evolcore 0.0.25 → 0.0.26

package/dist/utils/model-prices.jsonl

@@ -1,23 +1,23 @@
-{"model":"claude-opus-4-8","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":15,"price_output":75,"price_cache_creation":18.75,"price_cache_read":1.5,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":32768,"supports_cache":true,"supports_vision":true}
-{"model":"claude-opus-4-7","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":15,"price_output":75,"price_cache_creation":18.75,"price_cache_read":1.5,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":32768,"supports_cache":true,"supports_vision":true}
-{"model":"claude-opus-4-6","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":15,"price_output":75,"price_cache_creation":18.75,"price_cache_read":1.5,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":32768,"supports_cache":true,"supports_vision":true}
-{"model":"claude-sonnet-4-6","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":3,"price_output":15,"price_cache_creation":3.75,"price_cache_read":0.3,"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384,"supports_cache":true,"supports_vision":true}
-{"model":"claude-haiku-4-5-20251001","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":0.8,"price_output":4,"price_cache_creation":1,"price_cache_read":0.08,"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384,"supports_cache":true,"supports_vision":false}
-{"model":"gpt-5.6-sol","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":5,"price_output":30,"price_cache_creation":6.25,"price_cache_read":0.5,"tiers":[{"up_to_input_tokens":272000,"price_input":5,"price_output":30,"price_cache_creation":6.25,"price_cache_read":0.5},{"up_to_input_tokens":null,"price_input":10,"price_output":45,"price_cache_creation":12.5,"price_cache_read":1}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
-{"model":"gpt-5.6-terra","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":2.5,"price_output":15,"price_cache_creation":3.125,"price_cache_read":0.25,"tiers":[{"up_to_input_tokens":272000,"price_input":2.5,"price_output":15,"price_cache_creation":3.125,"price_cache_read":0.25},{"up_to_input_tokens":null,"price_input":5,"price_output":22.5,"price_cache_creation":6.25,"price_cache_read":0.5}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
-{"model":"gpt-5.6-luna","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":1,"price_output":6,"price_cache_creation":1.25,"price_cache_read":0.1,"tiers":[{"up_to_input_tokens":272000,"price_input":1,"price_output":6,"price_cache_creation":1.25,"price_cache_read":0.1},{"up_to_input_tokens":null,"price_input":2,"price_output":9,"price_cache_creation":2.5,"price_cache_read":0.2}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
-{"model":"gpt-5.5","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":5,"price_output":30,"price_cache_creation":0,"price_cache_read":0.5,"tiers":[{"up_to_input_tokens":272000,"price_input":5,"price_output":30,"price_cache_creation":0,"price_cache_read":0.5},{"up_to_input_tokens":null,"price_input":10,"price_output":45,"price_cache_creation":0,"price_cache_read":1}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
-{"model":"gpt-5.4","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":2.5,"price_output":15,"price_cache_creation":0,"price_cache_read":0.25,"tiers":[{"up_to_input_tokens":272000,"price_input":2.5,"price_output":15,"price_cache_creation":0,"price_cache_read":0.25},{"up_to_input_tokens":null,"price_input":5,"price_output":22.5,"price_cache_creation":0,"price_cache_read":0.5}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
-{"model":"gpt-5.3-codex","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":1.75,"price_output":14,"price_cache_creation":0,"price_cache_read":0.175,"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
-{"model":"deepseek-v4-pro","effective_from":0,"billing_fn":"per_token_deepseek_v1","currency":"CNY","price_cache_hit":0.5,"price_cache_miss":2,"price_output":8,"context_window":1000000,"max_input_tokens":950000,"max_output_tokens":8192,"supports_cache":true}
-{"model":"deepseek-v4-flash","effective_from":0,"billing_fn":"per_token_deepseek_v1","currency":"CNY","price_cache_hit":0.1,"price_cache_miss":0.5,"price_output":2,"context_window":1000000,"max_input_tokens":950000,"max_output_tokens":8192,"supports_cache":true}
-{"model":"deepseek-v3.2","effective_from":0,"billing_fn":"per_token_deepseek_v1","currency":"CNY","price_cache_hit":0.5,"price_cache_miss":2,"price_output":8,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192,"supports_cache":true}
-{"model":"kimi-k2.6","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":2,"price_output":8,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
