evolclaw 2.0.3 → 2.0.5

package/dist/channels/wechat.js

@@ -17,8 +17,58 @@ const SESSION_PAUSE_DURATION_MS = 10 * 60 * 1000; // 长暂停：10 分钟
 const MSG_TYPE_USER = 1;
 const MSG_TYPE_BOT = 2;
 const MSG_ITEM_TEXT = 1;
+const MSG_ITEM_IMAGE = 2;
 const MSG_ITEM_VOICE = 3;
+const MSG_ITEM_FILE = 4;
+const MSG_ITEM_VIDEO = 5;
 const MSG_STATE_FINISH = 2;
+// ── CDN + AES ───────────────────────────────────────────────────────────────
+const CDN_BASE_URL = 'https://novac2c.cdn.weixin.qq.com/c2c';
+const MIME_MAP = {
+    '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.png': 'image/png',
+    '.gif': 'image/gif', '.webp': 'image/webp', '.bmp': 'image/bmp',
+    '.mp4': 'video/mp4', '.mov': 'video/quicktime', '.avi': 'video/x-msvideo',
+    '.pdf': 'application/pdf', '.doc': 'application/msword',
+    '.docx': 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    '.xls': 'application/vnd.ms-excel',
+    '.xlsx': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    '.zip': 'application/zip', '.rar': 'application/x-rar-compressed',
+    '.txt': 'text/plain', '.csv': 'text/csv', '.md': 'text/markdown',
+};
+// Exported for unit testing
+export function parseAesKey(aesKeyBase64) {
+    const decoded = Buffer.from(aesKeyBase64, 'base64');
+    if (decoded.length === 16)
+        return decoded;
+    if (decoded.length === 32 && /^[0-9a-fA-F]{32}$/.test(decoded.toString('ascii')))
+        return Buffer.from(decoded.toString('ascii'), 'hex');
+    throw new Error(`Invalid aes_key length: ${decoded.length}`);
+}
+// Exported for unit testing
+export function decryptAesEcb(ciphertext, key) {
+    const decipher = crypto.createDecipheriv('aes-128-ecb', key, null);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+}
+// Exported for unit testing
+export function encryptAesEcb(plaintext, key) {
+    const cipher = crypto.createCipheriv('aes-128-ecb', key, null);
+    return Buffer.concat([cipher.update(plaintext), cipher.final()]);
+}
+async function downloadMedia(cdnMedia, hexKey) {
+    const aesKeyBase64 = hexKey
+        ? Buffer.from(hexKey, 'hex').toString('base64')
+        : cdnMedia.aes_key;
+    if (!cdnMedia.encrypt_query_param)
+        throw new Error('No encrypt_query_param');
+    const url = `${CDN_BASE_URL}/download?encrypted_query_param=${encodeURIComponent(cdnMedia.encrypt_query_param)}`;
+    const res = await fetch(url);
+    if (!res.ok)
+        throw new Error(`CDN download failed: ${res.status}`);
+    const encrypted = Buffer.from(await res.arrayBuffer());
+    if (!aesKeyBase64)
+        return encrypted; // 无 key = 明文
+    return decryptAesEcb(encrypted, parseAesKey(aesKeyBase64));
+}
 // ── Markdown → Plain Text ───────────────────────────────────────────────────
 function markdownToPlainText(text) {
     let result = text;
@@ -91,6 +141,8 @@ export class WechatChannel {
     // Session expired 状态
     sessionPausedUntil = 0;
     onSessionExpired;
+    // Project path resolver（用于保存文件到 uploads 目录）
+    projectPathResolver;
     constructor(config) {
         this.config = config;
         const dataDir = resolvePaths().dataDir;
@@ -179,6 +231,64 @@ export class WechatChannel {
             throw err;
         }
     }
+    /** 注册 projectPath 解析器，用于保存接收的文件 */
+    onProjectPathRequest(resolver) {
+        this.projectPathResolver = resolver;
+    }
+    /** 发送文件（图片/视频/文件）给用户，通过 CDN 上传 */
+    async sendFile(to, filePath) {
+        // Session 暂停期间拒绝发送
+        if (this.isSessionPaused()) {
+            logger.warn(`[WeChat] Session paused, dropping file send to ${to}`);
+            return;
+        }
+        const contextToken = this.contextTokenCache.get(to);
+        if (!contextToken) {
+            logger.error(`[WeChat] No context_token for ${to}, cannot send file`);
+            return;
