@justlovepl/desktop-bridge 0.2.6 → 0.2.7

package/README.md

@@ -2,13 +2,14 @@
 
 Independent npm distribution for the Desktop Bridge **local device client**. It does not publish the upstream Desktop Commander package or cloud relay.
 
-**Status: development branch, not yet published or production validated.**
+Version 0.2.7 adds Windows Task Scheduler background management. npm remains the installation, upgrade and control entry point. **0.2.7 is currently a release candidate; public npm publication is pending the publisher account's one-time-password verification.**
 
 Requires Node.js 24 and npm. Native installers for computers without Node remain available at <https://mcp.ilovestudy.de/start.html>.
 
 ```sh
 npm install -g @justlovepl/desktop-bridge
-desktop-bridge setup               # must type 1 or 2; blank Enter prompts again
+desktop-bridge setup               # default: background, login startup enabled
+desktop-bridge setup --mode manual # explicitly choose foreground/manual operation
 desktop-bridge status
 desktop-bridge start
 desktop-bridge stop
@@ -20,18 +21,21 @@ desktop-bridge repair              # repairs AND re-pairs in the browser
 desktop-bridge uninstall           # preserves credentials/results unless --purge
 ```
 
-**The CLI installation itself never prompts or starts a service.** Each interactive `desktop-bridge setup` or reinstall must explicitly select `1` (manual) or `2` (background); pressing Enter without a choice repeats the prompt. For non-interactive setup, a startup mode is mandatory. No existing credential, Agent, or login startup configuration may change before the choice is validated.\n\nUse `desktop-bridge setup --mode manual` or `--mode background` in automated shells. `--administrator` requires explicit OS authorization and respects the existing protected service restrictions. `--root <directory>` selects a dedicated custom data directory. **There is no install/start action in npm postinstall**.
+**Installing the npm CLI does not start a service.** Run `desktop-bridge setup` to install/pair the client and select background operation by default. Use `--mode manual` for foreground operation; `--no-start` also selects manual mode. The native installers still ask the user to select a mode explicitly.
+
+On Windows, background mode registers a Task Scheduler task for the current user with limited privileges, starts it independently of the terminal/SSH session, and starts it again on user login. The task has no runtime time limit, allows battery operation, and restarts on failures. This mode requires that user to be logged into Windows; running before login is the separate administrator service option. `stop` leaves the task registered but stops the client; `start` resumes it; `mode manual` and `uninstall` remove it. An update migrates the old login shortcut to the managed task while preserving pairing and the saved mode.
+
+`--administrator` requires explicit OS authorization and respects the existing protected service restrictions. `--root <directory>` selects a dedicated custom data directory. **There is no install/start action in npm postinstall**.
 
 `desktop-bridge uninstall --purge` permanently deletes local credentials and result journals. Uninstalling locally does not revoke the server token; use device management at <https://mcp.ilovestudy.de/start.html> to revoke device authorization. Existing administrator service installations require the protected service's own approved uninstall flow.
 
 Update the npm CLI and then apply the local client release:
 
 ```sh
-npm update -g @justlovepl/desktop-bridge
-desktop-bridge setup
+desktop-bridge update
 ```
 
-`npm update` alone does not replace an already running agent. `desktop-bridge update` upgrades the CLI and Agent while explicitly passing the existing saved mode, with credential, mode, and task journal protection; routine update is not an interactive re-install. A new pairing still requires an explicit browser login and approval if the existing device authorization was revoked.
+`npm update` alone does not replace an already running agent. `desktop-bridge update` upgrades the CLI and Agent while explicitly passing the existing saved mode, with credential, mode, and task journal protection. It refuses to install a CLI older than the current version. `repair` also preserves the saved mode, but deliberately requires browser re-pairing approval. A revoked device always requires explicit new pairing.
 
