evolcore 0.0.27 → 0.0.29-test.0

package/dist/cli/daemon-commands.js

@@ -9,22 +9,23 @@ import { loadDefaults, loadAllAgents, loadDaemonConfig, saveDaemonConfig } from
 import { resolveEffective } from '../config/config-manager.js';
 import { resolveAnthropicConfig } from '../agents/baseagent.js';
 import { migrateProject } from '../config-store.js';
-import { ipcQuery } from '../ipc.js';
+import { ipcQuery, IpcTransportError } from '../ipc.js';
 import { isHelpFlag } from './help.js';
 import { cmdInit, needsControlAidInit, initTail } from './init.js';
 import * as platform from '../utils/cross-platform.js';
 import { EventBus } from '../core/event-bus.js';
-import { tryUpgrade, tryUpgradeGlobalPkg, resolveGlobalPkg } from '../utils/npm-ops.js';
+import { tryUpgradeGlobalPkg, resolveGlobalPkg } from '../utils/npm-ops.js';
+import { ensureFreshPackageVersionInfo } from '../utils/package-version-info.js';
 import { ecwebVersionRequirementError, resolveEcwebLaunchCommand, fetchRemotePairingCode } from '../utils/ecweb-utils.js';
 import { isHostChinese } from '../utils/locale.js';
-import { scanInstances, cleanupInstances, findOrphanProcesses, killOrphans } from '../utils/instance-registry.js';
+import { scanInstances, cleanupInstances, findOrphanProcesses } from '../utils/instance-registry.js';
 import { filterLogFiles, deriveLogTypes, computePreChecked, validateLogTypes, shortLogName as shortLogNameLocal, isWatchLogFile } from './watch-logs.js';
 import { displaySessionTitle } from '../core/session/session-title.js';
 import { isNonAgentSessionChannel } from '../core/system-channels.js';
 import { printCodeStats } from './code-stats.js';
 import { getProcessStartTime, startTimeMatches } from '../utils/process-introspect.js';
-import { readDelegationCredential } from '../core/auth/agent-delegation.js';
-import { WEB_CLI_BIN, WEB_PACKAGE_LATEST, WEB_PACKAGE_NAME } from '../product.js';
+import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
+import { RUNTIME_HOME_ENV, WEB_CLI_BIN, WEB_PACKAGE_LATEST, WEB_PACKAGE_NAME } from '../product.js';
 import { rotateStdoutLog } from '../utils/log-writer.js';
 import { inspectDataMigrationRequirement } from '../core/data-migration.js';
 import { isInitCancelledError, printInitCancelHint } from './init-cancel.js';
@@ -250,39 +251,54 @@ function runSourceBuild() {
         });
     });
 }
-/**
- * Spawn the restart monitor and confirm it actually reached its own code.
- *
- * The daemon is already stopped at this point, so a monitor that dies on
- * startup leaves nothing running and nobody watching — the exact silent
- * failure this mechanism exists to prevent.
- */
-async function spawnRestartMonitorAndConfirm(monitorEntry, reportLine) {
-    const result = await platform.launchMonitorAndConfirm([...monitorEntry.args, 'restart-monitor'], { EVOLCORE_HOME: resolvePaths().root, ...(monitorEntry.env ?? {}) }, pid => scanInstances().restartMonitors.some(m => m.alive && m.record.pid === pid), pid => scanInstances().restartMonitors.some(m => m.alive && m.record.pid !== pid));
-    if (result.ok)
-        return { ok: true };
-    for (const line of (result.stderrTail ?? '').split(/\r?\n/).filter(Boolean).slice(-8)) {
-        reportLine(`  | ${line}`);
-    }
-    return { ok: false, reason: result.reason ?? 'unknown' };
-}
 async function requireFreshSourceBuild() {
     if (!sourceBuildNeedsRefresh())
         return true;
     return await runSourceBuild();
 }
-function requireCompletedDataMigration(root, action = 'start') {
+async function launchPackageLifecycle(source, log, options = {}) {
+    if (!options.prepared)
+        await ensureFreshPackageVersionInfo(undefined, { source, log });
