evolcore 0.0.25 → 0.0.26

package/dist/cli/bench.js

@@ -381,26 +381,26 @@ async function cliAuth(aid, slotId) {
 // ==================== Main Command ====================
 export async function cmdBench(args) {
     if (isHelpFlag(args[0]) || wantsHelp(args)) {
-        console.log(`用法: ec bench [options]
-
-AUN 消息系统性能基准测试。使用多个本地 AID 并发互发消息，
-测量吞吐量、延迟、丢失率，以及认证性能和账号切换性能。
-
-Options:
-  --aids N          使用的 AID 数量 (默认 3, 范围 2-10)
-  --rounds N        每个 AID 发送的消息轮数 (默认 20)
-  --concurrency N   最大并发发送数 (默认 5)
-  --wait N          发送后等待传播的秒数 (默认 3)
-  --encrypt         发送加密消息（E2EE）
-  --file            文件传输验证模式（压缩 evolcore 目录，拆片发送，接收后 MD5 校验+解压）
-  --cli             使用 CLI 子进程调用（测试完整命令行链路，含进程启动开销）
-  --aun-path <path> 自定义 AUN 目录
-  --format json     以 JSON 输出结果
-
-示例:
-  ec bench --aids 5 --rounds 10
-  ec bench --file --rounds 50
-  ec bench --encrypt --aids 5 --rounds 20
+        console.log(`用法: ec bench [options]
+
+AUN 消息系统性能基准测试。使用多个本地 AID 并发互发消息，
+测量吞吐量、延迟、丢失率，以及认证性能和账号切换性能。
+
+Options:
+  --aids N          使用的 AID 数量 (默认 3, 范围 2-10)
+  --rounds N        每个 AID 发送的消息轮数 (默认 20)
+  --concurrency N   最大并发发送数 (默认 5)
+  --wait N          发送后等待传播的秒数 (默认 3)
+  --encrypt         发送加密消息（E2EE）
+  --file            文件传输验证模式（压缩 evolcore 目录，拆片发送，接收后 MD5 校验+解压）
+  --cli             使用 CLI 子进程调用（测试完整命令行链路，含进程启动开销）
+  --aun-path <path> 自定义 AUN 目录
+  --format json     以 JSON 输出结果
+
+示例:
+  ec bench --aids 5 --rounds 10
+  ec bench --file --rounds 50
+  ec bench --encrypt --aids 5 --rounds 20
   ec bench --cli --aids 3 --rounds 5`);
         return;
     }

package/dist/cli/config.js

@@ -1,7 +1,7 @@
 import { isHelpFlag, wantsHelp, getArgValue } from './help.js';
 import { initConfigManager } from '../config/config-manager.js';
 import { resolveConfigCommand } from '../config/resolved-config-op.js';
-import { AUTHENTICATED_CONFIG_ROLE_ENV, executeResolvedConfigCommand, } from '../config/config-operation-service.js';
+import { AUTHENTICATED_CONFIG_ROLE_ENV, executeResolvedConfigCommandAsync, } from '../config/config-operation-service.js';
 import { ipcQuery } from '../ipc.js';
 import { resolvePaths } from '../paths.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
@@ -31,6 +31,7 @@ function getResultPayload(result) {
         ...(result.source ? { source: result.source } : {}),
         ...(result.schemaDefault ? { schemaDefault: true } : {}),
         ...(result.note ? { note: result.note } : {}),
+        ...(result.roleDetails ? { role: result.roleDetails } : {}),
     };
 }
 function getResultLine(result) {
@@ -39,7 +40,10 @@ function getResultLine(result) {
         : !result.source
             ? `${result.field} = ${JSON.stringify(result.value)} (${result.scope})`
             : `${result.field} = ${JSON.stringify(result.value)} [source: ${result.source.target}]`;
-    return result.note ? `${head}\n  ↳ ${result.note}` : head;
+    const role = result.roleDetails
+        ? `\n  role: explicit=${JSON.stringify(result.roleDetails.explicitRole)} effective=${JSON.stringify(result.roleDetails.effectiveRole)} [${result.roleDetails.effectiveRoleSource}]`
+        : '';
+    return `${head}${role}${result.note ? `\n  ↳ ${result.note}` : ''}`;
 }
 function renderConfigExecution(result, formatJson) {
     if (!result.ok)
@@ -56,6 +60,7 @@ function renderConfigExecution(result, formatJson) {
                 value: result.value,
                 scope: result.scope,
                 file: result.file,
+                ...(result.roleDetails ? { role: result.roleDetails } : {}),