+        }
+        if (!fs.existsSync(filePath)) {
+            logger.error(`[WeChat] File not found: ${filePath}`);
+            return;
+        }
+        try {
+            const plaintext = Buffer.from(fs.readFileSync(filePath));
+            const rawsize = plaintext.length;
+            const rawfilemd5 = crypto.createHash('md5').update(plaintext).digest('hex');
+            const aeskey = crypto.randomBytes(16);
+            const filekey = crypto.randomBytes(16).toString('hex');
+            const filesize = Math.ceil((rawsize + 1) / 16) * 16;
+            // MIME → UploadMediaType
+            const ext = path.extname(filePath).toLowerCase();
+            const mime = MIME_MAP[ext] || 'application/octet-stream';
+            const uploadMediaType = mime.startsWith('image/') ? 1
+                : mime.startsWith('video/') ? 2 : 3;
+            // Step 1: getuploadurl
+            const uploadResp = await this.getUploadUrl({
+                filekey, media_type: uploadMediaType, to_user_id: to,
+                rawsize, rawfilemd5, filesize,
+                aeskey: aeskey.toString('hex'),
+                no_need_thumb: true,
+            });
+            // Step 2: encrypt + upload to CDN
+            const ciphertext = encryptAesEcb(plaintext, aeskey);
+            const downloadParam = await this.cdnUpload(uploadResp.upload_param, filekey, ciphertext);
+            // Step 3: sendmessage with CDN reference
+            const cdnMedia = {
+                encrypt_query_param: downloadParam,
+                aes_key: Buffer.from(aeskey.toString('hex')).toString('base64'),
+                encrypt_type: 1,
+            };
+            const itemType = mime.startsWith('image/') ? MSG_ITEM_IMAGE
+                : mime.startsWith('video/') ? MSG_ITEM_VIDEO : MSG_ITEM_FILE;
+            const item = this.buildMediaItem(itemType, cdnMedia, filePath, filesize, rawsize);
+            await this.sendMediaMessage(to, item, contextToken);
+        }
+        catch (err) {
+            logger.error(`[WeChat] Failed to send file ${filePath} to ${to}:`, err);
+            throw err;
+        }
+    }
     // ── Long-Poll Loop ────────────────────────────────────────────────────
     async pollLoop(signal) {
         let consecutiveFailures = 0;
@@ -315,22 +425,29 @@ export class WechatChannel {
     async handleInboundMessage(msg) {
         if (msg.message_type !== MSG_TYPE_USER)
             return;
-        const text = extractTextFromMessage(msg);
-        if (!text)
-            return;
         const fromUserId = msg.from_user_id ?? '';
         // 缓存 context_token
         if (msg.context_token) {
             this.contextTokenCache.set(fromUserId, msg.context_token);
             this.persistContextTokens();
         }
-        logger.info(`[WeChat] Received: from=${fromUserId} text=${text.slice(0, 50)}...`);
+        // 提取文本（原有逻辑）
+        const text = extractTextFromMessage(msg);
+        // 提取媒体 → 下载
+        const media = await this.extractMedia(msg, fromUserId);
+        // 合成最终内容
+        const finalContent = media.prompt
+            ? (text ? `${text}\n\n${media.prompt}` : media.prompt)
+            : text;
+        if (!finalContent && !media.images.length)
+            return;
+        logger.info(`[WeChat] Received: from=${fromUserId} text=${(finalContent || '').slice(0, 50)} images=${media.images.length}...`);
         // 发送 typing 指示器（异步，不阻塞）
         this.acknowledgeMessage(fromUserId, msg.context_token).catch(() => { });
         // 回调主流程
         if (this.messageHandler) {
             try {
-                await this.messageHandler(fromUserId, text, fromUserId);
+                await this.messageHandler(fromUserId, finalContent || '', fromUserId, media.images.length ? media.images : undefined);
