@cli-remote/local 0.0.2 → 0.0.4

package/dist/index.cjs

@@ -3214,7 +3214,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open() {
+          ws.once("open", function open2() {
             duplex._final(callback);
           });
           return;
@@ -3235,7 +3235,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open() {
+          ws.once("open", function open2() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -6683,11 +6683,11 @@ var require_dijkstra = __commonJS({
         var predecessors = {};
         var costs = {};
         costs[s] = 0;
-        var open = dijkstra.PriorityQueue.make();
-        open.push(s, 0);
+        var open2 = dijkstra.PriorityQueue.make();
+        open2.push(s, 0);
         var closest, u, v, cost_of_s_to_u, adjacent_nodes, cost_of_e, cost_of_s_to_u_plus_cost_of_e, cost_of_s_to_v, first_visit;
-        while (!open.empty()) {
-          closest = open.pop();
+        while (!open2.empty()) {
+          closest = open2.pop();
           u = closest.value;
           cost_of_s_to_u = closest.cost;
           adjacent_nodes = graph[u] || {};
@@ -6699,7 +6699,7 @@ var require_dijkstra = __commonJS({
               first_visit = typeof costs[v] === "undefined";
               if (first_visit || cost_of_s_to_v > cost_of_s_to_u_plus_cost_of_e) {
                 costs[v] = cost_of_s_to_u_plus_cost_of_e;
-                open.push(v, cost_of_s_to_u_plus_cost_of_e);
+                open2.push(v, cost_of_s_to_u_plus_cost_of_e);
                 predecessors[v] = u;
               }
             }
@@ -9786,10 +9786,10 @@ var require_browser = __commonJS({
           text = canvas;
           canvas = void 0;
         }
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode2.create(text, opts);
-            resolve(renderFunc(data, canvas, opts));
+            resolve2(renderFunc(data, canvas, opts));
           } catch (e) {
             reject(e);
           }
@@ -9870,11 +9870,11 @@ var require_server = __commonJS({
     }
     function render(renderFunc, text, params) {
       if (!params.cb) {
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode2.create(text, params.opts);
             return renderFunc(data, params.opts, function(err, data2) {
-              return err ? reject(err) : resolve(data2);
+              return err ? reject(err) : resolve2(data2);
             });
           } catch (e) {
             reject(e);
@@ -9939,8 +9939,10 @@ var require_lib = __commonJS({
 });
 
 // src/index.ts
-var import_node_fs2 = require("node:fs");
-var import_node_path5 = require("node:path");
+var import_node_fs3 = require("node:fs");
+var import_node_child_process2 = require("node:child_process");
+var import_node_os6 = require("node:os");
+var import_node_path6 = require("node:path");
 var import_node_url = require("node:url");
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/wrapper.mjs
@@ -9956,9 +9958,9 @@ var wrapper_default = import_websocket.default;
 
 // src/client.ts
 var import_node_readline = require("node:readline");
-var import_promises2 = require("node:fs/promises");
-var import_node_os4 = require("node:os");
-var import_node_path4 = require("node:path");
+var import_promises3 = require("node:fs/promises");
+var import_node_os5 = require("node:os");
+var import_node_path5 = require("node:path");
 
 // ../shared/src/codec.ts
 var import_msgpack = __toESM(require_dist(), 1);
@@ -9978,6 +9980,10 @@ var ACCESS_TOKEN_TTL_MS = 60 * 6e4;
 var REFRESH_TOKEN_TTL_MS = 30 * 24 * 60 * 6e4;
 var REFRESH_MARGIN_MS = 5 * 6e4;
 var OUTPUT_BUFFER_SIZE = 500;
+var FILE_CHUNK_SIZE = 64 * 1024;
+var MAX_TRANSFER_BYTES = 500 * 1024 * 1024;
+var UPLOAD_DIR = "uploads";
+var RECONNECT_DELAYS_MS = [1e3, 2e3, 4e3, 8e3, 16e3, 3e4];
 var DEFAULT_CONFIG_DIR = ".cli-remote";
 var CREDENTIALS_FILE = "credentials.json";
 var CONFIG_FILE = "config.json";