+    const root = resolvePaths().root;
+    const launch = platform.resolveMonitorLaunch(getPackageRoot(), path.join(root, 'data', 'monitor-stage'));
+    if (launch.note)
+        log(launch.note);
+    if (!fs.existsSync(launch.entry)) {
+        if (launch.stageDir)
+            platform.cleanupMonitorStage(launch.stageDir);
+        return { ok: false, reason: 'RESTART_ENTRY_MISSING' };
+    }
+    const args = [...launch.args, 'restart-monitor', ...(options.clear ? ['--clear'] : [])];
+    const env = { ...options.env, [RUNTIME_HOME_ENV]: root, ...launch.env, [AGENT_DELEGATION_TOKEN_ENV]: '' };
+    if (options.foreground) {
+        return new Promise(resolve => {
+            const child = spawn(process.execPath, [...args, '--foreground'], {
+                stdio: 'inherit', detached: false, windowsHide: true, env: { ...process.env, ...env },
+            });
+            child.once('error', () => {
+                if (launch.stageDir)
+                    platform.cleanupMonitorStage(launch.stageDir);
+                resolve({ ok: false, reason: 'Foreground monitor could not start' });
+            });
+            child.once('exit', code => {
+                process.exitCode = code ?? 1;
+                resolve({ ok: code === 0, ...(code !== 0 ? { reason: 'Foreground lifecycle exited unsuccessfully' } : {}) });
+            });
+        });
+    }
+    const result = await platform.launchMonitorAndConfirm(args, env, pid => scanInstances().restartMonitors.some(item => item.alive && item.record.pid === pid), pid => scanInstances().restartMonitors.some(item => item.alive && item.record.pid !== pid));
+    if (!result.ok && launch.stageDir)
+        platform.cleanupMonitorStage(launch.stageDir);
+    return { ok: result.ok, ...(!result.ok ? { reason: result.reason } : {}) };
+}
+function requireCompletedDataMigration(root) {
     const requirement = inspectDataMigrationRequirement(root);
     if (!requirement.required)
         return true;
-    console.error(action === 'restart'
-        ? `❌ 检测到 ${requirement.operationCount} 项待确认的用户数据迁移，本次不停止当前服务。`
-        : `❌ 检测到 ${requirement.operationCount} 项待确认的用户数据迁移，服务未启动。`);
+    console.error(`❌ 检测到 ${requirement.operationCount} 项待确认的用户数据迁移，服务未启动。`);
     console.error('  先执行: ec data migrate --dry-run');
     console.error('  确认后: ec data migrate --apply');
-    console.error('  迁移成功并校验后，再执行 ec start 或 ec restart。');
-    if (action === 'restart')
-        console.error('  本次 ec restart 仅完成只读检查，未停止当前服务。');
+    console.error('  迁移成功并校验后，再执行 ec start。');
     process.exitCode = 2;
     return false;
 }
@@ -291,7 +307,11 @@ function requireCompletedDataMigration(root, action = 'start') {
  * A failed upgrade is reported, but the currently installed version remains
  * usable and the caller continues with its normal lifecycle.
  */
-export async function runUpgradeChecks(upgradeFn = signal => tryUpgrade({ signal }), ecwebUpgradeFn = signal => tryUpgradeGlobalPkg(() => resolveGlobalPkg(WEB_PACKAGE_NAME), WEB_PACKAGE_NAME, { signal }), timeoutMs = 60_000) {
+export async function runUpgradeChecks(upgradeFn, ecwebUpgradeFn, timeoutMs = 60_000) {
+    if (!upgradeFn || !ecwebUpgradeFn) {
+        await ensureFreshPackageVersionInfo(undefined, { source: 'start', log: console.log });
+        return;
+    }
     console.log('📦 Checking for updates...');
     const runWithTimeout = async (label, fn) => {
         const controller = new AbortController();
@@ -470,7 +490,9 @@ export async function cmdStart(opts = {}) {
         return;
     // A stopped container may miss the daily upgrade trigger. Check once on
     // every real start so the service does not stay on an old installation.
