@lark-codem/codem-cli 0.1.226-dev-trace-task.100102444781.0.ga44791f → 0.1.226-dev-p1-mac.100102447463.0.g9e29c9f

package/LICENSE

@@ -1,6 +1,6 @@
-© Lark Technologies Pte. Ltd. All rights reserved. Use is subject to the Legal Agreements outlined here:
-
-Feishu User Terms of Service [https://www.feishu.cn/terms]
-Feishu Privacy Policy [https://www.feishu.cn/privacy]
-
-Copyright (c) 2026 Lark Technologies Pte. Ltd.
+© Lark Technologies Pte. Ltd. All rights reserved. Use is subject to the Legal Agreements outlined here:
+
+Feishu User Terms of Service [https://www.feishu.cn/terms]
+Feishu Privacy Policy [https://www.feishu.cn/privacy]
+
+Copyright (c) 2026 Lark Technologies Pte. Ltd.

package/bin/codem-service.js

@@ -1,132 +1,132 @@
-#!/usr/bin/env node
-import { realpathSync } from "node:fs";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-
-// Inlined from src/runtime-install-form.js#isRuntimeManagedInstall（保持逐字节
-// 同语义，二者需同步改）：主包不再发布 dist/，本入口必须自包含。
-function canonicalPath(filePath) {
-  const resolved = path.resolve(filePath);
-  const realpath = realpathSync.native ?? realpathSync;
-
-  try {
-    return realpath(resolved);
-  } catch {
-    return resolved;
-  }
-}
-
-function isRuntimeManagedInstall({ cliRoot, codemHome }) {
-  const versionsRoot = canonicalPath(path.join(codemHome, "runtime", "versions"));
-  const actualCliRoot = canonicalPath(cliRoot);
-  const relative = path.relative(versionsRoot, actualCliRoot);
-
-  return (
-    relative !== "" &&
-    relative !== ".." &&
-    !relative.startsWith(`..${path.sep}`) &&
-    !path.isAbsolute(relative)
-  );
-}
-
-const CODEM_HOME = process.env.CODEM_HOME || path.join(os.homedir(), ".codem");
-const RUNTIME_ROOT = path.join(CODEM_HOME, "runtime");
-const CURRENT_POINTER_PATH = path.join(RUNTIME_ROOT, "current.json");
-// Must match the store layout written by RuntimeManager (runtime-manager.js
-// RUNTIME_CLI_PACKAGE_NAME) and resolved by the stable service shim in
-// service-manager.js. 存量兼容：scope 改名（@byted-meego → @lark-codem）前
-// 落盘的版本目录还在旧 scope 下，探测新名优先、旧名兜底。
-const PACKAGE_NAME = "@lark-codem/codem-cli";
-const LEGACY_PACKAGE_NAME = "@byted-meego/codem-cli";
-
-async function pathExists(filePath) {
-  try {
-    await fs.access(filePath);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-// Same install-form predicate as service-manager.js#isRuntimeManaged: this entry
-// belongs to the managed architecture only when the file itself lives inside
-// ~/.codem/runtime/versions/. A legacy (global npm) install must always run its
-// own copy and never follow current.json — otherwise a runtime store left behind
-// on a legacy host would silently capture the daemon while the on-PATH CLI keeps
-// updating in place (the two copies diverge).
-function isRuntimeManagedHere() {
-  const cliRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-  return isRuntimeManagedInstall({ cliRoot, codemHome: CODEM_HOME });
-}
-
-async function readCurrentRuntimeVersion() {
-  try {
-    const pointer = JSON.parse(await fs.readFile(CURRENT_POINTER_PATH, "utf8"));
-    return typeof pointer.version === "string" && pointer.version.trim()
-      ? pointer.version.trim()
-      : null;
-  } catch {
-    return null;
-  }
-}
-
-async function resolveRuntimeEntry(version) {
-  if (!version) {
-    return null;
-  }
-
-  const versionDir = path.join(RUNTIME_ROOT, "versions", version);
-  const directEntry = path.join(versionDir, "bin", "codem.js");
-
-  if (await pathExists(directEntry)) {
-    return directEntry;
-  }
-
-  for (const packageName of [PACKAGE_NAME, LEGACY_PACKAGE_NAME]) {
-    const scopedEntry = path.join(versionDir, "node_modules", ...packageName.split("/"), "bin", "codem.js");
-
-    if (await pathExists(scopedEntry)) {
-      return scopedEntry;
-    }
-  }
-
-  return null;
-}
-
-// 服务 env 快照侧车（与 service-manager.js 的 SERVICE_ENTRY_SOURCE 同语义，
-// 二者需同步改）：Windows 计划任务 XML 无法携带环境变量，codem 专属服务 env
-// （泳道快照等）统一从 runtime/service-env.json 加载。缺文件 = 无服务 env；
-// 解析失败上报 stderr，不静默。
-// Dedicated Host inputs and App ownership are already bound to its immutable
-// config/shim. A mutable legacy snapshot must not override that installation.
