evolclaw 3.1.9 → 3.1.10

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## v3.1.10 (2026-06-04)
+
+### Bug Fixes
+
+- **Windows `evolclaw watch web` 仍 ENOENT（续 3.1.9）** — `where` 会列出同名的全部文件，npm 全局 bin 同时生成无后缀 sh 包装脚本和 `.cmd`/`.ps1`；3.1.9 取首行恰好选中无法在 Windows 执行的 sh 包装。改为优先选 PATHEXT 可执行后缀（`.cmd`/`.exe`/`.bat`/`.com`）。另外 Node 18.20+/20+/22 起 `execFile` 拒绝直接 spawn `.cmd`/`.bat`（CVE-2024-27980），改为 `shell:true` + 引号包裹参数执行
+
 ## v3.1.9 (2026-06-04)
 
 ### Bug Fixes

package/dist/cli/index.js

@@ -2125,7 +2125,16 @@ async function cmdWatchWeb() {
         process.stderr.write('❌ 已安装 evolclaw-web 但无法定位可执行文件。\n   请重新打开终端后再次运行，或手动执行: evolclaw-web --home ' + home + '\n');
         process.exit(1);
     }
-    execFileSync(exe, ['--home', home], { stdio: 'inherit' });
+    // Node 18.20+/20+/22 起，execFile 拒绝直接 spawn .cmd/.bat（CVE-2024-27980），必须 shell:true。
+    // shell 模式下含空格的路径/参数需加引号。
+    const isBatch = /\.(cmd|bat)$/i.test(exe);
+    if (isBatch) {
+        const q = (s) => `"${s}"`;
+        execFileSync(q(exe), ['--home', q(home)], { stdio: 'inherit', shell: true });
+    }
+    else {
+        execFileSync(exe, ['--home', home], { stdio: 'inherit' });
+    }
 }
 async function cmdRestartMonitor() {
     const p = resolvePaths();

package/dist/core/message/im-renderer.js

@@ -162,7 +162,7 @@ export class IMRenderer {
     }
     /** 添加工具调用 */
     addToolCall(name, input, callId, descText, turn, outputTokens) {
-        this.emitProgress('tool_call', outputTokens, turn);
+        this.emitProgress('tool_call', outputTokens, turn, { toolName: name, callId });
         if (this.opts.envelope.chatmode === 'proactive')
             return;
         if (this.opts.suppressActivities)
@@ -181,7 +181,7 @@ export class IMRenderer {
     }
     /** 添加工具结果 */
     addToolResult(name, ok, result, error, callId, durationMs, descText) {
-        this.emitProgress('tool_result');
+        this.emitProgress('tool_result', undefined, undefined, { toolName: name, callId, ok, durationMs });
         if (this.opts.envelope.chatmode === 'proactive')
             return;
         if (this.opts.suppressActivities)
@@ -369,8 +369,19 @@ export class IMRenderer {
         }
     }
     // ── 内部：status.progress 发送 ──
-    emitProgress(activityType, outputTokens, turn) {
-        const payload = { kind: 'status.progress', metadata: { activityType, ...(turn != null && { turn }), ...(outputTokens != null && { outputTokens }) } };
+    emitProgress(activityType, outputTokens, turn, extra) {
+        const payload = {
+            kind: 'status.progress',
+            metadata: {
+                activityType,
+                ...(turn != null && { turn }),
+                ...(outputTokens != null && { outputTokens }),
+                ...(extra?.toolName != null && { toolName: extra.toolName }),
+                ...(extra?.callId != null && { callId: extra.callId }),
+                ...(extra?.ok != null && { ok: extra.ok }),
+                ...(extra?.durationMs != null && { durationMs: extra.durationMs }),
+            },
+        };
         this.opts.send(payload).catch(() => { });
     }
     // ── 内部：proactive 模式（逐事件 activity.batch[1 item]） ──
@@ -392,7 +403,12 @@ export class IMRenderer {
         const outputTokens = event.outputTokens;
         const turn = event.turn;
         const activityType = item.kind === 'text' ? 'text' : item.kind === 'tool_call' ? 'tool_call' : 'tool_result';
-        this.emitProgress(activityType, outputTokens, turn);
+        const extra = item.kind === 'tool_call'
+            ? { toolName: item.name, callId: item.call_id }
+            : item.kind === 'tool_result'
+                ? { toolName: item.name, callId: item.call_id, ok: item.ok, durationMs: item.duration_ms }
+                : undefined;
+        this.emitProgress(activityType, outputTokens, turn, extra);
         const payload = { kind: 'activity.batch', items: [item] };
         // fire-and-forget
         this.opts.send(payload).catch(err => {

package/dist/core/message/message-bridge.js

@@ -29,7 +29,7 @@ export class MessageBridge {
         this.messageQueue = messageQueue;
         this.cmdHandler = cmdHandler;
         this.eventBus = eventBus;
-        this.defaultDebounce = defaultDebounce ?? 2;
+        this.defaultDebounce = defaultDebounce ?? 0;
     }
     /** Inject EvolAgentRegistry so owner lookups/writes route to agent.json for agent-owned channels. */
     setAgentRegistry(registry) {

package/dist/utils/cross-platform.js

@@ -135,7 +135,9 @@ export function commandExists(cmd) {
 }
 /**
  * 解析命令的真实可执行文件绝对路径。
- * Windows: `where` 返回首个匹配（自动含 .cmd/.exe 后缀），解决 execFileSync 不补后缀的问题。
+ * Windows: `where` 会列出全部同名文件（npm 全局 bin 同时生成无后缀 sh 包装、.cmd、.ps1），
+ *   其中无后缀的那个是 Unix sh 脚本，Windows 无法直接 spawn（ENOENT）。
+ *   因此优先选 PATHEXT 可执行后缀（.cmd/.exe/.bat/.com），都没有才退回首行。
  * 失败返回 null。不缓存——刚安装的命令需要重新探测。
  */
 export function resolveCommandPath(cmd) {
@@ -144,8 +146,12 @@ export function resolveCommandPath(cmd) {
             const r = spawnSync('where', [cmd], { encoding: 'utf-8', stdio: 'pipe', windowsHide: true });
             if (r.status !== 0 || !r.stdout)
                 return null;
-            const first = r.stdout.split(/\r?\n/).map(s => s.trim()).filter(Boolean)[0];
-            return first || null;
+            const candidates = r.stdout.split(/\r?\n/).map(s => s.trim()).filter(Boolean);
+            if (candidates.length === 0)
+                return null;
+            const execExts = ['.cmd', '.exe', '.bat', '.com'];
+            const runnable = candidates.find(p => execExts.some(ext => p.toLowerCase().endsWith(ext)));
+            return runnable || candidates[0];
         }
         else {
             const out = execFileSync('which', [cmd], { encoding: 'utf-8', stdio: 'pipe' }).trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evolclaw",
-  "version": "3.1.9",
+  "version": "3.1.10",
   "description": "Lightweight AI Agent gateway connecting Claude Agent SDK to messaging channels (Feishu, ACP) with multi-project session management",
   "type": "module",
   "main": "dist/index.js",