-{"model":"kimi-k2.5","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":2,"price_output":8,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
-{"model":"glm-5.1","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":5,"price_output":20,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
-{"model":"glm-5","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":5,"price_output":20,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
-{"model":"glm-4.7","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":1,"price_output":5,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
-{"model":"MiniMax-M2.7","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":1,"price_output":5,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
-{"model":"claude-opus-5","effective_from":0,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":131072,"supports_cache":true,"supports_vision":true}
-{"model":"claude-sonnet-5","effective_from":0,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":131072,"supports_cache":true,"supports_vision":true}
-{"model":"claude-fable-5","effective_from":0,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":131072,"supports_cache":true,"supports_vision":true}
+{"model":"claude-opus-4-8","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":15,"price_output":75,"price_cache_creation":18.75,"price_cache_read":1.5,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":32768,"supports_cache":true,"supports_vision":true}
+{"model":"claude-opus-4-7","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":15,"price_output":75,"price_cache_creation":18.75,"price_cache_read":1.5,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":32768,"supports_cache":true,"supports_vision":true}
+{"model":"claude-opus-4-6","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":15,"price_output":75,"price_cache_creation":18.75,"price_cache_read":1.5,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":32768,"supports_cache":true,"supports_vision":true}
+{"model":"claude-sonnet-4-6","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":3,"price_output":15,"price_cache_creation":3.75,"price_cache_read":0.3,"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384,"supports_cache":true,"supports_vision":true}
+{"model":"claude-haiku-4-5-20251001","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":0.8,"price_output":4,"price_cache_creation":1,"price_cache_read":0.08,"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384,"supports_cache":true,"supports_vision":false}
+{"model":"gpt-5.6-sol","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":5,"price_output":30,"price_cache_creation":6.25,"price_cache_read":0.5,"tiers":[{"up_to_input_tokens":272000,"price_input":5,"price_output":30,"price_cache_creation":6.25,"price_cache_read":0.5},{"up_to_input_tokens":null,"price_input":10,"price_output":45,"price_cache_creation":12.5,"price_cache_read":1}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
+{"model":"gpt-5.6-terra","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":2.5,"price_output":15,"price_cache_creation":3.125,"price_cache_read":0.25,"tiers":[{"up_to_input_tokens":272000,"price_input":2.5,"price_output":15,"price_cache_creation":3.125,"price_cache_read":0.25},{"up_to_input_tokens":null,"price_input":5,"price_output":22.5,"price_cache_creation":6.25,"price_cache_read":0.5}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
+{"model":"gpt-5.6-luna","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":1,"price_output":6,"price_cache_creation":1.25,"price_cache_read":0.1,"tiers":[{"up_to_input_tokens":272000,"price_input":1,"price_output":6,"price_cache_creation":1.25,"price_cache_read":0.1},{"up_to_input_tokens":null,"price_input":2,"price_output":9,"price_cache_creation":2.5,"price_cache_read":0.2}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
+{"model":"gpt-5.5","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":5,"price_output":30,"price_cache_creation":0,"price_cache_read":0.5,"tiers":[{"up_to_input_tokens":272000,"price_input":5,"price_output":30,"price_cache_creation":0,"price_cache_read":0.5},{"up_to_input_tokens":null,"price_input":10,"price_output":45,"price_cache_creation":0,"price_cache_read":1}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
+{"model":"gpt-5.4","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":2.5,"price_output":15,"price_cache_creation":0,"price_cache_read":0.25,"tiers":[{"up_to_input_tokens":272000,"price_input":2.5,"price_output":15,"price_cache_creation":0,"price_cache_read":0.25},{"up_to_input_tokens":null,"price_input":5,"price_output":22.5,"price_cache_creation":0,"price_cache_read":0.5}],"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
