@justlovepl/desktop-bridge 0.0.0-stage → 0.2.7

package/dist/client/control.mjs

@@ -0,0 +1,75 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {fork} from 'node:child_process';
+import {dataRoot,acquireLock,releaseLock,livePid,stopClient} from './lifecycle.mjs';
+import {savedMode} from './install-options.mjs';
+import {setMode,startBackground,writeInstructions} from './startup.mjs';
+import {elevationRequest} from './admin-elevate.mjs';
+import {run} from './lifecycle.mjs';
+const source=path.dirname(fileURLToPath(import.meta.url));
+const args=process.argv.slice(2);let customRoot;
+for(let index=0;index<args.length;index++)if(args[index]==='--root'){if(!args[index+1]||args[index+1].startsWith('--'))throw new Error('--root requires a directory');customRoot=args[index+1];args.splice(index,2);index--;}
+const [action,value,...extra]=args;
+if(!['start','stop','status','mode','pair'].includes(action)||extra.length||(action==='mode'?!['manual','background'].includes(value):value!==undefined))throw new Error('Usage: control.mjs start|stop|status|pair|mode manual|background [--root directory]');
+const root=path.resolve(customRoot??(fs.existsSync(path.join(source,'.desktop-bridge-client'))?source:dataRoot()));
+const launch=JSON.parse(fs.readFileSync(path.join(root,'launch.json'),'utf8'));
+let settings={};try{settings=JSON.parse(fs.readFileSync(path.join(root,'client-settings.json'),'utf8'));}catch{}
+const authStatusPath=path.join(root,'auth-status.json');
+let authStatus={};try{authStatus=JSON.parse(fs.readFileSync(authStatusPath,'utf8'));}catch{}
+const needsPair=authStatus.authStatus==='re_pair_required';
+const pairHelp=process.platform==='win32'?path.join(root,'RePair.cmd'):'Run control.mjs pair locally';
+if(!launch.node||!fs.existsSync(launch.node))throw new Error('私有运行环境缺失，请重新运行安装器自动修复。');
+if(settings.privilege==='administrator'&&process.env.BRIDGE_ADMIN_CONTEXT!=='1'){
+ if(action==='status'){console.log(JSON.stringify({mode:settings.mode,privilege:'administrator',authStatus:authStatus.authStatus??'unknown',note:'Administrator service status requires local system inspection.'},null,2));process.exit(0);}
+ if(action==='pair')throw new Error('管理员服务配对需要在受保护的服务安装器中操作；不能用普通用户命令修改管理员凭据。');
+ const request=elevationRequest(action,{mode:value});
+ await run(request.command,request.args);
+ if(action==='mode'){
+   fs.writeFileSync(path.join(root,'client-settings.json'),JSON.stringify({mode:value,privilege:'administrator',version:'0.2.7'},null,2),{mode:0o600});
+   writeInstructions(root,launch.node,value,'administrator');
+ }
+ process.exit(0);
+}
+if(action==='status'){
+ let heartbeat;try{heartbeat=JSON.parse(fs.readFileSync(path.join(root,'heartbeat.json'),'utf8'));}catch{}
+ const running=livePid(path.join(root,'runner-lock','pid'));
+ let agentPid;try{agentPid=Number(fs.readFileSync(path.join(root,'agent.lock'),'utf8'));}catch{}
+ const fresh=running&&heartbeat&&heartbeat.pid===agentPid&&Date.now()-heartbeat.time<90000&&livePid(path.join(root,'agent.lock'));
+ console.log(JSON.stringify({mode:savedMode(root),running,networkConnected:!!(fresh&&heartbeat.connected),localToolsAvailable:!!(fresh&&heartbeat.localToolsAvailable),authStatus:needsPair?'re_pair_required':'ok',...(needsPair?{message:'设备授权已撤销，必须重新配对。',rePairCommand:pairHelp}: {})},null,2));
+ process.exit(0);
+}
+const lock=path.join(root,'install-lock');if(!acquireLock(lock))throw new Error('Another client maintenance operation is running.');
+process.on('exit',()=>releaseLock(lock));
+if(action==='stop'){await stopClient(root);console.log('客户端已停止。设备凭据、日志和任务结果已保留。');process.exit(0);}
+if(action==='mode'){await setMode(root,launch.node,value);console.log(value==='manual'?'已保存手动模式，移除登录自启。使用时运行启动命令，保持窗口，按 Ctrl+C 结束。':'已保存后台模式：登录系统后自动启动。');process.exit(0);}
+if(action==='pair') {
+  await stopClient(root);
+  fs.rmSync(path.join(root,'maintenance.flag'),{force:true});
+  try {
+    // A new device token is only issued after the user approves in the browser.
+    await run(launch.node,[launch.agent,launch.config,'--pair','--setup-only']);
+    const fresh=JSON.parse(fs.readFileSync(launch.config,'utf8'));
+    if(!fresh.deviceToken||!fresh.deviceId)throw new Error('配对尚未完成');
+    fs.rmSync(authStatusPath,{force:true});
+    if(savedMode(root)==='background')await startBackground(root,launch.node);
+    console.log('重新配对成功。'+(savedMode(root)==='background'?'后台连接已恢复。':'手动模式：可运行 Start.cmd 启动。'));
+  } catch(error) {
+    fs.writeFileSync(authStatusPath,JSON.stringify({authStatus:'re_pair_required',reason:'pairing_incomplete',detectedAt:new Date().toISOString(),notificationShown:true}),{mode:0o600});
+    fs.writeFileSync(path.join(root,'maintenance.flag'),'pairing incomplete',{mode:0o600});
+    throw error;
+  }
+  process.exit(0);
+}
+if(needsPair&&action==='start'){console.error('设备 Token 已失效，请先运行 '+pairHelp+' 重新配对。');process.exit(2);}
+if(livePid(path.join(root,'runner-lock','pid'))){console.log('客户端已在运行。若要重新以前台模式启动，请先运行停止命令。');process.exit(0);}
+if(savedMode(root)==='background'){await startBackground(root,launch.node);console.log('客户端已在后台启动。');process.exit(0);}
+fs.rmSync(path.join(root,'maintenance.flag'),{force:true});
+const runner=fork(path.join(root,'runner.mjs'),[root,'--foreground'],{execPath:launch.node,cwd:root,stdio:['inherit','inherit','inherit','ipc']});
+await new Promise((resolve,reject)=>{runner.once('spawn',resolve);runner.once('error',reject);});
+releaseLock(lock);
+console.log('Desktop Bridge 正在此窗口运行。请保持窗口，按 Ctrl+C 或关闭窗口结束。');
+let stopping=false;
+function stop(){if(stopping)return;stopping=true;if(runner.connected)try{runner.send({type:'stop'},()=>{});}catch{}}
+for(const signal of ['SIGINT','SIGTERM','SIGHUP'])process.on(signal,stop);
+runner.once('exit',code=>{process.exitCode=stopping?0:code??1;});