             }, () => `Set ${result.field} = ${JSON.stringify(result.value)} [${result.scope}]`);
         case 'unset':
             return emit(formatJson, {
@@ -63,6 +68,7 @@ function renderConfigExecution(result, formatJson) {
                 field: result.field,
                 removed: result.removed,
                 ...(result.removed ? { scope: result.scope } : {}),
+                ...(result.roleDetails ? { role: result.roleDetails } : {}),
             }, () => result.removed ? `Removed ${result.field} from ${result.scope}` : `${result.field} was not set`);
         case 'show':
             return emit(formatJson, { ok: true, scope: result.scope, configs: result.configs }, () => JSON.stringify(result.configs, null, 2));
@@ -172,18 +178,18 @@ function renderBatchGet(results, formatJson) {
     if (!allOk)
         process.exit(1);
 }
-function runDirectBatchGet(fields, rest, formatJson) {
-    const results = fields.map(field => {
+async function runDirectBatchGet(fields, rest, formatJson) {
+    const results = await Promise.all(fields.map(async (field) => {
         const resolved = resolveConfigCommand(['config', 'get', field, ...rest]);
         if (!resolved.ok)
             return { ok: false, field, code: resolved.code, error: resolved.reason };
-        const result = executeResolvedConfigCommand(resolved.command);
+        const result = await executeResolvedConfigCommandAsync(resolved.command, { role: 'owner' });
         if (!result.ok)
             return { ok: false, field, code: result.code, error: result.error };
         if (result.subcommand === 'get')
             return result;
         return { ok: false, field, code: 'UNEXPECTED_RESULT', error: `config get ${field} produced a non-get result` };
-    });
+    }));
     renderBatchGet(results, formatJson);
 }
 async function runManagedBatchGet(fields, rest, formatJson) {
@@ -196,26 +202,31 @@ async function runManagedBatchGet(fields, rest, formatJson) {
     }
     renderConfigExecution(response.result, formatJson);
 }
-const HELP = `Usage: ec config <command> [options]
-
-Fields:
-  get <field> [<field> ...]     one or more fields (batch)
-  set <field> <value>
-  unset <field>
-
-Scoped commands:
-  show | effective | fields [field] | validate | init
-
-Global commands:
-  list | snapshot | prune | history | diff | restore | current | boots
-  schema                        overview of all schemas
-  schema <name> [<version>]     view a schema definition
-  schema <name> --list          list a schema's versions
-
-Selectors:
-  --self <aid> [--peer <peerKey>] | --default | --process
-
-Output:
+const HELP = `Usage: ec config <command> [options]
+
+Fields:
+  get <field> [<field> ...]     one or more fields (batch)
+  set <field> <value>
+  unset <field>
+
+Scoped commands:
+  show | effective | fields [field] | validate | init
+
+Global commands:
+  list | snapshot | prune | history | diff | restore | current | boots
+  schema                        overview of all schemas
+  schema <name> [<version>]     view a schema definition
+  schema <name> --list          list a schema's versions
+
+Selectors:
+  --self <aid> [--peer <peerKey>] | --default | --process
+
+Relation role (AUN peer AID):
+  get role --self <aid> --peer <peer-aid>
+  set role <role-id> --self <aid> --peer <peer-aid>
+  unset role --self <aid> --peer <peer-aid>
+
+Output:
   --format json`;
 export async function cmdConfig(args) {
     const subcommand = args[0];
@@ -241,13 +252,21 @@ export async function cmdConfig(args) {
         fail(formatJson, 'SCHEMA_INIT_FAILED', error instanceof Error ? error.message : String(error));
