@justlovepl/desktop-bridge 0.0.0-stage → 0.2.6

package/dist/client/admin-runtime.mjs

@@ -0,0 +1,119 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import {spawnSync} from 'node:child_process';
+
+export const SERVICE_ID='de.desktopbridge.admin';
+export const WINDOWS_TASK='DesktopBridgeAdministrator';
+
+export function protectedRoot(platform=process.platform) {
+  if(platform==='win32') {
+    const programData=process.env.ProgramData??'C:\\ProgramData';
+    return path.win32.join(programData,'DesktopBridge','Administrator');
+  }
+  if(platform==='darwin')return '/Library/Application Support/DesktopBridge/Administrator';
+  if(platform==='linux')return '/var/lib/desktop-bridge-administrator';
+  throw new Error('Unsupported platform: '+platform);
+}
+export function quoteXml(value) {
+  return String(value).replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&apos;'}[c]));
+}
+export function serviceSpec(platform,root,node) {
+  if(platform==='darwin')return '<?xml version="1.0" encoding="UTF-8"?>\n'+
+    '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n'+
+    '<plist version="1.0"><dict><key>Label</key><string>'+SERVICE_ID+'</string>'+
+    '<key>ProgramArguments</key><array>'+[node,path.join(root,'runner.mjs'),root].map(s=>'<string>'+quoteXml(s)+'</string>').join('')+
+    '</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/>'+
+    '<key>WorkingDirectory</key><string>'+quoteXml(root)+'</string>'+
+    '<key>StandardErrorPath</key><string>'+quoteXml(path.join(root,'service.stderr.log'))+'</string>'+
+    '</dict></plist>\n';
+  if(platform==='linux') {
+    const escape=s=>String(s).replace(/\\/g,'\\\\').replace(/"/g,'\\"').replace(/%/g,'%%').replace(/\n/g,'');
+    return '[Unit]\nDescription=Desktop Bridge administrator agent (explicit opt-in)\nAfter=network-online.target\nWants=network-online.target\n\n'+
+      '[Service]\nType=simple\nUser=root\nGroup=root\nWorkingDirectory="'+escape(root)+'"\nExecStart="'+escape(node)+'" "'+escape(path.join(root,'runner.mjs'))+'" "'+escape(root)+'"\n'+
+      'Restart=always\nRestartSec=10\nUMask=0077\nNoNewPrivileges=true\nPrivateTmp=true\nProtectSystem=full\n\n[Install]\nWantedBy=multi-user.target\n';
+  }
+  throw new Error('No text service specification for '+platform);
+}
+export function isAdministrator(platform=process.platform) {
+  if(platform==='win32') {
+    const result=spawnSync('powershell.exe',['-NoProfile','-NonInteractive','-Command',
+      '[Security.Principal.WindowsPrincipal]::new([Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)'],{encoding:'utf8'});
+    return result.status===0&&result.stdout.trim()==='True';
+  }
+  return typeof process.getuid==='function'&&process.getuid()===0;
+}
+export function assertProtectedParents(root,platform=process.platform) {
+  const absolute=path.resolve(root);
+  if(absolute!==path.resolve(protectedRoot(platform)))throw new Error('Administrative directory must be the fixed protected path.');
+  if(platform!=='win32'){
+    let current=absolute,checked=0;
+    // The dedicated installation and its own parent must be protected.
+    // macOS may legitimately mark /Library/Application Support group-admin writable.
+    while(current!==path.dirname(current)&&checked++<2){
+      if(!fs.existsSync(current)){current=path.dirname(current);continue;}
+      const st=fs.lstatSync(current);
+      if(st.isSymbolicLink()||!st.isDirectory())throw new Error('Administrative directory contains an unsafe symlink.');
+      if(st.uid!==0||(st.mode&0o022)!==0)throw new Error('Administrative path must be root-owned and not group/world writable: '+current);
+      current=path.dirname(current);
+    }
+  }
+}
+export function validateSource(source) {
+  const base=fs.realpathSync(source);
+  const required=['.desktop-bridge-client','launch.json','agent-config.json','runner.mjs','lifecycle.mjs','releases','runtime'];
+  for(const name of required)if(!fs.existsSync(path.join(base,name)))throw new Error('Missing installed client component: '+name);
+  const marker=fs.readFileSync(path.join(base,'.desktop-bridge-client'),'utf8');
+  if(marker.trim()!=='desktop-bridge-client')throw new Error('Unrecognized installation marker.');
+  const config=JSON.parse(fs.readFileSync(path.join(base,'agent-config.json'),'utf8'));
+  if(!/^https:\/\//.test(config.serverUrl)||!config.deviceId||!config.deviceToken)throw new Error('Pair the client over HTTPS before installing administrator mode.');
