evolcore 0.0.27 → 0.0.28

package/dist/core/message/message-bridge.js

@@ -33,6 +33,7 @@ import { guardGroupSlashCommand, parseFullAccessCommand } from '../command/slash
 import { isFullAccessEnabled } from '../../config-store.js';
 import { createAgentPolicyAuthorization } from '../role/runtime-policy.js';
 import { auditFullAccessEvent } from '../auth/authorization-audit.js';
+import { DIAGNOSTIC_AGENT_AID, DiagnosticSessionRouter, parseDiagnosticEvent, isDiagnosticSessionActive } from '../command/diag-service.js';
 import { consumeAdmissionReplyBudget, clearAdmissionReplyBudgets, evaluateInboundAdmissionPreflight, evaluateOrdinaryInboundAdmission, } from './message-admission.js';
 const CONTACT_REJECTION_NOTICE = '[rejection] Not accepting messages from you.';
 const REJECTABLE_PEER_TYPES = new Set(['ai', 'bot', 'agent', 'service']);
@@ -115,6 +116,7 @@ export class MessageBridge {
     menuTokenStore = new MenuTokenStore();
     handoffRuntime;
     sessionRenewService;
+    diagnosticRouter;
     aidStatsCollector;
     contactBindRuntimeChecker;
     interactionRouter;
@@ -129,6 +131,13 @@ export class MessageBridge {
         this.processOwnersProvider = processOwnersProvider;
         this.defaultDebounce = defaultDebounce ?? 0;
         this.sessionRenewService = new SessionRenewService(sessionManager, processor, { eventBus });
+        this.diagnosticRouter = new DiagnosticSessionRouter(sessionManager, async (sessionId) => {
+            // Revoke in the router first, then clear pending work before awaiting the
+            // runner interruption. Delayed debounce and recovery are fenced below.
+            this.messageQueue.clearBySession(sessionId);
+            this.messageQueue.markActiveTerminal(sessionId, 'stop');
+            await this.processor.interruptSession(sessionId, 'stop');
+        });
     }
     /** Inject EvolAgentRegistry so owner lookups/writes route to agent.json for agent-owned channels. */
     setAgentRegistry(registry) {
@@ -971,6 +980,37 @@ export class MessageBridge {
                     await this.sendAccessDenied(adapter, channelName, msg, sendReply);
                     return;
                 }
+                // Diagnostic invitations carry their own execution boundary. Resolve
+                // that boundary before ordinary command/session routing so a new case
+                // cannot inherit an older Codex thread.
+                let diagnosticSession;
+                if (selfAid === DIAGNOSTIC_AGENT_AID && resolvedChannelType === 'aun'
+                    && chatType === 'private' && msg.source !== 'handoff') {
+                    try {
+                        const diagnosticEvent = parseDiagnosticEvent(content);
+                        if (diagnosticEvent) {
+                            releaseAdmission = await this.acquireAdmission(admissionRoute);
+                            const routed = await this.diagnosticRouter.route({
+                                event: diagnosticEvent, message: msg, channel: channelName,
+                                channelType: resolvedChannelType, selfAid,
+                                chatDir: chatDirPath(resolvePaths().sessionsDir, resolvedChannelType, msg.channelId, selfAid, channelName),
+                                projectPath: owningAgent?.projectPath ?? this.defaultProjectPath,
+                                baseagent: owningAgent?.baseagent,
+                            });
+                            if ('notice' in routed) {
+                                await sendReply(msg.channelId, routed.notice, msg.replyContext);
+                                return;
+                            }
+                            diagnosticSession = routed.session;