package/dist/client/control.ps1

@@ -0,0 +1,12 @@
+param([ValidateSet('start','stop','status','pair')][string]$Action,[string]$DataDirectory)
+$ErrorActionPreference = 'Stop'
+for ($i = 0; $i -lt $args.Count; $i++) {
+    if ($args[$i] -eq '--root') { $i++; if ($i -ge $args.Count) { throw '--root requires a directory.' }; $DataDirectory = $args[$i] }
+    else { throw ('Unknown option: ' + $args[$i]) }
+}
+$root = if ($DataDirectory) { $DataDirectory } elseif (Test-Path (Join-Path $PSScriptRoot '.desktop-bridge-client')) { $PSScriptRoot } else { Join-Path $env:LOCALAPPDATA 'DesktopBridgeClient' }
+$launchPath = Join-Path $root 'launch.json'
+if (-not (Test-Path $launchPath)) { throw 'Install Desktop Bridge first.' }
+$launch = Get-Content $launchPath -Raw | ConvertFrom-Json
+& $launch.node (Join-Path $root 'control.mjs') $Action --root $root
+exit $LASTEXITCODE

package/dist/client/environment-probe.mjs

@@ -0,0 +1,5 @@
+import {probeModules,verifyLocalToolsInProcess} from './environment.mjs';
+const [action,release,workingDirectory]=process.argv.slice(2);
+if(action==='dependencies')await probeModules(release);
+else if(action==='tools')await verifyLocalToolsInProcess({node:process.execPath,release,workingDirectory});
+else throw new Error('Unknown environment probe');