 ## Packaging / tests
 

package/bin/desktop-bridge.mjs

@@ -51,13 +51,14 @@ export function parse(argv){
       }else if(!['--administrator','--no-browser','--no-start'].includes(a))throw new Error('Unknown setup option: '+a);
     }
   }
+  if(command==='setup'&&!remainder.includes('--mode')&&!remainder.includes('--no-start'))remainder.push('--mode','background');
   return {command,args:remainder,root:customRoot};
 }
 
 function usage(){
   return 'Desktop Bridge '+manifest.version+'\n\n'+
     'Usage: desktop-bridge <command> [options]\n\n'+
-    '  setup [--mode manual|background] [--administrator]  Install and pair\n'+
+    '  setup [--mode manual|background] [--administrator]  Install and pair (default: background)\n'+
     '  start | stop | restart                           Manage local agent\n'+
     '  status                                           Show local connection status\n'+
     '  pair                                             Re-pair in your browser\n'+
@@ -93,7 +94,10 @@ export async function main(argv=process.argv.slice(2)){
   if(parsed.command==='update')return performUpdate({root,packageRoot,packageName:manifest.name});
   if(parsed.command==='repair'){
     console.log('Repair also requires browser re-pairing approval.');
-    return childRun(installer,['--repair',...rootArgs]);
+    const {savedMode}=await import('../dist/client/install-options.mjs');
+    const mode=savedMode(root);
+    if(!mode)throw new Error('Cannot identify saved startup mode. Run setup --mode manual|background.');
+    return childRun(installer,['--repair','--mode',mode,...rootArgs]);
   }
   if(parsed.command==='uninstall'){
     const status=await childRun(installer,['--uninstall',...parsed.args,...rootArgs]);

package/bin/update.mjs

@@ -56,9 +56,13 @@ export async function performUpdate({
   const previousPrivilege=settings.privilege??'standard';
   const journalFile=path.join(root,'journal.json');
   const oldJournal=fs.existsSync(journalFile)?readJson(journalFile):null;
+  const installedPackage=readJson(path.join(packageRoot,'package.json'));
+  if(!/^\d+\.\d+\.\d+$/.test(installedPackage.version))throw new Error('Unsupported CLI version; refusing an unsafe update.');
   const npmCli=npmScript??findNpmCli();
   print('Updating npm CLI (device credentials and configuration are kept outside npm)...');
-  const npmStatus=await execute(process.execPath,[npmCli,'install','--global','--no-audit','--no-fund',packageName+'@latest']);
+  // A locally tested newer build must not silently downgrade to an older
+  // published client. npm resolves the newest matching stable release.
+  const npmStatus=await execute(process.execPath,[npmCli,'install','--global','--no-audit','--no-fund',packageName+'@>='+installedPackage.version]);
   if(npmStatus!==0)throw new Error('npm package update failed; local client was not reinstalled.');
   const packageFile=path.join(packageRoot,'package.json');
   const current=readJson(packageFile);

