@ailuntz/minilink 0.9.10 → 0.9.12

package/README.md

@@ -26,7 +26,9 @@ minilink on
 
 `npm install` 只安装命令；`minilink on` 才接入 Desktop。更新包后再次运行 `minilink on`。
 
-MiniLink 始终调用 Desktop 自带的 Codex，不调用先前单独安装的 `codex` 命令。配置和会话仍使用官方的 `CODEX_HOME`（默认 `~/.codex`）；MiniLink 自己的启动文件放在 `~/.local/share/minilink`。
+本机 Desktop 集成调用 Desktop 自带的 Codex；SSH 远程入口调用远程主机的独立 Codex。配置和会话仍使用官方的 `CODEX_HOME`（默认 `~/.codex`）；MiniLink 自己的启动文件放在 `~/.local/share/minilink`。
+
+从 MacBook 的 Desktop 通过 SSH 使用 Mac mini 会话时，也要在 **Mac mini** 上安装并运行 `minilink on`。远程入口使用 Mac mini 的独立 Codex，并把模型列表和选择接入 MiniLink。`on` 会在远程登录 shell 中设置仅供 Codex SSH 启动器使用的 `CODEX_INSTALL_DIR`；`off` 会撤销这段设置。重新连接远程主机后生效。
 
 ## 命令
 

package/bin/minilink.mjs

@@ -4,9 +4,10 @@ import { fileURLToPath } from 'node:url';
 import { VERSION, readConfig, configPath, codexHome, atomicJSON, discoverProfiles, resolveRealCodex, childEnvironment } from '../src/config.mjs';
 import { startUpdate, updateStatus } from '../src/update.mjs';
 import { runProxy } from '../src/proxy.mjs';
+import { runRemoteProxy } from '../src/remote.mjs';
 import { pickerEndpoints } from '../src/picker.mjs';
 import { selectModel, text, language } from '../src/terminal.mjs';
-import { installation, environmentStatus, syncLaunchEnvironment, ensureInstalled } from '../src/install.mjs';
+import { installation, environmentStatus, syncLaunchEnvironment, syncRemoteEnvironment, ensureInstalled } from '../src/install.mjs';
 
 const self = fileURLToPath(import.meta.url), args = process.argv.slice(2);
 const commands = ['on', 'link', 'off', 'doctor'];
@@ -22,8 +23,14 @@ async function main() {
     if (command === 'on') { discoverProfiles(); ensureInstalled(); }
     atomicJSON(configPath(), { version: 1, enabled: command === 'on' });
     syncLaunchEnvironment({ enabled: command === 'on' });
+    syncRemoteEnvironment({ enabled: command === 'on' });
     return output(text(command));
   }
+  if (command === 'remote-proxy') {
+    if (args.length !== 1) throw new Error('remote-proxy 不接受额外参数。');
+    process.exitCode = await runRemoteProxy();
+    return;
+  }
   if (command === 'link') {
     if (!readConfig().enabled) throw new Error(text('disabled'));
     return output(await selectModel(pickerEndpoints(codexHome())));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ailuntz/minilink",
-  "version": "0.9.10",
+  "version": "0.9.12",
   "description": "Use your Codex profiles in the Desktop model menu.",
   "type": "module",
   "license": "MIT AND Apache-2.0",

