evolcore 0.0.32 → 0.0.34

package/dist/cli/index.js

@@ -20,6 +20,7 @@ import { cmdStart, cmdStop, cmdRestart, cmdStatus, cmdLogs, cmdWatchCommand, cmd
 import { logCliCommand } from './command-log.js';
 import { isInitCancelledError, printInitCancelHint } from './init-cancel.js';
 import { assertManagedTopLevelCommandAllowed, ManagedCommandNotAllowedError } from './managed-command-guard.js';
+import { resolveDebugContext, stripAsSessionArgs } from './debug-mode.js';
 const MAIN_HELP = `用法: ec <command> [选项]
 
 服务:
@@ -35,6 +36,7 @@ Agent 与会话:
   agent             管理 EvolAgent
   ctl               当前托管会话的控制命令
   queue             查询或操作 agent 消息队列
+  session           按 ec 会话 id 查询本地 session 存档（含 agentSessionId）
   task              恢复暂停或异常中断的会话任务
   trigger           管理定时与事件触发器
   handoff           查询和完成跨会话回流
@@ -76,7 +78,7 @@ AUN:
   EVENT_LOG         事件日志（默认: true）`;
 function printLifecycleHelp(command) {
     const help = {
-        start: `用法: ec start [--foreground] [--diagnose|-d]\n\n  --foreground   前台运行，适合 systemd 或容器直接管理\n  --diagnose, -d 以诊断模式启动 daemon`,
+        start: `用法: ec start [--foreground] [--diagnose|-d] [--debug] [--as-mode dev|install]\n\n  --foreground   前台运行，适合 systemd 或容器直接管理\n  --diagnose, -d 以诊断模式启动 daemon\n  --debug        调试模式：注册调试 IPC，可在宿主终端以任意 session 身份发命令\n  --as-mode      覆盖运行模式判定（仅本次启动生效，不写配置）：\n                   install = 按安装模式（校验随包文件完整性，篡改自动恢复）\n                   dev     = 按开发模式（不校验随包文件）`,
         stop: '用法: ec stop\n\n停止当前 EVOLCORE_HOME 下运行的 EvolCore 服务。',
         restart: `用法: ec restart [--clear] [--diagnose|-d]\n\n  --clear        同时清理跨 HOME 残留的 EvolCore 主进程\n  --diagnose, -d 以诊断模式启动新 daemon`,
         status: '用法: ec status\n\n查看 daemon、agent、渠道与会话运行状态。',
@@ -102,8 +104,12 @@ export async function main(args) {
         return;
     }
     const cmd = args[0] || 'start';
+    // 调试路径：--as-session <sessionId> 注入托管会话身份，必须在白名单检查之前
+    await resolveDebugContext(args);
+    // 注入完成后剥除 --as-session <sessionId> 两个参数，避免子命令把它们当作未知参数
+    const strippedArgs = stripAsSessionArgs(args);
     try {
-        assertManagedTopLevelCommandAllowed(cmd, args);
+        assertManagedTopLevelCommandAllowed(cmd, strippedArgs);
     }
     catch (error) {
         if (!(error instanceof ManagedCommandNotAllowedError))
@@ -112,7 +118,7 @@ export async function main(args) {
         process.exitCode = 1;
         return;
     }
-    logCliCommand(cmd, args);
+    logCliCommand(cmd, strippedArgs);
     if (cmd === '--version' || cmd === '-v' || cmd === '-V') {
         const pkg = JSON.parse(fs.readFileSync(path.join(getPackageRoot(), 'package.json'), 'utf-8'));
         console.log(pkg.version);
@@ -125,7 +131,7 @@ export async function main(args) {
     switch (cmd) {
         case 'init': {
             try {
-                if (wantsHelp(args.slice(1))) {
+                if (wantsHelp(strippedArgs.slice(1))) {
                     console.log(`用法: ec init [渠道] [选项]
 
 仅初始化 defaults.json:
@@ -155,49 +161,49 @@ export async function main(args) {
   ec init wecom         企业微信 AI Bot 扫码创建/手工配置`);
                 }
                 else {
-                    const hasChannelTarget = Boolean(args[1] && !args[1].startsWith('-'));
+                    const hasChannelTarget = Boolean(strippedArgs[1] && !strippedArgs[1].startsWith('-'));
                     if (hasChannelTarget)
                         printInitCancelHint();
-                    if (args[1] === 'aun') {
+                    if (strippedArgs[1] === 'aun') {
                         const { suppressSdkLogs } = await import('../aun/aid/index.js');
                         suppressSdkLogs();
                         await cmdInitAun();
                     }
-                    else if (args[1] === 'wechat') {
+                    else if (strippedArgs[1] === 'wechat') {
                         const { suppressSdkLogs } = await import('../aun/aid/index.js');
                         suppressSdkLogs();
                         await cmdInitWechat();
                     }
-                    else if (args[1] === 'feishu') {
+                    else if (strippedArgs[1] === 'feishu') {
                         const { suppressSdkLogs } = await import('../aun/aid/index.js');
                         suppressSdkLogs();
                         await cmdInitFeishu();
                     }