             }
             catch (err) {
                 logger.error('[WeChat] Message handler error:', err);
@@ -379,6 +496,122 @@ export class WechatChannel {
         }
         return undefined;
     }
+    // ── Media Extraction (Inbound) ────────────────────────────────────────
+    async extractMedia(msg, channelId) {
+        const images = [];
+        const prompts = [];
+        for (const item of msg.item_list ?? []) {
+            try {
+                if (item.type === MSG_ITEM_IMAGE && item.image_item?.media) {
+                    const buf = await downloadMedia(item.image_item.media, item.image_item.aeskey);
+                    images.push({ data: buf.toString('base64'), mimeType: 'image/jpeg' });
+                }
+                else if (item.type === MSG_ITEM_FILE && item.file_item?.media) {
+                    const buf = await downloadMedia(item.file_item.media);
+                    const fileName = this.sanitizeFileName(item.file_item.file_name || `file_${Date.now()}`);
+                    const savePath = await this.saveToUploads(buf, fileName, channelId);
+                    prompts.push(`用户发送了文件：${fileName}\n文件已保存到：${savePath}\n请使用 Read 工具读取并分析文件内容。`);
+                }
+                else if (item.type === MSG_ITEM_VIDEO && item.video_item?.media) {
+                    const buf = await downloadMedia(item.video_item.media);
+                    const fileName = `video_${Date.now()}.mp4`;
+                    const savePath = await this.saveToUploads(buf, fileName, channelId);
+                    prompts.push(`用户发送了视频：${fileName}\n文件已保存到：${savePath}`);
+                }
+            }
+            catch (err) {
+                logger.error(`[WeChat] Failed to download media type=${item.type}:`, err);
+            }
+        }
+        return { prompt: prompts.join('\n\n'), images };
+    }
+    async saveToUploads(buf, fileName, channelId) {
+        const projectPath = this.projectPathResolver
+            ? await this.projectPathResolver(channelId)
+            : process.cwd();
+        const uploadsDir = path.join(projectPath, '.claude', 'uploads');
+        fs.mkdirSync(uploadsDir, { recursive: true });
+        const savePath = path.join(uploadsDir, fileName);
+        fs.writeFileSync(savePath, buf);
+        return savePath;
+    }
+    /** 清理文件名：移除路径穿越字符，只保留 basename */
+    sanitizeFileName(name) {
+        return path.basename(name).replace(/[<>:"|?*\x00-\x1f]/g, '_') || `file_${Date.now()}`;
+    }
+    // ── Media Upload (Outbound) ──────────────────────────────────────────
+    async getUploadUrl(params) {
+        const body = JSON.stringify({
+            ...params,
+            base_info: { channel_version: CHANNEL_VERSION },
+        });
+        const raw = await this.apiFetch('ilink/bot/getuploadurl', body, DEFAULT_API_TIMEOUT_MS);
+        const resp = JSON.parse(raw);
+        if (!resp.upload_param)
+            throw new Error('getuploadurl: no upload_param');
+        return resp;
+    }
+    async cdnUpload(uploadParam, filekey, ciphertext) {
+        const url = `${CDN_BASE_URL}/upload?encrypted_query_param=${encodeURIComponent(uploadParam)}&filekey=${filekey}`;
+        let lastError;
+        for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+                const res = await fetch(url, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/octet-stream' },
+                    body: new Uint8Array(ciphertext),
+                });
+                if (res.status >= 400 && res.status < 500) {
+                    throw new Error(`CDN upload client error: ${res.status}`);
+                }
+                if (!res.ok)
+                    throw new Error(`CDN upload failed: ${res.status}`);
+                const downloadParam = res.headers.get('x-encrypted-param');