+  const launch=JSON.parse(fs.readFileSync(path.join(base,'launch.json'),'utf8'));
+  if(!path.resolve(launch.agent).startsWith(base+path.sep)||!path.resolve(launch.config).startsWith(base+path.sep))throw new Error('Unsafe launch manifest.');
+  for(const name of ['runtime','releases','agent-config.json','launch.json','runner.mjs']){
+    const entry=fs.lstatSync(path.join(base,name));if(entry.isSymbolicLink())throw new Error('Top-level symlink not allowed: '+name);
+  }
+  return {base,config,launch};
+}
+export function copyTreeSafe(source,destination) {
+  const base=fs.realpathSync(source);
+  const boundary=fs.statSync(base).isDirectory()?base:path.dirname(base);
+  fs.cpSync(source,destination,{recursive:true,force:true,errorOnExist:false,dereference:true,filter:(entry)=>{
+    const resolved=fs.realpathSync(entry);
+    if(resolved!==boundary&&!resolved.startsWith(boundary+path.sep))throw new Error('Symlink escapes administrative payload: '+entry);
+    const lstat=fs.lstatSync(entry);
+    if(lstat.isSymbolicLink()&&fs.statSync(entry).isDirectory())throw new Error('Symlinked directories not allowed: '+entry);
+    return true;
+  }});
+}
+export function rewritePaths(value,oldRoot,newRoot) {
+  if(typeof value==='string') {
+    return value===oldRoot?newRoot:value.startsWith(oldRoot+path.sep)?newRoot+value.slice(oldRoot.length):value;
+  }
+  if(Array.isArray(value))return value.map(x=>rewritePaths(x,oldRoot,newRoot));
+  if(value&&typeof value==='object')return Object.fromEntries(Object.entries(value).map(([key,x])=>[key,rewritePaths(x,oldRoot,newRoot)]));
+  return value;
+}
+export function secureTree(root,platform=process.platform) {
+  if(platform==='win32') {
+    const result=spawnSync('icacls.exe',[root,'/inheritance:r','/grant:r','*S-1-5-18:(OI)(CI)F','*S-1-5-32-544:(OI)(CI)F','/T','/Q'],{encoding:'utf8'});
+    if(result.status!==0)throw new Error('Failed to protect Windows administrative files: '+result.stderr);
+  } else {
+    for(const entry of fs.readdirSync(root,{withFileTypes:true})){
+      const filename=path.join(root,entry.name);
+      const st=fs.lstatSync(filename);
+      if(st.isSymbolicLink())throw new Error('Unexpected symlink in privileged tree.');
+      fs.chownSync(filename,0,0);
+      if(st.isDirectory()){fs.chmodSync(filename,0o700);secureTree(filename,platform);}
+      else fs.chmodSync(filename,(st.mode&0o111)?0o700:0o600);
+    }
+    fs.chownSync(root,0,0);fs.chmodSync(root,0o700);
+    for(const bin of findNodeBinaries(root))fs.chmodSync(bin,0o700);
+  }
+}
+function findNodeBinaries(root) {
+  const runtime=path.join(root,'runtime');if(!fs.existsSync(runtime))return [];
+  const out=[];
+  for(const entry of fs.readdirSync(runtime)){const candidate=path.join(runtime,entry,'bin','node');if(fs.existsSync(candidate))out.push(candidate);}
+  return out;
+}
+export function writePrivateJson(file,data){fs.writeFileSync(file,JSON.stringify(data,null,2),{mode:0o600,flag:'w'});if(process.platform!=='win32')fs.chmodSync(file,0o600);}

package/dist/client/admin-service.mjs

@@ -0,0 +1,152 @@
+// Privileged entry point. Never run automatically from a network request.
+import fs from 'node:fs';
+import path from 'node:path';
+import {spawnSync} from 'node:child_process';
+import {protectedRoot,SERVICE_ID,WINDOWS_TASK,isAdministrator,assertProtectedParents,validateSource,copyTreeSafe,secureTree,rewritePaths,serviceSpec,writePrivateJson} from './admin-runtime.mjs';
+
+const platform=process.platform;
+const root=protectedRoot();
+const serviceFile=platform==='darwin'?'/Library/LaunchDaemons/'+SERVICE_ID+'.plist':
+  platform==='linux'?'/etc/systemd/system/desktop-bridge-administrator.service':null;
+
+function cmd(program,args,optional=false) {
+ const result=spawnSync(program,args,{stdio:'inherit',env:{...process.env,NODE_ENV:'production'}});
+ if(result.error||(!optional&&result.status!==0))throw new Error(program+' failed: '+(result.error?.message??result.status));
+ return result.status===0;
+}
+function winPs(text,optional=false) {
+ return cmd('powershell.exe',['-NoProfile','-NonInteractive','-Command',text],optional);
+}
+const ps=s=>"'"+String(s).replace(/'/g,"''")+"'";
+const nodeIn=root=> {
+ const runtime=path.join(root,'runtime');
+ const entries=fs.readdirSync(runtime).filter(s=>s.startsWith('node-v24.')&&s.endsWith('-'+platform+'-'+process.arch));
+ if(entries.length!==1)throw new Error('Expected exactly one verified private Node runtime.');