package/dist/client/environment.mjs

@@ -0,0 +1,99 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {createHash} from 'node:crypto';
+import {createRequire} from 'node:module';
+import {pathToFileURL,fileURLToPath} from 'node:url';
+import {spawn} from 'node:child_process';
+import {Readable} from 'node:stream';
+import {pipeline} from 'node:stream/promises';
+import {run} from './lifecycle.mjs';
+export function capture(command,args,{timeout=15000,...options}={}) {
+ return new Promise((resolve,reject)=>{
+  const child=spawn(command,args,{stdio:['ignore','pipe','pipe'],...options});let stdout='',stderr='';
+  const timer=setTimeout(()=>{child.kill('SIGKILL');reject(new Error(path.basename(command)+' 检查超时'));},timeout);
+  child.stdout.on('data',chunk=>{if(stdout.length<65536)stdout+=chunk;});child.stderr.on('data',chunk=>{if(stderr.length<65536)stderr+=chunk;});
+  child.once('error',error=>{clearTimeout(timer);reject(error);});
+  child.once('exit',(code,signal)=>{clearTimeout(timer);code===0?resolve(stdout.trim()):reject(new Error(path.basename(command)+' 检查失败 ('+(signal??code)+'): '+stderr.slice(0,300)));});
+ });
+}
+export async function runtimeReady(node,npm) {
+ try{return await capture(node,['--version'])==='v24.19.0'&&/^\d+\.\d+\.\d+$/.test(await capture(node,[npm,'--version']));}catch{return false;}
+}
+export async function ensureRuntime(root,source,{runtimeSource=process.platform==='win32'?path.dirname(process.execPath):path.dirname(path.dirname(process.execPath))}={}) {
+ const manifest=JSON.parse(fs.readFileSync(path.join(source,'node-runtime.json'),'utf8'));
+ const runtime=path.join(root,'runtime',`node-v${manifest.version}-${process.platform}-${process.arch}`);
+ const node=path.join(runtime,process.platform==='win32'?'node.exe':'bin/node');
+ const npm=path.join(runtime,process.platform==='win32'?'node_modules/npm/bin/npm-cli.js':'lib/node_modules/npm/bin/npm-cli.js');
+ if(await runtimeReady(node,npm)){console.log('环境检查：私有 Node.js / npm 正常。');return {runtime,node,npm};}
+ console.log('环境检查：正在自动补齐私有 Node.js / npm，不修改系统环境。');
+ const sourceNode=path.join(runtimeSource,process.platform==='win32'?'node.exe':'bin/node');
+ const sourceNpm=path.join(runtimeSource,process.platform==='win32'?'node_modules/npm/bin/npm-cli.js':'lib/node_modules/npm/bin/npm-cli.js');
+ const same=fs.existsSync(runtime)&&fs.realpathSync(runtimeSource)===fs.realpathSync(runtime);
+ if(!same&&await runtimeReady(sourceNode,sourceNpm)){
+  fs.mkdirSync(path.dirname(runtime),{recursive:true,mode:0o700});fs.cpSync(runtimeSource,runtime,{recursive:true,force:true,verbatimSymlinks:true});
+ }else{
+  const key=(process.platform==='win32'?'win':process.platform)+'-'+process.arch,target=manifest.platforms[key];
+  if(!target)throw new Error('不支持的系统或处理器：'+key);
+  const temporary=fs.mkdtempSync(path.join(root,'.runtime-repair-'));
+  try{
+   const archive=path.join(temporary,target.filename),url=`https://nodejs.org/dist/v${manifest.version}/${target.filename}`;
+   const response=await fetch(url,{signal:AbortSignal.timeout(120000)});if(!response.ok||!response.body)throw new Error('官方下载失败 HTTP '+response.status);
+   await pipeline(Readable.fromWeb(response.body),fs.createWriteStream(archive,{mode:0o600}));
+   const hash=createHash('sha256');for await(const data of fs.createReadStream(archive))hash.update(data);
+   if(hash.digest('hex')!==target.sha256)throw new Error('Node.js 官方运行环境校验失败，请检查网络后重试。');
+   if(process.platform==='win32'){
+    const ps=value=>"'"+value.replace(/'/g,"''")+"'";
+    await run('powershell.exe',['-NoProfile','-NonInteractive','-Command',`Expand-Archive -LiteralPath ${ps(archive)} -DestinationPath ${ps(temporary)} -Force`]);
+   }else await run('tar',['-xzf',archive,'-C',temporary]);
+   const extracted=path.join(temporary,target.filename.replace(/\.zip$|\.tar\.gz$/,''));
+   fs.mkdirSync(path.dirname(runtime),{recursive:true,mode:0o700});
+   const activeNode=process.platform==='win32'&&fs.existsSync(node)&&fs.realpathSync(node)===fs.realpathSync(process.execPath);
+   fs.cpSync(extracted,runtime,{recursive:true,force:true,verbatimSymlinks:true,filter:file=>!activeNode||path.resolve(file)!==path.join(extracted,'node.exe')});
+  }finally{fs.rmSync(temporary,{recursive:true,force:true});}
+ }
+ if(!await runtimeReady(node,npm))throw new Error('无法准备私有 Node.js/npm。请检查可写权限与 nodejs.org 网络访问后重试。');
+ return {runtime,node,npm};
+}
+export async function probeModules(release) {
+ const require=createRequire(path.join(release,'package.json'));
+ const entry=path.join(release,'node_modules','@wonderwhy-er','desktop-commander','dist','index.js');if(!fs.existsSync(entry))throw new Error('Desktop Commander 入口缺失');
+ for(const name of ['@modelcontextprotocol/sdk/client/index.js','@modelcontextprotocol/sdk/client/stdio.js','ws','@vscode/ripgrep'])if(!fs.existsSync(require.resolve(name)))throw new Error(name+' 文件缺失');
+ const {Client}=await import(pathToFileURL(require.resolve('@modelcontextprotocol/sdk/client/index.js')));
+ const {StdioClientTransport}=await import(pathToFileURL(require.resolve('@modelcontextprotocol/sdk/client/stdio.js')));
+ const WebSocket=require('ws');if(typeof Client!=='function'||typeof StdioClientTransport!=='function'||typeof WebSocket!=='function')throw new Error('SDK/WebSocket 依赖异常');
+ const {rgPath}=await import(pathToFileURL(require.resolve('@vscode/ripgrep')));
+ if(!/^ripgrep\s/.test(await capture(rgPath,['--version'])))throw new Error('平台搜索工具 ripgrep 不可执行');
+ return {Client,StdioClientTransport,entry};
+}
+export async function prepareDependencies({node,npm,release,force=false}) {
+ const hash=createHash('sha256').update(fs.readFileSync(path.join(release,'package.json'))).update(fs.readFileSync(path.join(release,'package-lock.json'))).digest('hex');
+ const marker=path.join(release,'.dependencies.sha256');let previous;try{previous=fs.readFileSync(marker,'utf8');}catch{}
+ let needsInstall=force||hash!==previous;
+ if(!needsInstall)try{await probeDependencyProcess(node,release);}catch{needsInstall=true;}
+ if(needsInstall){
+  console.log('环境检查：自动安装或修复本地工具依赖，首次运行需要联网……');
+  try{await run(node,[npm,'ci','--omit=dev','--ignore-scripts','--no-fund','--no-audit'],{cwd:release,env:{...process.env,PATH:path.dirname(node)+path.delimiter+(process.env.PATH??'')}});}
+  catch{throw new Error('依赖自动安装失败。请确认安装目录可写，并能访问 registry.npmjs.org，然后重试。');}
+ }
+ await probeDependencyProcess(node,release);fs.writeFileSync(marker,hash,{mode:0o600});
+ console.log('环境检查：SDK、WebSocket、Desktop Commander 和本机搜索工具正常。');
+ return {installed:needsInstall};
+}
+const probePath=fileURLToPath(new URL('./environment-probe.mjs',import.meta.url));
+async function probeDependencyProcess(node,release){await capture(node,[probePath,'dependencies',release],{timeout:30000});}
+export async function verifyLocalTools({node,release,workingDirectory}){
+ const output=await capture(node,[probePath,'tools',release,workingDirectory],{timeout:70000});console.log(output);return Number(output.match(/(\d+) 个工具/)?.[1]);
+}
+export async function verifyLocalToolsInProcess({node,release,workingDirectory}) {
+ console.log('正在验证本地工具可以实际执行……');
+ const {Client,StdioClientTransport,entry}=await probeModules(release);
+ const client=new Client({name:'desktop-bridge-install-check',version:'0.2.7'},{capabilities:{}});
+ const transport=new StdioClientTransport({command:node,args:[entry],cwd:workingDirectory,stderr:'pipe'});
+ try{
+  const connecting=client.connect(transport,{timeout:30000});transport.stderr?.on('data',()=>{});await connecting;
+  const listed=await client.listTools({}, {timeout:15000});if(!listed.tools.length)throw new Error('本地工具列表为空');
+  const probe=listed.tools.find(tool=>['get_config','list_sessions'].includes(tool.name));if(!probe)throw new Error('本地工具缺少安全健康检查接口');
+  const result=await client.callTool({name:probe.name,arguments:{}},undefined,{timeout:15000});if(result.isError)throw new Error('本地工具执行检查未通过');
+  console.log('本地工具验证通过：'+listed.tools.length+' 个工具，实际调用正常。');return listed.tools.length;
+ }finally{await client.close();}
+}

