evolcore 0.0.11 → 0.0.12

package/dist/cli/aun-commands.js

@@ -3,6 +3,8 @@ import path from 'path';
 import { agentMdPath, resolvePaths, resolveRoot } from '../paths.js';
 import { isExplicitGroupId } from '../aun/group-identity.js';
 import { getArgValue, isHelpFlag, wantsHelp } from './help.js';
+import { ipcQuery } from '../ipc.js';
+import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
 // ==================== AID ====================
 function resolveAunPath(args) {
     const idx = args.indexOf('--aun-path');
@@ -10,6 +12,238 @@ function resolveAunPath(args) {
         return args[idx + 1];
     return process.env.AUN_HOME || undefined;
 }
+function renderAidShow(info, formatJson) {
+    if (formatJson) {
+        console.log(JSON.stringify(info, null, 2));
+        return;
+    }
+    console.log(`AID: ${info.aid}`);
+    console.log(`  私钥: ${info.hasPrivateKey ? '有' : '无'}`);
+    console.log(`  agent.md: ${info.hasAgentMd ? '有' : '无'}`);
+    if (info.hasAgentMd) {
+        const sigLabel = info.agentMdSignature === 'verified' ? '✓ 已验签'
+            : info.agentMdSignature === 'unsigned' ? '⚠ 未签名'
+                : info.agentMdSignature === 'invalid' ? `✗ 签名无效${info.agentMdSignatureReason ? ': ' + info.agentMdSignatureReason : ''}`
+                    : '? 未知';
+        console.log(`  签名状态: ${sigLabel}`);
+    }
+    console.log(`  证书到期: ${info.certExpiresAt ?? '无证书'}${info.certExpired ? ' (已过期!)' : ''}`);
+    if (info.certSubject)
+        console.log(`  证书主体: ${info.certSubject}`);
+    if (info.keyMatchesCert === false)
+        console.log('  密钥/证书: ✗ 公钥不匹配（cert.pem 与 key.json 公钥不一致）');
+    else if (info.keyMatchesCert === true)
+        console.log('  密钥/证书: ✓ 公钥一致');
+    if (info.signVerified === true)
+        console.log('  可签名/验签: ✓ 实测通过');
+    else if (info.signVerified === false)
+        console.log(`  可签名/验签: ✗ 失败${info.signError ? `（${info.signError}）` : ''}`);
+    else
+        console.log('  可签名/验签: ? 未知');
+}
+function renderAidLookup(result, formatJson) {
+    if (formatJson) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    if (result.exists) {
+        console.log(`✓ ${result.aid} 已注册`);
+        if (result.gateway)
+            console.log(`  网关: ${result.gateway}`);
+        if (result.content) {
+            const hasSig = result.content.includes('AUN-SIGNATURE');
+            console.log(`  签名: ${hasSig ? '有（未验证，如需验证请用 ec aid agentmd get ' + result.aid + '）' : '无'}`);
+            console.log('');
+            console.log(result.content);
+        }
+    }
+    else {
+        console.log(`✗ ${result.aid} 未注册`);
+        if (result.gateway)
+            console.log(`  网关: ${result.gateway}`);
+        if (result.error)
+            console.log(`  原因: ${result.error}`);
+    }
+}
+function renderAgentmdGet(aid, result, formatJson) {
+    if (!result.content || !result.content.trim()) {
+        console.log(`ℹ️ ${aid} 尚未设置 agent.md`);
+        return;
+    }
+    if (formatJson) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    console.log(result.content);
+    const verification = result.verification;
+    if (verification.status === 'verified')
+        console.error('✓ 签名验证通过');
+    else if (verification.status === 'invalid')
+        console.error(`⚠ 签名验证失败: ${verification.reason ?? '未知原因'}`);
+    else
+        console.error('ℹ️ 未签名');
+}
+function failManagedAid(formatJson, code, error) {
+    if (formatJson)
+        console.log(JSON.stringify({ ok: false, code, error }, null, 2));
+    else
+        console.error(`❌ ${error}`);
+    process.exit(1);
+}
+async function runManagedAid(args, formatJson) {
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    if (!sessionId)
+        failManagedAid(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
+    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    if (!delegationToken) {
+        failManagedAid(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
+    }
+    const response = await ipcQuery(resolvePaths().socket, {
+        type: 'aid.op',
+        argv: ['aid', ...args],
