evolcore 0.0.31 → 0.0.32

package/dist/cli/memory-command.js

@@ -15,6 +15,7 @@ import { resolvePaths } from '../paths.js';
 import { ipcQuery } from '../ipc.js';
 import { isHelpFlag, wantsHelp } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
+import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
 export const MEMORY_MODES = ['notes', 'generalize', 'promote', 'profile', 'forget'];
 const MEMORY_HELP = `用法: ec memory <command> [选项]
 
@@ -63,6 +64,7 @@ ec memory consolidate [--mode <notes|generalize|promote|profile|forget>]
   ec memory update consolidated/commit-convention.md --tags "rule,done"
   ec memory archive consolidated/obsolete.md`;
 export async function cmdMemory(args) {
+    args = canonicalizeEvolcoreCommandArgv(['ec', 'memory', ...args]).slice(2);
     if (args.length === 0 || isHelpFlag(args[0]) || wantsHelp(args)) {
         console.log(MEMORY_HELP);
         return;
@@ -99,13 +101,15 @@ export async function cmdMemory(args) {
  * 解析 `--key value` 与位置参数。未识别的 `--xxx` 一律报错，避免静默忽略。
  * `--debug <sessionId>` 是所有子命令的公共参数，不用每处声明。
  */
-function parseArgs(args, known) {
+function parseArgs(args, known, throwOnUnknown = false) {
     const flags = new Map();
     const positional = [];
     for (let i = 0; i < args.length; i++) {
         const a = args[i];
         if (a.startsWith('--')) {
             if (a !== '--debug' && !known.includes(a)) {
+                if (throwOnUnknown)
+                    throw new Error(`未知参数: ${a}`);
                 console.error(`❌ 未知参数: ${a}`);
                 process.exit(1);
             }
@@ -128,6 +132,76 @@ function parseTags(raw) {
     const tags = raw.split(',').map(t => t.trim()).filter(Boolean);
     return tags.length > 0 ? tags : undefined;
 }
+export function resolveMemoryCommandArgv(argv) {
+    if (argv[0] !== 'memory')
+        throw new Error('Expected a memory command');
+    const noteSub = argv[1] === 'note' && ['update', 'drop', 'list'].includes(argv[2]) ? argv[2] : undefined;
+    const kind = noteSub ? `note.${noteSub}` : argv[1];
+    const known = {
+        note: ['--slug', '--tags', '--speakers'], 'note.update': ['--slug', '--tags'],
+        'note.drop': [], 'note.list': [], create: ['--scope', '--slug', '--desc', '--tags', '--keywords', '--replaces', '--peer'],
+        update: ['--tags', '--touch'], archive: [], demote: ['--scope'], consolidate: ['--mode'], feedback: [],
+    };
+    if (!Object.prototype.hasOwnProperty.call(known, kind))
+        throw new Error('Invalid memory command');
+    const { flags, positional } = parseArgs(argv.slice(noteSub ? 3 : 2), known[kind], true);
+    const required = (value, name) => {
+        if (!value)
+            throw new Error(`${name} is required`);
+        return value;
+    };
+    const content = positional.join(' ').trim();
+    const type = `memory.${kind}`;
+    if (kind === 'note')
+        return { type, slug: required(flags.get('--slug'), '--slug'), content: required(content, 'content'),
+            tags: parseTags(flags.get('--tags')), speakers: parseTags(flags.get('--speakers')) };
+    if (kind === 'note.update') {
+        const newContent = positional.slice(1).join(' ').trim();
+        if (!flags.get('--slug') && !flags.has('--tags') && !newContent)
+            throw new Error('No memory note changes supplied');
+        return { type, slug: required(positional[0], 'slug'), newSlug: flags.get('--slug'),
+            tags: parseTags(flags.get('--tags')), tagsProvided: flags.has('--tags'), content: newContent || undefined };
+    }
+    if (kind === 'note.drop')
+        return { type, slug: required(positional[0], 'slug') };
+    if (kind === 'note.list')
+        return { type };
+    if (kind === 'create') {
+        const scope = flags.get('--scope');
+        if (!scope || !['relation', 'agent', 'owner'].includes(scope))
+            throw new Error('Invalid memory scope');
+        if (!flags.has('--tags'))
+            throw new Error('--tags is required');
+        if (flags.has('--peer') && scope !== 'relation')
+            throw new Error('--peer requires relation scope');
+        return { type, scope, slug: required(flags.get('--slug'), '--slug'), description: required(flags.get('--desc'), '--desc'),
+            content: required(content, 'content'), tags: parseTags(flags.get('--tags')), keywords: parseTags(flags.get('--keywords')),
+            replaces: parseTags(flags.get('--replaces')), targetPeerKey: flags.get('--peer') };
+    }
+    if (kind === 'update') {
+        if (!flags.has('--tags') && !flags.has('--touch'))
+            throw new Error('No memory changes supplied');
+        return { type, filePath: required(positional[0], 'path'), tags: parseTags(flags.get('--tags')), touch: flags.has('--touch') };
+    }
+    if (kind === 'archive') {
+        if (!positional.length)
+            throw new Error('Memory paths are required');
+        return { type, filePaths: positional };
+    }
+    if (kind === 'demote') {
+        const scope = flags.get('--scope') ?? 'agent';
+        if (scope !== 'agent' && scope !== 'owner')
+            throw new Error('Invalid demotion scope');
+        return { type, slug: required(positional[0], 'slug'), scope };