package/dist/client/install-options.mjs

@@ -0,0 +1,43 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {createInterface} from 'node:readline/promises';
+import {startupFile} from './lifecycle.mjs';
+export function parseInstallerOptions(args) {
+ const options={};
+ const switches={'--repair':'repair','--no-browser':'noBrowser','--no-start':'noStart','--stop':'stop','--uninstall':'uninstall','--purge':'purge','--administrator':'administrator'};
+ for(let i=0;i<args.length;i++){
+  const flag=args[i];
+  if(flag==='--root'||flag==='--mode'){
+   const value=args[++i];if(!value||value.startsWith('--'))throw new Error(flag+' requires a value');
+   const key=flag.slice(2);if(options[key]&&options[key]!==value)throw new Error('Conflicting '+flag+' values');options[key]=value;
+  }else if(switches[flag])options[switches[flag]]=true;
+  else throw new Error('Unknown option: '+flag);
+ }
+ if(options.mode&&!['manual','background'].includes(options.mode))throw new Error('--mode must be manual or background');
+ if(options.noStart&&options.mode==='background')throw new Error('--no-start selects manual mode and conflicts with --mode background');
+ if(options.noStart)options.mode='manual';
+ if(options.administrator&&(options.stop||options.uninstall))throw new Error('Administrator maintenance uses admin-elevate.mjs, not normal uninstall/stop.');
+ if(options.purge&&!options.uninstall)throw new Error('--purge requires --uninstall');
+ if(options.stop&&options.uninstall)throw new Error('--stop and --uninstall cannot be combined');
+ if((options.stop||options.uninstall)&&(options.mode||options.repair))throw new Error('Maintenance actions cannot be combined with --mode, --no-start or --repair');
+ return options;
+}
+export function savedMode(root) {
+ try{const mode=JSON.parse(fs.readFileSync(path.join(root,'client-settings.json'),'utf8')).mode;if(['manual','background'].includes(mode))return mode;throw new Error('Invalid saved mode');}
+ catch(error){if(error.code!=='ENOENT')throw new Error('Cannot read saved client mode: '+error.message);}
+ // Preserve the actual choice of installations created before settings existed.
+ if(fs.existsSync(path.join(root,'.desktop-bridge-client'))||fs.existsSync(path.join(root,'agent-config.json')))return fs.existsSync(startupFile(root))?'background':'manual';
+}
+export async function chooseMode(options,{previous,interactive=!!(process.stdin.isTTY&&process.stdout.isTTY),ask}={}) {
+ if(options.stop||options.uninstall)return;
+ if(options.mode)return options.mode;
+ if(!interactive)throw new Error('请选择运行模式：非交互式安装必须提供 --mode manual 或 --mode background。--no-start 等同手动模式。');
+ let readline;
+ if(!ask){readline=createInterface({input:process.stdin,output:process.stdout});ask=question=>readline.question(question);}
+ try{
+  for(;;){
+   const answer=(await ask('请选择 Desktop Bridge 的运行方式：\n  1) 手动模式 manual：使用时运行启动命令，保持窗口，Ctrl+C 结束。\n  2) 后台模式 background：现在后台运行，登录系统后自动启动。\n输入 1 或 2（必须选择，回车不使用默认值）: ')).trim().toLowerCase();
+   if(['1','manual'].includes(answer))return 'manual';if(['2','background'].includes(answer))return 'background';
+  }
+ }finally{readline?.close();}
+}

