encodeURIComponent(RUNTIME_PACKAGE)}/latest`;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? REGISTRY_TIMEOUT_MS);
+  timer.unref?.();
+  try {
+    const res = await fetch(url, { signal: controller.signal, headers: { Accept: "application/json" } });
+    if (!res.ok)
+      throw new Error(`registry ${res.status}`);
+    const body = await res.json();
+    const version = typeof body.version === "string" ? body.version.trim() : "";
+    if (!version)
+      throw new Error("registry \u54CD\u5E94\u7F3A\u5C11 version");
+    return version;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`\u67E5\u8BE2 npm registry \u5931\u8D25\uFF08${url}\uFF09: ${message}`);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function npmContext(registry2) {
+  const npm = await resolveNpmCommand();
+  if (!npm)
+    throw new Error("\u672A\u627E\u5230\u53EF\u7528\u7684 npm\uFF08\u5347\u7EA7\u9700\u8981 npm install -g\uFF1B\u8BF7\u786E\u8BA4 node/npm \u5B89\u88C5\u5B8C\u6574\uFF09");
+  const layout = await resolveNpmGlobalLayout();
+  return { npm, layout };
+}
+async function npmInstallGlobal(ctx, version, registry2, timeoutMs) {
+  const args = [...ctx.npm.args, "install", "-g", `${RUNTIME_PACKAGE}@${version}`];
+  if (registry2 && registry2 !== DEFAULT_NPM_REGISTRY)
+    args.push("--registry", registry2);
+  return run2(ctx.npm.command, args, { timeoutMs });
+}
+async function verifyRuntimeInstall(binPath, expected) {
+  if (!existsSync16(binPath))
+    return { ok: false, version: null, reason: `bin \u4E0D\u5B58\u5728\uFF1A${binPath}` };
+  const res = await run2(binPath, ["--version"], { timeoutMs: 6e4 });
+  if (!res.ok)
+    return { ok: false, version: null, reason: `--version \u6267\u884C\u5931\u8D25\uFF08${res.error ?? `exit ${res.code}`}\uFF09\uFF1A${res.stderr.trim().slice(0, 300) || "\u65E0\u8F93\u51FA"}` };
+  try {
+    const parsed = JSON.parse(res.stdout.trim());
+    const version = typeof parsed.version === "string" ? parsed.version : null;
+    if (!version)
+      return { ok: false, version: null, reason: `--version \u8F93\u51FA\u7F3A\u5C11 version\uFF1A${res.stdout.trim().slice(0, 200)}` };
+    if (expected && version !== expected)
+      return { ok: false, version, reason: `\u5B89\u88C5\u540E\u7248\u672C\u4E0D\u7B26\uFF1A\u671F\u671B ${expected}\uFF0C\u5B9E\u9645 ${version}` };
+    return { ok: true, version };
+  } catch {
+    return { ok: false, version: null, reason: `--version \u8F93\u51FA\u975E JSON\uFF1A${res.stdout.trim().slice(0, 200)}` };
+  }
+}
+async function performRuntimeUpgrade(opts) {
+  const log = opts.log ?? (() => {
+  });
+  const registry2 = opts.registry ?? resolveRegistry();
+  const steps = [];
+  const from = opts.currentVersion;
+  let target;
+  if (opts.targetVersion) {
+    target = opts.targetVersion;
+  } else {
+    target = await fetchLatestRuntimeVersion({ registry: registry2 });
+    steps.push(`registry latest: ${target}`);
+  }
+  if (!isUpgradeAvailable(from, target)) {
+    steps.push(`\u5F53\u524D ${from} \u5DF2\u4E0D\u4F4E\u4E8E ${target}\uFF0C\u65E0\u9700\u5347\u7EA7`);
+    return { status: "up_to_date", fromVersion: from, targetVersion: target, steps };
+  }
+  log(`[upgrade] ${from} \u2192 ${target}\uFF08${registry2}\uFF09`);
+  const ctx = await npmContext(registry2);
+  steps.push(`npm install -g ${RUNTIME_PACKAGE}@${target}`);
+  const install = await npmInstallGlobal(ctx, target, registry2, NPM_INSTALL_TIMEOUT_MS);
+  if (!install.ok) {
+    const error = `\u5B89\u88C5\u5931\u8D25\uFF1A${install.error ?? `exit ${install.code}`} ${install.stderr.trim().slice(0, 300)}`.trim();
+    steps.push(error);
+    log(`[upgrade] ${error}`);
+    const still = await verifyRuntimeInstall(ctx.layout.runtimeBinPath);
+    if (still.ok) {
+      steps.push(`\u539F\u7248\u672C ${still.version ?? from} \u5B89\u88C5\u5B8C\u597D\uFF0C\u4FDD\u6301\u4E0D\u53D8`);
+      return { status: "failed", fromVersion: from, toVersion: null, error, steps };
+    }
+    const rollback = await npmInstallGlobal(ctx, from, registry2, NPM_ROLLBACK_TIMEOUT_MS);
+    if (rollback.ok) {
+      steps.push(`\u5DF2\u56DE\u88C5\u539F\u7248\u672C ${from}`);
+      return { status: "rolled_back", fromVersion: from, toVersion: null, error, steps };
+    }
+    steps.push(`\u56DE\u88C5\u539F\u7248\u672C\u5931\u8D25\uFF1A${rollback.error ?? `exit ${rollback.code}`}`);
+    return { status: "failed", fromVersion: from, toVersion: null, error: `${error}\uFF1B\u4E14\u56DE\u88C5\u539F\u7248\u672C\u5931\u8D25\uFF0C\u5F53\u524D\u5168\u5C40\u5B89\u88C5\u53EF\u80FD\u635F\u574F\uFF08\u8BF7\u624B\u52A8\u6267\u884C npm i -g ${RUNTIME_PACKAGE}@${from}\uFF09`, steps };
+  }
+  const verified = await verifyRuntimeInstall(ctx.layout.runtimeBinPath, target);
+  if (!verified.ok) {
+    const error = `\u65B0\u5B89\u88C5\u9A8C\u8BC1\u5931\u8D25\uFF1A${verified.reason ?? "\u672A\u77E5\u539F\u56E0"}`;
+    steps.push(error);
+    log(`[upgrade] ${error}`);
+    const rollback = await npmInstallGlobal(ctx, from, registry2, NPM_ROLLBACK_TIMEOUT_MS);
+    if (rollback.ok) {
+      const rollbackVerified = await verifyRuntimeInstall(ctx.layout.runtimeBinPath, from);
+      if (rollbackVerified.ok) {
+        steps.push(`\u5DF2\u56DE\u88C5\u539F\u7248\u672C ${from} \u5E76\u9A8C\u8BC1\u53EF\u7528`);
+        return { status: "rolled_back", fromVersion: from, toVersion: null, error, steps };
+      }
+      steps.push(`\u56DE\u88C5\u540E\u9A8C\u8BC1\u5931\u8D25\uFF1A${rollbackVerified.reason ?? "\u672A\u77E5"}\uFF08\u8BF7\u624B\u52A8\u6267\u884C npm i -g ${RUNTIME_PACKAGE}@${from}\uFF09`);
+      return { status: "failed", fromVersion: from, toVersion: null, error: `${error}\uFF1B\u56DE\u88C5 ${from} \u540E\u9A8C\u8BC1\u4ECD\u5931\u8D25`, steps };
+    }
+    steps.push(`\u56DE\u88C5\u539F\u7248\u672C\u5931\u8D25\uFF1A${rollback.error ?? `exit ${rollback.code}`}\uFF08\u8BF7\u624B\u52A8\u6267\u884C npm i -g ${RUNTIME_PACKAGE}@${from}\uFF09`);
+    return { status: "failed", fromVersion: from, toVersion: null, error: `${error}\uFF1B\u4E14\u56DE\u88C5\u539F\u7248\u672C\u5931\u8D25`, steps };
+  }
+  steps.push(`\u65B0\u7248\u672C ${verified.version} \u9A8C\u8BC1\u901A\u8FC7`);
+  const warnings = [];
+  const setup = await run2(ctx.layout.runtimeBinPath, ["setup"], { timeoutMs: 6e4 });
+  if (setup.ok) {
+    steps.push("\u63D2\u4EF6\u76EE\u5F55\u5DF2\u91CD\u70D8\u7119\uFF08morula-runtime setup\uFF09");
+  } else {
+    const warning = `\u63D2\u4EF6\u76EE\u5F55\u91CD\u70D8\u7119\u5931\u8D25\uFF08${setup.error ?? `exit ${setup.code}`}\uFF09\u2014\u2014 \u4E0D\u5F71\u54CD\u672C\u6B21\u5347\u7EA7\uFF0C\u53EF\u7A0D\u540E\u624B\u52A8\u6267\u884C morula-runtime setup`;
+    warnings.push(warning);
+    steps.push(warning);
+    log(`[upgrade] ${warning}`);
