evolcore 0.0.37 → 0.0.39

package/dist/cli/fs-command.js

@@ -3,7 +3,7 @@ import path from 'path';
 import { TextDecoder } from 'util';
 import { getArgValue, isHelpFlag, wantsHelp } from './help.js';
 import { agentmdGet, getAidStore, isValidAid, loadClient, SLOT } from '../aun/aid/index.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { resolvePaths } from '../paths.js';
 import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { DEFAULT_FS_CAT_BYTES, MAX_FS_CAT_BYTES, FsReadBudgetError, downloadGroupFsBytes, readPersonalFsBytesWithinBudget, } from '../aun/group/fs-download.js';
@@ -222,14 +222,15 @@ async function runManagedFs(args, formatJson) {
         fail('NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
     if (!delegationToken)
         fail('DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set for the active task`);
-    const response = await ipcQuery(resolvePaths().socket, {
+    const { response, transportError } = await queryDaemon(resolvePaths().socket, {
         type: 'fs.op',
         argv: ['fs', ...args],
         sessionId,
         delegationToken,
     }, 30_000);
-    if (!response)
-        return fail('DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+    if (!response) {
+        return fail('DAEMON_UNAVAILABLE', daemonUnavailableMessage(transportError, 'Unable to connect to the evolcore daemon'));
+    }
     if (!response.ok || !response.result)
         fail(String(response.code || 'FS_OPERATION_FAILED'), response.error || 'Filesystem operation failed');
     const result = response.result;

package/dist/cli/handoff-command.js

@@ -1,6 +1,6 @@
 import fs from 'fs';
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { HANDOFF_QUERY_DEFAULT_LIMIT, HANDOFF_QUERY_MAX_LIMIT, HANDOFF_STATES } from '../core/handoff/types.js';
 import { HANDOFF_ID_RE } from '../core/handoff/store.js';
 import { isHelpFlag, wantsHelp } from './help.js';
@@ -191,7 +191,7 @@ Commands:
             process.exitCode = 1;
             return;
         }
-        const result = await ipcQuery(resolvePaths().socket, {
+        const { response: result, transportError } = await queryDaemon(resolvePaths().socket, {
             type: 'handoff-return',
             argv: ['handoff', ...args],
             sessionId: process.env.EVOLCORE_SESSION_ID,
@@ -200,7 +200,7 @@ Commands:
             delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
-            console.error('✗ daemon 暂时不可用');
+            console.error(`✗ ${daemonUnavailableMessage(transportError, 'daemon 暂时不可用')}`);
             process.exitCode = 1;
             return;
         }
@@ -222,7 +222,7 @@ Commands:
             process.exitCode = 1;
             return;
         }
-        const result = await ipcQuery(resolvePaths().socket, {
+        const { response: result, transportError } = await queryDaemon(resolvePaths().socket, {
             type: 'handoff-recover-return',
             argv: ['handoff', ...args],
             sessionId: process.env.EVOLCORE_SESSION_ID,
@@ -231,7 +231,7 @@ Commands:
             delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
-            console.error('✗ daemon 暂时不可用');
+            console.error(`✗ ${daemonUnavailableMessage(transportError, 'daemon 暂时不可用')}`);
             process.exitCode = 1;
             return;
         }
@@ -245,13 +245,13 @@ Commands:
             process.exitCode = 1;
             return;
         }
-        const result = await ipcQuery(resolvePaths().socket, {
+        const { response: result, transportError } = await queryDaemon(resolvePaths().socket, {
             type: 'handoff-status', sessionId: process.env.EVOLCORE_SESSION_ID, handoffId,
             argv: ['handoff', ...args],
             delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
-            console.error('✗ daemon 暂时不可用');
+            console.error(`✗ ${daemonUnavailableMessage(transportError, 'daemon 暂时不可用')}`);
             process.exitCode = 1;
             return;
         }
@@ -273,7 +273,7 @@ Commands:
             process.exitCode = 1;
             return;
         }
-        const result = await ipcQuery(resolvePaths().socket, {
+        const { response: result, transportError } = await queryDaemon(resolvePaths().socket, {
             type: 'handoff-list',
             argv: ['handoff', ...args],
             sessionId: process.env.EVOLCORE_SESSION_ID,
@@ -284,7 +284,7 @@ Commands:
             delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
-            console.error('✗ daemon 暂时不可用');
+            console.error(`✗ ${daemonUnavailableMessage(transportError, 'daemon 暂时不可用')}`);
             process.exitCode = 1;
             return;
         }
@@ -318,7 +318,7 @@ Commands:
             process.exitCode = 1;
             return;
         }
-        const result = await ipcQuery(resolvePaths().socket, {
+        const { response: result, transportError } = await queryDaemon(resolvePaths().socket, {
             type: 'handoff-trace',
             argv: ['handoff', ...args],
             sessionId: process.env.EVOLCORE_SESSION_ID,
@@ -328,7 +328,7 @@ Commands:
             delegationToken: readDelegationCredential(),
         }, 5000);
         if (!result) {
-            console.error('✗ daemon 暂时不可用');
+            console.error(`✗ ${daemonUnavailableMessage(transportError, 'daemon 暂时不可用')}`);
             process.exitCode = 1;
             return;
         }

