evolcore 0.0.31 → 0.0.33

package/dist/cli/skill-command.js

@@ -13,25 +13,54 @@
  * 两个入口（这里的 spawn 与模型侧直接 node脚本）环境变量一致，
  * 脚本自己读 EVOLCORE_TASK_RUNTIME_CONTEXT 即可得到相同判据；
  * 若在 CLI 层再判一遍，只是多一处会与脚本漂移的实现。
+ *
+ * 例外：`refresh` 不进脚本，直接走 daemon IPC（skill.refresh）——索引由 daemon
+ * 内的 index-generator 生成，鉴权也在 daemon 里做。其余子命令后续逐个迁到 IPC，
+ * 见 docs/skills/skill-refresh-ipc-implementation-plan.md。
  */
 import path from 'path';
 import { spawn } from 'child_process';
-import { getPackageRoot, agentDir } from '../paths.js';
+import { getPackageRoot, agentDir, resolvePaths } from '../paths.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
+import { ipcQuery } from '../ipc.js';
+import { readDelegationCredential } from '../core/auth/agent-delegation.js';
+import { authorizeLocalCommand, TASK_RUNTIME_CONTEXT_ENV } from './task-context.js';
+import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
+const REFRESH_USAGE = `用法: ec skill refresh <aid> [--json]
+
+重建指定 Agent 的技能索引文件（$AGENT_DIR/skills/.index-builtin.md / .index-local.md）。
+由 daemon 生成，daemon 未运行时无法执行。
+
+权限:
+  托管任务内  只能刷新当前 Agent，需要 owner 或 admin 角色
+  宿主终端    可刷新任意 Agent
+
+示例:
+  ec skill refresh alice.agentid.pub`;
 export async function cmdSkill(args) {
+    if (args[0] === 'refresh') {
+        await cmdSkillRefresh(args.slice(1));
+        return;
+    }
     const script = path.join(getPackageRoot(), 'kits', 'skills', 'ec-skill', 'scripts', 'cli.mjs');
     // 脚本在包外运行，拿不到主程序的路径工具，这里把 Agent 目录显式传进去，
     // 让它能定位 Agent 级 skills/ 与 .switches.json。
     // selfAid 优先取任务运行时上下文（托管会话的权威来源），其次环境变量。
     const env = { ...process.env };
-    const selfAid = readTaskRuntimeContextFromEnv()?.selfAid || process.env.EVOLCORE_SELF_AID;
-    if (selfAid && !env.EVOLCORE_AGENT_DIR) {
+    const runtime = process.env.EVOLCORE_SESSION_ID ? await authorizeLocalCommand(['skill', ...args]) : undefined;
+    const selfAid = runtime?.selfAid ?? readTaskRuntimeContextFromEnv()?.selfAid ?? process.env.EVOLCORE_SELF_AID;
+    if (runtime) {
+        env[TASK_RUNTIME_CONTEXT_ENV] = JSON.stringify(runtime);
+        env.EVOLCORE_SELF_AID = selfAid;
+    }
+    if (selfAid && (runtime || !env.EVOLCORE_AGENT_DIR)) {
         env.EVOLCORE_AGENT_DIR = agentDir(selfAid);
     }
     const code = await new Promise((resolve, reject) => {
         const child = spawn(process.execPath, [script, ...args], {
             stdio: 'inherit',
             env,
+            cwd: runtime?.projectPath,
         });
         child.on('error', reject);
         child.on('exit', (c) => resolve(c ?? 0));
@@ -39,3 +68,56 @@ export async function cmdSkill(args) {
     if (code !== 0)
         process.exitCode = code;
 }
+async function cmdSkillRefresh(args) {
+    const asJson = args.includes('--json');
+    const positional = args.filter(a => !a.startsWith('--'));
+    if (args.includes('--help') || args.includes('-h') || positional.length === 0) {
+        console.log(REFRESH_USAGE);
+        if (positional.length === 0 && !args.includes('--help') && !args.includes('-h'))
+            process.exitCode = 1;
+        return;
+    }
+    const aid = positional[0];
+    const argv = canonicalizeEvolcoreCommandArgv(['ec', 'skill', 'refresh', ...args]).slice(1);
+    // 托管任务带会话与委托令牌；宿主终端两者都不带，由 ipcQuery 自动附上本机 control token。
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    const delegationToken = sessionId ? readDelegationCredential() : undefined;
+    if (sessionId && !delegationToken) {
+        console.error('❌ 刷新失败 (DELEGATION_REQUIRED): 当前任务缺少委托令牌');
+        process.exitCode = 1;
+        return;
+    }
+    let response;
+    try {
+        response = await ipcQuery(resolvePaths().socket, {
+            type: 'skill.refresh',
+            aid,
+            argv,
+            ...(sessionId ? { sessionId, delegationToken } : {}),
+        }, 30_000, { throwOnError: true });
+    }
+    catch (e) {
+        console.error(`❌ 刷新失败 (DAEMON_UNAVAILABLE): ${e instanceof Error ? e.message : String(e)}`);
+        process.exitCode = 1;
+        return;
+    }
+    if (asJson) {
+        console.log(JSON.stringify(response ?? { ok: false, code: 'DAEMON_UNAVAILABLE' }, null, 2));
+        if (!response?.ok)
+            process.exitCode = 1;
+        return;
+    }
+    if (!response?.ok) {
+        const code = response?.code ?? (response ? 'FAILED' : 'DAEMON_UNAVAILABLE');
+        console.error(`❌ 刷新失败 (${code}): ${response?.error ?? '无法连接 evolcore daemon'}`);
+        if (response?.data?.nextStep)
+            console.error(`   ${response.data.nextStep}`);
+        process.exitCode = 1;
+        return;
+    }
+    console.log(`✓ 已重建 ${aid} 的技能索引`);
+    if (response.result) {
+        console.log(`  内置: ${response.result.builtinIndexPath}`);
+        console.log(`  本机: ${response.result.localIndexPath}`);
+    }
+}