package/src/history.mjs

@@ -0,0 +1,102 @@
+import { existsSync, lstatSync, realpathSync, readFileSync, writeFileSync, renameSync, unlinkSync, mkdirSync, copyFileSync, chmodSync, constants } from 'node:fs';
+import { basename, join, sep } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { DatabaseSync } from 'node:sqlite';
+import { codexHome } from './config.mjs';
+
+const defaultBackups = home => join(home, 'minilink-history-backups');
+
+function atomicBytes(path, data, mode) {
+  const temporary = `${path}.${randomUUID()}.tmp`;
+  try { writeFileSync(temporary, data, { mode, flag: 'wx' }); renameSync(temporary, path); }
+  finally { if (existsSync(temporary)) unlinkSync(temporary); }
+}
+
+function checkedPath(path, home, threadId) {
+  if (!existsSync(path)) return false;
+  if (!lstatSync(path).isFile()) throw new Error('任务历史不是普通文件，无法安全切换提供商。');
+  const actual = realpathSync(path), root = realpathSync(home);
+  if (![join(root, 'sessions') + sep, join(root, 'archived_sessions') + sep].some(prefix => actual.startsWith(prefix))) throw new Error('任务历史不在 CODEX_HOME 中，无法安全切换提供商。');
+  if (!basename(actual).endsWith(`${threadId}.jsonl`)) throw new Error('任务历史与任务 ID 不匹配，无法安全切换提供商。');
+  return true;
+}
+
+// Native Codex replays provider reasoning items from its JSONL journal. Some
+// Responses-compatible providers persist reasoning_text and opaque encrypted
+// content that another provider rejects. Normalize only those items, keeping
+// every line's byte length so the native journal offsets remain valid.
+export function repairThreadHistory(path, { threadId, home = codexHome(), backupDir = defaultBackups(home) } = {}) {
+  if (!existsSync(path)) return null;
+  if (!/^[0-9a-f-]{36}$/.test(threadId || '')) throw new Error('任务 ID 无效，无法备份历史。');
+  if (!checkedPath(path, home, threadId)) return null;
+  const before = readFileSync(path), after = Buffer.from(before), patches = [];
+  let start = 0;
+  while (start < before.length) {
+    const newline = before.indexOf(10, start);
+    const end = newline < 0 ? before.length : newline;
+    const original = before.subarray(start, end);
+    if (original.includes(Buffer.from('"type":"reasoning"'))) {
+      let record;
+      try { record = JSON.parse(original.toString('utf8')); }
+      catch { throw new Error('任务历史包含无法解析的记录，未修改原文件。'); }
+      if (record.type === 'response_item' && record.payload?.type === 'reasoning' && Array.isArray(record.payload.content) && record.payload.content.length) {
+        record.payload.content = [];
+        delete record.payload.encrypted_content;
+        const compact = Buffer.from(JSON.stringify(record));
+        if (compact.length > original.length) throw new Error('任务历史记录无法等长修复，未修改原文件。');
+        const replacement = Buffer.alloc(original.length, 32);
+        compact.copy(replacement);
+        replacement.copy(after, start);
+        patches.push({ start, original: Buffer.from(original), replacement });
+      }
+    }
+    start = end + 1;
+  }
+  const databasePath = join(home, 'thread_history_1.sqlite');
+  const database = existsSync(databasePath) ? new DatabaseSync(databasePath) : null;
+  let rows = [];
+  try {
+    if (database) rows = database.prepare("SELECT rowid, item_json FROM thread_items WHERE thread_id = ? AND item_type = 'reasoning'").all(threadId).flatMap(row => {
+      const item = JSON.parse(row.item_json);
+      if (!Array.isArray(item.content) || !item.content.length) return [];
+      item.content = [];
+      delete item.encrypted_content;
+      return [{ rowid: row.rowid, original: row.item_json, replacement: JSON.stringify(item) }];
+    });
+    if (!patches.length && !rows.length) return null;
+  mkdirSync(backupDir, { recursive: true, mode: 0o700 });
+  const stem = `${threadId}-${randomUUID()}`;
+  const backup = join(backupDir, `${stem}.jsonl`);
+  const databaseBackup = join(backupDir, `${stem}.sqlite-reasoning.json`);
+  copyFileSync(path, backup, constants.COPYFILE_EXCL);
+  chmodSync(backup, 0o600);
+  writeFileSync(databaseBackup, JSON.stringify({ databasePath, rows: rows.map(({ rowid, original }) => ({ rowid, original })) }), { mode: 0o600, flag: 'wx' });
+  const mode = lstatSync(path).mode & 0o777;
+  const updateRows = values => {
+    if (!existsSync(databasePath) || !values.length) return;
+    const connection = new DatabaseSync(databasePath);
+    connection.exec('BEGIN IMMEDIATE');
+    try {
+      const update = connection.prepare('UPDATE thread_items SET item_json = ? WHERE rowid = ?');
+      for (const row of values) update.run(row.replacement ?? row.original, row.rowid);
+      connection.exec('COMMIT');
+    } catch (error) { connection.exec('ROLLBACK'); throw error; }
+    finally { connection.close(); }
+  };
+  try { updateRows(rows); atomicBytes(path, after, mode); }
+  catch (error) { updateRows(rows.map(row => ({ rowid: row.rowid, original: row.original }))); throw error; }
+  return {
+    backup, databaseBackup,
+    count: Math.max(patches.length, rows.length),
+    restore() {
+      const current = readFileSync(path), restored = Buffer.from(current);
+      for (const patch of patches) {
+        if (!current.subarray(patch.start, patch.start + patch.replacement.length).equals(patch.replacement)) throw new Error('任务历史已被其他进程修改，请使用备份恢复。');
+        patch.original.copy(restored, patch.start);
+      }
+      updateRows(rows.map(row => ({ rowid: row.rowid, original: row.original })));
+      atomicBytes(path, restored, mode);
+    }
+  };
+  } finally { database?.close(); }
+}

