evolcore 0.0.33 → 0.0.35-test.0

package/dist/channels/daemon.js

@@ -2,6 +2,7 @@ import { appendExpireEntry, recordNextLaunchCleanup, cleanupPreviousByKind, runE
 import { ExecutionTimeoutError } from '../utils/error-utils.js';
 import { normalizeExecutionMode } from '../trigger/validation.js';
 import { resolvePeerRoleDetail } from '../config/peer-role-resolver.js';
+import { assertSystemSessionLaunchable } from '../core/system-session/registry.js';
 const DEFAULT_WATCHDOG_MS = 11 * 60 * 1000;
 export class DaemonChannel {
     sessionManager;
@@ -253,6 +254,9 @@ export class DaemonChannel {
         // 记忆整理会话：把会话原型与整理模式写进 metadata，供渲染层选 manifest / 手册，
         // 供 ipc 侧校验写命令的 --scope。
         const { memoryMode, memoryScope, consolidationBatchDir, consolidationChatDir, consolidationMemoryDir } = trigger.execution;
+        // 系统会话：类型 / subtype / runner 校验不过直接拒绝（Gemini 不支持），不降级成普通会话
+        if (memoryMode)
+            assertSystemSessionLaunchable({ type: 'memory', subtype: memoryMode }, baseagent);
         // 反馈目标与触发方式（consolidation.ts 在 normalize 后补挂的字段）：
         // 收尾时据此投递反馈，并判断是否该反馈（定时触发不反馈）。
         const { feedbackOrigin, consolidationTriggeredBy } = trigger.execution;
@@ -260,7 +264,7 @@ export class DaemonChannel {
             channelKey: this.channelKey,
             peerId: `trigger:${trigger.id}`,
             peerName: trigger.name,
-            ...(memoryMode ? { sessionType: 'memory', memoryMode } : {}),
+            ...(memoryMode ? { systemSession: { type: 'memory', subtype: memoryMode }, sessionType: 'memory', memoryMode } : {}),
             ...(memoryScope ? { memoryScope } : {}),
             ...(consolidationBatchDir ? { consolidationBatchDir } : {}),
             ...(consolidationChatDir ? { consolidationChatDir } : {}),
@@ -570,8 +574,6 @@ export class DaemonChannel {
             peerId: `bg:${spec.kind}`,
             peerName: spec.kind,
             peerType: 'system',
-            bgKind: spec.kind,
-            bgInstanceId: spec.instanceId,
             ...(spec.metadata ?? {}),
         }, spec.kind, undefined, 'private', spec.baseagent, spec.agentAid, this.channelName, 'system');
         const promise = new Promise((resolve) => {
@@ -586,6 +588,7 @@ export class DaemonChannel {
                 terminated: false,
                 cleanupPolicy,
                 agentAid: spec.agentAid,
+                runtimeDir: spec.runtimeDir,
                 watchdogTimer: setTimeout(() => {
                     this.finishBgSession(runId, slot, 'error', 'bg-session watchdog timeout');
                 }, this.watchdogMs),

package/dist/cli/aun-commands.js

@@ -259,14 +259,18 @@ async function runManagedMsg(args, formatJson) {
         }
     }
     else {
-        if (runtime && (runtime.channel !== 'aun' || runtime.chatType !== 'private')) {
+        // `--thread` 是话题作用域的读取：目标对端由话题推断，数据是本 agent 自己的
+        // 消息日志，因此既不受"当前必须是私聊"限制（群会话里也要能查 A↔C 的话题），
+        // 也不受"只能查当前对端"限制。不带 --thread 时保持原有边界。
+        const threadScoped = parsed.command.kind === 'history' && !!parsed.command.threadId;
+        if (runtime && (runtime.channel !== 'aun' || runtime.chatType !== 'private') && !threadScoped) {
             failManagedGroup(formatJson, 'SCOPE_MISMATCH', 'ec msg history/online 只能读取当前 AUN 私聊关系');
         }
         // owner/admin 可以跨对端读历史（每次查询仍只针对一个对端）。这里只是快速