+{"model":"gpt-5.3-codex","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":1.75,"price_output":14,"price_cache_creation":0,"price_cache_read":0.175,"context_window":200000,"max_input_tokens":180000,"max_output_tokens":16384}
+{"model":"deepseek-v4-pro","effective_from":0,"billing_fn":"per_token_deepseek_v1","currency":"CNY","price_cache_hit":0.5,"price_cache_miss":2,"price_output":8,"context_window":1000000,"max_input_tokens":950000,"max_output_tokens":8192,"supports_cache":true}
+{"model":"deepseek-v4-flash","effective_from":0,"billing_fn":"per_token_deepseek_v1","currency":"CNY","price_cache_hit":0.1,"price_cache_miss":0.5,"price_output":2,"context_window":1000000,"max_input_tokens":950000,"max_output_tokens":8192,"supports_cache":true}
+{"model":"deepseek-v3.2","effective_from":0,"billing_fn":"per_token_deepseek_v1","currency":"CNY","price_cache_hit":0.5,"price_cache_miss":2,"price_output":8,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192,"supports_cache":true}
+{"model":"kimi-k2.6","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":2,"price_output":8,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
+{"model":"kimi-k2.5","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":2,"price_output":8,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
+{"model":"glm-5.1","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":5,"price_output":20,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
+{"model":"glm-5","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":5,"price_output":20,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
+{"model":"glm-4.7","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":1,"price_output":5,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
+{"model":"MiniMax-M2.7","effective_from":0,"billing_fn":"per_token_v1","currency":"CNY","price_input":1,"price_output":5,"price_cache_creation":0,"price_cache_read":0,"context_window":128000,"max_input_tokens":120000,"max_output_tokens":8192}
+{"model":"claude-opus-5","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":5,"price_output":25,"price_cache_creation":6.25,"price_cache_read":0.5,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":131072,"supports_cache":true,"supports_vision":true}
+{"model":"claude-sonnet-5","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":2,"price_output":10,"price_cache_creation":2.5,"price_cache_read":0.2,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":131072,"supports_cache":true,"supports_vision":true}
+{"model":"claude-fable-5","effective_from":0,"billing_fn":"per_token_v1","currency":"USD","price_input":10,"price_output":50,"price_cache_creation":12.5,"price_cache_read":1,"context_window":1000000,"max_input_tokens":900000,"max_output_tokens":131072,"supports_cache":true,"supports_vision":true}

package/dist/utils/npm-ops.js

@@ -8,11 +8,119 @@
  */
 import fs from 'fs';
 import path from 'path';
-import { execFile, execSync } from 'child_process';
+import { execFile, execFileSync } from 'child_process';
 import { promisify } from 'util';
 import { getPackageRoot } from '../paths.js';
 import { isWindows } from './cross-platform.js';
 const execFileAsync = promisify(execFile);
+/** The preferred public registry for update checks. */
+export const DEFAULT_NPM_REGISTRY = 'https://registry.npmjs.org';
+function normalizeRegistry(registry = DEFAULT_NPM_REGISTRY) {
+    const value = registry.trim();
+    return (value || DEFAULT_NPM_REGISTRY).replace(/\/+$/, '');
+}
+/**
+ * Resolve npm from the same Node installation that is running EvolCore.
+ * This prevents a daemon launched by one NVM installation from querying or
+ * mutating another installation selected by the shell's PATH.
+ */
+function resolveNpmInvocation() {
+    const nodeDir = path.dirname(process.execPath);
+    const sibling = path.join(nodeDir, isWindows ? 'npm.cmd' : 'npm');
+    const cliCandidates = [
+        path.join(nodeDir, 'node_modules', 'npm', 'bin', 'npm-cli.js'),
+    ];
+    if (fs.existsSync(sibling)) {
+        try {
+            const target = fs.realpathSync(sibling);
+            if (target.endsWith('.js'))
+                cliCandidates.unshift(target);
+        }
+        catch { /* fall through to the known npm layouts */ }
+    }
+    const npmCli = cliCandidates.find(candidate => fs.existsSync(candidate));
+    if (npmCli)
+        return { command: process.execPath, argsPrefix: [npmCli] };
+    if (isWindows) {
+        return {
+            command: process.env.ComSpec || path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'cmd.exe'),
+            argsPrefix: ['/c', 'npm'],
+        };
+    }
+    return { command: fs.existsSync(sibling) ? sibling : 'npm', argsPrefix: [] };
+}
+/**
+ * Read the effective registry from the npm belonging to the current Node.