+                if (!downloadParam)
+                    throw new Error('Missing x-encrypted-param header');
+                return downloadParam;
+            }
+            catch (err) {
+                lastError = err;
+                if (err.message?.includes('client error'))
+                    throw err; // 4xx 不重试
+            }
+        }
+        throw lastError;
+    }
+    buildMediaItem(itemType, cdnMedia, filePath, ciphertextSize, plaintextSize) {
+        if (itemType === MSG_ITEM_IMAGE) {
+            return { type: MSG_ITEM_IMAGE, image_item: { media: cdnMedia, mid_size: ciphertextSize } };
+        }
+        if (itemType === MSG_ITEM_VIDEO) {
+            return { type: MSG_ITEM_VIDEO, video_item: { media: cdnMedia, video_size: ciphertextSize } };
+        }
+        return {
+            type: MSG_ITEM_FILE,
+            file_item: {
+                media: cdnMedia,
+                file_name: path.basename(filePath),
+                len: String(plaintextSize),
+            },
+        };
+    }
+    async sendMediaMessage(to, item, contextToken) {
+        const clientId = `evolclaw-wechat:${Date.now()}-${crypto.randomBytes(4).toString('hex')}`;
+        const body = {
+            msg: {
+                from_user_id: '',
+                to_user_id: to,
+                client_id: clientId,
+                message_type: MSG_TYPE_BOT,
+                message_state: MSG_STATE_FINISH,
+                item_list: [item],
+                context_token: contextToken,
+            },
+            base_info: { channel_version: CHANNEL_VERSION },
+        };
+        await this.apiFetch('ilink/bot/sendmessage', JSON.stringify(body), DEFAULT_API_TIMEOUT_MS);
+        logger.info(`[WeChat] Sent media to ${to}, type=${item.type}`);
+    }
     // ── ilink API Helpers ─────────────────────────────────────────────────
     async apiFetch(endpoint, body, timeoutMs, externalSignal) {
         const base = this.config.baseUrl.endsWith('/') ? this.config.baseUrl : `${this.config.baseUrl}/`;

package/dist/cli.js

@@ -1,18 +1,24 @@
+#!/usr/bin/env node
 import fs from 'fs';
 import path from 'path';
-import { spawn, execFileSync, execFile } from 'child_process';
+import { spawn, execFile } from 'child_process';
 import { promisify } from 'util';
 import { resolveRoot, resolvePaths, ensureDataDirs, getPackageRoot } from './paths.js';
 import { cmdInit } from './utils/init.js';
 import { cmdInitWechat } from './utils/init-wechat.js';
 import { cmdInitFeishu } from './utils/init-feishu.js';
+import * as platform from './utils/platform.js';
+// Suppress Node.js ExperimentalWarning (e.g. SQLite) from cluttering CLI output
+process.removeAllListeners('warning');
+process.on('warning', (w) => { if (w.name === 'ExperimentalWarning')
+    return; process.stderr.write((w.stack ?? String(w)) + '\n'); });
 const execFileAsync = promisify(execFile);
 // 清理 Claude Code 环境变量，防止 SDK 认为是嵌套会话
 function cleanEnv() {
     for (const key of [
         'CLAUDECODE', 'CLAUDE_CODE_ENTRYPOINT',
         'CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS',
-        'CLAUDE_CONFIG_DIR', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL'
+        'CLAUDE_CONFIG_DIR',
     ]) {
         delete process.env[key];
     }
@@ -21,14 +27,11 @@ function isRunning(pidFile) {
     if (!fs.existsSync(pidFile))
         return null;
     const pid = parseInt(fs.readFileSync(pidFile, 'utf-8').trim(), 10);
-    try {
-        process.kill(pid, 0);
+    if (platform.isProcessRunning(pid)) {
         return pid;
     }
-    catch {
-        fs.unlinkSync(pidFile);
-        return null;
-    }
+    fs.unlinkSync(pidFile);
+    return null;
 }
 function rotateLogs(logDir) {
     if (!fs.existsSync(logDir))