-if (process.env.CODEM_DAEMON_HOSTED_WINDOWS !== "1") {
-  try {
-    const entries = JSON.parse(await fs.readFile(path.join(RUNTIME_ROOT, "service-env.json"), "utf8"));
-    for (const [key, value] of Object.entries(entries)) {
-      if (typeof value === "string") process.env[key] = value;
-    }
-  } catch (err) {
-    if (err?.code !== "ENOENT") {
-      console.error("[codem-service] 忽略无法解析的 service-env.json：", err?.message ?? err);
-    }
-  }
-}
-
-// 开发态逃生门：跳过 runtime 指针，直接加载本仓源码。否则自动更新会把
-// 指针自愈回发布版 runtime，本地源码改动永远不会被 daemon 加载。
-const forceSource = process.env.CODEM_DAEMON_DEV_SOURCE === "1";
-const runtimeEntry =
-  forceSource || !isRuntimeManagedHere()
-    ? null
-    : await resolveRuntimeEntry(await readCurrentRuntimeVersion());
-
-if (runtimeEntry) {
-  await import(pathToFileURL(runtimeEntry));
-} else {
-  if (forceSource) {
-    console.log("[codem-service] CODEM_DAEMON_DEV_SOURCE=1，加载本地 CLI 入口 ./codem.js");
-  }
-  await import("./codem.js");
-}
+#!/usr/bin/env node
+import { realpathSync } from "node:fs";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+// Inlined from src/runtime-install-form.js#isRuntimeManagedInstall（保持逐字节
+// 同语义，二者需同步改）：主包不再发布 dist/，本入口必须自包含。
+function canonicalPath(filePath) {
+  const resolved = path.resolve(filePath);
+  const realpath = realpathSync.native ?? realpathSync;
+
+  try {
+    return realpath(resolved);
+  } catch {
+    return resolved;
+  }
+}
+
+function isRuntimeManagedInstall({ cliRoot, codemHome }) {
+  const versionsRoot = canonicalPath(path.join(codemHome, "runtime", "versions"));
+  const actualCliRoot = canonicalPath(cliRoot);
+  const relative = path.relative(versionsRoot, actualCliRoot);
+
+  return (
+    relative !== "" &&
+    relative !== ".." &&
+    !relative.startsWith(`..${path.sep}`) &&
+    !path.isAbsolute(relative)
+  );
+}
+
+const CODEM_HOME = process.env.CODEM_HOME || path.join(os.homedir(), ".codem");
+const RUNTIME_ROOT = path.join(CODEM_HOME, "runtime");
+const CURRENT_POINTER_PATH = path.join(RUNTIME_ROOT, "current.json");
+// Must match the store layout written by RuntimeManager (runtime-manager.js
+// RUNTIME_CLI_PACKAGE_NAME) and resolved by the stable service shim in
+// service-manager.js. 存量兼容：scope 改名（@byted-meego → @lark-codem）前
+// 落盘的版本目录还在旧 scope 下，探测新名优先、旧名兜底。
+const PACKAGE_NAME = "@lark-codem/codem-cli";
+const LEGACY_PACKAGE_NAME = "@byted-meego/codem-cli";
+
+async function pathExists(filePath) {
+  try {
+    await fs.access(filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// Same install-form predicate as service-manager.js#isRuntimeManaged: this entry
+// belongs to the managed architecture only when the file itself lives inside
+// ~/.codem/runtime/versions/. A legacy (global npm) install must always run its
+// own copy and never follow current.json — otherwise a runtime store left behind
+// on a legacy host would silently capture the daemon while the on-PATH CLI keeps
+// updating in place (the two copies diverge).
+function isRuntimeManagedHere() {
+  const cliRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+  return isRuntimeManagedInstall({ cliRoot, codemHome: CODEM_HOME });
+}
+
+async function readCurrentRuntimeVersion() {
+  try {
+    const pointer = JSON.parse(await fs.readFile(CURRENT_POINTER_PATH, "utf8"));
+    return typeof pointer.version === "string" && pointer.version.trim()
+      ? pointer.version.trim()
+      : null;
+  } catch {
+    return null;
+  }
+}
+
+async function resolveRuntimeEntry(version) {
+  if (!version) {
+    return null;
+  }
+
+  const versionDir = path.join(RUNTIME_ROOT, "versions", version);
+  const directEntry = path.join(versionDir, "bin", "codem.js");
+
+  if (await pathExists(directEntry)) {
+    return directEntry;
+  }
+
+  for (const packageName of [PACKAGE_NAME, LEGACY_PACKAGE_NAME]) {
+    const scopedEntry = path.join(versionDir, "node_modules", ...packageName.split("/"), "bin", "codem.js");
+
+    if (await pathExists(scopedEntry)) {
+      return scopedEntry;
+    }
+  }
+
+  return null;
+}
+
+// 服务 env 快照侧车（与 service-manager.js 的 SERVICE_ENTRY_SOURCE 同语义，
+// 二者需同步改）：Windows 计划任务 XML 无法携带环境变量，codem 专属服务 env
+// （泳道快照等）统一从 runtime/service-env.json 加载。缺文件 = 无服务 env；
+// 解析失败上报 stderr，不静默。
+// Dedicated Host inputs and App ownership are already bound to its immutable
+// config/shim. A mutable legacy snapshot must not override that installation.
+if (process.env.CODEM_DAEMON_HOSTED_WINDOWS !== "1") {
+  try {
+    const entries = JSON.parse(await fs.readFile(path.join(RUNTIME_ROOT, "service-env.json"), "utf8"));
+    for (const [key, value] of Object.entries(entries)) {
+      if (typeof value === "string") process.env[key] = value;
+    }
+  } catch (err) {
+    if (err?.code !== "ENOENT") {
+      console.error("[codem-service] 忽略无法解析的 service-env.json：", err?.message ?? err);
+    }
+  }
+}
+
+// 开发态逃生门：跳过 runtime 指针，直接加载本仓源码。否则自动更新会把
+// 指针自愈回发布版 runtime，本地源码改动永远不会被 daemon 加载。
+const forceSource = process.env.CODEM_DAEMON_DEV_SOURCE === "1";
+const runtimeEntry =
+  forceSource || !isRuntimeManagedHere()
+    ? null
+    : await resolveRuntimeEntry(await readCurrentRuntimeVersion());
+
+if (runtimeEntry) {
+  await import(pathToFileURL(runtimeEntry));
+} else {
+  if (forceSource) {
+    console.log("[codem-service] CODEM_DAEMON_DEV_SOURCE=1，加载本地 CLI 入口 ./codem.js");
+  }
+  await import("./codem.js");
+}

package/bin/codem.js

@@ -1,237 +1,237 @@
-#!/usr/bin/env node
-// Thin launcher for the compiled CodeM CLI binary.