-    await (opts.upgradeChecks ?? runUpgradeChecks)();
+    const versionInfo = await ensureFreshPackageVersionInfo(undefined, { source: 'start', log: console.log });
+    if (opts.upgradeChecks)
+        await opts.upgradeChecks();
     // 旧配置自动迁移（daemon.json → 新结构）
     const { autoMigrateIfNeeded } = await import('../config-store.js');
     autoMigrateIfNeeded();
@@ -595,6 +617,20 @@ export async function cmdStart(opts = {}) {
         return;
     }
     reportOrphans(orphans);
+    if (versionInfo.some(result => result.hasUpdate)) {
+        cleanEnv();
+        const launched = await launchPackageLifecycle('start', console.log, {
+            prepared: true, foreground: opts.foreground, env: buildDaemonEnv(p, opts),
+        });
+        if (!launched.ok) {
+            console.error(`❌ 启动事务未能建立：${launched.reason}`);
+            process.exitCode = 1;
+        }
+        else if (!opts.foreground) {
+            console.log('📦 已交由 restart-monitor 应用缓存版本并启动服务');
+        }
+        return;
+    }
     console.log('🚀 Starting EvolCore...');
     const stdoutRotation = rotateStdoutLog(p.logs);
     if (stdoutRotation.rotatedPath) {
@@ -883,126 +919,17 @@ export async function cmdRestart(opts = {}) {
         if (initialRuntimeOrphans.length === 0 && rejectPidIsolatedLifecycle('restart', initialStatus, ping))
             return;
     }
-    // 构建交给 restart-monitor：它在 daemon 停止之后才编译，dist/ 不会被活进程
-    // 占用，失败还能回滚到上一份产物。这里再编译一次会落在事务保护之外。
-    // restart-monitor owns upgrade checks. Running them here as well caused a
-    // normal restart to perform every registry lookup twice, and in installed
-    // mode could race the monitor while it was preparing its rollback point.
-    if (!requireCompletedDataMigration(resolveRoot(), 'restart'))
-        return;
-    // 停止所有活 main 进程（可能不止一个）
-    const status = initialStatus;
-    const aliveMains = status.mains.filter(m => m.alive);
-    if (aliveMains.length > 0) {
-        if (aliveMains.length > 1) {
-            console.log(`⚠ 检测到 ${aliveMains.length} 个 main 实例，将一并停止: ${aliveMains.map(m => m.record.pid).join(', ')}`);
-        }
-        const mainPids = new Set(aliveMains.map(entry => entry.record.pid));
-        const currentPing = await probeDaemon(socketPath);
-        const gracefulPid = currentPing && mainPids.has(currentPing.pid)
-            ? await requestDaemonShutdown(socketPath, DAEMON_SHUTDOWN_TIMEOUT_MS, 'ec restart', mainPids)
-            : null;
-        const stopped = await Promise.all(aliveMains.map(m => stopPid(m.record.pid, m.record.pid === gracefulPid, m.record.startedAt)));
-        if (stopped.some(result => !result)) {
-            console.error('❌ Restart aborted because an existing EvolCore process could not be stopped');
-            process.exitCode = 1;
-            return;
-        }
-        await sleep(500);
-    }
-    cleanupInstances();
-    const remainingMainProcesses = scanInstances().mains.filter(entry => entry.alive);
-    if (remainingMainProcesses.length > 0) {
-        console.error(`❌ Restart aborted: EvolCore process still registered and alive (PID: ${remainingMainProcesses.map(entry => entry.record.pid).join(', ')})`);
+    // The shared launchPackageLifecycle path delegates to launchMonitorAndConfirm;
+    // the monitor retains shutdown, orphan checks, build and rollback ownership.
+    // restart-monitor performs the read-only preflight before stopping the
+    // current daemon, then applies the migration during the stopped window.