+                            diagnosticSession.identity = identity;
+                        }
+                    }
+                    catch (error) {
+                        logger.warn(`[MessageBridge] Diagnostic admission failed: ${error instanceof Error ? error.message : 'unknown error'}`);
+                        await sendReply(msg.channelId, '诊断会话隔离未完成，本次未执行诊断。请检查诊断端日志后重试。', msg.replyContext);
+                        return;
+                    }
+                }
                 // /fa is an execution prefix, not a session-mode switch or a normal
                 // quick command. Only this trusted bridge path can construct the
                 // internal per-call authorization carried into ResponseEngine.
@@ -1186,9 +1226,10 @@ export class MessageBridge {
                 // transaction. Without this per-route single-flight, a second message
                 // can observe the just-renewed empty session before the first message
                 // has been appended and create another renewed session.
-                releaseAdmission = await this.acquireAdmission(admissionRoute);
+                if (!releaseAdmission)
+                    releaseAdmission = await this.acquireAdmission(admissionRoute);
                 const hadMainSession = msg.threadId ? true : this.sessionManager.hasMainSession(channelName, msg.channelId, msg.channelType || effectiveChannelType, msg.selfAID || selfAid);
-                let session = await this.sessionManager.getOrCreateSession(channelName, msg.channelId, effectiveProjectPath, msg.threadId, Object.keys(metadata).length ? metadata : undefined, this.extractTopicName(msg), msg.peerId, chatType, owningAgent?.baseagent, msg.selfAID, msg.channelType || effectiveChannelType, msg.peerType, identity, readTopicLable(msg) ?? readTopicLable(msg.replyContext?.metadata));
+                let session = diagnosticSession ?? await this.sessionManager.getOrCreateSession(channelName, msg.channelId, effectiveProjectPath, msg.threadId, Object.keys(metadata).length ? metadata : undefined, this.extractTopicName(msg), msg.peerId, chatType, owningAgent?.baseagent, msg.selfAID, msg.channelType || effectiveChannelType, msg.peerType, identity, readTopicLable(msg) ?? readTopicLable(msg.replyContext?.metadata));
                 if (session.threadId && typeof this.messageQueue.reserveSessionIngress === 'function') {
                     releaseSessionIngress = this.messageQueue.reserveSessionIngress(session.id);
                 }
@@ -1201,7 +1242,7 @@ export class MessageBridge {
                 const inboundCausation = restoredCausation
                     ? deriveCausation(restoredCausation)
                     : createRootCausation();
-                const renewResult = await this.sessionRenewService.resolve({
+                const renewResult = session.metadata?.diagnostic ? { session } : await this.sessionRenewService.resolve({
                     session,
                     channelName,
                     channelType: msg.channelType || effectiveChannelType,
@@ -1338,6 +1379,9 @@ export class MessageBridge {
                 const enqueueAgentName = owningAgent?.name ?? '<unknown>';
                 const selfAID = session.selfAID;
                 const doEnqueue = async (m) => {
+                    // A cancellation can arrive while this message is being debounced.
+                    if (!isDiagnosticSessionActive(session, this.sessionManager.getChatDir(session)))
+                        return;
                     const enqueue = handoffCandidate ? this.messageQueue.enqueuePersisted.bind(this.messageQueue) : this.messageQueue.enqueue.bind(this.messageQueue);
                     try {
                         return await enqueue(session.id, m, session.projectPath, {