@@ -148,7 +151,7 @@ function showHistory(statsFile) {
     console.log('==================================================');
 }
 // ==================== Commands ====================
-function cmdStart() {
+async function cmdStart() {
     const p = resolvePaths();
     ensureDataDirs();
     // 检查配置文件
@@ -165,24 +168,17 @@ function cmdStart() {
     }
     // 检查是否有残留进程（PID 文件已丢失但进程还在）
     let hasOrphan = false;
-    try {
-        const output = execFileSync('pgrep', ['-f', 'node.*dist/index.js'], { encoding: 'utf-8' }).trim();
-        if (output) {
-            const pids = output.split('\n');
-            console.log(`⚠ 发现 ${pids.length} 个残留进程，正在清理...`);
-            for (const p of pids) {
-                try {
-                    process.kill(parseInt(p, 10));
-                }
-                catch { }
-            }
-            hasOrphan = true;
+    const orphanPids = platform.findProcesses('node.*dist/index.js');
+    if (orphanPids.length > 0) {
+        console.log(`⚠ 发现 ${orphanPids.length} 个残留进程，正在清理...`);
+        for (const p of orphanPids) {
+            platform.killProcess(p);
         }
+        hasOrphan = true;
     }
-    catch { }
     // 如果清理了残留进程，等待它们退出
     if (hasOrphan) {
-        execFileSync('sleep', ['2']);
+        await sleep(2000);
     }
     console.log('🚀 Starting EvolClaw...');
     rotateLogs(p.logs);
@@ -196,7 +192,7 @@ function cmdStart() {
     const out = fs.openSync(stdoutLog, 'a');
     const err = fs.openSync(stdoutLog, 'a');
     const appMain = path.join(getPackageRoot(), 'dist', 'index.js');
-    const child = spawn('node', [appMain], {
+    const child = spawn('node', ['--no-warnings=ExperimentalWarning', appMain], {
         detached: true,
         stdio: ['ignore', out, err],
         env: {
@@ -211,19 +207,7 @@ function cmdStart() {
     // 等待 ready signal（最多 15 秒）
     const startTime = Date.now();
     const checkReady = () => {
-        // 进程已退出
-        if (!isRunning(p.pid)) {
-            console.log('❌ Failed to start EvolClaw');
-            console.log('');
-            console.log('📝 Error details (last 10 lines of stdout):');
-            if (fs.existsSync(stdoutLog)) {
-                const content = fs.readFileSync(stdoutLog, 'utf-8').trim().split('\n');
-                console.log(content.slice(-10).map(l => `  ${l}`).join('\n'));
-            }
-            process.exit(1);
-            return;
-        }
-        // ready signal 出现
+        // ready signal 出现（优先检查，避免 Windows 上 isRunning 误判）
         if (fs.existsSync(p.readySignal)) {
             const pid = isRunning(p.pid);
             console.log(`✓ EvolClaw started successfully (PID: ${pid})`);
@@ -248,6 +232,21 @@ function cmdStart() {
             process.exit(1);
             return;
         }
+        // 进程已退出且无 ready signal
+        if (!isRunning(p.pid)) {
+            // 给进程一点时间写 ready signal（可能刚好在写入中）
+            if (Date.now() - startTime > 3000) {
+                console.log('❌ Failed to start EvolClaw');
+                console.log('');
+                console.log('📝 Error details (last 10 lines of stdout):');
+                if (fs.existsSync(stdoutLog)) {
+                    const content = fs.readFileSync(stdoutLog, 'utf-8').trim().split('\n');
+                    console.log(content.slice(-10).map(l => `  ${l}`).join('\n'));
+                }
+                process.exit(1);
+                return;
+            }
+        }
         setTimeout(checkReady, 500);
     };
     setTimeout(checkReady, 1000);
@@ -260,15 +259,12 @@ async function stopAndWait(pidFile) {
     if (!pid)
         return;
     console.log(`🛑 Stopping EvolClaw (PID: ${pid})...`);
-    process.kill(pid);
+    platform.killProcess(pid);
     await new Promise((resolve) => {
         let waited = 0;