+  }
+  log(`[upgrade] \u5347\u7EA7\u5B8C\u6210\uFF1A${from} \u2192 ${verified.version}`);
+  return { status: "succeeded", fromVersion: from, toVersion: verified.version ?? target, warnings, steps };
+}
+async function spawnUpgradedDaemon(opts) {
+  let packageRoot = opts.runtimePackageRoot;
+  if (!packageRoot || !existsSync16(join19(packageRoot, "dist", "index.js"))) {
+    const layout = await resolveNpmGlobalLayout();
+    packageRoot = layout.runtimePackageRoot;
+  }
+  const entry = join19(packageRoot, "dist", "index.js");
+  if (!existsSync16(entry))
+    return { pid: 0, entry, error: `\u65B0\u5305\u5165\u53E3\u4E0D\u5B58\u5728\uFF1A${entry}`, waitExit: async () => ({ exited: true, code: null }) };
+  mkdirSync13(dirname10(opts.logFile), { recursive: true, mode: 448 });
+  let logFd;
+  try {
+    logFd = openSync4(opts.logFile, "a", 384);
+  } catch (error) {
+    return { pid: 0, entry, error: `\u65E0\u6CD5\u6253\u5F00\u65E5\u5FD7\u6587\u4EF6 ${opts.logFile}: ${error instanceof Error ? error.message : String(error)}`, waitExit: async () => ({ exited: true, code: null }) };
+  }
+  try {
+    const child = spawn4(process.execPath, [entry, "daemon", "run"], {
+      cwd: process.cwd(),
+      detached: true,
+      stdio: ["ignore", logFd, logFd],
+      env: {
+        ...opts.env,
+        MORULA_DAEMON_NAME: opts.daemonConfig?.name ?? "",
+        MORULA_DAEMON_WORKDIR: opts.daemonConfig?.workdir ?? "",
+        MORULA_DAEMON_MAX_CONCURRENT: String(opts.daemonConfig?.maxConcurrent ?? ""),
+        MORULA_DAEMON_RESTART_WAIT_MS: String(RESTART_LOCK_WAIT_MS)
+      }
+    });
+    child.unref();
+    if (!child.pid)
+      return { pid: 0, entry, error: "spawn \u672A\u8FD4\u56DE pid", waitExit: async () => ({ exited: true, code: null }) };
+    const exitPromise = new Promise((resolve2) => {
+      child.on("exit", (code) => {
+        resolve2(code ?? null);
+      });
+    });
+    const waitExit = async (ms) => {
+      return await Promise.race([
+        exitPromise.then((code) => ({ exited: true, code })),
+        new Promise((resolve2) => {
+          const timer = setTimeout(() => {
+            resolve2({ exited: false, code: null });
+          }, ms);
+          timer.unref?.();
+        })
+      ]);
+    };
+    mkdirSync13(dirname10(opts.pidFile), { recursive: true, mode: 448 });
+    writeFileSync11(opts.pidFile, String(child.pid), { mode: 384 });
+    return { pid: child.pid, entry, waitExit };
+  } catch (error) {
+    return { pid: 0, entry, error: error instanceof Error ? error.message : String(error), waitExit: async () => ({ exited: true, code: null }) };
+  } finally {
+    try {
+      closeSync4(logFd);
+    } catch {
+    }
+  }
+}
+
 // src/daemon/session-host.ts
 init_dist2();
 init_acp_connection();
-import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join19 } from "node:path";
+import { mkdirSync as mkdirSync14, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join20 } from "node:path";
 
 // src/daemon/steward-instructions.ts
 var STEWARD_SYSTEM_INSTRUCTIONS = `\u4F60\u662F\u300C\u7A7A\u95F4\u7BA1\u5BB6\u667A\u80FD\u4F53\u300D\uFF08Project Steward\uFF09\u3002
@@ -8540,8 +8900,8 @@ var SessionHost = class {
   async open(cmd) {
     if (!cmd?.sessionId || !cmd?.tenantId || !cmd?.projectId)
       return { ok: false, error: "SESSION_OPEN_INVALID_ARGS" };
-    const workspaceDir = join19(this.options.workdir, "steward", cmd.tenantId, cmd.projectId);
-    mkdirSync13(workspaceDir, { recursive: true });
+    const workspaceDir = join20(this.options.workdir, "steward", cmd.tenantId, cmd.projectId);
+    mkdirSync14(workspaceDir, { recursive: true });
     this.writeInjections(workspaceDir, cmd);
     const existing = this.sessions.get(cmd.sessionId);
     if (existing?.conn.isAlive) {
@@ -8827,7 +9187,7 @@ var SessionHost = class {
 ---
 
 ${cmd.prompt}`;
-    const run3 = (async () => {
+    const run5 = (async () => {
       try {
         const { blocks, fileRefs } = await this.materializeAttachments(managed.workspaceDir, cmd.attachments ?? []);
         const promptBlocks = [{ type: "text", text: fileRefs.length > 0 ? `${text}
@@ -8874,8 +9234,8 @@ ${fileRefs.join("\n")}` : text }];
         this.touch(managed);
       }
     })();
-    managed.promptInFlight = run3;
-    return run3;
+    managed.promptInFlight = run5;
+    return run5;
   }
   /**
    * 附件物化（§五 P2-3）：
@@ -8890,7 +9250,7 @@ ${fileRefs.join("\n")}` : text }];
     const fileRefs = [];
     if (attachments.length === 0)
       return { blocks, fileRefs };
-    const dir = join19(workspaceDir, "attachments");
+    const dir = join20(workspaceDir, "attachments");
     for (const attachment of attachments) {
       try {
         const res = await fetch(attachment.downloadUrl, { signal: AbortSignal.timeout(ATTACHMENT_FETCH_TIMEOUT_MS) });
@@ -8900,9 +9260,9 @@ ${fileRefs.join("\n")}` : text }];
         if (attachment.isImage) {
           blocks.push({ type: "image", data: bytes.toString("base64"), mimeType: attachment.fileType || "image/png" });
         } else {
-          mkdirSync13(dir, { recursive: true });
-          const target = join19(dir, safeAttachmentName(attachment.fileName));
-          writeFileSync11(target, bytes);
+          mkdirSync14(dir, { recursive: true });
+          const target = join20(dir, safeAttachmentName(attachment.fileName));
+          writeFileSync12(target, bytes);
           fileRefs.push(`- ${attachment.fileName} \u2192 ${target}`);
         }
       } catch (err) {
@@ -8998,13 +9358,13 @@ ${fileRefs.join("\n")}` : text }];
   /** 工作区注入物（幂等覆盖；daemon 侧组装，P1-6） */
   writeInjections(workspaceDir, cmd) {
     writeProjectAgentsMd(workspaceDir, cmd.agentsMd, this.log);
-    const skillDir = join19(workspaceDir, ".agents", "skills", STEWARD_SKILL_NAME);
-    mkdirSync13(skillDir, { recursive: true });
-    writeFileSync11(join19(skillDir, "SKILL.md"), buildStewardSkillFile(), "utf8");
-    const contextDir = join19(workspaceDir, ".agent_context");
-    mkdirSync13(contextDir, { recursive: true });
-    writeFileSync11(
-      join19(contextDir, "steward-context.md"),
+    const skillDir = join20(workspaceDir, ".agents", "skills", STEWARD_SKILL_NAME);
+    mkdirSync14(skillDir, { recursive: true });
+    writeFileSync12(join20(skillDir, "SKILL.md"), buildStewardSkillFile(), "utf8");
+    const contextDir = join20(workspaceDir, ".agent_context");
+    mkdirSync14(contextDir, { recursive: true });
+    writeFileSync12(
+      join20(contextDir, "steward-context.md"),
       buildStewardContextMd(cmd.facts ?? { projectId: cmd.projectId, tenantId: cmd.tenantId }),
       "utf8"
     );
@@ -9548,6 +9908,12 @@ var DaemonRunner = class {
   outboxConsecutiveFailures = 0;
   outboxPausedUntil = 0;