package/dist/client/install.mjs

@@ -0,0 +1,84 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import {fileURLToPath} from 'node:url';
+import {execFileSync} from 'node:child_process';
+import {ensureRuntime,prepareDependencies,verifyLocalTools} from './environment.mjs';
+import {parseInstallerOptions,chooseMode,savedMode} from './install-options.mjs';
+import {setMode,commandFor,writeInstructions} from './startup.mjs';
+import {elevationRequest} from './admin-elevate.mjs';
+import {dataRoot,run,acquireLock,releaseLock,stopClient,removeStartup} from './lifecycle.mjs';
+const source=path.dirname(fileURLToPath(import.meta.url));
+const options=parseInstallerOptions(process.argv.slice(2));
+const root=path.resolve(options.root??dataRoot());
+const previousSettings=fs.existsSync(path.join(root,'client-settings.json'))?JSON.parse(fs.readFileSync(path.join(root,'client-settings.json'),'utf8')):{};
+if(previousSettings.privilege==='administrator'&&(options.stop||options.uninstall))throw new Error('Administrator installation uses the installed control/administrator uninstall helper; user-mode cleanup would leave the protected service active.');
+const adminRequested=!!(options.administrator||previousSettings.privilege==='administrator');
+const mode=await chooseMode(options,{previous:options.stop||options.uninstall?undefined:savedMode(root)});
+if(root===path.parse(root).root||root===os.homedir()||root===source||source.startsWith(root+path.sep))throw new Error('Choose a dedicated client data directory.');
+fs.mkdirSync(root,{recursive:true,mode:0o700});if(process.platform!=='win32')fs.chmodSync(root,0o700);
+const installLock=path.join(root,'install-lock');
+if(!acquireLock(installLock))throw new Error('Another client maintenance operation is running.');
+process.on('exit',()=>releaseLock(installLock));
+if(process.platform==='win32'){
+  // SSH can set USERDOMAIN to WORKGROUP. Resolve the actual Windows token SID.
+  const account=execFileSync('whoami.exe',['/user','/fo','csv','/nh'],{encoding:'utf8',windowsHide:true});
+  const sid=account.match(/\bS-1-\d+(?:-\d+)+\b/)?.[0];
+  if(!sid)throw new Error('Cannot identify the signed-in Windows account SID.');
+  const identity='*'+sid;
+  // Change only the root ACL. Recursive /inheritance:r clears file ACLs on Windows.
+  await run('icacls.exe',[root,'/inheritance:r','/grant:r',identity+':(OI)(CI)F','*S-1-5-18:(OI)(CI)F','/Q']);
+}
+if(options.uninstall&&!fs.existsSync(path.join(root,'.desktop-bridge-client'))){
+ let legacy;try{legacy=JSON.parse(fs.readFileSync(path.join(root,'agent-config.json'),'utf8'));}catch{}
+ if(!legacy?.mcpEntry||!legacy?.runtimeDir)throw new Error('This directory is not a recognized client installation.');
+}
+await stopClient(root);
+if(options.stop){console.log('Client stopped. Use your installed Start shortcut or control.mjs start to resume.');process.exit(0);}
+if(options.uninstall){
+  await removeStartup(root);
+  // Keep credentials and result journal by default so a reinstall can recover them.
+  for(const name of ['releases','runtime','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','windows-background.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','launch.json','run-client.cmd','heartbeat.json','START-HERE.txt','Start.cmd','Stop.cmd','RePair.cmd','Start.command','Stop.command','start.sh','stop.sh','launch.sh','control.ps1'])fs.rmSync(path.join(root,name),{recursive:true,force:true});
+  if(options.purge){releaseLock(installLock);fs.rmSync(root,{recursive:true,force:true});}
+  console.log('Client uninstalled. Revoke the device in device management to unlink it.');process.exit(0);
+}
+fs.writeFileSync(path.join(root,'.desktop-bridge-client'),'desktop-bridge-client\n',{mode:0o600});
+if(process.versions.node.split('.')[0]!=='24')throw new Error('Use Install.cmd, Install.command or Install.sh to prepare the supported Node 24 runtime.');
+const {node,npm}=await ensureRuntime(root,source);
+const release=path.join(root,'releases','0.2.7'),configPath=path.join(root,'agent-config.json');
+fs.mkdirSync(release,{recursive:true,mode:0o700});
+for(const file of ['package.json','package-lock.json'])fs.copyFileSync(path.join(source,file),path.join(release,file));
+const agentSource=fs.existsSync(path.join(source,'agent'))?path.join(source,'agent'):path.join(source,'..','agent');
+fs.cpSync(agentSource,path.join(release,'agent'),{recursive:true,force:true});
+for(const file of ['runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','windows-background.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','Start.cmd','Stop.cmd','RePair.cmd','Start.command','Stop.command','start.sh','stop.sh','launch.sh','control.ps1'])fs.copyFileSync(path.join(source,file),path.join(root,file));
+await prepareDependencies({node,npm,release,force:!!options.repair});
+try{await verifyLocalTools({node,release,workingDirectory:root});}
+catch{
+ console.log('本地工具验证未通过，正在自动重新安装依赖后重试一次……');
+ await prepareDependencies({node,npm,release,force:true});
+ try{await verifyLocalTools({node,release,workingDirectory:root});}
+ catch{throw new Error('本地工具仍无法执行，安装尚未完成。请检查目录权限、安全软件或网络后重试；客户端保持停止状态。');}
+}
+let config=JSON.parse(fs.readFileSync(fs.existsSync(configPath)?configPath:path.join(source,'connection.json'),'utf8').replace(/^\uFEFF/,''));
+config={...config,runtimeDir:release,mcpEntry:path.join(release,'node_modules','@wonderwhy-er','desktop-commander','dist','index.js'),defaultShell:process.platform==='win32'?'powershell.exe':process.platform==='darwin'?'/bin/zsh':'/bin/bash'};
+fs.writeFileSync(configPath,JSON.stringify(config,null,2),{mode:0o600});
+fs.rmSync(path.join(root,'maintenance.flag'),{force:true});
+const pairArgs=[path.join(release,'agent','agent.mjs'),configPath,'--setup-only'];
+if(options.repair)pairArgs.push('--pair');if(options.noBrowser)pairArgs.push('--no-browser');
+try{await run(node,pairArgs);}catch(error){fs.writeFileSync(path.join(root,'maintenance.flag'),'pairing failed',{mode:0o600});throw error;}
+fs.writeFileSync(path.join(root,'launch.json'),JSON.stringify({node,agent:path.join(release,'agent','agent.mjs'),config:configPath}),{mode:0o600});
+await setMode(root,node,adminRequested?'manual':mode);
+if(adminRequested){
+  // Pair before privilege elevation. The protected service is never installed
+  // until the OS shows a UAC/sudo prompt and the user explicitly approves it.
+  const helper=path.join(root,'admin-elevate.mjs');
+  const request=elevationRequest('install',{source:root,mode});
+  await run(request.command,request.args);
+  fs.writeFileSync(path.join(root,'client-settings.json'),JSON.stringify({mode,privilege:'administrator',version:'0.2.7'},null,2),{mode:0o600});
+  writeInstructions(root,node,mode,'administrator');
+}
+console.log(adminRequested?'管理员运行已授权并配置：'+mode+'。':mode==='manual'?'安装和配对完成：手动模式。使用时运行启动命令，保持窗口，按 Ctrl+C 结束；没有后台实例或登录自启。':'安装和配对完成：后台模式。客户端现在后台运行，登录系统后自动启动。');
+console.log('启动命令： '+commandFor(node,root,'start'));
+console.log('停止命令： '+commandFor(node,root,'stop'));
+console.log('使用说明： '+path.join(root,'START-HERE.txt'));
+console.log('设备管理： '+config.serverUrl);