+    }
+    if (kind === 'consolidate') {
+        const mode = flags.get('--mode') ?? 'notes';
+        if (!MEMORY_MODES.includes(mode))
+            throw new Error('Invalid consolidation mode');
+        return { type, mode };
+    }
+    return { type, text: required(content, 'feedback') };
+}
 /** 各子命令的一行完整用法：缺参报错时附上，模型照抄即可重试。 */
 const USAGE = {
     note: 'ec memory note --slug <slug> [--tags <tag1,tag2>] [--speakers <aid1,aid2>] "<正文>"',
@@ -193,7 +267,7 @@ async function cmdMemoryNoteCreate(args) {
         failWithUsage('必须提供记忆内容（content）', USAGE.note);
     const { socketPath, ...session } = requireManagedSession('ec memory note', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.note', ...session, slug, content, tags,
+        type: 'memory.note', argv: ['memory', 'note', ...args], ...session, slug, content, tags,
         speakers: speakers && speakers.length > 0 ? speakers : undefined,
     }, 15_000);
     reportResult(result, (r) => {
@@ -215,7 +289,7 @@ async function cmdMemoryNoteUpdate(args) {
     }
     const { socketPath, ...session } = requireManagedSession('ec memory note update', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.note.update', ...session, slug,
+        type: 'memory.note.update', argv: ['memory', 'note', 'update', ...args], ...session, slug,
         newSlug, tags, tagsProvided: tagsRaw !== undefined,
         content: content || undefined,
     }, 15_000);
@@ -231,7 +305,7 @@ async function cmdMemoryNoteDrop(args) {
         failWithUsage('必须提供要撤销的 slug', USAGE.noteDrop);
     const { socketPath, ...session } = requireManagedSession('ec memory note drop', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.note.drop', ...session, slug,
+        type: 'memory.note.drop', argv: ['memory', 'note', 'drop', ...args], ...session, slug,
     }, 15_000);
     reportResult(result, (r) => {
         console.log(`✓ 已撤销: ${r.filePath ?? slug}`);
@@ -241,7 +315,7 @@ async function cmdMemoryNoteList(args) {
     const { flags } = parseArgs(args, []);
     const { socketPath, ...session } = requireManagedSession('ec memory note list', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.note.list', ...session,
+        type: 'memory.note.list', argv: ['memory', 'note', 'list', ...args], ...session,
     }, 15_000);
     reportResult(result, (r) => {
         const notes = r.notes ?? [];
@@ -286,7 +360,7 @@ async function cmdMemoryCreate(args) {
     }
     const { socketPath, ...session } = requireManagedSession('ec memory create', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.create', ...session, scope, slug, description: desc,
+        type: 'memory.create', argv: ['memory', 'create', ...args], ...session, scope, slug, description: desc,
         content,
         tags: parseTags(tagsRaw),
         keywords: parseTags(keywordsRaw),
@@ -312,7 +386,7 @@ async function cmdMemoryConsolidatedUpdate(args) {
         failWithUsage('至少提供 --tags 或 --touch', USAGE.update);
     const { socketPath, ...session } = requireManagedSession('ec memory update', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.update', ...session, filePath,
+        type: 'memory.update', argv: ['memory', 'update', ...args], ...session, filePath,
         tags: parseTags(tagsRaw), touch,
     }, 15_000);
     reportResult(result, () => {
@@ -325,7 +399,7 @@ async function cmdMemoryArchive(args) {
         failWithUsage('必须提供至少一个要归档的文件路径', USAGE.archive);
     const { socketPath, ...session } = requireManagedSession('ec memory archive', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.archive', ...session, filePaths: positional,
+        type: 'memory.archive', argv: ['memory', 'archive', ...args], ...session, filePaths: positional,
     }, 15_000);
     reportResult(result, (r) => {
         const archived = r.archived ?? positional;
@@ -353,7 +427,7 @@ async function cmdMemoryDemote(args) {
     }
     const { socketPath, ...session } = requireManagedSession('ec memory demote', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.demote', ...session, slug, scope,
+        type: 'memory.demote', argv: ['memory', 'demote', ...args], ...session, slug, scope,
     }, 15_000);
     reportResult(result, (r) => {
         if (r.conflictArchived) {
@@ -385,7 +459,7 @@ async function cmdMemoryConsolidate(args) {
     const { socketPath, ...session } = requireManagedSession('ec memory consolidate', flags);
     console.log(`正在触发记忆整理（mode=${mode}）...`);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.consolidate', ...session, mode,
+        type: 'memory.consolidate', argv: ['memory', 'consolidate', ...args], ...session, mode,
     }, 30_000);
     reportResult(result, (r) => {
         console.log(`✓ 整理会话已启动（${mode} 模式）`);
@@ -418,7 +492,7 @@ async function cmdMemoryFeedback(args) {
     }
     const { socketPath, ...session } = requireManagedSession('ec memory feedback', flags);
     const result = await ipcQuery(socketPath, {
-        type: 'memory.feedback', ...session, text,
+        type: 'memory.feedback', argv: ['memory', 'feedback', ...args], ...session, text,
     }, 15_000);
     reportResult(result, () => {
         console.log('✓ 已记录反馈内容');