+        sessionId,
+        delegationToken,
+    }, 30_000);
+    if (!response)
+        failManagedAid(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+    if (!response.ok || !response.result) {
+        const error = response.error || 'AID operation failed';
+        const aid = args[0] === 'agentmd' ? args[2] : args[1];
+        if (args[0] === 'agentmd' && args[1] === 'get' && (error.includes('not found') || error.includes('404'))) {
+            console.log(`ℹ️ ${aid} 尚未设置 agent.md`);
+            return;
+        }
+        if (response.code === 'LOCAL_AGENTMD_MISSING') {
+            failManagedAid(formatJson, response.code, `本地无 agent.md: ${aid}`);
+        }
+        failManagedAid(formatJson, response.code || 'AID_OPERATION_FAILED', error);
+    }
+    switch (response.result.kind) {
+        case 'show':
+            renderAidShow(response.result.value, formatJson);
+            return;
+        case 'lookup':
+            renderAidLookup(response.result.value, formatJson);
+            return;
+        case 'agentmd.get':
+            renderAgentmdGet(response.result.aid, response.result.value, formatJson);
+            return;
+        case 'agentmd.put':
+            if (formatJson)
+                console.log(JSON.stringify({ ok: true, aid: response.result.aid, path: response.result.path }, null, 2));
+            else
+                console.log('✓ agent.md 已发布');
+    }
+}
+function failManagedGroup(formatJson, code, error) {
+    if (formatJson)
+        console.log(JSON.stringify({ ok: false, code, error }));
+    else
+        console.error(`❌ ${error}`);
+    process.exit(1);
+}
+async function runManagedGroup(args, formatJson) {
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    if (!sessionId)
+        failManagedGroup(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
+    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    if (!delegationToken) {
+        failManagedGroup(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
+    }
+    if (args.includes('--aun-path') || args.includes('--app')) {
+        failManagedGroup(formatJson, 'NOT_ALLOWED', '--aun-path and --app are not allowed in a managed task');
+    }
+    const response = await ipcQuery(resolvePaths().socket, {
+        type: 'group.op',
+        argv: ['group', ...args],
+        sessionId,
+        delegationToken,
+    }, 60_000);
+    if (!response)
+        failManagedGroup(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+    if (!response.ok || !response.result) {
+        failManagedGroup(formatJson, response.code || 'GROUP_OPERATION_FAILED', response.error || 'Group operation failed');
+    }
+    return response.result;
+}
+async function runManagedMsg(args, formatJson) {
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    if (!sessionId)
+        failManagedGroup(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
+    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    if (!delegationToken) {
+        failManagedGroup(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
+    }
+    const response = await ipcQuery(resolvePaths().socket, {
+        type: 'msg.op',
+        argv: ['msg', ...args],
+        sessionId,
+        delegationToken,
+    }, 30_000);
+    if (!response)
+        failManagedGroup(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+    if (!response.ok || !response.result) {
+        failManagedGroup(formatJson, response.code || 'MSG_OPERATION_FAILED', response.error || 'Msg operation failed');
+    }
+    return response.result;
+}
+function renderManagedMsgResult(sub, result, formatJson) {
+    if (formatJson) {
+        console.log(JSON.stringify(result));
+        return;
+    }
+    if (sub === 'online') {
+        for (const [aid, online] of Object.entries(result.online ?? {})) {
+            console.log(`  ${online ? '🟢' : '⚫'} ${aid}`);
+        }
+        return;
+    }
+    if (result.count === 0) {
+        console.log('暂无消息历史');
+        return;
+    }