     }
     if (isBatchGet) {
-        runDirectBatchGet(batchGet.fields, batchGet.rest, formatJson);
+        await runDirectBatchGet(batchGet.fields, batchGet.rest, formatJson);
         return;
     }
     const resolved = resolveConfigCommand(['config', ...args]);
     if (!resolved.ok)
         fail(formatJson, resolved.code, resolved.reason);
-    renderConfigExecution(executeResolvedConfigCommand(resolved.command, {
+    renderConfigExecution(await executeResolvedConfigCommandAsync(resolved.command, {
         role: process.env[AUTHENTICATED_CONFIG_ROLE_ENV],
+        roleContext: {
+            self: resolved.command.self || '',
+            actorRole: process.env[AUTHENTICATED_CONFIG_ROLE_ENV] || 'owner',
+            actorRoleSource: 'local-cli',
+            isDaemonOwner: false,
+            fromControlChannel: false,
+            aunAvailable: true,
+        },
     }), formatJson);
 }

package/dist/cli/contact.js

@@ -1,4 +1,5 @@
 import { resolvePaths } from '../paths.js';
+import { loadAllAgents } from '../config-store.js';
 import { executeResolvedContactCommand, resolveContactCommand, } from '../config/contact-operation-service.js';
 import { ipcQuery } from '../ipc.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
@@ -14,9 +15,17 @@ export async function cmdContact(args) {
         output(result, json);
         return;
     }
-    const resolved = resolveContactCommand(args);
-    if (!resolved.ok)
-        fail(resolved.reason, resolved.code);
+    if (!args.includes('--self') && isListCommand(args) && !process.env.EVOLCORE_SELF_AID?.trim()) {
+        output(await executeAggregateList(args), json);
+        return;
+    }
+    const resolved = resolveContactCommand(withDefaultSelf(args));
+    if (!resolved.ok) {
+        const message = resolved.code === 'INVALID_SELF' && !args.includes('--self')
+            ? `${resolved.reason}; multiple local Agents are configured, add --self <agent-aid>`
+            : resolved.reason;
+        fail(message, resolved.code);
+    }
     const result = await executeResolvedContactCommand(resolved.command);
     if (!result.ok)
         fail(result.error, result.code, result.data);
@@ -58,15 +67,63 @@ function fail(message, code = 'INVALID_ARGUMENT', data) {
     throw error;
 }
 function printHelp() {
-    console.log(`Usage:
-  ec contact add <primaryId> --self <agent-aid>
-  ec contact block <primaryId> --self <agent-aid>
-  ec contact unblock <primaryId> --self <agent-aid>
-  ec contact list --blocked --self <agent-aid>
-
-Options:
-  --self <agent-aid>  必填，本端 agent AID
-  --blocked           list 必填，仅列出已拉黑联系人
-  --format json       输出 JSON
+    console.log(`Usage:
+  ec contact add <primaryId> --self <agent-aid>
+  ec contact block <primaryId> --self <agent-aid>
+  ec contact unblock <primaryId> --self <agent-aid>
+  ec contact list --blocked [--self <agent-aid>]
+  ec contact list --pending [--self <agent-aid>]
+  ec contact list --all [--self <agent-aid>]
+  ec contact approve <primaryId> --request-id <id> [--self <agent-aid>]
+  ec contact reject <primaryId> --request-id <id> [--self <agent-aid>]
+  ec contact block-request <primaryId> --request-id <id> [--self <agent-aid>]
+
+Options:
+  --self <agent-aid>  本端 agent AID；省略时从当前运行环境推断
+  --blocked           仅列出已拉黑联系人
+  --pending           仅列出待审核联系人申请
+  --all               列出所有联系人及状态
+  --request-id <id>   联系人申请 ID（审批命令必填）
+  --contact-revision <revision>  申请审批时使用的联系人版本（可选）
+  --format json       输出 JSON
   --help, -h          显示帮助`);
 }