+ const filename=path.join(runtime,entries[0],platform==='win32'?'node.exe':'bin/node');
+ if(!fs.statSync(filename).isFile())throw new Error('Protected Node executable is not a file.');
+ return filename;
+};
+function taskInstall(node) {
+ const arg='"'+path.join(root,'runner.mjs')+'" "'+root+'"';
+ const script="$ErrorActionPreference='Stop';"+
+   "$a=New-ScheduledTaskAction -Execute "+ps(node)+" -Argument "+ps(arg)+" -WorkingDirectory "+ps(root)+";"+
+   "$t=New-ScheduledTaskTrigger -AtStartup;"+
+   "$p=New-ScheduledTaskPrincipal -UserId 'SYSTEM' -LogonType ServiceAccount -RunLevel Highest;"+
+   "$s=New-ScheduledTaskSettingsSet -RestartCount 3 -RestartInterval (New-TimeSpan -Minutes 1) -ExecutionTimeLimit ([TimeSpan]::Zero) -StartWhenAvailable;"+
+   "Register-ScheduledTask -TaskName "+ps(WINDOWS_TASK)+" -Action $a -Trigger $t -Principal $p -Settings $s -Force | Out-Null;"+
+   "Start-ScheduledTask -TaskName "+ps(WINDOWS_TASK);
+ winPs(script);
+}
+function stopService() {
+ if(platform==='win32'){
+   winPs("$t=Get-ScheduledTask -TaskName "+ps(WINDOWS_TASK)+" -ErrorAction SilentlyContinue;if($t){Stop-ScheduledTask -TaskName "+ps(WINDOWS_TASK)+" -ErrorAction SilentlyContinue;Unregister-ScheduledTask -TaskName "+ps(WINDOWS_TASK)+" -Confirm:$false}",true);
+ }else if(platform==='darwin'){
+   if(fs.existsSync(serviceFile))cmd('launchctl',['bootout','system',serviceFile],true);
+   fs.rmSync(serviceFile,{force:true});
+ }else if(fs.existsSync(serviceFile)){
+   cmd('systemctl',['disable','--now','desktop-bridge-administrator.service'],true);
+   fs.rmSync(serviceFile,{force:true});
+   cmd('systemctl',['daemon-reload']);
+ }
+}
+function startService() {
+ const node=nodeIn(root);
+ if(platform==='win32')return taskInstall(node);
+ fs.writeFileSync(serviceFile,serviceSpec(platform,root,node),{mode:0o644});
+ fs.chownSync(serviceFile,0,0);fs.chmodSync(serviceFile,0o644);
+ if(platform==='darwin')cmd('launchctl',['bootstrap','system',serviceFile]);
+ else {cmd('systemctl',['daemon-reload']);cmd('systemctl',['enable','--now','desktop-bridge-administrator.service']);}
+}
+function flag(state) {
+ fs.writeFileSync(path.join(root,'maintenance.flag'),state,{mode:0o600});
+}
+function settings(mode) {
+ writePrivateJson(path.join(root,'client-settings.json'),{mode,privilege:'administrator',version:'0.2.6'});
+}
+function relocate(source,mode) {
+ const {base}=validateSource(source);
+ const parent=path.dirname(root);
+ // Parent folders must be created by an explicitly authorized elevated installer.
+ fs.mkdirSync(parent,{recursive:true,mode:0o700});
+ if(platform!=='win32'){
+   const info=fs.lstatSync(parent);
+   if(!info.isDirectory()||info.isSymbolicLink())throw new Error('Unsafe administrative parent directory.');
+   fs.chownSync(parent,0,0);fs.chmodSync(parent,0o700);
+ }else{
+   const acl=spawnSync('icacls.exe',[parent,'/inheritance:r','/grant:r','*S-1-5-18:(OI)(CI)F','*S-1-5-32-544:(OI)(CI)F','/Q'],{encoding:'utf8'});
+   if(acl.status!==0)throw new Error('Unable to protect administrative parent directory.');
+ }
+ if(fs.existsSync(root))assertProtectedParents(root);
+ const stage=path.join(parent,'.desktop-bridge-admin-stage-'+process.pid);
+ const backup=path.join(parent,'.desktop-bridge-admin-backup-'+process.pid);
+ fs.mkdirSync(stage,{mode:0o700});
+ const selected=['.desktop-bridge-client','agent-config.json','launch.json','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','runtime','releases'];
+ try{
+   for(const entry of selected){const file=path.join(base,entry);if(fs.existsSync(file))copyTreeSafe(file,path.join(stage,entry));}
+   const oldConfig=fs.existsSync(path.join(root,'agent-config.json'))?JSON.parse(fs.readFileSync(path.join(root,'agent-config.json'),'utf8')):null;
+   const config=JSON.parse(fs.readFileSync(path.join(stage,'agent-config.json'),'utf8'));
+   const merged=oldConfig?.deviceId&&oldConfig?.deviceToken?{...config,deviceId:oldConfig.deviceId,deviceToken:oldConfig.deviceToken}:config;
+   writePrivateJson(path.join(stage,'agent-config.json'),rewritePaths(merged,base,root));
+   const launch=JSON.parse(fs.readFileSync(path.join(stage,'launch.json'),'utf8'));
+   writePrivateJson(path.join(stage,'launch.json'),rewritePaths(launch,base,root));
+   for(const name of ['journal.json','agent.log','agent.log.1']){
+     const previous=path.join(root,name);if(fs.existsSync(previous))copyTreeSafe(previous,path.join(stage,name));