package/dist/cli/help.js

@@ -11,7 +11,25 @@
  *   - 单层命令（如 cmdLinkRules、cmdAid 的具体 sub 处理块内）用 wantsHelp(args)，
  *     支持 option 风格帮助，同时不把 `--` 后的正文误判为帮助。
  */
+import { IpcTransportError, ipcQuery } from '../ipc.js';
 const HELP_TOKENS = new Set(['help', '--help', '-h']);
+/** Query a daemon-backed command while preserving concrete transport failures. */
+export async function queryDaemon(socketPath, command, timeoutMs = 3000) {
+    try {
+        return {
+            response: await ipcQuery(socketPath, command, timeoutMs, { throwOnError: true }),
+        };
+    }
+    catch (error) {
+        if (error instanceof IpcTransportError) {
+            return { response: null, transportError: error };
+        }
+        throw error;
+    }
+}
+export function daemonUnavailableMessage(transportError, fallback) {
+    return transportError?.message ?? fallback;
+}
 export function isHelpFlag(token) {
     return token !== undefined && HELP_TOKENS.has(token);
 }

package/dist/cli/init-channel.js

@@ -8,6 +8,7 @@
 import readline from 'readline';
 import { cmdAidBind } from './aid-bind-command.js';
 import { getOwners } from '../core/ownership/owner-resolver.js';
+import { MAIN_CLI_BIN } from '../product.js';
 import crypto from 'crypto';
 import { selectInstance } from './init.js';
 import { loadAllAgents, loadAgent, loadDaemonConfig } from '../config-store.js';
@@ -695,7 +696,7 @@ export async function cmdInitWechat() {
 // ==================== AUN ====================
 export async function cmdInitAun() {
     console.log('AUN 协议 Owner 统一使用 ec aid bind <ownerAid> [--subject <subjectAid>]');
-    console.log('状态查询: ec aid bind status [--subject <subjectAid>]；Evol App 扫码绑定留待二期。');
+    console.log(`状态查询: ${MAIN_CLI_BIN} aid bind status [--subject <subjectAid>]；邀约审批: ${MAIN_CLI_BIN} aid bind accept|reject <operationId>。`);
 }
 async function pickAunOwnerBindTarget(rl, daemonAid) {
     const { agents } = loadAllAgents();