@@ -10211,6 +10217,10 @@ var SessionLogger = class {
     if (this.closed) return;
     this.write({ ts: Date.now(), event: "rejected", cmd, reason, dangerous });
   }
+  logForced(cmd) {
+    if (this.closed) return;
+    this.write({ ts: Date.now(), event: "forced", cmd });
+  }
   logExit(code) {
     if (this.closed) return;
     this.write({ ts: Date.now(), event: "exit", code });
@@ -10320,19 +10330,196 @@ function checkCommand(line, whitelist, dangerousPatterns = DANGEROUS_PATTERNS) {
   return { allowed: true };
 }
 
-// src/auth.ts
-var import_node_child_process = require("node:child_process");
-var import_node_crypto = require("node:crypto");
+// src/file-transfer.ts
+var import_node_fs2 = require("node:fs");
 var import_promises = require("node:fs/promises");
 var import_node_os3 = require("node:os");
 var import_node_path3 = require("node:path");
+var FileTransferManager = class _FileTransferManager {
+  constructor(send, log) {
+    this.send = send;
+    this.log = log;
+  }
+  uploads = /* @__PURE__ */ new Map();
+  uploadDir() {
+    return (0, import_node_path3.join)((0, import_node_os3.homedir)(), DEFAULT_CONFIG_DIR, UPLOAD_DIR);
+  }
+  expandPath(p) {
+    const home = process.env.PTY_HOME ?? (0, import_node_os3.homedir)();
+    if (p === "~") return home;
+    if (p.startsWith("~/")) return (0, import_node_path3.join)(home, p.slice(2));
+    return (0, import_node_path3.resolve)(p);
+  }
+  /** Strip any directory components and control chars from a client filename. */
+  static sanitizeFilename(name) {
+    const base = (0, import_node_path3.basename)(name).replace(/[\u0000-\u001f\u007f]/g, "");
+    return base && base !== "." && base !== ".." ? base : "upload.bin";
+  }
+  async handleUploadStart(frame) {
+    const { sessionId, uploadId, filename, size } = frame;
+    if (this.uploads.has(uploadId)) return;
+    if (size > MAX_TRANSFER_BYTES) {
+      this.emit({
+        t: "upload-err",
+        sessionId,
+        uploadId,
+        reason: `\u6587\u4EF6\u8FC7\u5927\uFF08>${Math.floor(MAX_TRANSFER_BYTES / 1024 / 1024)}MB\uFF09`
+      });
+      return;
+    }
+    try {
+      const dir = this.uploadDir();
+      await (0, import_promises.mkdir)(dir, { recursive: true });
+      const target = await this.uniqPath(dir, _FileTransferManager.sanitizeFilename(filename));
+      const stream = (0, import_node_fs2.createWriteStream)(target, { mode: 384 });
+      this.uploads.set(uploadId, {
+        uploadId,
+        sessionId,
+        path: target,
+        size,
+        received: 0,
+        lastSeq: 0,
+        stream
+      });
+      this.emit({ t: "upload-ok", sessionId, uploadId, path: target });
+      this.log(`upload start ${uploadId} \u2192 ${target} (${size}B)`);
+    } catch (e) {
+      this.emit({ t: "upload-err", sessionId, uploadId, reason: e.message });
+    }
+  }
+  async uniqPath(dir, name) {
+    let candidate = (0, import_node_path3.join)(dir, name);
+    let i = 1;
+    while (await exists(candidate)) {
+      const dot = name.lastIndexOf(".");
+      const stem = dot > 0 ? name.slice(0, dot) : name;
+      const ext = dot > 0 ? name.slice(dot) : "";
+      candidate = (0, import_node_path3.join)(dir, `${stem} (${i++})${ext}`);
+    }
+    return candidate;
+  }
+  handleUploadChunk(frame) {
+    const up = this.uploads.get(frame.uploadId);
+    if (!up) return;
+    if (frame.seq <= up.lastSeq) return;
+    up.lastSeq = frame.seq;
+    up.received += frame.data.byteLength;
+    up.stream.write(Buffer.from(frame.data.buffer, frame.data.byteOffset, frame.data.byteLength));
+  }
+  async handleUploadEnd(frame) {
+    const up = this.uploads.get(frame.uploadId);
+    if (!up) return;
+    this.uploads.delete(frame.uploadId);
+    await new Promise((res) => up.stream.end(res));
+    const sizeOk = up.received === up.size;
+    this.log(`upload done ${frame.uploadId}: ${up.received}B \u2192 ${up.path}`);