+    console.log(`✓ ${result.count} 条消息${result.session_id ? `，session=${result.session_id}` : ''}`);
+    for (const message of result.messages ?? []) {
+        const arrow = message.dir === 'in' ? '←' : '→';
+        const peer = message.dir === 'in' ? message.from : message.to;
+        const content = String(message.content ?? '').replace(/\r?\n/g, '\n    ');
+        console.log(`  [${message.time}] ${arrow} ${peer} [${message.msgType}] ${content}`);
+    }
+}
+function renderManagedGroupResult(args, result, formatJson) {
+    if (formatJson) {
+        console.log(JSON.stringify(result));
+        return;
+    }
+    const sub = args[0];
+    if (sub === 'list') {
+        if (!result.items?.length)
+            console.log('(没有加入任何群)');
+        else {
+            console.log(`共 ${result.total ?? result.items.length} 个群:`);
+            for (const group of result.items)
+                console.log(`  ${group.group_id}  ${group.name}  (${group.member_count ?? '?'} 人)`);
+        }
+        return;
+    }
+    if (sub === 'create') {
+        console.log(`✓ 已创建群 ${result.group?.group_id ?? '-'}`);
+        return;
+    }
+    if (sub === 'rules' && args[3] === 'get' && result.status === 'ok') {
+        process.stdout.write(String(result.content ?? ''));
+        return;
+    }
+    if (sub === 'rules' && (args[3] === 'set' || args[3] === 'publish') && result.status !== 'ok') {
+        console.error(`❌ ${result.error ?? `群规则操作状态: ${result.status ?? 'unknown'}`}`);
+        process.exit(1);
+    }
+    if (sub === 'invite') {
+        console.log(`✓ 成功 ${result.added?.length ?? 0}，失败 ${result.failed?.length ?? 0}`);
+        return;
+    }
+    console.log(`✓ group ${sub} 完成`);
+}
 export async function cmdAid(args) {
     const sub = args[0];
     const formatJson = getArgValue(args, '--format') === 'json';
@@ -48,6 +282,10 @@ Options:
   ec aid agentmd get someone.agentid.pub`);
         return;
     }
+    if (process.env.EVOLCORE_SESSION_ID && !wantsHelp(args)) {
+        await runManagedAid(args, formatJson);
+        return;
+    }
     const { aidList, aidListVerified, aidCreate, aidShow, aidDelete, aidLookup, agentmdPut, agentmdGet, buildInitialAgentMd, isValidAid } = await import('../aun/aid/index.js');
     if (sub === 'list') {
         if (wantsHelp(args)) {
@@ -140,33 +378,7 @@ Options:
             process.exit(1);
         }
         const info = await aidShow(aid, { aunPath });
-        if (formatJson) {
-            console.log(JSON.stringify(info, null, 2));
-            return;
-        }
-        console.log(`AID: ${info.aid}`);
-        console.log(`  私钥: ${info.hasPrivateKey ? '有' : '无'}`);
-        console.log(`  agent.md: ${info.hasAgentMd ? '有' : '无'}`);
-        if (info.hasAgentMd) {
-            const sigLabel = info.agentMdSignature === 'verified' ? '✓ 已验签'
-                : info.agentMdSignature === 'unsigned' ? '⚠ 未签名'
-                    : info.agentMdSignature === 'invalid' ? `✗ 签名无效${info.agentMdSignatureReason ? ': ' + info.agentMdSignatureReason : ''}`
-                        : '? 未知';
-            console.log(`  签名状态: ${sigLabel}`);
-        }
-        console.log(`  证书到期: ${info.certExpiresAt ?? '无证书'}${info.certExpired ? ' (已过期!)' : ''}`);
-        if (info.certSubject)
-            console.log(`  证书主体: ${info.certSubject}`);
-        if (info.keyMatchesCert === false)
-            console.log(`  密钥/证书: ✗ 公钥不匹配（cert.pem 与 key.json 公钥不一致）`);
-        else if (info.keyMatchesCert === true)
-            console.log(`  密钥/证书: ✓ 公钥一致`);
-        if (info.signVerified === true)
-            console.log(`  可签名/验签: ✓ 实测通过`);
-        else if (info.signVerified === false)
-            console.log(`  可签名/验签: ✗ 失败${info.signError ? `（${info.signError}）` : ''}`);
-        else
-            console.log(`  可签名/验签: ? 未知`);
+        renderAidShow(info, formatJson);
         return;
     }
     if (sub === 'new') {
@@ -435,28 +647,7 @@ Options:
             process.exit(1);
         }
         const result = await aidLookup(aid);
-        if (formatJson) {
-            console.log(JSON.stringify(result, null, 2));