+    const launched = await launchPackageLifecycle('restart', console.log, { clear: opts.clear });
+    if (!launched.ok) {
+        console.error(`❌ 重启中止：restart-monitor 未能启动（${launched.reason}）；当前服务未主动停止`);
         process.exitCode = 1;
         return;
     }
-    // 孤儿处理：同 HOME/同安装包的孤儿属于本运行时，先确认退出再替换；
-    // 跨 HOME 的孤儿只在 --clear 时 kill，否则仅警告。findOrphanProcesses
-    // 在 Windows 上需要一次 CIM 查询；保留一个快照，避免同一阶段重复扫描。
-    {
-        const orphans = findOrphanProcesses();
-        const confirmedTestDaemons = orphans.filter(o => o.confirmedTestDaemon);
-        if (confirmedTestDaemons.length > 0) {
-            const killed = killOrphans(confirmedTestDaemons);
-            console.log(`☠ 已清理 ${killed.length} 个泄漏的测试 daemon: ${killed.join(', ')}`);
-            await sleep(500);
-        }
-        const runtimeOrphans = orphans.filter(o => isRuntimeOrphan(o));
-        if (runtimeOrphans.length > 0) {
-            console.log(`⚠ 检测到未登记的 EvolCore 进程，将一并停止: ${runtimeOrphans.map(o => o.pid).join(', ')}`);
-            const orphanPids = new Set(runtimeOrphans.map(orphan => orphan.pid));
-            const currentPing = await probeDaemon(socketPath);
-            const gracefulPid = currentPing && orphanPids.has(currentPing.pid)
-                ? await requestDaemonShutdown(socketPath, DAEMON_SHUTDOWN_TIMEOUT_MS, 'ec restart', orphanPids)
-                : null;
-            const stopped = await Promise.all(runtimeOrphans.map(o => stopPid(o.pid, o.pid === gracefulPid)));
-            if (stopped.some(result => !result)) {
-                console.error('❌ Restart aborted because an unregistered EvolCore process could not be stopped');
-                process.exitCode = 1;
-                return;
-            }
-            await sleep(500);
-        }
-        // stopPid() already waited for every runtime orphan above, so avoid a
-        // second scan before handling cross-HOME records.
-        const otherHome = orphans.filter(o => !o.confirmedTestDaemon && !isRuntimeOrphan(o));
-        if (opts.clear && otherHome.length > 0) {
-            const killed = killOrphans(otherHome);
-            console.log(`☠ 已 SIGKILL ${killed.length} 个跨 HOME 孤儿进程: ${killed.join(', ')}`);
-            await sleep(500);
-        }
-        else if (otherHome.length > 0) {
-            reportOrphans(otherHome);
-        }
-        // Keep the post-stop ownership guard: a process that appeared during the
-        // cleanup window must still block replacement.
-        const remainingRuntimeOrphans = findOrphanProcesses().filter(o => isRuntimeOrphan(o));
-        if (remainingRuntimeOrphans.length > 0) {
-            console.error(`❌ Restart aborted: EvolCore process still running (PID: ${remainingRuntimeOrphans.map(o => o.pid).join(', ')})`);
-            process.exitCode = 1;
-            return;
-        }
-    }
-    // 只清理 EvolCore 自己登记的 codex app-server，不能影响桌面端实例。
-    {
-        const killed = stopCodexAppServerOrphans();
-        if (killed > 0) {
-            console.log(`☠ 已清理 ${killed} 个 EvolCore codex app-server 孤儿进程`);
-            await sleep(500);
-        }
-    }
-    console.log(`⏱ restart prep done in ${((Date.now() - cmdStartedAt) / 1000).toFixed(1)}s, starting...`);
-    // 通过 restart-monitor 启动，避免在 agent 内调用时自杀。
-    // 开发仓下 monitor 从源码跑；安装包下先复制到 stage 目录，两种情况都让看门狗
-    // 不住在会被替换的产物里。
-    const monitorEntry = platform.resolveMonitorLaunch(getPackageRoot(), path.join(resolvePaths().root, 'data', 'monitor-stage'));
-    if (monitorEntry.note)
-        console.log(`ℹ ${monitorEntry.note}`);
-    if (!fs.existsSync(monitorEntry.entry)) {
-        console.error(`❌ 重启中止：找不到 restart-monitor 入口 ${monitorEntry.entry}`);
-        console.error('  请先执行 npm run build 重建产物');
-        process.exitCode = 1;
-        return;
-    }
-    const monitorStarted = await spawnRestartMonitorAndConfirm(monitorEntry, log => console.error(log));
-    if (!monitorStarted.ok) {
-        if (monitorEntry.stageDir)
-            platform.cleanupMonitorStage(monitorEntry.stageDir);
-        console.error(`❌ 重启中止：restart-monitor 未能启动（${monitorStarted.reason}）`);
-        if (fs.existsSync(path.join(getPackageRoot(), 'src', 'cli', 'index.ts'))) {
-            console.error('  源码可能存在语法错误导致 tsx 无法加载。请执行 npx tsc --noEmit 检查。');
-        }
-        console.error('  服务已停止，请修复后执行 ec start。');
-        process.exitCode = 1;
-        return;
-    }
-    console.log('🔄 Restart monitor started; service is coming back online in the background...');
-    // 代码统计（开发环境）
-    if (path.normalize(resolveRoot()) === path.normalize(getPackageRoot())) {
-        console.log('');
-        printCodeStats(getPackageRoot(), resolvePaths().logs);
-    }
+    console.log(`🔄 Restart monitor started (${((Date.now() - cmdStartedAt) / 1000).toFixed(1)}s); service is restarting...`);
 }
 function normalizeRuntimePath(value) {
     return value.replace(/[\\/]+/g, '/').toLowerCase();
@@ -1310,8 +1237,13 @@ export async function cmdStatus() {
         console.log('  请稍后再次执行 ec status。');
     }
     else {
-        console.log(ipcFailure ? '⚠ 无法确认 EvolCore 运行状态：IPC 不可用，且没有可见的存活 PID。' : '⚠ EvolCore is not running');
-        if (ipcFailure)
+        // With no live main/monitor, a missing Windows pipe is the normal stopped
+        // state. Preserve uncertainty for permissions, timeouts, unknown errors,
+        // and Unix callers that may be isolated from the daemon's PID namespace.
