evolcore 0.0.32 → 0.0.34

package/dist/core/thread/types.js

@@ -0,0 +1 @@
+export {};

package/dist/eck/kit-renderer.js

@@ -6,6 +6,7 @@ import { logger } from '../utils/logger.js';
 import { clearRoleStoreCache } from '../config/role-store.js';
 import { resolveAgentLifecycle } from '../config/lifecycle.js';
 import { loadManifest, loadManifestMeta, invalidateManifestCache, evaluateWhen, renderTemplate, renderLoopSection, resolvePathWithDiag, loadSectionFiles, loadChildTemplate, buildPathMappings, shortenPath, } from './manifest-engine.js';
+import { SYSTEM_SESSION_TYPES } from '../core/system-session/types.js';
 export const DEFAULT_MANIFEST_FILE = 'eck_manifest.json';
 /**
  * 会话原型（sessionType）→ manifest 文件的内置映射。
@@ -16,9 +17,13 @@ export const BUILTIN_SESSION_MANIFESTS = {
     memory: 'eck_manifest.memory.json',
     auxiliary: 'eck_manifest.auxiliary.json',
 };
-/** 选择顺序：config 覆盖 → 内置映射 → 主 manifest。 */
+/**
+ * 选择顺序：config 覆盖 → 内置映射 → 主 manifest。
+ * 系统会话类型不接受 config 覆盖：其 manifest 由 system-session 模块决定。
+ */
 export function resolveSessionManifest(sessionType, overrides) {
-    return overrides?.[sessionType] ?? BUILTIN_SESSION_MANIFESTS[sessionType] ?? DEFAULT_MANIFEST_FILE;
+    const override = SYSTEM_SESSION_TYPES.includes(sessionType) ? undefined : overrides?.[sessionType];
+    return override ?? BUILTIN_SESSION_MANIFESTS[sessionType] ?? DEFAULT_MANIFEST_FILE;
 }
 // ── Caches ──
 const _sessionPathCache = new Map();

package/dist/eck/manifest-engine.js

@@ -3,9 +3,10 @@
 // when 求值、模板渲染、路径解析、manifest 加载/缓存原语，避免两套实现漂移。
 import fs from 'fs';
 import path from 'path';
-import { kitsDir, resolveRoot, getPackageRoot } from '../paths.js';
+import { kitsDir, resolveRoot, getPackageRoot, isDevMode } from '../paths.js';
 import { logger } from '../utils/logger.js';
 import { fileCache } from '../core/daemon-file-cache.js';
+import { readVerifiedText, isShippedPath } from '../core/file-integrity/read.js';
 // ── 限额默认值 ──
 /** 单目录段默认最多文件数 */
 export const DIR_MAX_FILES = 20;
@@ -365,12 +366,31 @@ function sectionCacheOptions(resolvedPath, vars) {
     }
     return { policy: 'mtime', group: 'eck-runtime' };
 }
+/**
+ * 读取一个 kits 文档，安装模式下先过台账校验。
+ *
+ * 为什么校验包在 loader 里：这些内容走 FileCache 的 `on-reload` 策略，缓存命中时
+ * 不会碰磁盘，校验只有包在这里才与"实际注入的那份内容"对齐；被篡改且恢复不了时
+ * 返回 null，条目本身也不会写进缓存。开发模式下 kits 由 agent 直接改写，不校验。
+ */
+function loadKitsDoc(resolved, vars) {
+    const opts = sectionCacheOptions(resolved, vars);
+    if (!isShippedPath(resolved)) {
+        return fileCache.getText(resolved, opts);
+    }
+    const verify = !isDevMode();
+    return fileCache.get(resolved, () => {
+        const checked = readVerifiedText(resolved, { verify, tag: 'eck' });
+        // 校验不过就不进缓存：返回 null → fileCache 存 null，该段被丢弃
+        return checked ? checked.text : null;
+    }, opts);
+}
 /** 加载 loop 的 child 子模板文件内容（路径解析 + fileCache）。找不到返回 null。 */
 export function loadChildTemplate(childFile, vars) {
     const resolved = resolvePath(childFile, vars);
     if (!resolved)
         return null;
-    return fileCache.getText(resolved, sectionCacheOptions(resolved, vars));
+    return loadKitsDoc(resolved, vars);
 }
 /**
  * 返回 [filePath, rawContent][]。kits 文件跨 session 缓存到 reload；运行时文件
@@ -401,7 +421,7 @@ function loadFileSection(filePath, vars, sessionCache) {
     const resolved = resolvePath(filePath, vars);
     if (!resolved)
         return null;
-    const content = fileCache.getText(resolved, sectionCacheOptions(resolved, vars));
+    const content = loadKitsDoc(resolved, vars);