   processing = /* @__PURE__ */ new Set();
+  /**
+   * runtime-self-upgrade：远程升级执行中标志。
+   * 置位期间 tick / WS 派发**不领新任务**——升级完成后 daemon 会重启，中途接的任务会被打断
+   * （心跳超时 → 服务端回收重派），违背「升级不破坏正在执行的任务」的约束。
+   */
+  upgradeInProgress = false;
   /** M1-A1：任务级取消信号（WS cancelled 事件 / 状态轮询触发 abort） */
   cancels = /* @__PURE__ */ new Map();
   /** Phase 2：审批决策等待表（approvalId → resolver；WS 事件 resolve，轮询兜底） */
@@ -9689,7 +10055,10 @@ var DaemonRunner = class {
       models: dimModels,
       // LOCAL-AGENT-COLLAB-001 Phase 1：宿主协议 + Provider inventory
       hostProtocolVersion: 1,
-      hostCapabilities: { worktreeV2: true, workspaceCleanupV1: false },
+      // selfUpgrade（runtime-self-upgrade 评审 P2）：本 daemon 认识心跳响应里的 upgradeRequested
+      // 指令并具备自升级能力。管理页据此门控远程升级按钮——旧版 daemon 会静默吞掉指令，
+      // 对它显示按钮只会误导用户（能力自报比服务端维护最低版本号更准确，register 即刷新）
+      hostCapabilities: { worktreeV2: true, workspaceCleanupV1: false, selfUpgrade: true },
       inventoryRevision: `daemon-v${BUILD_VERSION2}`,
       providers: inventory
     });
@@ -9707,10 +10076,33 @@ var DaemonRunner = class {
       await this.tick();
       if (!this.running)
         break;
-      await sleep(POLL_INTERVAL_MS);
+      await this.waitForPollInterval();
     }
     this.stop();
   }
+  /** 下一拍等待（POLL_INTERVAL_MS，可被 wakeMainLoop 提前唤醒） */
+  pollWake = null;
+  waitForPollInterval() {
+    return new Promise((resolve2) => {
+      const timer = setTimeout(() => {
+        this.pollWake = null;
+        resolve2();
+      }, POLL_INTERVAL_MS);
+      timer.unref?.();
+      this.pollWake = () => {
+        clearTimeout(timer);
+        this.pollWake = null;
+        resolve2();
+      };
+    });
+  }
+  /**
+   * 唤醒主循环的 poll 等待（评审 P4 配套）：远程升级完成（running=false）后立即生效，
+   * 不必最多干等 15s 的 poll 间隔——旧进程越快退出释放锁，新进程越快接管，自重启窗口越小。
+   */
+  wakeMainLoop() {
+    this.pollWake?.();
+  }
   stop() {
     this.running = false;
     this.stopHeartbeatTimer();
@@ -9775,6 +10167,10 @@ var DaemonRunner = class {
           this.running = false;
           return;
         }
+        if (res?.upgradeRequested) {
+          this.log(`[daemon] \u6536\u5230\u670D\u52A1\u7AEF\u8FDC\u7A0B\u5347\u7EA7\u6307\u4EE4${res.upgradeVersion ? `\uFF08\u76EE\u6807 ${res.upgradeVersion}\uFF09` : ""}`);
+          void this.handleRemoteUpgrade(res.upgradeVersion ?? null);
+        }
         if (!res.ok && res.status === "unknown") {
           this.log("[daemon] \u672C\u8BBE\u5907\u5DF2\u5728\u670D\u52A1\u7AEF\u6CE8\u9500\uFF08runtime \u8BB0\u5F55\u4E0D\u5B58\u5728\uFF09\uFF0C\u81EA\u52A8\u9000\u51FA");
           this.running = false;
@@ -9793,6 +10189,95 @@ var DaemonRunner = class {
       this.heartbeatInFlight = false;
     }
   }
+  /**
+   * runtime-self-upgrade：远程升级指令执行（心跳认领后异步触发，见 sendHeartbeat）。
+   *
+   * 边界：
+   * - 有任务在跑（processing 非空）→ 回报 busy 拒绝（指令已消耗，页面可重新下发）；
+   * - 空闲 → performRuntimeUpgrade（安装/验证/失败回装/重烘焙插件目录）；期间心跳照常、不领新任务；
+   * - 成功 → 用**新包入口** detached 拉起新 daemon（等旧进程释放单实例锁）→ 回报 → 本实例退出；
+   * - 失败/回退 → 回报后**继续用原版本运行**（升级失败不中断服务）。
+   */
+  async handleRemoteUpgrade(targetVersion) {
+    if (!this.runtimeId)
+      return;
+    if (this.upgradeInProgress) {
+      this.log("[daemon] \u5347\u7EA7\u5DF2\u5728\u8FDB\u884C\uFF0C\u5FFD\u7565\u91CD\u590D\u6307\u4EE4");
+      return;
+    }
+    this.upgradeInProgress = true;
+    const fromVersion = BUILD_VERSION2;
+    try {
+      if (this.processing.size > 0) {
+        const error = `${this.processing.size} \u4E2A\u4EFB\u52A1\u6267\u884C\u4E2D`;
+        this.log(`[daemon] \u5347\u7EA7\u6307\u4EE4\u88AB\u62D2\u7EDD\uFF1A${error}`);
+        await this.reportUpgradeResultSafe({ status: "busy", fromVersion, error });
+        return;
+      }
+      const report = await performRuntimeUpgrade({
+        currentVersion: fromVersion,
+        targetVersion,
+        log: (line) => this.log(line)
+      });
+      if (report.status === "up_to_date") {
+        this.log(`[daemon] \u5F53\u524D ${fromVersion} \u5DF2\u4E0D\u4F4E\u4E8E ${report.targetVersion}\uFF0C\u65E0\u9700\u5347\u7EA7`);
+        await this.reportUpgradeResultSafe({ status: "succeeded", fromVersion, toVersion: fromVersion, restart: false });
+        return;
+      }
+      if (report.status !== "succeeded") {
+        this.log(`[daemon] \u5347\u7EA7\u5931\u8D25\uFF08${report.status}\uFF09\uFF1A${report.error}\u2014\u2014\u7EE7\u7EED\u7528 ${fromVersion} \u8FD0\u884C`);
+        await this.reportUpgradeResultSafe({
+          status: report.status,
+          fromVersion,
+          toVersion: report.toVersion ?? void 0,
+          error: report.error
+        });
+        return;
+      }
+      const cfg = loadDaemonConfig(this.store);
+      const dir = daemonDirForEnv(process.env);
+      const spawned = await spawnUpgradedDaemon({
+        env: process.env,
+        logFile: join21(dir, "daemon.log"),
+        pidFile: join21(dir, "daemon.pid"),
+        daemonConfig: { name: cfg?.name, workdir: cfg?.workdir, maxConcurrent: cfg?.maxConcurrent ?? DEFAULT_MAX_CONCURRENT }
+      });
+      if (spawned.pid <= 0) {
+        const error = `\u65B0\u7248\u672C ${report.toVersion} \u5DF2\u5B89\u88C5\uFF0C\u4F46\u81EA\u52A8\u91CD\u542F\u5931\u8D25\uFF1A${spawned.error ?? "\u672A\u77E5\u539F\u56E0"}\uFF08\u672C\u5B9E\u4F8B\u7EE7\u7EED\u8FD0\u884C\u65E7\u4EE3\u7801\uFF0C\u8BF7\u624B\u52A8\u6267\u884C morula-runtime daemon start \u91CD\u542F\uFF09`;
+        this.log(`[daemon] ${error}`);
+        await this.reportUpgradeResultSafe({ status: "failed", fromVersion, toVersion: report.toVersion, error });
+        return;
+      }
+      this.log(`[daemon] \u65B0 daemon \u5DF2\u62C9\u8D77\uFF08pid=${spawned.pid}\uFF09\uFF0C\u89C2\u5BDF ${Math.round(RESTART_LIVENESS_CHECK_MS / 1e3)}s \u786E\u8BA4\u63A5\u7BA1\u2026`);
+      const liveness = await spawned.waitExit(RESTART_LIVENESS_CHECK_MS);
+      if (liveness.exited) {
+        const error = `\u65B0\u7248\u672C ${report.toVersion} \u5DF2\u5B89\u88C5\uFF0C\u4F46\u65B0 daemon \u8FDB\u7A0B\u7ACB\u5373\u9000\u51FA\uFF08code=${liveness.code ?? "\u672A\u77E5"}\uFF0C\u8BE6\u89C1 ${join21(dir, "daemon.log")}\uFF09\u2014\u2014\u672C\u5B9E\u4F8B\u7EE7\u7EED\u8FD0\u884C\u65E7\u4EE3\u7801\uFF0C\u8BF7\u68C0\u67E5\u65E5\u5FD7\u540E\u624B\u52A8 morula-runtime daemon start`;
+        this.log(`[daemon] ${error}`);
+        await this.reportUpgradeResultSafe({ status: "failed", fromVersion, toVersion: report.toVersion, error });
+        return;
+      }
+      this.log("[daemon] \u65B0\u8FDB\u7A0B\u8FD0\u884C\u4E2D\uFF08\u7B49\u672C\u5B9E\u4F8B\u9000\u51FA\u91CA\u653E\u9501\u540E\u63A5\u7BA1\uFF09\uFF0C\u56DE\u62A5\u6210\u529F\u5E76\u9000\u51FA");
+      await this.reportUpgradeResultSafe({ status: "succeeded", fromVersion, toVersion: report.toVersion, restart: true });