package/dist/cli/model.js

@@ -19,10 +19,8 @@ import { resolvePaths } from '../paths.js';
 import { ipcQuery } from '../ipc.js';
 import { parsePeerKey } from '../core/relation/peer-identity.js';
 import { resolvePeerRoleDetail } from '../config/peer-role-resolver.js';
-import { getFieldPermission } from '../config/roles.js';
 import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { formatModelCheck, runModelCheck } from '../core/model/model-diagnostics.js';
-import { validateRuntimeStringFieldOverride } from '../core/role/runtime-policy.js';
 const ALL_EFFORTS = ['none', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'auto'];
 const SCOPE_LABEL = {
     global: '全局', agent: 'agent级', role: '角色级', relation: '关系级',
@@ -45,29 +43,21 @@ function fail(formatJson, code, message, data) {
     }
     process.exit(1);
 }
-function isManagedSessionEnv(args) {
-    void args;
-    return !!process.env.EVOLCORE_SESSION_ID;
-}
-function isManagedTargetedWriteEnv(args) {
-    return !!process.env.EVOLCORE_SESSION_ID
-        && !isManagedSessionEnv(args);
-}
-async function runCtlCommand(cmd, formatJson, timeoutMs = 10_000) {
+async function runManagedCliOperation(args, formatJson, timeoutMs = 10_000) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     if (!sessionId)
         fail(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID 未设置');
-    const result = await ipcQuery(resolvePaths().socket, {
-        type: 'ctl',
-        cmd,
-        sessionId,
-        delegationToken: readDelegationCredential(),
+    const delegationToken = readDelegationCredential();
+    if (!delegationToken)
+        fail(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} 未设置`);
+    const response = await ipcQuery(resolvePaths().socket, {
+        type: 'ctl', argv: args, sessionId, delegationToken,
     }, timeoutMs);
-    if (!result)
+    if (!response)
         fail(formatJson, 'DAEMON_UNAVAILABLE', '无法连接 evolcore 服务');
-    if (!result.ok)
-        fail(formatJson, 'CTL_FAILED', result.error || 'ctl 执行失败');
-    return { text: String(result.result || ''), data: result.data };
+    if (!response.ok)
+        fail(formatJson, response.code || 'CTL_FAILED', response.error || '命令执行失败');
+    printCtlResult({ text: response.result || '', data: response.data }, formatJson);
 }
 function printCtlResult(result, formatJson) {
     if (formatJson) {
@@ -76,56 +66,6 @@ function printCtlResult(result, formatJson) {
     }
     console.log(result.text);
 }
-async function runManagedConfigOperation(args, formatJson) {
-    const sessionId = process.env.EVOLCORE_SESSION_ID;
-    if (!sessionId)
-        fail(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID 未设置');
-    const delegationToken = readDelegationCredential();
-    if (!delegationToken) {
-        fail(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} 未设置`);
-    }
-    let response;
-    try {
-        response = await ipcQuery(resolvePaths().socket, {
-            type: 'config.op',
-            argv: ['config', ...args],
-            sessionId,
-            delegationToken,
-        }, 10_000);
-    }
-    catch {
-        response = null;
-    }
-    if (!response)
-        fail(formatJson, 'DAEMON_UNAVAILABLE', '无法连接 evolcore 服务');
-    if (!response.ok || !response.result?.ok) {
-        fail(formatJson, response.code || 'CONFIG_AUTH_FAILED', response.error || 'config 操作失败', response.data);
-    }
-}
-function configSelectorArgs(sel) {
-    const args = ['--self', sel.self];
-    if (sel.peerKey)
-        args.push('--peer', sel.peerKey);
-    return args;
-}
-async function setManagedModelField(sel, field, value, formatJson) {