+function withDefaultSelf(args) {
+    if (args.includes('--self'))
+        return args;
+    const selfAid = resolveStandaloneSelfAid();
+    return selfAid ? [...args, '--self', selfAid] : args;
+}
+function isListCommand(args) {
+    return args[0] === 'list';
+}
+async function executeAggregateList(args) {
+    const agents = loadAllAgents().agents.map(agent => agent.aid).filter(Boolean).sort();
+    const results = [];
+    for (const aid of agents) {
+        const resolved = resolveContactCommand([...args, '--self', aid]);
+        if (!resolved.ok)
+            fail(resolved.reason, resolved.code);
+        const result = await executeResolvedContactCommand(resolved.command);
+        if (!result.ok)
+            fail(result.error, result.code, result.data);
+        results.push(result);
+    }
+    return {
+        ok: true,
+        operation: args.includes('--blocked') ? 'list-blocked'
+            : args.includes('--pending') ? 'list-pending' : 'list-all',
+        scope: 'all-agents',
+        agents: results,
+    };
+}
+/** Resolve the local Agent identity for standalone CLI commands. */
+export function resolveStandaloneSelfAid() {
+    const runtimeAid = process.env.EVOLCORE_SELF_AID?.trim();
+    if (runtimeAid)
+        return runtimeAid;
+    const agents = loadAllAgents().agents
+        .map(agent => agent.aid)
+        .filter(Boolean);
+    return agents.length === 1 ? agents[0] : undefined;
+}

package/dist/cli/ctl-command.js

@@ -3,28 +3,28 @@ import { ipcQuery } from '../ipc.js';
 import { isHelpFlag, wantsHelp } from './help.js';
 import { AGENT_DELEGATION_TOKEN_ENV } from '../core/auth/agent-delegation.js';
 // ==================== Ctl ====================
-const CTL_HELP = `用法: ec ctl <command> [args...]
-
-查询:
-  status                    查看会话状态
-  status --format json      查看当前任务的结构化运行上下文
-  pwd                       显示当前项目路径
-  help                      显示帮助
-
-会话:
-  name <名称>               重命名当前会话
-
-消息:
-  send <消息内容>           主动发送文本消息（proactive 模式）
-  file [channel] <path>     发送项目内文件
-  queue [--after <time>] [--before <time>]  查看/管理会话消息队列
-
-示例:
-  ec ctl status
-  ec ctl status --format json
-  ec ctl name "新会话名称"
-  ec ctl send "任务已完成"
-  ec ctl file report.md
+const CTL_HELP = `用法: ec ctl <command> [args...]
+
+查询:
+  status                    查看会话状态
+  status --format json      查看当前任务的结构化运行上下文
+  pwd                       显示当前项目路径
+  help                      显示帮助
+
+会话:
+  name <名称>               重命名当前会话
+
+消息:
+  send <消息内容>           主动发送文本消息（proactive 模式）
+  file [channel] <path>     发送项目内文件
+  queue [--after <time>] [--before <time>]  查看/管理会话消息队列
+
+示例:
+  ec ctl status
+  ec ctl status --format json
+  ec ctl name "新会话名称"
+  ec ctl send "任务已完成"
+  ec ctl file report.md
   ec ctl queue --full`;
 export async function cmdCtl(args) {
     if (args.length === 0) {

package/dist/cli/daemon-commands.js

@@ -28,6 +28,7 @@ import { WEB_CLI_BIN, WEB_PACKAGE_LATEST, WEB_PACKAGE_NAME } from '../product.js
 import { rotateStdoutLog } from '../utils/log-writer.js';
 import { inspectDataMigrationRequirement } from '../core/data-migration.js';
 import { isInitCancelledError, printInitCancelHint } from './init-cancel.js';
+import { computeBuildId } from '../utils/evolcore-version.js';
 import { listCodexAppServerProcesses, unregisterCodexAppServerProcess } from '../agents/codex/app-server-registry.js';
 import { DEFAULT_ECWEB_PORT, ecwebService, setEcwebEnabled } from '../config/daemon-services.js';
 import { checkCodexProjectPath, inspectCodexManagedHook, ensureCodexManagedHook, runCodexHookLaunchDiagnostic, } from '../agents/codex/diagnostics.js';