+      this.running = false;
+      this.wakeMainLoop();
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      this.log(`[daemon] \u81EA\u5347\u7EA7\u5F02\u5E38\uFF1A${message}\u2014\u2014\u7EE7\u7EED\u7528 ${fromVersion} \u8FD0\u884C`);
+      await this.reportUpgradeResultSafe({ status: "failed", fromVersion, error: message });
+    } finally {
+      this.upgradeInProgress = false;
+    }
+  }
+  /** 升级结果回报（best-effort：服务端不可达不影响本地升级流程） */
+  async reportUpgradeResultSafe(body) {
+    if (!this.runtimeId)
+      return;
+    try {
+      await this.api.reportUpgradeResult(this.runtimeId, body);
+    } catch (error) {
+      this.log(`[daemon] \u5347\u7EA7\u7ED3\u679C\u56DE\u62A5\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u672C\u5730\u6D41\u7A0B\uFF09: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
   /**
    * tick：poll 兜底 + 取消轮询 + cleanup 补拉（心跳与 outbox 补投均已独立于本循环）。
    * D1：整轮加时间预算——超预算记 WARN 并丢弃本轮等待下一拍，避免单个慢请求把 tick 拖死。
@@ -9821,6 +10306,8 @@ var DaemonRunner = class {
   async tickOnce() {
     if (!this.runtimeId)
       return;
+    if (this.upgradeInProgress)
+      return;
     try {
       const tasks = await this.api.pollTasks(this.runtimeId);
       for (const task of tasks) {
@@ -10220,6 +10707,10 @@ var DaemonRunner = class {
   async handleTask(taskId) {
     if (this.processing.has(taskId))
       return;
+    if (this.upgradeInProgress) {
+      this.log(`[daemon] \u5347\u7EA7\u8FDB\u884C\u4E2D\uFF0C\u5FFD\u7565\u4EFB\u52A1\u6D3E\u53D1 task=${taskId}`);
+      return;
+    }
     this.processing.add(taskId);
     const ctrl = new AbortController();
     this.cancels.set(taskId, ctrl);
@@ -10489,12 +10980,12 @@ var DaemonRunner = class {
       });
       if (spaceToken?.token)
         env = { ...env, ...buildRepoEnv(spaceToken.token, spaceToken.baseUrl) };
-      repoDir = join20(cfg.workdir, "scratch", taskId);
+      repoDir = join21(cfg.workdir, "scratch", taskId);
       taskRoot = repoDir;
-      mkdirSync14(repoDir, { recursive: true });
-      const readme = join20(repoDir, "README.md");
-      if (!existsSync16(readme)) {
-        writeFileSync12(
+      mkdirSync15(repoDir, { recursive: true });
+      const readme = join21(repoDir, "README.md");
+      if (!existsSync17(readme)) {
+        writeFileSync13(
           readme,
           `# \u9694\u79BB\u5DE5\u4F5C\u533A\uFF08\u4EFB\u52A1 ${taskId}\uFF09
 
@@ -10792,7 +11283,7 @@ var DaemonRunner = class {
     }, { log: (line) => this.log(`[daemon] ${line}`) });
     const resumeSessionId = providerKey === "dim" ? detail.dimSessionId ?? detail.lastRun?.dimSessionId ?? null : null;
     const resumeWorkDir = detail.dimWorkDir ?? detail.lastRun?.dimWorkDir ?? null;
-    const canResume = !!resumeSessionId && !!resumeWorkDir && existsSync16(resumeWorkDir);
+    const canResume = !!resumeSessionId && !!resumeWorkDir && existsSync17(resumeWorkDir);
     const input = {
       executionId: `${taskId}:1`,
       // task-workspace-layout：新会话 cwd = 任务工作区根（AGENTS.md/.agents 在根下，仓库在子目录）
@@ -11053,7 +11544,7 @@ var DaemonRunner = class {
       await this.api.submitCleanupResult(item.id, this.runtimeId, { ok: true });
       return;
     }
-    const managedRoot = join20(cfg.workdir, "worktrees", this.tenantId);
+    const managedRoot = join21(cfg.workdir, "worktrees", this.tenantId);
     if (!wc.worktreePath.startsWith(`${managedRoot}/`)) {
       await this.api.submitCleanupResult(item.id, this.runtimeId, {
         ok: false,
@@ -11092,47 +11583,44 @@ var DaemonRunner = class {
     }
   }
 };
-function sleep(ms) {
-  return new Promise((r) => setTimeout(r, ms));
-}
 function isDebugLogEnabled() {
   return isFlagEnabled("MORULA_DAEMON_DEBUG_LOG", false);
 }
 var spaceTokenFailureLogged = false;
 function writeCustomSkills(targetDir, skills, log) {
   const NAME_RE = /^[\w-]{1,64}$/;
-  const base = join20(targetDir, ".agents", "skills");
+  const base = join21(targetDir, ".agents", "skills");
   for (const skill of skills) {
     const name = skill.name.trim();
     if (!NAME_RE.test(name)) {
       log?.(`[daemon] \u8DF3\u8FC7\u975E\u6CD5 skill \u540D\u79F0: ${JSON.stringify(name)}`);
       continue;
     }
-    const dir = join20(base, name);
-    if (dirname9(dir) !== base) {
+    const dir = join21(base, name);
+    if (dirname11(dir) !== base) {
       log?.(`[daemon] \u8DF3\u8FC7\u8D8A\u754C skill \u8DEF\u5F84: ${JSON.stringify(name)}`);
       continue;
     }
-    mkdirSync14(dir, { recursive: true });
+    mkdirSync15(dir, { recursive: true });
     const meta = ["---", `name: ${name}`];
     if (skill.description?.trim()) {
       meta.push(`description: ${skill.description.trim().replace(/\n/g, " ")}`);
     }
     meta.push("---", "");
-    writeFileSync12(join20(dir, "SKILL.md"), `${meta.join("\n")}
+    writeFileSync13(join21(dir, "SKILL.md"), `${meta.join("\n")}
 ${skill.content ?? ""}`, "utf8");
   }
 }
 function writeCollaborationSkill(targetDir, repo, repoBaseUrl, log, baseBranch, provider = repoBaseUrl ? "gitlab" : "github") {
-  const dir = join20(targetDir, ".agents", "skills", COLLABORATION_SKILL_NAME);
-  const refsDir = join20(dir, "references");
-  mkdirSync14(refsDir, { recursive: true });
+  const dir = join21(targetDir, ".agents", "skills", COLLABORATION_SKILL_NAME);
+  const refsDir = join21(dir, "references");
+  mkdirSync15(refsDir, { recursive: true });
   const isGitlab = provider === "gitlab" && !!repoBaseUrl;
   const front = isGitlab ? buildGitlabSkillFrontmatter() : COLLABORATION_SKILL_FRONTMATTER;
   const body = isGitlab ? buildGitlabSkillBody(repo ?? "", repoBaseUrl, baseBranch) : buildGithubSkillBody(baseBranch);
-  writeFileSync12(join20(dir, "SKILL.md"), `${front}
+  writeFileSync13(join21(dir, "SKILL.md"), `${front}
 ${body}`, "utf8");
-  writeFileSync12(join20(refsDir, "working-on-issues-source-map.md"), COLLABORATION_SKILL_SOURCE_MAP, "utf8");
+  writeFileSync13(join21(refsDir, "working-on-issues-source-map.md"), COLLABORATION_SKILL_SOURCE_MAP, "utf8");
   log?.(`[daemon] \u5DF2\u6CE8\u5165\u534F\u4F5C\u5951\u7EA6 skill ${COLLABORATION_SKILL_NAME}\uFF08${isGitlab ? "GitLab" : "GitHub"} \u7248\uFF0C\u4ED3\u5E93=${repo ?? "\u65E0"}\uFF09\u5230 .agents/skills/`);
 }
 function resolveContractPlatform(availableRepos, boundRepo, boundBaseUrl, boundBaseBranch) {
@@ -11163,8 +11651,8 @@ function resolveContractPlatform(availableRepos, boundRepo, boundBaseUrl, boundB
   };
 }
 function writeTaskContextBrief(targetDir, taskId, detail, repo, log) {
-  const briefDir = join20(targetDir, ".agent_context");
-  mkdirSync14(briefDir, { recursive: true });
+  const briefDir = join21(targetDir, ".agent_context");
+  mkdirSync15(briefDir, { recursive: true });
   const brief = `# \u4EFB\u52A1\u4E0A\u4E0B\u6587\uFF08Task Context\uFF09
 