-    const subcommand = value === null ? ['unset', field] : ['set', field, value];
-    await runManagedConfigOperation([...subcommand, ...configSelectorArgs(sel)], formatJson);
-}
-function preflightManagedFieldOverride(sel, role, field, value, formatJson) {
-    if (!role)
-        return;
-    const policy = getFieldPermission(role, field, sel.self);
-    if (policy?.allowOverride === false) {
-        fail(formatJson, 'ROLE_OVERRIDE_DISABLED', `Role ${role} cannot override ${field}`);
-    }
-    if (value === null)
-        return;
-    const decision = validateRuntimeStringFieldOverride({ selfAid: sel.self, role, field, value });
-    if (!decision.ok) {
-        fail(formatJson, decision.code || 'ROLE_VALUE_NOT_ALLOWED', decision.message || `Value ${value} is not allowed for ${field}`);
-    }
-}
 /**
  * 解析 --self / --peer 为作用域选择器。
  */
@@ -286,11 +226,6 @@ async function cmdList(args, formatJson) {
         console.log(HELP);
         return;
     }
-    if (isManagedSessionEnv(args)) {
-        const out = await runCtlCommand('/model list', formatJson);
-        printCtlResult(out, formatJson);
-        return;
-    }
     const sel = parseSelector(args, formatJson);
     const role = explicitOrDerivedRole(args, sel);
     const effectiveSel = selectorWithRole(sel, role);
@@ -337,11 +272,6 @@ async function cmdCurrent(args, formatJson) {
         console.log(HELP);
         return;
     }
-    if (isManagedSessionEnv(args)) {
-        const out = await runCtlCommand('/model current', formatJson);
-        printCtlResult(out, formatJson);
-        return;
-    }
     const sel = parseSelector(args, formatJson);
     const ba = activeBaseagent(sel.self);
     const role = explicitOrDerivedRole(args, sel);
@@ -372,11 +302,6 @@ async function cmdInfo(args, formatJson) {
     const modelId = args[1] && !args[1].startsWith('--') ? args[1] : undefined;
     if (!modelId)
         fail(formatJson, 'MISSING_MODEL_ID', 'info 需要 <model-id>');
-    if (isManagedSessionEnv(args)) {
-        const out = await runCtlCommand(`/model info ${modelId}`, formatJson);
-        printCtlResult(out, formatJson);
-        return;
-    }
     const sel = parseSelector(args, formatJson);
     const self = getArgValue(args, '--self');
     const info = await getModelInfo(modelId, self);
@@ -424,12 +349,6 @@ async function cmdUse(args, formatJson) {
     const modelId = args[1] && !args[1].startsWith('--') ? args[1] : undefined;
     if (!modelId)
         fail(formatJson, 'MISSING_MODEL_ID', 'use 需要 <model-id>');
-    if (isManagedSessionEnv(args)) {
-        const effort = getArgValue(args, '--effort');
-        const out = await runCtlCommand(`/model ${modelId}${effort ? ` ${effort}` : ''}`, formatJson);
-        printCtlResult(out, formatJson);
-        return;
-    }
     const sel = parseSelector(args, formatJson);
     const role = explicitOrDerivedRole(args, sel);
     const scope = determineWriteScope(sel, formatJson);
@@ -457,19 +376,6 @@ async function cmdUse(args, formatJson) {
         fail(formatJson, 'INVALID_EFFORT', `当前模型目录未声明支持推理强度: ${effort}`);
     }
     const effortVal = effort === 'auto' ? null : (effort ?? undefined);
-    if (isManagedTargetedWriteEnv(args)) {
-        if (effortVal !== undefined) {
-            const effortKey = 'effort';
-            preflightManagedFieldOverride(sel, role, `baseagents.${ba}.${effortKey}`, effortVal, formatJson);
-        }
-        await setManagedModelField(sel, `baseagents.${ba}.model`, modelId, formatJson);
-        if (effortVal !== undefined) {
-            const effortKey = 'effort';
-            await setManagedModelField(sel, `baseagents.${ba}.${effortKey}`, effortVal, formatJson);