         const check = setInterval(() => {
             waited++;
-            try {
-                process.kill(pid, 0);
-            }
-            catch {
+            if (!platform.isProcessRunning(pid)) {
                 clearInterval(check);
                 try {
                     fs.unlinkSync(pidFile);
@@ -280,10 +276,7 @@ async function stopAndWait(pidFile) {
             }
             if (waited >= 10) {
                 clearInterval(check);
-                try {
-                    process.kill(pid, 9);
-                }
-                catch { }
+                platform.killProcess(pid, true);
                 try {
                     fs.unlinkSync(pidFile);
                 }
@@ -317,12 +310,13 @@ async function cmdStatus() {
         console.log('');
         console.log('📊 Process Info:');
         try {
-            const uptime = execFileSync('ps', ['-p', String(pid), '-o', 'etime='], { encoding: 'utf-8' }).trim();
-            const cpu = execFileSync('ps', ['-p', String(pid), '-o', '%cpu='], { encoding: 'utf-8' }).trim();
-            const mem = execFileSync('ps', ['-p', String(pid), '-o', 'rss='], { encoding: 'utf-8' }).trim();
-            console.log(`  Uptime: ${uptime}`);
-            console.log(`  CPU: ${cpu}%`);
-            console.log(`  Memory: ${mem} KB`);
+            const info = platform.getProcessInfo(pid);
+            if (info.uptime)
+                console.log(`  Uptime: ${info.uptime}`);
+            if (info.cpu)
+                console.log(`  CPU: ${info.cpu}%`);
+            if (info.memory)
+                console.log(`  Memory: ${info.memory} KB`);
         }
         catch { }
         console.log(`  EVOLCLAW_HOME: ${resolveRoot()}`);
@@ -337,14 +331,16 @@ async function cmdStatus() {
         console.log('');
         console.log('📦 Sessions & Projects:');
         try {
-            const output = execFileSync('sqlite3', [p.db,
-                'SELECT count(*) FROM sessions; SELECT count(*) FROM sessions WHERE is_active=1; SELECT count(DISTINCT channel_id) FROM sessions; SELECT count(DISTINCT project_path) FROM sessions;'
-            ], { encoding: 'utf-8' }).trim().split('\n');
-            if (output.length >= 4) {
-                console.log(`  Total sessions: ${output[0]} (active: ${output[1]})`);
-                console.log(`  Unique chats: ${output[2]}`);
-                console.log(`  Projects: ${output[3]}`);
-            }
+            const Database = await import('node:sqlite');
+            const db = new Database.DatabaseSync(p.db);
+            const totalSessions = db.prepare('SELECT count(*) as cnt FROM sessions').get();
+            const activeSessions = db.prepare('SELECT count(*) as cnt FROM sessions WHERE is_active=1').get();
+            const uniqueChats = db.prepare('SELECT count(DISTINCT channel_id) as cnt FROM sessions').get();
+            const projects = db.prepare('SELECT count(DISTINCT project_path) as cnt FROM sessions').get();
+            db.close();
+            console.log(`  Total sessions: ${totalSessions.cnt} (active: ${activeSessions.cnt})`);
+            console.log(`  Unique chats: ${uniqueChats.cnt}`);
+            console.log(`  Projects: ${projects.cnt}`);
         }
         catch { }
     }
@@ -384,7 +380,42 @@ async function cmdStatus() {
             }
             if (config.channels?.wechat?.token) {
                 const tokenPreview = config.channels.wechat.token.slice(0, 20);
-                console.log(`  WeChat: ✓ Configured (Token: ${tokenPreview}...)`);
+                // Validate token by calling getconfig API
+                try {
+                    const baseUrl = (config.channels.wechat.baseUrl || 'https://ilinkai.weixin.qq.com').replace(/\/$/, '');