package/dist/client/install.ps1

@@ -0,0 +1,108 @@
+param([switch]$Repair,[switch]$NoBrowser,[switch]$NoStart,[switch]$Stop,[switch]$Uninstall,[switch]$Purge,[string]$DataDirectory,[string]$Mode,[switch]$Administrator)
+$ErrorActionPreference = 'Stop'
+# Validate every portable option before downloading or changing the installation.
+for ($i = 0; $i -lt $args.Count; $i++) {
+    switch ($args[$i]) {
+        '--repair' { $Repair = $true }
+        '--administrator' { $Administrator = $true }
+        '--no-browser' { $NoBrowser = $true }
+        '--no-start' { $NoStart = $true }
+        '--stop' { $Stop = $true }
+        '--uninstall' { $Uninstall = $true }
+        '--purge' { $Purge = $true }
+        '--mode' {
+            $i++
+            if ($i -ge $args.Count -or !$args[$i] -or $args[$i].StartsWith('--')) { throw '--mode 缺少 manual 或 background 参数值。' }
+            if ($Mode -and $Mode -ne $args[$i]) { throw '不能同时指定不同的 --mode。' }
+            $Mode = $args[$i]
+        }
+        '--root' {
+            $i++
+            if ($i -ge $args.Count -or !$args[$i] -or $args[$i].StartsWith('--')) { throw '--root 缺少目录参数值。' }
+            $DataDirectory = $args[$i]
+        }
+        default { throw ('未知参数：' + $args[$i]) }
+    }
+}
+if ($PSBoundParameters.ContainsKey('Mode') -and !$Mode) { throw '-Mode 缺少 manual 或 background 参数值。' }
+if ($PSBoundParameters.ContainsKey('DataDirectory') -and !$DataDirectory) { throw '-DataDirectory 缺少目录参数值。' }
+if ($Mode -and $Mode -cnotin @('manual','background')) { throw '--mode 只能是 manual 或 background。' }
+if ($NoStart -and $Mode -eq 'background') { throw '--no-start 不能与 --mode background 同时使用。' }
+if ($Stop -and $Uninstall) { throw '--stop 不能与 --uninstall 同时使用。' }
+if ($Purge -and !$Uninstall) { throw '--purge 必须与 --uninstall 一起使用。' }
+if ($PSVersionTable.PSVersion -lt [version]'5.1') { throw '需要 Windows PowerShell 5.1 或更新版本。' }
+$ProgressPreference = 'SilentlyContinue'
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+try { $metadata = Get-Content (Join-Path $PSScriptRoot 'node-runtime.json') -Raw | ConvertFrom-Json }
+catch { throw '无法读取官方 Node 环境清单，请重新解压完整的插件安装包。' }
+if ($metadata.version -ne '24.19.0') { throw 'Node 环境清单版本无效，需要 24.19.0。' }
+$processor = if ($env:PROCESSOR_ARCHITEW6432) { $env:PROCESSOR_ARCHITEW6432 } else { $env:PROCESSOR_ARCHITECTURE }
+if (!$processor) { throw '无法识别 Windows 处理器架构。' }
+$arch = switch ($processor.ToUpperInvariant()) { 'ARM64' { 'arm64' } 'AMD64' { 'x64' } default { throw '支持的处理器：x64 和 ARM64。' } }
+$entry = $metadata.platforms.('win-' + $arch)
+if (!$entry -or $entry.filename -ne ('node-v24.19.0-win-' + $arch + '.zip') -or $entry.sha256 -cnotmatch '^[0-9a-f]{64}$') { throw '官方 Node 下载清单缺失或损坏，请重新解压安装包。' }
+if (!$DataDirectory -and !$env:LOCALAPPDATA) { throw '无法识别当前用户数据目录，请通过 -DataDirectory 指定专用目录。' }
+$dataRoot = if ($DataDirectory) { $DataDirectory } else { Join-Path $env:LOCALAPPDATA 'DesktopBridgeClient' }
+$runtime = Join-Path $dataRoot ('runtime\node-v' + $metadata.version + '-win32-' + $arch)
+$existingNode = Join-Path $runtime 'node.exe'
+$existingNpm = Join-Path $runtime 'node_modules\npm\bin\npm-cli.js'
+function Test-PrivateRuntime([string]$Node, [string]$Npm) {
+    if (!(Test-Path -LiteralPath $Node -PathType Leaf) -or !(Test-Path -LiteralPath $Npm -PathType Leaf)) { return $false }
+    try {
+        $version = & $Node --version 2>$null
+        if ($LASTEXITCODE -ne 0 -or $version -cne ('v' + $metadata.version)) { return $false }
+        $npmVersion = & $Node $Npm --version 2>$null
+        return $LASTEXITCODE -eq 0 -and $npmVersion -match '^\d+\.\d+\.\d+(?:[-+].*)?$'
+    } catch { return $false }
+}
+$useExisting = Test-PrivateRuntime $existingNode $existingNpm
+$installArgs = @((Join-Path $PSScriptRoot 'install.mjs'))
+if ($Administrator) { $installArgs += '--administrator' }; if ($Repair) { $installArgs += '--repair' }; if ($NoBrowser) { $installArgs += '--no-browser' }; if ($NoStart) { $installArgs += '--no-start' }
+if ($Stop) { $installArgs += '--stop' }; if ($Uninstall) { $installArgs += '--uninstall' }; if ($Purge) { $installArgs += '--purge' }
+if ($DataDirectory) { $installArgs += @('--root',$DataDirectory) }
+if ($Mode) { $installArgs += @('--mode',$Mode) }
+if ($useExisting -and !$Uninstall -and !$Stop) {
+    & $existingNode @installArgs
+    if ($LASTEXITCODE -ne 0) { throw '客户端操作失败，请查看上方诊断后重试。' }
+    exit 0
+}
+if (!$useExisting) {
+    if (Test-Path -LiteralPath $runtime) { Write-Host '私有 Node 或 npm 无法正常运行，将下载校验后的官方环境进行修复。' }
+    foreach ($tool in @('Invoke-WebRequest','Get-FileHash','Expand-Archive')) {
+        if (!(Get-Command $tool -ErrorAction SilentlyContinue)) { throw ('缺少 PowerShell 原生组件 ' + $tool + '，尚未开始下载。请修复 Windows PowerShell 5.1。') }
+    }
+}
+# Give only the current Windows user access before placing any runtime files here.
+$temp = Join-Path ([IO.Path]::GetTempPath()) ('desktop-bridge-' + [Guid]::NewGuid().ToString('N'))
+try {
+    try {
+        $sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
+        $acl = New-Object System.Security.AccessControl.DirectorySecurity
+        $acl.SetOwner($sid)
+        $acl.SetAccessRuleProtection($true,$false)
+        $rule = New-Object System.Security.AccessControl.FileSystemAccessRule($sid,'FullControl','ContainerInherit,ObjectInherit','None','Allow')
+        $acl.AddAccessRule($rule)
+        if ($PSVersionTable.PSEdition -eq 'Desktop') { [IO.Directory]::CreateDirectory($temp,$acl) | Out-Null }
+        else { [IO.FileSystemAclExtensions]::CreateDirectory([IO.DirectoryInfo]::new($temp),$acl) | Out-Null }
+    } catch { throw '无法创建仅当前用户可访问的临时目录，请检查临时目录权限和磁盘空间。' }
+    if ($useExisting) {
+        # Maintenance must not run from the executable that uninstall removes.
+        $node = Join-Path $temp 'node.exe'
+        Copy-Item -LiteralPath $existingNode -Destination $node
+    } else {
+        $archive = Join-Path $temp 'runtime.zip'
+        Write-Host '正在准备经过 SHA-256 校验的官方 Node 24.19.0 环境…'
+        try { Invoke-WebRequest -UseBasicParsing ('https://nodejs.org/dist/v' + $metadata.version + '/' + $entry.filename) -OutFile $archive -TimeoutSec 60 }
+        catch { throw '官方环境下载失败，请检查网络、HTTPS 证书或代理设置。' }
+        try { $actual = (Get-FileHash -LiteralPath $archive -Algorithm SHA256).Hash.ToLowerInvariant() }
+        catch { throw '无法读取下载文件进行 SHA-256 校验，请检查文件权限。' }
+        if ($actual -cne $entry.sha256) { throw '官方 Node 环境校验失败（checksum mismatch），已拒绝执行。' }
+        try { Expand-Archive -LiteralPath $archive -DestinationPath $temp }
+        catch { throw '官方环境解压失败，请检查压缩包、磁盘空间和临时目录权限。' }
+        $node = Join-Path $temp ('node-v' + $metadata.version + '-win-' + $arch + '\node.exe')
+        $npm = Join-Path (Split-Path $node -Parent) 'node_modules\npm\bin\npm-cli.js'
+        if (!(Test-PrivateRuntime $node $npm)) { throw '下载的 Node 或 npm 无法运行，请检查系统架构、执行权限并重新下载。' }
+    }
+    & $node @installArgs
+    if ($LASTEXITCODE -ne 0) { throw '客户端操作失败，请查看上方诊断后重试。' }
+} finally { if (Test-Path -LiteralPath $temp) { Remove-Item -LiteralPath $temp -Recurse -Force -ErrorAction SilentlyContinue } }