package/dist/client/admin-service.mjs

@@ -61,7 +61,7 @@ function flag(state) {
  fs.writeFileSync(path.join(root,'maintenance.flag'),state,{mode:0o600});
 }
 function settings(mode) {
- writePrivateJson(path.join(root,'client-settings.json'),{mode,privilege:'administrator',version:'0.2.6'});
+ writePrivateJson(path.join(root,'client-settings.json'),{mode,privilege:'administrator',version:'0.2.7'});
 }
 function relocate(source,mode) {
  const {base}=validateSource(source);
@@ -80,7 +80,7 @@ function relocate(source,mode) {
  const stage=path.join(parent,'.desktop-bridge-admin-stage-'+process.pid);
  const backup=path.join(parent,'.desktop-bridge-admin-backup-'+process.pid);
  fs.mkdirSync(stage,{mode:0o700});
- const selected=['.desktop-bridge-client','agent-config.json','launch.json','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','runtime','releases'];
+ const selected=['.desktop-bridge-client','agent-config.json','launch.json','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','windows-background.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','runtime','releases'];
  try{
    for(const entry of selected){const file=path.join(base,entry);if(fs.existsSync(file))copyTreeSafe(file,path.join(stage,entry));}
    const oldConfig=fs.existsSync(path.join(root,'agent-config.json'))?JSON.parse(fs.readFileSync(path.join(root,'agent-config.json'),'utf8')):null;
@@ -93,7 +93,7 @@ function relocate(source,mode) {
      const previous=path.join(root,name);if(fs.existsSync(previous))copyTreeSafe(previous,path.join(stage,name));
      else if(fs.existsSync(path.join(base,name)))copyTreeSafe(path.join(base,name),path.join(stage,name));
    }
-   writePrivateJson(path.join(stage,'client-settings.json'),{mode,privilege:'administrator',version:'0.2.6'});
+   writePrivateJson(path.join(stage,'client-settings.json'),{mode,privilege:'administrator',version:'0.2.7'});
    fs.writeFileSync(path.join(stage,'maintenance.flag'),'installing',{mode:0o600});
    secureTree(stage);
    if(fs.existsSync(root))fs.renameSync(root,backup);
@@ -146,7 +146,7 @@ if(action==='install'){
  if(value&&value!=='--purge')throw new Error('Only --purge is accepted for uninstall');
  if(purge)fs.rmSync(root,{recursive:true,force:true});
  else{
-   for(const entry of ['runtime','releases','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','launch.json'])fs.rmSync(path.join(root,entry),{recursive:true,force:true});
+   for(const entry of ['runtime','releases','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','windows-background.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','launch.json'])fs.rmSync(path.join(root,entry),{recursive:true,force:true});
  }
  console.log('Administrator service uninstalled. Device revocation is separate.');
 }

package/dist/client/agent/agent.mjs

@@ -106,7 +106,7 @@ const requireRuntime=createRequire(path.join(config.runtimeDir,'package.json'));
 const {Client}=await import(pathToFileURL(requireRuntime.resolve('@modelcontextprotocol/sdk/client/index.js')));
 const {StdioClientTransport}=await import(pathToFileURL(requireRuntime.resolve('@modelcontextprotocol/sdk/client/stdio.js')));
 const WebSocket=requireRuntime('ws');
-const client=new Client({name:'personal-desktop-bridge-agent',version:'0.2.6'},{capabilities:{}});
+const client=new Client({name:'personal-desktop-bridge-agent',version:'0.2.7'},{capabilities:{}});
 const transport=new StdioClientTransport({command:process.execPath,args:[config.mcpEntry],cwd:config.workingDirectory??directory,env:{...process.env},stderr:'pipe'});
 let ws,retryTimer,stopping=false,attempt=0,localHealthy=false,checkingHealth=false,healthFailures=0,remoteStopping=false;
 const heartbeatPath=path.join(directory,'heartbeat.json');
@@ -221,7 +221,7 @@ function connect() {
   let lastSeen=Date.now(),welcomed=false;
   const heartbeat=setInterval(()=>{if(Date.now()-lastSeen>65000)socket.terminate();},15000);
   socket.on('ping',()=>lastSeen=Date.now());
-  socket.on('open',()=>{send(socket,{type:'hello',protocol:2,deviceId:config.deviceId,tools,capabilities:{shutdown:true},version:'0.2.6',platform:process.platform});});
+  socket.on('open',()=>{send(socket,{type:'hello',protocol:2,deviceId:config.deviceId,tools,capabilities:{shutdown:true},version:'0.2.7',platform:process.platform});});
   socket.on('message',data=>{
     lastSeen=Date.now();
     try {

package/dist/client/agent/pair.mjs

@@ -8,7 +8,7 @@ export function saveConfig(filename,config) {
 export async function pairDevice(config,filename,{openBrowser=true,intervalMs}={}) {
   const server=new URL(config.serverUrl);
   if(server.protocol!=='https:'&&!['127.0.0.1','localhost'].includes(server.hostname))throw new Error('配对需要 HTTPS');
-  const response=await fetch(new URL('/api/pair/start',server),{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({name:config.deviceName??os.hostname(),platform:process.platform,version:'0.2.6'}),signal:AbortSignal.timeout(15000)});
+  const response=await fetch(new URL('/api/pair/start',server),{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({name:config.deviceName??os.hostname(),platform:process.platform,version:'0.2.7'}),signal:AbortSignal.timeout(15000)});
   if(!response.ok)throw new Error('无法开始配对，请检查网络');
   const p=await response.json();
   console.log('请在网页登录并确认这台电脑。配对码：'+p.userCode+'\n'+p.verificationUri);

