@skylandnpm/octopus-proxy 0.1.51 → 0.1.53

package/README.md

@@ -20,7 +20,7 @@ Proxy 主动连接 Hub 的 `/ws/proxy-chat`，无需开放入站端口或安装
 
 macOS 12.3 及以上运行 `octopus-proxy onboard` 时，配置保存后、服务启动前会准备截屏辅助程序并申请系统屏幕录制权限；已授权时不会重复弹窗。交互模式和 `--non-interactive` 均执行此步骤，`--no-install-service` 也会申请。请在系统弹窗中允许访问；拒绝、超时或辅助程序编译失败时，向导提示原因与授权路径，并继续初始化。在“系统设置 → 隐私与安全性 → 屏幕录制（或屏幕与系统音频录制）”中应授权弹窗显示的实际程序，可能是 Terminal、iTerm、编辑器或 node，不保证出现 `octopus-desktop-capture`。onboard 和 doctor 会显示辅助程序路径，文件名不等于系统授权名称。终端授权不代表后台服务已授权，需在 Claw 点击截屏，让实际服务申请权限，按实际名称授权后重启 Proxy。Linux 没有通用的截屏授权弹窗，需使用桌面用户的图形会话环境；平台依赖与设置见[桌面快照说明](../../docs/claw-desktop-snapshots.md)。
 
-添加授权项目时，填写项目 ID 后会询问是否继续添加；直接回车即可结束添加并继续保存配置。
+基础设置完成后，向导会提示至少需要配置一个工作项目。新项目依次填写项目 ID、名称（默认使用项目 ID）和目录；完成第一个项目后，可选择继续添加更多项目，或直接回车完成项目配置并继续保存。只有选择继续添加时，才会进入下一个项目 ID 的输入流程。
 
 `octopus-proxy doctor` 会显示“桌面截屏支持”和“屏幕录制权限”：macOS 检查系统版本、辅助程序、活动显示器和当前授权状态；未授权时给出 onboard 申请及系统设置指引。Linux 检查图形会话、显示器和截屏依赖，缺少依赖、无桌面或不支持的 Wayland 环境会显示具体提示；Linux 无统一的授权查询接口，因此会明确显示权限尚无法确认，需在 Claw 实际截屏验证。诊断不触发授权弹窗、不截屏，`doctor --fix` 也不会自动申请截屏权限。这些检查使用运行 doctor 的用户与环境；服务以其他启动程序或图形会话运行时，其权限与环境需要单独确认。
 
@@ -102,6 +102,23 @@ octopus-proxy update
 
 安装或版本校验失败时不会触发服务重启；包安装失败不保证旧版本文件完整保留。已安装新版本但重启失败时会单独提示，可运行 `octopus-proxy doctor` 和 `octopus-proxy logs` 排查。此命令用于 npm 全局安装，覆盖安装前会检查 npm 安装目录是否与当前命令一致；源码、本地安装或 Node.js 环境不一致时会中止并给出提示。
 
+## 服务启动时报 `Unexpected token '??='`
+
+这通常表示服务实际使用了旧版 Node.js。错误栈中 `.nvm/versions/node/v22.../lib/node_modules` 是包的安装位置，不能说明运行它的 Node.js 版本。安装器只会选择 Node.js 22 或更高版本；旧版安装器可能优先选中能执行 `--version` 的旧系统 Node。
+
+对于通过 NVM 安装的环境，可切换到安装 Proxy 的 Node.js 版本，并重写服务定义，明确指定服务使用的 Node。例如包安装在 `v22.22.0` 下时：
+
+```sh
+nvm use 22.22.0
+node --version
+octopus-proxy install --force --node-path "$(node -p 'process.execPath')"
+octopus-proxy status
+```
+
+`install --force` 会重写并重新加载服务定义，保留配置和状态数据；自定义配置时带上原来的 `--config <path>`。单独运行 `restart` 会继续使用已有服务定义中的 Node 路径。NVM 中被固定的版本需要保留，删除该版本后应重新安装服务。
+
+`octopus-proxy doctor` 会分别显示当前命令和已安装服务的 Node.js 路径、版本及最低要求（Node.js >= 22）。服务检查读取已保存的 launchd/systemd 定义，再执行其中 Node 的 `--version`；版本过低、路径失效或版本输出无法识别都会标记为失败。配置无效时仍会检查 Node；尚未安装服务时提示未检查服务版本。`doctor --fix` 重写服务定义后会重新检查保存的 Node 路径和版本。
+
 ## 发布
 