         // 预检：角色未知时放行交给 daemon 判定，daemon 侧 handleMsgOperation 才是
         // 权威关卡，member 由 currentRelationOnly 约束、visitor 直接拒绝。
         const mayReadCrossPeer = parsed.command.kind === 'history'
-            && (runtime?.peerRole === undefined || isManagementRole(runtime.peerRole));
+            && (threadScoped || runtime?.peerRole === undefined || isManagementRole(runtime.peerRole));
         if (!mayReadCrossPeer && runtime?.channelId && parsed.command.target !== runtime.channelId.replace(/^@/, '')) {
             failManagedGroup(formatJson, 'SCOPE_MISMATCH', `只能读取当前 AUN 私聊对端：${runtime.channelId}`);
         }
@@ -2065,10 +2069,15 @@ Options:
 // ==================== Group ====================
 const GROUP_FROM_AID_FORMAT_EXAMPLE = 'sender.example.invalid';
 const GROUP_AID_FORMAT_EXAMPLE = '12345.example.invalid';
-function printGroupSendAidHint() {
-    console.error('正确格式: ec group send <发送方AID> <真实群AID> <正文或文件参数>');
-    console.error(`仅格式示例（.example.invalid 是保留的虚构域，不是真实 AID）: ec group send ${GROUP_FROM_AID_FORMAT_EXAMPLE} ${GROUP_AID_FORMAT_EXAMPLE} "hello"`);
-    console.error('查询真实群 AID: ec group list <发送方AID>');
+function printGroupArgsHint(sub) {
+    if (sub === 'send') {
+        console.error('正确格式: ec group send <发送方AID> <真实群AID> <正文或文件参数>');
+    }
+    else {
+        console.error(`正确格式: ec group ${sub} <发送方AID> <真实群AID> [选项]`);
+    }
+    console.error(`仅格式示例（.example.invalid 是保留的虚构域，不是真实 AID）: ec group ${sub} ${GROUP_FROM_AID_FORMAT_EXAMPLE} ${GROUP_AID_FORMAT_EXAMPLE}`);
+    console.error('顺序固定为「先发送方 AID，后群 AID」；查询真实群 AID: ec group list <发送方AID>');
 }
 function printGroupRulesUsage() {
     console.log(`用法:
@@ -2173,7 +2182,8 @@ Options:
                         无值时默认 5m；Trigger 名：check-<目标threadId>-from-<来源threadId>-<唯一后缀>
                         取消/调整用返回的 trigger_id（trig_…），show/update/cancel 只认 id
   --trigger-prompt <text> 自定义复查 Trigger prompt 中的用户段（仅 --check-every）
-  --mention <aid>       发送时 @ 某个成员（可多次，或用逗号分隔多个 aid）
+  --mention <...>       发送时 @ 某个成员。单引号包住、逗号分隔多个 aid
+                        （如 --mention 'alice.agentid.pub,bob.agentid.pub'），可多次传入
   --mention-all         发送时 @ 所有人
   --content-type <mime> 显式覆盖 MIME（仅 --file 模式）
   --as <type>           附件类型：image|video|voice|file（仅 --file 模式）
@@ -2187,7 +2197,7 @@ Options:
 格式示例（.example.invalid 是保留的虚构域，以下 AID 均不是真实地址）:
   ec group create sender.example.invalid "Dev Team" --visibility private
   ec group send sender.example.invalid 12345.example.invalid "hello team"
-  ec group send sender.example.invalid 12345.example.invalid "@member 看下 PR" --mention member.example.invalid
+  ec group send sender.example.invalid 12345.example.invalid '@member 看下 PR' --mention 'member.example.invalid'
   ec group send sender.example.invalid 12345.example.invalid --file ./arch.png
   ec group send sender.example.invalid g-12345.example.invalid "进度?" --thread thread-xxx --check-every 30m
   ec group rules sender.example.invalid 12345.example.invalid set ./rules.md
@@ -2207,13 +2217,28 @@ g- 是名称的一部分，会完整保留；默认命名格式为 g-10000 至 g
         console.error('❌ 缺少 <from-aid> 参数');
         process.exit(1);
     }
+    // 第 1 个位置参数必须是「发送方 AID」。群 ID 与私聊 AID 语法相同，isValidAid
+    // 会放行，随后在加载证书时抛 CERT_NOT_FOUND——这条路径既不说明原因也不给出
+    // 正确写法。因此先用明确的群 ID 形态判定，把"参数写反了"当场指出来。
+    // 例外：invites 是多值标志/邀请列表，第 1 个位置参数不是 from；create/list 的