 - \u672C AgentTask \u4EFB\u52A1 ID\uFF1A\`${taskId}\`
@@ -11174,7 +11662,7 @@ function writeTaskContextBrief(targetDir, taskId, detail, repo, log) {
 ---
 
 ${buildTaskPromptWithContract(detail, void 0)}`;
-  writeFileSync12(join20(briefDir, "task-context.md"), brief, "utf8");
+  writeFileSync13(join21(briefDir, "task-context.md"), brief, "utf8");
   log?.(`[daemon] \u5DF2\u6CE8\u5165\u4EFB\u52A1\u4E0A\u4E0B\u6587 brief \u5230 .agent_context/task-context.md`);
 }
 var PROJECT_AGENTS_MD_MAX_CHARS = 1e5;
@@ -11188,8 +11676,8 @@ function writeProjectAgentsMd(targetDir, agentsMd, log) {
     log?.(`[daemon] \u7A7A\u95F4 AGENTS.md \u5185\u5BB9\u8D85\u957F\uFF08${content.length} \u5B57\u7B26 > ${PROJECT_AGENTS_MD_MAX_CHARS}\uFF09\uFF0C\u5DF2\u622A\u65AD\u5199\u5165`);
     content = content.slice(0, PROJECT_AGENTS_MD_MAX_CHARS);
   }
-  mkdirSync14(targetDir, { recursive: true });
-  writeFileSync12(join20(targetDir, "AGENTS.md"), `${content}
+  mkdirSync15(targetDir, { recursive: true });
+  writeFileSync13(join21(targetDir, "AGENTS.md"), `${content}
 `, "utf8");
   log?.(`[daemon] \u5DF2\u6CE8\u5165\u7A7A\u95F4\u9879\u76EE\u8BF4\u660E\u5230 AGENTS.md\uFF08${content.length} \u5B57\u7B26\uFF0C\u4F5C\u4E3A project.instructions \u81EA\u52A8\u52A0\u8F7D\uFF09`);
   return true;
@@ -11248,7 +11736,7 @@ async function reportRepoTargets(taskId, targets, env, ops) {
 }
 async function reportOneRepoTarget(taskId, target, env, ops) {
   const execEnv = mergeExecEnv(env);
-  if (!existsSync16(target.dir) || !existsSync16(join20(target.dir, ".git"))) {
+  if (!existsSync17(target.dir) || !existsSync17(join21(target.dir, ".git"))) {
     ops.log(`[daemon] \u4EFB\u52A1 ${taskId} \u4ED3\u5E93 ${target.repoFullName} \u4EA4\u4ED8\u8DF3\u8FC7\uFF1A\u5DE5\u4F5C\u76EE\u5F55\u5DF2\u4E0D\u5B58\u5728\uFF08cleanup/\u5206\u652F\u6539\u540D\u65F6\u5E8F\uFF09`);
     return;
   }
@@ -11416,9 +11904,9 @@ Task ref: ${taskCode}\uFF08\u7531 morula \u81EA\u52A8\u8865\u5145\uFF0C\u7528\u4
 
 // src/commands/doctor.ts
 init_dist2();
-import { existsSync as existsSync17, readFileSync as readFileSync11, realpathSync } from "node:fs";
+import { existsSync as existsSync18, readFileSync as readFileSync11, realpathSync } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { dirname as dirname10, join as join21 } from "node:path";
+import { dirname as dirname12, join as join22 } from "node:path";
 init_daemon_config();
 init_daemon_lock();
 init_dim_locate();
@@ -11438,16 +11926,16 @@ async function doctorCommand(context) {
 async function collectDoctor(context, probe) {
   const checks = [];
   const env = context.env;
-  const configDir = env.MORULA_CONFIG_DIR ?? join21(homedir12(), ".morula-cli");
-  const configPath = env.MORULA_CONFIG ?? join21(configDir, "config.yaml");
-  const daemonPath = join21(dirname10(configPath), "daemon");
-  const logFile = join21(daemonPath, "daemon.log");
+  const configDir = env.MORULA_CONFIG_DIR ?? join22(homedir12(), ".morula-cli");
+  const configPath = env.MORULA_CONFIG ?? join22(configDir, "config.yaml");
+  const daemonPath = join22(dirname12(configPath), "daemon");
+  const logFile = join22(daemonPath, "daemon.log");
   const contextName = context.runtime.context ?? null;
   const baseUrl = context.runtime.baseUrl ?? null;
   const tokenPresent = Boolean(context.runtime.token);
   const tokenSource = context.runtime.tokenSource ?? null;
   let configReadable = false;
-  if (existsSync17(configPath)) {
+  if (existsSync18(configPath)) {
     try {
       readFileSync11(configPath, "utf8");
       configReadable = true;
@@ -11455,9 +11943,9 @@ async function collectDoctor(context, probe) {
       configReadable = false;
     }
   }
-  const lockPath = join21(daemonPath, DAEMON_LOCK_FILE);
+  const lockPath = join22(daemonPath, DAEMON_LOCK_FILE);
   const lock = probeDaemonLock(lockPath);
-  const pidFile = join21(daemonPath, DAEMON_PID_FILE);
+  const pidFile = join22(daemonPath, DAEMON_PID_FILE);
   const filePid = readPidFile(pidFile);
   const daemonPid = probeDaemonInstance(configDir).pid;
   const cfg = loadDaemonConfig(context.store);
@@ -11509,8 +11997,8 @@ async function collectDoctor(context, probe) {
       hint: "morula-runtime auth login"
     });
   } else if (probe) {
-    const check = await probeAuth(context);
-    checks.push(check);
+    const check2 = await probeAuth(context);
+    checks.push(check2);
   } else {
     checks.push({
       id: "auth.token",
@@ -11519,7 +12007,7 @@ async function collectDoctor(context, probe) {
       hint: "morula-runtime daemon doctor --probe\uFF08\u8054\u7F51\u786E\u8BA4\u767B\u5F55\u6001\uFF09"
     });
   }
-  checks.push(configReadable ? { id: "config.readable", status: "ok", message: `\u914D\u7F6E\u53EF\u8BFB\uFF1A${configPath}` } : existsSync17(configPath) ? { id: "config.readable", status: "fail", message: `\u914D\u7F6E\u5B58\u5728\u4F46\u4E0D\u53EF\u8BFB\uFF08\u6743\u9650\uFF1F\uFF09\uFF1A${configPath}`, hint: `ls -l ${configPath}` } : { id: "config.readable", status: "warn", message: `\u914D\u7F6E\u6587\u4EF6\u5C1A\u4E0D\u5B58\u5728\uFF1A${configPath}`, hint: "morula-runtime auth login\uFF08\u767B\u5F55\u540E\u751F\u6210\uFF09" });
+  checks.push(configReadable ? { id: "config.readable", status: "ok", message: `\u914D\u7F6E\u53EF\u8BFB\uFF1A${configPath}` } : existsSync18(configPath) ? { id: "config.readable", status: "fail", message: `\u914D\u7F6E\u5B58\u5728\u4F46\u4E0D\u53EF\u8BFB\uFF08\u6743\u9650\uFF1F\uFF09\uFF1A${configPath}`, hint: `ls -l ${configPath}` } : { id: "config.readable", status: "warn", message: `\u914D\u7F6E\u6587\u4EF6\u5C1A\u4E0D\u5B58\u5728\uFF1A${configPath}`, hint: "morula-runtime auth login\uFF08\u767B\u5F55\u540E\u751F\u6210\uFF09" });
   if (!dimFound) {
     checks.push({
       id: "dim.present",
@@ -11626,19 +12114,13 @@ function detectInstallMode() {
 }
 
 // src/commands/daemon.ts
-function configFilePath(env) {
-  return env.MORULA_CONFIG ?? join22(env.MORULA_CONFIG_DIR ?? join22(homedir13(), ".morula-cli"), "config.yaml");
-}
-function daemonDir(configPath) {
-  return join22(dirname11(configPath), "daemon");
-}
 var PID_FILE = DAEMON_PID_FILE;
 var LOG_FILE = "daemon.log";
 var DAEMON_EXIT_FALLBACK_MS = 3e3;
 async function daemonCommand(context) {
   const { action } = context.parsed;
   if (action === "run")
-    return run2(context);
+    return run3(context);
   if (action === "start")
     return start(context);
   if (action === "stop")
@@ -11815,7 +12297,7 @@ async function models(context) {
     contextWindow: m.contextWindow
   }));
 }
-async function run2(context) {
+async function run3(context) {
   rejectUnknownFlags(context.parsed.flags, ["name", "workdir", "max-concurrent"]);
   const armBoundedExit = () => {