package/src/install.mjs

@@ -14,6 +14,8 @@ export const xml = value => value.replaceAll('&', '&amp;').replaceAll('<', '&lt;
 const launchctl = (args, required = true) => { try { return execFileSync('/bin/launchctl', args, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }).trim(); } catch { if (required) throw new Error(`launchctl ${args[0]} 失败。`); return null; } };
 const defaultPlist = () => join(homedir(), 'Library/LaunchAgents', `${label}.plist`);
 const sourceRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const remoteStart = '# >>> minilink remote';
+const remoteEnd = '# <<< minilink remote';
 export function installation(root = installRoot()) {
   try { return JSON.parse(readFileSync(join(root, 'installation.json'), 'utf8')); } catch (e) { if (e.code === 'ENOENT') return null; throw new Error('安装状态损坏，请检查 installation.json。'); }
 }
@@ -51,6 +53,19 @@ export function syncLaunchEnvironment({ state = installation(), run = launchctl,
   }
 }
 
+// The Desktop SSH launcher places CODEX_INSTALL_DIR first in PATH. It starts
+// an interactive login shell with CODEX_REMOTE_PAYLOAD set before doing so.
+// Keep the change scoped to that launcher and preserve the user's shell file.
+export function syncRemoteEnvironment({ state = installation(), enabled, rc = join(homedir(), '.zshrc') } = {}) {
+  if (process.platform !== 'darwin' || !state?.remoteDir) return;
+  const existing = existsSync(rc) ? readFileSync(rc, 'utf8') : '';
+  const pattern = /(?:\n|^)# >>> minilink remote\n[\s\S]*?# <<< minilink remote\n?/g;
+  const clean = existing.replace(pattern, '\n').replace(/\n+$/, '');
+  const block = `${remoteStart}\nif [ -n "\${CODEX_REMOTE_PAYLOAD:-}" ] && [ -z "\${CODEX_INSTALL_DIR:-}" ]; then\n  export CODEX_INSTALL_DIR=${shellQuote(state.remoteDir)}\nfi\n${remoteEnd}`;
+  const updated = (clean ? clean + '\n' : '') + (enabled ? block + '\n' : '');
+  if (updated !== existing) atomicFile(rc, updated, existsSync(rc) ? statSync(rc).mode & 0o777 : 0o644);
+}
+
 function atomicFile(path, text, mode) {
   const temporary = `${path}.${process.pid}.tmp`;
   try { writeFileSync(temporary, text, { mode }); renameSync(temporary, path); }
@@ -130,6 +145,8 @@ function installWindows({ root = installRoot(), source = sourceRoot, home = code
 export function install({ root = installRoot(), plist = defaultPlist(), source = sourceRoot, home = codexHome(), config = configPath(), node = process.execPath, npm = process.env.npm_execpath, prefix = process.env.npm_config_prefix, run = launchctl, legacy = root === installRoot() ? legacyInstallation() : null } = {}) {
   if (process.platform !== 'darwin') throw new Error('Desktop 接入目前仅支持 macOS。');
   const previous = installation(root), wrapper = join(root, 'minilink');
+  const remoteDir = join(root, 'remote/bin'), remoteWrapper = join(remoteDir, 'codex');
+  const remoteCodex = join(home, 'packages/standalone/current/bin/codex');
   const packageManager = npm && prefix ? { npm, prefix } : previous?.npm && previous?.prefix ? { npm: previous.npm, prefix: previous.prefix } : npmDetails();
   if (existsSync(plist) && !previous) throw new Error('同名 LaunchAgent 已存在且不属于本次安装。');
   const env = run(['getenv', 'CODEX_CLI_PATH'], false) || null;
@@ -138,7 +155,7 @@ export function install({ root = installRoot(), plist = defaultPlist(), source =
   const runtime = mkdtempSync(join(root, 'releases', 'runtime-'));
   const activate = join(root, 'activate.sh'), stateFile = join(root, 'installation.json');
   const migrationFiles = legacy ? [legacy.state.wrapper, legacy.stateFile, legacy.plist, legacy.activate, config, `${config}.selection.json`] : [];
-  const snapshots = [...new Set([wrapper, activate, plist, stateFile, ...migrationFiles])].map(path => ({ path, data: existsSync(path) ? readFileSync(path) : null }));