package/dist/cli/memory-command.js

@@ -13,7 +13,7 @@
  */
 import fs from 'node:fs';
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { isHelpFlag, wantsHelp, getArgValue } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
@@ -337,7 +337,7 @@ async function cmdMemoryNoteCreate(args, json) {
     if (!content)
         failWithUsage(json, '必须提供记忆内容（content）', USAGE.note);
     const { socketPath, ...session } = requireManagedSession('ec memory note', flags, json);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.note', argv: ['memory', 'note', ...args], ...session, slug, content, tags,
         speakers: speakers && speakers.length > 0 ? speakers : undefined,
     }, 15_000);
@@ -359,7 +359,7 @@ async function cmdMemoryNoteUpdate(args, json) {
         failWithUsage(json, '至少提供一项要改的内容（--slug / --tags / 正文）', USAGE.noteUpdate);
     }
     const { socketPath, ...session } = requireManagedSession('ec memory note update', flags, json);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.note.update', argv: ['memory', 'note', 'update', ...args], ...session, slug,
         newSlug, tags, tagsProvided: tagsRaw !== undefined,
         content: content || undefined,
@@ -375,7 +375,7 @@ async function cmdMemoryNoteDrop(args, json) {
     if (!slug)
         failWithUsage(json, '必须提供要撤销的 slug', USAGE.noteDrop);
     const { socketPath, ...session } = requireManagedSession('ec memory note drop', flags, json);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.note.drop', argv: ['memory', 'note', 'drop', ...args], ...session, slug,
     }, 15_000);
     reportResult(result, json, (r) => {
@@ -385,7 +385,7 @@ async function cmdMemoryNoteDrop(args, json) {
 async function cmdMemoryNoteList(args, json) {
     const { flags } = parseCliArgs(args, [], json);
     const { socketPath, ...session } = requireManagedSession('ec memory note list', flags, json);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.note.list', argv: ['memory', 'note', 'list', ...args], ...session,
     }, 15_000);
     reportResult(result, json, (r) => {
@@ -430,7 +430,7 @@ async function cmdMemoryCreate(args, json) {
         failWithUsage(json, '--peer 只在 --scope relation 时有效', USAGE.create);
     }
     const { socketPath, ...session } = requireManagedSession('ec memory create', flags, json);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.create', argv: ['memory', 'create', ...args], ...session, scope, slug, description: desc,
         content,
         tags: parseTags(tagsRaw),
@@ -456,7 +456,7 @@ async function cmdMemoryConsolidatedUpdate(args, json) {
     if (tagsRaw === undefined && !touch)
         failWithUsage(json, '至少提供 --tags 或 --touch', USAGE.update);
     const { socketPath, ...session } = requireManagedSession('ec memory update', flags, json);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.update', argv: ['memory', 'update', ...args], ...session, filePath,
         tags: parseTags(tagsRaw), touch,
     }, 15_000);
@@ -469,7 +469,7 @@ async function cmdMemoryArchive(args, json) {
     if (positional.length === 0)
         failWithUsage(json, '必须提供至少一个要归档的文件路径', USAGE.archive);
     const { socketPath, ...session } = requireManagedSession('ec memory archive', flags, json);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.archive', argv: ['memory', 'archive', ...args], ...session, filePaths: positional,
     }, 15_000);
     reportResult(result, json, (r) => {
@@ -496,7 +496,7 @@ async function cmdMemoryDemote(args, json) {
         fail(json, 'INVALID_ARGUMENT', '--scope 必须是 agent 或 owner', { text: '--scope 必须是 agent 或 owner' });
     }
     const { socketPath, ...session } = requireManagedSession('ec memory demote', flags, json);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.demote', argv: ['memory', 'demote', ...args], ...session, slug, scope,
     }, 15_000);
     reportResult(result, json, (r) => {
@@ -528,7 +528,7 @@ async function cmdMemoryConsolidate(args, json) {
     // JSON 模式下 stdout 只留结果对象
     if (!json)
         console.log(`正在触发记忆整理（mode=${mode}）...`);
-    const result = await ipcQuery(socketPath, {
+    const result = await queryDaemon(socketPath, {
         type: 'memory.consolidate', argv: ['memory', 'consolidate', ...args], ...session, mode,
     }, 30_000);
     reportResult(result, json, (r) => {
@@ -551,10 +551,11 @@ async function cmdMemoryConsolidate(args, json) {
 }
 // ── 结果输出 ───────────────────────────────────────────────────────────────
 function reportResult(result, json, ok) {
-    if (!result) {
-        fail(json, 'DAEMON_UNAVAILABLE', '无法连接 evolcore 服务', { text: '错误: 无法连接 evolcore 服务' });
+    if (!result.response) {
+        const message = daemonUnavailableMessage(result.transportError, '无法连接 evolcore 服务');
+        fail(json, 'DAEMON_UNAVAILABLE', message, { text: `错误: ${message}` });
     }
-    const r = result;
+    const r = result.response;
     if (!r.ok) {
         const message = r.error || '操作失败';
         fail(json, r.code || 'MEMORY_OPERATION_FAILED', message, { text: message });