-//
-// 主包 @lark-codem/codem-cli 不再携带可运行的 JS 源码：真正的 CLI 是
-// bun --compile 产物，按平台拆包发布在 optionalDependencies
-// `@lark-codem/codem-cli-<os>-<arch>` 里（npm 依据平台包 package.json 的
-// os/cpu 字段自动只装匹配的那个）。本文件是保留给所有历史消费方的稳定入口
-// （npm bin 链接、daemon-service.cjs、codem-app 的 CodemCLIResolver、
-// codem-shim 等都指向 bin/codem.js）：解析平台包里的二进制，spawn 并透传
-// stdio / 信号 / 退出码。
-//
-// 开发态兜底：repo checkout 里没有平台包，若 ../dist/src/index.js 存在
-// （npm run build 产物），直接 import 执行——`node bin/codem.js` 在仓内可用。
-
-import { spawn } from "node:child_process";
-import fs from "node:fs";
-import { createRequire } from "node:module";
-import path from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-
-import {
-  applyHostedWindowsChildOptions,
-  watchWindowsDaemonHostMigration
-} from "./platform-child-process.js";
-
-const require = createRequire(import.meta.url);
-const LAUNCHER_DIR = path.dirname(fileURLToPath(import.meta.url));
-const PACKAGE_ROOT = path.resolve(LAUNCHER_DIR, "..");
-// scope 从自己的安装落点推导（…/node_modules/<scope>/codem-cli/bin/codem.js），
-// 不能写死单一 scope：历史 @byted-meego（bnpm）与公网 @lark-codem 两套包树
-// 都用这同一份 launcher，平台包 scope 跟随主包。非 npm 布局（scope 目录名
-// 不带 @）回退发布 scope。
-const SCOPE_DIR_NAME = path.basename(path.dirname(PACKAGE_ROOT));
-const PACKAGE_SCOPE = SCOPE_DIR_NAME.startsWith("@") ? SCOPE_DIR_NAME : "@lark-codem";
-const PLATFORM_PACKAGE_NAME = `${PACKAGE_SCOPE}/codem-cli-${process.platform}-${process.arch}`;
-const BINARY_NAME = process.platform === "win32" ? "codem.exe" : "codem";
-
-function resolvePlatformBinary() {
-  // 常规路径：npm 已把平台包装进依赖树，走标准解析。
-  try {
-    const manifestPath = require.resolve(`${PLATFORM_PACKAGE_NAME}/package.json`);
-    return path.join(path.dirname(manifestPath), "bin", BINARY_NAME);
-  } catch {
-    // fall through to explicit probes
-  }
-
-  // 兜底探测：主包自己的 node_modules 与同 scope 兄弟目录（npm 提升安装）。
-  const [scope, name] = PLATFORM_PACKAGE_NAME.split("/");
-  const candidates = [
-    path.join(PACKAGE_ROOT, "node_modules", scope, name, "bin", BINARY_NAME),
-    path.join(path.dirname(PACKAGE_ROOT), name, "bin", BINARY_NAME)
-  ];
-  return candidates.find((candidate) => fs.existsSync(candidate)) ?? null;
-}
-
-// spawn 的失败有两条互斥出口：只有 EACCES / EAGAIN / EMFILE / ENFILE / ENOENT
-// 会被 Node 降级成异步 `error` 事件，其余 errno（ENOEXEC / ENOTDIR / EPERM，以及
-// Windows 上杀软 / EDR 拦截 CreateProcessW 时 libuv 报的 UNKNOWN=-4094）在
-// `child_process.spawn` 里直接 `throw new ErrnoException(err, 'spawn')`。
-// stderr 同步写。本文件里每一条诊断后面都紧跟 process.exit，而 process.exit()
-// 按 Node 官方契约会**放弃尚未完成的 stdout/stderr I/O**（"a note on process I/O"）。
-// stderr 是否同步取决于它接的是什么：
-//   Files —— Windows / POSIX 均同步
-//   Pipes —— Windows / POSIX 均同步
-//   TTY   —— POSIX 同步，**Windows 异步**
-// 最需要这些诊断的现场恰恰落在唯一异步的那格：用户在 PowerShell 里交互式敲
-// codem，stderr 就是 Windows TTY。走 console.error 时诊断可能被截断甚至整条丢失，
-// 用户继续看到「零输出」——正是本次修复要消灭的现象，等于修了个寂寞。
-// fs.writeSync 绕过流缓冲直接写 fd，返回即已落地，不受 process.exit 影响。
-function writeStderrSync(message) {
-  const line = `${message}\n`;
-  try {
-    fs.writeSync(process.stderr.fd, line);
-  } catch {
-    // fd 已关闭 / EPIPE 等场景下不能再抛：诊断本身不该变成新的失败源。
-    // 退回流式写尽力而为——此时能不能送达已不由本进程决定。
-    try {
-      process.stderr.write(line);
-    } catch {
-      // 到这里已无可用错误通道，只能放弃。
-    }
-  }
-}
-
-// 两条出口必须汇到同一个 reporter：只挂 child.on("error") 的话，后一类失败会以
-// 一段指向 node:internal/child_process 的裸栈抛给用户——codem-cli 的平台二进制是
-// bun --compile 出来的未签名可执行文件，Windows 上被拦截是真实可达路径。
-function reportSpawnFailure(targetPath, error) {
-  const code = error?.code ?? "UNKNOWN";
-  const errno = error?.errno ?? "unknown";
-  const detail = error?.message ?? String(error);
-  const lines = [
-    `codem: 无法启动 CLI 二进制（${targetPath}）：${detail}`,
-    `codem: 失败细节 code=${code} errno=${errno} platform=${process.platform}`
-  ];
-  if (process.platform === "win32") {
-    lines.push(
-      "codem: Windows 上最常见的成因是杀毒软件 / EDR 拦截了进程创建（此时 libuv 只能报 UNKNOWN/-4094）。",
-      `codem: 请把该路径加入杀软白名单后重新安装 CodeM CLI；或先在 PowerShell 里直接裸跑 & "${targetPath}" --version，`,
-      "codem: 操作系统给出的错误会比这里的 spawn 报错具体得多。"
-    );
-  }
-  writeStderrSync(lines.join("\n"));
-  process.exit(1);
-}
-
-// Windows NTSTATUS 翻译。0xC0000000 以上是内核致命错误码：进程在 main 之前就被
-// 杀掉，stdio 里不会有任何字节。不翻译的话用户侧现象是「敲 codem 完全没反应」，
-// 连一条能拿去搜的错误串都没有——实测一例 AVX2 缺失，PATH / launcher / 指针 /
-// 运行时四层全部正常，三层把同一个退出码原样透传上来，用户完全无从判断断在哪。
-// 这里只往 stderr 补一条说明，退出码仍原样透传，不改变对上游的语义。
-//
-// code 的符号表示两可：libuv 从 GetExitCodeProcess 拿到的是 DWORD，Node 侧多为