-            return;
-        }
-        if (result.exists) {
-            console.log(`✓ ${aid} 已注册`);
-            if (result.gateway)
-                console.log(`  网关: ${result.gateway}`);
-            if (result.content) {
-                const hasSig = result.content.includes('AUN-SIGNATURE');
-                console.log(`  签名: ${hasSig ? '有（未验证，如需验证请用 ec aid agentmd get ' + aid + '）' : '无'}`);
-                console.log('');
-                console.log(result.content);
-            }
-        }
-        else {
-            console.log(`✗ ${aid} 未注册`);
-            if (result.gateway)
-                console.log(`  网关: ${result.gateway}`);
-            if (result.error)
-                console.log(`  原因: ${result.error}`);
-        }
+        renderAidLookup(result, formatJson);
         return;
     }
     if (sub === 'agentmd') {
@@ -504,26 +695,7 @@ Options:
             }
             try {
                 const result = await agentmdGet(aid, { withVerification: true, aunPath });
-                if (!result.content || !result.content.trim()) {
-                    console.log(`ℹ️ ${aid} 尚未设置 agent.md`);
-                    return;
-                }
-                if (formatJson) {
-                    console.log(JSON.stringify(result, null, 2));
-                }
-                else {
-                    console.log(result.content);
-                    const v = result.verification;
-                    if (v.status === 'verified') {
-                        console.error(`✓ 签名验证通过`);
-                    }
-                    else if (v.status === 'invalid') {
-                        console.error(`⚠ 签名验证失败: ${v.reason ?? '未知原因'}`);
-                    }
-                    else {
-                        console.error(`ℹ️ 未签名`);
-                    }
-                }
+                renderAgentmdGet(aid, result, formatJson);
             }
             catch (e) {
                 const msg = String(e.message || e);
@@ -667,6 +839,25 @@ Options:
         console.error(`❌ 无效 AID 格式: ${aid}`);
         process.exit(1);
     }
+    if (process.env.EVOLCORE_SESSION_ID) {
+        const operation = { ls: 'storage.list', quota: 'storage.quota', upload: 'storage.upload', download: 'storage.download', rm: 'storage.delete' }[sub];
+        if (!operation)
+            failManagedGroup(formatJson, 'NOT_ALLOWED', `unsupported managed storage command: ${sub}`);
+        const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+        if (!delegationToken)
+            failManagedGroup(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
+        const authorization = await ipcQuery(resolvePaths().socket, {
+            type: 'storage.auth',
+            operation,
+            aid,
+            sessionId: process.env.EVOLCORE_SESSION_ID,
+            delegationToken,
+        }, 10_000);
+        if (!authorization)
+            failManagedGroup(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+        if (!authorization.ok)
+            failManagedGroup(formatJson, authorization.code || 'STORAGE_AUTH_FAILED', authorization.error || 'Storage operation denied');
+    }
     const { storageUpload, storageDownload, storageLs, storageRm, storageQuota } = await import('../aun/storage/index.js');
     if (sub === 'upload') {
         const localFile = args[2];
@@ -874,6 +1065,11 @@ Options:
         console.error(`❌ 无效 AID 格式: ${from}`);
         process.exit(1);
     }
+    if (process.env.EVOLCORE_SESSION_ID && sub !== 'send') {
+        const result = await runManagedMsg(args, formatJson);
+        renderManagedMsgResult(sub, result, formatJson);
+        return;
+    }
     const { msgSend, msgPull, msgAck, msgRecall, msgOnline, msgHistory } = await import('../aun/msg/index.js');
     const commonOpts = { aunPath, slotId: appSlot };
     if (sub === 'history') {
@@ -1334,6 +1530,11 @@ Options:
         printGroupSendAidHint();
         process.exit(1);
     }
+    if (process.env.EVOLCORE_SESSION_ID && sub !== 'send') {