+    if (!sizeOk) {
+      this.emit({
+        t: "upload-err",
+        sessionId: up.sessionId,
+        uploadId: frame.uploadId,
+        reason: `\u5927\u5C0F\u4E0D\u5339\u914D\uFF08\u58F0\u660E ${up.size}B\uFF0C\u5B9E\u6536 ${up.received}B\uFF09`
+      });
+    }
+  }
+  abortUpload(uploadId) {
+    const up = this.uploads.get(uploadId);
+    if (!up) return;
+    this.uploads.delete(uploadId);
+    up.stream.destroy();
+    this.log(`upload aborted ${uploadId}`);
+  }
+  /** Stream a file back to the web client with mild backpressure via `send`. */
+  async handleDownloadReq(frame, isBusy) {
+    const sessionId = frame.sessionId;
+    const downloadId = "dl_" + Math.random().toString(36).slice(2, 10);
+    let abs;
+    try {
+      abs = this.expandPath(frame.path);
+      const st = await (0, import_promises.stat)(abs);
+      if (!st.isFile()) throw new Error("\u4E0D\u662F\u666E\u901A\u6587\u4EF6");
+      if (st.size > MAX_TRANSFER_BYTES) {
+        throw new Error(`\u6587\u4EF6\u8FC7\u5927\uFF08>${Math.floor(MAX_TRANSFER_BYTES / 1024 / 1024)}MB\uFF09`);
+      }
+      this.emit({
+        t: "download-start",
+        sessionId,
+        downloadId,
+        filename: (0, import_node_path3.basename)(abs),
+        size: st.size
+      });
+      this.log(`download start ${downloadId} \u2190 ${abs} (${st.size}B)`);
+      await this.streamFile(sessionId, downloadId, abs, isBusy);
+      this.emit({ t: "download-end", sessionId, downloadId });
+      this.log(`download done ${downloadId}: ${abs}`);
+    } catch (e) {
+      this.emit({
+        t: "download-err",
+        sessionId,
+        downloadId,
+        reason: e.message
+      });
+    }
+  }
+  async streamFile(sessionId, downloadId, abs, isBusy) {
+    const handle = await (0, import_promises.open)(abs, "r");
+    try {
+      let seq = 0;
+      let pos = 0;
+      for (; ; ) {
+        const buf = Buffer.alloc(FILE_CHUNK_SIZE);
+        const { bytesRead } = await handle.read(buf, 0, FILE_CHUNK_SIZE, pos);
+        if (bytesRead === 0) break;
+        pos += bytesRead;
+        seq++;
+        this.emit({
+          t: "download-chunk",
+          sessionId,
+          downloadId,
+          data: new Uint8Array(buf.buffer, buf.byteOffset, bytesRead),
+          seq
+        });
+        if (isBusy()) {
+          await new Promise((res) => setImmediate(res));
+          let spins = 0;
+          while (isBusy() && spins++ < 2e3) {
+            await new Promise((res) => setTimeout(res, 20));
+          }
+        }
+      }
+    } finally {
+      await handle.close();
+    }
+  }
+  abortAll() {
+    for (const id of [...this.uploads.keys()]) this.abortUpload(id);
+  }
+  emit(frame) {
+    this.send(encodeFrame(frame));
+  }
+};
+async function exists(p) {
+  try {
+    await (0, import_promises.stat)(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/auth.ts
+var import_node_child_process = require("node:child_process");
+var import_node_crypto = require("node:crypto");
+var import_promises2 = require("node:fs/promises");
+var import_node_os4 = require("node:os");
+var import_node_path4 = require("node:path");
 var import_qrcode = __toESM(require_lib(), 1);
 function credentialsPath() {
-  return (0, import_node_path3.join)((0, import_node_os3.homedir)(), DEFAULT_CONFIG_DIR, CREDENTIALS_FILE);
+  return (0, import_node_path4.join)((0, import_node_os4.homedir)(), DEFAULT_CONFIG_DIR, CREDENTIALS_FILE);
 }
 async function loadCredentials() {
   try {
-    const raw = JSON.parse(await (0, import_promises.readFile)(credentialsPath(), "utf-8"));
+    const raw = JSON.parse(await (0, import_promises2.readFile)(credentialsPath(), "utf-8"));
     if (!raw.deviceId || !raw.accessToken || !raw.refreshToken) return null;
     return raw;
   } catch {
@@ -10341,16 +10528,16 @@ async function loadCredentials() {
 }