+     else if(fs.existsSync(path.join(base,name)))copyTreeSafe(path.join(base,name),path.join(stage,name));
+   }
+   writePrivateJson(path.join(stage,'client-settings.json'),{mode,privilege:'administrator',version:'0.2.6'});
+   fs.writeFileSync(path.join(stage,'maintenance.flag'),'installing',{mode:0o600});
+   secureTree(stage);
+   if(fs.existsSync(root))fs.renameSync(root,backup);
+   try{fs.renameSync(stage,root);}
+   catch(e){if(fs.existsSync(backup))fs.renameSync(backup,root);throw e;}
+   assertProtectedParents(root);
+   fs.rmSync(backup,{recursive:true,force:true});
+ }finally{fs.rmSync(stage,{recursive:true,force:true});}
+}
+async function stopRunner() {
+ flag('stopping');
+ const {stopClient}=await import('./lifecycle.mjs');
+ await stopClient(root);
+}
+const [action,value,...rest]=process.argv.slice(2);
+if(!isAdministrator())throw new Error('Administrator authorization is required; use admin-elevate.mjs instead.');
+if(!['install','start','stop','mode','uninstall','status'].includes(action)||(action==='install'?rest.length!==1:rest.length!==0))throw new Error('Usage: admin-service.mjs install <source> manual|background | start | stop | status | mode manual|background | uninstall');
+if(action==='install'){
+ // install receives two positional values.
+ const source=value;const mode=rest[0];
+ if(!source||!['manual','background'].includes(mode))throw new Error('install requires source and manual|background');
+ if(fs.existsSync(root)){stopService();await stopRunner();}
+ relocate(source,mode);
+ fs.rmSync(path.join(root,'maintenance.flag'),{force:true});
+ if(mode==='background')startService();
+ console.log('Administrator '+mode+' mode installed. System privacy controls and ChatGPT tool approvals remain in force.');
+}else if(action==='status'){
+ if(!fs.existsSync(root))throw new Error('Administrator client has not been installed.');
+ const mode=JSON.parse(fs.readFileSync(path.join(root,'client-settings.json'),'utf8')).mode;
+ console.log(JSON.stringify({root,mode,privilege:'administrator'}));
+}else if(action==='start'){
+ assertProtectedParents(root);
+ const mode=JSON.parse(fs.readFileSync(path.join(root,'client-settings.json'),'utf8')).mode;
+ if(mode==='background'){startService();}else{
+   fs.rmSync(path.join(root,'maintenance.flag'),{force:true});
+   process.env.BRIDGE_ADMIN_CONTEXT='1';
+   cmd(nodeIn(root),[path.join(root,'control.mjs'),'start','--root',root]);
+ }
+}else if(action==='stop'){
+ assertProtectedParents(root);stopService();await stopRunner();console.log('Administrator client stopped.');
+}else if(action==='mode'){
+ if(!['manual','background'].includes(value))throw new Error('mode must be manual or background');
+ assertProtectedParents(root);stopService();await stopRunner();settings(value);
+ fs.rmSync(path.join(root,'maintenance.flag'),{force:true});
+ if(value==='background')startService();
+ console.log('Administrator client mode changed: '+value);
+}else if(action==='uninstall'){
+ assertProtectedParents(root);stopService();await stopRunner();
+ const purge=value==='--purge';
+ if(value&&value!=='--purge')throw new Error('Only --purge is accepted for uninstall');
+ if(purge)fs.rmSync(root,{recursive:true,force:true});
+ else{
+   for(const entry of ['runtime','releases','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','launch.json'])fs.rmSync(path.join(root,entry),{recursive:true,force:true});
+ }
+ console.log('Administrator service uninstalled. Device revocation is separate.');
+}

package/dist/client/agent/agent.mjs

@@ -0,0 +1,264 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createRequire } from 'node:module';
+import { pathToFileURL } from 'node:url';
+import { createHash } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { pairDevice,saveConfig } from './pair.mjs';
+
+const configPath=process.env.BRIDGE_AGENT_CONFIG??process.argv[2];
+if(!configPath) throw new Error('Usage: node agent.mjs path/to/agent-config.json');
+const config=JSON.parse(fs.readFileSync(configPath,'utf8').replace(/^\uFEFF/,''));
+
+const directory=path.dirname(path.resolve(configPath));
+if(fs.existsSync(path.join(directory,'maintenance.flag'))) process.exit(0);
+
+const lockPath=path.join(directory,'agent.lock');
+try {
+  const fd=fs.openSync(lockPath,'wx',0o600);fs.writeFileSync(fd,String(process.pid));fs.closeSync(fd);
+} catch(e) {
+  if(e.code!=='EEXIST') throw e;
+  // A concurrent process can create the file before writing its PID.