 在 `apps/octopus-proxy` 目录执行 `npm run publish`：先递增 `package.json` 的补丁版本，再编译，最后发布。即使编译或发布失败，版本号也会保留递增结果，重试时继续递增。版本更新不会自动创建 Git 提交或标签。先登录有权发布 `@skylandnpm` 包的 npm 账号：

package/dist/{chunk-55TEBVWY.js → chunk-X7FBZI2P.js}

@@ -3321,8 +3321,8 @@ var require_utils = __commonJS({
     var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
     var HOST_DELIM_RE = /[@/?#:]/g;
     var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
-    function reescapeHostDelimiters(host, isIP) {
-      const re = isIP ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
+    function reescapeHostDelimiters(host, isIP2) {
+      const re = isIP2 ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
       re.lastIndex = 0;
       return host.replace(re, (ch) => HOST_DELIMS[ch]);
     }
@@ -4011,8 +4011,8 @@ var require_fast_uri = __commonJS({
       const host = matches[4];
       return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
     }
-    function canonicalizeHost(parsed, options, schemeHandler, isIP) {
-      if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
+    function canonicalizeHost(parsed, options, schemeHandler, isIP2) {
+      if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP2 === false && nonSimpleDomain(parsed.host)) {
         try {
           parsed.host = new URL("http://" + parsed.host).hostname;
         } catch (e) {
@@ -4039,7 +4039,7 @@ var require_fast_uri = __commonJS({
       let malformedHost = false;
       let malformedIPLiteral = false;
       let malformedScheme = false;
-      let isIP = false;
+      let isIP2 = false;
       if (options.reference === "suffix") {
         if (options.scheme) {
           uri = options.scheme + ":" + uri;
@@ -4102,15 +4102,15 @@ var require_fast_uri = __commonJS({
             const bracketedIPLiteral = isIPLiteral(parsed.host);
             const hasIPLiteralBracket = parsed.host.indexOf("[") !== -1 || parsed.host.indexOf("]") !== -1;
             const ipv6result = normalizeIPv6(parsed.host);
-            isIP = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
+            isIP2 = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
             malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
-            parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
+            parsed.host = isIP2 ? ipv6result.host : ipv6result.host.toLowerCase();
             if (malformedIPLiteral) {
               parsed.error = parsed.error || "URI host is malformed.";
               malformedAuthorityOrPort = true;
             }
           } else {
-            isIP = true;
+            isIP2 = true;
           }
         }
         if (parsed.scheme === void 0 && parsed.userinfo === void 0 && parsed.host === void 0 && parsed.port === void 0 && parsed.query === void 0 && !parsed.path) {
@@ -4127,14 +4127,14 @@ var require_fast_uri = __commonJS({
         }
         const schemeHandler = getSchemeHandler(options.scheme || parsed.scheme);
         if (!malformedIPLiteral) {
-          malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
+          malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP2);
         }
         if (uri.indexOf("%") !== -1 && parsed.host !== void 0 && !malformedIPLiteral) {
-          let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
-          if (!isIP) {
+          let host = isIP2 ? parsed.host : normalizePercentEncoding(parsed.host, true);
+          if (!isIP2) {
             host = normalizePercentEncoding(host.toLowerCase());
           }
-          parsed.host = reescapeHostDelimiters(host, isIP);
+          parsed.host = reescapeHostDelimiters(host, isIP2);
         }
         if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
           if (parsed.path) {
@@ -13335,6 +13335,71 @@ var PlatformDesktopSession = class {
 import { fork } from "node:child_process";
 import { randomBytes as randomBytes2, randomUUID as randomUUID16 } from "node:crypto";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
+
+// src/remote-stun.ts
+import { Resolver } from "node:dns/promises";
+import { isIP } from "node:net";
+var publicStunHost = "stun.cloudflare.com";
+var dnsJsonEndpoints = ["https://dns.alidns.com/resolve", "https://cloudflare-dns.com/dns-query"];
+var STUN_DNS_TIMEOUT = 1500;
+function defaultRemoteStunUrls(hubUrl) {
+  return [.../* @__PURE__ */ new Set([`stun:${new URL(hubUrl).hostname}:3478`, `stun:${publicStunHost}:3478`])];
+}
+function publicAddress(address, family) {