-                    else if (args[1] === 'dingtalk') {
+                    else if (strippedArgs[1] === 'dingtalk') {
                         const { suppressSdkLogs } = await import('../aun/aid/index.js');
                         suppressSdkLogs();
                         await cmdInitDingtalk();
                     }
-                    else if (args[1] === 'qqbot') {
+                    else if (strippedArgs[1] === 'qqbot') {
                         const { suppressSdkLogs } = await import('../aun/aid/index.js');
                         suppressSdkLogs();
                         await cmdInitQQBot();
                     }
-                    else if (args[1] === 'wecom') {
+                    else if (strippedArgs[1] === 'wecom') {
                         await cmdInitWecom();
                     }
-                    else if (args[1] && !args[1].startsWith('-')) {
+                    else if (strippedArgs[1] && !strippedArgs[1].startsWith('-')) {
                         const supported = ['feishu', 'wechat', 'aun', 'dingtalk', 'qqbot', 'wecom'];
-                        console.error(`❌ 不支持的渠道: ${args[1]}`);
+                        console.error(`❌ 不支持的渠道: ${strippedArgs[1]}`);
                         console.error(`   支持的渠道: ${supported.join(', ')}`);
                         process.exit(1);
                     }
                     else {
                         const { suppressSdkLogs } = await import('../aun/aid/index.js');
                         suppressSdkLogs();
-                        const nonInteractive = args.includes('--non-interactive');
-                        const wantsAutoStart = args.includes('--auto-start');
-                        const wantsNoAutoStart = args.includes('--no-auto-start');
+                        const nonInteractive = strippedArgs.includes('--non-interactive');
+                        const wantsAutoStart = strippedArgs.includes('--auto-start');
+                        const wantsNoAutoStart = strippedArgs.includes('--no-auto-start');
                         if (wantsAutoStart && wantsNoAutoStart) {
                             console.error('❌ --auto-start 与 --no-auto-start 不能同时使用');
                             process.exitCode = 1;
@@ -205,12 +211,12 @@ export async function main(args) {
                         }
                         const initialized = await cmdInit({
                             nonInteractive,
-                            baseagent: getArgValue(args, '--baseagent'),
-                            force: args.includes('--force'),
-                            owner: getArgValue(args, '--owner'),
-                            projectpath: getArgValue(args, '--projectpath'),
-                            ecweb: args.includes('--ecweb') ? true : undefined,
-                            format: getArgValue(args, '--format'),
+                            baseagent: getArgValue(strippedArgs, '--baseagent'),
+                            force: strippedArgs.includes('--force'),
+                            owner: getArgValue(strippedArgs, '--owner'),
+                            projectpath: getArgValue(strippedArgs, '--projectpath'),
+                            ecweb: strippedArgs.includes('--ecweb') ? true : undefined,
+                            format: getArgValue(strippedArgs, '--format'),
                             autoStart: wantsAutoStart ? true : wantsNoAutoStart ? false : undefined,
                         });
                         if (!initialized && process.exitCode == null)
@@ -227,31 +233,41 @@ export async function main(args) {
             break;
         }
         case 'start':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('start');
                 break;
             }
-            await cmdStart({
-                diagnose: args.includes('--diagnose') || args.includes('-d'),
-                foreground: args.includes('--foreground'),
-            });
+            {
+                const asModeRaw = getArgValue(strippedArgs, '--as-mode');
+                if (asModeRaw !== undefined && asModeRaw !== 'dev' && asModeRaw !== 'install') {
+                    console.error(`❌ --as-mode 只接受 dev 或 install，收到: ${asModeRaw}`);
+                    process.exitCode = 1;
+                    break;
+                }
+                await cmdStart({