+        const stopped = !ipcFailure || (platform.isWindows && ipcFailure instanceof IpcTransportError
+            && ['ENOENT', 'ECONNREFUSED'].includes(ipcFailure.code));
+        console.log(stopped ? '⚠ EvolCore is not running' : '⚠ 无法确认 EvolCore 运行状态：IPC 不可用，且没有可见的存活 PID。');
+        if (!stopped && ipcFailure)
             console.log(`  ${ipcFailure instanceof Error ? ipcFailure.message : String(ipcFailure)}`);
     }
     // Session & Project statistics (从文件系统读)
@@ -1872,6 +1804,7 @@ async function cmdWatchMenu() {
         { key: 'log', label: 'log', desc: 'real-time log tail' },
         { key: 'aid', label: 'aid', desc: 'AID connection stats' },
         { key: 'msg', label: 'msg', desc: 'message inspector' },
+        { key: 'diag', label: 'diag', desc: 'message lifecycle diagnostics (AUN→queue→task)' },
         { key: 'web', label: 'web', desc: 'browser dashboard (aid/msg/session)' },
     ];
     let index = 0;
@@ -1936,6 +1869,10 @@ async function cmdWatchMenu() {
                     const { cmdWatchMsg } = await import('./watch-msg.js');
                     await cmdWatchMsg();
                 }
+                else if (chosen === 'diag') {
+                    const { cmdWatchMsgDiag } = await import('./watch-msg-diag.js');
+                    await cmdWatchMsgDiag([]);
+                }
                 else if (chosen === 'web') {
                     await cmdWatchWeb();
                 }
@@ -3358,6 +3295,36 @@ export async function cmdWatchCommand(args) {
         const { cmdWatchMsg } = await import('./watch-msg.js');
         await cmdWatchMsg();
     }
+    else if (args[0] === 'diag' || args[0] === 'msg-diag') {
+        if (isHelpFlag(args[1])) {
+            console.log(`用法: ec watch diag
+
+实时诊断消息生命周期，从 AUN SDK 入站到 daemon 处理全过程。
+
+显示内容:
+  ✓ AUN入站      消息到达 AUN SDK
+  → 队列入队     消息进入 daemon 队列
+  ⚡ 任务创建     daemon 创建处理任务
+  ✓ 任务完成     任务处理完成
+  ← AUN出站      回复消息发送
+
+每条消息显示:
+  - 时间戳（精确到毫秒）
+  - 阶段标识
+  - AID（前12字符）
+  - 消息ID
+  - 内容预览（前50字符）
+
+用途:
+  排查消息丢失、处理延迟、队列阻塞等问题
+
+操作:
+  Ctrl+C         退出`);
+            return;
+        }
+        const { cmdWatchMsgDiag } = await import('./watch-msg-diag.js');
+        await cmdWatchMsgDiag(args.slice(1));
+    }
     else if (args[0] === 'log' || args[0] === 'logs') {
         const requested = args.slice(1);
         if (requested.length > 0) {

package/dist/cli/data-command.js

@@ -99,7 +99,7 @@ export async function cmdData(args) {
         // when there is no legacy source to process.