+  if (isIP(address) !== family) return false;
+  if (family === 6) return /^[23][\da-f]{0,3}:/i.test(address);
+  const [a, b] = address.split(".").map(Number);
+  return a !== 0 && a !== 10 && a !== 127 && a < 224 && !(a === 100 && b >= 64 && b <= 127) && !(a === 169 && b === 254) && !(a === 172 && b >= 16 && b <= 31) && !(a === 192 && b === 168) && !(a === 198 && (b === 18 || b === 19));
+}
+async function systemLookup(family) {
+  const resolver = new Resolver({ timeout: 500, tries: 1 });
+  try {
+    return await (family === 6 ? resolver.resolve6(publicStunHost) : resolver.resolve4(publicStunHost));
+  } finally {
+    resolver.cancel();
+  }
+}
+async function queryDnsJson(endpoint, family, signal) {
+  const type = family === 6 ? 28 : 1;
+  const url = new URL(endpoint);
+  url.searchParams.set("name", publicStunHost);
+  url.searchParams.set("type", String(type));
+  const response = await fetch(url, { headers: { accept: "application/dns-json" }, signal, redirect: "error" });
+  if (!response.ok) throw new Error("STUN DNS request failed");
+  const text = await response.text();
+  if (text.length > 16384) throw new Error("STUN DNS response too large");
+  const body = JSON.parse(text);
+  if (body.Status !== 0 || !Array.isArray(body.Answer)) throw new Error("STUN DNS answer unavailable");
+  return body.Answer.filter((record2) => record2.type === type && typeof record2.data === "string").map((record2) => record2.data);
+}
+async function resolvePublicStunAddresses(lookup = systemLookup, query = queryDnsJson) {
+  const families = await Promise.all([6, 4].map(async (family) => {
+    const valid = (addresses) => addresses.filter((address) => publicAddress(address, family)).slice(0, 1);
+    const native = valid(await lookup(family).catch(() => []));
+    if (native.length) return native;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), STUN_DNS_TIMEOUT);
+    try {
+      return await Promise.any(dnsJsonEndpoints.map(async (endpoint) => {
+        const addresses = valid(await query(endpoint, family, controller.signal));
+        if (!addresses.length) throw new Error("No public STUN address");
+        return addresses;
+      })).catch(() => []);
+    } finally {
+      clearTimeout(timer);
+      controller.abort();
+    }
+  }));
+  return families.flat();
+}
+async function discoverRemoteStunUrls(hubUrl, configured, resolve5 = resolvePublicStunAddresses) {
+  if (configured) return [...configured];
+  const addresses = await resolve5().catch(() => []);
+  const numeric = addresses.map((address) => `stun:${isIP(address) === 6 ? `[${address}]` : address}:3478`);
+  return [.../* @__PURE__ */ new Set([...numeric, ...defaultRemoteStunUrls(hubUrl)])].slice(0, 4);
+}
+
+// src/remote-manager.ts
 function spawnWorker(message) {
   const worker = fileURLToPath4(new URL(import.meta.url.endsWith(".ts") ? "./remote-worker.ts" : "./remote-worker.js", import.meta.url));
   const child = fork(worker, [], { stdio: ["ignore", "ignore", "ignore", "ipc"], execArgv: import.meta.url.endsWith(".ts") ? ["--import", "tsx"] : [] });
@@ -13342,7 +13407,7 @@ function spawnWorker(message) {
   return child;
 }
 var RemoteManager = class {
-  constructor(host, desktop, desktopSession, send, touch, workerFactory = spawnWorker, probe = probeRemote) {
+  constructor(host, desktop, desktopSession, send, touch, workerFactory = spawnWorker, probe = probeRemote, discoverStun = discoverRemoteStunUrls) {
     this.host = host;
     this.desktop = desktop;
     this.desktopSession = desktopSession;
@@ -13350,13 +13415,14 @@ var RemoteManager = class {
     this.touch = touch;
     this.workerFactory = workerFactory;
     this.probe = probe;
+    this.discoverStun = discoverStun;
     this.config = RemoteConfigSchema.parse(host.desktopRemote ?? {});
   }
   current;
   stopping = false;
   config;
   stunUrls() {
-    return this.config.stunUrls ?? [`stun:${new URL(this.host.hubUrl).hostname}:3478`];
+    return this.config.stunUrls ?? defaultRemoteStunUrls(this.host.hubUrl);
   }
   async status() {
     const base = { qualityModes: RemoteQualitySchema.options, platform: process.platform, passwordInput: process.platform === "darwin", enabled: this.config.enabled, busy: !!this.current, stunUrls: this.stunUrls(), budget: { ...REMOTE_DEFAULTS, totalBitrate: this.config.totalBitrate, videoMaxBitrate: this.config.videoMaxBitrate } };
@@ -13404,7 +13470,10 @@ var RemoteManager = class {