     return content === null ? null : [resolved, content];
 }
 /**
@@ -435,7 +455,7 @@ function readDirectoryFiles(dirPath, pattern, maxFiles, maxBytes, vars) {
             break;
         }
         const fp = path.join(dirPath, f);
-        const content = fileCache.getText(fp, sectionCacheOptions(fp, vars));
+        const content = loadKitsDoc(fp, vars);
         if (content === null)
             continue;
         // 字节限额（至少加载一个文件，避免单个超大文件导致空目录）

package/dist/eck/message-renderer.js

@@ -50,6 +50,8 @@ function renderOneItem(item, sessionVars, sessionCache, contentSentinel) {
     };
     const isOwnerHint = item.kind === 'owner-hint';
     const isHandoff = item.kind === 'handoff';
+    const isThreadContext = item.kind === 'thread-context';
+    const isTriggerMsg = item.kind === 'trigger';
     const handoffPreviousSentinel = `\x00ECMSG-HANDOFF-PREV-${randomUUID()}\x00`;
     const requiredReplacements = (item.handoff?.requiredEntries ?? []).map(entry => ({
         entry,
@@ -131,6 +133,39 @@ function renderOneItem(item, sessionVars, sessionCache, contentSentinel) {
         injectTime: isOwnerHint
             ? formatLocalTime(item.injectTime ?? item.timestamp ?? Date.now(), sessionVars.timezone ? String(sessionVars.timezone) : undefined)
             : undefined,
+        // T4: 跨会话上下文（thread-inbox 注入）
+        isThreadContext,
+        threadContextOriginThreadId: item.threadContext?.originThreadId,
+        threadContextOriginPeer: item.threadContext?.originPeer,
+        threadContextTime: item.timestamp !== undefined
+            ? formatLocalTime(item.timestamp, sessionVars.timezone ? String(sessionVars.timezone) : undefined)
+            : undefined,
+        threadContextGapHasNewMessages: item.threadContext?.gapDetection.hasNewMessages === true,
+        threadContextGapCount: item.threadContext?.gapDetection.count,
+        // M1: 空洞检测失败（来源话题的 messages.jsonl 缺失/损坏）时，gapDetection 保守返回
+        // hasNewMessages=false，与"确实无新消息"渲染结果相同。透出 error 让模板提示"无法检测"，
+        // 避免 agent 把检测失败误读成"来源话题无更新"。
+        threadContextGapError: item.threadContext?.gapDetection.error,
+        threadContextGapRange: (() => {
+            const g = item.threadContext?.gapDetection;
+            if (!g?.hasNewMessages || g.firstTimestamp === undefined || g.lastTimestamp === undefined)
+                return undefined;
+            const tz = sessionVars.timezone ? String(sessionVars.timezone) : undefined;
+            return `${formatLocalTime(g.firstTimestamp, tz)} - ${formatLocalTime(g.lastTimestamp, tz)}`;
+        })(),
+        threadContextTriggerId: item.threadContext?.triggerId,
+        // T9: trigger 消息专属信封变量
+        isTriggerMsg,
+        triggerMsgId: isTriggerMsg ? item.triggerInfo?.triggerId : undefined,
+        triggerMsgName: isTriggerMsg ? item.triggerInfo?.triggerName : undefined,
+        triggerMsgFireTime: isTriggerMsg && item.triggerInfo?.fireTime !== undefined
+            ? formatLocalTime(item.triggerInfo.fireTime, sessionVars.timezone ? String(sessionVars.timezone) : undefined)
+            : undefined,
+        // T10: labels 路由 key（默认 'default'）+ 动态展开 triggerMsgLabel_<key>
+        triggerMsgKind: isTriggerMsg ? (item.triggerInfo?.labels?.kind ?? 'default') : undefined,
+        ...(isTriggerMsg && item.triggerInfo?.labels
+            ? Object.fromEntries(Object.entries(item.triggerInfo.labels).map(([k, v]) => [`triggerMsgLabel_${k}`, v]))
+            : {}),
         // msg send 跨会话一次性上下文
         isHandoff,
         handoffKind: item.handoff?.kind,