+  const snapshots = [...new Set([wrapper, remoteWrapper, activate, plist, stateFile, ...migrationFiles])].map(path => ({ path, data: existsSync(path) ? readFileSync(path) : null }));
   let migrationLocked = false, retired = false, touched = false;
   try {
     if (legacy) {
@@ -161,10 +178,12 @@ export function install({ root = installRoot(), plist = defaultPlist(), source =
     }
     if (JSON.parse(readFileSync(join(dependency, 'package.json'), 'utf8')).name !== 'smol-toml') throw new Error('smol-toml 依赖路径无效。');
     cpSync(dependency, join(runtime, 'node_modules/smol-toml'), { recursive: true });
-    const state = { version: 2, packageVersion: VERSION, source, runtime, wrapper, node, npm: packageManager.npm || previous?.npm, prefix: packageManager.prefix || previous?.prefix, codexHome: home, configPath: config, previousEnv: previous?.previousEnv || legacy?.state.previousEnv || null, installedAt: new Date().toISOString() };
+    const state = { version: 3, packageVersion: VERSION, source, runtime, wrapper, remoteDir, node, npm: packageManager.npm || previous?.npm, prefix: packageManager.prefix || previous?.prefix, codexHome: home, configPath: config, previousEnv: previous?.previousEnv || legacy?.state.previousEnv || null, installedAt: new Date().toISOString() };
     // A Desktop process can retain this launcher after npm removes the state.
     const fallback = `if [ ! -f ${shellQuote(stateFile)} ]; then\n  exec "\${CODEX_DESKTOP_APP:-/Applications/ChatGPT.app}/${bundledCodexRelativePath}" "$@"\nfi`;
     atomicFile(wrapper, `#!/bin/sh\n${fallback}\nexport CODEX_HOME=${shellQuote(home)}\nexport MINILINK_CONFIG=${shellQuote(config)}\nexec ${shellQuote(node)} ${shellQuote(join(runtime, 'bin/minilink.mjs'))} "$@"\n`, 0o755);
+    mkdirSync(remoteDir, { recursive: true, mode: 0o700 });
+    atomicFile(remoteWrapper, `#!/bin/sh\nif [ "$1" = app-server ] && [ "$2" = proxy ] && [ "$#" -eq 2 ] && [ -f ${shellQuote(join(runtime, 'bin/minilink.mjs'))} ]; then\n  export CODEX_HOME=${shellQuote(home)}\n  export MINILINK_CONFIG=${shellQuote(config)}\n  export MINILINK_REMOTE_CODEX=${shellQuote(remoteCodex)}\n  exec ${shellQuote(node)} ${shellQuote(join(runtime, 'bin/minilink.mjs'))} remote-proxy\nfi\nexec ${shellQuote(remoteCodex)} "$@"\n`, 0o755);
     atomicFile(activate, `#!/bin/sh\nexec ${shellQuote(node)} ${shellQuote(join(runtime, 'src/lifecycle.mjs'))}\n`, 0o700);
     mkdirSync(dirname(plist), { recursive: true });
     atomicFile(plist, `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0"><dict><key>Label</key><string>${label}</string><key>ProgramArguments</key><array><string>/bin/sh</string><string>${xml(activate)}</string></array><key>RunAtLoad</key><true/><key>StartInterval</key><integer>30</integer><key>LimitLoadToSessionType</key><string>Aqua</string></dict></plist>\n`, 0o600);
@@ -183,7 +202,7 @@ export function install({ root = installRoot(), plist = defaultPlist(), source =
     return state;
   } catch (error) {
     if (!touched) { rmSync(runtime, { recursive: true, force: true }); throw error; }
-    for (const { path, data } of snapshots) { if (data === null) rmSync(path, { force: true }); else atomicFile(path, data, [wrapper, legacy?.state.wrapper].includes(path) ? 0o755 : [activate, legacy?.activate].includes(path) ? 0o700 : 0o600); }
+    for (const { path, data } of snapshots) { if (data === null) rmSync(path, { force: true }); else atomicFile(path, data, [wrapper, remoteWrapper, legacy?.state.wrapper].includes(path) ? 0o755 : [activate, legacy?.activate].includes(path) ? 0o700 : 0o600); }
     run(['bootout', `gui/${process.getuid()}/${label}`], false);
     if (previous) run(['bootstrap', `gui/${process.getuid()}`, plist], false);
     if (retired) run(['bootstrap', `gui/${process.getuid()}`, legacy.plist], false);