     const session = { remoteId: randomUUID16(), owner, closed: false, signaling: Promise.resolve(), signals: 0, signalWindow: Date.now(), candidates: 0 };
     this.current = session;
     try {
-      const permissions = await this.probe(this.host.stateDirectory, this.config);
+      const [permissions, stunUrls] = await Promise.all([
+        this.probe(this.host.stateDirectory, this.config),
+        this.discoverStun(this.host.hubUrl, this.config.stunUrls)
+      ]);
       if (!permissions.session || !permissions.capture || !permissions.input) throw new Error("\u8FDC\u63A7\u9700\u8981\u4E3B\u673A\u56FE\u5F62\u4F1A\u8BDD\u3001\u5C4F\u5E55\u5F55\u5236\u53CA\u8F85\u52A9\u529F\u80FD\u6743\u9650");
       if (permissions.locked === true && permissions.lockCapture === false) throw new Error("\u9501\u5C4F\u8FDC\u63A7\u9700\u8981 macOS 14 \u53CA\u4EE5\u4E0A\u53CA\u65B0\u7248 Xcode Command Line Tools\uFF1B\u5F53\u524D\u4E3B\u673A\u8BF7\u5148\u672C\u5730\u89E3\u9501");
       const identity = await this.desktopSession.sessionIdentity();
@@ -13413,7 +13482,7 @@ var RemoteManager = class {
       const layout = await this.desktop.layoutIdentity?.(display.id);
       if (session.closed || this.current !== session) throw new Error("\u5DE5\u4F5C\u533A\u8FDE\u63A5\u5DF2\u5173\u95ED\uFF0C\u8FDC\u63A7\u5DF2\u53D6\u6D88");
       const bindToken = randomBytes2(32).toString("base64url"), expiresAt = Date.now() + 2e4;
-      const child = this.workerFactory({ remoteId: session.remoteId, bindToken, expiresAt, display, helper: permissions.helper, quality, legacy: payload.quality === void 0, config: this.config, stunUrls: this.stunUrls() });
+      const child = this.workerFactory({ remoteId: session.remoteId, bindToken, expiresAt, display, helper: permissions.helper, quality, legacy: payload.quality === void 0, config: this.config, stunUrls });
       session.child = child;
       child.on("message", (message) => {
         if (this.current !== session || session.closed || !message || typeof message !== "object") return;
@@ -13447,7 +13516,7 @@ var RemoteManager = class {
         }
       }, 1e3);
       session.monitor.unref();
-      return { remoteId: session.remoteId, bindToken, expiresAt: new Date(expiresAt).toISOString(), display, revision: 1, stunUrls: this.stunUrls(), budget, quality, qualityModes: RemoteQualitySchema.options, protocolVersion: 1, heartbeatAck: true };
+      return { remoteId: session.remoteId, bindToken, expiresAt: new Date(expiresAt).toISOString(), display, revision: 1, stunUrls, budget, quality, qualityModes: RemoteQualitySchema.options, protocolVersion: 1, heartbeatAck: true };
     } catch (error) {
       this.finish(session);
       throw error;
@@ -13490,10 +13559,19 @@ import { join as join12 } from "node:path";
 import { homedir as homedir2, platform as platform4 } from "node:os";
 var run4 = promisify7(execFile7);
 var VERSION_MANAGED_SEGMENTS = /* @__PURE__ */ new Set([".nvm", "nvm", ".volta", "volta", ".fnm", "fnm", ".asdf", "asdf", ".mise", "mise"]);
+var MIN_NODE_MAJOR = 22;
+function parseNodeVersion(version) {
+  const match = /^v(\d+)\.\d+\.\d+(?:-[\w.-]+)?$/.exec(version);
+  if (!match) throw new Error(`\u65E0\u6CD5\u8BC6\u522B Node.js \u7248\u672C\uFF1A${version || "\u7A7A\u8F93\u51FA"}`);
+  return { version, supported: Number(match[1]) >= MIN_NODE_MAJOR };
+}
+async function probeNodeVersion(path) {
+  const { stdout } = await run4(path, ["--version"], { timeout: 5e3 });
+  return parseNodeVersion(stdout.trim());
+}
 var execProbe = async (path) => {
   try {
-    await run4(path, ["--version"], { timeout: 5e3 });
-    return true;
+    return (await probeNodeVersion(path)).supported;
   } catch {
     return false;
   }
@@ -13507,7 +13585,7 @@ function nodeCandidates() {
 async function resolveNodePath(options = {}) {
   const probe = options.probe ?? execProbe;
   if (options.pinned) {
-    if (!await probe(options.pinned)) throw new Error(`--node-path ${options.pinned} is not a working node executable`);
+    if (!await probe(options.pinned)) throw new Error(`--node-path ${options.pinned} is not a working Node.js >= ${MIN_NODE_MAJOR} executable; check ${options.pinned} --version`);
     return { nodePath: options.pinned, source: "pinned" };
   }
   let exec2 = options.execPath ?? process.execPath;
@@ -13825,6 +13903,9 @@ export {
   checkTerminalSupport,
   PlatformDesktopSession,
   RemoteManager,
+  MIN_NODE_MAJOR,
+  parseNodeVersion,
+  probeNodeVersion,
   isVersionManagedPath,
   resolveNodePath,
   toolSearchDirs,