         const existing = requestedId ? readDataMigration(root, requestedId) : undefined;
         let manifest = existing ?? planDataMigration(root);
-        if (manifest.operations.length === 0 && Object.keys(manifest.supersededSourceHashes ?? {}).length === 0) {
+        if (manifest.operations.length === 0) {
             printSummary(manifest);
             console.log('No legacy data requires migration.');
             return;
@@ -119,9 +119,6 @@ export async function cmdData(args) {
                 manifest = applyDataMigration(manifest);
                 manifest = verifyDataMigration(manifest, { strictTargetContent: true });
                 printSummary(manifest);
-                if (manifest.state !== 'completed') {
-                    throw new Error(`migration is not fully verified; fix the listed operations and run ec data migrate --apply ${manifest.id}`);
-                }
             }
             else {
                 // A completed manifest may come from the previous copy-only workflow,
@@ -133,6 +130,9 @@ export async function cmdData(args) {
             console.log(`archive: ${finalization.archivePath}`);
             console.log(`archive-sha256: ${finalization.archiveSha256}`);
             console.log(`removed legacy sources: ${finalization.sourcePaths.length}`);
+            if (manifest.state !== 'completed') {
+                throw new Error(`migration is not fully verified; fix the listed operations and run ec data migrate --apply ${manifest.id}`);
+            }
             if (wasRunning) {
                 console.log('Starting daemon and Agent runtimes after data migration...');
                 await cmdStart();

package/dist/cli/diag.js

@@ -5,7 +5,7 @@ import { parseDiagArgs } from '../core/command/diag-service.js';
 import { wantsHelp } from './help.js';
 export async function cmdDiag(args) {
     if (wantsHelp(args)) {
-        console.log('用法：ec diag <问题描述> [--owner <daemonOwner-aid>] [--format json]\n      ec diag stop [--format json]\n未指定 --owner 时联系本机 daemon.json.owners[0]。');
+        console.log('用法：ec diag <问题描述> [--owner <daemonOwner-aid>] [--format json]\n      ec diag stop [--format json]\n未指定 --owner 时联系本机 daemon.json.owners[0]；有效诊断期间再次执行会追加到原 case。');
         return;
     }
     const json = args.at(-2) === '--format' && args.at(-1) === 'json';

package/dist/cli/handoff-command.js

@@ -5,6 +5,7 @@ import { HANDOFF_QUERY_DEFAULT_LIMIT, HANDOFF_QUERY_MAX_LIMIT, HANDOFF_STATES }
 import { HANDOFF_ID_RE } from '../core/handoff/store.js';
 import { isHelpFlag, wantsHelp } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
+import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
 function parseLimit(value) {
     const limit = Number(value);
     if (!value || !Number.isInteger(limit) || limit < 1 || limit > HANDOFF_QUERY_MAX_LIMIT) {
@@ -70,6 +71,7 @@ export function parseTrace(args) {
     return parsed;
 }
 export function parseReturn(args) {
+    args = canonicalizeEvolcoreCommandArgv(['ec', 'handoff', 'return', ...args]).slice(3);
     const dash = args.indexOf('--');
     if (dash >= 0) {
         const beforeDash = args.slice(0, dash);

package/dist/cli/index.js

@@ -14,6 +14,7 @@ import { cmdRestartMonitor } from './restart-monitor.js';
 import { cmdAid, cmdRpc, cmdStorage, cmdMsg, cmdGroup } from './aun-commands.js';
 import { cmdAgent } from './agent-command.js';
 import { cmdCtl } from './ctl-command.js';
+import { cmdMemory } from './memory-command.js';
 import { cmdQueue } from './queue-command.js';
 import { cmdStart, cmdStop, cmdRestart, cmdStatus, cmdLogs, cmdWatchCommand, cmdMv, cmdDiagnose } from './daemon-commands.js';
 import { logCliCommand } from './command-log.js';
@@ -80,7 +81,7 @@ function printLifecycleHelp(command) {
