@petercjl/codex-own 0.2.0 → 0.2.1

package/README.md

@@ -76,7 +76,7 @@ $codexOwn = Join-Path (npm.cmd prefix --global) "codex-own.cmd"
 & $codexOwn install --yes
 ```
 
-管理工具和桌面资源全部从 registry.npmjs.org 下载。Windows 桌面下载量约 878 MiB，安装时显示分片编号、下载百分比和已接收大小，然后显示校验、解压、安装。看到“安装完成”和 ok: true 才表示完成。
+管理工具和桌面资源全部从 registry.npmjs.org 下载。Windows 桌面下载量约 878 MiB，最多并行下载 4 个分片，安装时显示分片编号、下载百分比和已接收大小，然后显示校验、解压、安装。看到“安装完成”和 ok: true 才表示完成。
 
 若已有手动安装的 codex-own，先退出应用，将第二步的安装命令替换为以下接管命令；原安装会被备份。
 

package/capabilities.json

@@ -29,6 +29,7 @@
     "cache": "verified platform parts retained for retries",
     "progress": "stderr; final result JSON on stdout",
     "idleTimeoutSeconds": 30,
-    "downloadAttempts": 3
+    "downloadAttempts": 3,
+    "parallelDownloads": 4
   }
 }

package/lib/network.mjs

@@ -13,17 +13,19 @@ export async function fileHash(file) {
   return h.digest('hex');
 }
 export async function verifiedDownload(url, dest, expected, {
-  fetcher = networkFetch, report = progress, idleMs = 30000, attempts = 3, retryMs = 1000,
+  fetcher = networkFetch, report = progress, idleMs = 30000, attempts = 3, retryMs = 1000, signal,
 } = {}) {
   const error = (code, message) => Object.assign(new Error(message), {code});
   if (fs.existsSync(dest)) throw error('TARGET_EXISTS', 'Download destination already exists');
   for (let attempt = 1; attempt <= attempts; attempt++) {
+    if(signal?.aborted)throw error('CANCELLED','Download group cancelled');
     const controller = new AbortController();
     let file, bytes = 0, timer, cancelled = false;
     const start = Date.now();
     const cancel = () => { cancelled = true; controller.abort(); };
     const reset = () => { clearTimeout(timer); timer = setTimeout(() => controller.abort(), idleMs); };
     const tick = () => report(`下载 ${Math.floor(bytes / expected.size * 100)}% · ${(bytes / 1048576).toFixed(1)} / ${(expected.size / 1048576).toFixed(1)} MiB · ${((Date.now()-start)/1000).toFixed(0)}s`);
+    signal?.addEventListener('abort',cancel,{once:true});
     process.once('SIGINT', cancel);
     process.once('SIGTERM', cancel);
     const interval = setInterval(tick, 3000);
@@ -55,6 +57,7 @@ export async function verifiedDownload(url, dest, expected, {
       if (cancelled) throw error('CANCELLED', 'Download cancelled. Verified earlier parts are retained; rerun the install command to continue.');
     } finally {
       clearTimeout(timer); clearInterval(interval);
+      signal?.removeEventListener('abort',cancel);
       process.removeListener('SIGINT', cancel); process.removeListener('SIGTERM', cancel);
       if (file) await file.close();
     }

package/lib/npm-assets.mjs

@@ -24,31 +24,44 @@ function safeCache(file) {
   if (fs.existsSync(file) && (!fs.lstatSync(file).isFile() || fs.lstatSync(file).isSymbolicLink()))
     throw Object.assign(new Error('Unexpected npm asset cache entry'), {code:'UNSAFE_PATH'});
 }
-export async function assembleNpmAsset(asset, dest, cache, tar, {download = verifiedDownload, report = progress} = {}) {
+export async function assembleNpmAsset(asset, dest, cache, tar, {download = verifiedDownload, report = progress, concurrency = 4} = {}) {
   validateParts(asset);
   fs.mkdirSync(cache, {recursive:true, mode:0o700});
-  const files = [];
-  for (const [i, part] of asset.parts.entries()) {
+  if (!Number.isInteger(concurrency) || concurrency < 1 || concurrency > 4) throw new Error('Invalid download concurrency');
+  const controller = new AbortController();
+  async function fetchPart(part, i) {