package/dist/cli/model.js

@@ -16,7 +16,7 @@ import { resolveEffectiveFieldWithSource } from '../config/config-manager.js';
 import { getCatalog, getModelInfo, catalogEfforts, resolveCatalogModel, assertCatalogSelectable } from '../core/model/model-catalog.js';
 import { constrainResolvedModelForRole, filterModelsForRole, validateModelSelectionForRole, } from '../core/model/model-permission.js';
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { parsePeerKey } from '../core/relation/peer-identity.js';
 import { resolvePeerRoleDetail } from '../config/peer-role-resolver.js';
 import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
@@ -50,11 +50,12 @@ async function runManagedCliOperation(args, formatJson, timeoutMs = 10_000) {
     const delegationToken = readDelegationCredential();
     if (!delegationToken)
         fail(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} 未设置`);
-    const response = await ipcQuery(resolvePaths().socket, {
+    const { response, transportError } = await queryDaemon(resolvePaths().socket, {
         type: 'ctl', argv: args, sessionId, delegationToken,
     }, timeoutMs);
-    if (!response)
-        fail(formatJson, 'DAEMON_UNAVAILABLE', '无法连接 evolcore 服务');
+    if (!response) {
+        fail(formatJson, 'DAEMON_UNAVAILABLE', daemonUnavailableMessage(transportError, '无法连接 evolcore 服务'));
+    }
     if (!response.ok)
         fail(formatJson, response.code || 'CTL_FAILED', response.error || '命令执行失败');
     printCtlResult({ text: response.result || '', data: response.data }, formatJson);

package/dist/cli/queue-command.js

@@ -1,5 +1,5 @@
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { getArgValue, isHelpFlag, wantsHelp } from './help.js';
 import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
@@ -94,7 +94,7 @@ JSON 时间字段:
                 : undefined;
     const socketPath = resolvePaths().socket;
     const managed = process.env.EVOLCORE_SESSION_ID;
-    const result = await ipcQuery(socketPath, managed ? {
+    const { response: result, transportError } = await queryDaemon(socketPath, managed ? {
         type: 'queue.op',
         argv: ['queue', ...args],
         agent,
@@ -115,7 +115,7 @@ JSON 时间字段:
         before,
     });
     if (!result) {
-        console.error('错误: 无法连接 evolcore 服务');
+        console.error(`错误: ${daemonUnavailableMessage(transportError, '无法连接 evolcore 服务')}`);
         process.exit(1);
     }
     const r = result;

package/dist/cli/response.js

@@ -15,7 +15,7 @@ import { readField, writeField, determineFieldScope, normalizePeer, ModelScopeEr
 import { readFieldWithSource, resolveAgentConfig, ConfigTarget } from '../config/config-manager.js';
 import { ResponseModeRegistry } from '../response-system/registry.js';
 import { registerBuiltinModes } from '../response-system/modes/index.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { resolvePaths } from '../paths.js';
 import { AGENT_DELEGATION_TOKEN_ENV, readDelegationCredential } from '../core/auth/agent-delegation.js';
 const RESPONSE_MODE_FIELD = 'responseMode';
@@ -64,11 +64,12 @@ async function runManagedResponse(args, formatJson) {
         fail(formatJson, 'NO_SESSION', 'EVOLCORE_SESSION_ID is not set');
     if (!delegationToken)
         fail(formatJson, 'DELEGATION_REQUIRED', `${AGENT_DELEGATION_TOKEN_ENV} is not set`);
-    const response = await ipcQuery(resolvePaths().socket, {
+    const { response, transportError } = await queryDaemon(resolvePaths().socket, {
         type: 'ctl', argv: ['response', ...args], sessionId, delegationToken,
     }, 10_000);
-    if (!response)
-        fail(formatJson, 'DAEMON_UNAVAILABLE', 'Unable to connect to the evolcore daemon');
+    if (!response) {
+        fail(formatJson, 'DAEMON_UNAVAILABLE', daemonUnavailableMessage(transportError, 'Unable to connect to the evolcore daemon'));
+    }
     if (!response.ok)
         fail(formatJson, response.code || 'CTL_FAILED', response.error || 'response operation failed');
     emit(formatJson, response.data ?? { ok: true, result: response.result }, () => response.result || 'ok');