+                    const body = JSON.stringify({ base_info: { channel_version: '1.0.0' } });
+                    const uint32 = (await import('node:crypto')).default.randomBytes(4).readUInt32BE(0);
+                    const wechatUin = Buffer.from(String(uint32), 'utf-8').toString('base64');
+                    const res = await fetch(`${baseUrl}/ilink/bot/getconfig`, {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/json',
+                            'AuthorizationType': 'ilink_bot_token',
+                            'Authorization': `Bearer ${config.channels.wechat.token.trim()}`,
+                            'X-WECHAT-UIN': wechatUin,
+                        },
+                        body,
+                        signal: AbortSignal.timeout(10_000),
+                    });
+                    const resp = JSON.parse(await res.text());
+                    const isExpired = resp.errcode === -14 || resp.ret === -14;
+                    if (isExpired) {
+                        console.log(`  WeChat: ✗ Token expired (Token: ${tokenPreview}...)`);
+                        console.log('          Run: evolclaw init wechat && evolclaw restart');
+                    }
+                    else {
+                        console.log(`  WeChat: ✓ Connected (Token: ${tokenPreview}...)`);
+                    }
+                }
+                catch (e) {
+                    const msg = e.message || '';
+                    if (msg.includes('ETIMEDOUT') || msg.includes('ENETUNREACH') || msg.includes('ENOTFOUND')) {
+                        console.log(`  WeChat: ✗ Connection timeout (Token: ${tokenPreview}...)`);
+                    }
+                    else {
+                        console.log(`  WeChat: ✓ Configured (Token: ${tokenPreview}...)`);
+                    }
+                }
             }
             else {
                 console.log('  WeChat: - Not configured');
@@ -433,8 +464,16 @@ function cmdLogs() {
         console.log(`❌ Log file not found: ${mainLog}`);
         process.exit(1);
     }
-    const child = spawn('tail', ['-f', mainLog], { stdio: 'inherit' });
-    child.on('exit', (code) => process.exit(code || 0));
+    if (platform.isWindows) {
+        // Windows: use fs.watch for live tail
+        const tail = platform.tailFile(mainLog);
+        platform.onShutdown(() => tail.abort());
+    }
+    else {
+        // Unix: use tail -f
+        const child = spawn('tail', ['-f', mainLog], { stdio: 'inherit' });
+        child.on('exit', (code) => process.exit(code || 0));
+    }
 }
 /**
  * restart-monitor: 内部命令，由 /restart 命令调用
@@ -467,10 +506,7 @@ async function cmdRestartMonitor() {
             let waited = 0;
             const interval = setInterval(() => {
                 waited++;
-                try {
-                    process.kill(oldPid, 0);
-                }
-                catch {
+                if (!platform.isProcessRunning(oldPid)) {
                     clearInterval(interval);
                     log(`Process ${oldPid} has exited`);
                     resolve();
@@ -479,10 +515,7 @@ async function cmdRestartMonitor() {
                 if (waited >= 30) {
                     clearInterval(interval);
                     log('ERROR: Process still running after 30s, force killing');
-                    try {
-                        process.kill(oldPid, 9);
-                    }
-                    catch { }
+                    platform.killProcess(oldPid, true);
                     resolve();
                 }
             }, 1000);
@@ -558,7 +591,7 @@ async function spawnAndWaitReady(p, log, timeout) {
     const out = fs.openSync(stdoutLog, 'a');
     const err = fs.openSync(stdoutLog, 'a');
     const appMain = path.join(getPackageRoot(), 'dist', 'index.js');