+ * An empty value means npm has no explicit registry and uses the public
+ * default. A command failure is handled separately by using the public source
+ * directly, so a broken npm config cannot leave the upgrade without a retry.
+ */
+async function resolveUpgradeRegistry(signal) {
+    const npm = resolveNpmInvocation();
+    try {
+        const result = await execFileAsync(npm.command, [...npm.argsPrefix, 'config', 'get', 'registry'], {
+            timeout: 5000,
+            windowsHide: isWindows,
+            signal,
+        });
+        const value = String(result.stdout ?? '').trim();
+        if (!value || value === 'undefined' || value === 'null') {
+            return { registry: DEFAULT_NPM_REGISTRY, useNpmCli: false };
+        }
+        return { registry: normalizeRegistry(value), useNpmCli: true };
+    }
+    catch {
+        return { registry: DEFAULT_NPM_REGISTRY, useNpmCli: false };
+    }
+}
+async function checkLatestVersionViaNpm(pkg, timeoutMs, signal, registry) {
+    const npm = resolveNpmInvocation();
+    try {
+        const result = await execFileAsync(npm.command, [
+            ...npm.argsPrefix,
+            'view',
+            `${pkg}@latest`,
+            'version',
+            '--json',
+            '--registry',
+            registry,
+        ], {
+            timeout: timeoutMs ?? 10000,
+            windowsHide: isWindows,
+            signal,
+        });
+        const raw = String(result.stdout ?? '').trim();
+        if (!raw)
+            return null;
+        const parsed = JSON.parse(raw);
+        if (typeof parsed === 'string' && parsed)
+            return parsed;
+        if (Array.isArray(parsed)) {
+            const latest = parsed.at(-1);
+            return typeof latest === 'string' && latest ? latest : null;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// Registry checks can run concurrently, but two package upgrades must never
+// mutate npm's global tree at the same time. A tiny in-process queue keeps the
+// fast path parallel without changing upgrade ordering or failure semantics.
+let globalInstallTail = Promise.resolve();
+async function withGlobalInstallLock(action) {
+    const previous = globalInstallTail;
+    let release;
+    globalInstallTail = new Promise(resolve => { release = resolve; });
+    await previous;
+    try {
+        await action();
+    }
+    finally {
+        release();
+    }
+}
 // ── npm install -g (shared) ────────────────────────────────────────────────
 /**
  * Can we run sudo without a password prompt?
@@ -35,20 +143,11 @@ async function canSudoNonInteractively() {
     }
 }
 export async function npmInstallGlobal(pkg, options = {}) {
-    let cmd;
-    let args;
-    // Windows: run via cmd /c to avoid shell:true deprecation warning on Node 22.
-    // Unix: npm directly, no shell needed.