+    // 形态不同，也在下面各自的用法里处理，这里只拦截"以群 ID 打头"这一种错位。
     const { isValidAid } = await import('../aun/aid/index.js');
+    if (isExplicitGroupId(from)) {
+        const second = args[2];
+        console.error(`❌ 第 1 个位置参数 <from-aid> 无效：收到了群 ID: ${from}`);
+        if (second && isValidAid(second) && !isExplicitGroupId(second)) {
+            console.error(`检测到参数顺序写反了：第 2 个参数 ${second} 才是发送方 AID。`);
+            console.error(`请改成: ec group ${sub} ${second} ${from}` + (sub === 'send' ? ' <正文>' : ''));
+        }
+        else {
+            console.error('当前命令缺少发送方 AID，后续参数发生了错位。');
+        }
+        printGroupArgsHint(sub);
+        process.exit(1);
+    }
     if (!isValidAid(from)) {
         console.error(`❌ 第 1 个位置参数 <from-aid> 无效: ${from}`);
-        if (isExplicitGroupId(from)) {
-            console.error('检测到这里填写的是群 ID；当前命令缺少发送方 AID，后续参数发生了错位。');
-        }
-        printGroupSendAidHint();
+        printGroupArgsHint(sub);
         process.exit(1);
     }
     if ((process.env.EVOLCORE_SESSION_ID || (sub === 'history' && readDelegationCredential())) && sub !== 'send') {
@@ -2285,7 +2310,7 @@ g- 是名称的一部分，会完整保留；默认命名格式为 g-10000 至 g
         const gid = args[2];
         if (!gid) {
             console.error('❌ 缺少第 2 个位置参数 <group-aid>');
-            printGroupSendAidHint();
+            printGroupArgsHint(sub);
             process.exit(1);
         }
         try {
@@ -2293,7 +2318,7 @@ g- 是名称的一部分，会完整保留；默认命名格式为 g-10000 至 g
         }
         catch (error) {
             console.error(`❌ 第 2 个位置参数 <group-aid> 不是有效群 AID: ${gid}: ${error.message}`);
-            printGroupSendAidHint();
+            printGroupArgsHint(sub);
             process.exit(1);
         }
     };

package/dist/cli/ctl-command.js

@@ -25,7 +25,9 @@ const CTL_HELP = `用法: ec ctl <command> [args...]
   ec ctl name "新会话名称"
   ec ctl send "任务已完成"
   ec ctl file report.md
-  ec ctl queue --full`;
+  ec ctl queue --full
+  ec ctl path list
+  ec ctl path grant "D:/shared/data" --access read`;
 export async function cmdCtl(args) {
     if (args.length === 0) {
         console.error(CTL_HELP);

package/dist/cli/daemon-commands.js

@@ -4,7 +4,7 @@ import os from 'os';
 import { spawn, execFile } from 'child_process';
 import { promisify } from 'util';
 import readline from 'readline';
-import { resolveRoot, resolvePaths, ensureDataDirs, getPackageRoot, agentMdPath } from '../paths.js';
+import { resolveRoot, resolvePaths, ensureDataDirs, getPackageRoot, agentMdPath, asModeOverridePath } from '../paths.js';
 import { loadDefaults, loadAllAgents, loadDaemonConfig, saveDaemonConfig } from '../config-store.js';
 import { resolveEffective } from '../config/config-manager.js';
 import { resolveAnthropicConfig } from '../agents/baseagent.js';
@@ -25,7 +25,7 @@ import { isNonAgentSessionChannel } from '../core/system-channels.js';
 import { printCodeStats } from './code-stats.js';
 import { getProcessStartTime, startTimeMatches } from '../utils/process-introspect.js';
 import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
-import { MAIN_CLI_BIN, RUNTIME_HOME_ENV, WEB_CLI_BIN, WEB_PACKAGE_LATEST, WEB_PACKAGE_NAME } from '../product.js';
+import { MAIN_CLI_BIN, RUNTIME_HOME_ENV, TARGET_PACKAGE_ROOT_ENV, WEB_CLI_BIN, WEB_PACKAGE_LATEST, WEB_PACKAGE_NAME, } from '../product.js';
