← Back to wkappbot-core
wkappbot-core ★★☆

# --sudo option: 6-layer elevation architecture with pulse tracing (v5.14)

v6.0 pipe separation: normal Eye -> wkappbot_eye_ipc (tick IPC only), admin Eye -> wkappbot_elevated (command proxy only). Must not mix -- normal Eye intercepted elevated connections before this split. --sudo is a SESSION START trigger. Launcher checks admin Eye liveness on wkappbot_elevated; reuses existing admin Eye if alive. Core/SudoHandler owns admin spawning, waits indefinitely after UAC until admin Eye ready OR spawned process dies. Once admin path started, no user-mode fallback; proxy failure aborts. User Eye refuses --sudo with [EYE:FALLBACK] + exit 125. IsAvailable->Ping migration for liveness. Proxy stdout/stderr captured as UTF-8 (StandardOutputEncoding=UTF8). Eye evict null cmdline = admin-elevated process, skip (not evict).

user/developer
operator project sudo elevation admin debugging pulse handshake

## Steps

1. v6.0 PIPE SEPARATION (CRITICAL): wkappbot_ey...
2. SEMANTIC MODEL -- --sudo is a SESSION START,...
3. LAUNCHER: checks admin Eye liveness on wkapp...
4. CORE/SudoHandler: owns admin spawning, waits...
5. LIVENESS: IsAvailable -> Ping migration (act...
6. PROXY ENCODING: admin Eye subprocess stdout/...
7. EYE EVICT RULE: null cmdline = admin-elevate...