 async function saveCredentials(creds) {
   const path = credentialsPath();
-  await (0, import_promises.mkdir)((0, import_node_path3.join)(path, ".."), { recursive: true });
-  await (0, import_promises.writeFile)(path, JSON.stringify(creds, null, 2) + "\n", { mode: 384 });
+  await (0, import_promises2.mkdir)((0, import_node_path4.join)(path, ".."), { recursive: true });
+  await (0, import_promises2.writeFile)(path, JSON.stringify(creds, null, 2) + "\n", { mode: 384 });
   try {
-    await (0, import_promises.chmod)(path, 384);
+    await (0, import_promises2.chmod)(path, 384);
   } catch {
   }
 }
 async function clearCredentials() {
   try {
-    await (0, import_promises.writeFile)(credentialsPath(), "");
+    await (0, import_promises2.writeFile)(credentialsPath(), "");
   } catch {
   }
 }
@@ -10382,17 +10569,17 @@ function openBrowser(url) {
   }
 }
 async function mergeLocalConfig(patch) {
-  const dir = (0, import_node_path3.join)((0, import_node_os3.homedir)(), DEFAULT_CONFIG_DIR);
-  const path = (0, import_node_path3.join)(dir, CONFIG_FILE);
+  const dir = (0, import_node_path4.join)((0, import_node_os4.homedir)(), DEFAULT_CONFIG_DIR);
+  const path = (0, import_node_path4.join)(dir, CONFIG_FILE);
   let existing = {};
   try {
-    existing = JSON.parse(await (0, import_promises.readFile)(path, "utf-8"));
+    existing = JSON.parse(await (0, import_promises2.readFile)(path, "utf-8"));
   } catch {
   }
-  await (0, import_promises.mkdir)(dir, { recursive: true });
-  await (0, import_promises.writeFile)(path, JSON.stringify({ ...existing, ...patch }, null, 2) + "\n");
+  await (0, import_promises2.mkdir)(dir, { recursive: true });
+  await (0, import_promises2.writeFile)(path, JSON.stringify({ ...existing, ...patch }, null, 2) + "\n");
 }
-var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var sleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
 var AuthError = class extends Error {
 };
 async function deviceFlowAuthorize(baseUrl, registrationKey, deviceId) {
@@ -10404,7 +10591,7 @@ async function deviceFlowAuthorize(baseUrl, registrationKey, deviceId) {
   const res = await postJson(`${baseUrl}/oauth/device_authorization`, {
     registrationKey,
     device_id: deviceId,
-    device_name: (0, import_node_os3.hostname)(),
+    device_name: (0, import_node_os4.hostname)(),
     platform: process.platform
   });
   if (res.status !== 200) {
@@ -10507,9 +10694,9 @@ async function ensureCredentials(baseUrl, registrationKey) {
 
 // src/client.ts
 async function loadConfig() {
-  const path = (0, import_node_path4.join)((0, import_node_os4.homedir)(), DEFAULT_CONFIG_DIR, CONFIG_FILE);
+  const path = (0, import_node_path5.join)((0, import_node_os5.homedir)(), DEFAULT_CONFIG_DIR, CONFIG_FILE);
   try {
-    return JSON.parse(await (0, import_promises2.readFile)(path, "utf-8"));
+    return JSON.parse(await (0, import_promises3.readFile)(path, "utf-8"));
   } catch {
     return {};
   }
@@ -10526,7 +10713,7 @@ function isTTY() {
 async function readInput(prompt) {
   const rl = (0, import_node_readline.createInterface)({ input: process.stdin, output: process.stdout });
   try {
-    return await new Promise((resolve) => rl.question(prompt, (answer) => resolve(answer)));
+    return await new Promise((resolve2) => rl.question(prompt, (answer) => resolve2(answer)));
   } finally {
     rl.close();
   }
@@ -10596,27 +10783,25 @@ async function startLocal(opts = {}) {
   const pty = new PtyManager();
   const loggers = /* @__PURE__ */ new Map();
   const lineBuffers = /* @__PURE__ */ new Map();
+  const transfers = new FileTransferManager(
+    (data) => safeSend(data),
+    (msg) => console.log(`[local] ${msg}`)
+  );
   let credentials = await ensureCredentials(baseUrl, registrationKey);
   console.log(`[local] connecting to ${url}`);
   console.log(`[local] deviceId=${credentials.deviceId}`);
