@walkhi/code-relax 0.1.0-beta.1

package/dist/src/platform/windows/desktop-monitor.mjs

@@ -0,0 +1,34 @@
+import { findDesktopPipe } from './desktop-tools.mjs';
+
+// Optional Desktop presentation data never blocks the shared execution service.
+export class DesktopMonitor {
+  constructor({ discover = () => findDesktopPipe({ allowMissing: true }), read, report = console.error }) {
+    this.discover = discover; this.read = read; this.report = report;
+    this.pipe = null; this.snapshot = null; this.stopped = true;
+  }
+  start() { this.stopped = false; void this.tick(); }
+  stop() { this.stopped = true; clearTimeout(this.timer); }
+  async refresh() {
+    try {
+      const pipe = await this.discover();
+      if (this.stopped) return;
+      this.pipe = pipe;
+      if (!pipe) { this.snapshot = null; return; }
+      const [listing, projects] = await Promise.all([
+        this.read('list_threads', { limit: 50 }, pipe), this.read('list_projects', {}, pipe),
+      ]);
+      if (this.stopped) return;
+      if (!listing.success || !projects.success) throw new Error('Desktop 列表读取失败');
+      this.snapshot = { listing: listing.data, projects: projects.data.projects || [] };
+      this.error = null;
+    } catch (error) {
+      this.pipe = null; this.snapshot = null;
+      if (this.error !== error.message) this.report(`Desktop 排序暂不可用：${error.message}`);
+      this.error = error.message;
+    }
+  }
+  async tick() {
+    await this.refresh();
+    if (!this.stopped) { this.timer = setTimeout(() => this.tick(), this.pipe ? 10000 : 2000); this.timer.unref(); }
+  }
+}

package/dist/src/platform/windows/desktop-shortcut-run.ps1

@@ -0,0 +1,5 @@
+param([string]$NodePath, [string]$Entry, [ValidateSet('shared-start','desktop-start')][string]$Action)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+& $NodePath $Entry $Action
+if ($LASTEXITCODE -ne 0) { Write-Host '启动未完成，请根据上方提示处理后重试。' }

package/dist/src/platform/windows/desktop-shortcuts.ps1

@@ -0,0 +1,28 @@
+param([string]$NodePath, [string]$Entry, [switch]$Remove, [string]$Destination)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$shell = New-Object -ComObject WScript.Shell
+if (-not $Destination) { $Destination = $shell.SpecialFolders.Item('Desktop') }
+$launcher = Join-Path $PSScriptRoot 'desktop-shortcut-run.ps1'
+$items = @(@{Name='Code Relax - 完整控制'; Command='shared-start'}, @{Name='Code Relax - 基础控制'; Command='desktop-start'})
+$results = @()
+foreach ($item in $items) {
+    $target = Join-Path $Destination ($item.Name + '.lnk')
+    $arguments = '-NoProfile -NoExit -ExecutionPolicy Bypass -File "' + $launcher + '" -NodePath "' + $NodePath + '" -Entry "' + $Entry + '" -Action ' + $item.Command
+    if (Test-Path -LiteralPath $target) {
+        $existing = $shell.CreateShortcut($target)
+        if ($existing.Arguments -ne $arguments) { throw ('快捷方式不是本安装创建的，未覆盖或删除：' + $target) }
+    }
+    if ($Remove) {
+        if (Test-Path -LiteralPath $target) { Remove-Item -LiteralPath $target }
+    } else {
+        $link = $shell.CreateShortcut($target)
+        $link.TargetPath = Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
+        $link.Arguments = $arguments
+        $link.WorkingDirectory = Split-Path $Entry -Parent
+        $link.Description = $item.Name
+        $link.Save()
+    }
+    $results += $target
+}
+ConvertTo-Json -InputObject $results -Compress