-// 正数（0xC000001D → 3221225501），而 shell 常按 int32 显示（-1073741795）。
-// `>>> 0` 把两种表示归一到同一个无符号值，避免只判其中一种而漏掉。
-function explainWindowsFatalStatus(code) {
-  if (process.platform !== "win32" || typeof code !== "number") {
-    return null;
-  }
-  const status = code >>> 0;
-  if (status < 0xc0000000) {
-    return null;
-  }
-  const detail = {
-    0xc000001d: [
-      "STATUS_ILLEGAL_INSTRUCTION：CPU 不支持二进制中用到的指令集，最常见是缺少 AVX2。",
-      "注意「年份新」不代表有 AVX2：Intel 在 Pentium Gold / Celeron 整条产品线上熔断了",
-      "AVX/AVX2（如 2020 年的 Pentium Gold G6400）；Atom / Gemini Lake、Sandy/Ivy Bridge",
-      "以及屏蔽 AVX2 的虚拟化环境同理。请升级到使用 baseline 产线的 CodeM 版本。",
-      "自查（PowerShell，返回 False 即无 AVX2）：",
-      "  Add-Type -Namespace W -Name K -MemberDefinition '[DllImport(\"kernel32.dll\")] public static extern bool IsProcessorFeaturePresent(uint f);'",
-      "  [W.K]::IsProcessorFeaturePresent(40)"
-    ],
-    0xc0000005: ["STATUS_ACCESS_VIOLATION：二进制崩溃（段错误）。请重装 CodeM CLI，仍复现请反馈。"],
-    0xc0000022: ["STATUS_ACCESS_DENIED：进程被拒绝执行，通常是杀毒软件 / EDR 拦截。请把 CodeM 安装目录加入白名单。"],
-    0xc000007b: ["STATUS_INVALID_IMAGE_FORMAT：可执行文件架构与系统不匹配（x64 / ARM64 错配）。请重装 CodeM CLI。"],
-    0xc0000135: ["STATUS_DLL_NOT_FOUND：缺少运行时 DLL，通常需要安装 Microsoft Visual C++ 运行库。"],
-    0xc0000142: ["STATUS_DLL_INIT_FAILED：运行时 DLL 初始化失败，常见于被安全软件注入的进程。"],
-    0xc0000409: ["STATUS_STACK_BUFFER_OVERRUN：进程被安全检查主动终止。请重装 CodeM CLI，仍复现请反馈。"]
-  }[status];
-  const hex = `0x${status.toString(16).toUpperCase().padStart(8, "0")}`;
-  return [
-    `codem: CLI 二进制被系统终止，NTSTATUS=${hex}（进程在启动阶段被杀，因此没有任何输出）。`,
-    ...(detail ?? ["未知的 Windows 致命错误码，请带上该 NTSTATUS 反馈。"]).map((line) => `codem: ${line}`)
-  ].join("\n");
-}
-
-const binaryPath = resolvePlatformBinary();
-
-if (binaryPath) {
-  let child;
-  let stopWindowsHostMigrationWatch = () => {};
-  try {
-    child = spawn(
-      binaryPath,
-      process.argv.slice(2),
-      applyHostedWindowsChildOptions({
-        stdio: "inherit",
-        env: {
-          ...process.env,
-          // The compiled binary cannot infer a Node executable from its own
-          // process image. The npm launcher is the authority for this install
-          // form and hands off its exact interpreter as the canonical launcher.
-          CODEM_PLUGIN_NODE: process.execPath
-        }
-      })
-    );
-    stopWindowsHostMigrationWatch = watchWindowsDaemonHostMigration({
-      binaryPath,
-      daemonPid: child.pid,
-      launcherPid: process.pid
-    });
-  } catch (error) {
-    reportSpawnFailure(binaryPath, error);
-  }
-
-  // 终端会把 SIGINT/SIGHUP 广播给整个前台进程组，但 execFile timeout、
-  // child.kill()、launchd/systemd 等调用方也会只命中 launcher PID。三类终止
-  // 信号都显式转发，保证后一种场景不会留下 Bun 子进程；child.kill 只命中
-  // 直接子进程，不会把同一信号再次广播给它下面的 linco 进程组。
-  const signalHandlers = new Map();
-  for (const signal of ["SIGTERM", "SIGINT", "SIGHUP"]) {
-    const handler = () => {
-      if (child.exitCode !== null || child.signalCode !== null) {
-        return;
-      }
-      try {
-        child.kill(signal);
-      } catch {
-        // child already gone
-      }
-    };
-    signalHandlers.set(signal, handler);
-    process.on(signal, handler);
-  }
-
-  child.on("error", (error) => {
-    reportSpawnFailure(binaryPath, error);
-  });
-
-  child.on("exit", (code, signal) => {
-    stopWindowsHostMigrationWatch();
-    for (const [registeredSignal, handler] of signalHandlers) {
-      process.removeListener(registeredSignal, handler);
-    }
-    if (signal) {
-      // 让退出信号对上游可见：自己的 handler 已摘掉，可以安全补发同名信号。
-      process.kill(process.pid, signal);
-      return;
-    }
-    const fatal = explainWindowsFatalStatus(code);
-    if (fatal) {
-      writeStderrSync(fatal);
-    }
-    process.exit(code ?? 0);
-  });
-} else {
-  // 两个候选覆盖两种落点：仓根 bin/（→ dist/src）与构建产物 dist/bin/（→ ../src）。
-  const devEntry = [
-    path.join(PACKAGE_ROOT, "dist", "src", "index.js"),
-    path.join(PACKAGE_ROOT, "src", "index.js")
-  ].find((candidate) => fs.existsSync(candidate));
-  if (devEntry) {
-    const { main } = await import(pathToFileURL(devEntry));
-    main().catch((error) => {
-      writeStderrSync(error.message);
-      process.exit(1);
-    });
-  } else {
-    writeStderrSync(
-      `codem: 未找到平台 CLI 包 ${PLATFORM_PACKAGE_NAME}。` +
-        "通常是安装时 optional 依赖被跳过（npm install --no-optional）或当前平台暂不支持；" +
-        "请重新安装 CodeM CLI。"
-    );
-    process.exit(1);
-  }
-}
+#!/usr/bin/env node
+// Thin launcher for the compiled CodeM CLI binary.