     report(`npm 资源分片 ${i+1}/${asset.parts.length}`);
     const file = path.join(cache, `${part.sha256}.bin`);
     safeCache(file);
     if (fs.existsSync(file) && fs.statSync(file).size === part.size && await fileHash(file) === part.sha256) {
-      report('复用已校验分片'); files.push(file); continue;
+      report(`[${i+1}/${asset.parts.length}] 复用已校验分片`); return file;
     }
     if (fs.existsSync(file)) fs.unlinkSync(file);
     const scratch = fs.mkdtempSync(path.join(cache, 'fetch-'));
     try {
       const archive = path.join(scratch, 'package.tgz');
-      await download(part.url, archive, {size:part.archiveSize, sha256:part.archiveSha256});
+      await download(part.url, archive, {size:part.archiveSize, sha256:part.archiveSha256}, {signal:controller.signal, report:message=>report(`[${i+1}/${asset.parts.length}] ${message}`)});
       // Extract only the fixed payload entry, never arbitrary paths from a package tarball.
       execFileSync(tar, ['-xf', archive, '-C', scratch, 'package/payload.bin'], {stdio:'pipe'});
       const payload = path.join(scratch, 'package', 'payload.bin');
       safeCache(payload);
       if (fs.statSync(payload).size !== part.size || await fileHash(payload) !== part.sha256)
         throw Object.assign(new Error('npm payload checksum mismatch'), {code:'CHECKSUM_MISMATCH'});
-      fs.renameSync(payload, file); files.push(file);
+      fs.renameSync(payload, file); return file;
     } finally { fs.rmSync(scratch, {recursive:true,force:true}); }
   }
+  const unique = [...new Map(asset.parts.map((part,i)=>[part.sha256,{part,i}])).values()];
+  const completed = new Map(); let cursor = 0, failure;
+  async function worker() {
+    while(!controller.signal.aborted && cursor < unique.length) {
+      const {part,i}=unique[cursor++];
+      try { completed.set(part.sha256,await fetchPart(part,i)); }
+      catch(e) { if(!failure)failure=e;controller.abort();throw e; }
+    }
+  }
+  await Promise.allSettled(Array.from({length:Math.min(concurrency,unique.length)},worker));
+  if(failure)throw failure;
+  const files=asset.parts.map(part=>completed.get(part.sha256));
   report('合并并校验完整桌面安装包');
   const output = fs.createWriteStream(dest, {flags:'wx',mode:0o600});
   async function* chunks() { for (const f of files) yield* fs.createReadStream(f); }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@petercjl/codex-own",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Independent codex-own desktop installation and update manager",
   "type": "module",
   "bin": {
@@ -44,7 +44,7 @@
   "ownDesktopManifest": {
     "schema": 2,
     "repository": "petercjl/codex-own",
-    "version": "0.2.0",
+    "version": "0.2.1",
     "platforms": {
       "darwin-arm64": {
         "entry": "codex-own.app",
@@ -155,22 +155,46 @@
     "provenance": {
       "darwin-arm64": {
         "darwin-arm64": {
-          "sourceRelease": "own-v0.1.0"
+          "darwin-arm64": {
+            "sourceRelease": "own-v0.1.0"
+          },
+          "win32-x64": {
+            "kind": "prepared-independent-build",
+            "desktopVersion": "26.1007.21434",
+            "guiAcceptance": "user-pending"
+          }
         },
         "win32-x64": {
-          "kind": "prepared-independent-build",
-          "desktopVersion": "26.1007.21434",
-          "guiAcceptance": "user-pending"
+          "darwin-arm64": {
+            "sourceRelease": "own-v0.1.0"
+          },
+          "win32-x64": {
+            "kind": "prepared-independent-build",
+            "desktopVersion": "26.1007.21434",