package/dist/src/platform/windows/desktop-tools.mjs

@@ -0,0 +1,48 @@
+import net from 'node:net';
+import fs from 'node:fs';
+import { setTimeout as delay } from 'node:timers/promises';
+
+async function isToolsPipe(pipe, timeout) {
+  return new Promise(resolve => {
+    const socket = net.createConnection(pipe);
+    let data = Buffer.alloc(0);
+    const finish = value => { clearTimeout(timer); socket.destroy(); resolve(value); };
+    const timer = setTimeout(() => finish(false), timeout);
+    socket.on('error', () => finish(false));
+    socket.on('end', () => finish(false));
+    socket.on('connect', () => {
+      const body = Buffer.from(JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'tools/list', params: { threadStartKind: 'all' } }));
+      const header = Buffer.alloc(4); header.writeUInt32LE(body.length);
+      socket.write(Buffer.concat([header, body]));
+    });
+    socket.on('data', chunk => {
+      data = Buffer.concat([data, chunk]);
+      if (data.length < 4) return;
+      const length = data.readUInt32LE(0);
+      if (length > 8 * 1024 * 1024) return finish(false);
+      if (data.length < length + 4) return;
+      try {
+        const response = JSON.parse(data.subarray(4, length + 4));
+        finish(response.id === 1 && response.result?.tools?.some(tool => tool.namespace === 'codex_app' && tool.name === 'send_message_to_thread'));
+      } catch { finish(false); }
+    });
+  });
+}
+
+
+// The Desktop WebSocket may connect before its tools router is ready.
+export async function findDesktopPipe({ timeout = 0, allowMissing = false, wait = delay, now = Date.now,
+  enumerate = () => fs.readdirSync('\\\\.\\pipe\\').filter(name => name.startsWith('codex-browser-use-')).map(name => `\\\\.\\pipe\\${name}`),
+  ready = isToolsPipe } = {}) {
+  const deadline = now() + timeout;
+  do {
+    const matches = (await Promise.all(enumerate().map(async pipe =>
+      await ready(pipe, Math.max(1, Math.min(2000, timeout ? deadline - now() : 2000))) ? pipe : null))).filter(Boolean);
+    if (matches.length === 1) return matches[0];
+    if (matches.length > 1) throw new Error(`检测到 ${matches.length} 个桌面工具管道，无法确定 Bridge 应连接的 Desktop。`);
+    if (now() >= deadline) break;
+    await wait(Math.min(250, deadline - now()));
+  } while (true);
+  if (allowMissing) return null;
+  throw new Error('Desktop 工具接口尚未就绪。请等待 Desktop 首页加载完成后重试；未启动 Bridge，也未结束 Desktop。');
+}

package/dist/src/platform/windows/launch-worker.ps1

@@ -0,0 +1,13 @@
+$ErrorActionPreference = 'Stop'
+$spec = $env:CODEX_REMOTE_PROCESS_SPEC | ConvertFrom-Json
+Remove-Item Env:CODEX_REMOTE_PROCESS_SPEC
+$result = @{instance=$spec.instance; brokerPid=$PID}
+try {
+    Add-Type -Path (Join-Path $PSScriptRoot 'IsolatedProcess.cs')
+    $stdout = if ($spec.logs.Count -gt 0) { [string]$spec.logs[0] } else { 'NUL' }
+    $stderr = if ($spec.logs.Count -gt 1) { [string]$spec.logs[1] } else { 'NUL' }
+    $result.pid = [IsolatedProcess]::Start([string]$spec.executable, [string[]]$spec.args, $stdout, $stderr)
+} catch { $result.error = $_.Exception.Message }
+$temporary = $spec.ready + '.tmp'
+[IO.File]::WriteAllText($temporary, ($result | ConvertTo-Json -Compress), (New-Object Text.UTF8Encoding($false)))
+[IO.File]::Move($temporary, $spec.ready)

package/dist/src/platform/windows/network-info.mjs

@@ -0,0 +1,34 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const exec = promisify(execFile);
+const bridgeRoot = fileURLToPath(new URL('../../../', import.meta.url));
+
+export async function lanNetworks() {
+  const executable = path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe');
+  const { stdout } = await exec(executable, ['-NoProfile', '-NonInteractive', '-File', path.join(bridgeRoot, 'get-lan-networks.ps1')],
+    { windowsHide: true, encoding: 'utf8' });
+  const records = JSON.parse(stdout.trim() || '[]');
+  if (!Array.isArray(records) || records.length > 8) throw new Error('Windows 返回了无效的局域网信息');
+  return records.map(record => {
+    if (!privateIpv4(record.address) || !['wifi', 'ethernet'].includes(record.networkType) ||
+        !plainLabel(record.networkName) || !plainLabel(record.interfaceName)) throw new Error('Windows 返回了无效的局域网信息');
+    return { address: record.address, networkType: record.networkType,
+      networkName: record.networkName.trim(), interfaceName: record.interfaceName.trim() };
+  });
+}
+
+function privateIpv4(value) {
+  if (typeof value !== 'string') return false;
+  const parts = value.split('.').map(Number);
+  if (parts.length !== 4 || parts.some(part => !Number.isInteger(part) || part < 0 || part > 255)) return false;
+  return parts[0] === 10 || (parts[0] === 192 && parts[1] === 168) ||
+    (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) ||
+    (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127);
+}
+
+function plainLabel(value) {
+  return typeof value === 'string' && value.trim().length > 0 && value.trim().length <= 80 && !/[\u0000-\u001f\u007f]/.test(value);
+}