package/dist/core/message/response-engine.js

@@ -5,6 +5,7 @@ import os from 'os';
 import crypto from 'crypto';
 import { BaseagentRunnerUnavailableError, hasCompact, autoCompactWindowForModel, isClaudeContextUsageModel, numericToken, formatAsyncQuestionAnswer, parseAsyncUserQuestions, } from '../../agents/runner-types.js';
 import { loadedBaseagentIds } from '../../agents/baseagent-availability.js';
+import { isDiagnosticSessionActive } from '../command/diag-service.js';
 import { evaluateInboundAdmissionPreflight, evaluateOrdinaryInboundAdmission } from './message-admission.js';
 import { authorizeAccess, authorizeOperation, buildAuthSubject } from '../auth/auth-gateway.js';
 import { buildTaskRuntimeEnv, ensureRuntimeLockDir, ensureSessionRuntimeDir } from '../../cli/task-context.js';
@@ -1878,6 +1879,28 @@ export class ResponseEngine {
     async processMessageWithMonitors(message) {
         const idleMs = (this.globalSettings.idleMonitor?.timeout ?? 120) * 1000;
         const totalExecutionMs = this.totalExecutionLimitMs();
+        // A discarded handoff must be dropped before any bound-session lookup.
+        // Restored origin deliveries may point at a session that has already been
+        // replaced; resolving it first would reactivate the stale session path.
+        if (message.handoffDelivery
+            && this.handoffRuntime
+            && this.handoffRuntime.isDiscardedDelivery(message)) {
+            logger.info(`[ResponseEngine] Skip stale handoff delivery before session resolution:`
+                + ` direction=${message.handoffDelivery.direction}`
+                + ` handoff=${message.handoffDelivery.handoffId}`);
+            return;
+        }
+        // Includes persisted queues, recovery triggers and delayed owner replies.
+        // A closed diagnostic must not activate its old main session again.
+        const diagnosticBoundId = message.boundSessionId ?? message.triggerMeta?.boundSessionId;
+        if (diagnosticBoundId) {
+            const bound = await this.sessionManager.getSessionById(diagnosticBoundId);
+            if (bound && (bound.metadata?.diagnostic || bound.metadata?.diagnosticStatus === 'cancelled')
+                && !isDiagnosticSessionActive(bound, this.sessionManager.getChatDir(bound))) {
+                logger.info(`[ResponseEngine] Skip closed diagnostic session ${bound.id}`);
+                return;
+            }
+        }
         if (message.taskRecovery) {
             const current = message.boundSessionId
                 ? await this.sessionManager.getSessionById(message.boundSessionId)
@@ -1887,17 +1910,12 @@ export class ResponseEngine {
                 return;
             }
         }
-        if (message.handoffDelivery
-            && this.handoffRuntime
-            && this.handoffRuntime.isDiscardedDelivery(message)) {
-            logger.info(`[ResponseEngine] Skip stale handoff delivery before session resolution:`
-                + ` direction=${message.handoffDelivery.direction}`
-                + ` handoff=${message.handoffDelivery.handoffId}`);
-            return;
-        }
         // 先解析会话，再优先用 session.metadata.channelKey 精确定位实例级 adapter
         // message.channel 现在存实例名（channelName），可直接用于精确路由
         const { session, absoluteProjectPath } = await this.resolveSession(message);
+        if ((session.metadata?.diagnostic || session.metadata?.diagnosticStatus === 'cancelled')
+            && !isDiagnosticSessionActive(session, this.sessionManager.getChatDir(session)))
+            return;
         const accessChannelKey = this.messageChannelKey(message, session);
         const accessChannelInfo = this.resolveChannelInfo(accessChannelKey);
         const accessAdapter = accessChannelInfo?.adapter;
@@ -2874,6 +2892,7 @@ export class ResponseEngine {
                 flushDelay: (options?.flushDelay ?? this.agentRegistry?.resolveByChannel(channelKey)?.config?.flush_delay ?? 3) * 1000,
                 suppressActivityItems: isProactive ? false : middleOutputMode !== 'all',
                 suppressIntermediateText: isProactive ? false : middleOutputMode === 'none',
+                deferTextUntilBoundary: (message.channelType ?? session.channelType) === 'aun' && session.chatType === 'private',
                 operationalNoticesAsText: !isProactive && middleOutputMode !== 'none',
                 fileMarkerPattern: options?.fileMarkerPattern,
                 send: async (payload) => {
@@ -5245,7 +5264,7 @@ export class ResponseEngine {
                 // valid mapped owner/admin to role=none at the execution boundary.
                 if (resolvedIdentity)
                     bound.identity = resolvedIdentity;
-                if (bound.threadId) {
+                if (bound.threadId || bound.metadata?.diagnostic) {
                     const absoluteProjectPath = path.isAbsolute(bound.projectPath)
                         ? bound.projectPath : path.resolve(process.cwd(), bound.projectPath);
                     return { session: bound, absoluteProjectPath };
@@ -5705,7 +5724,7 @@ export class ResponseEngine {
                             this.eventBus.publish({ type: 'message:text', sessionId: session.id, text: visibleText, isFinal: false });
                         }
                         if (visibleText && !shouldSuppress()) {
-                            await renderer.addText(visibleText, event.outputTokens, event.turn, event.assistantUuid);
+                            await renderer.addText(visibleText, event.outputTokens, event.turn, event.assistantUuid, event.phase);
                             hasProjectedCurrentReplyText = true;
                         }
                     }