 import { rotateStdoutLog } from '../utils/log-writer.js';
 import { inspectDataMigrationRequirement } from '../core/data-migration.js';
 import { isInitCancelledError, printInitCancelHint } from './init-cancel.js';
@@ -79,7 +79,7 @@ export async function ensureCodexHookBeforeLifecycle(onRepaired) {
             });
         if (!usesCodex)
             return true;
-        const packageRoot = getPackageRoot();
+        const packageRoot = process.env[TARGET_PACKAGE_ROOT_ENV] || getPackageRoot();
         const result = await ensureCodexManagedHook({
             packageRoot,
             repairDecision: state => confirmCodexHookRebind(state, packageRoot),
@@ -328,6 +328,11 @@ async function launchPackageLifecycle(source, log, options = {}) {
     const result = await platform.launchMonitorAndConfirm(args, env, pid => scanInstances().restartMonitors.some(item => item.alive && item.record.pid === pid), pid => scanInstances().restartMonitors.some(item => item.alive && item.record.pid !== pid));
     if (!result.ok && launch.stageDir)
         platform.cleanupMonitorStage(launch.stageDir);
+    if (!result.ok) {
+        for (const line of (result.stderrTail ?? '').split(/\r?\n/).filter(Boolean).slice(-8)) {
+            console.error(`  | ${line}`);
+        }
+    }
     return { ok: result.ok, ...(!result.ok ? { reason: result.reason } : {}) };
 }
 function requireCompletedDataMigration(root) {
@@ -458,7 +463,73 @@ function resolveRunningDuration(pid, uptime) {
     const instance = scanInstances().mains.find(entry => entry.alive && entry.record.pid === pid);
     return instance ? formatRunningDuration(Date.now() - instance.record.startedAt) : '未知';
 }
-function printStartupInfo(opts = {}) {
+/**
+ * 渲染"运行模式"那一行。
+ *
+ * `daemonMode` 有值时用 daemon 实例记录里的模式（`ec status` 看的是正在跑的进程）；
+ * 没有时按当前进程判断（`ec start` 时就是这一份 CLI 即将拉起的模式）。
+ */
+/**
+ * CLI 侧按包路径判断模式。**不能用 isDevMode()**：它首次求值会读走并删除
+ * `--as-mode` 覆盖文件，那份文件只该由 daemon 消费。
+ */
+function packageIsDevMode() {
+    return !getPackageRoot().includes('node_modules');
+}
+export function describeRunMode(daemonMode, cliIsDevMode = packageIsDevMode()) {
+    const effective = daemonMode ?? (cliIsDevMode ? 'dev' : 'install');
+    const label = effective === 'install' ? '安装模式' : '开发模式';
+    const note = effective === 'install'
+        ? '（校验随包文件，篡改自动恢复）'
+        : '（不校验随包文件，可随意改动）';
+    return `运行模式:   ${label}${note}`;
+}
+/**
+ * 把本次 `--as-mode` 写进一次性覆盖文件，daemon 启动时读走并删除。
+ *
+ * 不走环境变量：环境变量会被 `ec restart` 全量继承，模式会在操作者不知情的
+ * 情况下被带到新进程。文件是一次性的，daemon 读过即删；若 daemon 最终没起来，
+ * 文件还留着，会在下一次启动时被读到——所以启动真实失败时此处清理。
+ */
+function writeAsModeOverride(asMode) {
+    const file = asModeOverridePath();
+    if (!asMode) {
+        // 没带 --as-mode：清掉上次失败启动可能残留的文件，保证这次按包路径判断
+        clearAsModeOverride(file);
+        return null;
+    }
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, `${asMode}\n`, 'utf-8');
+    return file;
+}
+function clearAsModeOverride(file) {
+    if (!file)
+        return;
+    try {
+        fs.rmSync(file, { force: true });
+    }
+    catch { /* ignore */ }
+}
+/** daemon 已在运行时 `--as-mode` 不会生效，明说，别让人以为切过去了。 */
+function warnAsModeNotApplied(asMode) {
+    if (!asMode)
+        return;
+    console.log(`  ⚠ --as-mode ${asMode} 未生效：daemon 已在运行，模式只在启动时确定。`);
+    console.log(`    需要切换请先 ec stop，再 ec start --as-mode ${asMode}。`);