package/dist/cli.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
   ConfigError,
+  MIN_NODE_MAJOR,
   PlatformDesktopSession,
   RemoteManager,
   SERVICE_LABEL,
@@ -23,6 +24,8 @@ import {
   launchdLogPath,
   launchdPlistPath,
   loadConfig,
+  parseNodeVersion,
+  probeNodeVersion,
   proxyVersion,
   resolveCommandOnPath,
   resolveConfigPath,
@@ -31,7 +34,7 @@ import {
   supportedPlatform,
   systemdUnitPath,
   toolSearchDirs
-} from "./chunk-55TEBVWY.js";
+} from "./chunk-X7FBZI2P.js";
 import {
   DESKTOP_PERMISSION_GUIDANCE,
   PlatformDesktop,
@@ -45,7 +48,7 @@ import { access as access4 } from "node:fs/promises";
 
 // src/doctor.ts
 import { access as access2, chmod, constants, mkdir as mkdir3, stat } from "node:fs/promises";
-import { isAbsolute as isAbsolute2, join } from "node:path";
+import { isAbsolute as isAbsolute3, join } from "node:path";
 import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
 
@@ -233,7 +236,7 @@ async function readServiceFile() {
 async function buildServiceDefinition(opts) {
   const config = await loadConfig(opts.configPath);
   const resolution = await resolveNodePath({ pinned: opts.nodePath });
-  if (!resolution.nodePath) throw new Error("\u672A\u627E\u5230\u53EF\u7528\u7684 node \u53EF\u6267\u884C\u6587\u4EF6\uFF1B\u8BF7\u7528\u7CFB\u7EDF\u5305\u7BA1\u7406\u5668\u5B89\u88C5 node\uFF0C\u6216\u901A\u8FC7 --node-path \u6307\u5B9A\u7EDD\u5BF9\u8DEF\u5F84");
+  if (!resolution.nodePath) throw new Error(`\u672A\u627E\u5230 Node.js >= ${MIN_NODE_MAJOR} \u7684\u53EF\u6267\u884C\u6587\u4EF6\uFF1B\u8BF7\u5B89\u88C5\u53D7\u652F\u6301\u7684 Node.js\uFF0C\u6216\u901A\u8FC7 --node-path \u6307\u5B9A\u7EDD\u5BF9\u8DEF\u5F84`);
   const opencodeDir = isAbsolute(config.tool.command) ? [dirname3(config.tool.command)] : [];
   const pathEnv = [dirname3(resolution.nodePath), ...opencodeDir, "/usr/local/bin", "/usr/bin", "/bin"].filter((dir, index, all) => all.indexOf(dir) === index).join(":");
   return { def: { nodePath: resolution.nodePath, entryPath: daemonEntryPath(), configPath: resolve(opts.configPath), pathEnv }, warning: resolution.warning };
@@ -291,12 +294,47 @@ function logLocationHint() {
   return isMacOS() ? launchdLogPath() : "journalctl --user -u octopus-proxy";
 }
 