package/dist/client/launch.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+set -eu
+SOURCE=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+ACTION=$1
+shift
+if [ -f "$SOURCE/.desktop-bridge-client" ]; then DATA_ROOT=$SOURCE
+elif [ "$(uname -s)" = Darwin ]; then DATA_ROOT="$HOME/Library/Application Support/DesktopBridge"
+else DATA_ROOT="${XDG_DATA_HOME:-$HOME/.local/share}/desktop-bridge"; fi
+NEXT_ROOT=0
+for ARG in "$@"; do
+ if [ "$NEXT_ROOT" = 1 ]; then DATA_ROOT=$ARG; NEXT_ROOT=0; elif [ "$ARG" = --root ]; then NEXT_ROOT=1; fi
+done
+case "$(uname -s)" in Darwin) PLATFORM=darwin;; Linux) PLATFORM=linux;; *) echo 'Use Start.cmd on Windows.' >&2; exit 1;; esac
+case "$(uname -m)" in x86_64|amd64) ARCH=x64;; arm64|aarch64) ARCH=arm64;; *) echo 'Unsupported processor.' >&2; exit 1;; esac
+NODE="$DATA_ROOT/runtime/node-v24.19.0-$PLATFORM-$ARCH/bin/node"
+[ -x "$NODE" ] && [ -f "$DATA_ROOT/control.mjs" ] || { echo 'Install Desktop Bridge first.' >&2; exit 1; }
+exec "$NODE" "$DATA_ROOT/control.mjs" "$ACTION" "$@"