@@ -312,7 +313,10 @@ export async function runUpgradeChecks(upgradeFn = signal => tryUpgrade({ signal
                 clearTimeout(timer);
         }
     };
-    const upgrade = await runWithTimeout('EvolCore', upgradeFn);
+    const [upgrade, ecwebUpgrade] = await Promise.all([
+        runWithTimeout('EvolCore', upgradeFn),
+        runWithTimeout(WEB_PACKAGE_NAME, ecwebUpgradeFn),
+    ]);
     switch (upgrade.status) {
         case 'upgraded':
             console.log(`✅ Upgraded: ${upgrade.from} → ${upgrade.to}`);
@@ -329,7 +333,6 @@ export async function runUpgradeChecks(upgradeFn = signal => tryUpgrade({ signal
             console.log(`⚠ Upgrade failed${upgrade.from && upgrade.to ? ` (${upgrade.from} → ${upgrade.to})` : ''}, continuing with current version${upgrade.error ? `: ${upgrade.error}` : ''}`);
             break;
     }
-    const ecwebUpgrade = await runWithTimeout(WEB_PACKAGE_NAME, ecwebUpgradeFn);
     switch (ecwebUpgrade.status) {
         case 'upgraded':
             console.log(`✅ ${WEB_PACKAGE_NAME} upgraded: ${ecwebUpgrade.from} → ${ecwebUpgrade.to}`);
@@ -769,21 +772,50 @@ export async function cmdStart(opts = {}) {
     };
     setTimeout(checkReady, 1000);
 }
-async function stopPid(pid, gracefulRequested = false) {
+function isPidReused(pid, expectedStartedAt) {
+    if (expectedStartedAt === undefined)
+        return false;
+    const actualStartedAt = getProcessStartTime(pid);
+    return actualStartedAt !== null && !startTimeMatches(expectedStartedAt, actualStartedAt);
+}
+function reportPidReused(pid) {
+    console.log(`ℹ EvolCore PID ${pid} no longer refers to the recorded process; treating it as stopped`);
+}
+async function stopPid(pid, gracefulRequested = false, expectedStartedAt) {
     console.log(`🛑 Stopping EvolCore (PID: ${pid})...`);
+    if (isPidReused(pid, expectedStartedAt)) {
+        reportPidReused(pid);
+        return true;
+    }
     if (!gracefulRequested)
         platform.killProcess(pid);
     if (await platform.waitForProcessExit(pid, gracefulRequested ? 30_000 : 10_000)) {
         console.log('✓ EvolCore stopped');
         return true;
     }
-    console.log(`⚠ EvolCore PID ${pid} did not exit gracefully; forcing termination...`);
+    if (isPidReused(pid, expectedStartedAt)) {
+        reportPidReused(pid);
+        return true;
+    }
+    const state = platform.getProcessState(pid);
+    const stateSuffix = state ? ` (state=${state})` : '';
+    console.log(`⚠ EvolCore PID ${pid} did not exit gracefully${stateSuffix}; forcing termination...`);
+    if (isPidReused(pid, expectedStartedAt)) {
+        reportPidReused(pid);
+        return true;
+    }
     platform.killProcess(pid, true);
     if (await platform.waitForProcessExit(pid, 5_000)) {
         console.log('✓ EvolCore stopped (forced)');
         return true;
     }
-    console.error(`❌ EvolCore PID ${pid} is still running; restart aborted`);
+    if (isPidReused(pid, expectedStartedAt)) {
+        reportPidReused(pid);
+        return true;
+    }
+    const finalState = platform.getProcessState(pid);
+    const finalStateSuffix = finalState ? ` (state=${finalState})` : '';
+    console.error(`❌ EvolCore PID ${pid} is still running${finalStateSuffix}; restart aborted`);
     return false;
 }
 function isRuntimeOrphan(orphan, currentHome = resolveRoot()) {
@@ -813,13 +845,14 @@ export async function cmdStop() {
         return;
     }
     const pids = new Set([...aliveMains.map(entry => entry.record.pid), ...runtimeOrphans.map(orphan => orphan.pid)]);