+// src/service-definition.ts
+import { isAbsolute as isAbsolute2 } from "node:path";
+function serviceNodePath(text, macOS) {
+  let path;
+  if (macOS) {
+    const match = /<key>\s*ProgramArguments\s*<\/key>\s*<array>\s*<string>([\s\S]*?)<\/string>/.exec(text);
+    const entities = { amp: "&", lt: "<", gt: ">", quot: '"', apos: "'" };
+    path = match?.[1]?.replace(/&(amp|lt|gt|quot|apos);/g, (_, entity) => entities[entity]);
+  } else {
+    const match = /^[ \t]*ExecStart[ \t]*=[ \t]*(?:"((?:\\.|[^"\\])*)"|([^\s"]+))/m.exec(text);
+    path = (match?.[1] ?? match?.[2])?.replace(/\\(["\\])/g, "$1").replaceAll("%%", "%");
+  }
+  return path && isAbsolute2(path) ? path : null;
+}
+
 // src/doctor.ts
 import { randomUUID } from "node:crypto";
 var run3 = promisify3(execFile3);
+function nodeVersionCheck(name, path, info) {
+  return {
+    name,
+    status: info.supported ? "ok" : "fail",
+    detail: `${path}\uFF08${info.version}\uFF09\uFF1B\u8981\u6C42 Node.js >= ${MIN_NODE_MAJOR}${info.supported ? "" : "\uFF1B\u8BF7\u5347\u7EA7 Node.js\uFF0C\u5E76\u8FD0\u884C octopus-proxy install --force --node-path <Node\u7EDD\u5BF9\u8DEF\u5F84> \u91CD\u5199\u670D\u52A1\u5B9A\u4E49"}`
+  };
+}
+async function checkServiceNodeVersion() {
+  const name = "\u670D\u52A1 Node.js \u7248\u672C";
+  const existing = await readServiceFile();
+  if (existing === null) return { name, status: "warn", detail: "\u5C1A\u672A\u5B89\u88C5\u670D\u52A1\uFF0C\u65E0\u6CD5\u68C0\u67E5\u670D\u52A1\u4F7F\u7528\u7684 Node.js \u7248\u672C" };
+  const path = serviceNodePath(existing, isMacOS());
+  if (!path) return { name, status: "fail", detail: "\u65E0\u6CD5\u4ECE\u670D\u52A1\u5B9A\u4E49\u8BFB\u53D6 Node \u7EDD\u5BF9\u8DEF\u5F84\uFF1B\u8FD0\u884C octopus-proxy install --force \u91CD\u5199\u670D\u52A1\u5B9A\u4E49" };
+  try {
+    return nodeVersionCheck(name, path, await probeNodeVersion(path));
+  } catch (error) {
+    return { name, status: "fail", detail: `${path} --version \u68C0\u67E5\u5931\u8D25\uFF1A${error instanceof Error ? error.message : String(error)}\uFF1B\u8BF7\u786E\u8BA4 Node \u8DEF\u5F84\u6709\u6548\u5E76\u8FD0\u884C octopus-proxy install --force \u91CD\u5199\u670D\u52A1\u5B9A\u4E49` };
+  }
+}
 async function runDoctor(opts) {
   const results = [];
   const record = (name, status, detail) => results.push({ name, status, detail });
+  results.push(nodeVersionCheck("\u5F53\u524D Node.js \u7248\u672C", process.execPath, parseNodeVersion(process.version)));
   results.push(await checkTerminalSupport(opts.fix));
   let config;
   try {
@@ -335,7 +373,7 @@ async function runDoctor(opts) {
     const descriptor = describeTool(config.tool.kind);
     const checkName = `${descriptor.label} \u547D\u4EE4`;
     const command2 = config.tool.command;
-    if (!isAbsolute2(command2)) {
+    if (!isAbsolute3(command2)) {
       record(checkName, "warn", `\u5F53\u524D\u4E3A\u300C${command2}\u300D\uFF0C\u4F9D\u8D56 PATH \u67E5\u627E\uFF1B\u670D\u52A1\u73AF\u5883\u5EFA\u8BAE\u6539\u7528\u7EDD\u5BF9\u8DEF\u5F84\uFF08\u91CD\u65B0\u8FD0\u884C onboard \u6216\u624B\u5DE5\u4FEE\u6539\u914D\u7F6E\uFF09`);
     } else if (!await access2(command2, constants.X_OK).then(() => true, () => false)) {
       record(checkName, "fail", `${command2} \u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u6267\u884C`);
@@ -399,6 +437,7 @@ async function runDoctor(opts) {
       record("\u670D\u52A1\u5B9A\u4E49", "fail", error instanceof Error ? error.message : String(error));
     }
   }
+  results.push(await checkServiceNodeVersion());
   const state = await serviceStatus();
   if (state.active) record("\u670D\u52A1\u72B6\u6001", "ok", `\u8FD0\u884C\u4E2D${state.pid ? `\uFF08pid ${state.pid}\uFF09` : ""}`);
   else if (!state.installed) record("\u670D\u52A1\u72B6\u6001", "warn", "\u5C1A\u672A\u5B89\u88C5\u670D\u52A1");
@@ -420,7 +459,7 @@ import { stdin, stdout } from "node:process";
 import { access as access3, constants as constants2, mkdir as mkdir4, stat as stat2 } from "node:fs/promises";
 import { execFile as execFile4 } from "node:child_process";
 import { platform } from "node:os";
-import { isAbsolute as isAbsolute3, join as join2 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join2 } from "node:path";
 import { promisify as promisify4 } from "node:util";
 var DEFAULT_HUB_URL = "https://octopus.wuyehao.com";