-    if (isWindows) {
-        cmd = process.env.ComSpec || path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'cmd.exe');
-        args = ['/c', 'npm', 'install', '-g', pkg];
-    }
-    else {
-        cmd = 'npm';
-        args = ['install', '-g', pkg];
-    }
+    const npm = resolveNpmInvocation();
+    const registry = options.registry ? normalizeRegistry(options.registry) : undefined;
+    const npmArgs = ['install', '-g', pkg, ...(registry ? ['--registry', registry] : [])];
     try {
-        await execFileAsync(cmd, args, {
+        await execFileAsync(npm.command, [...npm.argsPrefix, ...npmArgs], {
             timeout: options.timeoutMs ?? 180000,
             windowsHide: isWindows,
             signal: options.signal,
@@ -62,9 +161,10 @@ export async function npmInstallGlobal(pkg, options = {}) {
                 throw new Error('权限不足。请以管理员身份运行 PowerShell 或 CMD，然后重试');
             }
             if (!await canSudoNonInteractively()) {
-                throw new Error(`权限不足，且 sudo 需要密码（当前进程无法交互输入）。请手动执行: sudo npm install -g ${pkg}`);
+                const registryArg = registry ? ` --registry ${registry}` : '';
+                throw new Error(`权限不足，且 sudo 需要密码（当前进程无法交互输入）。请使用当前 Node 对应的 npm 手动执行: sudo npm install -g ${pkg}${registryArg}`);
             }
-            await execFileAsync('sudo', ['-n', 'npm', 'install', '-g', pkg], {
+            await execFileAsync('sudo', ['-n', npm.command, ...npm.argsPrefix, ...npmArgs], {
                 timeout: options.timeoutMs ?? 180000,
                 windowsHide: false,
                 signal: options.signal,
@@ -132,10 +232,8 @@ export function getLocalVersion() {
  */
 export function resolveGlobalPkg(pkgName) {
     try {
-        // 命令完全静态（npm root -g，无用户输入），用 execSync 传完整命令字符串，
-        // 避免 "args 数组 + shell:true" 组合触发 Node DeprecationWarning，且无注入风险。
-        const npmCmd = isWindows ? 'npm.cmd' : 'npm';
-        const globalRoot = execSync(`${npmCmd} root -g`, {
+        const npm = resolveNpmInvocation();
+        const globalRoot = execFileSync(npm.command, [...npm.argsPrefix, 'root', '-g'], {
             encoding: 'utf-8', timeout: 10000, windowsHide: true,
         }).trim();
         const pkgPath = path.join(globalRoot, ...pkgName.split('/'), 'package.json');
@@ -152,7 +250,7 @@ export function resolveGlobalPkg(pkgName) {
  * 使用 HTTP fetch 直接查 registry API，不依赖 npm CLI。
  * 超时 10 秒，失败返回 null。
  */
-export async function checkLatestVersion(pkg = 'evolcore', timeoutMs = 10000, signal) {
+async function fetchLatestVersion(pkg = 'evolcore', timeoutMs = 10000, signal, registry = DEFAULT_NPM_REGISTRY) {
     const controller = new AbortController();
     const abort = () => controller.abort();
     if (signal?.aborted)
@@ -161,14 +259,14 @@ export async function checkLatestVersion(pkg = 'evolcore', timeoutMs = 10000, si
         signal?.addEventListener('abort', abort, { once: true });
     const timer = setTimeout(abort, timeoutMs);
     try {
-        const res = await fetch(`https://registry.npmjs.org/${pkg}/latest`, {
+        const res = await fetch(`${normalizeRegistry(registry)}/${encodeURIComponent(pkg)}/latest`, {
             signal: controller.signal,
             headers: { 'Accept': 'application/json' },
         });
         if (!res.ok)
             return null;
         const data = await res.json();
-        return data.version || null;
+        return typeof data.version === 'string' && data.version ? data.version : null;
     }
     catch {
         return null;
@@ -178,6 +276,31 @@ export async function checkLatestVersion(pkg = 'evolcore', timeoutMs = 10000, si
         signal?.removeEventListener('abort', abort);
     }
 }
+/**
+ * Read the current npm registry first. If that read succeeds, npm itself is
+ * used for the version query so proxy/CA/auth settings are preserved. If the
+ * read fails, retry once against the official HTTP endpoint. The selected
+ * registry is returned so installation uses the same source.
+ */
+async function checkLatestVersionWithFallback(pkg, timeoutMs, signal, explicitRegistry) {
+    if (explicitRegistry) {
+        const registry = normalizeRegistry(explicitRegistry);
+        const version = await fetchLatestVersion(pkg, timeoutMs, signal, registry);
+        return version ? { version, registry } : null;
+    }
+    const selection = await resolveUpgradeRegistry(signal);
+    const version = selection.useNpmCli
+        ? await checkLatestVersionViaNpm(pkg, timeoutMs, signal, selection.registry)
+        : await fetchLatestVersion(pkg, timeoutMs, signal, selection.registry);
+    return version ? { version, registry: selection.registry } : null;
+}
+/**
+ * Query the registry selected from the running Node/npm configuration, or the
+ * official registry when that configuration cannot be read.