   console.log(`[local] whitelist: ${whitelist.size} commands`);
-  const ws = new wrapper_default(url);
+  let ws = null;
   let heartbeatTimer = null;
-  function cleanup(code = 0) {
-    pty.killAll();
-    for (const [, logger] of loggers) logger.logExit(-1);
-    loggers.clear();
-    lineBuffers.clear();
+  let reconnectTimer = null;
+  let reconnectAttempts = 0;
+  let userExitCode = null;
+  function stopHeartbeat() {
     if (heartbeatTimer) clearInterval(heartbeatTimer);
-    try {
-      ws.close();
-    } catch {
-    }
-    process.exit(code);
+    heartbeatTimer = null;
   }
-  ws.on("open", () => {
-    console.log("[local] connected");
-    ws.send(
+  function sendAuth() {
+    ws?.send(
       encodeFrame({
         t: "auth",
         role: "bridge",
@@ -10624,13 +10809,74 @@ async function startLocal(opts = {}) {
         token: credentials.accessToken
       })
     );
-    heartbeatTimer = setInterval(() => {
-      if (ws.readyState === wrapper_default.OPEN) {
-        ws.send(encodeFrame({ t: "ping" }));
-      }
-    }, HEARTBEAT_INTERVAL_MS);
-  });
-  ws.on("message", (raw) => {
+  }
+  function connect() {
+    if (userExitCode !== null) return;
+    const sock = new wrapper_default(url);
+    ws = sock;
+    sock.on("open", () => {
+      console.log("[local] connected");
+      sendAuth();
+      stopHeartbeat();
+      heartbeatTimer = setInterval(() => {
+        if (sock.readyState === wrapper_default.OPEN) {
+          sock.send(encodeFrame({ t: "ping" }));
+        }
+      }, HEARTBEAT_INTERVAL_MS);
+    });
+    sock.on("message", (raw) => handleFrame(sock, raw));
+    sock.on("close", () => {
+      stopHeartbeat();
+      if (ws === sock) ws = null;
+      if (userExitCode !== null) {
+        process.exit(userExitCode);
+      }
+      console.log("[local] disconnected; PTY sessions kept alive, reconnecting\u2026");
+      scheduleReconnect();
+    });
+    sock.on("error", (err) => {
+      console.error("[local] ws error:", err.message);
+    });
+  }
+  async function scheduleReconnect() {
+    if (reconnectTimer || userExitCode !== null) return;
+    const idx = Math.min(reconnectAttempts, RECONNECT_DELAYS_MS.length - 1);
+    const delay = RECONNECT_DELAYS_MS[idx];
+    reconnectAttempts++;
+    console.log(`[local] reconnecting in ${Math.round(delay / 1e3)}s (attempt ${reconnectAttempts})`);
+    reconnectTimer = setTimeout(() => {
+      reconnectTimer = null;
+      ensureFreshAccessToken(baseUrl, credentials).then((creds) => {
+        credentials = creds;
+        connect();
+      }).catch(async (e) => {
+        await clearCredentials();
+        console.error(`[local] ${e.message}`);
+        console.error("[local] \u51ED\u8BC1\u5DF2\u5931\u6548\u5E76\u6E05\u9664\uFF1B\u8BF7\u91CD\u65B0\u8FD0\u884C cli-local \u5B8C\u6210\u6388\u6743");
+        exitProcess(1);
+      });
+    }, delay);
+  }
+  function exitProcess(code) {
+    userExitCode = code;
+    if (reconnectTimer) clearTimeout(reconnectTimer);
+    reconnectTimer = null;
+    transfers.abortAll();
+    pty.killAll();
+    for (const [, logger] of loggers) logger.logExit(-1);
+    loggers.clear();
+    lineBuffers.clear();
+    stopHeartbeat();
+    try {
+      ws?.close();
+    } catch {
+    }
+    process.exit(code);
+  }
+  function cleanup(code = 0) {
+    exitProcess(code);
+  }
+  function handleFrame(sock, raw) {
     let frame;
     try {
       frame = decodeFrame(toUint8(raw));
@@ -10639,6 +10885,10 @@ async function startLocal(opts = {}) {
     }
     switch (frame.t) {
       case "auth-ok":
+        if (reconnectAttempts > 0) {
+          console.log(`[local] reconnected after ${reconnectAttempts} attempt(s); ${pty.list().length} PTY session(s) alive`);
+        }
+        reconnectAttempts = 0;
         console.log(`[local] auth ok, deviceId=${frame.channelId}`);
         break;