package/dist/index.js

@@ -1,7 +1,7 @@
 // 【重要】最先加载环境变量，确保后续模块初始化时可用
 import dotenv from 'dotenv';
 import path from 'path';
-import { ensureDataDirs, resolvePaths, eckDebugDir, daemonControlDir, daemonQueuePath, daemonMessageDedupPath } from './paths.js';
+import { ensureDataDirs, resolvePaths, eckDebugDir, daemonControlDir, daemonQueuePath, daemonMessageDedupPath, isDevMode } from './paths.js';
 // 立即加载 .env 文件（在其他模块导入之前）
 try {
     dotenv.config({ path: path.join(resolvePaths().root, '.env') });
@@ -22,7 +22,7 @@ import { createSessionIdentityResolver } from './config/peer-role-resolver.js';
 import { initializeStartupConfig, prepareStartupConfig, recordStartupConfig } from './config/boot-log.js';
 import { CONFIG_SCHEMA_VERSION } from './types.js';
 import { SessionManager } from './core/session/session-manager.js';
-import { SessionIdleMonitor, readRelationSessionIdleSeconds } from './core/session/session-idle-monitor.js';
+import { SessionIdleMonitor, readSessionLoopIdleSeconds } from './core/session/session-idle-monitor.js';
 import { ClaudeAgentPlugin } from './agents/claude-runner.js';
 import { CodexAgentPlugin } from './agents/codex-runner.js';
 import { GeminiAgentPlugin } from './agents/gemini-runner.js';
@@ -57,6 +57,7 @@ import { StatsCollector } from './utils/stats.js';
 import { AidStatsCollector } from './utils/stats.js';
 import { initializeStatsPersistence } from './stats/writer.js';
 import { PermissionGateway } from './core/permission/approval-gateway.js';
+import { releaseSessionPathGrants } from './core/permission/session-path-grants.js';
 import { InteractionRouter } from './core/interaction-router.js';
 import { GroupInviteReviewService } from './aun/group/invite-service.js';
 import { AgentDelegationRegistry, } from './core/auth/agent-delegation.js';
@@ -138,8 +139,10 @@ async function main() {
     }
     // 立即登记自己（让其他并发启动者能看见我）
     const launchedBy = process.env.EVOLCORE_LAUNCHED_BY || 'start';
+    // 本次运行模式在这里定下（首次求值时会读走并删除 `ec start --as-mode` 的覆盖文件）
+    const devMode = isDevMode();
     writeMain(launchedBy);
-    logger.info(`✓ Instance record written: main-${process.pid}.json`);
+    logger.info(`✓ Instance record written: main-${process.pid}.json runMode=${devMode ? 'dev' : 'install'}`);
     // post-write 自检：写完 record 后再扫一次，发现并发对手时按 (startedAt, pid) 选赢家
     {
         const verdict = isMainWinner();
@@ -240,6 +243,12 @@ async function main() {
         if (event.nameChanged)
             agentRegistry?.invalidateAgentDisplayCache?.(event.aid);
     });
+    // 运行时路径授权以会话为归属：会话被删除后不再有身份去消费它，随之释放。
+    // 只挂 session:deleted——session:idle 只表示空闲，会话仍会继续服务。
+    eventBus.subscribe('session:deleted', (event) => {
+        if ('sessionId' in event && event.sessionId)
+            releaseSessionPathGrants(event.sessionId);
+    });
     // 统计收集器（近 1 小时滚动统计）
     const statsCollector = new StatsCollector(eventBus);
     // Per-AID 消息统计收集器（累计，供 watch aid 实时展示）
@@ -426,13 +435,15 @@ async function main() {
         getSessionById: sessionId => sessionManager.getSessionById(sessionId),
         isSessionBusy: sessionId => messageQueue.isProcessing(sessionId) || messageQueue.getQueueLength(sessionId) > 0,
         getSessionIdleTriggerIds: () => triggerSchedulers.sessionIdleTriggerIds(),
-        getSessionIdleSeconds: readRelationSessionIdleSeconds,
+        getSessionIdleSeconds: readSessionLoopIdleSeconds,
         getSessionEncrypt: sessionId => sessionManager.getSessionEncrypt(sessionId),