+}
+function printAsModeNotice(asMode) {
+    if (!asMode)
+        return;
+    console.log('');
+    console.log(`🧪 本次运行模式已设为${asMode === 'install' ? '安装模式' : '开发模式'}（ec start --as-mode ${asMode}）`);
+    if (asMode === 'install') {
+        console.log('   随包发布的 kits/技能文件将按台账校验，带外改动会被自动恢复。');
+        console.log('   开发仓里请勿长期使用：本机 kits 文件会被登记进真实台账，');
+        console.log('   之后再按开发模式修改它们，会在下次以安装模式启动时被回滚。');
+    }
+    console.log('   只影响这一次启动；ec restart 不带该参数，会恢复按包路径判断。');
+}
+function printStartupInfo(opts = {}, asMode) {
     const pkgRoot = getPackageRoot();
     const isNpmInstall = pkgRoot.includes('node_modules');
     const cliRunsSource = !import.meta.url.includes('/dist/');
@@ -502,13 +573,18 @@ function printStartupInfo(opts = {}) {
     console.log(`${prefix}${version}${pidPart}${aunPart}`);
     console.log(`  包路径:     ${pkgRoot}`);
     console.log(`  安装类型:   ${isNpmInstall ? 'npm全局安装' : '开发仓(link)'}`);
+    // asMode 只是"本次请求"，是否生效要看 daemon 是否真的由这次启动拉起，标清楚别和实际模式混淆
+    const modeLine = describeRunMode(opts.runMode ?? asMode, !isNpmInstall);
+    console.log(`  ${asMode && !opts.runMode ? `${modeLine}（--as-mode 请求）` : modeLine}`);
     console.log(`  CLI执行:    ${cliRunsSource ? '源码(tsx)' : '编译产物(dist)'}`);
     console.log(`  Daemon执行: ${daemonRunsDist ? '编译产物(dist)' : '未知'}`);
     console.log(`  代码时间:   ${latestMtime ? formatLocalTime(latestMtime) : '?'}`);
 }
 export async function cmdStart(opts = {}) {
-    const cmdStartedAt = Date.now();
-    printStartupInfo();
+    // Measure from process start so the reported time includes CLI bootstrap
+    // (tsx compilation in a dev checkout), which is what the operator waits for.
+    const cmdStartedAt = Math.min(Date.now(), Math.round(performance.timeOrigin));
+    printStartupInfo(undefined, opts.asMode);
     const p = resolvePaths();
     const existingDaemon = await probeDaemon(p.socket);
     if (existingDaemon) {
@@ -521,6 +597,9 @@ export async function cmdStart(opts = {}) {
             return;
         }
         console.log(`  EvolCore is already running (PID: ${existingDaemon.pid}, IPC reachable)`);
+        const runningRecord = scanInstances().mains.find(m => m.alive && m.record.pid === existingDaemon.pid)?.record;
+        console.log(`  当前 daemon ${describeRunMode(runningRecord?.runMode)}`);
+        warnAsModeNotApplied(opts.asMode);
         console.log(`  已在运行；已运行时长: ${resolveRunningDuration(existingDaemon.pid, existingDaemon.uptime)}；部署/脚本可直接复用当前实例`);
         return;
     }
@@ -621,6 +700,8 @@ export async function cmdStart(opts = {}) {
         console.log(`  EvolCore is already running (PID: ${aliveMains.map(m => m.record.pid).join(', ')})`);
         console.log(`  启动于: ${new Date(first.record.startedAtIso).toLocaleString()}`);
         console.log(`  启动方式: ${first.record.launchedBy}`);
+        console.log(`  当前 daemon ${describeRunMode(first.record.runMode)}`);
+        warnAsModeNotApplied(opts.asMode);
         // 报告 AID 状态
         if (status.aidLastActivity.size > 0) {
             console.log('  AID 状态:');
@@ -647,7 +728,9 @@ export async function cmdStart(opts = {}) {
     // On Windows/macOS the process environment may be unavailable, so an
     // unregistered process from this package is conservatively treated as a
     // blocker when its HOME cannot be identified.