 async function ask(rl, question, options = {}) {
@@ -459,7 +498,7 @@ var MACOS_TOOL_EXAMPLES = {
 };
 async function validateToolCommand(value, kind) {
   const command2 = expandHome(value);
-  if (!isAbsolute3(command2)) return "\u670D\u52A1\u73AF\u5883\u9700\u8981\u7EDD\u5BF9\u8DEF\u5F84";
+  if (!isAbsolute4(command2)) return "\u670D\u52A1\u73AF\u5883\u9700\u8981\u7EDD\u5BF9\u8DEF\u5F84";
   try {
     if (!(await stat2(command2)).isFile()) return "\u547D\u4EE4\u8DEF\u5F84\u5FC5\u987B\u6307\u5411\u53EF\u6267\u884C\u6587\u4EF6";
     await access3(command2, constants2.X_OK);
@@ -492,7 +531,7 @@ async function runOnboard(opts) {
     hubUrl = await ask(rl, `Hub \u5730\u5740\uFF08${hubUrl} , \u56DE\u8F66\u76F4\u63A5\u786E\u8BA4\uFF09`, { default: hubUrl, showDefault: false, validate: validUrl });
     botId = await ask(rl, "\u673A\u5668\u4EBA ID\uFF08\u5728 Claw \u6216 Taskhub \u4E2D\u521B\u5EFA\u5E76\u590D\u5236\uFF09", { default: botId || void 0, validate: validBotId });
     secretKey = await ask(rl, "\u673A\u5668\u4EBA Secret\uFF08\u5728 Claw \u6216 Taskhub \u521B\u5EFA\uFF1B\u8F93\u5165\u4F1A\u56DE\u663E\u5728\u7EC8\u7AEF\uFF09", { default: secretKey || void 0, defaultDisplay: existing?.secretKey ? "\u5DF2\u914D\u7F6E\uFF0C\u56DE\u8F66\u4FDD\u7559" : "\u5DF2\u63D0\u4F9B\uFF0C\u56DE\u8F66\u4F7F\u7528", validate: (value) => value.length >= 20 ? void 0 : "\u8BF7\u8F93\u5165\u5B8C\u6574\u7684\u673A\u5668\u4EBA Secret" });
-    stateDirectory = expandHome(await ask(rl, "\u72B6\u6001\u76EE\u5F55", { default: stateDirectory, validate: (value) => isAbsolute3(expandHome(value)) ? void 0 : "\u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84" }));
+    stateDirectory = expandHome(await ask(rl, "\u72B6\u6001\u76EE\u5F55", { default: stateDirectory, validate: (value) => isAbsolute4(expandHome(value)) ? void 0 : "\u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84" }));
     const previousToolKind = toolKind;
     toolKind = await ask(rl, `\u7F16\u7801\u5DE5\u5177\uFF08${TOOL_KINDS.join("/")}\uFF09`, { default: toolKind, validate: (value) => TOOL_KINDS.includes(value) ? void 0 : `\u8F93\u5165 ${TOOL_KINDS.join(" \u6216 ")}` });
     if (toolKind !== previousToolKind) toolCommand = toolKind === existing?.tool.kind ? existing.tool.command : "";
@@ -514,12 +553,13 @@ async function runOnboard(opts) {
       toolCommand = expandHome(await ask(rl, `${descriptor.label} \u547D\u4EE4\uFF08\u56DE\u8F66\u4F1A\u9A8C\u8BC1\u8DEF\u5F84\uFF09`, { default: toolCommand || found || example, validate: (value) => validateToolCommand(value, toolKind) }));
       console.log(`  \u5DF2\u786E\u8BA4 ${descriptor.label} \u547D\u4EE4\u53EF\u6267\u884C\uFF1A${toolCommand}`);
     }
+    console.log("\n\u57FA\u7840\u8BBE\u7F6E\u5DF2\u5B8C\u6210\uFF0C\u81F3\u5C11\u9700\u8981\u914D\u7F6E\u4E00\u4E2A\u5DE5\u4F5C\u9879\u76EE\u3002");
     if (projects.length) console.log("\n\u5DF2\u6709\u6388\u6743\u9879\u76EE\uFF08\u76F4\u63A5\u56DE\u8F66\u4FDD\u7559\u5404\u9879\uFF09\uFF1A");
     for (const [index, project] of projects.entries()) {
       project.name = await ask(rl, "  \u9879\u76EE\u540D\u79F0", { default: project.name });
       for (; ; ) {
         project.directory = expandHome(await ask(rl, `  \u300C${project.name}\u300D\u76EE\u5F55\uFF08\u7EDD\u5BF9\u8DEF\u5F84\uFF09`, { default: project.directory }));
-        if (!isAbsolute3(project.directory)) {
+        if (!isAbsolute4(project.directory)) {
           console.log("  \u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
           continue;
         }
@@ -531,14 +571,24 @@ async function runOnboard(opts) {
       }
       project.id = await ask(rl, "  \u9879\u76EE ID", { default: project.id ?? slug(project.name), validate: (value) => validateProjectId(value, projects.slice(0, index)) });
     }
-    console.log("\n\u6DFB\u52A0\u6388\u6743\u9879\u76EE\uFF08\u540D\u79F0\u7559\u7A7A\u7ED3\u675F\uFF09\uFF1A");
     for (; ; ) {
-      const name = (await rl.question("  \u9879\u76EE\u540D\u79F0: ")).trim();
-      if (!name) break;
+      if (projects.length) {
+        console.log(projects.length === 1 ? "\n\u60A8\u5DF2\u5B8C\u6210\u7B2C\u4E00\u4E2A\u9879\u76EE\u914D\u7F6E\uFF0C\u53EF\u4EE5\u7EE7\u7EED\u6DFB\u52A0\u66F4\u591A\u9879\u76EE\uFF0C\u6216\u8005\u5148\u5B8C\u6210\u9879\u76EE\u914D\u7F6E\u3002" : `