+  if(fs.statSync(lockPath).size===0 && Date.now()-fs.statSync(lockPath).mtimeMs<30000)process.exit(0);
+  const old=Number(fs.readFileSync(lockPath,'utf8'));
+  let alive=false;
+  if(Number.isInteger(old) && old>0 && old!==process.pid) {try{process.kill(old,0);alive=true;}catch(err){if(err.code!=='ESRCH')alive=true;}}
+  if(alive) process.exit(0);
+  fs.unlinkSync(lockPath);
+  const fd=fs.openSync(lockPath,'wx',0o600);fs.writeFileSync(fd,String(process.pid));fs.closeSync(fd);
+}
+const logPath=path.join(directory,'agent.log');
+function log(event,fields={}) {
+  try {
+    if(fs.existsSync(logPath) && fs.statSync(logPath).size>1024*1024) fs.renameSync(logPath,logPath+'.1');
+    fs.appendFileSync(logPath,JSON.stringify({time:new Date().toISOString(),event,...fields})+'\n',{mode:0o600});
+  } catch {}
+}
+function unlock(){try{if(fs.readFileSync(lockPath,'utf8')===String(process.pid))fs.unlinkSync(lockPath);}catch{}}
+process.on('exit',unlock);
+
+const authStatusPath=path.join(directory,'auth-status.json');
+function saveAuthStatus(status) {
+  const temporary=authStatusPath+'.tmp';
+  fs.writeFileSync(temporary,JSON.stringify(status,null,2),{mode:0o600});
+  fs.renameSync(temporary,authStatusPath);
+}
+function notifyRevokedWindows() {
+  if(process.platform!=='win32'||process.env.DESKTOP_BRIDGE_SUPPRESS_NOTIFICATIONS==='1'||process.env.USERNAME?.toUpperCase()==='SYSTEM')return;
+  let state;try{state=JSON.parse(fs.readFileSync(authStatusPath,'utf8'));}catch{return;}
+  if(state.authStatus!=='re_pair_required'||state.notificationShown)return;
+  // The warning is informative only. Re-pairing still requires an explicit local
+  // click followed by a browser login and device approval.
+  const rePair=path.join(directory,'RePair.cmd');
+  const quote=value=>"'"+String(value).replace(/'/g,"''")+"'";
+  const message='Desktop Bridge 的设备授权已撤销，旧凭据已失效。\n\n是否现在重新配对？（需要网页登录确认）';
+  const script="Add-Type -AssemblyName System.Windows.Forms;"+
+    "$answer=[System.Windows.Forms.MessageBox]::Show("+quote(message)+",'Desktop Bridge',[System.Windows.Forms.MessageBoxButtons]::YesNo,[System.Windows.Forms.MessageBoxIcon]::Warning);"+
+    "if($answer -eq [System.Windows.Forms.DialogResult]::Yes){Start-Process -FilePath 'cmd.exe' -ArgumentList @('/k',"+quote('"' + rePair + '"')+")}";
+  try {
+    const child=spawn('powershell.exe',['-NoProfile','-Sta','-WindowStyle','Hidden','-Command',script],
+      {detached:true,stdio:'ignore',windowsHide:true});
+    child.on('error',()=>{});child.unref();
+    saveAuthStatus({...state,notificationShown:true});
+  } catch { /* The next local status/start command still shows persistent notice. */ }
+}
+function clearRevokedCredentials(reason,{stop=true}={}) {
+  delete config.deviceToken;delete config.deviceId;
+  saveConfig(configPath,config);
+  let previous={};try{previous=JSON.parse(fs.readFileSync(authStatusPath,'utf8'));}catch{}
+  saveAuthStatus({authStatus:'re_pair_required',reason:'device_revoked',
+    detectedAt:previous.authStatus==='re_pair_required'?previous.detectedAt??new Date().toISOString():new Date().toISOString(),
+    notificationShown:previous.authStatus==='re_pair_required'&&previous.notificationShown===true});
+  if(stop)fs.writeFileSync(path.join(directory,'maintenance.flag'),'device authorization revoked',{mode:0o600});
+  log('device_authorization_revoked',{reason});
+  console.error('设备授权已撤销，旧凭据已清除。请运行 RePair.cmd 重新配对。');
+  if(stop)notifyRevokedWindows();
+}
+async function remoteRevoked() {
+  if(!config.deviceId||!config.deviceToken)return false;
+  const url=new URL('/api/agent/revocation-status',config.serverUrl);
+  if(url.protocol!=='https:'&&!['localhost','127.0.0.1'].includes(url.hostname))return false;
+  try {
+    const response=await fetch(url,{method:'POST',headers:{'content-type':'application/json'},
+      body:JSON.stringify({deviceId:config.deviceId}),signal:AbortSignal.timeout(5000)});
+    return response.ok&&(await response.json()).revoked===true;
+  } catch {return false;} // Never erase credentials on a timeout or ordinary network failure.