package/dist/cli/stats.js

@@ -3,7 +3,7 @@
  */
 import { resolveRoot } from '../paths.js';
 import { wantsHelp } from './help.js';
-import { readBestTaskRuntimeContext } from './task-context.js';
+import { authorizeLocalCommand } from './task-context.js';
 import { queryAggregated, querySessionTurns, queryContextBreakdown, queryTopPeers, queryTopModels, queryMessageAggregated, queryPeerList, querySummary, queryPeerDaily, queryTaskModelCalls, querySessionModelCalls } from '../stats/query.js';
 import { getBudgetStatus } from '../stats/budget.js';
 const HELP = `ec stats — Token 用量与费用统计
@@ -124,10 +124,16 @@ const AGENT_SCOPE_ROLES = new Set(['owner', 'admin']);
  * is confined to its own relation and session. Returns undefined outside a
  * managed task, leaving direct terminal usage unchanged.
  */
-async function resolveManagedStatsScope(flags, isJson) {
+async function resolveManagedStatsScope(flags, isJson, argv) {
     if (!process.env.EVOLCORE_SESSION_ID)
         return undefined;
-    const runtime = await readBestTaskRuntimeContext();
+    let runtime;
+    try {
+        runtime = await authorizeLocalCommand(argv);
+    }
+    catch (error) {
+        fail(isJson, 'NOT_ALLOWED', error instanceof Error ? error.message : String(error));
+    }
     const role = runtime?.peerRole?.trim();
     const selfAid = runtime?.selfAid?.trim();
     // Fail closed: without a resolved identity and role there is no scope to
@@ -225,7 +231,7 @@ export async function handleStats(args) {
     const isJson = flags.format === 'json';
     // Authorize before any branch runs: `--rebuild` writes, and every read view
     // below would otherwise see the whole database.
-    const managedScope = await resolveManagedStatsScope(flags, isJson);
+    const managedScope = await resolveManagedStatsScope(flags, isJson, ['stats', ...args]);
     if (managedScope)
         enforceManagedSelector(managedScope, flags, isJson);
     // 全量重建日聚合表（运维兜底/排查），不依赖时间范围。

package/dist/cli/task-command.js

@@ -41,6 +41,7 @@ export async function cmdTask(args) {
     }
     const result = await ipcQuery(resolvePaths().socket, {
         type: 'task.resume',
+        argv: ['task', ...args],
         targetSessionId,
         ...(sessionId ? { sessionId, delegationToken } : {}),
     }, 10_000);

package/dist/cli/task-context.js

@@ -27,9 +27,11 @@ function normalizeTaskRuntimeContext(value) {
     return {
         taskId: optionalString(value.taskId),
         sessionId: optionalString(value.sessionId),
+        projectPath: optionalAbsolutePath(value.projectPath),
         messageId: optionalString(value.messageId),
         baseagent: optionalString(value.baseagent),
         channel: optionalString(value.channel),
+        channelKey: optionalString(value.channelKey),
         channelId: optionalString(value.channelId),
         chatType: optionalString(value.chatType),
         selfAid: optionalString(value.selfAid),
@@ -347,6 +349,20 @@ export function parseTaskRuntimeContext(raw) {
 export function readTaskRuntimeContextFromEnv(env = process.env) {
     return parseTaskRuntimeContext(env[TASK_RUNTIME_CONTEXT_ENV]);
 }
+export async function authorizeLocalCommand(argv) {
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    const delegationToken = readDelegationCredential();
+    if (!sessionId || !delegationToken)
+        throw new Error('Local command requires an active task delegation');
+    const [{ resolvePaths }, { ipcQuery }] = await Promise.all([import('../paths.js'), import('../ipc.js')]);
+    const result = await ipcQuery(resolvePaths().socket, {
+        type: 'local-command-context', argv, sessionId, delegationToken,
+    }, 10_000);
+    if (!result?.ok || !result.context?.selfAid || !result.context.peerRole) {
+        throw new Error(result?.error ?? 'Daemon command authorization is unavailable');
+    }
+    return result.context;
+}
 export async function readTaskRuntimeContextFromDaemon(sessionId, timeoutMs = 500, env = process.env) {
     if (!sessionId)
         return undefined;