-    const orphans = findOrphanProcesses();
+    // No live main reached this point, so the registry snapshot above is still
+    // the authoritative "known PID" set; avoid a second scan.
+    const orphans = findOrphanProcesses(status);
     const blockingOrphans = orphans.filter(o => isRuntimeOrphan(o));
     if (blockingOrphans.length > 0) {
         console.error(`❌ 检测到未登记的 EvolCore 进程（PID: ${blockingOrphans.map(o => o.pid).join(', ')}），已停止启动以避免重复连接 AUN。`);
@@ -658,10 +741,13 @@ export async function cmdStart(opts = {}) {
     reportOrphans(orphans);
     if (versionInfo.some(result => result.hasUpdate)) {
         cleanEnv();
+        // 这条路由 restart-monitor 拉起 daemon，同样靠覆盖文件把 --as-mode 带过去
+        const overrideFile = writeAsModeOverride(opts.asMode);
         const launched = await launchPackageLifecycle('start', console.log, {
             prepared: true, foreground: opts.foreground, env: buildDaemonEnv(p, opts),
         });
         if (!launched.ok) {
+            clearAsModeOverride(overrideFile);
             console.error(`❌ 启动事务未能建立：${launched.reason}`);
             process.exitCode = 1;
         }
@@ -684,6 +770,7 @@ export async function cmdStart(opts = {}) {
     const appMain = path.join(getPackageRoot(), 'dist', 'index.js');
     const daemonEnv = buildDaemonEnv(p, opts);
     if (opts.foreground) {
+        const overrideFile = writeAsModeOverride(opts.asMode);
         const child = spawn('node', ['--no-warnings=ExperimentalWarning', appMain], {
             detached: false,
             stdio: 'inherit',
@@ -692,6 +779,7 @@ export async function cmdStart(opts = {}) {
         });
         const childPid = child.pid;
         if (!childPid) {
+            clearAsModeOverride(overrideFile);
             console.error('❌ Failed to start EvolCore (process creation failed)');
             process.exit(1);
             return;
@@ -710,16 +798,17 @@ export async function cmdStart(opts = {}) {
                 console.log('🔧 调试模式已启用（EVOLCORE_DEBUG_MODE=1）');
                 console.log('  在宿主终端以任意 session 身份执行命令：');
                 console.log('');
-                console.log('    ec msg send "消息内容" --as-session <sessionId>');
+                console.log(`    ec msg send '<消息内容>' --as-session <sessionId>`);
                 console.log('    ec trigger list --as-session <sessionId>');
                 console.log('    ec memory list --as-session <sessionId>');
                 console.log('');
                 console.log('  查看可用会话（运行后将在此处列出）：');
-                console.log('    ec msg send "test" --as-session   # 不带 sessionId 自动列出');
+                console.log(`    ec msg send 'test' --as-session   # 不带 sessionId 自动列出`);
                 console.log('');
                 console.log('  注意：重启 daemon（ec restart）会清除调试模式，');
                 console.log('        需重新执行 ec start --debug 才能恢复。');
             }
+            printAsModeNotice(opts.asMode);
             void waitForExistingEcweb(p).then((ecweb) => {
                 if (shouldPrintNoSelfAgentHints) {
                     printNoSelfAgentHints({ daemonConfig: loadDaemonConfig(), ecwebStarted: ecweb !== null, skipped });
@@ -766,6 +855,7 @@ export async function cmdStart(opts = {}) {
     const stdoutLog = path.join(p.logs, 'stdout.log');
     const out = fs.openSync(stdoutLog, 'a');
     const err = fs.openSync(stdoutLog, 'a');
+    const overrideFile = writeAsModeOverride(opts.asMode);
     const child = spawn('node', ['--no-warnings=ExperimentalWarning', appMain], {
         detached: true,
         stdio: ['ignore', out, err],
@@ -773,6 +863,12 @@ export async function cmdStart(opts = {}) {
         env: daemonEnv,
     });
     const childPid = child.pid;
+    // daemon 已在启动时读走该文件；若未能起来（pid 丢失/提前退出），清掉避免影响下次启动
+    child.once('error', () => clearAsModeOverride(overrideFile));
+    // Track liveness from the spawn handle instead of launching tasklist on
+    // every poll; the poll interval below is short enough that it matters.