+    const expectedStarts = new Map(aliveMains.map(entry => [entry.record.pid, entry.record.startedAt]));
     if (runtimeOrphans.length > 0) {
         console.log(`⚠ 检测到未登记的 EvolCore 进程，将一并停止: ${runtimeOrphans.map(orphan => orphan.pid).join(', ')}`);
     }
     const gracefulPid = ping && pids.has(ping.pid)
         ? await requestDaemonShutdown(p.socket, DAEMON_SHUTDOWN_TIMEOUT_MS, 'ec stop', pids)
         : null;
-    const stopped = await Promise.all([...pids].map(pid => stopPid(pid, pid === gracefulPid)));
+    const stopped = await Promise.all([...pids].map(pid => stopPid(pid, pid === gracefulPid, expectedStarts.get(pid))));
     if (stopped.some(result => !result)) {
         process.exitCode = 1;
         return;
@@ -836,11 +869,13 @@ export async function cmdRestart(opts = {}) {
     if (!ensureCodexHookBeforeLifecycle())
         return;
     const initialStatus = scanInstances();
-    const initialOrphans = findOrphanProcesses();
-    const initialRuntimeOrphans = initialOrphans.filter(orphan => isRuntimeOrphan(orphan));
     const socketPath = resolvePaths().socket;
     const ping = await probeDaemon(socketPath);
     if (ping && !hasVisibleDaemonPid(initialStatus, ping)) {
+        // Only pay for a cross-host process-table scan when the IPC PID is not
+        // present in our registry. This is the exceptional PID-namespace case;
+        // healthy restarts no longer scan every Node process before stopping.
+        const initialRuntimeOrphans = findOrphanProcesses().filter(orphan => isRuntimeOrphan(orphan));
         if (await tryDelegatedDaemonRestart(socketPath))
             return;
         if (initialRuntimeOrphans.length === 0 && rejectPidIsolatedLifecycle('restart', initialStatus, ping))
@@ -848,13 +883,13 @@ export async function cmdRestart(opts = {}) {
     }
     // 构建交给 restart-monitor：它在 daemon 停止之后才编译，dist/ 不会被活进程
     // 占用，失败还能回滚到上一份产物。这里再编译一次会落在事务保护之外。
-    // Keep restart behavior identical to startup: both paths use one upgrade
-    // check implementation and continue when an upgrade is unavailable.
-    await runUpgradeChecks();
+    // restart-monitor owns upgrade checks. Running them here as well caused a
+    // normal restart to perform every registry lookup twice, and in installed
+    // mode could race the monitor while it was preparing its rollback point.
     if (!requireCompletedDataMigration(resolveRoot(), 'restart'))
         return;
     // 停止所有活 main 进程（可能不止一个）
-    const status = scanInstances();
+    const status = initialStatus;
     const aliveMains = status.mains.filter(m => m.alive);
     if (aliveMains.length > 0) {
         if (aliveMains.length > 1) {
@@ -865,7 +900,7 @@ export async function cmdRestart(opts = {}) {
         const gracefulPid = currentPing && mainPids.has(currentPing.pid)
             ? await requestDaemonShutdown(socketPath, DAEMON_SHUTDOWN_TIMEOUT_MS, 'ec restart', mainPids)
             : null;
-        const stopped = await Promise.all(aliveMains.map(m => stopPid(m.record.pid, m.record.pid === gracefulPid)));
+        const stopped = await Promise.all(aliveMains.map(m => stopPid(m.record.pid, m.record.pid === gracefulPid, m.record.startedAt)));
         if (stopped.some(result => !result)) {
             console.error('❌ Restart aborted because an existing EvolCore process could not be stopped');
             process.exitCode = 1;
@@ -881,7 +916,8 @@ export async function cmdRestart(opts = {}) {
         return;
     }
     // 孤儿处理：同 HOME/同安装包的孤儿属于本运行时，先确认退出再替换；