+                    diagnose: strippedArgs.includes('--diagnose') || strippedArgs.includes('-d'),
+                    foreground: strippedArgs.includes('--foreground'),
+                    debug: strippedArgs.includes('--debug'),
+                    asMode: asModeRaw,
+                });
+            }
             break;
         case 'stop':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('stop');
                 break;
             }
             await cmdStop();
             break;
         case 'restart':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('restart');
                 break;
             }
-            await cmdRestart({ clear: args.includes('--clear'), diagnose: args.includes('--diagnose') || args.includes('-d') });
+            await cmdRestart({ clear: strippedArgs.includes('--clear'), diagnose: strippedArgs.includes('--diagnose') || strippedArgs.includes('-d') });
             break;
         case 'status':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('status');
                 break;
             }
@@ -273,21 +289,21 @@ export async function main(args) {
             }
             break;
         case 'logs':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('logs');
                 break;
             }
-            cmdLogs(args.slice(1));
+            cmdLogs(strippedArgs.slice(1));
             break;
         case 'watch':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('watch');
                 break;
             }
-            await cmdWatchCommand(args.slice(1));
+            await cmdWatchCommand(strippedArgs.slice(1));
             break;
         case 'restart-monitor':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('restart-monitor');
                 break;
             }
@@ -297,7 +313,7 @@ export async function main(args) {
             try {
                 // 开发源码仓可提供 mode.js；正式 npm 包可以不携带该内部命令。
                 const { cmdMode } = await import('./mode.js');
-                await cmdMode(args.slice(1));
+                await cmdMode(strippedArgs.slice(1));
             }
             catch (error) {
                 if (error?.code === 'ERR_MODULE_NOT_FOUND' && /(?:^|[\\/])mode\.js(?:$|')/.test(String(error?.message ?? ''))) {
@@ -309,70 +325,75 @@ export async function main(args) {
             }
             break;
         case 'mv':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('mv');
                 break;
             }
-            await cmdMv(args[1], args[2]);
+            await cmdMv(strippedArgs[1], strippedArgs[2]);
             break;
         case 'diagnose':
-            if (wantsHelp(args.slice(1))) {
+            if (wantsHelp(strippedArgs.slice(1))) {
                 printLifecycleHelp('diagnose');
                 break;
             }
-            await cmdDiagnose(args.slice(1));
+            await cmdDiagnose(strippedArgs.slice(1));
             break;
         case 'data': {
             const { cmdData } = await import('./data-command.js');
-            await cmdData(args.slice(1));
+            await cmdData(strippedArgs.slice(1));
             break;
         }
         case 'net': {
             const { cmdNet } = await import('./net-check.js');
-            await cmdNet(args.slice(1));
+            await cmdNet(strippedArgs.slice(1));
+            break;
+        }
+        case 'integrity': {
+            const { cmdIntegrity } = await import('./integrity-command.js');
+            await cmdIntegrity(strippedArgs.slice(1));
             break;
         }
         case 'ctl':
-            await cmdCtl(args.slice(1));
+            await cmdCtl(strippedArgs.slice(1));
             break;
         case 'memory':
-            await cmdMemory(args.slice(1));
+            await cmdMemory(strippedArgs.slice(1));
             break;
         case 'queue':
-            await cmdQueue(args.slice(1));
+            await cmdQueue(strippedArgs.slice(1));
             break;
         case 'task': {
             const { cmdTask } = await import('./task-command.js');
-            await cmdTask(args.slice(1));
+            await cmdTask(strippedArgs.slice(1));
             break;
         }
         case 'trigger':
             {
                 const { cmdTrigger } = await import('./trigger-command.js');
-                await cmdTrigger(args.slice(1));
+                await cmdTrigger(strippedArgs.slice(1));