package/dist/src/platform/windows/resident-start.ps1

@@ -0,0 +1,7 @@
+param([Parameter(Mandatory=$true)][string]$NodePath, [Parameter(Mandatory=$true)][string]$Entry)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$state = Join-Path $env:LOCALAPPDATA 'CodexRemote'
+New-Item -ItemType Directory -Path $state -Force | Out-Null
+& $NodePath $Entry start --json >> (Join-Path $state 'resident-start.log') 2>&1
+exit $LASTEXITCODE

package/dist/src/platform/windows/resident-startup.ps1

@@ -0,0 +1,27 @@
+param([string]$NodePath, [string]$Entry, [ValidateSet('enable','disable','status')][string]$Action='status')
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$shell = New-Object -ComObject WScript.Shell
+$target = Join-Path $shell.SpecialFolders.Item('Startup') 'Code Relax Bridge.lnk'
+$launcher = Join-Path $PSScriptRoot 'resident-start.ps1'
+$powershell = Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
+$exists = Test-Path -LiteralPath $target
+if ($exists) {
+    $existing = $shell.CreateShortcut($target)
+    if ($existing.TargetPath -ne $powershell -or -not $existing.Arguments.Contains('"' + $launcher + '"')) {
+        throw 'Startup shortcut is not owned by this installation.'
+    }
+}
+if ($Action -eq 'enable') {
+    if (-not (Test-Path -LiteralPath $NodePath) -or -not (Test-Path -LiteralPath $Entry)) { throw 'Installed runtime is missing.' }
+    $link = $shell.CreateShortcut($target)
+    $link.TargetPath = $powershell
+    $link.Arguments = '-NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File "' + $launcher + '" -NodePath "' + $NodePath + '" -Entry "' + $Entry + '"'
+    $link.WorkingDirectory = $env:USERPROFILE
+    $link.WindowStyle = 7
+    $link.Description = 'Code Relax resident computer connection'
+    $link.Save()
+} elseif ($Action -eq 'disable' -and $exists) {
+    Remove-Item -LiteralPath $target
+}
+@{ enabled=(Test-Path -LiteralPath $target); path=$target; scope='current-user-logon' } | ConvertTo-Json -Compress

package/dist/src/platform/windows/resolve-state-root.ps1

@@ -0,0 +1,14 @@
+param([Parameter(Mandatory=$true)][string]$StateRoot)
+$ErrorActionPreference='Stop'
+[Console]::OutputEncoding=New-Object Text.UTF8Encoding($false)
+Add-Type -Path (Join-Path $PSScriptRoot 'IsolatedProcess.cs')
+New-Item -ItemType Directory -Path $StateRoot -Force | Out-Null
+$anchor=Join-Path $StateRoot 'bridge-config.json'
+$temporary=$false
+if(-not(Test-Path -LiteralPath $anchor)) {
+    $anchor=Join-Path $StateRoot ('.state-path-'+[Guid]::NewGuid().ToString()+'.tmp')
+    Set-Content -LiteralPath $anchor -Value 'path-resolution' -Encoding ASCII
+    $temporary=$true
+}
+try { [IO.Path]::GetDirectoryName([IsolatedProcess]::ResolvePath($anchor)) }
+finally { if($temporary){Remove-Item -LiteralPath $anchor} }