       case "auth-err":
@@ -10661,23 +10911,31 @@ async function startLocal(opts = {}) {
       case "replay-req":
         handleReplay(frame);
         break;
+      case "upload-start":
+        void transfers.handleUploadStart(frame);
+        break;
+      case "upload-chunk":
+        transfers.handleUploadChunk(frame);
+        break;
+      case "upload-end":
+        void transfers.handleUploadEnd(frame);
+        break;
+      case "download-req":
+        void transfers.handleDownloadReq(
+          frame,
+          () => ws ? ws.bufferedAmount > 4 * 1024 * 1024 : false
+        );
+        break;
       default:
         console.log("[local] unhandled frame:", frame.t);
     }
-  });
+  }
   async function handleAuthErr(reason) {
     if (reason === "access token expired") {
       try {
         credentials = await ensureFreshAccessToken(baseUrl, credentials);
         console.log("[local] token refreshed, retrying auth");
-        ws.send(
-          encodeFrame({
-            t: "auth",
-            role: "bridge",
-            deviceId: credentials.deviceId,
-            token: credentials.accessToken
-          })
-        );
+        sendAuth();
         return;
       } catch (e) {
         console.error(`[local] ${e.message}`);
@@ -10686,7 +10944,7 @@ async function startLocal(opts = {}) {
     await clearCredentials();
     console.error("[local] auth failed:", reason);
     console.error("[local] \u51ED\u8BC1\u5DF2\u6E05\u9664\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C cli-local \u5B8C\u6210\u6388\u6743");
-    cleanup(1);
+    exitProcess(1);
   }
   function handleSpawn(frame) {
     const sessionId = frame.sessionId;
@@ -10742,6 +11000,15 @@ async function startLocal(opts = {}) {
     const logger = loggers.get(sessionId);
     const session = pty.get(sessionId);
     if (!session || !logger) return;
+    if (frame.force) {
+      const line = new TextDecoder().decode(frame.data);
+      ptyWriteChar(sessionId, line + "\r");
+      logger.logInput(new TextEncoder().encode(line + "\r"));
+      logger.logForced(line);
+      lineBuffers.set(sessionId, "");
+      console.log(`[local] forced execution in ${sessionId}: ${line}`);
+      return;
+    }
     if (session.cmd === "shell" && !session.inAltScreen) {
       handleShellInput(sessionId, frame.data, logger);
     } else {
@@ -10816,23 +11083,13 @@ async function startLocal(opts = {}) {
     );
   }
   function safeSend(data) {
-    if (ws.readyState === wrapper_default.OPEN) {
+    if (ws && ws.readyState === wrapper_default.OPEN) {
       ws.send(data);
     }
   }
-  ws.on("close", () => {
-    if (heartbeatTimer) clearInterval(heartbeatTimer);
-    pty.killAll();
-    for (const [, logger] of loggers) logger.logExit(-1);
-    loggers.clear();
-    lineBuffers.clear();
-    console.log("[local] disconnected");
-  });
-  ws.on("error", (err) => {
-    console.error("[local] error:", err.message);
-  });
   process.on("SIGINT", () => cleanup(0));
   process.on("SIGTERM", () => cleanup(0));
+  connect();
 }
 function toUint8(raw) {
   if (raw instanceof Buffer) return new Uint8Array(raw.buffer, raw.byteOffset, raw.byteLength);
@@ -10860,15 +11117,15 @@ function resolveHere() {
     if (DEBUG) console.error("[debug] cannot resolve script path");
     return;
   }
-  const hereDir = (0, import_node_path5.dirname)(here);
+  const hereDir = (0, import_node_path6.dirname)(here);
   const candidates = [
-    (0, import_node_path5.join)(hereDir, "..", "node_modules", "node-pty", "prebuilds"),
-    (0, import_node_path5.join)(hereDir, "..", "..", "node-pty", "prebuilds"),
-    (0, import_node_path5.join)(hereDir, "..", "..", "..", "node_modules", "node-pty", "prebuilds")
+    (0, import_node_path6.join)(hereDir, "..", "node_modules", "node-pty", "prebuilds"),
+    (0, import_node_path6.join)(hereDir, "..", "..", "node-pty", "prebuilds"),