             }
             break;
         case 'agent': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();
-            await cmdAgent(args.slice(1));
+            await cmdAgent(strippedArgs.slice(1));
             break;
         }
         case 'aid': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();
-            await cmdAid(args.slice(1));
+            await cmdAid(strippedArgs.slice(1));
             break;
         }
         case 'rpc': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();
-            await cmdRpc(args.slice(1));
+            await cmdRpc(strippedArgs.slice(1));
             break;
         }
         case 'diag': {
             const { cmdDiag } = await import('./diag.js');
-            await cmdDiag(args.slice(1));
+            await cmdDiag(strippedArgs.slice(1));
             break;
         }
         case 'menu-client': {
@@ -380,7 +401,7 @@ export async function main(args) {
             suppressSdkLogs();
             const { cmdMenuClient } = await import('./menu-client.js');
             try {
-                await cmdMenuClient(args.slice(1));
+                await cmdMenuClient(strippedArgs.slice(1));
             }
             catch (error) {
                 const payload = {
@@ -397,80 +418,90 @@ export async function main(args) {
         case 'storage': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();
-            await cmdStorage(args.slice(1));
+            await cmdStorage(strippedArgs.slice(1));
             break;
         }
         case 'fs': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();
             const { cmdFs } = await import('./fs-command.js');
-            await cmdFs(args.slice(1));
+            await cmdFs(strippedArgs.slice(1));
             break;
         }
         case 'msg': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();
-            await cmdMsg(args.slice(1));
+            await cmdMsg(strippedArgs.slice(1));
             break;
         }
         case 'handoff': {
             const { cmdHandoff } = await import('./handoff-command.js');
-            await cmdHandoff(args.slice(1));
+            await cmdHandoff(strippedArgs.slice(1));
+            break;
+        }
+        case 'thread': {
+            const { runThreadCommand } = await import('./thread-command.js');
+            await runThreadCommand(strippedArgs.slice(1));
+            break;
+        }
+        case 'session': {
+            const { runSessionCommand } = await import('./session-command.js');
+            await runSessionCommand(strippedArgs.slice(1));
             break;
         }
         case 'group': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();
-            await cmdGroup(args.slice(1));
+            await cmdGroup(strippedArgs.slice(1));
             break;
         }
         case 'model': {
             const { cmdModel } = await import('./model.js');
-            await cmdModel(args.slice(1));
+            await cmdModel(strippedArgs.slice(1));
             break;
         }
         case 'skill': {
             const { cmdSkill } = await import('./skill-command.js');
-            await cmdSkill(args.slice(1));
+            await cmdSkill(strippedArgs.slice(1));
             break;
         }
         case 'response': {
             const { cmdResponse } = await import('./response.js');
-            await cmdResponse(args.slice(1));
+            await cmdResponse(strippedArgs.slice(1));
             break;
         }
         case 'config': {
             const { cmdConfig } = await import('./config.js');
-            await cmdConfig(args.slice(1));
+            await cmdConfig(strippedArgs.slice(1));
             break;
         }
         case 'contact': {
             const { cmdContact } = await import('./contact.js');
-            await cmdContact(args.slice(1));
+            await cmdContact(strippedArgs.slice(1));
             break;
         }
         case 'stats': {
             const { handleStats } = await import('./stats.js');
-            await handleStats(args.slice(1));
+            await handleStats(strippedArgs.slice(1));
             break;
         }
         case 'version':
         case '-v':
         case '--version': {
             const { handleVersion } = await import('./version.js');
-            handleVersion(args.slice(1));