package/dist/src/platform/windows/runtime-paths.mjs

@@ -0,0 +1,20 @@
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'node:fs';
+
+// Windows host data locations. Keep existing paths and historical attachments.
+export function runtimePaths(environment = process.env, home = os.homedir()) {
+  const codexDataRoot = environment.CODEX_HOME?.trim() || path.join(home, '.codex');
+  const serviceRoot = path.join(environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'Programs', 'CodexRemote', 'service');
+  let installed;
+  try { installed = JSON.parse(fs.readFileSync(path.join(serviceRoot, 'installation.json'), 'utf8').replace(/^\uFEFF/, '')); }
+  catch (error) { if (error.code !== 'ENOENT') throw error; }
+  return {
+    codexDataRoot,
+    sessionsRoot: path.join(codexDataRoot, 'sessions'),
+    stateRoot: installed?.stateRoot || path.join(environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'CodexRemote'),
+    serviceRoot,
+    uploadsRoot: path.join(environment.ProgramData || 'C:\\ProgramData', 'CodexRemote', 'attachments'),
+    credentialsRoot: path.join(environment.ProgramData || 'C:\\ProgramData', 'CodexRemote', 'credentials'),
+  };
+}

package/dist/src/platform/windows/service-host.mjs

@@ -0,0 +1,43 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import fs from 'node:fs';
+import { runtimePaths } from './runtime-paths.mjs';
+import { readRecord } from '../../service-lifecycle.mjs';
+import { lanNetworks } from './network-info.mjs';
+
+const exec = promisify(execFile);
+const bridgeRoot = fileURLToPath(new URL('../../../', import.meta.url));
+async function detect(script) {
+  const executable = path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe');
+  const { stdout } = await exec(executable, ['-NoProfile', '-NonInteractive', '-File',
+    path.join(bridgeRoot, script)], { windowsHide: true, encoding: 'utf8' });
+  return stdout.trim();
+}
+
+// Windows-only network metadata stays here, outside the lifecycle implementation.
+export const sharedServiceUrl = () => detect('get-shared-service-url.ps1');
+export const lanAddress = async () => (await lanNetworks())[0]?.address || '';
+export { lanNetworks };
+export function migrateState(stateRoot) {
+  fs.mkdirSync(stateRoot, { recursive: true });
+  for (const name of ['bridge-config.json', 'bridge-session.json']) {
+    const target = path.join(stateRoot, name);
+    const old = path.join(bridgeRoot, '../.codex/bridge', name);
+    if (!fs.existsSync(target) && fs.existsSync(old)) fs.copyFileSync(old, target, fs.constants.COPYFILE_EXCL);
+  }
+}
+export async function desktopEnvironment(context, sharedUrl) {
+  const environment = { ...process.env };
+  environment.CODEX_THREAD_ID ||= environment.CODEX_SESSION_ID || context?.sourceThreadId;
+  if (sharedUrl) environment.CODEX_REMOTE_SHARED_WS_URL = sharedUrl;
+  else delete environment.CODEX_REMOTE_SHARED_WS_URL;
+  const installation = readRecord(path.join(runtimePaths(environment).serviceRoot, 'installation.json'));
+  const executable = installation?.nodeExecutable;
+  if (!executable || !fs.existsSync(executable)) throw new Error('安装时选用的 Node 不存在，请重新安装 Code Relax。');
+  environment.CODEX_MCP_NODE_PATH = executable;
+  environment.CODEX_REMOTE_LEGACY_UPLOADS_ROOTS = JSON.stringify(installation.legacyUploadsRoots || []);
+  if (sharedUrl) delete environment.CODEX_APP_TOOLS_PIPE_PATH;
+  return { executable, environment };
+}