+    (0, import_node_path6.join)(hereDir, "..", "..", "..", "node_modules", "node-pty", "prebuilds")
   ];
   let prebuildsDir = null;
   for (const c of candidates) {
-    if ((0, import_node_fs2.existsSync)(c)) {
+    if ((0, import_node_fs3.existsSync)(c)) {
       prebuildsDir = c;
       break;
     }
@@ -10878,11 +11135,11 @@ function resolveHere() {
     return;
   }
   let n = 0;
-  for (const sub of (0, import_node_fs2.readdirSync)(prebuildsDir)) {
-    const helper = (0, import_node_path5.join)(prebuildsDir, sub, "spawn-helper");
-    if ((0, import_node_fs2.existsSync)(helper)) {
+  for (const sub of (0, import_node_fs3.readdirSync)(prebuildsDir)) {
+    const helper = (0, import_node_path6.join)(prebuildsDir, sub, "spawn-helper");
+    if ((0, import_node_fs3.existsSync)(helper)) {
       try {
-        (0, import_node_fs2.chmodSync)(helper, 493);
+        (0, import_node_fs3.chmodSync)(helper, 493);
         n++;
       } catch {
       }
@@ -10897,6 +11154,8 @@ if (argUrl && !argMatch && (argUrl === "-h" || argUrl === "--help" || argUrl ===
 
 usage:
   cli-local [HUB_URL]
+  cli-local install [HUB_URL]      \u5B89\u88C5 macOS launchd \u5E38\u9A7B\u670D\u52A1\uFF08\u5F00\u673A\u81EA\u542F + \u65AD\u7EBF\u81EA\u52A8\u91CD\u8FDE\uFF09
+  cli-local uninstall              \u5378\u8F7D launchd \u5E38\u9A7B\u670D\u52A1
 
 \u9996\u6B21\u8FD0\u884C\uFF08\u65E0\u914D\u7F6E\uFF09\u4F1A\u8FDB\u5165\u5F15\u5BFC\uFF1A
   1. \u63D0\u793A hub \u5730\u5740\uFF08\u56DE\u8F66\u7528\u9ED8\u8BA4\uFF09
@@ -10905,6 +11164,8 @@ usage:
   4. \u968F\u540E\u8D70 OAuth Device Flow\uFF08RFC 8628\uFF09\uFF1A\u81EA\u52A8\u6253\u5F00\u6388\u6743\u9875 \u2192 \u6279\u51C6\u672C\u8BBE\u5907
   5. \u51ED\u8BC1\u5B58\u5165 ~/.cli-remote/credentials.json\uFF080600\uFF09\uFF0C\u4E4B\u540E\u81EA\u52A8\u7EED\u671F
 
+\u65AD\u7EBF\u81EA\u52A8\u91CD\u8FDE\uFF1Ahub \u91CD\u542F/\u7F51\u7EDC\u95EA\u65AD\u540E\u8FDB\u7A0B\u4E0D\u9000\u51FA\uFF0CPTY \u4F1A\u8BDD\u4FDD\u6D3B\u5E76\u81EA\u52A8\u91CD\u8FDE\u3002
+
 environment:
   RELAY_URL                 hub ws url (overrides argv and config)
   REGISTRATION_KEY          registration key (fallback of config.json)
@@ -10919,7 +11180,119 @@ config (~/.cli-remote/config.json):
   }
 
 example:
-  cli-local wss://cli-remote.mkjs.net/ws`);
+  cli-local wss://cli-remote.mkjs.net/ws
+  cli-local install                # \u914D\u7F6E\u5E76\u6388\u6743\u540E\uFF0C\u5B89\u88C5\u5E38\u9A7B\u670D\u52A1`);
+  process.exit(0);
+}
+var LAUNCHD_LABEL = "net.cli-remote.local";
+function launchdPlistPath() {
+  return (0, import_node_path6.join)((0, import_node_os6.homedir)(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+}
+function entryScript() {
+  const a1 = process.argv[1];
+  if (!a1 || a1.endsWith(".ts")) return null;
+  try {
+    return (0, import_node_fs3.realpathSync)(a1);
+  } catch {
+    return a1;
+  }
+}
+function run(cmd, args, okToFail = false) {
+  try {
+    return (0, import_node_child_process2.execFileSync)(cmd, args, { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
+  } catch (e) {
+    if (okToFail) return null;
+    throw e;
+  }
+}
+function launchdInstall(urlArg) {
+  if (process.platform !== "darwin") {
+    console.error(`[local] launchd \u5E38\u9A7B\u4EC5\u652F\u6301 macOS\uFF08\u5F53\u524D ${process.platform}\uFF09\uFF1BLinux \u8BF7\u7528 systemd --user \u81EA\u884C\u6258\u7BA1`);
+    process.exit(1);
+  }
+  const home = (0, import_node_os6.homedir)();
+  const entry = entryScript();
+  if (!entry) {
+    console.error("[local] \u5F53\u524D\u4EE5\u6E90\u7801\uFF08tsx\uFF09\u6A21\u5F0F\u8FD0\u884C\uFF0C\u65E0\u6CD5\u5B89\u88C5\u5E38\u9A7B\u670D\u52A1\u3002");
+    console.error("[local] \u8BF7\u5148\u901A\u8FC7 npm \u5B89\u88C5\uFF1Anpm i -g @cli-remote/local\uFF0C\u518D\u7528\u5B89\u88C5\u7248\u6267\u884C install\u3002");
+    process.exit(1);
+  }
+  if (urlArg) {