-        }
-        describeWrite(scope, sel, modelId, effort ?? null, formatJson);
-        return;
-    }
     try {
         writeScope(scope, sel, ba, { model: modelId, effort: effortVal });
     }
@@ -491,11 +397,6 @@ async function cmdEffort(args, formatJson) {
     if (!ALL_EFFORTS.includes(level)) {
         fail(formatJson, 'INVALID_EFFORT', `无效推理强度: ${level}（${ALL_EFFORTS.join('/')})`);
     }
-    if (isManagedSessionEnv(args)) {
-        const out = await runCtlCommand(`/effort ${level}`, formatJson);
-        printCtlResult(out, formatJson);
-        return;
-    }
     const sel = parseSelector(args, formatJson);
     const scope = determineWriteScope(sel, formatJson);
     const ba = activeBaseagent(sel.self);
@@ -507,13 +408,6 @@ async function cmdEffort(args, formatJson) {
         if (!model || !catalogEfforts(cat, model, ba).includes(val))
             fail(formatJson, 'INVALID_EFFORT', `当前模型目录未声明支持推理强度: ${val}`);
     }
-    if (isManagedTargetedWriteEnv(args)) {
-        const effortKey = 'effort';
-        preflightManagedFieldOverride(sel, explicitOrDerivedRole(args, sel), `baseagents.${ba}.${effortKey}`, val, formatJson);
-        await setManagedModelField(sel, `baseagents.${ba}.${effortKey}`, val, formatJson);
-        describeWrite(scope, sel, null, level, formatJson);
-        return;
-    }
     try {
         writeScope(scope, sel, ba, { effort: val });
     }
@@ -529,26 +423,9 @@ async function cmdReset(args, formatJson) {
         console.log(HELP);
         return;
     }
-    if (isManagedSessionEnv(args)) {
-        const out = await runCtlCommand('/model reset', formatJson);
-        printCtlResult(out, formatJson);
-        return;
-    }
     const sel = parseSelector(args, formatJson);
     const scope = determineWriteScope(sel, formatJson);
     const ba = activeBaseagent(sel.self);
-    if (isManagedTargetedWriteEnv(args)) {
-        const effortKey = 'effort';
-        const role = explicitOrDerivedRole(args, sel);
-        preflightManagedFieldOverride(sel, role, `baseagents.${ba}.model`, null, formatJson);
-        preflightManagedFieldOverride(sel, role, `baseagents.${ba}.${effortKey}`, null, formatJson);
-        await setManagedModelField(sel, `baseagents.${ba}.model`, null, formatJson);
-        await setManagedModelField(sel, `baseagents.${ba}.${effortKey}`, null, formatJson);
-        emit(formatJson, {
-            ok: true, scope, self: sel.self ?? null, peerKey: sel.peerKey ?? null,
-        }, () => `✓ 已清除 ${SCOPE_LABEL[scope]} 设置，回落上一级（该范围所有会话下条消息生效）`);
-        return;
-    }
     try {
         clearScope(scope, sel, ba);
     }
@@ -568,11 +445,6 @@ async function cmdCheck(args, formatJson) {
         console.log(HELP);
         return;
     }
-    if (isManagedSessionEnv(args)) {
-        const out = await runCtlCommand('/model check', formatJson, 60_000);
-        printCtlResult(out, formatJson);
-        return;
-    }
     const sel = parseSelector(args, formatJson);
     const role = explicitOrDerivedRole(args, sel);
     const ba = activeBaseagent(sel.self);
@@ -609,5 +481,9 @@ export async function cmdModel(args) {
         && (getArgValue(args, '--self') || getArgValue(args, '--peer') || getArgValue(args, '--role'))) {
         fail(formatJson, 'NOT_ALLOWED', 'Managed model commands cannot select --self, --peer, or --role; they always use the authenticated current relation');
     }
+    if (process.env.EVOLCORE_SESSION_ID) {
+        await runManagedCliOperation(['model', ...args], formatJson, sub === 'check' ? 60_000 : 10_000);
+        return;
+    }
     await dispatch(sub, args, formatJson);
 }