package/dist/src/platform/windows/start-hidden-console.ps1

@@ -0,0 +1,39 @@
+$ErrorActionPreference = 'Stop'
+[Console]::InputEncoding = New-Object System.Text.UTF8Encoding($false)
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+try {
+    $spec = [Console]::In.ReadToEnd() | ConvertFrom-Json
+    # WMI owns this launch, not the caller's kill-on-close Desktop job hierarchy.
+    $instance = [Guid]::NewGuid().ToString()
+    $launchRoot = [IO.Path]::GetFullPath((Join-Path $env:LOCALAPPDATA 'CodexRemote\process-launch'))
+    New-Item -ItemType Directory -Path $launchRoot -Force | Out-Null
+    Add-Type -Path (Join-Path $PSScriptRoot 'IsolatedProcess.cs')
+    $launchRoot = [IsolatedProcess]::ResolvePath($launchRoot)
+    $ready = Join-Path $launchRoot ($instance + '.json')
+    $spec | Add-Member -NotePropertyName instance -NotePropertyValue $instance
+    $spec | Add-Member -NotePropertyName ready -NotePropertyValue $ready
+    $environment = @(Get-ChildItem Env: | Where-Object { $_.Name -ne 'CODEX_REMOTE_PROCESS_SPEC' } | ForEach-Object { $_.Name + '=' + $_.Value })
+    $environment += 'CODEX_REMOTE_PROCESS_SPEC=' + ($spec | ConvertTo-Json -Compress -Depth 10)
+    $startup = New-CimInstance -ClassName Win32_ProcessStartup -ClientOnly -Property @{
+        ShowWindow=[uint16]0; CreateFlags=[uint32]0x1000010; EnvironmentVariables=[string[]]$environment
+    }
+    $powershell = Join-Path $env:SystemRoot 'System32\WindowsPowerShell\v1.0\powershell.exe'
+    $command = '"' + $powershell + '" -NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File "' + (Join-Path $PSScriptRoot 'launch-worker.ps1') + '"'
+    $broker = Invoke-CimMethod -ClassName Win32_Process -MethodName Create -Arguments @{
+        CommandLine=$command; CurrentDirectory=$env:USERPROFILE; ProcessStartupInformation=$startup
+    }
+    if ($broker.ReturnValue -ne 0) { throw ('Windows process broker failed: ' + $broker.ReturnValue) }
+    $deadline = [DateTime]::UtcNow.AddSeconds(20)
+    while (-not (Test-Path -LiteralPath $ready)) {
+        if ([DateTime]::UtcNow -gt $deadline) { throw 'Windows process broker handoff timed out.' }
+        Start-Sleep -Milliseconds 50
+    }
+    $result = Get-Content -LiteralPath $ready -Raw -Encoding UTF8 | ConvertFrom-Json
+    Remove-Item -LiteralPath $ready
+    if ($result.instance -ne $instance -or $result.brokerPid -ne $broker.ProcessId) { throw 'Windows process broker identity mismatch.' }
+    if ($result.error) { throw [string]$result.error }
+    [Console]::WriteLine([int]$result.pid)
+} catch {
+    [Console]::Error.WriteLine($_.Exception.Message)
+    exit 1
+}

package/dist/src/platform/windows/stop-desktop.ps1

@@ -0,0 +1,19 @@
+param([Parameter(Mandatory=$true)][string]$Executable)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
+if (-not $package -or $Executable -ne (Join-Path $package.InstallLocation 'app/ChatGPT.exe')) {
+    throw 'Desktop executable identity changed; recovery stopped.'
+}
+# This action is only reached after explicit whole-workstation recovery confirmation.
+# Never kill an app-server process tree: the independent recovery worker must survive.
+$workers = @(Get-CimInstance Win32_Process -Filter "Name='ChatGPT.exe'" | Where-Object { $_.ExecutablePath -eq $Executable })
+foreach ($worker in $workers) {
+    $actual = Get-CimInstance Win32_Process -Filter "ProcessId=$($worker.ProcessId)"
+    if ($actual -and $actual.ExecutablePath -eq $worker.ExecutablePath -and $actual.CreationDate -eq $worker.CreationDate) {
+        Stop-Process -Id $worker.ProcessId -Force -ErrorAction Stop
+    }
+}
+if (Get-Process ChatGPT -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq $Executable }) {
+    throw 'Desktop did not exit; recovery stopped.'
+}