+\u60A8\u5DF2\u5B8C\u6210 ${projects.length} \u4E2A\u9879\u76EE\u914D\u7F6E\uFF0C\u53EF\u4EE5\u7EE7\u7EED\u6DFB\u52A0\u66F4\u591A\u9879\u76EE\uFF0C\u6216\u8005\u5148\u5B8C\u6210\u9879\u76EE\u914D\u7F6E\u3002`);
+        const addMore = await ask(rl, "  \u662F\u5426\u7EE7\u7EED\u6DFB\u52A0\u66F4\u591A\u9879\u76EE\uFF1F(y/N\uFF0C\u56DE\u8F66\u5B8C\u6210\u9879\u76EE\u914D\u7F6E)", {
+          default: "n",
+          showDefault: false,
+          validate: (value) => /^(y|yes|n|no)$/i.test(value) ? void 0 : "\u8BF7\u8F93\u5165 y \u6216 n"
+        });
+        if (!/^(y|yes)$/i.test(addMore)) break;
+      }
+      console.log("\n\u6DFB\u52A0\u5DE5\u4F5C\u9879\u76EE\uFF1A");
+      const id = await ask(rl, "  \u9879\u76EE ID", { validate: (value) => validateProjectId(value, projects) });
+      const name = await ask(rl, "  \u9879\u76EE\u540D\u79F0", { default: id });
       let directory = "";
       for (; ; ) {
         directory = expandHome(await ask(rl, `  \u300C${name}\u300D\u76EE\u5F55\uFF08\u7EDD\u5BF9\u8DEF\u5F84\uFF09`));
-        if (!isAbsolute3(directory)) {
+        if (!isAbsolute4(directory)) {
           console.log("  \u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
           continue;
         }
@@ -548,14 +598,7 @@ async function runOnboard(opts) {
         }
         break;
       }
-      const id = await ask(rl, "  \u9879\u76EE ID", { default: slug(name), validate: (value) => validateProjectId(value, projects) });
       projects.push({ id, name, directory });
-      const addMore = await ask(rl, "  \u7EE7\u7EED\u6DFB\u52A0\u66F4\u591A\u6388\u6743\u9879\u76EE\uFF1F(y/N)", {
-        default: "n",
-        showDefault: false,
-        validate: (value) => /^(y|yes|n|no)$/i.test(value) ? void 0 : "\u8BF7\u8F93\u5165 y \u6216 n"
-      });
-      if (!/^(y|yes)$/i.test(addMore)) break;
     }
     rl.close();
     if (!projects.length) throw new Error("\u81F3\u5C11\u9700\u8981\u5F55\u5165\u4E00\u4E2A\u6388\u6743\u9879\u76EE");
@@ -577,10 +620,10 @@ async function runOnboard(opts) {
       if (seenIds.has(project.id)) throw new Error(`\u9879\u76EE ID\u300C${project.id}\u300D\u91CD\u590D\uFF0C\u8BF7\u8C03\u6574\u9879\u76EE\u540D\u79F0\u6216\u624B\u5DE5\u6307\u5B9A\u4E0D\u540C ID`);
       seenIds.add(project.id);
     }
-    if (projects.some((project) => !isAbsolute3(project.directory))) throw new Error("--project \u7684\u76EE\u5F55\u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
+    if (projects.some((project) => !isAbsolute4(project.directory))) throw new Error("--project \u7684\u76EE\u5F55\u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
     const descriptor = describeTool(toolKind);
     toolCommand = toolCommand ? expandHome(toolCommand) : await resolveCommandOnPath(toolKind, toolSearchDirs(toolKind)) ?? descriptor.defaultCommand;
-    if (!isAbsolute3(toolCommand)) console.log(`\u63D0\u793A\uFF1A\u672A\u5728 PATH \u4E2D\u63A2\u6D4B\u5230 ${descriptor.label}\uFF0C\u914D\u7F6E\u4FDD\u7559\u547D\u4EE4\u540D\u300C${toolCommand}\u300D\uFF1B\u670D\u52A1\u73AF\u5883\u5EFA\u8BAE\u7EDD\u5BF9\u8DEF\u5F84\uFF08\u53EF\u7528 --tool-command \u6307\u5B9A\uFF09`);
+    if (!isAbsolute4(toolCommand)) console.log(`\u63D0\u793A\uFF1A\u672A\u5728 PATH \u4E2D\u63A2\u6D4B\u5230 ${descriptor.label}\uFF0C\u914D\u7F6E\u4FDD\u7559\u547D\u4EE4\u540D\u300C${toolCommand}\u300D\uFF1B\u670D\u52A1\u73AF\u5883\u5EFA\u8BAE\u7EDD\u5BF9\u8DEF\u5F84\uFF08\u53EF\u7528 --tool-command \u6307\u5B9A\uFF09`);
   }
   if (configExists) {
     if (opts.interactive) {

package/dist/main.js

@@ -2,7 +2,7 @@
 import {
   ConfigError,
   runDaemon
-} from "./chunk-55TEBVWY.js";
+} from "./chunk-X7FBZI2P.js";
 import "./chunk-XIJKEY4L.js";
 
 // src/main.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skylandnpm/octopus-proxy",
-  "version": "0.1.51",
+  "version": "0.1.53",
   "type": "module",
   "description": "Octopus host proxy: OpenCode, Codex, ZCode and Pi adapters with service installer CLI",
   "bin": {

package/proxy.example.json

@@ -7,7 +7,6 @@
   "tool": { "kind": "opencode", "command": "/Users/luhuili/.opencode/bin/opencode", "baseUrl": "http://127.0.0.1:4096", "mode": "external", "password": "replace-with-a-random-secret-at-least-20-characters" },
   "desktopRemote": {
     "enabled": true,
-    "stunUrls": ["stun:hub.example.com:3478"],
     "totalBitrate": 22000000,
     "videoMaxBitrate": 16000000
   }