+}
+let revokedAtStartup=false;
+if(process.argv.includes('--pair')){delete config.deviceToken;delete config.deviceId;saveConfig(configPath,config);}
+else if(await remoteRevoked()) {
+  const installing=process.argv.includes('--setup-only');
+  clearRevokedCredentials('startup_preflight',{stop:!installing});
+  if(!installing){revokedAtStartup=true;process.exitCode=78;}
+}
+if(!revokedAtStartup&&(!config.deviceToken||!config.deviceId)) {
+  await pairDevice(config,configPath,{openBrowser:!process.argv.includes('--no-browser')});
+  fs.rmSync(authStatusPath,{force:true}); // New server-approved credentials clear the notice.
+}
+if(revokedAtStartup){
+  // An offline device's credentials were revoked. Let fetch handles close
+  // normally on Windows; do not start tools or silently auto-pair.
+} else if(process.argv.includes('--setup-only')) {
+  // Let active fetch/undici handles close naturally on Windows.
+  process.exitCode=0;
+} else {
+const requireRuntime=createRequire(path.join(config.runtimeDir,'package.json'));
+const {Client}=await import(pathToFileURL(requireRuntime.resolve('@modelcontextprotocol/sdk/client/index.js')));
+const {StdioClientTransport}=await import(pathToFileURL(requireRuntime.resolve('@modelcontextprotocol/sdk/client/stdio.js')));
+const WebSocket=requireRuntime('ws');
+const client=new Client({name:'personal-desktop-bridge-agent',version:'0.2.6'},{capabilities:{}});
+const transport=new StdioClientTransport({command:process.execPath,args:[config.mcpEntry],cwd:config.workingDirectory??directory,env:{...process.env},stderr:'pipe'});
+let ws,retryTimer,stopping=false,attempt=0,localHealthy=false,checkingHealth=false,healthFailures=0,remoteStopping=false;
+const heartbeatPath=path.join(directory,'heartbeat.json');
+function writeHeartbeat(){try{fs.writeFileSync(heartbeatPath,JSON.stringify({pid:process.pid,time:Date.now(),connected:ws?.readyState===1,localToolsAvailable:localHealthy}),{mode:0o600});}catch{}}
+writeHeartbeat();
+const processHeartbeat=setInterval(writeHeartbeat,15000);processHeartbeat.unref();
+const journalPath=path.join(directory,'journal.json');
+let journal={};
+try{journal=JSON.parse(fs.readFileSync(journalPath,'utf8'));}catch(e){if(e.code!=='ENOENT'){log('journal_corrupt');process.exit(78);}}
+function persist() {
+  const entries=Object.entries(journal).filter(([,v])=>v.status==='executing'||Date.now()-(v.time??0)<30*86400000).sort((a,b)=>(b[1].time??0)-(a[1].time??0));
+  let bytes=0;
+  journal=Object.fromEntries(entries.map(([id,value])=>{
+    bytes+=JSON.stringify(value).length;
+    return [id,bytes>12*1024*1024?{status:'unknown',time:value.time}:value];
+  }));
+  fs.writeFileSync(journalPath+'.tmp',JSON.stringify(journal),{mode:0o600});
+  fs.renameSync(journalPath+'.tmp',journalPath);
+}
+for(const entry of Object.values(journal)) if(entry.status==='executing') entry.status='unknown';
+persist();
+const running=new Map();
+async function execute(message,socket) {
+  if(!/^[0-9a-f-]{36}$/.test(message.id) || typeof message.name!=='string' || !message.arguments || typeof message.arguments!=='object' || Array.isArray(message.arguments)) return socket.close(1008,'Invalid call');
+  const cached=journal[message.id];
+  if(cached) {
+    if(cached.status==='completed') return send(socket,{type:'result',id:message.id,result:cached.result});
+    if(cached.status==='executing') return; // Original execution will answer; never run a duplicate.
+    return send(socket,{type:'result',id:message.id,status:'unknown',error:'An earlier execution has an unknown outcome. Inspect the computer before retrying.'});
+  }
+  if(remoteStopping||(message.name==='shutdown'&&running.size>0))return send(socket,{type:'result',id:message.id,error:'Agent is stopping or has an executing call; no shutdown was performed.'});
+  if(running.size>=4) return send(socket,{type:'result',id:message.id,error:'Agent is busy; no command was executed.'});
+  journal[message.id]={status:'executing',time:Date.now()};
+  persist();
+  running.set(message.id,true);
+  log('call_started',{id:message.id,tool:message.name});
+  try {
+    if(message.name==='shutdown') {
+      if(Object.keys(message.arguments).length)throw new Error('shutdown accepts no local arguments');
+      remoteStopping=true;
+      // Persist the stop intent so a runner/service restart cannot immediately reconnect.