+    let childExited = false;
+    child.once('exit', () => { childExited = true; });
     child.unref();
     // 等待 ready signal（最多 30 秒，AUN sidecar 超时 15s + 其他通道连接）
     const startTime = Date.now();
@@ -823,25 +919,27 @@ export async function cmdStart(opts = {}) {
                 printCodeStats(getPackageRoot(), p.logs);
             }
             console.log(`⏱ done in ${((Date.now() - cmdStartedAt) / 1000).toFixed(1)}s`);
+            printAsModeNotice(opts.asMode);
             if (opts.debug) {
                 console.log('');
                 console.log('🔧 调试模式已启用（EVOLCORE_DEBUG_MODE=1）');
                 console.log('  在宿主终端以任意 session 身份执行命令：');
                 console.log('');
-                console.log('    ec msg send "消息内容" --as-session <sessionId>');
+                console.log(`    ec msg send '<消息内容>' --as-session <sessionId>`);
                 console.log('    ec trigger list --as-session <sessionId>');
                 console.log('    ec memory list --as-session <sessionId>');
                 console.log('');
                 console.log('  查看可用会话（运行后将在此处列出）：');
-                console.log('    ec msg send "test" --as-session   # 不带 sessionId 自动列出');
+                console.log(`    ec msg send 'test' --as-session   # 不带 sessionId 自动列出`);
                 console.log('');
                 console.log('  注意：重启 daemon（ec restart）会清除调试模式，');
                 console.log('        需重新执行 ec start --debug 才能恢复。');
             }
-            // ECWeb lifecycle belongs to the daemon; the CLI only reports whether
-            // the supervised instance became healthy.
-            const ecwebStarted = await waitForExistingEcweb(p) !== null;
+            // ECWeb lifecycle belongs to the daemon; the CLI only needs its health
+            // for the no-agent hints. Waiting otherwise just holds the prompt for
+            // up to the probe timeout after the daemon is already ready.
             if (shouldPrintNoSelfAgentHints) {
+                const ecwebStarted = await waitForExistingEcweb(p) !== null;
                 printNoSelfAgentHints({ daemonConfig: loadDaemonConfig(), ecwebStarted, skipped });
             }
             return;
@@ -860,7 +958,7 @@ export async function cmdStart(opts = {}) {
             return;
         }
         // 进程已退出且无 ready signal
-        if (!platform.isProcessRunning(childPid)) {
+        if (childExited) {
             // 给进程一点时间写 ready signal（可能刚好在写入中）
             if (Date.now() - startTime > 3000) {
                 console.log('❌ Failed to start EvolCore');
@@ -875,9 +973,9 @@ export async function cmdStart(opts = {}) {
                 return;
             }
         }
-        setTimeout(checkReady, 500);
+        setTimeout(checkReady, 200);
     };
-    setTimeout(checkReady, 1000);
+    setTimeout(checkReady, 200);
 }
 function isPidReused(pid, expectedStartedAt) {
     if (expectedStartedAt === undefined)
@@ -890,7 +988,10 @@ function reportPidReused(pid) {
 }
 async function stopPid(pid, gracefulRequested = false, expectedStartedAt) {
     console.log(`🛑 Stopping EvolCore (PID: ${pid})...`);
-    if (isPidReused(pid, expectedStartedAt)) {
+    // A graceful request was accepted by the daemon that answered for this exact
+    // PID over IPC, so its identity is already proven; the start-time probe (a
+    // PowerShell launch on Windows) only guards the kill path.