package/dist/cli/queue-command.js

@@ -2,7 +2,9 @@ import { resolvePaths } from '../paths.js';
 import { ipcQuery } from '../ipc.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { getArgValue, isHelpFlag, wantsHelp } from './help.js';
+import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
 export async function cmdQueue(args) {
+    args = canonicalizeEvolcoreCommandArgv(['ec', 'queue', ...args]).slice(2);
     if (args.length === 0 || isHelpFlag(args[0]) || wantsHelp(args)) {
         console.log(`用法: ec queue --agent <aid> [选项]
 
@@ -91,6 +93,7 @@ JSON 时间字段:
     const managed = process.env.EVOLCORE_SESSION_ID;
     const result = await ipcQuery(socketPath, managed ? {
         type: 'queue.op',
+        argv: ['queue', ...args],
         agent,
         action,
         messageId: cancelMsgId,
@@ -147,6 +150,49 @@ function parseQueueTime(value, flag) {
     }
     return parsed;
 }
+export function parseQueueOperationArgv(argv) {
+    if (argv[0] !== 'queue')
+        throw new Error('Expected a queue command');
+    const flags = new Map();
+    const booleanFlags = new Set(['--clear', '--interrupt', '--showid', '--full']);
+    const valueFlags = new Set(['--agent', '--cancel', '--sessionkey', '--after', '--before', '--format']);
+    for (let index = 1; index < argv.length; index++) {
+        const flag = argv[index];
+        if (booleanFlags.has(flag))
+            flags.set(flag, 'true');
+        else if (valueFlags.has(flag) && argv[index + 1] && !argv[index + 1].startsWith('--'))
+            flags.set(flag, argv[++index]);
+        else
+            throw new Error(`Invalid queue option: ${flag}`);
+    }
+    const agent = flags.get('--agent');
+    if (!agent)
+        throw new Error('--agent is required');
+    if (flags.has('--format') && flags.get('--format') !== 'json')
+        throw new Error('--format only supports json');
+    if (['--clear', '--cancel', '--interrupt'].filter(flag => flags.has(flag)).length > 1)
+        throw new Error('Queue actions are mutually exclusive');
+    const time = (flag) => {
+        const value = flags.get(flag);
+        if (value === undefined)
+            return undefined;
+        const parsed = /^\d+$/.test(value) ? Number(value) : Date.parse(value);
+        if (!Number.isFinite(parsed))
+            throw new Error(`Invalid ${flag}`);
+        return parsed;
+    };
+    const after = time('--after');
+    const before = time('--before');
+    if (after !== undefined && before !== undefined && after >= before)
+        throw new Error('--after must precede --before');
+    if (flags.has('--interrupt') && !flags.get('--sessionkey'))
+        throw new Error('--interrupt requires --sessionkey');
+    return {
+        agent,
+        action: flags.has('--clear') ? 'clear' : flags.has('--cancel') ? 'cancel' : flags.has('--interrupt') ? 'interrupt' : undefined,
+        messageId: flags.get('--cancel'), sessionKey: flags.get('--sessionkey'), after, before,
+    };
+}
 function renderQueueItemsCli(items, showId, full, aid) {
     const lines = [`${aid} — 队列 (${items.length} 条)`, ''];
     if (items.length === 0) {