+        isCurrentMainSession: session => sessionManager.getActiveSessionSync(session.channel, session.channelId)?.id === session.id,
     });
     sessionIdleMonitor.start();
     onConfigWrite(({ target, selector }) => {
-        if (target === ConfigTarget.Relation && selector.self)
-            sessionIdleMonitor.refresh();
+        if (target === ConfigTarget.Relation && selector.self && selector.peerKey) {
+            void sessionIdleMonitor.refreshRelation(selector.self, selector.peerKey);
+        }
     });
     onShutdown(() => sessionIdleMonitor.stop());
     const targetSessionLocks = new TargetSessionLockRegistry();
@@ -490,10 +501,11 @@ async function main() {
         sessionManager,
         getAgent: aid => agentRegistry.get(aid),
         agentMap,
-        releaseSlot: aid => consolidationQueue.release(aid),
+        releaseSlot: (aid, sessionId) => consolidationQueue.release(aid, sessionId),
         enqueueConsolidation,
         sendFeedback: sendConsolidationFeedback,
     });
+    consolidationQueue.setFinalizer(finishConsolidationSession);
     registerConsolidationSessionEvents({
         eventBus,
         permissionGateway,

package/dist/ipc.js

@@ -17,11 +17,13 @@ import { getProcessStartTime, isSameOrOlderProcess } from './utils/process-intro
 import { classifyProcessTree, ProcessTreeSampler, readProcessMetrics } from './utils/process-tree-stats.js';
 import { readSystemMemoryUsage } from './utils/system-memory.js';
 import { hashCurrentDelegatedCommand, hashDelegatedCommandArgv } from './core/auth/agent-delegation.js';
+import { resolveSkillRefreshArgv } from './core/skill/command-parser.js';
 import { normalizeAunMentionEntries } from './aun/msg/mention-schema.js';
 import { remoteAccessService } from './core/auth/remote-access-store.js';
 import { setModelCatalogDaemonOwner } from './core/model/model-catalog.js';
 import { RUNTIME_ENVIRONMENT_NAMES, setRuntimeEnvironmentOverride } from './config/runtime-env.js';
 import { MAIN_CLI_BIN } from './product.js';
+import { delegationDiagnosticMessage, withDelegationDiagnosticContext, } from './core/auth/delegation-diagnostics.js';
 const isWindows = process.platform === 'win32';
 const isNamedPipe = (p) => isWindows && p.toLowerCase().startsWith('\\\\.\\pipe\\');
 const CPU_SAMPLE_INTERVAL_MS = 1000;
@@ -78,12 +80,12 @@ const LOCAL_CONTROL_COMMANDS = new Set([
 ]);
 const MEMORY_COMMAND_ENDPOINTS = new Set([
     'memory.note', 'memory.note.update', 'memory.note.drop', 'memory.note.list',
-    'memory.create', 'memory.update', 'memory.archive', 'memory.demote', 'memory.consolidate', 'memory.feedback',
+    'memory.create', 'memory.update', 'memory.archive', 'memory.demote', 'memory.consolidate',
 ]);
 const DELEGATED_ARGV_ENDPOINTS = new Set([
     'agent.op', 'config.op', 'contact.op', 'aid.op', 'group.op', 'msg.op', 'fs.op',
     'ctl', 'diag', 'menu-client.request', 'task.resume', 'queue.op', 'storage.auth', 'storage.upload',
-    'trigger.op', 'local-command-context', 'evolagent.bootstrapComplete', ...MEMORY_COMMAND_ENDPOINTS,
+    'trigger.op', 'skill.refresh', 'thread.op', 'local-command-context', 'evolagent.bootstrapComplete', ...MEMORY_COMMAND_ENDPOINTS,
     'handoff-return', 'handoff-recover-return', 'handoff-status', 'handoff-list', 'handoff-trace',
 ]);
 let ipcQuerySequence = 0;
@@ -105,9 +107,17 @@ function nextIpcQueryId(cmd) {
 function requiresLocalControlToken(cmd) {
     // Managed calls use task delegation. Standalone queries must not gain
     // management scope merely by omitting (or emptying) sessionId.