         restart: `用法: ec restart [--clear] [--diagnose|-d]\n\n  --clear        同时清理跨 HOME 残留的 EvolCore 主进程\n  --diagnose, -d 以诊断模式启动新 daemon`,
         status: '用法: ec status\n\n查看 daemon、agent、渠道与会话运行状态。',
         logs: `用法: ec logs [选项]\n\n  --level <error|warn|info|debug>  最低日志级别\n  --module <name>                  只显示指定模块\n  --raw                            原始输出\n  --no-color                       禁用颜色`,
-        watch: `用法: ec watch [logs|log|aid|msg|web|session]\n\n  ec watch                 打开监控选择菜单\n  ec watch logs            选择日志类型后监控\n  ec watch log <类型...>   直接监控指定日志类型\n  ec watch aid             监控 AID 连接\n  ec watch msg             打开消息 TUI\n  ec watch web             安装/升级并启动 EC Web\n  ec watch session         ec watch web 的兼容别名`,
+        watch: `用法: ec watch [logs|log|aid|msg|diag|web|session]\n\n  ec watch                 打开监控选择菜单\n  ec watch logs            选择日志类型后监控\n  ec watch log <类型...>   直接监控指定日志类型\n  ec watch aid             监控 AID 连接\n  ec watch msg             打开消息 TUI\n  ec watch diag            实时诊断消息生命周期（AUN→daemon→任务）\n  ec watch web             安装/升级并启动 EC Web\n  ec watch session         ec watch web 的兼容别名`,
         'restart-monitor': '用法: ec restart-monitor\n\n运行内 daemon 重启与升级监控器。',
         diagnose: '用法: ec diagnose [--codex-hook]\n\n检查配置、数据库、进程和编译产物。\n\n  --codex-hook 运行 Windows Codex managed hook 启动探针。',
         mv: '用法: ec mv <old-directory> <new-directory>\n\n迁移项目目录以及 Claude、Codex 和 EvolCore 会话路径。',
@@ -92,6 +93,14 @@ process.removeAllListeners('warning');
 process.on('warning', (w) => { if (w.name === 'ExperimentalWarning')
     return; process.stderr.write((w.stack ?? String(w)) + '\n'); });
 export async function main(args) {
+    // 托管任务里裸跑 `ec` 想问的是"有哪些命令"，而不是要启动 daemon。
+    // 默认回落到 `start` 会让守卫抛出 "Command start is not available"，
+    // 把用户引向进程生命周期，而真实意图是查用法。这里直接给帮助。
+    if (args.length === 0 && process.env.EVOLCORE_SESSION_ID) {
+        console.log(MAIN_HELP);
+        process.exitCode = 1;
+        return;
+    }
     const cmd = args[0] || 'start';
     try {
         assertManagedTopLevelCommandAllowed(cmd, args);
@@ -326,6 +335,9 @@ export async function main(args) {
         case 'ctl':
             await cmdCtl(args.slice(1));
             break;
+        case 'memory':
+            await cmdMemory(args.slice(1));
+            break;
         case 'queue':
             await cmdQueue(args.slice(1));
             break;
@@ -417,6 +429,11 @@ export async function main(args) {
             await cmdModel(args.slice(1));
             break;
         }
+        case 'skill': {
+            const { cmdSkill } = await import('./skill-command.js');
+            await cmdSkill(args.slice(1));
+            break;
+        }
         case 'response': {
             const { cmdResponse } = await import('./response.js');
             await cmdResponse(args.slice(1));

package/dist/cli/managed-command-guard.js

@@ -11,10 +11,20 @@ const MANAGED_TASK_COMMANDS = new Set([
     'fs',
     'group',
     'handoff',
+    // `memory` only works inside a managed task: both subcommands require
+    // EVOLCORE_SESSION_ID and authorize through their daemon IPC entrypoints.
+    'memory',
     'model',
     'msg',
     'queue',
     'response',
+    // `skill` 管理 EC 技能（安装/开关/校验）。它的主要使用者就是 agent 自己——
+    // ec-skill 技能的 SKILL.md 明确指导 agent 调用它。脚本只读写
+    // $EVOLCORE_HOME/skills/ 与 kits/skills/ 下的技能文件，不触碰进程生命周期。
+    // 本白名单只负责让它进到脚本；具体某一级的读写权限由 skill.mjs 的
+    // assertPermission() 按会话上下文判定（群聊一律拒，Agent 级要 owner，
+    // 本机级要 daemonowner），故此处不额外收紧。
+    'skill',
     // `stats` reads the usage database directly. It authorizes each managed call
     // against the task's relation role in `resolveManagedStatsScope`.
     'stats',