package/dist/cli/response.js

@@ -57,7 +57,7 @@ function fail(formatJson, code, message) {
     }
     process.exit(1);
 }
-async function managedConfig(fieldArgs, formatJson) {
+async function runManagedResponse(args, formatJson) {
     const sessionId = process.env.EVOLCORE_SESSION_ID;
     const delegationToken = readDelegationCredential();
     if (!sessionId)
@@ -65,62 +65,13 @@ async function managedConfig(fieldArgs, formatJson) {
     if (!delegationToken)
         fail(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set`);
     const response = await ipcQuery(resolvePaths().socket, {
-        type: 'config.op',
-        argv: ['config', ...fieldArgs],
-        sessionId,
-        delegationToken,
+        type: 'ctl', argv: ['response', ...args], sessionId, delegationToken,
     }, 10_000);
     if (!response)
         fail(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
-    if (!response.ok || !response.result?.ok) {
-        fail(formatJson, response.code || 'CONFIG_AUTH_FAILED', response.error || 'response config operation failed');
-    }
-    return response.result;
-}
-async function runManagedResponse(args, formatJson) {
-    if (getArgValue(args, '--self') || getArgValue(args, '--peer')) {
-        fail(formatJson, 'NOT_ALLOWED', 'Managed response commands always use the authenticated current relation');
-    }
-    const sub = args[0];
-    if (sub === 'set') {
-        const id = args[1];
-        if (!id)
-            fail(formatJson, 'MISSING_ID', 'set requires a mode id');
-        if (!buildRegistry().has(id))
-            fail(formatJson, 'UNKNOWN_MODE', `Unknown mode: ${id}`);
-        await managedConfig(['set', RESPONSE_MODE_FIELD, id], formatJson);
-        return emit(formatJson, { ok: true, scope: 'relation', mode: id }, () => `✓ 已设置响应模式为 ${id}（作用域: relation）`);
-    }
-    if (sub === 'reset') {
-        await managedConfig(['unset', RESPONSE_MODE_FIELD], formatJson);
-        return emit(formatJson, { ok: true, scope: 'relation' }, () => '✓ 已清除当前关系的响应模式设置');
-    }
-    if (sub === 'current') {
-        const modeResult = await managedConfig(['get', RESPONSE_MODE_FIELD], formatJson);
-        const paramsResult = await managedConfig(['get', RESPONSE_MODE_PARAMS_FIELD], formatJson);
-        const configuredMode = typeof modeResult.value === 'string' ? modeResult.value : undefined;
-        const mode = configuredMode ?? buildRegistry().getPreferredId();
-        return emit(formatJson, {
-            ok: true,
-            scope: 'relation',
-            responseMode: mode ?? null,
-            source: configuredMode ? 'config' : 'preferred',
-            sourceTarget: modeResult.source?.target ?? null,
-            responseModeParams: paramsResult.value ?? null,
-        }, () => `当前响应模式: ${mode ?? '(无)'}`);
-    }
-    if (sub === 'config') {
-        if (args[1] === 'set') {
-            fail(formatJson, 'NOT_ALLOWED', 'responseModeParams cannot be modified as an opaque object from a managed task');
-        }
-        const result = await managedConfig(['get', RESPONSE_MODE_PARAMS_FIELD], formatJson);
-        const params = result.value ?? {};
-        const modeId = args[1] && !args[1].startsWith('--') ? args[1] : undefined;
-        if (modeId)
-            return emit(formatJson, { ok: true, mode: modeId, config: params[modeId] ?? {} }, () => `${modeId} 配置: ${JSON.stringify(params[modeId] ?? {}, null, 2)}`);
-        return emit(formatJson, { ok: true, responseModeParams: params }, () => `所有模式配置: ${JSON.stringify(params, null, 2)}`);
-    }
-    fail(formatJson, 'NOT_ALLOWED', `response ${sub} is not available in a managed task`);
+    if (!response.ok)
+        fail(formatJson, response.code || 'CTL_FAILED', response.error || 'response operation failed');
+    emit(formatJson, response.data ?? { ok: true, result: response.result }, () => response.result || 'ok');
 }
 /** 解析 --self / --peer 为作用域选择器 */
 function parseSelector(args, formatJson) {