package/dist/client/control.mjs

@@ -26,7 +26,7 @@ if(settings.privilege==='administrator'&&process.env.BRIDGE_ADMIN_CONTEXT!=='1')
  const request=elevationRequest(action,{mode:value});
  await run(request.command,request.args);
  if(action==='mode'){
-   fs.writeFileSync(path.join(root,'client-settings.json'),JSON.stringify({mode:value,privilege:'administrator',version:'0.2.6'},null,2),{mode:0o600});
+   fs.writeFileSync(path.join(root,'client-settings.json'),JSON.stringify({mode:value,privilege:'administrator',version:'0.2.7'},null,2),{mode:0o600});
    writeInstructions(root,launch.node,value,'administrator');
  }
  process.exit(0);

package/dist/client/environment.mjs

@@ -87,7 +87,7 @@ export async function verifyLocalTools({node,release,workingDirectory}){
 export async function verifyLocalToolsInProcess({node,release,workingDirectory}) {
  console.log('正在验证本地工具可以实际执行……');
  const {Client,StdioClientTransport,entry}=await probeModules(release);
- const client=new Client({name:'desktop-bridge-install-check',version:'0.2.6'},{capabilities:{}});
+ const client=new Client({name:'desktop-bridge-install-check',version:'0.2.7'},{capabilities:{}});
  const transport=new StdioClientTransport({command:node,args:[entry],cwd:workingDirectory,stderr:'pipe'});
  try{
   const connecting=client.connect(transport,{timeout:30000});transport.stderr?.on('data',()=>{});await connecting;