-    return cmd.type === 'evolagent.initialize' || LOCAL_CONTROL_COMMANDS.has(String(cmd.type ?? ''))
-        || (['evolagent.bootstrapComplete', 'diag', 'handoff-status', 'handoff-list', 'handoff-trace', 'task.resume'].includes(String(cmd.type))
-            && !(typeof cmd.sessionId === 'string' && cmd.sessionId.trim()));
+    const type = String(cmd.type ?? '');
+    const sessionId = typeof cmd.sessionId === 'string' && cmd.sessionId.trim();
+    const delegated = typeof cmd.delegationToken === 'string' && cmd.delegationToken.trim();
+    if (cmd.type === 'evolagent.initialize' || LOCAL_CONTROL_COMMANDS.has(type))
+        return true;
+    if (type === 'debug-issue-token')
+        return true;
+    if (type === 'skill.refresh' || type === 'thread.op')
+        return !sessionId || !delegated;
+    return ['evolagent.bootstrapComplete', 'diag', 'handoff-status', 'handoff-list', 'handoff-trace', 'task.resume'].includes(type)
+        && !sessionId;
 }
 /** Preserve the pipe DACL and grant only the provisioned Codex users data I/O. */
 function grantWindowsSandboxPipeAccess(endpoint) {
@@ -164,6 +174,7 @@ export class IpcServer {
     aunAidStatsRecorder;
     menuExecutor;
     agentOperationExecutor;
+    skillRefreshExecutor;
     initializationExecutor;
     statsProvider;
     agentStatsProvider;
@@ -182,7 +193,9 @@ export class IpcServer {
     shutdownExecutor;
     taskRuntimeContextProvider;
     debugTaskRuntimeContextProvider;
+    debugIssueTokenExecutor;
     taskRuntimeContextAuthorizer;
+    systemSessionCommandGate;
     codexPreToolUseExecutor;
     aunMsgSender;
     diagExecutor;
@@ -199,6 +212,7 @@ export class IpcServer {
     groupOperationExecutor;
     msgOperationExecutor;
     fsOperationExecutor;
+    threadOperationExecutor;
     dingtalkContactBindExecutor;
     feishuContactBindExecutor;
     qqbotContactBindExecutor;
@@ -206,6 +220,7 @@ export class IpcServer {
     wechatContactBindExecutor;
     controlToken;
     daemonRuntimeEpoch;
+    delegationFailureRecorder;
     remoteAccessService = remoteAccessService;
     /** Current daemon owner used to bind locally issued ECWeb pairing codes. */
     remoteAccessOwnerProvider;
@@ -276,6 +291,9 @@ export class IpcServer {
     setDaemonRuntimeEpoch(epoch) {
         this.daemonRuntimeEpoch = epoch;
     }
+    setDelegationFailureRecorder(recorder) {
+        this.delegationFailureRecorder = recorder;
+    }
     /** Inject menu.* executor (ECWeb Control proxies menu requests through this) */
     setMenuExecutor(executor) {
         this.menuExecutor = executor;
@@ -286,6 +304,9 @@ export class IpcServer {
     setAgentOperationExecutor(executor) {
         this.agentOperationExecutor = executor;
     }
+    setSkillRefreshExecutor(executor) {
+        this.skillRefreshExecutor = executor;
+    }
     setConfigOperationExecutor(executor) {
         this.configOperationExecutor = executor;
     }
@@ -304,6 +325,9 @@ export class IpcServer {
     setFsOperationExecutor(executor) {
         this.fsOperationExecutor = executor;
     }
+    setThreadOperationExecutor(executor) {
+        this.threadOperationExecutor = executor;
+    }
     setAgentReloadExecutor(executor) {
         this.agentReloadExecutor = executor;
     }
@@ -439,7 +463,7 @@ export class IpcServer {
     setTriggerExecutor(executor) {
         this.triggerExecutor = executor;
     }
-    /** Inject daemon-level consolidation launcher that uses the real trigger scheduler. */
+    /** Inject daemon-level consolidation launcher (BackgroundSessionLauncher, via executor closure). */
     setConsolidationLaunchExecutor(executor) {
         this.consolidationLaunchExecutor = executor;
     }
@@ -455,15 +479,17 @@ export class IpcServer {
     setTaskRuntimeContextProvider(provider) {
         this.taskRuntimeContextProvider = provider;
     }
-    /** 仅开发仓（npm link）安装注册；正式安装不调用，debug 请求一律走正常路径。 */
     setDebugTaskRuntimeContextProvider(provider) {
         this.debugTaskRuntimeContextProvider = provider;
     }
+    /** debug 模式：注册 debug-issue-token executor，仅 EVOLCORE_DEBUG_MODE=1 时由 index.ts 调用。 */
+    setDebugIssueTokenExecutor(executor) {
+        this.debugIssueTokenExecutor = executor;
+    }
     /**
-     * memory 命令取运行时上下文：先查正在运行的任务；没有且请求带 debug 时，
-     * 再由开发仓专用的 provider 从会话文件重建。
+     * memory 命令取运行时上下文：查正在运行的任务。
      */
-    async resolveMemoryTaskCtx(sessionId, debug) {
+    async resolveMemoryTaskCtx(sessionId, debug = false) {
         const active = this.taskRuntimeContextProvider?.({ sessionId });
         if (active || !debug || !this.debugTaskRuntimeContextProvider)
             return active;