package/dist/src/platform/windows/user-environment.mjs

@@ -0,0 +1,50 @@
+import path from 'node:path';
+import fs from 'node:fs';
+import { readRecord, writeRecord } from '../../service-lifecycle.mjs';
+import { runScript } from './desktop-host.mjs';
+import { managedAppServerUrl } from '../../managed-app-server.mjs';
+
+const ownershipFile = 'managed-environment.json';
+
+export async function readManagedEnvironment() {
+  return JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Read']));
+}
+
+export async function configureManagedEnvironment(stateRoot) {
+  const current = await readManagedEnvironment();
+  const ownershipPath = path.join(stateRoot, ownershipFile);
+  const ownership = readRecord(ownershipPath);
+  if (current.forceCliUser === '1' || current.forceCliMachine === '1') {
+    throw new Error('CODEX_APP_SERVER_FORCE_CLI=1 会让 Codex 忽略受管 app-server；未修改该配置。');
+  }
+  if (current.userValue && current.userValue !== managedAppServerUrl) {
+    throw new Error(`用户已有 CODEX_APP_SERVER_WS_URL=${current.userValue}；未覆盖该配置。`);
+  }
+  if (current.userValue === managedAppServerUrl) {
+    const owned = ownership?.value === managedAppServerUrl;
+    return { configured: true, value: current.userValue, changed: false, owned };
+  }
+  const applied = JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Set', '-Value', managedAppServerUrl]));
+  writeRecord(ownershipPath, { name: 'CODEX_APP_SERVER_WS_URL', value: managedAppServerUrl,
+    configuredAt: new Date().toISOString() });
+  return { configured: true, value: applied.userValue, changed: true, owned: true };
+}
+
+export async function clearManagedEnvironment(stateRoot) {
+  const ownershipPath = path.join(stateRoot, ownershipFile);
+  const ownership = readRecord(ownershipPath);
+  const current = await readManagedEnvironment();
+  if (!current.userValue) {
+    fs.rmSync(ownershipPath, { force: true });
+    return { removed: false, preserved: false, reason: 'already-empty' };
+  }
+  if (ownership?.value !== managedAppServerUrl || current.userValue !== managedAppServerUrl) {
+    fs.rmSync(ownershipPath, { force: true });
+    return { removed: false, preserved: true, value: current.userValue,
+      reason: ownership?.value === managedAppServerUrl ? 'user-modified' : 'not-owned' };
+  }
+  const result = JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Clear']));
+  if (result.userValue) throw new Error('CODEX_APP_SERVER_WS_URL 清理后读回仍不为空。');
+  fs.rmSync(ownershipPath, { force: true });
+  return { removed: true, preserved: false, reason: 'removed' };
+}

package/dist/src/platform/windows/user-environment.ps1

@@ -0,0 +1,41 @@
+param(
+    [ValidateSet('Read', 'Set', 'Clear')][string]$Action = 'Read',
+    [string]$Value = ''
+)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$name = 'CODEX_APP_SERVER_WS_URL'
+
+function Broadcast-EnvironmentChange {
+    if (-not ('CodeRelax.EnvironmentBroadcast' -as [type])) {
+        Add-Type -Namespace CodeRelax -Name EnvironmentBroadcast -MemberDefinition @'
+[System.Runtime.InteropServices.DllImport("user32.dll", CharSet=System.Runtime.InteropServices.CharSet.Unicode, SetLastError=true)]
+public static extern System.IntPtr SendMessageTimeout(
+    System.IntPtr hWnd, uint Msg, System.UIntPtr wParam, string lParam,
+    uint flags, uint timeout, out System.UIntPtr result);
+'@
+    }
+    [UIntPtr]$result = [UIntPtr]::Zero
+    [void][CodeRelax.EnvironmentBroadcast]::SendMessageTimeout(
+        [IntPtr]0xffff, 0x001A, [UIntPtr]::Zero, 'Environment', 0x0002, 5000, [ref]$result)
+}
+
+if ($Action -eq 'Set') {
+    if ([string]::IsNullOrWhiteSpace($Value)) { throw 'Environment value is required.' }
+    [Environment]::SetEnvironmentVariable($name, $Value, 'User')
+    Broadcast-EnvironmentChange
+} elseif ($Action -eq 'Clear') {
+    [Environment]::SetEnvironmentVariable($name, $null, 'User')
+    Broadcast-EnvironmentChange
+}
+
+$userValue = [Environment]::GetEnvironmentVariable($name, 'User')
+$result = @{
+    userValue = $userValue
+    machineValue = [Environment]::GetEnvironmentVariable($name, 'Machine')
+    forceCliUser = [Environment]::GetEnvironmentVariable('CODEX_APP_SERVER_FORCE_CLI', 'User')
+    forceCliMachine = [Environment]::GetEnvironmentVariable('CODEX_APP_SERVER_FORCE_CLI', 'Machine')
+}
+if ($Action -eq 'Set' -and $userValue -ne $Value) { throw 'Environment value verification failed.' }
+if ($Action -eq 'Clear' -and -not [string]::IsNullOrEmpty($userValue)) { throw 'Environment removal verification failed.' }
+$result | ConvertTo-Json -Compress