package/dist/core/permission/ec-command-parser.js

@@ -376,6 +376,14 @@ function parseFailure(issue, input, offset, tokenIndex, dialect) {
         inputLength: input.length,
     };
 }
+// PowerShell uses smart quotes as delimiters, including when the opening
+// quote was ASCII. Treating them as text changes argv and delegation hashes.
+function isPowerShellSingleQuote(char) {
+    return char !== undefined && /['\u2018\u2019\u201a\u201b]/u.test(char);
+}
+function isPowerShellDoubleQuote(char) {
+    return char !== undefined && /["\u201c\u201d\u201e]/u.test(char);
+}
 function parseLiteralPowerShellCommand(command, options = {}) {
     const input = trimShellSpacing(command);
     if (!input)
@@ -399,11 +407,11 @@ function parseLiteralPowerShellCommand(command, options = {}) {
     for (let index = 0; index < input.length; index++) {
         const char = input[index];
         if (quote === 'single') {
-            if (char === "'" && input[index + 1] === "'") {
-                token += "'";
+            if (isPowerShellSingleQuote(char) && isPowerShellSingleQuote(input[index + 1])) {
+                token += input[index + 1];
                 index++;
             }
-            else if (char === "'") {
+            else if (isPowerShellSingleQuote(char)) {
                 if (!isLiteralArgBoundary(input[index + 1]))
                     return parseFailure('invalid-quote', input, index, argv.length, 'powershell');
                 quote = null;
@@ -420,7 +428,7 @@ function parseLiteralPowerShellCommand(command, options = {}) {
                 return parseFailure('unsafe-expansion', input, index, argv.length, 'powershell');
             }
             if (!options.allowManagedTmpDir || !options.managedTempDir
-                || (next !== undefined && !/[\\/\s"']/u.test(next))) {
+                || (next !== undefined && !/[\\/\s"']/u.test(next) && !isPowerShellSingleQuote(next) && !isPowerShellDoubleQuote(next))) {
                 return parseFailure('unsafe-expansion', input, index, argv.length, 'powershell');
             }
             // Append the registered value directly: spaces remain in this argument,
@@ -431,7 +439,7 @@ function parseLiteralPowerShellCommand(command, options = {}) {
             continue;
         }
         if (quote === 'double') {
-            if (char === '"') {
+            if (isPowerShellDoubleQuote(char)) {
                 if (!isLiteralArgBoundary(input[index + 1]))
                     return parseFailure('invalid-quote', input, index, argv.length, 'powershell');
                 quote = null;
@@ -458,12 +466,12 @@ function parseLiteralPowerShellCommand(command, options = {}) {
         if (/\s/u.test(char) || char.charCodeAt(0) < 0x20 || char === '\x7f') {
             return parseFailure('invalid-control-char', input, index, argv.length, 'powershell');
         }
-        if (char === "'") {
+        if (isPowerShellSingleQuote(char)) {
             tokenStarted = true;
             quote = 'single';
             continue;
         }
-        if (char === '"') {
+        if (isPowerShellDoubleQuote(char)) {
             tokenStarted = true;
             quote = 'double';
             continue;