     setTimeout(() => process.exit(0), DAEMON_EXIT_FALLBACK_MS).unref();
@@ -11828,9 +12310,18 @@ async function run2(context) {
     saveDaemonConfig(context.store, { name, workdir, maxConcurrent });
   }
   const resolvedWorkdir = workdir ?? loadDaemonConfig(context.store)?.workdir ?? DEFAULT_WORKDIR;
-  mkdirSync15(resolvedWorkdir, { recursive: true });
-  const lockPath = join22(daemonDir(configFilePath(context.env)), DAEMON_LOCK_FILE);
-  const acquired = acquireDaemonLock(lockPath, { workdir: resolvedWorkdir });
+  mkdirSync16(resolvedWorkdir, { recursive: true });
+  const lockPath = join23(daemonDirForEnv(context.env), DAEMON_LOCK_FILE);
+  let acquired = acquireDaemonLock(lockPath, { workdir: resolvedWorkdir });
+  const restartWaitMs = Number(context.env.MORULA_DAEMON_RESTART_WAIT_MS ?? 0) || 0;
+  if (!acquired.ok && restartWaitMs > 0) {
+    const deadline = Date.now() + restartWaitMs;
+    context.err(`[daemon] \u81EA\u5347\u7EA7\u91CD\u542F\uFF1A\u7B49\u5F85\u65E7\u5B9E\u4F8B\u91CA\u653E\u5355\u5B9E\u4F8B\u9501\uFF08\u6700\u591A ${Math.round(restartWaitMs / 1e3)}s\uFF09`);
+    while (!acquired.ok && Date.now() < deadline) {
+      await new Promise((resolve2) => setTimeout(resolve2, 1e3));
+      acquired = acquireDaemonLock(lockPath, { workdir: resolvedWorkdir });
+    }
+  }
   if (!acquired.ok) {
     const pid = acquired.existing?.pid;
     if (context.env.MORULA_DAEMON_SUPERVISED === "1") {
@@ -11856,7 +12347,7 @@ async function run2(context) {
     log: (line) => context.err(line),
     // dim acp 子进程治理（issues/dim-acp-process-leak-shared-space-contention.md）：
     // spawn 记录落盘（供 daemon 重启后的启动自愈认领自己的孤儿）+ 无归属子进程周期巡检
-    acpChildRecordFile: join22(daemonDir(configFilePath(context.env)), "dim-acp-children.json"),
+    acpChildRecordFile: join23(daemonDirForEnv(context.env), "dim-acp-children.json"),
     // D6：认证失败时重新读 config 换票（不传则退回「启动即快照」旧行为）。
     // 只重算凭证，不重建 client——WS 用返回值更新 socket.auth 后重连。
     resolveToken: () => {
@@ -11907,12 +12398,12 @@ async function start(context) {
       throw error;
     identityError = error instanceof Error ? error.message : String(error);
   }
-  const dir = daemonDir(configFilePath(context.env));
+  const dir = daemonDirForEnv(context.env);
   if (!dryRun)
-    mkdirSync15(dir, { recursive: true, mode: 448 });
-  const pidFile = join22(dir, PID_FILE);
-  const logFile = join22(dir, LOG_FILE);
-  const lockPath = join22(dir, DAEMON_LOCK_FILE);
+    mkdirSync16(dir, { recursive: true, mode: 448 });
+  const pidFile = join23(dir, PID_FILE);
+  const logFile = join23(dir, LOG_FILE);
+  const lockPath = join23(dir, DAEMON_LOCK_FILE);
   const lock = probeDaemonLock(lockPath);
   if (lock.state === "active") {
     throw new CliError(
@@ -11923,7 +12414,7 @@ async function start(context) {
       { hint: "morula-runtime daemon status" }
     );
   }
-  if (existsSync18(pidFile)) {
+  if (existsSync19(pidFile)) {
     const pid = Number(readFileSync12(pidFile, "utf8").trim());
     if (isProcessAlive(pid)) {
       throw new CliError("ALREADY_RUNNING", EXIT.CONFLICT, `daemon \u5DF2\u5728\u8FD0\u884C\uFF08pid=${pid}\uFF09\uFF1B\u5982\u9700\u5F3A\u5236\u91CD\u542F\u8BF7\u5148\u6267\u884C kill -9 ${pid}`, false, {
@@ -11974,19 +12465,19 @@ async function start(context) {
       hint: `tail -n 50 ${logFile}`
     });
   }
-  writeFileSync13(pidFile, String(result.pid), { mode: 384 });
+  writeFileSync14(pidFile, String(result.pid), { mode: 384 });
   context.err(`[daemon] \u5DF2\u540E\u53F0\u542F\u52A8\uFF08pid=${result.pid}\uFF09\uFF0C\u65E5\u5FD7: ${logFile}`);
   return { running: true, pid: result.pid, logFile, lockFile: lockPath };
 }
 async function stop(context) {
   rejectUnknownFlags(context.parsed.flags, ["dry-run"]);
   const dryRun = isDryRun(context);
-  const dir = daemonDir(configFilePath(context.env));
-  const pidFile = join22(dir, PID_FILE);
-  const lockPath = join22(dir, DAEMON_LOCK_FILE);
+  const dir = daemonDirForEnv(context.env);
+  const pidFile = join23(dir, PID_FILE);
+  const lockPath = join23(dir, DAEMON_LOCK_FILE);
   const lock = probeDaemonLock(lockPath);
   const lockPid = lock.state === "absent" ? null : lock.record?.pid ?? null;
-  const filePid = existsSync18(pidFile) ? Number(readFileSync12(pidFile, "utf8").trim()) : null;
+  const filePid = existsSync19(pidFile) ? Number(readFileSync12(pidFile, "utf8").trim()) : null;
   const pid = [lockPid, filePid].find((p) => p !== null && isProcessAlive(p)) ?? null;
   if (dryRun) {
     return {
@@ -12013,9 +12504,9 @@ async function stop(context) {
 async function status2(context) {
   rejectUnknownFlags(context.parsed.flags, []);
   const cfg = loadDaemonConfig(context.store);
-  const dir = daemonDir(configFilePath(context.env));
-  const lockPath = join22(dir, DAEMON_LOCK_FILE);
-  const probe = probeDaemonInstance(dirname11(configFilePath(context.env)));
+  const dir = daemonDirForEnv(context.env);
+  const lockPath = join23(dir, DAEMON_LOCK_FILE);
+  const probe = probeDaemonInstance(dirname13(configFilePathForEnv(context.env)));
   return {
     running: probe.running,
     pid: probe.pid,
@@ -12024,7 +12515,7 @@ async function status2(context) {
     name: cfg?.name ?? null,
     workdir: cfg?.workdir ?? DEFAULT_WORKDIR,
     maxConcurrent: cfg?.maxConcurrent ?? DEFAULT_MAX_CONCURRENT,
-    logFile: join22(dir, LOG_FILE),
+    logFile: join23(dir, LOG_FILE),
     lockFile: lockPath
   };
 }
@@ -12081,11 +12572,228 @@ async function setupCommand(context) {
   };
 }
 
+// src/commands/upgrade.ts
+init_dist2();
+import { existsSync as existsSync20, mkdirSync as mkdirSync17, readFileSync as readFileSync13, rmSync as rmSync11 } from "node:fs";
+import { join as join24 } from "node:path";
+init_daemon_config();
+init_daemon_lock();
+var PID_FILE2 = DAEMON_PID_FILE;
+var LOG_FILE2 = "daemon.log";
+async function upgradeCommand(context) {
+  const { action } = context.parsed;
+  if (action === "check")
+    return check(context);
+  if (action === "run")
+    return run4(context);
+  throw usage("usage: morula-runtime upgrade <check|run>", {
+    hint: "morula-runtime upgrade --help"
+  });
+}
+async function check(context) {
+  rejectUnknownFlags(context.parsed.flags, ["registry"]);
+  const registry2 = flagString(context.parsed.flags, "registry") ?? resolveRegistry(context.env);
+  let latest = null;
+  let error = null;
+  try {
+    latest = await fetchLatestRuntimeVersion({ registry: registry2 });
+  } catch (e) {
+    error = e instanceof Error ? e.message : String(e);
+  }
+  if (latest === null) {
+    context.setExitCode(EXIT.UPSTREAM);
+    return {
+      ok: false,
+      current: BUILD_VERSION2,
+      latest: null,
+      updateAvailable: null,
+      registry: registry2,
+      error,