package/dist/client/install.mjs

@@ -38,19 +38,19 @@ if(options.stop){console.log('Client stopped. Use your installed Start shortcut
 if(options.uninstall){
   await removeStartup(root);
   // Keep credentials and result journal by default so a reinstall can recover them.
-  for(const name of ['releases','runtime','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','launch.json','run-client.cmd','heartbeat.json','START-HERE.txt','Start.cmd','Stop.cmd','RePair.cmd','Start.command','Stop.command','start.sh','stop.sh','launch.sh','control.ps1'])fs.rmSync(path.join(root,name),{recursive:true,force:true});
+  for(const name of ['releases','runtime','runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','windows-background.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','launch.json','run-client.cmd','heartbeat.json','START-HERE.txt','Start.cmd','Stop.cmd','RePair.cmd','Start.command','Stop.command','start.sh','stop.sh','launch.sh','control.ps1'])fs.rmSync(path.join(root,name),{recursive:true,force:true});
   if(options.purge){releaseLock(installLock);fs.rmSync(root,{recursive:true,force:true});}
   console.log('Client uninstalled. Revoke the device in device management to unlink it.');process.exit(0);
 }
 fs.writeFileSync(path.join(root,'.desktop-bridge-client'),'desktop-bridge-client\n',{mode:0o600});
 if(process.versions.node.split('.')[0]!=='24')throw new Error('Use Install.cmd, Install.command or Install.sh to prepare the supported Node 24 runtime.');
 const {node,npm}=await ensureRuntime(root,source);
-const release=path.join(root,'releases','0.2.6'),configPath=path.join(root,'agent-config.json');
+const release=path.join(root,'releases','0.2.7'),configPath=path.join(root,'agent-config.json');
 fs.mkdirSync(release,{recursive:true,mode:0o700});
 for(const file of ['package.json','package-lock.json'])fs.copyFileSync(path.join(source,file),path.join(release,file));
 const agentSource=fs.existsSync(path.join(source,'agent'))?path.join(source,'agent'):path.join(source,'..','agent');
 fs.cpSync(agentSource,path.join(release,'agent'),{recursive:true,force:true});
-for(const file of ['runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','Start.cmd','Stop.cmd','RePair.cmd','Start.command','Stop.command','start.sh','stop.sh','launch.sh','control.ps1'])fs.copyFileSync(path.join(source,file),path.join(root,file));
+for(const file of ['runner.mjs','lifecycle.mjs','control.mjs','startup.mjs','windows-background.mjs','install-options.mjs','admin-runtime.mjs','admin-service.mjs','admin-elevate.mjs','Start.cmd','Stop.cmd','RePair.cmd','Start.command','Stop.command','start.sh','stop.sh','launch.sh','control.ps1'])fs.copyFileSync(path.join(source,file),path.join(root,file));
 await prepareDependencies({node,npm,release,force:!!options.repair});
 try{await verifyLocalTools({node,release,workingDirectory:root});}
 catch{
@@ -74,7 +74,7 @@ if(adminRequested){
   const helper=path.join(root,'admin-elevate.mjs');
   const request=elevationRequest('install',{source:root,mode});
   await run(request.command,request.args);
-  fs.writeFileSync(path.join(root,'client-settings.json'),JSON.stringify({mode,privilege:'administrator',version:'0.2.6'},null,2),{mode:0o600});
+  fs.writeFileSync(path.join(root,'client-settings.json'),JSON.stringify({mode,privilege:'administrator',version:'0.2.7'},null,2),{mode:0o600});
   writeInstructions(root,node,mode,'administrator');
 }
 console.log(adminRequested?'管理员运行已授权并配置：'+mode+'。':mode==='manual'?'安装和配对完成：手动模式。使用时运行启动命令，保持窗口，按 Ctrl+C 结束；没有后台实例或登录自启。':'安装和配对完成：后台模式。客户端现在后台运行，登录系统后自动启动。');

package/dist/client/lifecycle.mjs

@@ -36,6 +36,11 @@ export function startupFile(root,platform=process.platform,env=process.env,home=
   return platform==='win32'?path.join(env.APPDATA??path.join(home,'AppData','Roaming'),'Microsoft','Windows','Start Menu','Programs','Startup','Desktop Bridge.lnk'):platform==='darwin'?path.join(home,'Library','LaunchAgents','de.desktopbridge.agent.plist'):path.join(env.XDG_CONFIG_HOME??path.join(home,'.config'),'autostart','desktop-bridge.desktop');
 }
 export async function removeStartup(root) {
+  if(process.platform==='win32'){
+    const {windowsBackground}=await import('./windows-background.mjs');
+    await windowsBackground('remove',root);
+    return; // The Windows helper removes only a shortcut owned by this root.
+  }
   const file=startupFile(root);
   if(process.platform==='darwin'&&fs.existsSync(file))try{await run('launchctl',['bootout','gui/'+process.getuid(),file],{stdio:'ignore'});}catch{}
   fs.rmSync(file,{force:true});

package/dist/client/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "desktop-bridge-client-runtime",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "desktop-bridge-client-runtime",
-      "version": "0.2.6",
+      "version": "0.2.7",
       "dependencies": {
         "@modelcontextprotocol/sdk": "1.32.1",
         "@wonderwhy-er/desktop-commander": "0.3.0",

package/dist/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "desktop-bridge-client-runtime",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "private": true,
   "type": "module",
   "engines": {