package/dist/core/permission/tool-policy.js

@@ -2334,7 +2334,7 @@ export function evaluateToolPreflight(toolName, input, context) {
             }
             if (ecCommand.issue === 'invalid-quote') {
                 const message = shellDialect === 'powershell'
-                    ? '🔒 EC 命令引号未闭合或存在错误嵌套；PowerShell 正文内的双引号请用反引号转义，或改用单引号包裹纯文字'
+                    ? '🔒 EC 命令引号未闭合或存在错误嵌套；PowerShell 也会解释中文弯引号。请按 PowerShell 规则转义，或把消息正文写入当前 $TMPDIR 后使用 --text-from-file'
                     : shellDialect === 'cmd'
                         ? '🔒 EC 命令引号未闭合或存在错误嵌套；cmd.exe carrier 的命令正文请保持一个完整参数，不要用未配对的双引号'
                         : '🔒 EC 命令引号未闭合或存在错误嵌套；正文中的双引号请写成 \\"';

package/dist/core/session/session-manager.js

@@ -1501,6 +1501,10 @@ export class SessionManager {
         if (identityMetadata?.sessionBoundaryOperationId) {
             metadata.sessionBoundaryOperationId = identityMetadata.sessionBoundaryOperationId;
         }
+        // Only an explicit caller may bind a diagnostic case. Never inherit a
+        // previous case (or any provider thread binding) from the active session.
+        if (identityMetadata?.diagnostic)
+            metadata.diagnostic = { ...identityMetadata.diagnostic };
         const session = {
             id: generateSessionId(),
             channel,