-    const child = spawn('node', [appMain], {
+    const child = spawn('node', ['--no-warnings=ExperimentalWarning', appMain], {
         detached: true,
         stdio: ['ignore', out, err],
         env: {
@@ -589,10 +622,7 @@ async function spawnAndWaitReady(p, log, timeout) {
     // 超时后杀掉进程
     const pid = isRunning(p.pid);
     if (pid) {
-        try {
-            process.kill(pid);
-        }
-        catch { }
+        platform.killProcess(pid);
         try {
             fs.unlinkSync(p.pid);
         }
@@ -771,7 +801,7 @@ export async function main(args) {
             }
             break;
         case 'start':
-            cmdStart();
+            await cmdStart();
             break;
         case 'stop':
             await cmdStop();
@@ -810,6 +840,6 @@ Environment:
     }
 }
 // 直接运行时自动执行（node dist/cli.js ...）
-if (import.meta.url === `file://${process.argv[1]}`) {
+if (platform.isMainScript(import.meta.url)) {
     main(process.argv.slice(2));
 }

package/dist/core/agent-runner.js

@@ -6,6 +6,7 @@ import os from 'os';
 import { MessageStream } from './message-stream.js';
 import { logger } from '../utils/logger.js';
 import { canUseTool } from '../utils/permission.js';
+import { encodePath } from '../utils/platform.js';
 export class AgentRunner {
     apiKey;
     model;
@@ -59,8 +60,8 @@ export class AgentRunner {
         // 验证会话文件是否存在且有效（仅在非安全模式且有 claudeSessionId 时）
         if (claudeSessionId && !skipResume) {
             const homeDir = os.homedir();
-            const encodedPath = projectPath.replace(/\//g, '-');
-            const sessionFile = path.join(homeDir, '.claude', 'projects', encodedPath, `${claudeSessionId}.jsonl`);
+            const encodedProjectPath = encodePath(projectPath);
+            const sessionFile = path.join(homeDir, '.claude', 'projects', encodedProjectPath, `${claudeSessionId}.jsonl`);
             let isValid = false;
             if (fs.existsSync(sessionFile)) {
                 try {

package/dist/core/command-handler.js

@@ -433,7 +433,7 @@ export class CommandHandler {
             const sessionKey = `${channel}-${channelId}`;
             const processingProject = this.messageQueue.getProcessingProject(sessionKey);
             const queueLength = this.messageQueue.getQueueLength(sessionKey);
-            const normalizePath = (p) => p.replace(/\/+$/, '');
+            const normalizePath = (p) => p.replace(/[/\\]+$/, '');
             for (const [name, projectPath] of Object.entries(this.projects)) {
                 const isCurrent = session?.projectPath === projectPath;
                 const prefix = isCurrent ? '  ✓' : '   ';
@@ -596,7 +596,7 @@ export class CommandHandler {
                 logger.debug('[CommandHandler] SDK listSessions sync failed (non-critical):', error);
             }
             const isGroup = await this.isGroupChat(channel, channelId);
-            const cliSessions = isGroup
+            const cliSessions = (isGroup || !isAdmin)
                 ? []
                 : await this.sessionManager.scanCliSessions(session.projectPath);
             const dbSessionIds = new Set(currentProjectSessions.map(s => s.claudeSessionId).filter(Boolean));
@@ -655,7 +655,7 @@ export class CommandHandler {
                 targetSession = await this.sessionManager.getSessionByUuidPrefix(channel, channelId, sessionName);
             }
             const isGroup = await this.isGroupChat(channel, channelId);
-            if (!targetSession && sessionName.length === 8 && !isGroup) {
+            if (!targetSession && sessionName.length === 8 && !isGroup && isAdmin) {
                 const projectPaths = Object.values(this.projects);
                 if (session) {
                     projectPaths.unshift(session.projectPath);