package/dist/client/startup.mjs

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import {spawn} from 'node:child_process';
-import {run,startupFile,removeStartup,stopClient,livePid} from './lifecycle.mjs';
+import {run,startupFile,removeStartup,stopClient,livePid,sleep} from './lifecycle.mjs';
 export const shellQuote=value=>"'"+String(value).replace(/'/g,"'\\''")+"'";
 export const powershellQuote=value=>"'"+String(value).replace(/'/g,"''")+"'";
 const xml=s=>String(s).replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&apos;'}[c]));
@@ -18,11 +18,8 @@ export function startupContent(node,root,platform=process.platform) {
 export async function registerStartup(node,root) {
  const file=startupFile(root);fs.mkdirSync(path.dirname(file),{recursive:true});
  if(process.platform==='win32'){
-  const ps=powershellQuote;
-  // Target Node directly. Routing through cmd.exe would expand % and ! in paths.
-  const quote=value=>'"'+value.replace(/(\\*)"/g,'$1$1\\"').replace(/(\\+)$/,'$1$1')+'"';
-  const argv=[path.join(root,'runner.mjs'),root].map(quote).join(' ');
-  await run('powershell.exe',['-NoProfile','-NonInteractive','-Command',`$s=(New-Object -ComObject WScript.Shell).CreateShortcut(${ps(file)});$s.TargetPath=${ps(node)};$s.Arguments=${ps(argv)};$s.WorkingDirectory=${ps(root)};$s.WindowStyle=7;$s.Save()`]);
+  const {windowsBackground}=await import('./windows-background.mjs');
+  await windowsBackground('register',root,node);
  }else{
   fs.writeFileSync(file,startupContent(node,root));
   if(process.platform==='darwin'){
@@ -32,7 +29,7 @@ export async function registerStartup(node,root) {
  }
 }
 export function writeInstructions(root,node,mode,privilege='standard') {
- const contents=`Desktop Bridge 0.2.6 使用说明\n\n权限：${privilege==='administrator'?'管理员（操作将由系统提示授权；后台使用受保护系统服务）':'当前用户'}\n当前模式：${mode==='manual'?'手动 manual':'后台 background'}\n${mode==='manual'?'使用时运行启动命令，保持窗口，按 Ctrl+C 或关闭窗口结束。客户端与本地工具进程会一起停止。未设置登录自启。':'客户端现在后台运行，登录系统后自动启动。这是当前用户登录后自启，不是登录前的系统服务。'}\n\n${process.platform==='win32'?'请将以下命令复制到 PowerShell。':'请将以下命令复制到终端。'}\n\n启动：\n${commandFor(node,root,'start')}\n\n停止：\n${commandFor(node,root,'stop')}\n\n状态：\n${commandFor(node,root,'status')}\n\n切换为手动模式（停止后台实例，移除登录自启）：\n${commandFor(node,root,'mode manual')}\n\n切换为后台模式（现在启动，登录系统后自动启动）：\n${commandFor(node,root,'mode background')}\n\n本目录中的快捷入口：${process.platform==='win32'?'Start.cmd / Stop.cmd':process.platform==='darwin'?'Start.command / Stop.command':'start.sh / stop.sh'}。\n启动、停止和切换模式使用已安装的私有环境，不会重新安装依赖。\n\n重新配对（旧 Token 失效时）：\n${commandFor(node,root,'pair')}\n${process.platform==='win32'?'或双击 RePair.cmd。':'在终端执行上述命令。'}\n配对必须由用户在网页重新确认。\n如果出现 authStatus=re_pair_required，请先重新配对。\n\n请保留本目录，其中保存设备凭据、日志与可恢复的任务结果。停止不会删除这些数据。\n`;