-    // 跨 HOME 的孤儿只在 --clear 时 kill，否则仅警告。
+    // 跨 HOME 的孤儿只在 --clear 时 kill，否则仅警告。findOrphanProcesses
+    // 在 Windows 上需要一次 CIM 查询；保留一个快照，避免同一阶段重复扫描。
     {
         const orphans = findOrphanProcesses();
         const confirmedTestDaemons = orphans.filter(o => o.confirmedTestDaemon);
@@ -890,7 +926,7 @@ export async function cmdRestart(opts = {}) {
             console.log(`☠ 已清理 ${killed.length} 个泄漏的测试 daemon: ${killed.join(', ')}`);
             await sleep(500);
         }
-        const runtimeOrphans = findOrphanProcesses().filter(o => isRuntimeOrphan(o));
+        const runtimeOrphans = orphans.filter(o => isRuntimeOrphan(o));
         if (runtimeOrphans.length > 0) {
             console.log(`⚠ 检测到未登记的 EvolCore 进程，将一并停止: ${runtimeOrphans.map(o => o.pid).join(', ')}`);
             const orphanPids = new Set(runtimeOrphans.map(orphan => orphan.pid));
@@ -906,13 +942,9 @@ export async function cmdRestart(opts = {}) {
             }
             await sleep(500);
         }
-        const remainingRuntimeOrphans = findOrphanProcesses().filter(o => isRuntimeOrphan(o));
-        if (remainingRuntimeOrphans.length > 0) {
-            console.error(`❌ Restart aborted: EvolCore process still running (PID: ${remainingRuntimeOrphans.map(o => o.pid).join(', ')})`);
-            process.exitCode = 1;
-            return;
-        }
-        const otherHome = findOrphanProcesses().filter(o => !o.confirmedTestDaemon && !isRuntimeOrphan(o));
+        // stopPid() already waited for every runtime orphan above, so avoid a
+        // second scan before handling cross-HOME records.
+        const otherHome = orphans.filter(o => !o.confirmedTestDaemon && !isRuntimeOrphan(o));
         if (opts.clear && otherHome.length > 0) {
             const killed = killOrphans(otherHome);
             console.log(`☠ 已 SIGKILL ${killed.length} 个跨 HOME 孤儿进程: ${killed.join(', ')}`);
@@ -921,6 +953,14 @@ export async function cmdRestart(opts = {}) {
         else if (otherHome.length > 0) {
             reportOrphans(otherHome);
         }
+        // Keep the post-stop ownership guard: a process that appeared during the
+        // cleanup window must still block replacement.
+        const remainingRuntimeOrphans = findOrphanProcesses().filter(o => isRuntimeOrphan(o));
+        if (remainingRuntimeOrphans.length > 0) {
+            console.error(`❌ Restart aborted: EvolCore process still running (PID: ${remainingRuntimeOrphans.map(o => o.pid).join(', ')})`);
+            process.exitCode = 1;
+            return;
+        }
     }
     // 只清理 EvolCore 自己登记的 codex app-server，不能影响桌面端实例。
     {
@@ -955,8 +995,7 @@ export async function cmdRestart(opts = {}) {
         process.exitCode = 1;
         return;
     }
-    console.log('🔄 Restart monitor started, waiting for service to come back online...');
-    await sleep(2000);
+    console.log('🔄 Restart monitor started; service is coming back online in the background...');
     // 代码统计（开发环境）
     if (path.normalize(resolveRoot()) === path.normalize(getPackageRoot())) {
         console.log('');
@@ -1125,6 +1164,7 @@ export async function cmdStatus() {
     const p = resolvePaths();
     const status = scanInstances();
     const aliveMains = status.mains.filter(m => m.alive);
+    const aliveRestartMonitors = status.restartMonitors.filter(m => m.alive);
     // Start all read-only daemon queries together. On a busy Windows host each
     // query can otherwise wait behind the same IPC/event-loop delay and make the
     // total `ec status` time the sum of several individual timeouts.