+      hint: "\u7F51\u7EDC\u4E0D\u53EF\u8FBE\u6216 registry \u4E0D\u53EF\u7528\uFF1B\u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u76F4\u63A5\u6267\u884C morula-runtime upgrade run --yes\uFF08run \u4F1A\u81EA\u884C\u89E3\u6790\u76EE\u6807\u7248\u672C\uFF09"
+    };
+  }
+  const updateAvailable = isUpgradeAvailable(BUILD_VERSION2, latest);
+  return {
+    ok: true,
+    current: BUILD_VERSION2,
+    latest,
+    updateAvailable,
+    registry: registry2,
+    ...updateAvailable ? { hint: "morula-runtime upgrade run --yes\uFF08\u5347\u7EA7\u4F1A\u5148\u786E\u8BA4\u65E0\u4EFB\u52A1\u6267\u884C\u4E2D\uFF0C\u5931\u8D25\u81EA\u52A8\u56DE\u88C5\u539F\u7248\u672C\uFF09" } : {}
+  };
+}
+function probeDaemonPid(env) {
+  const dir = daemonDirForEnv(env);
+  const pidFile = join24(dir, PID_FILE2);
+  const lockPath = join24(dir, DAEMON_LOCK_FILE);
+  const lock = probeDaemonLock(lockPath);
+  const lockPid = lock.state === "absent" ? null : lock.record?.pid ?? null;
+  const filePid = existsSync20(pidFile) ? Number(readFileSync13(pidFile, "utf8").trim()) : null;
+  const pid = [lockPid, filePid].find((p) => p !== null && isProcessAlive(p)) ?? null;
+  return { pid, pidFile, lockPath, lockState: lock.state };
+}
+async function reportUpgradeResult(context, body) {
+  const cfg = loadDaemonConfig(context.store);
+  if (!context.runtime.token || !cfg?.runtimeId)
+    return;
+  try {
+    await context.client.http.post(`/agent-runtimes/${cfg.runtimeId}/upgrade-result`, body);
+  } catch (error) {
+    context.err(`[upgrade] \u5347\u7EA7\u7ED3\u679C\u56DE\u62A5\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u672C\u5730\u7ED3\u679C\uFF09: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+async function countActiveTasks(context, runtimeId) {
+  const res = await context.client.http.get(
+    "/agent-tasks",
+    { runtimeId, statusGroup: "active", page: 1, pageSize: 100 }
+  );
+  return (res?.data ?? []).filter((t) => ["dispatched", "running", "awaiting_approval"].includes(t.status)).length;
+}
+async function run4(context) {
+  rejectUnknownFlags(context.parsed.flags, ["yes", "version", "registry"]);
+  const yes = flagBoolean(context.parsed.flags, "yes");
+  const targetVersion = flagString(context.parsed.flags, "version") ?? null;
+  const registry2 = flagString(context.parsed.flags, "registry") ?? resolveRegistry(context.env);
+  if (!yes) {
+    throw usage("upgrade run \u9700\u8981 --yes \u663E\u5F0F\u786E\u8BA4\uFF08\u5148\u8DD1 morula-runtime upgrade check \u67E5\u770B\u5DEE\u8DDD\uFF09", {
+      hint: "morula-runtime upgrade run --yes"
+    });
+  }
+  const dir = daemonDirForEnv(context.env);
+  const pidFile = join24(dir, PID_FILE2);
+  const lockPath = join24(dir, DAEMON_LOCK_FILE);
+  const probe = probeDaemonPid(context.env);
+  const wasRunning = probe.pid !== null;
+  const cfgForSafety = loadDaemonConfig(context.store);
+  let activeTasks = 0;
+  if (wasRunning && cfgForSafety?.runtimeId) {
+    if (!context.runtime.token) {
+      throw new CliError(
+        "TASKS_UNKNOWN",
+        EXIT.UNAUTHENTICATED,
+        "daemon \u8FD0\u884C\u4E2D\u4F46\u5F53\u524D\u672A\u767B\u5F55\uFF0C\u65E0\u6CD5\u786E\u8BA4\u662F\u5426\u6709\u4EFB\u52A1\u6267\u884C\u4E2D\uFF0C\u5DF2\u62D2\u7EDD\u5347\u7EA7",
+        false,
+        { hint: "morula-runtime auth login \u540E\u91CD\u8BD5\uFF1B\u6216\u786E\u8BA4\u53EF\u4E2D\u65AD\u540E\u5148 morula-runtime daemon stop" }
+      );
+    }
+    try {
+      activeTasks = await countActiveTasks(context, cfgForSafety.runtimeId);
+    } catch (error) {
+      throw new CliError(
+        "TASKS_UNKNOWN",
+        EXIT.UPSTREAM,
+        `daemon \u8FD0\u884C\u4E2D\u4E14\u65E0\u6CD5\u786E\u8BA4\u4EFB\u52A1\u72B6\u6001\uFF08${error instanceof Error ? error.message : String(error)}\uFF09\uFF0C\u5DF2\u62D2\u7EDD\u5347\u7EA7`,
+        false,
+        { hint: "\u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u5148 morula-runtime daemon stop \u518D\u5347\u7EA7\uFF08\u5347\u7EA7\u540E daemon \u4E0D\u4F1A\u81EA\u52A8\u62C9\u8D77\uFF09" }
+      );
+    }
+  }
+  if (activeTasks > 0) {
+    throw new CliError(
+      "TASKS_RUNNING",
+      EXIT.CONFLICT,
+      `daemon \u6709 ${activeTasks} \u4E2A\u4EFB\u52A1\u6267\u884C\u4E2D\uFF0C\u62D2\u7EDD\u5347\u7EA7\uFF08\u5347\u7EA7\u4F1A\u7834\u574F\u6B63\u5728\u6267\u884C\u7684\u4EFB\u52A1\uFF09`,
+      false,
+      { hint: "\u7B49\u4EFB\u52A1\u5B8C\u6210\u540E\u518D\u5347\u7EA7\uFF1B\u6216\u786E\u8BA4\u53EF\u4E2D\u65AD\u540E\u5148 morula-runtime daemon stop" }
+    );
+  }
+  const report = await performRuntimeUpgrade({
+    currentVersion: BUILD_VERSION2,
+    targetVersion,
+    registry: registry2,
+    log: (line) => context.err(line)
+  });
+  if (report.status === "up_to_date") {
+    await reportUpgradeResult(context, { status: "succeeded", fromVersion: BUILD_VERSION2, toVersion: BUILD_VERSION2, restart: false });
+    return { ok: true, upToDate: true, current: BUILD_VERSION2, target: report.targetVersion, steps: report.steps };
+  }
+  if (report.status !== "succeeded") {
+    await reportUpgradeResult(context, { status: report.status, fromVersion: report.fromVersion, toVersion: report.toVersion ?? void 0, error: report.error });
+    context.setExitCode(EXIT.OTHER);
+    return {
+      ok: false,
+      status: report.status,
+      from: report.fromVersion,
+      to: report.toVersion,
+      error: report.error,
+      steps: report.steps,
+      hint: report.status === "rolled_back" ? "\u5DF2\u56DE\u88C5\u539F\u7248\u672C\uFF1B\u53EF\u67E5\u770B steps \u5B9A\u4F4D\u5931\u8D25\u539F\u56E0\u540E\u91CD\u8BD5" : "\u539F\u7248\u672C\u4FDD\u6301\u4E0D\u53D8\uFF1B\u53EF\u67E5\u770B steps \u5B9A\u4F4D\u5931\u8D25\u539F\u56E0\u540E\u91CD\u8BD5"
+    };
+  }
+  const cfg = loadDaemonConfig(context.store);
+  let restart = null;
+  let deferredRestart = false;
+  if (wasRunning) {
+    if (cfgForSafety?.runtimeId && context.runtime.token) {
+      const stillBusy = await countActiveTasks(context, cfgForSafety.runtimeId);
+      if (stillBusy > 0) {
+        deferredRestart = true;
+        context.err(`[upgrade] daemon \u6709 ${stillBusy} \u4E2A\u4EFB\u52A1\u5728\u5347\u7EA7\u671F\u95F4\u88AB\u6D3E\u53D1\uFF0C\u4FDD\u7559\u5176\u8FD0\u884C\u2014\u2014\u65B0\u7248\u672C ${report.toVersion} \u5DF2\u5B89\u88C5\uFF0C\u4E0B\u6B21 daemon \u91CD\u542F\u65F6\u751F\u6548\uFF08morula-runtime daemon stop && morula-runtime daemon start\uFF09`);
+      }
+    }
+    if (!deferredRestart) {
+      if (probe.pid !== null) {
+        const stopped = await stopDaemonByPid(probe.pid);
+        context.err(`[upgrade] \u65E7 daemon\uFF08pid=${probe.pid}\uFF09\u5DF2\u505C\u6B62\uFF08${stopped.outcome}\uFF09`);
+      }
+      if (probe.lockState === "stale")
+        releaseDaemonLock(lockPath);