+        const result = await runManagedGroup(args, formatJson);
+        renderManagedGroupResult(args, result, formatJson);
+        return;
+    }
     const { groupSend, groupPull, groupAck, groupCreate, groupInfo, groupList, groupUpdate, groupDissolve, groupSuspend, groupResume, groupJoin, groupLeave, groupInvite, groupKick, groupMembers, groupOnline, groupSetRole, groupTransferOwner, groupBan, groupUnban, groupBanlist, groupRules, groupUpdateRules, groupRulesFileGet, groupRulesFileSet, groupRulesFilePublish, } = await import('../aun/msg/index.js');
     const commonOpts = { aunPath, slotId: appSlot };
     // 通用 group_id 提取（第三参数）

package/dist/cli/bench.js

@@ -333,7 +333,10 @@ async function cliSend(from, to, text, slotId, encrypt) {
     if (encrypt)
         sendArgs.push('--encrypt');
     try {
-        const { stdout } = await execFileAsync('node', sendArgs, { timeout: 30000 });
+        const { stdout } = await execFileAsync('node', sendArgs, {
+            timeout: 30000,
+            windowsHide: process.platform === 'win32',
+        });
         const res = JSON.parse(stdout.trim());
         return { ok: true, timestamp: res.timestamp };
     }
@@ -349,7 +352,10 @@ async function cliPull(from, slotId, afterSeq) {
     if (afterSeq !== undefined)
         pullArgs.push('--after-seq', String(afterSeq));
     try {
-        const { stdout } = await execFileAsync('node', pullArgs, { timeout: 30000 });
+        const { stdout } = await execFileAsync('node', pullArgs, {
+            timeout: 30000,
+            windowsHide: process.platform === 'win32',
+        });
         const res = JSON.parse(stdout.trim());
         return { ok: true, messages: res.messages ?? [] };
     }
@@ -362,7 +368,10 @@ async function cliAuth(aid, slotId) {
     const bin = path.join(getPackageRoot(), 'dist', 'cli', 'index.js');
     const start = Date.now();
     try {
-        await execFileAsync('node', [bin, 'msg', 'online', aid, aid, '--app', slotId, '--format', 'json'], { timeout: 15000 });
+        await execFileAsync('node', [bin, 'msg', 'online', aid, aid, '--app', slotId, '--format', 'json'], {
+            timeout: 15000,
+            windowsHide: process.platform === 'win32',
+        });
         return { ok: true, authMs: Date.now() - start };
     }
     catch {

package/dist/cli/daemon-commands.js

@@ -14,21 +14,21 @@ import { isHelpFlag } from './help.js';
 import { cmdInit, needsControlAidInit, initTail } from './init.js';
 import * as platform from '../utils/cross-platform.js';
 import { EventBus } from '../core/event-bus.js';
-import { tryUpgrade, tryUpgradeAunSdk, tryUpgradeGlobalPkg, resolveGlobalPkg } from '../utils/npm-ops.js';
+import { tryUpgrade, tryUpgradeGlobalPkg, resolveGlobalPkg } from '../utils/npm-ops.js';
 import { ecwebVersionRequirementError, fetchEcwebPairCode, resolveEcwebLaunchCommand } from '../utils/ecweb-utils.js';
 import { isHostChinese } from '../utils/locale.js';
-import { resolveAunCoreSdkPkg, AUN_CORE_SDK_PKG } from '../aun/aid/client.js';
 import { scanInstances, cleanupInstances, findOrphanProcesses, killOrphans } from '../utils/instance-registry.js';
 import { filterLogFiles, deriveLogTypes, computePreChecked, validateLogTypes, shortLogName as shortLogNameLocal } from './watch-logs.js';
 import { displaySessionTitle } from '../core/session/session-title.js';
 import { isNonAgentSessionChannel } from '../core/system-channels.js';
 import { printCodeStats } from './code-stats.js';
-import { getProcessStartTime } from '../utils/process-introspect.js';
+import { getProcessStartTime, startTimeMatches } from '../utils/process-introspect.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
 import { WEB_CLI_BIN, WEB_PACKAGE_LATEST, WEB_PACKAGE_NAME } from '../product.js';
 import { rotateStdoutLog } from '../utils/log-writer.js';
 import { inspectDataMigrationRequirement } from '../core/data-migration.js';
 import { isInitCancelledError, printInitCancelHint } from './init-cancel.js';
+import { listCodexAppServerProcesses, unregisterCodexAppServerProcess } from '../utils/codex-app-server-registry.js';