package/dist/cli/skill-command.js

@@ -22,7 +22,7 @@ import path from 'path';
 import { spawn } from 'child_process';
 import { getPackageRoot, agentDir, resolvePaths } from '../paths.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { authorizeLocalCommand, TASK_RUNTIME_CONTEXT_ENV } from './task-context.js';
 import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
@@ -87,17 +87,17 @@ async function cmdSkillRefresh(args) {
         process.exitCode = 1;
         return;
     }
-    let response;
-    try {
-        response = await ipcQuery(resolvePaths().socket, {
-            type: 'skill.refresh',
-            aid,
-            argv,
-            ...(sessionId ? { sessionId, delegationToken } : {}),
-        }, 30_000, { throwOnError: true });
-    }
-    catch (e) {
-        console.error(`❌ 刷新失败 (DAEMON_UNAVAILABLE): ${e instanceof Error ? e.message : String(e)}`);
+    const { response, transportError } = await queryDaemon(resolvePaths().socket, {
+        type: 'skill.refresh',
+        aid,
+        argv,
+        ...(sessionId ? { sessionId, delegationToken } : {}),
+    }, 30_000);
+    if (transportError) {
+        if (asJson)
+            console.log(JSON.stringify({ ok: false, code: 'DAEMON_UNAVAILABLE', error: transportError.message }, null, 2));
+        else
+            console.error(`❌ 刷新失败 (DAEMON_UNAVAILABLE): ${transportError.message}`);
         process.exitCode = 1;
         return;
     }
@@ -109,7 +109,7 @@ async function cmdSkillRefresh(args) {
     }
     if (!response?.ok) {
         const code = response?.code ?? (response ? 'FAILED' : 'DAEMON_UNAVAILABLE');
-        console.error(`❌ 刷新失败 (${code}): ${response?.error ?? '无法连接 evolcore daemon'}`);
+        console.error(`❌ 刷新失败 (${code}): ${response?.error ?? daemonUnavailableMessage(transportError, '无法连接 evolcore daemon')}`);
         if (response?.data?.nextStep)
             console.error(`   ${response.data.nextStep}`);
         process.exitCode = 1;

package/dist/cli/task-command.js

@@ -1,5 +1,5 @@
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { wantsHelp } from './help.js';
 const TASK_HELP = `用法: ec task resume <sessionId> [--format json]
@@ -39,14 +39,14 @@ export async function cmdTask(args) {
         printError('DELEGATION_REQUIRED', '托管任务缺少 delegation token');
         return;
     }
-    const result = await ipcQuery(resolvePaths().socket, {
+    const { response: result, transportError } = await queryDaemon(resolvePaths().socket, {
         type: 'task.resume',
         argv: ['task', ...args],
         targetSessionId,
         ...(sessionId ? { sessionId, delegationToken } : {}),
     }, 10_000);
     if (!result) {
-        printError('IPC_UNAVAILABLE', '无法连接 EvolCore 服务；请查询任务状态后再决定是否重试');
+        printError('IPC_UNAVAILABLE', daemonUnavailableMessage(transportError, '无法连接 EvolCore 服务；请查询任务状态后再决定是否重试'));
         return;
     }
     if (json)