+//
+// 主包 @lark-codem/codem-cli 不再携带可运行的 JS 源码：真正的 CLI 是
+// bun --compile 产物，按平台拆包发布在 optionalDependencies
+// `@lark-codem/codem-cli-<os>-<arch>` 里（npm 依据平台包 package.json 的
+// os/cpu 字段自动只装匹配的那个）。本文件是保留给所有历史消费方的稳定入口
+// （npm bin 链接、daemon-service.cjs、codem-app 的 CodemCLIResolver、
+// codem-shim 等都指向 bin/codem.js）：解析平台包里的二进制，spawn 并透传
+// stdio / 信号 / 退出码。
+//
+// 开发态兜底：repo checkout 里没有平台包，若 ../dist/src/index.js 存在
+// （npm run build 产物），直接 import 执行——`node bin/codem.js` 在仓内可用。
+
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+import {
+  applyHostedWindowsChildOptions,
+  watchWindowsDaemonHostMigration
+} from "./platform-child-process.js";
+
+const require = createRequire(import.meta.url);
+const LAUNCHER_DIR = path.dirname(fileURLToPath(import.meta.url));
+const PACKAGE_ROOT = path.resolve(LAUNCHER_DIR, "..");
+// scope 从自己的安装落点推导（…/node_modules/<scope>/codem-cli/bin/codem.js），
+// 不能写死单一 scope：历史 @byted-meego（bnpm）与公网 @lark-codem 两套包树
+// 都用这同一份 launcher，平台包 scope 跟随主包。非 npm 布局（scope 目录名
+// 不带 @）回退发布 scope。
+const SCOPE_DIR_NAME = path.basename(path.dirname(PACKAGE_ROOT));
+const PACKAGE_SCOPE = SCOPE_DIR_NAME.startsWith("@") ? SCOPE_DIR_NAME : "@lark-codem";
+const PLATFORM_PACKAGE_NAME = `${PACKAGE_SCOPE}/codem-cli-${process.platform}-${process.arch}`;
+const BINARY_NAME = process.platform === "win32" ? "codem.exe" : "codem";
+
+function resolvePlatformBinary() {
+  // 常规路径：npm 已把平台包装进依赖树，走标准解析。
+  try {
+    const manifestPath = require.resolve(`${PLATFORM_PACKAGE_NAME}/package.json`);
+    return path.join(path.dirname(manifestPath), "bin", BINARY_NAME);
+  } catch {
+    // fall through to explicit probes
+  }
+
+  // 兜底探测：主包自己的 node_modules 与同 scope 兄弟目录（npm 提升安装）。
+  const [scope, name] = PLATFORM_PACKAGE_NAME.split("/");
+  const candidates = [
+    path.join(PACKAGE_ROOT, "node_modules", scope, name, "bin", BINARY_NAME),
+    path.join(path.dirname(PACKAGE_ROOT), name, "bin", BINARY_NAME)
+  ];
+  return candidates.find((candidate) => fs.existsSync(candidate)) ?? null;
+}
+
+// spawn 的失败有两条互斥出口：只有 EACCES / EAGAIN / EMFILE / ENFILE / ENOENT
+// 会被 Node 降级成异步 `error` 事件，其余 errno（ENOEXEC / ENOTDIR / EPERM，以及
+// Windows 上杀软 / EDR 拦截 CreateProcessW 时 libuv 报的 UNKNOWN=-4094）在
+// `child_process.spawn` 里直接 `throw new ErrnoException(err, 'spawn')`。
+// stderr 同步写。本文件里每一条诊断后面都紧跟 process.exit，而 process.exit()
+// 按 Node 官方契约会**放弃尚未完成的 stdout/stderr I/O**（"a note on process I/O"）。
+// stderr 是否同步取决于它接的是什么：
+//   Files —— Windows / POSIX 均同步
+//   Pipes —— Windows / POSIX 均同步
+//   TTY   —— POSIX 同步，**Windows 异步**
+// 最需要这些诊断的现场恰恰落在唯一异步的那格：用户在 PowerShell 里交互式敲
+// codem，stderr 就是 Windows TTY。走 console.error 时诊断可能被截断甚至整条丢失，
+// 用户继续看到「零输出」——正是本次修复要消灭的现象，等于修了个寂寞。
+// fs.writeSync 绕过流缓冲直接写 fd，返回即已落地，不受 process.exit 影响。
+function writeStderrSync(message) {
+  const line = `${message}\n`;
+  try {
+    fs.writeSync(process.stderr.fd, line);
+  } catch {
+    // fd 已关闭 / EPIPE 等场景下不能再抛：诊断本身不该变成新的失败源。
+    // 退回流式写尽力而为——此时能不能送达已不由本进程决定。
+    try {
+      process.stderr.write(line);
+    } catch {
+      // 到这里已无可用错误通道，只能放弃。
+    }
+  }
+}
+
+// 两条出口必须汇到同一个 reporter：只挂 child.on("error") 的话，后一类失败会以
+// 一段指向 node:internal/child_process 的裸栈抛给用户——codem-cli 的平台二进制是
+// bun --compile 出来的未签名可执行文件，Windows 上被拦截是真实可达路径。
+function reportSpawnFailure(targetPath, error) {
+  const code = error?.code ?? "UNKNOWN";
+  const errno = error?.errno ?? "unknown";
+  const detail = error?.message ?? String(error);
+  const lines = [
+    `codem: 无法启动 CLI 二进制（${targetPath}）：${detail}`,
+    `codem: 失败细节 code=${code} errno=${errno} platform=${process.platform}`
+  ];
+  if (process.platform === "win32") {
+    lines.push(
+      "codem: Windows 上最常见的成因是杀毒软件 / EDR 拦截了进程创建（此时 libuv 只能报 UNKNOWN/-4094）。",
+      `codem: 请把该路径加入杀软白名单后重新安装 CodeM CLI；或先在 PowerShell 里直接裸跑 & "${targetPath}" --version，`,
+      "codem: 操作系统给出的错误会比这里的 spawn 报错具体得多。"
+    );
+  }
+  writeStderrSync(lines.join("\n"));
+  process.exit(1);
+}
+
+// Windows NTSTATUS 翻译。0xC0000000 以上是内核致命错误码：进程在 main 之前就被
+// 杀掉，stdio 里不会有任何字节。不翻译的话用户侧现象是「敲 codem 完全没反应」，
+// 连一条能拿去搜的错误串都没有——实测一例 AVX2 缺失，PATH / launcher / 指针 /
+// 运行时四层全部正常，三层把同一个退出码原样透传上来，用户完全无从判断断在哪。
+// 这里只往 stderr 补一条说明，退出码仍原样透传，不改变对上游的语义。
+//
+// code 的符号表示两可：libuv 从 GetExitCodeProcess 拿到的是 DWORD，Node 侧多为
+// 正数（0xC000001D → 3221225501），而 shell 常按 int32 显示（-1073741795）。
+// `>>> 0` 把两种表示归一到同一个无符号值，避免只判其中一种而漏掉。
+function explainWindowsFatalStatus(code) {
+  if (process.platform !== "win32" || typeof code !== "number") {
+    return null;
+  }
+  const status = code >>> 0;
+  if (status < 0xc0000000) {
+    return null;
+  }
+  const detail = {
+    0xc000001d: [
+      "STATUS_ILLEGAL_INSTRUCTION：CPU 不支持二进制中用到的指令集，最常见是缺少 AVX2。",
+      "注意「年份新」不代表有 AVX2：Intel 在 Pentium Gold / Celeron 整条产品线上熔断了",