+ const contents=`Desktop Bridge 0.2.7 使用说明\n\n权限：${privilege==='administrator'?'管理员（操作将由系统提示授权；后台使用受保护系统服务）':'当前用户'}\n当前模式：${mode==='manual'?'手动 manual':'后台 background'}\n${mode==='manual'?'使用时运行启动命令，保持窗口，按 Ctrl+C 或关闭窗口结束。客户端与本地工具进程会一起停止。未设置登录自启。':'客户端现在后台运行，登录系统后自动启动。这是当前用户登录后自启，不是登录前的系统服务。'}\n\n${process.platform==='win32'?'请将以下命令复制到 PowerShell。':'请将以下命令复制到终端。'}\n\n启动：\n${commandFor(node,root,'start')}\n\n停止：\n${commandFor(node,root,'stop')}\n\n状态：\n${commandFor(node,root,'status')}\n\n切换为手动模式（停止后台实例，移除登录自启）：\n${commandFor(node,root,'mode manual')}\n\n切换为后台模式（现在启动，登录系统后自动启动）：\n${commandFor(node,root,'mode background')}\n\n本目录中的快捷入口：${process.platform==='win32'?'Start.cmd / Stop.cmd':process.platform==='darwin'?'Start.command / Stop.command':'start.sh / stop.sh'}。\n启动、停止和切换模式使用已安装的私有环境，不会重新安装依赖。\n\n重新配对（旧 Token 失效时）：\n${commandFor(node,root,'pair')}\n${process.platform==='win32'?'或双击 RePair.cmd。':'在终端执行上述命令。'}\n配对必须由用户在网页重新确认。\n如果出现 authStatus=re_pair_required，请先重新配对。\n\n请保留本目录，其中保存设备凭据、日志与可恢复的任务结果。停止不会删除这些数据。\n`;
  fs.writeFileSync(path.join(root,'START-HERE.txt'),contents+(privilege==='administrator'?'\n管理员模式下，普通用户不能修改后台程序文件。系统隐私、Google 登录与 ChatGPT 工具确认仍需分别授权。\n':''),{mode:0o600});
 }
 export async function startBackground(root,node) {
@@ -40,6 +37,15 @@ export async function startBackground(root,node) {
  if(auth.authStatus==='re_pair_required')throw new Error('设备需要重新配对。请先执行 RePair.cmd 或 control.mjs pair。');
  if(livePid(path.join(root,'runner-lock','pid'))){console.log('Client is already running.');return;}
  fs.rmSync(path.join(root,'maintenance.flag'),{force:true});
+ if(process.platform==='win32'){
+  const {windowsBackground}=await import('./windows-background.mjs');
+  await windowsBackground('start',root,node);
+  for(let i=0;i<60;i++){
+   if(livePid(path.join(root,'runner-lock','pid')))return;
+   await sleep(250);
+  }
+  throw new Error('后台任务尚未启动。当前用户需已登录 Windows；请检查任务计划程序后重试。');
+ }
  const child=spawn(node,[path.join(root,'runner.mjs'),root],{detached:true,stdio:'ignore'});
  await new Promise((resolve,reject)=>{child.once('spawn',resolve);child.once('error',reject);});child.unref();
 }
@@ -47,7 +53,7 @@ export async function setMode(root,node,mode) {
  if(!['manual','background'].includes(mode))throw new Error('Mode must be manual or background');
  await stopClient(root);
  await removeStartup(root);
- const settings={mode,version:'0.2.6'};
+ const settings={mode,version:'0.2.7'};
  fs.writeFileSync(path.join(root,'client-settings.json.tmp'),JSON.stringify(settings,null,2),{mode:0o600});
  fs.renameSync(path.join(root,'client-settings.json.tmp'),path.join(root,'client-settings.json'));
  writeInstructions(root,node,mode);