+            handleVersion(strippedArgs.slice(1));
             break;
         }
         case 'bench': {
             const { suppressSdkLogs } = await import('../aun/aid/index.js');
             suppressSdkLogs();
             const { cmdBench } = await import('./bench.js');
-            await cmdBench(args.slice(1));
+            await cmdBench(strippedArgs.slice(1));
             break;
         }
         case 'link-rules': {
             const { cmdLinkRules } = await import('./link-rules.js');
-            cmdLinkRules(args.slice(1));
+            cmdLinkRules(strippedArgs.slice(1));
             break;
         }
         default:

package/dist/cli/init.js

@@ -561,8 +561,8 @@ export async function initTail(options = {}) {
     async function handleOwnersPrompt(rl) {
         const daemonConfigForOwners = loadDaemonConfig();
         if (daemonConfigForOwners.aid && (!daemonConfigForOwners.owners || daemonConfigForOwners.owners.length === 0)) {
-            const needOwner = (await ask(rl, '\n是否配置进程级管理者（Owner AID）？[y/N] ')).trim().toLowerCase();
-            if (needOwner === 'y' || needOwner === 'yes') {
+            const needOwner = (await ask(rl, '\n是否配置进程级管理者（Owner AID）？[Y/n] ')).trim().toLowerCase();
+            if (!needOwner || needOwner === 'y' || needOwner === 'yes') {
                 console.log('\n📡 进程级管理者绑定 — 请用 evol app 扫描二维码\n');
                 // QR 绑定流程需要暂时关闭 rl，因为它会创建自己的输入监听
                 rl.pause();

package/dist/cli/integrity-command.js

@@ -0,0 +1,196 @@
+/**
+ * integrity-command.ts — `ec integrity` 子命令
+ *
+ * 子命令：
+ *   ec integrity check <path>    — 检查单个文件的台账状态（不修改，不恢复）
+ *   ec integrity seal <path>     — 把当前磁盘内容作为新基线登记（确认一次合法的带外修改）
+ *   ec integrity query <path>    — 打印台账记录（sha256、时间、登记方）
+ *   ec integrity list            — 列出所有已登记文件的状态摘要
+ *
+ * 所有操作都是本地 CLI，不经过 daemon IPC。
+ * 注意：ec integrity 不在 managed 白名单里，agent 会话内执行会被拒绝。
+ */
+import { createRequire } from 'module';
+import { checkFile, queryRecord, registerFile } from '../core/file-integrity/store.js';
+import { integrityDbPath, resolveRoot } from '../paths.js';
+import fs from 'fs';
+import path from 'path';
+const requireFromHere = createRequire(import.meta.url);
+const HELP = `用法: ec integrity <subcommand> [path]
+
+子命令:
+  check <path>    检查文件台账状态（不修改，不恢复文件）
+  seal <path>     把当前磁盘内容登记为新基线（确认合法的带外修改）
+  query <path>    查看台账记录（hash、时间、登记方）
+  list            列出所有已登记文件的摘要状态
+
+说明:
+  台账库位于 $EVOLCORE_HOME/data/integrity/file-integrity.db
+  "seal" 操作相当于手动确认一次合法修改，使其成为新的校验基线。
+  在开发模式下（非 node_modules 安装），系统文件不会自动校验，
+  但可以用 seal 主动建立基线，便于后续对比。
+`;
+function fmtTime(unix) {
+    if (!unix)
+        return '—';
+    return new Date(unix * 1000).toLocaleString('zh-CN', {
+        year: 'numeric', month: '2-digit', day: '2-digit',
+        hour: '2-digit', minute: '2-digit', second: '2-digit',
+        hour12: false,
+    });
+}
+function fmtHash(h) {
+    return h.slice(0, 16) + '…';
+}
+function resolveTarget(arg) {
+    return path.isAbsolute(arg) ? arg : path.resolve(process.cwd(), arg);
+}
+function cmdCheck(target) {
+    const result = checkFile(target);
+    const rel = path.relative(resolveRoot(), target) || path.basename(target);
+    switch (result.status) {
+        case 'missing':
+            console.log(`❓ 文件不存在: ${rel}`);
+            process.exitCode = 1;
+            break;
+        case 'unregistered':
+            console.log(`🆕 未登记（使用 seal 建立基线）: ${rel}`);
+            process.exitCode = 1;
+            break;
+        case 'verified':
+            console.log(`✅ 校验通过: ${rel}`);
+            console.log(`   sha256: ${fmtHash(result.actual)}`);
+            break;
+        case 'tampered':
+            console.log(`❌ 已被修改: ${rel}`);
+            console.log(`   预期: ${fmtHash(result.expected)}`);
+            console.log(`   实际: ${fmtHash(result.actual)}`);
+            console.log(`   可恢复: ${result.restorable ? '是（快照完好）' : '否（快照已损坏）'}`);
+            process.exitCode = 1;
+            break;
+    }
+}
+function cmdSeal(target) {
+    if (!fs.existsSync(target)) {
+        console.error(`❌ 文件不存在: ${target}`);
+        process.exitCode = 1;
+        return;
+    }
+    registerFile(target);
+    const rel = path.relative(resolveRoot(), target) || path.basename(target);
+    console.log(`✅ 已登记为新基线: ${rel}`);
+}
+function cmdQuery(target) {