+      else if (probe.pid !== null)
+        releaseDaemonLock(lockPath, probe.pid);
+      rmSync11(pidFile, { force: true });
+      mkdirSync17(dir, { recursive: true, mode: 448 });
+      restart = await spawnUpgradedDaemon({
+        env: context.env,
+        logFile: join24(dir, LOG_FILE2),
+        pidFile,
+        daemonConfig: { name: cfg?.name, workdir: cfg?.workdir, maxConcurrent: cfg?.maxConcurrent ?? DEFAULT_MAX_CONCURRENT }
+      });
+      if (restart.pid > 0) {
+        const liveness = await restart.waitExit(RESTART_LIVENESS_CHECK_MS);
+        if (liveness.exited) {
+          context.err(`[upgrade] \u65B0 daemon \u8FDB\u7A0B\u7ACB\u5373\u9000\u51FA\uFF08code=${liveness.code ?? "\u672A\u77E5"}\uFF09\uFF0C\u8BE6\u89C1 ${join24(dir, LOG_FILE2)}\u2014\u2014\u8BF7\u68C0\u67E5\u65E5\u5FD7\u540E\u624B\u52A8 morula-runtime daemon start`);
+          restart = { pid: 0, entry: restart.entry, error: `\u65B0 daemon \u8FDB\u7A0B\u7ACB\u5373\u9000\u51FA\uFF08code=${liveness.code ?? "\u672A\u77E5"}\uFF09`, waitExit: async () => ({ exited: true, code: liveness.code ?? null }) };
+        } else {
+          context.err(`[upgrade] \u65B0 daemon \u5DF2\u62C9\u8D77\uFF08pid=${restart.pid}\uFF09\uFF0C\u65E5\u5FD7: ${join24(dir, LOG_FILE2)}`);
+        }
+      } else {
+        context.err(`[upgrade] \u65B0 daemon \u62C9\u8D77\u5931\u8D25\uFF1A${restart.error ?? "\u672A\u77E5\u539F\u56E0"}\u2014\u2014\u8BF7\u624B\u52A8\u6267\u884C morula-runtime daemon start`);
+      }
+    }
+  } else {
+    context.err("[upgrade] daemon \u672A\u5728\u8FD0\u884C\uFF0C\u4FDD\u6301\u505C\u6B62\u72B6\u6001\uFF08\u9700\u8981\u65F6\u624B\u52A8 morula-runtime daemon start\uFF09");
+  }
+  const spawnFailed = wasRunning && !deferredRestart && restart !== null && restart.pid <= 0;
+  await reportUpgradeResult(context, {
+    status: spawnFailed ? "failed" : "succeeded",
+    fromVersion: report.fromVersion,
+    toVersion: report.toVersion,
+    restart: !spawnFailed && wasRunning && !deferredRestart,
+    ...spawnFailed ? { error: `\u65B0\u7248\u672C\u5DF2\u5B89\u88C5\u4F46\u81EA\u52A8\u91CD\u542F\u5931\u8D25\uFF1A${restart?.error ?? "\u672A\u77E5\u539F\u56E0"}` } : {}
+  });
+  if (spawnFailed) {
+    context.setExitCode(EXIT.OTHER);
+  }
+  return {
+    ok: !spawnFailed,
+    status: spawnFailed ? "restart_failed" : deferredRestart ? "installed_pending_restart" : "succeeded",
+    from: report.fromVersion,
+    to: report.toVersion,
+    // deferredRestart（评审 P3）：安装期有任务被派发 → 不打断 daemon，新版本下次重启生效
+    restarted: !spawnFailed && wasRunning && !deferredRestart,
+    pid: !spawnFailed && wasRunning && !deferredRestart ? restart?.pid ?? null : null,
+    ...deferredRestart ? { note: "\u65B0\u7248\u672C\u5DF2\u5B89\u88C5\uFF1Bdaemon \u6709\u4EFB\u52A1\u5728\u6267\u884C\u672A\u91CD\u542F\uFF0C\u4E0B\u6B21 daemon \u91CD\u542F\u65F6\u751F\u6548" } : {},
+    warnings: report.warnings,
+    steps: report.steps
+  };
+}
+
 // src/commands/registry-runtime.ts
 var COMMANDS = {
   auth: authCommand,
   daemon: daemonCommand,
-  setup: setupCommand
+  setup: setupCommand,
+  upgrade: upgradeCommand
 };
 var EXIT_CODES = {
   0: "success",
@@ -12107,7 +12815,7 @@ var GLOBAL_FLAGS2 = {
 };
 var SPEC = {
   name: "morula-runtime",
-  summary: "Device-level CLI for the Morula local agent runtime: authentication, daemon lifecycle (run/start/stop/status), local assistant portal, model inventory, and device diagnostics. Success output is JSON on stdout; errors are JSON on stderr.",
+  summary: "Device-level CLI for the Morula local agent runtime: authentication, daemon lifecycle (run/start/stop/status), local assistant portal, model inventory, device diagnostics, and runtime self-upgrade (check + confirmed run). Success output is JSON on stdout; errors are JSON on stderr.",
   resources: [
     {
       resource: "auth",
@@ -12278,6 +12986,44 @@ var SPEC = {
         "canonical form is the bare `morula-runtime setup`; postinstall runs the same registration automatically",
         "only writes <root>/morula-cli; never deletes other plugins or the legacy ~/.agents/plugins/morula-cli (reported as legacyRoot)"
       ]
+    },
+    {
+      resource: "upgrade",
+      summary: "runtime self-upgrade: compare the installed version against the latest npm release, then upgrade this device after explicit confirmation (installs, verifies, rolls back on failure, and re-bakes the plugin launcher)",
+      actions: [
+        {
+          action: "check",
+          summary: "read-only: compare current version with the latest published version on the npm registry (one network call)",
+          flags: [
+            { name: "registry", type: "string", valueHint: "<url>", description: "npm registry to query (default https://registry.npmjs.org, or $MORULA_NPM_REGISTRY)" }
+          ],
+          examples: ["morula-runtime upgrade check"],
+          writes: "none",
+          interactive: false,
+          idempotent: true,
+          emits: ["ok", "current", "latest", "updateAvailable", "registry"]
+        },
+        {
+          action: "run",
+          summary: "upgrade this device to the target version (default: registry latest). REQUIRES --yes (no silent auto-upgrade). Refuses while the daemon has tasks running; stops an idle daemon, upgrades, verifies (rolls back on failure), re-runs setup, then restarts the daemon",
+          flags: [
+            { name: "yes", type: "boolean", description: "REQUIRED: explicit confirmation; without it the command refuses (exit 2). No silent auto-upgrade" },
+            { name: "version", type: "string", valueHint: "<semver>", description: "target version (default: latest from the registry)" },
+            { name: "registry", type: "string", valueHint: "<url>", description: "npm registry to install from (default https://registry.npmjs.org, or $MORULA_NPM_REGISTRY)" }
+          ],
+          examples: ["morula-runtime upgrade run --yes", "morula-runtime upgrade run --yes --version 0.1.0-alpha.16"],
+          writes: "local",
+          interactive: false,
+          idempotent: false,
+          emits: ["ok", "status", "from", "to", "restarted", "pid", "steps"]
+        }
+      ],
+      notes: [
+        "check: exit 0 = compared (see updateAvailable); 7 = registry unreachable (see error/hint)",
+        "run: exit 0 = upgraded or already up to date; 6 (conflict) = daemon has running tasks (upgrade refused); 1 = install/verify failed (previous version kept or re-installed, see steps/error)",
+        "the daemon restart only happens when the daemon was running before the upgrade; a stopped daemon stays stopped",
+        "a stopped daemon is upgraded but not started \u2014 start it manually with morula-runtime daemon start"
+      ]
     }
   ]
 };