@@ -472,6 +498,9 @@ export class IpcServer {
     setTaskRuntimeContextAuthorizer(authorizer) {
         this.taskRuntimeContextAuthorizer = authorizer;
     }
+    setSystemSessionCommandGate(gate) {
+        this.systemSessionCommandGate = gate;
+    }
     setCodexPreToolUseExecutor(executor) {
         this.codexPreToolUseExecutor = executor;
     }
@@ -479,6 +508,14 @@ export class IpcServer {
     setAunMsgSender(sender) {
         this.aunMsgSender = sender;
     }
+    hasAunMsgSender() {
+        return this.aunMsgSender !== undefined;
+    }
+    async sendAunMsg(params) {
+        if (!this.aunMsgSender)
+            throw new Error('aunMsgSender not configured');
+        return this.aunMsgSender(params);
+    }
     setDiagExecutor(executor) { this.diagExecutor = executor; }
     setMenuClientExecutor(executor) { this.menuClientExecutor = executor; }
     /** Inject internal handoff result return executor for `ec handoff return`. */
@@ -923,18 +960,36 @@ export class IpcServer {
         }
     }
     async handleCommand(cmd, requestSignal, receivedAtMono = performance.now()) {
+        return withDelegationDiagnosticContext({
+            sessionId: typeof cmd.sessionId === 'string' ? cmd.sessionId : undefined,
+            requestId: nextIpcQueryId(cmd),
+            correlationId: typeof cmd.correlationId === 'string' ? ipcLogToken(cmd.correlationId) : undefined,
+            operation: ipcLogToken(cmd.type),
+        }, () => this.dispatchCommand(cmd, requestSignal, receivedAtMono));
+    }
+    diagnosticRejection(cause, cmd) {
+        const failure = this.delegationFailureRecorder?.(cause, typeof (cmd.sessionId ?? cmd.originSessionId ?? cmd.actorSessionId) === 'string'
+            ? cmd.sessionId ?? cmd.originSessionId ?? cmd.actorSessionId : undefined, typeof cmd.delegationToken === 'string' ? cmd.delegationToken : undefined, typeof cmd.delegationCommandHash === 'string' ? cmd.delegationCommandHash : undefined);
+        const diagnosticCause = failure?.diagnosticCause ?? cause;
+        return {
+            ok: false,
+            code: diagnosticCause === 'missing_token' ? 'DELEGATION_REQUIRED'
+                : diagnosticCause === 'daemon_restarted' ? 'DAEMON_RESTARTED' : 'INVALID_DELEGATION',
+            error: failure?.reason ?? delegationDiagnosticMessage(diagnosticCause),
+            diagnosticCause,
+            ...(failure?.diagnosticEventId ? { diagnosticEventId: failure.diagnosticEventId } : {}),
+        };
+    }
+    async dispatchCommand(cmd, requestSignal, receivedAtMono = performance.now()) {
         if (requiresLocalControlToken(cmd) && !this.hasValidControlToken(cmd.controlToken)) {
             return { ok: false, code: 'INVALID_CONTROL_TOKEN', error: 'valid local control token is required' };
         }
         if (typeof cmd.delegationToken === 'string' && cmd.delegationToken
             && this.daemonRuntimeEpoch
+            && cmd.daemonRuntimeEpoch !== undefined
             && cmd.daemonRuntimeEpoch !== this.daemonRuntimeEpoch) {
             logger.warn(`[IPC] stale delegation rejected: session=${ipcLogToken(cmd.sessionId ?? cmd.originSessionId ?? cmd.actorSessionId)} type=${ipcLogToken(cmd.type)} cause=daemon_runtime_epoch_mismatch`);
-            return {
-                ok: false,
-                code: 'DAEMON_RESTARTED',
-                error: 'The task delegation token belongs to a previous daemon runtime; start a new task authorization and do not retry this command in the current task',
-            };
+            return this.diagnosticRejection('daemon_restarted', cmd);
         }
         if (typeof cmd.delegationToken === 'string'
             && (DELEGATED_ARGV_ENDPOINTS.has(cmd.type) || (cmd.type === 'aun-msg-send' && cmd.argv !== undefined))) {
@@ -947,9 +1002,26 @@ export class IpcServer {
                 ...cmd.argv,
             ]);
             if (!expectedHash || cmd.delegationCommandHash !== expectedHash) {
-                return { ok: false, code: 'INVALID_DELEGATION', error: 'Command hash does not match the submitted argv' };
+                return this.diagnosticRejection('command_hash_mismatch', cmd);
             }
         }
+        // 系统会话统一闸门：带系统会话 delegation 的请求只看模块 checkCommand，拒绝即返回
+        if (this.systemSessionCommandGate
+            && typeof cmd.delegationToken === 'string' && cmd.delegationToken
+            && typeof cmd.sessionId === 'string' && cmd.sessionId) {
+            const argv = Array.isArray(cmd.argv) && cmd.argv.every((value) => typeof value === 'string')
+                ? cmd.argv
+                : undefined;