+ */
+export async function checkLatestVersion(pkg = 'evolcore', timeoutMs = 10000, signal, registry) {
+    return (await checkLatestVersionWithFallback(pkg, timeoutMs, signal, registry))?.version ?? null;
+}
 /**
  * 完整升级流程：检查 → 比较 → 安装（失败重试一次）
  */
@@ -188,12 +311,13 @@ export async function tryUpgrade(options = {}) {
     }
     const localVer = getLocalVersion();
     // 查询 registry
-    const remoteVer = await checkLatestVersion('evolcore', options.checkTimeoutMs, options.signal);
-    if (!remoteVer) {
+    const checked = await checkLatestVersionWithFallback('evolcore', options.checkTimeoutMs, options.signal, options.registry);
+    if (!checked) {
         return options.signal?.aborted
             ? { status: 'failed', from: localVer, error: 'Upgrade cancelled or timed out' }
             : { status: 'skipped', error: 'Failed to check remote version' };
     }
+    const { version: remoteVer, registry } = checked;
     // 版本比较
     if (compareVersions(localVer, remoteVer) >= 0) {
         return { status: 'no-update', from: localVer };
@@ -202,11 +326,19 @@ export async function tryUpgrade(options = {}) {
     let lastError;
     for (let attempt = 0; attempt < 2; attempt++) {
         try {
-            await npmInstallGlobal('evolcore@latest', {
-                timeoutMs: options.installTimeoutMs,
-                signal: options.signal,
+            let installedVer;
+            await withGlobalInstallLock(async () => {
+                await npmInstallGlobal(`evolcore@${remoteVer}`, {
+                    timeoutMs: options.installTimeoutMs,
+                    signal: options.signal,
+                    registry,
+                });
+                installedVer = getLocalVersion();
             });
-            return { status: 'upgraded', from: localVer, to: remoteVer };
+            if (!installedVer || compareVersions(installedVer, remoteVer) < 0) {
+                throw new Error(`npm install completed but evolcore is still ${installedVer ?? 'not installed'} (target ${remoteVer})`);
+            }
+            return { status: 'upgraded', from: localVer, to: installedVer };
         }
         catch (e) {
             lastError = e.stderr || e.message || String(e);
@@ -230,23 +362,32 @@ export async function tryUpgradeGlobalPkg(resolveInstalled, pkgName, options = {
         return { status: 'skipped' }; // not installed, skip
     }
     const localVer = installed.version;
-    const remoteVer = await checkLatestVersion(pkgName, options.checkTimeoutMs, options.signal);
-    if (!remoteVer) {
+    const checked = await checkLatestVersionWithFallback(pkgName, options.checkTimeoutMs, options.signal, options.registry);
+    if (!checked) {
         return options.signal?.aborted
             ? { status: 'failed', from: localVer, error: 'Upgrade cancelled or timed out' }
             : { status: 'skipped', error: 'Failed to check remote version' };
     }
+    const { version: remoteVer, registry } = checked;
     if (compareVersions(localVer, remoteVer) >= 0) {
         return { status: 'no-update', from: localVer };
     }
     let lastError;
     for (let attempt = 0; attempt < 2; attempt++) {
         try {
-            await npmInstallGlobal(`${pkgName}@latest`, {
-                timeoutMs: options.installTimeoutMs,
-                signal: options.signal,
+            let installedVer;
+            await withGlobalInstallLock(async () => {