+      "AVX/AVX2（如 2020 年的 Pentium Gold G6400）；Atom / Gemini Lake、Sandy/Ivy Bridge",
+      "以及屏蔽 AVX2 的虚拟化环境同理。请升级到使用 baseline 产线的 CodeM 版本。",
+      "自查（PowerShell，返回 False 即无 AVX2）：",
+      "  Add-Type -Namespace W -Name K -MemberDefinition '[DllImport(\"kernel32.dll\")] public static extern bool IsProcessorFeaturePresent(uint f);'",
+      "  [W.K]::IsProcessorFeaturePresent(40)"
+    ],
+    0xc0000005: ["STATUS_ACCESS_VIOLATION：二进制崩溃（段错误）。请重装 CodeM CLI，仍复现请反馈。"],
+    0xc0000022: ["STATUS_ACCESS_DENIED：进程被拒绝执行，通常是杀毒软件 / EDR 拦截。请把 CodeM 安装目录加入白名单。"],
+    0xc000007b: ["STATUS_INVALID_IMAGE_FORMAT：可执行文件架构与系统不匹配（x64 / ARM64 错配）。请重装 CodeM CLI。"],
+    0xc0000135: ["STATUS_DLL_NOT_FOUND：缺少运行时 DLL，通常需要安装 Microsoft Visual C++ 运行库。"],
+    0xc0000142: ["STATUS_DLL_INIT_FAILED：运行时 DLL 初始化失败，常见于被安全软件注入的进程。"],
+    0xc0000409: ["STATUS_STACK_BUFFER_OVERRUN：进程被安全检查主动终止。请重装 CodeM CLI，仍复现请反馈。"]
+  }[status];
+  const hex = `0x${status.toString(16).toUpperCase().padStart(8, "0")}`;
+  return [
+    `codem: CLI 二进制被系统终止，NTSTATUS=${hex}（进程在启动阶段被杀，因此没有任何输出）。`,
+    ...(detail ?? ["未知的 Windows 致命错误码，请带上该 NTSTATUS 反馈。"]).map((line) => `codem: ${line}`)
+  ].join("\n");
+}
+
+const binaryPath = resolvePlatformBinary();
+
+if (binaryPath) {
+  let child;
+  let stopWindowsHostMigrationWatch = () => {};
+  try {
+    child = spawn(
+      binaryPath,
+      process.argv.slice(2),
+      applyHostedWindowsChildOptions({
+        stdio: "inherit",
+        env: {
+          ...process.env,
+          // The compiled binary cannot infer a Node executable from its own
+          // process image. The npm launcher is the authority for this install
+          // form and hands off its exact interpreter as the canonical launcher.
+          CODEM_PLUGIN_NODE: process.execPath
+        }
+      })
+    );
+    stopWindowsHostMigrationWatch = watchWindowsDaemonHostMigration({
+      binaryPath,
+      daemonPid: child.pid,
+      launcherPid: process.pid
+    });
+  } catch (error) {
+    reportSpawnFailure(binaryPath, error);
+  }
+
+  // 终端会把 SIGINT/SIGHUP 广播给整个前台进程组，但 execFile timeout、
+  // child.kill()、launchd/systemd 等调用方也会只命中 launcher PID。三类终止
+  // 信号都显式转发，保证后一种场景不会留下 Bun 子进程；child.kill 只命中
+  // 直接子进程，不会把同一信号再次广播给它下面的 linco 进程组。
+  const signalHandlers = new Map();
+  for (const signal of ["SIGTERM", "SIGINT", "SIGHUP"]) {
+    const handler = () => {
+      if (child.exitCode !== null || child.signalCode !== null) {
+        return;
+      }
+      try {
+        child.kill(signal);
+      } catch {
+        // child already gone
+      }
+    };
+    signalHandlers.set(signal, handler);
+    process.on(signal, handler);
+  }
+
+  child.on("error", (error) => {
+    reportSpawnFailure(binaryPath, error);
+  });
+
+  child.on("exit", (code, signal) => {
+    stopWindowsHostMigrationWatch();
+    for (const [registeredSignal, handler] of signalHandlers) {
+      process.removeListener(registeredSignal, handler);
+    }
+    if (signal) {
+      // 让退出信号对上游可见：自己的 handler 已摘掉，可以安全补发同名信号。
+      process.kill(process.pid, signal);
+      return;
+    }
+    const fatal = explainWindowsFatalStatus(code);
+    if (fatal) {
+      writeStderrSync(fatal);
+    }
+    process.exit(code ?? 0);
+  });
+} else {
+  // 两个候选覆盖两种落点：仓根 bin/（→ dist/src）与构建产物 dist/bin/（→ ../src）。
+  const devEntry = [
+    path.join(PACKAGE_ROOT, "dist", "src", "index.js"),
+    path.join(PACKAGE_ROOT, "src", "index.js")
+  ].find((candidate) => fs.existsSync(candidate));
+  if (devEntry) {
+    const { main } = await import(pathToFileURL(devEntry));
+    main().catch((error) => {
+      writeStderrSync(error.message);
+      process.exit(1);
+    });
+  } else {
+    writeStderrSync(
+      `codem: 未找到平台 CLI 包 ${PLATFORM_PACKAGE_NAME}。` +
+        "通常是安装时 optional 依赖被跳过（npm install --no-optional）或当前平台暂不支持；" +
+        "请重新安装 CodeM CLI。"
+    );
+    process.exit(1);
+  }
+}

package/bin/platform-child-process.js

@@ -1,178 +1,178 @@
-import { spawn } from "node:child_process";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-
-const WINDOWS_LEGACY_DAEMON_CAPABILITY = "shutdown_for_service_operation";
-const WINDOWS_LEGACY_DAEMON_CAPABILITY_RELATIVE_PATH = path.join(
-  "runtime",
-  "legacy-daemon-control",
-  "capability.json"
-);
-
-// The dedicated Windows daemon Host owns the top-level console policy.  Every
-// child it can reach must stay hidden, and a local spawn option must not be able
-// to undo that invariant.  Interactive and non-Windows launches keep their
-// options object untouched.
-export function applyHostedWindowsChildOptions(
-  options = {},
-  {
-    // Hosted mode belongs to the current daemon process, not to the child env
-    // object supplied by an individual caller. Otherwise a caller could omit
-    // or replace `options.env` and accidentally bypass the console invariant.