+            const gate = await this.systemSessionCommandGate({
+                sessionId: cmd.sessionId,
+                delegationToken: cmd.delegationToken,
+                ...(typeof cmd.delegationCommandHash === 'string' ? { delegationCommandHash: cmd.delegationCommandHash } : {}),
+                type: cmd.type,
+                ...(argv ? { argv } : {}),
+            });
+            if (gate && !gate.allow)
+                return { ok: false, code: 'NOT_ALLOWED', policyCode: gate.code, error: gate.reason };
+        }
         if (cmd.argv !== undefined && ['handoff-status', 'handoff-list', 'handoff-trace'].includes(cmd.type)) {
             try {
                 const { parseList, parseTrace } = await import('./cli/handoff-command.js');
@@ -1385,12 +1457,25 @@ export class IpcServer {
                     sessionId: cmd.sessionId,
                     delegationToken: typeof cmd.delegationToken === 'string' ? cmd.delegationToken : undefined,
                     delegationCommandHash: typeof cmd.delegationCommandHash === 'string' ? cmd.delegationCommandHash : undefined,
+                    consumeApproval: false,
                 });
                 if (!authorization.ok)
                     return authorization;
                 const context = this.taskRuntimeContextProvider({ sessionId: cmd.sessionId }) ?? null;
                 return { ok: true, context };
             }
+            case 'debug-issue-token': {
+                if (cmd.delegationToken)
+                    return { ok: false, code: 'NOT_ALLOWED', error: 'Managed tasks cannot issue debug tokens' };
+                // 仅 EVOLCORE_DEBUG_MODE=1 时由 index.ts 注册 executor；非 debug 模式直接拒绝
+                if (!this.debugIssueTokenExecutor) {
+                    return { ok: false, error: 'debug mode is not enabled; start daemon with: ec start --debug' };
+                }
+                if (typeof cmd.sessionId !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_.-]*$/.test(cmd.sessionId)) {
+                    return { ok: false, error: 'missing sessionId' };
+                }
+                return this.debugIssueTokenExecutor({ sessionId: cmd.sessionId });
+            }
             case 'aun-msg-send': {
                 if (cmd.argv !== undefined) {
                     if (!this.aunMsgSender)
@@ -1458,7 +1543,6 @@ export class IpcServer {
                             : undefined,
                         encrypt: typeof cmd.encrypt === 'boolean' ? cmd.encrypt : undefined,
                         thread: typeof cmd.thread === 'string' ? cmd.thread : undefined,
-                        returnPolicy: cmd.returnPolicy === 'required' || cmd.returnPolicy === 'none' ? cmd.returnPolicy : undefined,
                         handoffContext: cmd.handoffContext,
                         originSessionId: typeof cmd.originSessionId === 'string' ? cmd.originSessionId : undefined,
                         originMessageId: typeof cmd.originMessageId === 'string' ? cmd.originMessageId : undefined,
@@ -1704,6 +1788,7 @@ export class IpcServer {
                         contextFilePath: r.contextFilePath,
                         ...(r.logFile ? { logFile: r.logFile } : {}),
                         mode: effectiveMode,
+                        ...(r.queued ? { queued: r.queued } : {}),
                     };
                 }
                 catch (e) {
@@ -1869,37 +1954,6 @@ export class IpcServer {
                     return { ok: false, error: e?.message || String(e) };
                 }
             }
-            case 'memory.feedback': {
-                const { sessionId, text } = cmd;
-                if (!sessionId)
-                    return { ok: false, code: 'INVALID_REQUEST', error: 'missing sessionId' };
-                if (typeof text !== 'string' || !text.trim()) {
-                    return { ok: false, code: 'INVALID_REQUEST', error: 'missing feedback text' };
-                }
-                try {
-                    const taskCtx = await this.resolveMemoryTaskCtx(sessionId, cmd.debug === true);
-                    if (!taskCtx)
-                        return { ok: false, code: 'SESSION_NOT_FOUND', error: `未找到会话 ${sessionId} 的运行时上下文` };
-                    // 只有整理会话可以记录反馈
-                    if (taskCtx.sessionType !== 'memory') {
-                        return { ok: false, code: 'NOT_MEMORY_SESSION', error: '`ec memory feedback` 只能在整理会话内调用' };
-                    }
-                    const batchDir = taskCtx.consolidationBatchDir;
-                    if (!batchDir) {
-                        return { ok: false, code: 'BATCH_DIR_NOT_FOUND', error: '整理会话缺少 consolidationBatchDir' };
