evolclaw 2.5.6 → 2.5.8

package/dist/cli.js

@@ -1307,7 +1307,7 @@ export async function main(args) {
             else if (args[1] === 'wecom') {
                 await cmdInitWecom();
             }
-            else if (args[1]) {
+            else if (args[1] && !args[1].startsWith('-')) {
                 const supported = ['feishu', 'wechat', 'aun', 'dingtalk', 'qqbot', 'wecom'];
                 console.error(`❌ 不支持的渠道: ${args[1]}`);
                 console.error(`   支持的渠道: ${supported.join(', ')}`);

package/dist/config.js

@@ -377,6 +377,8 @@ function validateConfig(config) {
     // Feishu 配置可选，但如果配置了就要完整（支持 array / object 两种格式）
     const feishuInstances = normalizeChannelInstances(config.channels?.feishu, 'feishu');
     for (const inst of feishuInstances) {
+        if (inst.enabled === false)
+            continue;
         const label = feishuInstances.length > 1 ? ` [${inst.name}]` : '';
         if (!inst.appId || inst.appId.startsWith('YOUR_')) {
             logger.warn(`⚠ Feishu${label} appId not configured (Feishu channel will be disabled)`);

package/dist/ipc.js

@@ -1,6 +1,8 @@
 import net from 'net';
 import fs from 'fs';
 import { logger } from './utils/logger.js';
+const isWindows = process.platform === 'win32';
+const isNamedPipe = (p) => isWindows && p.startsWith('\\\\.\\pipe\\');
 export class IpcServer {
     socketPath;
     getStatus;
@@ -12,11 +14,13 @@ export class IpcServer {
         this.commandExecutor = commandExecutor;
     }
     start() {
-        // Remove stale socket file
-        try {
-            fs.unlinkSync(this.socketPath);
+        // Remove stale socket file (Unix only — named pipes auto-cleanup on process exit)
+        if (!isNamedPipe(this.socketPath)) {
+            try {
+                fs.unlinkSync(this.socketPath);
+            }
+            catch { }
         }
-        catch { }
         this.server = net.createServer((conn) => {
             let buf = '';
             conn.on('data', async (data) => {
@@ -42,11 +46,13 @@ export class IpcServer {
             logger.error('[IPC] Server error:', err);
         });
         this.server.listen(this.socketPath, () => {
-            // Ensure socket is readable by current user only
-            try {
-                fs.chmodSync(this.socketPath, 0o600);
+            // Restrict to current user (Unix only — named pipes use Windows ACLs)
+            if (!isNamedPipe(this.socketPath)) {
+                try {
+                    fs.chmodSync(this.socketPath, 0o600);
+                }
+                catch { }
             }
-            catch { }
             logger.info(`[IPC] Listening on ${this.socketPath}`);
         });
     }
@@ -55,10 +61,12 @@ export class IpcServer {
             this.server.close();
             this.server = null;
         }
-        try {
-            fs.unlinkSync(this.socketPath);
+        if (!isNamedPipe(this.socketPath)) {
+            try {
+                fs.unlinkSync(this.socketPath);
+            }
+            catch { }
         }
-        catch { }
     }
     async handleCommand(cmd) {
         switch (cmd.type) {

package/dist/paths.js

@@ -1,6 +1,8 @@
 import fs from 'fs';
 import path from 'path';
 import os from 'os';
+import crypto from 'crypto';
+const isWindows = process.platform === 'win32';
 let _root = null;
 export function resolveRoot() {
     if (_root)
@@ -33,9 +35,16 @@ export function resolvePaths() {
         lineStats: path.join(root, 'logs', 'line-stats.log'),
         readySignal: path.join(root, 'logs', 'ready.signal'),
         selfHealLog: path.join(root, 'logs', 'self-heal.md'),
-        socket: path.join(root, 'logs', 'evolclaw.sock'),
+        socket: resolveSocketPath(root),
     };
 }
+function resolveSocketPath(root) {
+    if (isWindows) {
+        const hash = crypto.createHash('sha1').update(root).digest('hex').slice(0, 12);
+        return `\\\\.\\pipe\\evolclaw-${hash}`;
+    }
+    return path.join(root, 'logs', 'evolclaw.sock');
+}
 export function ensureDataDirs() {
     const p = resolvePaths();
     fs.mkdirSync(p.dataDir, { recursive: true });