package/dist/cli/skill-command.js

@@ -17,21 +17,27 @@
 import path from 'path';
 import { spawn } from 'child_process';
 import { getPackageRoot, agentDir } from '../paths.js';
-import { readTaskRuntimeContextFromEnv } from './task-context.js';
+import { authorizeLocalCommand, readTaskRuntimeContextFromEnv, TASK_RUNTIME_CONTEXT_ENV } from './task-context.js';
 export async function cmdSkill(args) {
     const script = path.join(getPackageRoot(), 'kits', 'skills', 'ec-skill', 'scripts', 'cli.mjs');
     // 脚本在包外运行，拿不到主程序的路径工具，这里把 Agent 目录显式传进去，
     // 让它能定位 Agent 级 skills/ 与 .switches.json。
     // selfAid 优先取任务运行时上下文（托管会话的权威来源），其次环境变量。
     const env = { ...process.env };
-    const selfAid = readTaskRuntimeContextFromEnv()?.selfAid || process.env.EVOLCORE_SELF_AID;
-    if (selfAid && !env.EVOLCORE_AGENT_DIR) {
+    const runtime = process.env.EVOLCORE_SESSION_ID ? await authorizeLocalCommand(['skill', ...args]) : undefined;
+    const selfAid = runtime?.selfAid ?? readTaskRuntimeContextFromEnv()?.selfAid ?? process.env.EVOLCORE_SELF_AID;
+    if (runtime) {
+        env[TASK_RUNTIME_CONTEXT_ENV] = JSON.stringify(runtime);
+        env.EVOLCORE_SELF_AID = selfAid;
+    }
+    if (selfAid && (runtime || !env.EVOLCORE_AGENT_DIR)) {
         env.EVOLCORE_AGENT_DIR = agentDir(selfAid);
     }
     const code = await new Promise((resolve, reject) => {
         const child = spawn(process.execPath, [script, ...args], {
             stdio: 'inherit',
             env,
+            cwd: runtime?.projectPath,
         });
         child.on('error', reject);
         child.on('exit', (c) => resolve(c ?? 0));

package/dist/cli/stats.js

@@ -3,7 +3,7 @@
  */
 import { resolveRoot } from '../paths.js';
 import { wantsHelp } from './help.js';
-import { readBestTaskRuntimeContext } from './task-context.js';
+import { authorizeLocalCommand } from './task-context.js';
 import { queryAggregated, querySessionTurns, queryContextBreakdown, queryTopPeers, queryTopModels, queryMessageAggregated, queryPeerList, querySummary, queryPeerDaily, queryTaskModelCalls, querySessionModelCalls } from '../stats/query.js';
 import { getBudgetStatus } from '../stats/budget.js';
 const HELP = `ec stats — Token 用量与费用统计
@@ -124,10 +124,16 @@ const AGENT_SCOPE_ROLES = new Set(['owner', 'admin']);
  * is confined to its own relation and session. Returns undefined outside a
  * managed task, leaving direct terminal usage unchanged.
  */
-async function resolveManagedStatsScope(flags, isJson) {
+async function resolveManagedStatsScope(flags, isJson, argv) {
     if (!process.env.EVOLCORE_SESSION_ID)
         return undefined;
-    const runtime = await readBestTaskRuntimeContext();
+    let runtime;
+    try {
+        runtime = await authorizeLocalCommand(argv);
+    }
+    catch (error) {
+        fail(isJson, 'NOT_ALLOWED', error instanceof Error ? error.message : String(error));
+    }
     const role = runtime?.peerRole?.trim();
     const selfAid = runtime?.selfAid?.trim();
     // Fail closed: without a resolved identity and role there is no scope to
@@ -225,7 +231,7 @@ export async function handleStats(args) {
     const isJson = flags.format === 'json';
     // Authorize before any branch runs: `--rebuild` writes, and every read view
     // below would otherwise see the whole database.
-    const managedScope = await resolveManagedStatsScope(flags, isJson);
+    const managedScope = await resolveManagedStatsScope(flags, isJson, ['stats', ...args]);
     if (managedScope)
         enforceManagedSelector(managedScope, flags, isJson);
     // 全量重建日聚合表（运维兜底/排查），不依赖时间范围。

package/dist/cli/task-command.js

@@ -41,6 +41,7 @@ export async function cmdTask(args) {
     }
     const result = await ipcQuery(resolvePaths().socket, {
         type: 'task.resume',
+        argv: ['task', ...args],
         targetSessionId,
         ...(sessionId ? { sessionId, delegationToken } : {}),
     }, 10_000);