package/dist/client/windows-background.mjs

@@ -0,0 +1,45 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {createHash} from 'node:crypto';
+import {execFile} from 'node:child_process';
+import {promisify} from 'node:util';
+
+const execute=promisify(execFile);
+const ps=value=>"'"+String(value).replace(/'/g,"''")+"'";
+const quote=value=>'"'+String(value).replace(/(\\*)"/g,'$1$1\\"').replace(/(\\+)$/,'$1$1')+'"';
+export function backgroundTaskName(root){
+  return 'DesktopBridge-User-'+createHash('sha256').update(path.win32.resolve(root).toLowerCase()).digest('hex').slice(0,20);
+}
+export function backgroundTaskScript(action,root,node){
+  if(!['register','start','remove'].includes(action))throw new Error('Invalid background task action');
+  const name=ps(backgroundTaskName(root));
+  const args=[path.win32.join(root,'runner.mjs'),root].map(quote).join(' ');
+  const migrateShortcut="$legacy=Join-Path $env:APPDATA 'Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Desktop Bridge.lnk';"+
+    "if(Test-Path -LiteralPath $legacy){$link=(New-Object -ComObject WScript.Shell).CreateShortcut($legacy);"+
+    `if($link.Arguments -eq ${ps(args)} -and $link.WorkingDirectory -eq ${ps(root)}){Remove-Item -LiteralPath $legacy}};`;
+  const preamble="$ErrorActionPreference='Stop';$ProgressPreference='SilentlyContinue';"+
+    "$identity=[System.Security.Principal.WindowsIdentity]::GetCurrent();$sid=$identity.User.Value;"+
+    `$task=Get-ScheduledTask -TaskName ${name} -ErrorAction SilentlyContinue;`+
+    // A deterministic name must never let one user replace another user's task.
+    "if($task){$owner=$task.Principal.UserId;if($owner -notmatch '^S-1-'){$owner=([System.Security.Principal.NTAccount]$owner).Translate([System.Security.Principal.SecurityIdentifier]).Value};"+
+    "if($owner -ne $sid){throw 'Background task belongs to another Windows account'}};";
+  if(action==='remove')return preamble+`if($task){Stop-ScheduledTask -TaskName ${name};Unregister-ScheduledTask -TaskName ${name} -Confirm:$false};`+migrateShortcut+'exit 0';
+  const register=`$a=New-ScheduledTaskAction -Execute ${ps(node)} -Argument ${ps(args)} -WorkingDirectory ${ps(root)};`+
+    "$p=New-ScheduledTaskPrincipal -UserId $sid -LogonType Interactive -RunLevel Limited;"+
+    "$t=New-ScheduledTaskTrigger -AtLogOn -User $sid;"+
+    "$s=New-ScheduledTaskSettingsSet -MultipleInstances IgnoreNew -ExecutionTimeLimit ([TimeSpan]::Zero) -RestartCount 3 -RestartInterval (New-TimeSpan -Minutes 1) -StartWhenAvailable -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries;"+
+    `Register-ScheduledTask -TaskName ${name} -Action $a -Trigger $t -Principal $p -Settings $s -Force|Out-Null;`;
+  // Refresh the action on installation; ordinary start reuses the registered task.
+  if(action==='register')return preamble+register+migrateShortcut;
+  return preamble+`if(-not $task){${register}}Start-ScheduledTask -TaskName ${name}`;
+}
+export async function windowsBackground(action,root,node){
+  const canonical=fs.realpathSync(root);
+  const script=backgroundTaskScript(action,canonical,node);
+  const encoded=Buffer.from(script,'utf16le').toString('base64');
+  try{
+    await execute('powershell.exe',['-NoLogo','-NoProfile','-NonInteractive','-EncodedCommand',encoded],{windowsHide:true,timeout:30000,maxBuffer:1024*1024});
+  }catch(error){
+    throw new Error('Windows background task '+action+' failed: '+String(error.stderr||error.message).slice(0,1500));
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justlovepl/desktop-bridge",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "description": "Cross-platform Desktop Bridge agent installer and lifecycle CLI",
   "type": "module",
   "license": "MIT",
@@ -13,7 +13,12 @@
   "bin": {
     "desktop-bridge": "./bin/desktop-bridge.mjs"
   },
-  "files": ["bin/", "dist/", "README.md", "THIRD_PARTY_NOTICES.md"],
+  "files": [
+    "bin/",
+    "dist/",
+    "README.md",
+    "THIRD_PARTY_NOTICES.md"
+  ],
   "engines": {
     "node": ">=24 <25"
   },
@@ -24,5 +29,11 @@
   "publishConfig": {
     "access": "public"
   },
-  "keywords": ["desktop-bridge", "mcp", "remote-desktop", "agent", "command-line"]
+  "keywords": [
+    "desktop-bridge",
+    "mcp",
+    "remote-desktop",
+    "agent",
+    "command-line"
+  ]
 }