package/dist/utils/init-channel.js

@@ -627,6 +627,44 @@ export function resolveAunCoreSdkPkg() {
     catch { /* not found */ }
     return null;
 }
+/**
+ * Download AUN CA root certificate to ~/.aun/CA/root/root.crt.
+ * Idempotent: skips if file already exists. Returns true if a cert is on disk
+ * after the call (either pre-existing or freshly downloaded).
+ *
+ * Must be called BEFORE constructing any AUNClient that needs to verify
+ * gateway-issued certificates (e.g. for uploadAgentMd) — the SDK loads trusted
+ * roots from disk at client construction time and won't pick up later writes.
+ */
+export async function downloadCaRoot(aunPath, gatewayUrl, indent = '') {
+    const caDir = path.join(aunPath, 'CA', 'root');
+    const caCertPath = path.join(caDir, 'root.crt');
+    if (fs.existsSync(caCertPath))
+        return true;
+    if (!gatewayUrl)
+        return false;
+    try {
+        fs.mkdirSync(caDir, { recursive: true });
+        const gwHttp = gatewayUrl.replace(/^wss?:/, 'https:').replace(/\/aun$/, '');
+        const resp = await fetch(`${gwHttp}/pki/chain`, { redirect: 'follow' });
+        if (!resp.ok) {
+            console.warn(`${indent}⚠ CA 根证书下载失败: HTTP ${resp.status}`);
+            return false;
+        }
+        const body = await resp.text();
+        if (!body.includes('BEGIN CERTIFICATE')) {
+            console.warn(`${indent}⚠ CA 根证书响应内容无效，跳过写入`);
+            return false;
+        }
+        fs.writeFileSync(caCertPath, body);
+        console.log(`${indent}✓ CA 根证书已下载`);
+        return true;
+    }
+    catch (e) {
+        console.warn(`${indent}⚠ CA 根证书下载失败: ${e}，可稍后手动下载`);
+        return false;
+    }
+}
 export async function checkAunEnvironment(rl) {
     console.log('\n🔍 AUN 环境检查...\n');
     const minVer = MIN_AUN_CORE_SDK.join('.');
@@ -718,7 +756,7 @@ export async function setupAunAid(rl, _config) {
         let failed = false;
         try {
             const { AUNClient } = await import('@agentunion/aun-node');
-            const client = new AUNClient({ aun_path: aunPath });
+            let client = new AUNClient({ aun_path: aunPath });
             // 如果用户指定了自定义端口，手动设置 gateway URL；否则让 SDK 自动发现
             if (gatewayPort) {
                 const domain = aid.split('.').slice(1).join('.');
@@ -727,26 +765,18 @@ export async function setupAunAid(rl, _config) {
             const result = await client.auth.createAid({ aid });
             console.log(`  ✓ AID ${result.aid} 创建成功`);
             // 下载 CA 根证书（如果本地不存在），从 SDK 返回的实际网关 URL 派生
-            const caDir = path.join(aunPath, 'CA', 'root');
-            const caCertPath = path.join(caDir, 'root.crt');
-            if (!fs.existsSync(caCertPath) && result.gateway) {
+            const caDownloaded = await downloadCaRoot(aunPath, result.gateway || '', '  ');
+            // 关键：CA 下载后必须重建 client，让 SDK 重新加载 trusted roots。
+            // 否则 uploadAgentMd 会因为 "no trusted roots available" 而失败。
+            if (caDownloaded) {
                 try {
-                    fs.mkdirSync(caDir, { recursive: true });
-                    const gwHttp = result.gateway.replace(/^wss?:/, 'https:').replace(/\/aun$/, '');
-                    const resp = await fetch(`${gwHttp}/pki/chain`, { redirect: 'follow' });
-                    if (resp.ok) {
-                        const body = await resp.text();
-                        if (body.includes('BEGIN CERTIFICATE')) {
-                            fs.writeFileSync(caCertPath, body);
-                            console.log('  ✓ CA 根证书已下载');
-                        }
-                        else {
-                            console.warn('  ⚠ CA 根证书响应内容无效，跳过写入');
-                        }
-                    }
+                    await client.close();
                 }
-                catch (e) {
-                    console.warn(`  ⚠ CA 根证书下载失败: ${e}，可稍后手动下载`);
+                catch { /* ignore */ }
+                client = new AUNClient({ aun_path: aunPath });
+                if (gatewayPort) {
+                    const domain = aid.split('.').slice(1).join('.');
+                    client._gatewayUrl = `wss://gateway.${domain}:${gatewayPort}/aun`;
                 }
             }
             // Collect agent.md info and publish
@@ -754,13 +784,25 @@ export async function setupAunAid(rl, _config) {
             const agentType = typeInput === 'human' ? 'human' : 'ai';
             const agentName = aid.split('.')[0];
             const agentMdContent = `---\naid: "${aid}"\nname: "${agentName}"\ntype: "${agentType}"\nversion: "1.0.0"\ndescription: ""\ntags:\n  - evolclaw\ninitialized: false\n---\n`;
+            const agentMdPath = path.join(aidDir, 'agent.md');
             try {
                 await client.auth.uploadAgentMd(agentMdContent);
                 console.log('  ✓ agent.md 已发布');
-                fs.writeFileSync(path.join(aidDir, 'agent.md'), agentMdContent, 'utf-8');
             }
             catch (e) {
-                console.log(`  ⚠ agent.md 发布失败（可稍后用 /agentmd put 重试）: ${String(e.message || e).slice(0, 100)}`);
+                console.log(`  ⚠ agent.md 发布失败（首次连接将自动重试）: ${String(e.message || e).slice(0, 100)}`);
+            }
+            fs.writeFileSync(agentMdPath, agentMdContent, 'utf-8');
+            if (!fs.existsSync(agentMdPath)) {
+                try {
+                    await client.close();
+                }
+                catch { /* ignore */ }
+                console.log(`  ✗ agent.md 本地写入校验失败: ${agentMdPath}`);
+                failed = true;
+            }
+            else {
+                console.log('  ✓ agent.md 已写入本地');
             }
             try {
                 await client.close();