 const execFileAsync = promisify(execFile);
 async function runAutomaticInit(action) {
     try {
@@ -668,19 +668,7 @@ export async function cmdRestart(opts = {}) {
             console.log(`⚠ Upgrade failed (${upgrade.from} → ${upgrade.to}), continuing with current version`);
             break;
     }
-    // AUN SDK 版本检查与升级
-    const aunUpgrade = await tryUpgradeAunSdk(resolveAunCoreSdkPkg, AUN_CORE_SDK_PKG);
-    switch (aunUpgrade.status) {
-        case 'upgraded':
-            console.log(`✅ AUN SDK upgraded: ${aunUpgrade.from} → ${aunUpgrade.to}`);
-            break;
-        case 'no-update':
-            break; // silent
-        case 'failed':
-            console.log(`⚠ AUN SDK upgrade failed (${aunUpgrade.from} → ${aunUpgrade.to})`);
-            break;
-    }
-    // EC Web 版本检查与升级（已安装才检查，与 AUN SDK 同级）
+    // EC Web 是独立全局包，已安装时单独检查升级。
     const ecwebUpgrade = await tryUpgradeGlobalPkg(() => resolveGlobalPkg(WEB_PACKAGE_NAME), WEB_PACKAGE_NAME);
     switch (ecwebUpgrade.status) {
         case 'upgraded':
@@ -753,22 +741,20 @@ export async function cmdRestart(opts = {}) {
             reportOrphans(otherHome);
         }
     }
-    // 清理 codex app-server 孤儿进程（无 HOME 区分，全局清理）
+    // 只清理 EvolCore 自己登记的 codex app-server，不能影响桌面端实例。
     {
         const killed = stopCodexAppServerOrphans();
         if (killed > 0) {
-            console.log(`☠ 已清理 ${killed} 个 codex app-server 孤儿进程`);
+            console.log(`☠ 已清理 ${killed} 个 EvolCore codex app-server 孤儿进程`);
             await sleep(500);
         }
     }
     console.log(`⏱ restart prep done in ${((Date.now() - cmdStartedAt) / 1000).toFixed(1)}s, starting...`);
     // 通过 restart-monitor 启动，避免在 agent 内调用时自杀
     const appCli = path.join(getPackageRoot(), 'dist', 'cli', 'index.js');
-    spawn('node', [appCli, 'restart-monitor'], {
-        detached: true,
-        stdio: 'ignore',
-        env: { ...process.env, EVOLCORE_HOME: resolvePaths().root }
-    }).unref();
+    platform.spawnDetachedNode([appCli, 'restart-monitor'], {
+        EVOLCORE_HOME: resolvePaths().root,
+    });
     console.log('🔄 Restart monitor started, waiting for service to come back online...');
     await sleep(2000);
     // 代码统计（开发环境）
@@ -2513,15 +2499,29 @@ function removeEcwebInstanceFiles(p) {
         catch { }
     }
 }
-/** 清理所有 codex app-server 孤儿进程，返回清理的进程数。 */
-function stopCodexAppServerOrphans() {
-    // 查找所有 codex app-server 进程（无论是 node 启动的还是原生二进制）
-    const codexProcs = platform.findProcesses('codex app-server');
+/** 清理 EvolCore 登记的 codex app-server 孤儿进程，返回清理的进程数。 */
+export function stopCodexAppServerOrphans() {
+    const codexProcs = new Set(platform.findProcesses('codex app-server'));
     let killed = 0;
-    for (const pid of codexProcs) {
+    for (const entry of listCodexAppServerProcesses()) {
+        const { pid, startedAt } = entry.record;
+        if (!platform.isProcessRunning(pid)) {
+            unregisterCodexAppServerProcess(entry.filePath);
+            continue;
+        }
+        // PID 复用时丢弃登记，不发送信号；命令行探测失败则保留登记，等待下次重试。
+        const actualStartedAt = getProcessStartTime(pid);
+        if (!startTimeMatches(startedAt, actualStartedAt)) {
+            unregisterCodexAppServerProcess(entry.filePath);
+            continue;
+        }
+        if (!codexProcs.has(pid))
+            continue;
         try {
-            platform.killProcess(pid, true);
-            killed++;
+            if (platform.killProcess(pid, true)) {
+                killed++;
+                unregisterCodexAppServerProcess(entry.filePath);
+            }
         }
         catch { }
     }
@@ -2777,7 +2777,7 @@ async function cmdWatchWeb() {
         }
     }
     else {
-        // 已安装：检查并自动升级到最新版（参考 fastaun 自动升级机制）
+        // 已安装：检查并自动升级独立的 EC Web 全局包。
         const upgrade = await tryUpgradeGlobalPkg(() => resolveGlobalPkg(WEB_PACKAGE_NAME), WEB_PACKAGE_NAME);
         switch (upgrade.status) {
             case 'upgraded':

package/dist/cli/fs-command.js