-    env = process.env,
-    platform = process.platform
-  } = {}
-) {
-  if (platform !== "win32" || env?.CODEM_DAEMON_HOSTED_WINDOWS !== "1") {
-    return options;
-  }
-
-  return {
-    ...options,
-    windowsHide: true
-  };
-}
-
-export function shouldWatchWindowsDaemonHostMigration({
-  platform = process.platform,
-  argv = process.argv.slice(2),
-  env = process.env
-} = {}) {
-  return platform === "win32" &&
-    argv[0] === "daemon" &&
-    env?.CODEM_DAEMON_HOSTED_WINDOWS !== "1" &&
-    typeof env?.CODEM_DAEMON_RUNTIME_CLIENT_INSTANCE_ID === "string" &&
-    env.CODEM_DAEMON_RUNTIME_CLIENT_INSTANCE_ID.trim() !== "";
-}
-
-export function isCurrentWindowsLegacyDaemonCapability(
-  value,
-  { daemonPid, startedAtMs } = {}
-) {
-  return value?.schemaVersion === 1 &&
-    value?.protocolVersion === 1 &&
-    value?.capability === WINDOWS_LEGACY_DAEMON_CAPABILITY &&
-    Number(value?.rootIdentity?.pid) === daemonPid &&
-    Number(value?.publishedAtUnixMs) >= startedAtMs;
-}
-
-export function launchWindowsDaemonHostMigration({
-  binaryPath,
-  launcherPid = process.pid,
-  env = process.env,
-  spawnImpl = spawn
-} = {}) {
-  if (String(binaryPath).includes("'")) {
-    throw new Error("CodeM runtime path cannot be represented in the Windows migration handoff");
-  }
-  const workingDirectory = path.win32.dirname(binaryPath);
-  if (workingDirectory.includes("'")) {
-    throw new Error("CodeM working directory cannot be represented in the Windows migration handoff");
-  }
-  const commandLine = `"${binaryPath}" service start --windows-migration-launcher-pid ${launcherPid}`;
-  const script = [
-    "$startup = ([wmiclass]'Win32_ProcessStartup').CreateInstance()",
-    "$startup.ShowWindow = 0",
-    `$result = ([wmiclass]'Win32_Process').Create('${commandLine}', '${workingDirectory}', $startup)`,
-    "if ($null -eq $result -or [int]$result.ReturnValue -ne 0) { exit 1 }"
-  ].join("\r\n");
-  const powershellPath = path.win32.join(
-    env?.SystemRoot || String.raw`C:\Windows`,
-    "System32",
-    "WindowsPowerShell",
-    "v1.0",
-    "powershell.exe"
-  );
-  const bridge = spawnImpl(powershellPath, [
-    "-NoLogo",
-    "-NoProfile",
-    "-NonInteractive",
-    "-WindowStyle",
-    "Hidden",
-    "-EncodedCommand",
-    Buffer.from(script, "utf16le").toString("base64")
-  ], {
-    env,
-    stdio: "ignore",
-    windowsHide: true
-  });
-  // Task Scheduler may place the launcher in a Job. CREATE_NEW_PROCESS_GROUP
-  // (`detached` in Node) does not escape that Job. Windows PowerShell delegates
-  // the exact worker creation to Win32_Process.Create, whose documented
-  // contract creates it outside the caller's Job; the short-lived bridge can
-  // then remain inside the Task without owning migration lifetime.
-  bridge.once?.("error", () => {});
-  bridge.unref?.();
-  return bridge;
-}
-
-export function watchWindowsDaemonHostMigration({
-  binaryPath,
-  daemonPid,
-  launcherPid = process.pid,
-  argv = process.argv.slice(2),
-  env = process.env,
-  platform = process.platform,
-  codemHome = env?.CODEM_HOME || path.join(env?.USERPROFILE || os.homedir(), ".codem"),
-  fsImpl = fs,
-  spawnImpl = spawn,
-  pollIntervalMs = 250,
-  timeoutMs = 60_000,
-  nowImpl = Date.now,
-  setTimeoutImpl = setTimeout,
-  clearTimeoutImpl = clearTimeout
-} = {}) {
-  if (!shouldWatchWindowsDaemonHostMigration({ platform, argv, env })) {
-    return () => {};
-  }
-
-  const capabilityPath = path.join(codemHome, WINDOWS_LEGACY_DAEMON_CAPABILITY_RELATIVE_PATH);
-  const startedAtMs = nowImpl();
-  let stopped = false;
-  let timer = null;
-
-  const stop = () => {
-    stopped = true;
-    if (timer !== null) {
-      clearTimeoutImpl(timer);
-      timer = null;
-    }
-  };
-  const schedule = () => {
-    if (stopped) return;
-    timer = setTimeoutImpl(() => {
-      timer = null;
-      void probe();
-    }, pollIntervalMs);
-    timer?.unref?.();
-  };
-  const probe = async () => {
-    if (stopped) return;
-    try {
-      const value = JSON.parse(await fsImpl.readFile(capabilityPath, "utf8"));
-      if (isCurrentWindowsLegacyDaemonCapability(value, { daemonPid, startedAtMs })) {
-        stop();
-        launchWindowsDaemonHostMigration({
-          binaryPath,
-          launcherPid,
-          env,
-          spawnImpl
-        });
-        return;
-      }
-    } catch {
-      // Capability publication is atomic and expected to be absent while the
-      // daemon starts. A malformed/unreadable file is never accepted; keep the
-      // bounded watcher alive so a later valid replacement can win.
-    }
-    if (nowImpl() - startedAtMs >= timeoutMs) {
-      stop();
-      return;
-    }
-    schedule();
-  };
-
-  void probe();
-  return stop;
-}
+import { spawn } from "node:child_process";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+
+const WINDOWS_LEGACY_DAEMON_CAPABILITY = "shutdown_for_service_operation";
+const WINDOWS_LEGACY_DAEMON_CAPABILITY_RELATIVE_PATH = path.join(
+  "runtime",
+  "legacy-daemon-control",
+  "capability.json"
+);
+
+// The dedicated Windows daemon Host owns the top-level console policy.  Every
+// child it can reach must stay hidden, and a local spawn option must not be able
+// to undo that invariant.  Interactive and non-Windows launches keep their
+// options object untouched.
+export function applyHostedWindowsChildOptions(
+  options = {},
+  {
+    // Hosted mode belongs to the current daemon process, not to the child env
+    // object supplied by an individual caller. Otherwise a caller could omit
+    // or replace `options.env` and accidentally bypass the console invariant.