package/src/provider-switch.mjs

@@ -2,6 +2,7 @@ import { isDeepStrictEqual } from 'node:util';
 import { randomUUID } from 'node:crypto';
 import { decodeAlias } from './model-menu.mjs';
 import { isRoutedProvider, findRoute, isChatProvider } from './config.mjs';
+import { repairThreadHistory } from './history.mjs';
 
 // Private requests use the same initialized app-server connection. Their replies
 // and temporary archive lifecycle events must not appear as Desktop requests.
@@ -64,7 +65,12 @@ export class ProviderSwitch {
         change = { effort: effort.reasoningEffort }; restore = { effort: loaded.reasoningEffort };
       } else if (model?.serviceTiers?.length) {
         change = { serviceTier: model.serviceTiers[0].id }; restore = { serviceTier: null };
-      } else throw new Error('原生接口未提供可安全读取的完整设置，请先在原菜单调整一次推理强度再试。');
+      } else {
+        // A one-effort catalog (for example Doubao Lite) has no alternate
+        // reasoning level. A temporary service tier setting still elicits the
+        // complete native settings notification without running a model turn.
+        change = { serviceTier: 'fast' }; restore = { serviceTier: null };
+      }
     }
     let waiter;
     const notification = new Promise((resolve, reject) => {
@@ -154,7 +160,7 @@ export class ProviderSwitch {
   }
   async switchThread(thread, provider, model, requested = {}) {
     const id = thread.id;
-    let snapshot, loaded, archived = false, closed = false, targetLoaded = false;
+    let snapshot, loaded, archived = false, closed = false, targetLoaded = false, historyRepair;
     this.hidden.add(id);
     try {
       loaded = await this.rpc('thread/resume', { threadId: id, excludeTurns: true });
@@ -171,6 +177,7 @@ export class ProviderSwitch {
       // immediately restores the same thread before resuming with the new provider.
       await this.rpc('thread/archive', { threadId: id }); archived = true; closed = true;
       await this.rpc('thread/unarchive', { threadId: id }); archived = false;
+      historyRepair = repairThreadHistory(thread.path, { threadId: id });
       const resumed = await this.rpc('thread/resume', this.resumeParams(id, desired, loaded, provider, model));
       targetLoaded = true;
       if (resumed.thread.id !== id || resumed.modelProvider !== provider) throw new Error('恢复后的提供商不匹配。');
@@ -183,6 +190,7 @@ export class ProviderSwitch {
         try {
           if (targetLoaded) { await this.rpc('thread/archive', { threadId: id }); archived = true; }
           if (archived) { await this.rpc('thread/unarchive', { threadId: id }); archived = false; }
+          historyRepair?.restore();
           const original = await this.rpc('thread/resume', this.resumeParams(id, snapshot, loaded, snapshot.modelProvider, snapshot.model));
           this.settings.delete(id);
           await this.snapshot(id, original);