package/dist/cli/thread-command.js

@@ -1,5 +1,5 @@
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { canonicalizeEvolcoreCommandArgv } from '../core/permission/ec-command-parser.js';
 import { isMainSessionThreadId, resolveThreadRef } from '../core/thread/topic-id.js';
@@ -91,7 +91,7 @@ async function sendThreadOp(req, commandArgv) {
     const cred = readDelegationCredential();
     const { socket } = resolvePaths();
     const invokingSessionId = process.env.EVOLCORE_SESSION_ID;
-    const result = await ipcQuery(socket, {
+    const { response: result, transportError } = await queryDaemon(socket, {
         ...req,
         type: 'thread.op',
         argv: commandArgv,
@@ -99,7 +99,9 @@ async function sendThreadOp(req, commandArgv) {
         sessionId: invokingSessionId,
     }, 10000);
     if (!result)
-        return { ok: false, code: 'DAEMON_UNAVAILABLE', error: 'daemon 暂时不可用' };
+        return {
+            ok: false, code: 'DAEMON_UNAVAILABLE', error: daemonUnavailableMessage(transportError, 'daemon 暂时不可用'),
+        };
     return result;
 }
 function printResult(data, jsonFormat) {

package/dist/cli/trigger-command.js

@@ -1,7 +1,7 @@
 import fs from 'fs';
 import path from 'path';
 import { resolvePaths } from '../paths.js';
-import { ipcQuery } from '../ipc.js';
+import { daemonUnavailableMessage, queryDaemon } from './help.js';
 import { isHelpFlag, wantsHelp } from './help.js';
 import { readDelegationCredential } from '../core/auth/agent-delegation.js';
 import { readTaskRuntimeContextFromEnv } from './task-context.js';
@@ -642,9 +642,9 @@ async function request(cmd, timeoutMs = 10_000) {
         }
         catch { }
     }
-    const res = await ipcQuery(resolvePaths().socket, actorSessionId ? { ...cmd, actorSessionId, delegationToken } : delegationToken ? { ...cmd, delegationToken } : { ...cmd, controlToken }, timeoutMs);
+    const { response: res, transportError } = await queryDaemon(resolvePaths().socket, actorSessionId ? { ...cmd, actorSessionId, delegationToken } : delegationToken ? { ...cmd, delegationToken } : { ...cmd, controlToken }, timeoutMs);
     if (!res)
-        throw new Error('错误: 无法连接 evolcore 服务');
+        throw new Error(`错误: ${daemonUnavailableMessage(transportError, '无法连接 evolcore 服务')}`);
     if (res.ok === false || res.error)
         throw new Error(res.error || 'trigger command failed');
     return res;

package/dist/cli/version.js

@@ -6,6 +6,7 @@ import path from 'path';
 import { fileURLToPath } from 'url';
 import { MAIN_PACKAGE_NAME, PRODUCT_DISPLAY_NAME, WEB_PACKAGE_NAME } from '../product.js';
 import { getArgValue, wantsHelp } from './help.js';
+import { resolveGlobalPkg } from '../utils/npm-ops.js';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const PACKAGE_ROOT = path.resolve(__dirname, '../..');
 const RESET = '\x1b[0m';
@@ -54,8 +55,11 @@ export function handleVersion(args) {
     const mainPkg = readPkgJson(PACKAGE_ROOT);
     const mainEntry = path.join(PACKAGE_ROOT, 'dist', 'cli', 'index.js');
     const mainTs = getFileModTime(mainEntry);
-    // ecweb 包
-    const ecwebDir = path.join(PACKAGE_ROOT, 'ecweb');
+    // EC Web may be in the repository (dev mode) or nested under the globally
+    // installed EvolCore package. Use the shared resolver so both layouts report
+    // the actual installed package instead of `?`.
+    const ecwebInstalled = resolveGlobalPkg(WEB_PACKAGE_NAME);
+    const ecwebDir = ecwebInstalled ? path.dirname(ecwebInstalled.path) : path.join(PACKAGE_ROOT, 'ecweb');
     const ecwebPkg = readPkgJson(ecwebDir);
     const ecwebEntry = path.join(ecwebDir, 'dist', 'index.js');
     const ecwebTs = getFileModTime(ecwebEntry);

package/dist/core/auth/operation-catalog.js

@@ -1123,7 +1123,7 @@ const OPERATIONS = [
     },
     {
         id: 'ec.aid.bind', category: 'write-agent', dangerous: true, defaultScopes: ['agent'],
-        description: 'Request a protocol Owner binding using the subject SDK client', sources: ['agent-tool', 'menu.cli'],
+        description: 'Request or decide a protocol Owner binding using the subject SDK client', sources: ['agent-tool', 'menu.cli'],
     },
     {
         id: 'ec.aid.bind.status', category: 'read', dangerous: false, defaultScopes: ['agent'],