package/dist/index.js

@@ -103,12 +103,10 @@ import { atomicWriteJson } from './core/session/session-fs-store.js';
 import { DAEMON_RUNTIME_EPOCH_ENV, ensureProcessManagedTempDir } from './cli/task-context.js';
 import { appendMessageLog, buildOutboundEntry, classifyAunPayloadForLog } from './core/message/message-log.js';
 import { normalizeAunMentionEntries } from './aun/msg/mention-schema.js';
-import { MAIN_PACKAGE_NAME } from './product.js';
 import { sanitizeMenuLogValue } from './core/command/menu-protocol.js';
 import fs from 'fs';
 import crypto from 'crypto';
 import { fileURLToPath } from 'url';
-import * as platform from './utils/cross-platform.js';
 const controlMenuDeduper = new MenuRequestDeduper();
 /** 出站 payload 摘要（用于 channel-out.log） */
 function summarizeOutboundPayload(payload) {
@@ -372,160 +370,23 @@ function seedUpgradeCheckTrigger(manager, owner) {
     fs.mkdirSync(dir, { recursive: true });
     const scriptPath = path.join(dir, scriptName);
     const packageRoot = getPackageRoot();
-    const cliPath = path.join(packageRoot, 'dist', 'cli', 'index.js');
-    const packageJsonPath = path.join(packageRoot, 'package.json');
-    const devMode = fs.existsSync(path.join(packageRoot, 'src', 'index.ts'));
-    // Resolve the launch argv at generation time: in a checkout this points the
-    // monitor at src/ through tsx, so a `npm run build` that wipes dist/ cannot
-    // take the watchdog down with it.
-    const monitorEntry = platform.resolveCliEntry(packageRoot);
-    const stageParent = path.join(resolvePaths().root, 'data', 'monitor-stage');
+    // Keep this generated script check-only. It never starts a monitor or runs npm install.
     fs.writeFileSync(scriptPath, `#!/usr/bin/env node
-const fs = require('node:fs');
-const path = require('node:path');
-const { existsSync, readFileSync } = fs;
-const { spawn } = require('node:child_process');
-
-const CLI_PATH = ${JSON.stringify(monitorEntry.entry)};
-const CLI_ARGS = ${JSON.stringify(monitorEntry.args)};
-const PACKAGE_ROOT = ${JSON.stringify(packageRoot)};
-const STAGE_PARENT = ${JSON.stringify(stageParent)};
-const PACKAGE_JSON = ${JSON.stringify(packageJsonPath)};
-const PACKAGE_NAME = ${JSON.stringify(MAIN_PACKAGE_NAME)};
-const DEV_MODE = ${devMode ? 'true' : 'false'};
-
-function emit(outcome, text) {
-  process.stdout.write(JSON.stringify({ outcome, text, files: [] }));
-}
-
-function compareVersions(a, b) {
-  const pa = a.split('-')[0].split('.').map(Number);
-  const pb = b.split('-')[0].split('.').map(Number);
-  const count = Math.max(pa.length, pb.length);
-  for (let i = 0; i < count; i += 1) {
-    const av = Number.isFinite(pa[i]) ? pa[i] : 0;
-    const bv = Number.isFinite(pb[i]) ? pb[i] : 0;
-    if (av < bv) return -1;
-    if (av > bv) return 1;
-  }
-  return 0;
-}
-
-async function latestVersion() {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), 10_000);
-  try {
-    const response = await fetch('https://registry.npmjs.org/' + encodeURIComponent(PACKAGE_NAME) + '/latest', {
-      signal: controller.signal,
-      headers: { Accept: 'application/json' },
-    });
-    if (!response.ok) return null;
-    const data = await response.json();
-    return typeof data.version === 'string' ? data.version : null;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
+const { pathToFileURL } = require('node:url');
+const entry = ${JSON.stringify(path.join(packageRoot, 'dist', 'utils', 'package-version-info.js'))};
 async function main() {
-  if (DEV_MODE) {
-    emit('noop', 'upgrade check skipped in dev mode');
-    return;
-  }
-
-  let localVersion;
-  try {
-    localVersion = JSON.parse(readFileSync(PACKAGE_JSON, 'utf8')).version;
-  } catch {
-    emit('error', 'failed to read local ec version');
-    return;
-  }
-  if (typeof localVersion !== 'string' || !localVersion) {
-    emit('error', 'failed to read local ec version');
-    return;
-  }
-
-  let remoteVersion;
-  try {
-    remoteVersion = await latestVersion();
-  } catch {
-    remoteVersion = null;