+      fs.writeFileSync(path.join(directory,'maintenance.flag'),'remote shutdown',{mode:0o600});
+      const result={content:[{type:'text',text:JSON.stringify({status:'stopping',computerShutdown:false,restart:'Start Desktop Bridge locally to reconnect.'})}]};
+      journal[message.id]={status:'completed',time:Date.now(),result};persist();
+      await new Promise(resolve=>{
+        const timer=setTimeout(resolve,1000);
+        if(socket.readyState!==WebSocket.OPEN){clearTimeout(timer);return resolve();}
+        socket.send(JSON.stringify({type:'result',id:message.id,result}),()=>{clearTimeout(timer);resolve();});
+      });
+      await shutdown();return;
+    }
+    const args={...message.arguments};
+    if(process.platform==='win32' && message.name==='start_process') {
+      args.shell??=config.defaultShell;
+      if(typeof args.command==='string' && /(?:^|[\\/])(powershell|pwsh)(?:\.exe)?$/i.test(args.shell??'')) {
+        args.command='[Console]::OutputEncoding=[Text.Encoding]::UTF8;$OutputEncoding=[Text.UTF8Encoding]::new($false);'+args.command;
+      }
+    }
+    let result=await client.callTool({name:message.name,arguments:args},undefined,{timeout:110000,maxTotalTimeout:110000});
+    if(Buffer.byteLength(JSON.stringify(result))>8*1024*1024) result={isError:true,content:[{type:'text',text:'Tool ran, but its result exceeded the transfer limit. Use smaller pages or save output to a file.'}]};
+    journal[message.id]={status:'completed',time:Date.now(),result};persist();
+    send(ws,{type:'result',id:message.id,result});
+    log('call_finished',{id:message.id,isError:!!result.isError});
+  } catch(e) {
+    journal[message.id]={status:'unknown',time:Date.now()};persist();
+    send(ws,{type:'result',id:message.id,status:'unknown',error:'Local tool request failed; its execution outcome may be unknown. '+String(e.message).slice(0,500)});
+    log('call_failed',{id:message.id});
+  } finally {running.delete(message.id);}
+}
+function send(socket,message) {if(socket?.readyState===WebSocket.OPEN)socket.send(JSON.stringify(message));}
+async function shutdown(code=0) {
+  if(stopping)return;stopping=true;clearTimeout(retryTimer);
+  clearInterval(processHeartbeat);clearInterval(maintenanceWatch);
+  ws?.close();
+  const timeout=setTimeout(()=>process.exit(code),8000);timeout.unref();
+  try{await client.close();}catch{}
+  process.exit(code);
+}
+process.on('message',message=>{if(message?.type==='stop')void shutdown();});
+const maintenanceWatch=setInterval(()=>{if(fs.existsSync(path.join(directory,'maintenance.flag')))void shutdown();},1000);maintenanceWatch.unref();
+process.on('SIGINT',()=>void shutdown());process.on('SIGTERM',()=>void shutdown());
+process.on('uncaughtException',error=>{log('fatal',{type:error.name});void shutdown(1);});
+process.on('unhandledRejection',error=>{log('fatal_rejection',{type:error?.name});void shutdown(1);});
+client.onclose=()=>{if(!stopping){log('local_mcp_closed');void shutdown(1);}};
+client.onerror=error=>log('local_mcp_error',{type:error.name});
+try{await client.connect(transport,{timeout:30000});}catch(error){log('local_mcp_start_failed',{message:String(error.message).slice(0,300)});await shutdown(1);}
+// Drain stderr to prevent a full pipe from blocking the local MCP process.
+transport.stderr?.on('data',()=>{});
+let tools=[],cursor;
+do {const page=await client.listTools(cursor?{cursor}:{});tools.push(...page.tools);cursor=page.nextCursor;}while(cursor);
+log('local_mcp_ready',{toolCount:tools.length,pid:process.pid,childPid:transport.pid});
+function recover(id,socket) {
+  const entry=journal[id];
+  if(entry?.status==='completed')send(socket,{type:'result',id,result:entry.result});
+  else if(entry?.status==='executing')send(socket,{type:'result',id,status:'executing'});
+  else send(socket,{type:'result',id,status:'unknown',error:'客户端未保留确定结果。请检查电脑上的实际状态；不会自动重试。'});
+}
+async function checkHealth(socket) {
+  if(checkingHealth)return;
+  checkingHealth=true;
+  try{await client.ping({timeout:5000});const probe=tools.find(t=>['get_config','list_sessions'].includes(t.name));if(probe){const result=await client.callTool({name:probe.name,arguments:{}},undefined,{timeout:5000});if(result.isError)throw new Error('Probe failed');}else await client.listTools({}, {timeout:5000});localHealthy=true;healthFailures=0;}
+  catch{localHealthy=false;if(++healthFailures>=3){log('local_health_failed');void shutdown(1);}}
+  finally{checkingHealth=false;send(socket,{type:'health',ok:localHealthy});writeHeartbeat();}
+}
+function connect() {
+  if(stopping)return;
+  const url=new URL('/agent',config.serverUrl);
+  url.protocol=url.protocol==='https:'?'wss:':'ws:';
+  if(url.protocol!=='wss:' && !['localhost','127.0.0.1'].includes(url.hostname)) throw new Error('Remote connection requires HTTPS');