package/src/proxy.mjs

@@ -3,7 +3,7 @@ import { runtimeDirectory } from './runtime.mjs';
 import { randomUUID } from 'node:crypto';
 import { spawn } from 'node:child_process';
 import { join } from 'node:path';
-import { rmSync, existsSync, readFileSync } from 'node:fs';
+import { rmSync, existsSync, readFileSync, realpathSync, accessSync, constants } from 'node:fs';
 import { JsonLineRouter } from './protocol.mjs';
 import { ModelMenu } from './model-menu.mjs';
 import { ProviderSwitch } from './provider-switch.mjs';
@@ -36,7 +36,9 @@ export async function runProxy(args, selfPath) {
   const path = configPath();
   const enabled = readConfig(path).enabled;
   const hadConfig = existsSync(path);
-  const executable = resolveRealCodex(selfPath);
+  const executable = process.env.MINILINK_REMOTE_BRIDGE === '1' && process.env.MINILINK_REMOTE_CODEX
+    ? realpathSync(process.env.MINILINK_REMOTE_CODEX) : resolveRealCodex(selfPath);
+  accessSync(executable, constants.X_OK);
   const routed = enabled && isStdioServer(args);
   const routes = routed ? discoverProfiles() : [];
   const env = enabled ? childEnvironment(routes) : { ...process.env, MINILINK_ACTIVE: String((Number.parseInt(setting('ACTIVE'), 10) || 0) + 1) };