@@ -3,6 +3,9 @@ import path from 'path';
 import { TextDecoder } from 'util';
 import { getArgValue, isHelpFlag, wantsHelp } from './help.js';
 import { agentmdGet, getAidStore, isValidAid, loadClient, SLOT } from '../aun/aid/index.js';
+import { ipcQuery } from '../ipc.js';
+import { resolvePaths } from '../paths.js';
+import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
 class FsCliError extends Error {
     code;
     suggestion;
@@ -130,6 +133,10 @@ export async function cmdFs(args) {
         console.log(HELP);
         return;
     }
+    if (process.env.EVOLCORE_SESSION_ID) {
+        await runManagedFs(args, opts.formatJson);
+        return;
+    }
     try {
         switch (sub) {
             case 'ls':
@@ -199,6 +206,59 @@ export async function cmdFs(args) {
         process.exit(1);
     }
 }
+async function runManagedFs(args, formatJson) {
+    const sessionId = process.env.EVOLCORE_SESSION_ID;
+    const delegationToken = process.env[AGENT_DELEGATION_TOKEN_ENV];
+    const fail = (code, message) => {
+        if (formatJson)
+            console.log(JSON.stringify({ ok: false, code, error: message }));
+        else
+            console.error(`❌ ${message}`);
+        process.exit(1);
+    };
+    if (!sessionId)
+        fail('NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
+    if (!delegationToken)
+        fail('DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
+    const response = await ipcQuery(resolvePaths().socket, {
+        type: 'fs.op',
+        argv: ['fs', ...args],
+        sessionId,
+        delegationToken,
+    }, 30_000);
+    if (!response)
+        return fail('DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+    if (!response.ok || !response.result)
+        fail(String(response.code || 'FS_OPERATION_FAILED'), response.error || 'Filesystem operation failed');
+    const result = response.result;
+    if (formatJson) {
+        console.log(JSON.stringify(result));
+        return;
+    }
+    switch (result.command) {
+        case 'cat':
+            if (result.binary)
+                console.log(JSON.stringify({ path: result.path, size: result.size, binary: true, head: result.head }, null, 2));
+            else
+                process.stdout.write(String(result.text ?? '').endsWith('\n') ? result.text : `${result.text ?? ''}\n`);
+            return;
+        case 'df': {
+            const usage = result.usage ?? {};
+            console.log(`Filesystem: ${result.path}`);
+            console.log(JSON.stringify(usage, null, 2));
+            return;
+        }
+        case 'stat':
+        case 'lstat':
+            console.log(JSON.stringify(result.node ?? {}, null, 2));
+            return;
+        case 'ls':
+        case 'find':
+            for (const item of result.items ?? [])
+                console.log(JSON.stringify(item));
+            return;
+    }
+}
 function parseCommonOptions(args) {
     const maxCatBytesRaw = getArgValue(args, '--max-bytes');
     const maxCatBytes = maxCatBytesRaw === undefined ? 1024 * 1024 : Number(maxCatBytesRaw);

package/dist/cli/handoff-command.js

@@ -203,6 +203,7 @@ Commands:
         }
         const result = await ipcQuery(resolvePaths().socket, {
             type: 'handoff-status', sessionId: process.env.EVOLCORE_SESSION_ID, handoffId,
+            delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
         }, 5000);
         if (!result) {
             console.error('✗ daemon 暂时不可用');
@@ -234,6 +235,7 @@ Commands:
             state: parsed.state,
             filterSessionId: parsed.sessionId,
             limit: parsed.limit,
+            delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
         }, 5000);
         if (!result) {
             console.error('✗ daemon 暂时不可用');
@@ -276,6 +278,7 @@ Commands:
             agent: parsed.agent,
             handoffId: parsed.handoffId,
             limit: parsed.limit,
+            delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
         }, 5000);
         if (!result) {
             console.error('✗ daemon 暂时不可用');