+    env = process.env,
+    platform = process.platform
+  } = {}
+) {
+  if (platform !== "win32" || env?.CODEM_DAEMON_HOSTED_WINDOWS !== "1") {
+    return options;
+  }
+
+  return {
+    ...options,
+    windowsHide: true
+  };
+}
+
+export function shouldWatchWindowsDaemonHostMigration({
+  platform = process.platform,
+  argv = process.argv.slice(2),
+  env = process.env
+} = {}) {
+  return platform === "win32" &&
+    argv[0] === "daemon" &&
+    env?.CODEM_DAEMON_HOSTED_WINDOWS !== "1" &&
+    typeof env?.CODEM_DAEMON_RUNTIME_CLIENT_INSTANCE_ID === "string" &&
+    env.CODEM_DAEMON_RUNTIME_CLIENT_INSTANCE_ID.trim() !== "";
+}
+
+export function isCurrentWindowsLegacyDaemonCapability(
+  value,
+  { daemonPid, startedAtMs } = {}
+) {
+  return value?.schemaVersion === 1 &&
+    value?.protocolVersion === 1 &&
+    value?.capability === WINDOWS_LEGACY_DAEMON_CAPABILITY &&
+    Number(value?.rootIdentity?.pid) === daemonPid &&
+    Number(value?.publishedAtUnixMs) >= startedAtMs;
+}
+
+export function launchWindowsDaemonHostMigration({
+  binaryPath,
+  launcherPid = process.pid,
+  env = process.env,
+  spawnImpl = spawn
+} = {}) {
+  if (String(binaryPath).includes("'")) {
+    throw new Error("CodeM runtime path cannot be represented in the Windows migration handoff");
+  }
+  const workingDirectory = path.win32.dirname(binaryPath);
+  if (workingDirectory.includes("'")) {
+    throw new Error("CodeM working directory cannot be represented in the Windows migration handoff");
+  }
+  const commandLine = `"${binaryPath}" service start --windows-migration-launcher-pid ${launcherPid}`;
+  const script = [
+    "$startup = ([wmiclass]'Win32_ProcessStartup').CreateInstance()",
+    "$startup.ShowWindow = 0",
+    `$result = ([wmiclass]'Win32_Process').Create('${commandLine}', '${workingDirectory}', $startup)`,
+    "if ($null -eq $result -or [int]$result.ReturnValue -ne 0) { exit 1 }"
+  ].join("\r\n");
+  const powershellPath = path.win32.join(
+    env?.SystemRoot || String.raw`C:\Windows`,
+    "System32",
+    "WindowsPowerShell",
+    "v1.0",
+    "powershell.exe"
+  );
+  const bridge = spawnImpl(powershellPath, [
+    "-NoLogo",
+    "-NoProfile",
+    "-NonInteractive",
+    "-WindowStyle",
+    "Hidden",
+    "-EncodedCommand",
+    Buffer.from(script, "utf16le").toString("base64")
+  ], {
+    env,
+    stdio: "ignore",
+    windowsHide: true
+  });
+  // Task Scheduler may place the launcher in a Job. CREATE_NEW_PROCESS_GROUP
+  // (`detached` in Node) does not escape that Job. Windows PowerShell delegates
+  // the exact worker creation to Win32_Process.Create, whose documented
+  // contract creates it outside the caller's Job; the short-lived bridge can
+  // then remain inside the Task without owning migration lifetime.
+  bridge.once?.("error", () => {});
+  bridge.unref?.();
+  return bridge;
+}
+
+export function watchWindowsDaemonHostMigration({
+  binaryPath,
+  daemonPid,
+  launcherPid = process.pid,
+  argv = process.argv.slice(2),
+  env = process.env,
+  platform = process.platform,
+  codemHome = env?.CODEM_HOME || path.join(env?.USERPROFILE || os.homedir(), ".codem"),
+  fsImpl = fs,
+  spawnImpl = spawn,
+  pollIntervalMs = 250,
+  timeoutMs = 60_000,
+  nowImpl = Date.now,
+  setTimeoutImpl = setTimeout,
+  clearTimeoutImpl = clearTimeout
+} = {}) {
+  if (!shouldWatchWindowsDaemonHostMigration({ platform, argv, env })) {
+    return () => {};
+  }
+
+  const capabilityPath = path.join(codemHome, WINDOWS_LEGACY_DAEMON_CAPABILITY_RELATIVE_PATH);
+  const startedAtMs = nowImpl();
+  let stopped = false;
+  let timer = null;
+
+  const stop = () => {
+    stopped = true;
+    if (timer !== null) {
+      clearTimeoutImpl(timer);
+      timer = null;
+    }
+  };
+  const schedule = () => {
+    if (stopped) return;
+    timer = setTimeoutImpl(() => {
+      timer = null;
+      void probe();
+    }, pollIntervalMs);
+    timer?.unref?.();
+  };
+  const probe = async () => {
+    if (stopped) return;
+    try {
+      const value = JSON.parse(await fsImpl.readFile(capabilityPath, "utf8"));
+      if (isCurrentWindowsLegacyDaemonCapability(value, { daemonPid, startedAtMs })) {
+        stop();
+        launchWindowsDaemonHostMigration({
+          binaryPath,
+          launcherPid,
+          env,
+          spawnImpl
+        });
+        return;
+      }
+    } catch {
+      // Capability publication is atomic and expected to be absent while the
+      // daemon starts. A malformed/unreadable file is never accepted; keep the
+      // bounded watcher alive so a later valid replacement can win.
+    }
+    if (nowImpl() - startedAtMs >= timeoutMs) {
+      stop();
+      return;
+    }
+    schedule();
+  };
+
+  void probe();
+  return stop;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-codem/codem-cli",
-  "version": "0.1.226-dev-trace-task.100102444781.0.ga44791f",
+  "version": "0.1.226-dev-p1-mac.100102447463.0.g9e29c9f",
   "codemServiceManagementProtocol": 3,
   "type": "module",
   "description": "CodeM local CLI for Feishu-driven coding sessions",
@@ -27,15 +27,10 @@
     "access": "public"
   },
   "dependencies": {
-    "@lark-codem/codem-core": "0.8.59-dev-trace-task.100102444781.0.g476ac2b"
+    "@lark-codem/codem-core": "0.8.58"
   },
   "optionalDependencies": {
-    "@lark-codem/codem-cli-darwin-arm64": "0.1.226-dev-trace-task.100102444781.0.ga44791f",
-    "@lark-codem/codem-cli-darwin-x64": "0.1.226-dev-trace-task.100102444781.0.ga44791f",
-    "@lark-codem/codem-cli-linux-x64": "0.1.226-dev-trace-task.100102444781.0.ga44791f",
-    "@lark-codem/codem-cli-linux-arm64": "0.1.226-dev-trace-task.100102444781.0.ga44791f",
-    "@lark-codem/codem-cli-win32-arm64": "0.1.226-dev-trace-task.100102444781.0.ga44791f",
-    "@lark-codem/codem-cli-win32-x64": "0.1.226-dev-trace-task.100102444781.0.ga44791f"
+    "@lark-codem/codem-cli-darwin-arm64": "0.1.226-dev-p1-mac.100102447463.0.g9e29c9f"
   },
   "engines": {
     "node": ">=18"