package/dist/utils/init.js

@@ -406,7 +406,7 @@ export async function cmdInit(options) {
         }
         if (options.channel === 'aun' && options.aunAid) {
             // 自动安装 AUN SDK
-            const { resolveAunCoreSdkPkg, npmInstallGlobal } = await import('./init-channel.js');
+            const { resolveAunCoreSdkPkg, npmInstallGlobal, downloadCaRoot } = await import('./init-channel.js');
             if (!resolveAunCoreSdkPkg()) {
                 console.log('正在安装 @agentunion/aun-node...');
                 await npmInstallGlobal('@agentunion/aun-node@latest');
@@ -416,40 +416,38 @@ export async function cmdInit(options) {
             const aidDir = path.join(aunPath, 'AIDs', options.aunAid);
             if (!fs.existsSync(path.join(aidDir, 'private'))) {
                 const { AUNClient } = await import('@agentunion/aun-node');
-                const client = new AUNClient({ aun_path: aunPath });
+                let client = new AUNClient({ aun_path: aunPath });
                 // 让 SDK 通过 well-known 自动发现网关
                 const result = await client.auth.createAid({ aid: options.aunAid });
                 // 下载 CA 根证书（如果本地不存在），从 SDK 返回的实际网关 URL 派生
-                const caDir = path.join(aunPath, 'CA', 'root');
-                const caCertPath = path.join(caDir, 'root.crt');
-                if (!fs.existsSync(caCertPath) && result.gateway) {
+                const caDownloaded = await downloadCaRoot(aunPath, result.gateway || '');
+                // 关键：CA 下载后必须重建 client，让 SDK 重新加载 trusted roots。
+                // 否则 uploadAgentMd 会因为 "no trusted roots available" 而失败。
+                if (caDownloaded) {
                     try {
-                        fs.mkdirSync(caDir, { recursive: true });
-                        const gwHttp = result.gateway.replace(/^wss?:/, 'https:').replace(/\/aun$/, '');
-                        const resp = await fetch(`${gwHttp}/pki/chain`, { redirect: 'follow' });
-                        if (resp.ok) {
-                            const body = await resp.text();
-                            if (body.includes('BEGIN CERTIFICATE')) {
-                                fs.writeFileSync(caCertPath, body);
-                                console.log('✓ CA 根证书已下载');
-                            }
-                            else {
-                                console.warn('⚠ CA 根证书响应内容无效，跳过写入');
-                            }
-                        }
-                    }
-                    catch (e) {
-                        console.warn(`⚠ CA 根证书下载失败: ${e}，可稍后手动下载`);
+                        await client.close();
                     }
+                    catch { }
+                    client = new AUNClient({ aun_path: aunPath });
                 }
                 // 写入初始 agent.md（initialized: false）
                 const agentName = options.aunAid.split('.')[0];
                 const agentMd = `---\naid: "${options.aunAid}"\nname: "${agentName}"\ntype: "ai"\nversion: "1.0.0"\ndescription: ""\ntags:\n  - evolclaw\ninitialized: false\n---\n`;
+                const agentMdPath = path.join(aidDir, 'agent.md');
                 try {
                     await client.auth.uploadAgentMd(agentMd);
-                    fs.writeFileSync(path.join(aidDir, 'agent.md'), agentMd, 'utf-8');
                 }
-                catch { }
+                catch (e) {
+                    console.warn(`⚠ agent.md 网络发布失败（首次连接将自动重试）: ${String(e?.message || e).slice(0, 100)}`);
+                }
+                fs.writeFileSync(agentMdPath, agentMd, 'utf-8');
+                if (!fs.existsSync(agentMdPath)) {
+                    try {
+                        await client.close();
+                    }
+                    catch { }
+                    throw new Error(`agent.md 写入校验失败: ${agentMdPath}`);
+                }
                 try {
                     await client.close();
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evolclaw",
-  "version": "2.5.6",
+  "version": "2.5.8",
   "description": "Lightweight AI Agent gateway connecting Claude Agent SDK to messaging channels (Feishu, ACP) with multi-project session management",
   "type": "module",
   "main": "dist/index.js",