+  const socket=new WebSocket(url,{headers:{Authorization:'Bearer '+config.deviceToken},handshakeTimeout:15000,perMessageDeflate:false,maxPayload:10*1024*1024});
+  ws=socket;
+  let lastSeen=Date.now(),welcomed=false;
+  const heartbeat=setInterval(()=>{if(Date.now()-lastSeen>65000)socket.terminate();},15000);
+  socket.on('ping',()=>lastSeen=Date.now());
+  socket.on('open',()=>{send(socket,{type:'hello',protocol:2,deviceId:config.deviceId,tools,capabilities:{shutdown:true},version:'0.2.6',platform:process.platform});});
+  socket.on('message',data=>{
+    lastSeen=Date.now();
+    try {
+      const message=JSON.parse(data.toString());
+      if(message.type==='welcome'){welcomed=true;attempt=0;log('connected');for(const id of message.recover??[])recover(id,socket);}
+      else if(message.type==='recover'&&welcomed){for(const id of message.ids??[])recover(id,socket);}
+      else if(message.type==='health_check'&&welcomed)void checkHealth(socket);
+      else if(message.type==='rotate'&&welcomed){if(!/^[A-Za-z0-9_-]{43}$/.test(message.token))throw new Error('Invalid token');config.deviceToken=message.token;saveConfig(configPath,config);send(socket,{type:'rotate_ack',tokenHash:createHash('sha256').update(message.token).digest('hex')});}
+      else if(message.type==='revoked'&&welcomed) {
+        clearRevokedCredentials('server_revocation');
+        send(socket,{type:'revoked_ack'});
+        void shutdown(78);
+      }
+      else if(message.type==='call' && welcomed) void execute(message,socket);
+      else socket.close(1008,'Invalid server message');
+    } catch {socket.close(1008,'Invalid server message');}
+  });
+  socket.on('unexpected-response',(_request,response)=>{
+    const status=response.statusCode;response.resume();
+    // ws delegates handshake failures to this listener: explicitly finish it
+    // so the normal reconnect/stop lifecycle can proceed.
+    socket.terminate();
+    if(status!==403||stopping)return; // Pauses and other auth failures are not revocations.
+    void remoteRevoked().then(revoked=>{
+      if(!revoked||stopping)return;
+      clearRevokedCredentials('reconnect_rejected');
+      void shutdown(78);
+    }).catch(()=>{}); // Preserve credentials if status cannot be verified.
+  });
+  socket.on('error',error=>log('connection_error',{message:String(error.message).slice(0,240)}));
+  socket.on('close',(code)=>{
+    clearInterval(heartbeat);
+    if(stopping)return;
+    const delay=Math.min(60000,1000*2**Math.min(attempt++,6))+Math.floor(Math.random()*1000);
+    log('disconnected',{code,retryInMs:delay});
+    retryTimer=setTimeout(connect,delay);
+  });
+}
+connect();
+}

package/dist/client/agent/pair.mjs

@@ -0,0 +1,31 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import { spawn } from 'node:child_process';
+export function saveConfig(filename,config) {
+  fs.writeFileSync(filename+'.tmp',JSON.stringify(config,null,2),{mode:0o600});
+  fs.renameSync(filename+'.tmp',filename);
+}
+export async function pairDevice(config,filename,{openBrowser=true,intervalMs}={}) {
+  const server=new URL(config.serverUrl);
+  if(server.protocol!=='https:'&&!['127.0.0.1','localhost'].includes(server.hostname))throw new Error('配对需要 HTTPS');
+  const response=await fetch(new URL('/api/pair/start',server),{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({name:config.deviceName??os.hostname(),platform:process.platform,version:'0.2.6'}),signal:AbortSignal.timeout(15000)});
+  if(!response.ok)throw new Error('无法开始配对，请检查网络');
+  const p=await response.json();
+  console.log('请在网页登录并确认这台电脑。配对码：'+p.userCode+'\n'+p.verificationUri);
+  if(openBrowser) {
+    const command=process.platform==='win32'?'rundll32.exe':process.platform==='darwin'?'open':'xdg-open';
+    const args=process.platform==='win32'?['url.dll,FileProtocolHandler',p.verificationUri]:[p.verificationUri];
+    const child=spawn(command,args,{stdio:'ignore',detached:true});child.on('error',()=>{});child.unref();
+  }
+  const deadline=Date.now()+p.expiresIn*1000;
+  while(Date.now()<deadline) {
+    await new Promise(r=>setTimeout(r,intervalMs??p.interval*1000));
+    let poll;
+    try{poll=await fetch(new URL('/api/pair/poll',server),{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({deviceCode:p.deviceCode}),signal:AbortSignal.timeout(15000)});}catch{continue;}
+    if(poll.status===202||poll.status===429||poll.status>=500)continue;
+    if(!poll.ok)throw new Error('配对被拒绝或已过期，请重新运行安装程序');
+    const credentials=await poll.json();config.deviceId=credentials.deviceId;config.deviceToken=credentials.deviceToken;
+    saveConfig(filename,config);console.log('电脑已绑定，凭据已自动保存。');return config;
+  }
+  throw new Error('配对超时，请重新运行安装程序');
+}

package/dist/client/connection.json

@@ -0,0 +1 @@
+{"serverUrl":"https://mcp.ilovestudy.de"}