package/dist/core/bootstrap-service.js

@@ -3,8 +3,8 @@ import { ownerResolver, OWNERSHIP_AUTHORIZATION_MAX_AGE_MS } from './ownership/o
 import fs from 'fs';
 import path from 'path';
 import { randomBytes } from 'crypto';
-import { kitsTemplatesDir, agentMdPath, resolvePaths } from '../paths.js';
-import { buildInitialAgentMd, resolveAgentDisplayName } from '../aun/aid/agentmd.js';
+import { kitsTemplatesDir, resolvePaths } from '../paths.js';
+import { buildInitialAgentMd, resolveAgentDisplayName, verifyLocalAgentMd } from '../aun/aid/agentmd.js';
 import { logger } from '../utils/logger.js';
 import { readAgentWelcomeTemplate } from '../utils/welcome.js';
 import { loadAgent, saveAgent } from '../config-store.js';
@@ -308,7 +308,13 @@ export class BootstrapService {
                 return false;
             }
             if (starting) {
-                await this.publishAgentMdIfSupported(ctx.adapter, aid, agentName);
+                // AUN creation/binding has already published agent.md, and the fresh
+                // Owner consensus above requires it. A normal upload here re-signs the
+                // approved original while the Owner may still be confirming its hash
+                // and ETag. Sending a welcome must not mutate that binding evidence.
+                if (channelType !== 'aun') {
+                    await this.publishAgentMdIfSupported(ctx.adapter, aid, agentName);
+                }
                 this.setLifecycle(agent, aid, 'bootstrapping');
                 lifecycleStarted = true;
             }
@@ -546,18 +552,20 @@ export class BootstrapService {
     async publishAgentMdIfSupported(adapter, aid, fallbackName) {
         if (typeof adapter.uploadAgentMd !== 'function')
             return;
-        const existing = fs.existsSync(agentMdPath(aid)) ? fs.readFileSync(agentMdPath(aid), 'utf-8') : '';
-        const content = existing.trim() || buildInitialAgentMd({
+        const verification = await verifyLocalAgentMd(aid);
+        if (verification.status === 'verified') {
+            logger.info(`[Bootstrap] Preserving verified local agent.md for ${aid}; upload skipped`);
+            return;
+        }
+        if (verification.status !== 'missing') {
+            throw new Error(`Local agent.md cannot be safely republished for ${aid}: ${verification.reason ?? verification.status}`);
+        }
+        const content = buildInitialAgentMd({
             aid,
             name: fallbackName,
             type: 'agent',
         });
-        try {
-            await adapter.uploadAgentMd(content);
-            logger.info(`[Bootstrap] Published agent.md for ${aid}`);
-        }
-        catch (e) {
-            logger.warn(`[Bootstrap] Failed to publish agent.md for ${aid}: ${e instanceof Error ? e.message : String(e)}`);
-        }
+        await adapter.uploadAgentMd(content);
+        logger.info(`[Bootstrap] Published initial agent.md for ${aid}`);
     }
 }

package/dist/core/command/cli-intent-parser.js

@@ -243,11 +243,14 @@ function parseAidCommand(argv, source, defaultSelfAid) {
         try {
             const command = parseOwnershipCommand(argv.slice(1));
             const subjectAid = command.subjectAid ?? defaultSelfAid;
-            return recognized(command.action === 'bind' ? 'ec.aid.bind' : 'ec.aid.bind.status', 'agent', source, {
+            const isMutation = command.action !== 'status';
+            return recognized(isMutation ? 'ec.aid.bind' : 'ec.aid.bind.status', 'agent', source, {
                 ...(subjectAid ? { self: subjectAid } : {}),
                 ...(command.subjectAid ? { subjectAid: command.subjectAid } : {}),
                 ...(command.action === 'bind' ? { ownerAid: command.ownerAid } : {}),
-            }, argv, command.action === 'bind');
+                ...(command.action === 'accept' || command.action === 'reject'
+                    ? { decision: command.action, operationId: command.operationId } : {}),
+            }, argv, isMutation);
         }
         catch (error) {
             return raw(source, argv, error instanceof Error ? error.message : 'Invalid aid bind command');