+                await npmInstallGlobal(`${pkgName}@${remoteVer}`, {
+                    timeoutMs: options.installTimeoutMs,
+                    signal: options.signal,
+                    registry,
+                });
+                installedVer = resolveInstalled()?.version;
             });
-            return { status: 'upgraded', from: localVer, to: remoteVer };
+            if (!installedVer || compareVersions(installedVer, remoteVer) < 0) {
+                throw new Error(`npm install completed but ${pkgName} is still ${installedVer ?? 'not installed'} (target ${remoteVer})`);
+            }
+            return { status: 'upgraded', from: localVer, to: installedVer };
         }
         catch (e) {
             lastError = e.stderr || e.message || String(e);

package/dist/utils/welcome.js

@@ -31,23 +31,23 @@ export function generateWelcomeMessage(options) {
     const bindingNote = options.includeBindingNote
         ? `\n\n🔐 **绑定说明**：\n- 这条消息表示您的设备已和此 Agent 绑定\n- 只有您能看到和使用这个 Agent\n- AUN 提供端到端加密和跨设备同步`
         : '';
-    return `🎉 欢迎使用 EvolCore！
-
-${greeting}
-
-${agentIntro}${channelInfo}
-
-📋 **日常使用方法**：
-
-1. **查看帮助**：发送 \`/help\` 查看所有可用命令
-2. **查看状态**：发送 \`/status\` 查看当前会话状态
-3. **会话管理**：发送 \`/session\` 查看和切换会话
-
-💡 **提示**：
-- 直接发送消息即可与 Claude/Codex 对话
-- 支持多会话管理，每个会话独立上下文
-- 所有命令以 \`/\` 开头${channelSpecificNote}${bindingNote}
-
+    return `🎉 欢迎使用 EvolCore！
+
+${greeting}
+
+${agentIntro}${channelInfo}
+
+📋 **日常使用方法**：
+
+1. **查看帮助**：发送 \`/help\` 查看所有可用命令
+2. **查看状态**：发送 \`/status\` 查看当前会话状态
+3. **会话管理**：发送 \`/session\` 查看和切换会话
+
+💡 **提示**：
+- 直接发送消息即可与 Claude/Codex 对话
+- 支持多会话管理，每个会话独立上下文
+- 所有命令以 \`/\` 开头${channelSpecificNote}${bindingNote}
+
 现在就可以开始工作了！`;
 }
 /**
@@ -65,25 +65,25 @@ export function generateInitSuccessMessage(channelType, hasOwner) {
     const channelName = getChannelDescription(channelType);
     // AUN 在 connect 时向 owner 发送欢迎消息
     if (hasOwner && channelType === 'aun') {
-        return `\n💡 提示：首次启动时会向 owner 发送欢迎消息
+        return `\n💡 提示：首次启动时会向 owner 发送欢迎消息
    启动服务: ec start`;
     }
     // Feishu 虽然有 owner，但已改为首次交互发送（与其他 IM 统一）
     if (hasOwner && channelType === 'feishu') {
-        return `\n💡 提示：首次用户交互时会发送欢迎消息
+        return `\n💡 提示：首次用户交互时会发送欢迎消息
    启动服务: ec start`;
     }
     // 其他 IM 渠道：首次交互发送
     if (hasOwner) {
-        return `\n💡 提示：${channelName}渠道已配置
+        return `\n💡 提示：${channelName}渠道已配置
    启动服务: ec start`;
     }
     const ownerHint = channelType === 'aun'
         ? `   配置 owner: ec init ${channelType}`
         : '   配置 owner: 在 agent config.json 的 owners 中写入 AID；非 AUN 渠道身份写入 contact.json';
     // 无 owner 的渠道
-    return `\n💡 提示：${channelName}渠道已配置
-   启动服务: ec start
+    return `\n💡 提示：${channelName}渠道已配置
+   启动服务: ec start
 ${ownerHint}`;
 }
 /**

package/ecagent/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2025 Mario Zechner
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2025 Mario Zechner
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/ecagent/NOTICE

@@ -1,11 +1,11 @@
-This distribution contains modified packaging of @earendil-works/pi-agent-core.
-
-Upstream project: https://github.com/earendil-works/pi
-Upstream version: 0.80.7
-Upstream commit: 818d67457cdd6b60bce6b121d16b23141c252dd8
-
-Modification: TypeScript sources from @earendil-works/pi-agent-core and the
-provider-free protocol subset of @earendil-works/pi-ai are maintained together
-in this package. Provider SDK implementations and dependencies are excluded.