-  }
-  if (!remoteVersion) {
-    emit('error', 'failed to check evolcore latest version');
-    return;
-  }
-  if (compareVersions(localVersion, remoteVersion) >= 0) {
-    emit('noop', 'evolcore is already up to date (' + localVersion + '; latest ' + remoteVersion + ')');
-    return;
-  }
-  if (!existsSync(CLI_PATH)) {
-    emit('error', 'restart-monitor entry not found: ' + CLI_PATH);
-    return;
-  }
-
-  // Installed mode: copy the monitor out of the package before it upgrades that
-  // same package. Mirrors prepareMonitorStage(); kept inline because this file
-  // is generated standalone CJS. Any failure degrades to launching in place —
-  // losing upgrade isolation beats losing the upgrade.
-  let launchArgs = CLI_ARGS;
-  const launchEnv = { ...process.env };
-  if (!DEV_MODE && STAGE_PARENT) {
-    try {
-      const stageDir = path.join(STAGE_PARENT, 'upgrade-' + process.pid + '-' + Date.now());
-      fs.mkdirSync(stageDir, { recursive: true });
-      fs.cpSync(path.join(PACKAGE_ROOT, 'dist'), path.join(stageDir, 'dist'), { recursive: true });
-      if (existsSync(PACKAGE_JSON)) fs.copyFileSync(PACKAGE_JSON, path.join(stageDir, 'package.json'));
-      const modulesSource = path.join(PACKAGE_ROOT, 'node_modules');
-      if (existsSync(modulesSource)) {
-        const staged = path.join(stageDir, 'node_modules');
-        try {
-          // junction works unelevated on Windows; dir symlink elsewhere.
-          fs.symlinkSync(modulesSource, staged, process.platform === 'win32' ? 'junction' : 'dir');
-          fs.readdirSync(staged);
-        } catch (linkError) {
-          fs.rmSync(staged, { recursive: true, force: true });
-          fs.cpSync(modulesSource, staged, { recursive: true });
-        }
-      }
-      const stagedEntry = path.join(stageDir, 'dist', 'cli', 'index.js');
-      if (existsSync(stagedEntry)) {
-        launchArgs = [stagedEntry];
-        launchEnv.EVOLCORE_TARGET_PACKAGE_ROOT = PACKAGE_ROOT;
-        launchEnv.EVOLCORE_MONITOR_STAGE = stageDir;
-      }
-    } catch (stageError) {
-      // Fall through with the in-place entry.
-    }
-  }
-
-  try {
-    const child = spawn(process.execPath, [...launchArgs, 'restart-monitor'], {
-      detached: true,
-      stdio: 'ignore',
-      windowsHide: process.platform === 'win32',
-      env: launchEnv,
-    });
-    child.unref();
-    const pid = child.pid;
-    // The daemon is still running here — the monitor is what stops it. So a
-    // monitor that dies on load costs the upgrade, not the service; still,
-    // report it accurately instead of claiming success.
-    await new Promise(resolve => setTimeout(resolve, 3000));
-    let alive = false;
-    try { process.kill(pid, 0); alive = true; } catch (e) { alive = false; }
-    if (!alive) {
-      emit('error', 'restart-monitor exited during startup; upgrade to ' + remoteVersion + ' not applied');
-      return;
-    }
-    emit('success', 'evolcore upgrade available: ' + localVersion + ' -> ' + remoteVersion + '; restart-monitor started');
-  } catch (error) {
-    emit('error', 'failed to start restart-monitor: ' + (error && error.message ? error.message : String(error)));
-  }
+  const { refreshManagedPackageVersions } = await import(pathToFileURL(entry).href);
+  const results = await refreshManagedPackageVersions(undefined, { source: 'daily-check' });
+  const failed = results.some(result => result.status === 'unavailable');
+  process.stdout.write(JSON.stringify({
+    outcome: failed ? 'error' : 'success',
+    text: results.map(result => result.packageName + ': ' + result.status).join('; '),
+    files: [],
+  }));
 }
-
-main().catch((error) => {
-  emit('error', 'upgrade check failed: ' + (error && error.message ? error.message : String(error)));
+main().catch(() => {
+  process.stdout.write(JSON.stringify({ outcome: 'error', text: 'Version information refresh failed', files: [] }));
+  process.exitCode = 1;
 });
 `);
     // Remove the pre-Node script left by older installations so it cannot be