+            "guiAcceptance": "user-pending"
+          }
         }
       },
       "win32-x64": {
         "darwin-arm64": {
-          "sourceRelease": "own-v0.1.0"
+          "darwin-arm64": {
+            "sourceRelease": "own-v0.1.0"
+          },
+          "win32-x64": {
+            "kind": "prepared-independent-build",
+            "desktopVersion": "26.1007.21434",
+            "guiAcceptance": "user-pending"
+          }
         },
         "win32-x64": {
-          "kind": "prepared-independent-build",
-          "desktopVersion": "26.1007.21434",
-          "guiAcceptance": "user-pending"
+          "darwin-arm64": {
+            "sourceRelease": "own-v0.1.0"
+          },
+          "win32-x64": {
+            "kind": "prepared-independent-build",
+            "desktopVersion": "26.1007.21434",
+            "guiAcceptance": "user-pending"
+          }
         }
       }
     }

package/release.json

@@ -1,7 +1,7 @@
 {
   "schema": 2,
   "repository": "petercjl/codex-own",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "platforms": {
     "darwin-arm64": {
       "entry": "codex-own.app",
@@ -112,22 +112,46 @@
   "provenance": {
     "darwin-arm64": {
       "darwin-arm64": {
-        "sourceRelease": "own-v0.1.0"
+        "darwin-arm64": {
+          "sourceRelease": "own-v0.1.0"
+        },
+        "win32-x64": {
+          "kind": "prepared-independent-build",
+          "desktopVersion": "26.1007.21434",
+          "guiAcceptance": "user-pending"
+        }
       },
       "win32-x64": {
-        "kind": "prepared-independent-build",
-        "desktopVersion": "26.1007.21434",
-        "guiAcceptance": "user-pending"
+        "darwin-arm64": {
+          "sourceRelease": "own-v0.1.0"
+        },
+        "win32-x64": {
+          "kind": "prepared-independent-build",
+          "desktopVersion": "26.1007.21434",
+          "guiAcceptance": "user-pending"
+        }
       }
     },
     "win32-x64": {
       "darwin-arm64": {
-        "sourceRelease": "own-v0.1.0"
+        "darwin-arm64": {
+          "sourceRelease": "own-v0.1.0"
+        },
+        "win32-x64": {
+          "kind": "prepared-independent-build",
+          "desktopVersion": "26.1007.21434",
+          "guiAcceptance": "user-pending"
+        }
       },
       "win32-x64": {
-        "kind": "prepared-independent-build",
-        "desktopVersion": "26.1007.21434",
-        "guiAcceptance": "user-pending"
+        "darwin-arm64": {
+          "sourceRelease": "own-v0.1.0"
+        },
+        "win32-x64": {
+          "kind": "prepared-independent-build",
+          "desktopVersion": "26.1007.21434",
+          "guiAcceptance": "user-pending"
+        }
       }
     }
   }

package/skills/codex-own/SKILL.md

@@ -29,3 +29,5 @@ For installation-only acceptance, verify doctor, version, target and shortcut wi
 - Manage this bundled Skill through `skill status/install/update --agent codex|sealseek`. For another Agent use its configured `--target-root`, not a guessed path. Unknown existing Skill targets are refused, managed updates retain backups and customized UI metadata.
 
 The portable contract uses a terminal that can invoke the same CLI on either Agent. Agent-specific scheduling and publication are repository operations, outside ordinary installation. Runtime must not rewrite its own source. A recurring failure belongs in an authorized implementation/test change.
+
+Downloads use at most four parallel npm payload requests, label progress by part, preserve archive order, and cancel active peer downloads on failure.