package/src/remote.mjs

@@ -0,0 +1,125 @@
+import { createHash } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { TextDecoder } from 'node:util';
+import { readConfig } from './config.mjs';
+
+const MAX_MESSAGE = 64 * 1024 * 1024;
+const MAX_HEADER = 16 * 1024;
+const GUID = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11';
+
+function frame(opcode, payload = Buffer.alloc(0)) {
+  const size = payload.length;
+  const header = size < 126 ? Buffer.from([0x80 | opcode, size])
+    : size < 65536 ? Buffer.from([0x80 | opcode, 126, size >> 8, size & 255])
+      : Buffer.from([0x80 | opcode, 127, 0, 0, 0, 0, (size / 0x1000000) & 255, (size >>> 16) & 255, (size >>> 8) & 255, size & 255]);
+  return Buffer.concat([header, payload]);
+}
+
+// The Codex SSH launcher prints its own eight-byte marker, then runs
+// `codex app-server proxy`. That proxy carries a WebSocket handshake and
+// frames over stdio. Bridge those frames to MiniLink's existing JSONL router.
+export class RemoteBridge {
+  constructor({ input, output, backend }) {
+    Object.assign(this, { input, output, backend });
+    this.buffer = Buffer.alloc(0);
+    this.lines = Buffer.alloc(0);
+    this.handshaken = false;
+    this.fragment = null;
+    this.fragmentSize = 0;
+    this.closed = false;
+    input.on('data', chunk => this.receive(chunk));
+    input.on('end', () => backend.stdin.end());
+    input.on('error', () => backend.kill());
+    backend.stdout.on('data', chunk => this.backendOutput(chunk));
+    backend.stdout.on('error', () => backend.kill());
+    backend.stderr.pipe(process.stderr, { end: false });
+    backend.on('close', () => { this.closed = true; output.end(); });
+    backend.on('error', () => { this.close(1011); });
+  }
+  close(code = 1002) {
+    if (this.closed) return;
+    this.closed = true;
+    this.output.write(frame(8, Buffer.from([code >> 8, code & 255])));
+    this.backend.kill();
+    this.output.end();
+  }
+  receive(chunk) {
+    if (this.closed) return;
+    this.buffer = Buffer.concat([this.buffer, chunk]);
+    if (!this.handshaken) {
+      if (this.buffer.length > MAX_HEADER) return this.close();
+      const end = this.buffer.indexOf('\r\n\r\n');
+      if (end < 0) return;
+      const header = this.buffer.subarray(0, end + 4).toString('latin1');
+      const key = /^sec-websocket-key:\s*([^\r\n]+)\s*$/im.exec(header)?.[1]?.trim();
+      if (!/^GET [^\r\n]+ HTTP\/1\.1\r\n/i.test(header) || !/^upgrade:\s*websocket\s*$/im.test(header) || !/^connection:.*\bupgrade\b/im.test(header) || !key || Buffer.from(key, 'base64').length !== 16) return this.close();
+      const accept = createHash('sha1').update(key + GUID).digest('base64');
+      this.output.write(`HTTP/1.1 101 Switching Protocols\r\nconnection: Upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: ${accept}\r\nx-codex-websocket-max-unfragmented-message-bytes: 16777216\r\n\r\n`);
+      this.buffer = this.buffer.subarray(end + 4);
+      this.handshaken = true;
+    }
+    while (this.buffer.length >= 2 && !this.closed) {
+      const first = this.buffer[0], second = this.buffer[1];
+      const opcode = first & 15, fin = Boolean(first & 0x80);
+      if (first & 0x70 || !(second & 0x80)) return this.close();
+      let length = second & 127, offset = 2;
+      if (length === 126) {
+        if (this.buffer.length < 4) return;
+        length = this.buffer.readUInt16BE(2); offset = 4;
+      } else if (length === 127) {
+        if (this.buffer.length < 10) return;
+        length = Number(this.buffer.readBigUInt64BE(2)); offset = 10;
+      }
+      if (!Number.isSafeInteger(length) || length > MAX_MESSAGE || this.buffer.length > MAX_MESSAGE + MAX_HEADER) return this.close(1009);
+      if (this.buffer.length < offset + 4 + length) return;
+      if (opcode >= 8 && (!fin || length > 125)) return this.close();
+      const mask = this.buffer.subarray(offset, offset + 4), payload = Buffer.from(this.buffer.subarray(offset + 4, offset + 4 + length));
+      for (let i = 0; i < payload.length; i++) payload[i] ^= mask[i % 4];
+      this.buffer = this.buffer.subarray(offset + 4 + length);
+      if (opcode === 8) { this.close(1000); return; }
+      if (opcode === 9) { this.output.write(frame(10, payload)); continue; }
+      if (opcode === 10) continue;
+      if (opcode === 1) {
+        if (this.fragment) return this.close();
+        this.fragment = [payload]; this.fragmentSize = payload.length;
+      } else if (opcode === 0 && this.fragment) this.fragment.push(payload);
+      else return this.close();
+      if (opcode === 0) this.fragmentSize += payload.length;
+      if (this.fragmentSize > MAX_MESSAGE) return this.close(1009);
+      if (fin) {
+        const message = Buffer.concat(this.fragment);
+        this.fragment = null; this.fragmentSize = 0;
+        let normalized;
+        try { normalized = JSON.stringify(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(message))); }
+        catch { return this.close(1007); }
+        this.backend.stdin.write(normalized);
+        this.backend.stdin.write('\n');
+      }
+    }
+  }
+  backendOutput(chunk) {
+    this.lines = Buffer.concat([this.lines, chunk]);
+    if (this.lines.length > MAX_MESSAGE) return this.close(1009);
+    let end;
+    while ((end = this.lines.indexOf(10)) >= 0) {
+      const line = this.lines.subarray(0, end);
+      this.lines = this.lines.subarray(end + 1);
+      if (line.length) this.output.write(frame(1, line));
+    }
+  }
+}
+
+export function runRemoteProxy() {
+  if (!readConfig().enabled) {
+    const standalone = process.env.MINILINK_REMOTE_CODEX;
+    if (!standalone) throw new Error('找不到远程 Codex。');
+    const child = spawn(standalone, ['app-server', 'proxy'], { stdio: 'inherit', env: process.env });
+    return new Promise(resolve => { child.on('close', code => resolve(code ?? 1)); child.on('error', () => resolve(1)); });
+  }
+  const self = fileURLToPath(new URL('../bin/minilink.mjs', import.meta.url));
+  const backend = spawn(process.execPath, [self, 'app-server', '--stdio'], { stdio: ['pipe', 'pipe', 'pipe'], env: { ...process.env, MINILINK_REMOTE_BRIDGE: '1' } });
+  new RemoteBridge({ input: process.stdin, output: process.stdout, backend });
+  for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) process.on(signal, () => backend.kill(signal));
+  return new Promise(resolve => backend.on('close', code => resolve(code ?? 1)));
+}