+    if (!gracefulRequested && isPidReused(pid, expectedStartedAt)) {
         reportPidReused(pid);
         return true;
     }
@@ -939,7 +1040,7 @@ function isRuntimeOrphan(orphan, currentHome = resolveRoot()) {
 export async function cmdStop() {
     const status = scanInstances();
     const p = resolvePaths();
-    const initialOrphans = findOrphanProcesses();
+    const initialOrphans = findOrphanProcesses(status);
     const runtimeOrphans = initialOrphans.filter(orphan => isRuntimeOrphan(orphan, p.root));
     const ping = await probeDaemon(p.socket);
     if (ping && !hasVisibleDaemonPid(status, ping) && runtimeOrphans.length === 0) {
@@ -964,7 +1065,8 @@ export async function cmdStop() {
         process.exitCode = 1;
         return;
     }
-    await sleep(500);
+    // stopPid already observed every process leave the process table, so the
+    // records can be cleaned immediately (same reasoning as restart-monitor).
     cleanupInstances();
     if (aliveMains.length > 1) {
         console.log(`⚠ 停止了 ${aliveMains.length} 个 main 实例: ${aliveMains.map(m => m.record.pid).join(', ')}`);
@@ -973,6 +1075,9 @@ export async function cmdStop() {
 export async function cmdRestart(opts = {}) {
     const cmdStartedAt = Date.now();
     console.log('🔄 Restarting EvolCore...');
+    // 重启不带 --as-mode，模式按包路径重新判定；清掉可能残留的覆盖文件，并显示出来
+    writeAsModeOverride(undefined);
+    console.log(`  ${describeRunMode()}`);
     if (!await ensureCodexHookBeforeLifecycle())
         return;
     const initialStatus = scanInstances();
@@ -1186,7 +1291,8 @@ export async function cmdStatus() {
         console.log('');
     }
     if (pid) {
-        printStartupInfo({ pid, running: true });
+        const mainRecord = aliveMains.find(m => m.record.pid === pid)?.record;
+        printStartupInfo({ pid, running: true, runMode: mainRecord?.runMode });
         if (!ping) {
             console.log('⚠ 仅确认 daemon PID 存活，IPC 不可用，不能据此判断服务健康。');
             if (ipcFailure)
@@ -3203,12 +3309,13 @@ export async function cmdDiagnose(args = []) {
             console.log('[diagnose] - Codex managed hook: 跳过（没有 Agent 使用 Codex）');
         }
         else {
-            const hook = inspectCodexManagedHook({ packageRoot: getPackageRoot() });
+            const packageRoot = process.env[TARGET_PACKAGE_ROOT_ENV] || getPackageRoot();
+            const hook = inspectCodexManagedHook({ packageRoot });
             if (hook.status === 'installed') {
                 console.log(`[diagnose] ✓ Codex managed hook 已安装: ${hook.hookPath}`);
                 if (runHookLaunchProbe) {
                     try {
-                        const launch = runCodexHookLaunchDiagnostic({ packageRoot: getPackageRoot() });
+                        const launch = runCodexHookLaunchDiagnostic({ packageRoot });
                         if (launch.status === 'ok') {
                             console.log('[diagnose] ✓ Codex managed hook 启动探针报告: ' + launch.output);
                             for (const result of launch.results) {

package/dist/cli/fs-command.js

@@ -56,7 +56,8 @@ Options:
   --content-type <mime>           上传时指定内容类型
   --public                        上传后公开可读（personal storage）
   --visibility <public|private>   chmod 可见性
-  --allow-roles <roles>           chmod 角色约束，逗号分隔
+  --allow-roles <roles>           chmod 角色约束，单引号包住、逗号分隔，
+                                  如 --allow-roles 'owner,admin'
   -m aid:<aid>:<perms>            setfacl 新增/更新 ACL
   -x aid:<aid>                    setfacl 移除 ACL
   --source <AID>:<path>           mount 虚拟卷来源