+    const cfgDir = (0, import_node_path6.join)(home, DEFAULT_CONFIG_DIR);
+    (0, import_node_fs3.mkdirSync)(cfgDir, { recursive: true });
+    const cfgPath = (0, import_node_path6.join)(cfgDir, "config.json");
+    let cfg = {};
+    try {
+      cfg = JSON.parse((0, import_node_fs3.readFileSync)(cfgPath, "utf-8"));
+    } catch {
+    }
+    cfg.relayUrl = urlArg;
+    (0, import_node_fs3.writeFileSync)(cfgPath, JSON.stringify(cfg, null, 2) + "\n");
+    console.log(`[local] relayUrl \u5DF2\u5199\u5165 ${cfgPath}`);
+  }
+  const credPath = (0, import_node_path6.join)(home, DEFAULT_CONFIG_DIR, CREDENTIALS_FILE);
+  if (!(0, import_node_fs3.existsSync)(credPath)) {
+    console.error("[local] \u5C1A\u672A\u6388\u6743\uFF08\u627E\u4E0D\u5230 credentials.json\uFF09\u3002");
+    console.error("[local] \u8BF7\u5148\u4EA4\u4E92\u5F0F\u8FD0\u884C\u4E00\u6B21 cli-local \u5B8C\u6210\u914D\u7F6E\u4E0E\u6388\u6743\uFF0C\u518D\u5B89\u88C5\u5E38\u9A7B\u670D\u52A1\u3002");
+    process.exit(1);
+  }
+  const plist = launchdPlistPath();
+  const logDir = (0, import_node_path6.join)(home, DEFAULT_CONFIG_DIR, "logs");
+  (0, import_node_fs3.mkdirSync)((0, import_node_path6.dirname)(plist), { recursive: true });
+  (0, import_node_fs3.mkdirSync)(logDir, { recursive: true });
+  const xml = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${LAUNCHD_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${process.execPath}</string>
+    <string>${entry}</string>
+  </array>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>ThrottleInterval</key><integer>30</integer>
+  <key>StandardOutPath</key><string>${(0, import_node_path6.join)(logDir, "daemon.out.log")}</string>
+  <key>StandardErrorPath</key><string>${(0, import_node_path6.join)(logDir, "daemon.err.log")}</string>
+</dict>
+</plist>
+`;
+  (0, import_node_fs3.writeFileSync)(plist, xml);
+  const uid = process.getuid?.();
+  if (uid === void 0) {
+    console.error("[local] \u65E0\u6CD5\u786E\u5B9A uid\uFF0Claunchd \u5B89\u88C5\u5931\u8D25");
+    process.exit(1);
+  }
+  const guiDomain = `gui/${uid}`;
+  run("launchctl", ["bootout", guiDomain, plist], true);
+  run("launchctl", ["unload", "-w", plist], true);
+  run("launchctl", ["bootstrap", guiDomain, plist]);
+  run("launchctl", ["enable", `${guiDomain}/${LAUNCHD_LABEL}`], true);
+  console.log(`[local] launchd \u670D\u52A1\u5DF2\u5B89\u88C5\u5E76\u542F\u52A8\uFF1A${LAUNCHD_LABEL}`);
+  console.log(`[local]   plist: ${plist}`);
+  console.log("[local]   \u65E5\u5FD7: ~/.cli-remote/logs/daemon.out.log / daemon.err.log");
+  console.log("[local]   \u7BA1\u7406\u670D\u52A1: launchctl kickstart -k, bootout, \u6216 cli-local uninstall");
+}
+function launchdUninstall() {
+  const plist = launchdPlistPath();
+  if (!(0, import_node_fs3.existsSync)(plist)) {
+    console.log("[local] \u672A\u627E\u5230\u5DF2\u5B89\u88C5\u7684\u5E38\u9A7B\u670D\u52A1\uFF08nothing to uninstall\uFF09");
+    process.exit(0);
+  }
+  const uid = process.getuid?.();
+  const guiDomain = `gui/${uid ?? 0}`;
+  run("launchctl", ["bootout", guiDomain, plist], true);
+  run("launchctl", ["unload", "-w", plist], true);
+  (0, import_node_fs3.rmSync)(plist);
+  console.log(`[local] launchd \u670D\u52A1\u5DF2\u505C\u6B62\u5E76\u5378\u8F7D\uFF1A${LAUNCHD_LABEL}`);
+}
+if (argUrl && !argMatch && argUrl === "install") {
+  launchdInstall(process.argv[3]);
+  process.exit(0);
+}
+if (argUrl && !argMatch && argUrl === "uninstall") {
+  launchdUninstall();
   process.exit(0);
 }
 startLocal(argMatch ? { url: argUrl } : {}).catch((err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cli-remote/local",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "description": "Local PTY agent for cli-remote — exposes your local CLI tools (claude/codex/kimi-cli/shell) to the mobile web client via a self-hosted hub.",
   "license": "MIT",
   "repository": {