package/dist/client/lifecycle.mjs

@@ -0,0 +1,47 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+export const sleep=ms=>new Promise(resolve=>setTimeout(resolve,ms));
+export function dataRoot(platform=process.platform,env=process.env,home=os.homedir()) {
+  return platform==='win32'?path.join(env.LOCALAPPDATA??path.join(home,'AppData','Local'),'DesktopBridgeClient'):platform==='darwin'?path.join(home,'Library','Application Support','DesktopBridge'):path.join(env.XDG_DATA_HOME??path.join(home,'.local','share'),'desktop-bridge');
+}
+export function run(command,args,options={}) {
+  return new Promise((resolve,reject)=>{const child=spawn(command,args,{stdio:'inherit',...options});child.once('error',reject);child.once('exit',(code,signal)=>code===0?resolve():reject(new Error(`${path.basename(command)} failed (${signal??code})`)));});
+}
+export function livePid(file) {
+  try {const pid=Number(fs.readFileSync(file,'utf8'));if(!Number.isInteger(pid)||pid<1)return false;try{process.kill(pid,0);return true;}catch(error){return error.code!=='ESRCH';}}catch{return false;}
+}
+export function acquireLock(directory) {
+  try{fs.mkdirSync(directory,{mode:0o700});}catch(error){
+    if(error.code!=='EEXIST')throw error;
+    // A just-created lock may not have a PID yet. Never steal it during this window.
+    if(livePid(path.join(directory,'pid'))||Date.now()-fs.statSync(directory).mtimeMs<30000)return false;
+    try{fs.rmSync(directory,{recursive:true});fs.mkdirSync(directory,{mode:0o700});}catch(error){if(error.code==='EEXIST')return false;throw error;}
+  }
+  fs.writeFileSync(path.join(directory,'pid'),String(process.pid),{mode:0o600});return true;
+}
+export function releaseLock(directory) {try{if(fs.readFileSync(path.join(directory,'pid'),'utf8')===String(process.pid))fs.rmSync(directory,{recursive:true});}catch{}}
+export async function stopClient(root,{timeout=20000}={}) {
+  fs.writeFileSync(path.join(root,'maintenance.flag'),'stopped',{mode:0o600});
+  const deadline=Date.now()+timeout;
+  while(livePid(path.join(root,'runner-lock','pid'))||livePid(path.join(root,'agent.lock'))){
+    if(Date.now()>deadline)throw new Error('Client is still stopping. Retry after it exits.');
+    await sleep(200);
+  }
+  fs.rmSync(path.join(root,'runner-lock'),{recursive:true,force:true});
+  fs.rmSync(path.join(root,'agent.lock'),{force:true});
+}
+export function startupFile(root,platform=process.platform,env=process.env,home=os.homedir()) {
+  return platform==='win32'?path.join(env.APPDATA??path.join(home,'AppData','Roaming'),'Microsoft','Windows','Start Menu','Programs','Startup','Desktop Bridge.lnk'):platform==='darwin'?path.join(home,'Library','LaunchAgents','de.desktopbridge.agent.plist'):path.join(env.XDG_CONFIG_HOME??path.join(home,'.config'),'autostart','desktop-bridge.desktop');
+}
+export async function removeStartup(root) {
+  if(process.platform==='win32'){
+    const {windowsBackground}=await import('./windows-background.mjs');
+    await windowsBackground('remove',root);
+    return; // The Windows helper removes only a shortcut owned by this root.
+  }
+  const file=startupFile(root);
+  if(process.platform==='darwin'&&fs.existsSync(file))try{await run('launchctl',['bootout','gui/'+process.getuid(),file],{stdio:'ignore'});}catch{}
+  fs.rmSync(file,{force:true});
+}

package/dist/client/node-runtime.json

@@ -0,0 +1,30 @@
+{
+  "version": "24.19.0",
+  "source": "https://nodejs.org/dist/v24.19.0/SHASUMS256.txt",
+  "platforms": {
+    "win-x64": {
+      "filename": "node-v24.19.0-win-x64.zip",
+      "sha256": "57f71ab3652e797d84acddc79c81cc9ff1c6ddb2a1974cdb83f00fee9bff4c73"
+    },
+    "win-arm64": {
+      "filename": "node-v24.19.0-win-arm64.zip",
+      "sha256": "8502f4a50b458d4cc38ed8f2001556c2cd239d464920f74017926ccb1e1c157f"
+    },
+    "darwin-x64": {
+      "filename": "node-v24.19.0-darwin-x64.tar.gz",
+      "sha256": "d1b5e999db158c62fe8f7267a4476b035d8bd93b1a605bac24a3f0dd166e3316"
+    },
+    "darwin-arm64": {
+      "filename": "node-v24.19.0-darwin-arm64.tar.gz",
+      "sha256": "8294b7aa9b03997481c06babf1e8b270c859358f27da57a11509afe537ac381d"
+    },
+    "linux-x64": {
+      "filename": "node-v24.19.0-linux-x64.tar.gz",
+      "sha256": "f625d97cd707df4ff96254916fbc5ff014f09c09effe5a1e0ca8f6d41a8789d4"
+    },
+    "linux-arm64": {
+      "filename": "node-v24.19.0-linux-arm64.tar.gz",
+      "sha256": "d28c8a5bf0a808f0ed434a1dce8c54ae98f0371c0bd86ac58abc613f73e6643f"
+    }
+  }
+}