-                    }
-                    const { appendOpsRecord } = await import('./core/memory/consolidation-ops-records.js');
-                    appendOpsRecord(batchDir, {
-                        ts: new Date().toISOString(),
-                        op: 'feedback-set',
-                        text,
-                    });
-                    return { ok: true };
-                }
-                catch (e) {
-                    return { ok: false, error: e?.message || String(e) };
-                }
-            }
             case 'config.op': {
                 if (!this.configOperationExecutor)
                     return { ok: false, code: 'NOT_CONFIGURED', error: 'config.op not configured' };
@@ -1972,6 +2026,16 @@ export class IpcServer {
                 }
                 return await this.fsOperationExecutor(argv, sessionId, delegationToken, typeof cmd.delegationCommandHash === 'string' ? cmd.delegationCommandHash : undefined);
             }
+            case 'thread.op': {
+                if (!this.threadOperationExecutor)
+                    return { ok: false, code: 'NOT_CONFIGURED', error: 'thread.op not configured' };
+                const delegated = typeof cmd.delegationToken === 'string' && cmd.delegationToken.trim();
+                const req = {
+                    ...cmd,
+                    localControl: !delegated && this.hasValidControlToken(cmd.controlToken),
+                };
+                return await this.threadOperationExecutor(req);
+            }
             case 'evolagent.initialize': {
                 if (cmd.sessionId || cmd.delegationToken)
                     return { ok: false, code: 'NOT_ALLOWED', error: 'Managed callers must use agent.op' };
@@ -1991,6 +2055,33 @@ export class IpcServer {
                 }
                 return await this.agentOperationExecutor(argv, sessionId, delegationToken, typeof cmd.delegationCommandHash === 'string' ? cmd.delegationCommandHash : undefined);
             }
+            case 'skill.refresh': {
+                if (!this.skillRefreshExecutor) {
+                    return { ok: false, code: 'NOT_CONFIGURED', error: 'skill.refresh not configured' };
+                }
+                let { aid } = cmd;
+                const { sessionId, delegationToken } = cmd;
+                if (typeof aid !== 'string' || !aid) {
+                    return { ok: false, code: 'INVALID_REQUEST', error: 'missing aid' };
+                }
+                if (sessionId !== undefined && typeof sessionId !== 'string') {
+                    return { ok: false, code: 'INVALID_REQUEST', error: 'sessionId must be a string' };
+                }
+                if (delegationToken !== undefined && typeof delegationToken !== 'string') {
+                    return { ok: false, code: 'INVALID_DELEGATION', error: 'delegationToken must be a string' };
+                }
+                if (sessionId && !delegationToken)
+                    return { ok: false, code: 'DELEGATION_REQUIRED', error: 'Managed skill refresh requires delegation' };
+                try {
+                    if (!Array.isArray(cmd.argv))
+                        throw new Error('Skill refresh requires argv');
+                    aid = resolveSkillRefreshArgv(cmd.argv);
+                }
+                catch (error) {
+                    return { ok: false, code: 'INVALID_REQUEST', error: error instanceof Error ? error.message : String(error) };
+                }
+                return await this.skillRefreshExecutor(aid, sessionId, delegationToken, typeof cmd.delegationCommandHash === 'string' ? cmd.delegationCommandHash : undefined);
+            }
             case 'trigger.op':
             case 'trigger.list':
             case 'trigger.show':
@@ -2343,8 +2434,7 @@ export class IpcServer {
             const { rebuildIndex } = await import('./core/memory/index-manager.js');
             const mc = this.agentRegistry?.get(taskCtx.selfAid ?? '')?.config?.memory;
             const maxBytes = mc?.indexMaxBytes ?? 5 * 1024;
-            const buildResult = await rebuildIndex(dirs.consolidatedDir, path.join(dirs.memoryDir, 'MEMORY.md'), scope, path.join(dirs.memoryDir, 'archive', 'invalid'), undefined, // 验签门控尚未开启，不传 verifyFn
-            maxBytes);
+            const buildResult = await rebuildIndex(dirs.consolidatedDir, path.join(dirs.memoryDir, 'MEMORY.md'), scope, maxBytes);
             // 索引重建后顺手检查这一层有没有超期记忆 —— 有则建触发器拉一个独立的遗忘会话。
             await this.maybeTriggerForget(taskCtx, scope, dirs.consolidatedDir, mc, buildResult.verifiedFiles);
         }