package/dist/product.js

@@ -14,6 +14,7 @@ export const MIN_ECWEB_VERSION = '0.0.8';
 export const DAEMON_CONFIG_FILENAME = 'daemon.json';
 export const DAEMON_SCHEMA_NAME = 'daemon';
 export const RUNTIME_HOME_ENV = 'EVOLCORE_HOME';
+export const TARGET_PACKAGE_ROOT_ENV = 'EVOLCORE_TARGET_PACKAGE_ROOT';
 export const SESSION_ID_ENV = 'EVOLCORE_SESSION_ID';
 export const SELF_AID_ENV = 'EVOLCORE_SELF_AID';
 export const DEFAULT_RUNTIME_HOME_DIRNAME = '.evolcore';

package/dist/utils/atomic-write.js

@@ -15,6 +15,9 @@
  */
 import fs from 'fs';
 import path from 'path';
+import os from 'os';
+import { randomUUID } from 'crypto';
+import { isProcessRunning } from './cross-platform.js';
 const HOT = '_'; // foo.json_   旧版热备
 const TMP = '__'; // foo.json__  写入中
 const HOT_BACKUP_FALLBACK_CODES = new Set(['EACCES', 'ENOSYS', 'ENOTSUP', 'EPERM', 'EXDEV']);
@@ -178,3 +181,98 @@ export function atomicWriteBytes(filePath, content) {
     fs.writeFileSync(tmp, content);
     fs.renameSync(tmp, filePath);
 }
+const pauseFileWrite = (ms) => new Promise(resolve => setTimeout(resolve, ms));
+/** Cross-process lock for package state. A complete owner file is linked into place atomically. */
+export async function withFileLock(file, action, timeoutMs = 30000) {
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    const token = randomUUID();
+    const candidate = `${file}.${process.pid}.${token}.candidate`;
+    const owner = JSON.stringify({ token, pid: process.pid, host: os.hostname() });
+    fs.writeFileSync(candidate, owner, { flag: 'wx', mode: 0o600 });
+    const deadline = Date.now() + timeoutMs;
+    try {
+        while (true) {
+            try {
+                fs.linkSync(candidate, file);
+                break;
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST')
+                    throw error;
+            }
+            try {
+                const raw = fs.readFileSync(file, 'utf8');
+                const existing = JSON.parse(raw);
+                if (typeof existing.token === 'string' && /^[a-f0-9-]{36}$/.test(existing.token)
+                    && existing.host === os.hostname() && existing.pid !== process.pid
+                    && Number.isSafeInteger(existing.pid) && existing.pid > 0 && !isProcessRunning(existing.pid)
+                    && fs.readFileSync(file, 'utf8') === raw) {
+                    fs.unlinkSync(file);
+                    continue;
+                }
+            }
+            catch { /* Unknown or concurrently released owner: wait. */ }
+            if (Date.now() >= deadline)
+                throw new Error('Package state lock timed out');
+            await pauseFileWrite(40 + Math.floor(Math.random() * 20));
+        }
+        const lockIdentity = fs.statSync(file);
+        try {
+            return await action();
+        }
+        finally {
+            const releaseDeadline = Date.now() + 5000;
+            while (true) {
+                try {
+                    const current = fs.statSync(file);
+                    if (current.dev !== lockIdentity.dev || current.ino !== lockIdentity.ino) {
+                        throw new Error('Package lock ownership changed');
+                    }
+                    fs.unlinkSync(file);
+                    break;
+                }
+                catch (error) {
+                    if (error.code === 'ENOENT')
+                        break;
+                    if (!['EPERM', 'EACCES', 'EBUSY'].includes(error.code ?? '')
+                        || Date.now() >= releaseDeadline)
+                        throw error;
+                    await pauseFileWrite(50);
+                }
+            }
+        }
+    }
+    finally {
+        fs.rmSync(candidate, { force: true });
+    }
+}
+/** Atomic replacement without the in-place Windows fallback used by protected config files. */
+export async function atomicReplaceJson(file, value) {
+    const temporary = `${file}.${process.pid}.${randomUUID()}.tmp`;
+    try {
+        const fd = fs.openSync(temporary, 'wx', 0o600);
+        try {
+            fs.writeFileSync(fd, JSON.stringify(value, null, 2) + '\n', 'utf8');
+            fs.fsyncSync(fd);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        const deadline = Date.now() + 5000;
+        for (let attempt = 0;; attempt++) {
+            try {
+                fs.renameSync(temporary, file);
+                return;
+            }
+            catch (error) {
+                if (!['EPERM', 'EACCES', 'EBUSY'].includes(error.code ?? '')
+                    || Date.now() >= deadline)
+                    throw error;
+                await pauseFileWrite(Math.min(200, 25 * (attempt + 1)) + Math.floor(Math.random() * 25));
+            }
+        }
+    }
+    finally {
+        fs.rmSync(temporary, { force: true });
+    }
+}