-Callers supply a custom model stream function or use the included pi-messages
-protocol runtime.
+This distribution contains modified packaging of @earendil-works/pi-agent-core.
+
+Upstream project: https://github.com/earendil-works/pi
+Upstream version: 0.80.7
+Upstream commit: 818d67457cdd6b60bce6b121d16b23141c252dd8
+
+Modification: TypeScript sources from @earendil-works/pi-agent-core and the
+provider-free protocol subset of @earendil-works/pi-ai are maintained together
+in this package. Provider SDK implementations and dependencies are excluded.
+Callers supply a custom model stream function or use the included pi-messages
+protocol runtime.

package/ecagent/README.md

@@ -1,61 +1,61 @@
-# ecagent
-
-`ecagent` is an unofficial lightweight distribution of
-[`@earendil-works/pi-agent-core`](https://github.com/earendil-works/pi). It
-includes the Pi agent loop, tools, sessions, compaction, skills, and execution
-environment abstractions together with an embedded provider-free model runtime.
-The published package includes both the TypeScript source in `src/` and the
-compiled ESM output in `dist/`.
-
-## Install
-
-```bash
-npm install ecagent
-
-# Or install it globally for a shared Node.js runtime
-npm install --global ecagent
-```
-
-Supply a custom model stream function. No model provider SDK is installed by
-default:
-
-```typescript
-import { Agent } from "ecagent";
-
-const agent = new Agent({
-  initialState: {
-    model,
-    systemPrompt: "You are a coding agent.",
-  },
-  streamFn: evolcoreModelStream,
-});
-```
-
-The `streamFn` must implement the Pi stream contract exported by
-`ecagent/runtime`:
-
-```typescript
-import { AssistantMessageEventStream } from "ecagent/runtime";
-```
-
-EvolCore uses this boundary to connect its own credentials, gateway, streaming,
-and abort handling.
-
-## Build from source
-
-```bash
-npm install
-npm run build
-```
-
-The build runs TypeScript directly over the checked-in source. It does not
-download precompiled upstream artifacts.
-
-## Upstream
-
-- Package: `@earendil-works/pi-agent-core@0.80.7`
-- Runtime: `@earendil-works/pi-ai@0.80.7`
-- Commit: `818d67457cdd6b60bce6b121d16b23141c252dd8`
-- License: MIT
-
-This package is not affiliated with or endorsed by the Pi maintainers.
+# ecagent
+
+`ecagent` is an unofficial lightweight distribution of
+[`@earendil-works/pi-agent-core`](https://github.com/earendil-works/pi). It
+includes the Pi agent loop, tools, sessions, compaction, skills, and execution
+environment abstractions together with an embedded provider-free model runtime.
+The published package includes both the TypeScript source in `src/` and the
+compiled ESM output in `dist/`.
+
+## Install
+
+```bash
+npm install ecagent
+
+# Or install it globally for a shared Node.js runtime
+npm install --global ecagent
+```
+
+Supply a custom model stream function. No model provider SDK is installed by
+default:
+
+```typescript
+import { Agent } from "ecagent";
+
+const agent = new Agent({
+  initialState: {
+    model,
+    systemPrompt: "You are a coding agent.",
+  },
+  streamFn: evolcoreModelStream,
+});
+```
+
+The `streamFn` must implement the Pi stream contract exported by
+`ecagent/runtime`:
+
+```typescript
+import { AssistantMessageEventStream } from "ecagent/runtime";
+```
+
+EvolCore uses this boundary to connect its own credentials, gateway, streaming,
+and abort handling.
+
+## Build from source
+
+```bash
+npm install
+npm run build
+```
+
+The build runs TypeScript directly over the checked-in source. It does not
+download precompiled upstream artifacts.
+
+## Upstream
+
+- Package: `@earendil-works/pi-agent-core@0.80.7`
+- Runtime: `@earendil-works/pi-ai@0.80.7`
+- Commit: `818d67457cdd6b60bce6b121d16b23141c252dd8`
+- License: MIT
+
+This package is not affiliated with or endorsed by the Pi maintainers.