+    const rec = queryRecord(target);
+    const rel = path.relative(resolveRoot(), target) || path.basename(target);
+    if (!rec) {
+        console.log(`🆕 台账无记录: ${rel}`);
+        return;
+    }
+    console.log(`文件: ${rel}`);
+    console.log(`  sha256:       ${rec.sha256}`);
+    console.log(`  登记时间:     ${fmtTime(rec.registered_at)}`);
+    console.log(`  最后校验:     ${fmtTime(rec.last_verified_at)}`);
+    console.log(`  登记方:       ${rec.registrar_aid ?? '（系统）'}`);
+}
+function cmdList() {
+    if (!fs.existsSync(integrityDbPath())) {
+        console.log('台账库尚未创建（还没有任何文件被登记过）');
+        return;
+    }
+    let DatabaseSync;
+    try {
+        ({ DatabaseSync } = requireFromHere('node:sqlite'));
+    }
+    catch {
+        console.error('❌ node:sqlite 不可用（需要 Node.js 22.5+）');
+        process.exitCode = 1;
+        return;
+    }
+    const db = new DatabaseSync(integrityDbPath(), { readonly: true });
+    const rows = db.prepare('SELECT file_path, sha256, registered_at, last_verified_at FROM file_integrity ORDER BY file_path').all();
+    if (rows.length === 0) {
+        console.log('台账为空');
+        return;
+    }
+    // 台账主键在 Windows 下是小写，root 也要按同样规则归一化才能前缀匹配
+    const rootSlash = resolveRoot().replace(/\\/g, '/');
+    const root = (process.platform === 'win32' ? rootSlash.toLowerCase() : rootSlash) + '/';
+    let ok = 0, tampered = 0, missing = 0;
+    console.log(`台账共 ${rows.length} 条记录（${integrityDbPath()}）\n`);
+    for (const row of rows) {
+        const rel = row.file_path.replace(/\\/g, '/').startsWith(root)
+            ? row.file_path.replace(/\\/g, '/').slice(root.length)
+            : row.file_path;
+        const chk = checkFile(row.file_path);
+        let icon;
+        switch (chk.status) {
+            case 'verified':
+                icon = '✅';
+                ok++;
+                break;
+            case 'tampered':
+                icon = '❌';
+                tampered++;
+                break;
+            case 'missing':
+                icon = '❓';
+                missing++;
+                break;
+            case 'unregistered':
+                icon = '🆕';
+                break;
+            default: icon = ' ';
+        }
+        console.log(`${icon} ${rel}`);
+        if (chk.status === 'tampered') {
+            console.log(`     预期: ${fmtHash(row.sha256)}  实际: ${fmtHash(chk.actual)}`);
+        }
+    }
+    console.log(`\n摘要：通过 ${ok}，已改 ${tampered}，不存在 ${missing}`);
+    if (tampered > 0 || missing > 0)
+        process.exitCode = 1;
+}
+export async function cmdIntegrity(args) {
+    const sub = args[0];
+    if (!sub || sub === '--help' || sub === '-h') {
+        console.log(HELP);
+        return;
+    }
+    switch (sub) {
+        case 'check': {
+            if (!args[1]) {
+                console.error('用法: ec integrity check <path>');
+                process.exitCode = 1;
+                return;
+            }
+            cmdCheck(resolveTarget(args[1]));
+            break;
+        }
+        case 'seal': {
+            if (!args[1]) {
+                console.error('用法: ec integrity seal <path>');
+                process.exitCode = 1;
+                return;
+            }
+            cmdSeal(resolveTarget(args[1]));
+            break;
+        }
+        case 'query': {
+            if (!args[1]) {
+                console.error('用法: ec integrity query <path>');
+                process.exitCode = 1;
+                return;
+            }
+            cmdQuery(resolveTarget(args[1]));
+            break;
+        }
+        case 'list':
+            cmdList();
+            break;
+        default:
+            console.error(`未知子命令: ${sub}`);
+            console.log(HELP);
+            process.exitCode = 1;
+    }
+}

package/dist/cli/managed-command-guard.js

@@ -18,8 +18,13 @@ const MANAGED_TASK_COMMANDS = new Set([
     'msg',
     'queue',
     'response',
+    // `session` 按 ec 会话 id 只读查询本地 session 存档（meta 文件尾行的
+    // agentSessionId 等），不触碰 daemon 与进程生命周期。
+    'session',
     // `skill` 管理 EC 技能（安装/开关/校验）。它的主要使用者就是 agent 自己——
     // ec-skill 技能的 SKILL.md 明确指导 agent 调用它。脚本只读写
+    // `thread` 提供话题链操作，通过 thread.op IPC 鉴权
+    'thread',
     // $EVOLCORE_HOME/skills/ 与 kits/skills/ 下的技能文件，不触碰进程生命周期。
     // 本白名单只负责让它进到脚本；具体某一级的读写权限由 skill.mjs 的
     // assertPermission() 按会话上下文判定（群聊一律拒，Agent 级要 owner，