@@ -1263,6 +1303,10 @@ export async function cmdStatus() {
             catch { }
         }
     }
+    else if (aliveRestartMonitors.length > 0) {
+        console.log(`🔄 EvolCore 正在重启，daemon 尚未就绪（monitor PID: ${aliveRestartMonitors.map(m => m.record.pid).join(', ')}）`);
+        console.log('  请稍后再次执行 ec status。');
+    }
     else {
         console.log(ipcFailure ? '⚠ 无法确认 EvolCore 运行状态：IPC 不可用，且没有可见的存活 PID。' : '⚠ EvolCore is not running');
         if (ipcFailure)
@@ -1312,6 +1356,24 @@ export async function cmdStatus() {
         ]);
         agentsResponse = agentResponse;
         if (statusResponse) {
+            if (statusResponse.build) {
+                if (statusResponse.build.runtimeMode === 'source') {
+                    console.log(`  Build ID: runtime=source dist=${statusResponse.build.diskDistId || '?'}`);
+                    console.log('  ℹ daemon 当前由源码入口运行，dist build ID 不参与一致性比较。');
+                }
+                else {
+                    const runtimeBuildId = statusResponse.build.runtimeId || '?';
+                    const diskDistBuildId = statusResponse.build.diskDistId || '?';
+                    console.log(`  Build ID: runtime=${runtimeBuildId} dist=${diskDistBuildId}`);
+                    if (runtimeBuildId !== '?' && diskDistBuildId !== '?' && runtimeBuildId !== diskDistBuildId) {
+                        console.log('  ⚠ 运行进程 build ID 与磁盘 dist 不一致；请重启 daemon 后再判断源码行为。');
+                    }
+                }
+            }
+            else {
+                console.log(`  Build ID: runtime=unavailable (daemon 未提供 build identity) dist=${computeBuildId(path.join(getPackageRoot(), 'dist')) ?? '?'}`);
+                console.log('  ⚠ 当前 daemon 未提供 build ID；请重启到包含 build identity 的版本后再判断源码行为。');
+            }
             // 🔑 AUN AIDs 表格（详细 AUN 实例状态）
             try {
                 if (aidsResponse?.ok && aidsResponse.aids?.length > 0) {
@@ -2771,9 +2833,12 @@ function removeEcwebInstanceFiles(p) {
 }
 /** 清理 EvolCore 登记的 codex app-server 孤儿进程，返回清理的进程数。 */
 export function stopCodexAppServerOrphans() {
+    const entries = listCodexAppServerProcesses();
+    if (entries.length === 0)
+        return 0;
     const codexProcs = new Set(platform.findProcesses('codex app-server'));
     let killed = 0;
-    for (const entry of listCodexAppServerProcesses()) {
+    for (const entry of entries) {
         const { pid, startedAt } = entry.record;
         if (!platform.isProcessRunning(pid)) {
             unregisterCodexAppServerProcess(entry.filePath);
@@ -3260,21 +3325,21 @@ export async function cmdWatchCommand(args) {
     }
     else if (args[0] === 'msg') {
         if (isHelpFlag(args[1])) {
-            console.log(`用法: ec watch msg
-
-三面板交互式消息监控 TUI。
-
-面板:
-  左 (Scope)     本地 AID 列表，显示收发统计和对端数量
-  中 (Stats)     选中 AID 的对端列表（默认 All），显示 per-peer 收发数
-  右 (Messages)  消息流，带滚动条
-
-操作:
-  ↑↓             当前面板内导航
-  ←→ / Tab       切换面板
-  Enter          选中 AID / 选中对端
-  Backspace      返回上一级
-  Page Up/Down   消息滚动
+            console.log(`用法: ec watch msg
+
+三面板交互式消息监控 TUI。
+
+面板:
+  左 (Scope)     本地 AID 列表，显示收发统计和对端数量
+  中 (Stats)     选中 AID 的对端列表（默认 All），显示 per-peer 收发数
+  右 (Messages)  消息流，带滚动条
+
+操作:
+  ↑↓             当前面板内导航
+  ←→ / Tab       切换面板
+  Enter          选中 AID / 选中对端
+  Backspace      返回上一级
+  Page Up/Down   消息滚动
   ESC            退出`);
             return;
         }