package/dist/core/command/command-handler.js

@@ -2196,8 +2196,9 @@ export class CommandHandler {
             const command = parseOwnershipCommand(argv);
             const targetAid = command.subjectAid ?? grant.selfAid;
             ownerResolver.assertLocalSubject(targetAid);
-            if (command.action === 'bind' && ['readonly', 'auto'].includes(grant.permissionMode ?? '')) {
-                return { ok: false, code: 'NOT_ALLOWED', error: 'Binding requires a request or bypass task' };
+            const isMutation = command.action !== 'status';
+            if (isMutation && !['request', 'bypass'].includes(grant.permissionMode ?? '')) {
+                return { ok: false, code: 'NOT_ALLOWED', error: 'Binding changes and decisions require a request or bypass task' };
             }
             await refreshOwnershipForAuthorization(targetAid);
             let conversationId;
@@ -2215,12 +2216,20 @@ export class CommandHandler {
             if (targetAid !== grant.selfAid && !subject.isDaemonOwner) {
                 return { ok: false, code: 'SCOPE_MISMATCH', error: 'A different local subject requires the current daemon Owner' };
             }
-            if (!subject.isDaemonOwner && (command.action === 'bind' ? subject.role !== 'owner' : !isManagementRole(subject.role))) {
+            if (!subject.isDaemonOwner && (isMutation ? subject.role !== 'owner' : !isManagementRole(subject.role))) {
                 return { ok: false, code: 'OWNER_REQUIRED', error: 'Ownership binding requires the subject Owner or daemon Owner; first daemon binding uses the local CLI' };
             }
             const decision = await authorizeFreshOperation({
                 source: 'agent-tool', subject,
-                intent: { operation: command.action === 'bind' ? 'ec.aid.bind' : 'ec.aid.bind.status', scope: 'agent', source: 'agent-tool', args: { self: targetAid, ...(command.action === 'bind' ? { ownerAid: command.ownerAid } : {}) } },
+                intent: {
+                    operation: isMutation ? 'ec.aid.bind' : 'ec.aid.bind.status', scope: 'agent', source: 'agent-tool',
+                    args: {
+                        self: targetAid,
+                        ...(command.action === 'bind' ? { ownerAid: command.ownerAid } : {}),
+                        ...(command.action === 'accept' || command.action === 'reject'
+                            ? { decision: command.action, operationId: command.operationId } : {}),
+                    },
+                },
                 auditMetadata: { taskId: grant.taskId, messageId: grant.messageId },
             });
             if (!decision.allow)

package/dist/core/command/menu-handler.js

@@ -4691,8 +4691,8 @@ export async function execMenuAction(cmd, action, args, channel, channelId, user
             }
             catch (error) {
                 const failure = ownershipFailure(error);
-                const code = ['INVALID_ARGUMENT', 'INVALID_AID', 'INVALID_OWNER'].includes(failure.code) ? 'INVALID_ARGUMENT'
-                    : ['SUBJECT_REQUIRED', 'SUBJECT_UNAVAILABLE'].includes(failure.code) ? 'NOT_FOUND'
+                const code = ['INVALID_ARGUMENT', 'INVALID_AID', 'INVALID_OWNER', 'INVALID_OPERATION'].includes(failure.code) ? 'INVALID_ARGUMENT'
+                    : ['SUBJECT_REQUIRED', 'SUBJECT_UNAVAILABLE', 'REQUEST_NOT_FOUND', 'not_found'].includes(failure.code) ? 'NOT_FOUND'
                         : ['OWNER_ALREADY_BOUND', 'BIND_CONFLICT', 'BIND_UNCERTAIN', 'CONSENSUS_REQUIRED', 'CLIENT_REPLACED', 'conflict', 'owner_locked'].includes(failure.code)
                             ? 'CONFLICT' : 'INTERNAL_ERROR';
                 rawExecution = { error: failure.error, code, data: failure };