package/dist/src/self-relay/client.mjs

@@ -0,0 +1,59 @@
+import { EventEmitter } from 'node:events';
+import WebSocket from 'ws';
+import { decode, relayAddress, send } from './wire.mjs';
+
+// Headless mobile-side adapter for the local validation. No OpenAI credentials.
+export function connectRelayClient({ relayUrl, room, code, credential, clientId, observe = false }) {
+  relayAddress(relayUrl);
+  const events = new EventEmitter(), pending = new Map();
+  const socket = new WebSocket(relayUrl, { maxPayload: 64 * 1024 * 1024, perMessageDeflate: true });
+  let serial = 0, connected = false, pairedCredential = credential, pairedClientId = clientId;
+  const ready = new Promise((resolve, reject) => {
+    const timer = setTimeout(() => { reject(new Error('Relay connection timeout')); socket.terminate(); }, 7000);
+    socket.on('open', () => send(socket, observe ? { type: 'observe', room, credential, clientId }
+      : code ? { type: 'pair', room, code, credential, clientId } : { type: 'resume', room, credential, clientId }));
+    socket.on('error', error => { reject(error); events.emit('diagnostic', error.message); });
+    socket.on('close', () => {
+      clearTimeout(timer); connected = false; reject(new Error('Relay connection closed'));
+      for (const request of pending.values()) { clearTimeout(request.timer); request.reject(new Error('连接断开，操作结果未确认，不自动重发')); }
+      pending.clear(); events.emit('disconnected');
+    });
+    socket.on('message', (bytes, binary) => {
+      try {
+        const message = decode(bytes, binary);
+        if (message.type === 'paired') { if (message.credential) pairedCredential = message.credential; if (message.clientId) pairedClientId = message.clientId; }
+        else if (message.type === 'observing') { clearTimeout(timer); connected = true; events.emit('observing', message); resolve({ room, credential: pairedCredential, clientId: pairedClientId }); }
+        else if (message.type === 'computer-info') events.emit('computer-info', { hostName: message.hostName });
+        else if (message.type === 'lan-candidates') events.emit('lan-candidates', message.candidates);
+        else if (message.type === 'official-computer') events.emit('official-computer', message.computer);
+        else if (message.type === 'official-computer-saved') events.emit('official-computer-saved', message.computer);
+        else if (message.type === 'ready') { clearTimeout(timer); connected = true; resolve({ room, credential: pairedCredential, clientId: pairedClientId }); }
+        else if (message.type === 'data') {
+          const body = decode(message.payload, false), request = pending.get(body.id);
+          if (body.type === 'response' && request) { clearTimeout(request.timer); pending.delete(body.id); request.resolve(body); }
+          else events.emit('message', body);
+        } else throw new Error('Invalid relay message');
+      } catch (error) { reject(error); events.emit('diagnostic', error.message); socket.close(1008, 'Invalid response'); }
+    });
+  });
+  return {
+    ready, events,
+    request(path, { method = 'GET', body, timeoutMs = 5000 } = {}) {
+      if (!connected) return Promise.reject(new Error('Relay not ready'));
+      const id = ++serial;
+      return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => { pending.delete(id); reject(new Error('请求超时，结果未确认，不自动重发')); }, timeoutMs);
+        pending.set(id, { resolve, reject, timer });
+        if (!send(socket, { type: 'data', payload: JSON.stringify({ type: 'request', id, path, method, ...(body ? { body } : {}) }) })) {
+          clearTimeout(timer); pending.delete(id); reject(new Error('Relay not connected'));
+        }
+      });
+    },
+    send(message) { if (!connected) throw new Error('Relay not ready'); return send(socket, { type: 'data', payload: JSON.stringify(message) }); },
+    recordOfficialComputer(computer) {
+      if (!connected || !observe) throw new Error('Metadata channel not ready');
+      return send(socket, { type: 'official-computer', ...computer });
+    },
+    close() { socket.terminate(); },
+  };
+}