@walkhi/code-relax 0.1.0-beta.10 → 0.1.0-beta.101

package/dist/src/platform/windows/desktop-helper.mjs

@@ -0,0 +1,272 @@
+import net from 'node:net';
+import fs from 'node:fs';
+import path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { createHash } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+import { setTimeout as delay } from 'node:timers/promises';
+
+const exec = promisify(execFile);
+const binary = fileURLToPath(new URL('../../../native/desktop-helper/CodeRelaxDesktop.exe', import.meta.url));
+const powershell = path.join(process.env.SystemRoot || 'C:/Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+const quote = value => `'${String(value).replaceAll("'", "''")}'`;
+const encoded = script => Buffer.from(script, 'utf16le').toString('base64');
+const maxFrameBytes = 6 * 1024 * 1024;
+
+export async function desktopHelperStatus() {
+  if (process.platform !== 'win32' || !fs.existsSync(binary)) return { installed: false, running: false, state: 'unavailable' };
+  const { stdout } = await exec(binary, ['--status'], { windowsHide: true, encoding: 'utf8', timeout: 5000 });
+  const result = JSON.parse(stdout.trim());
+  if (result.error) throw new Error(result.error);
+  return result;
+}
+
+async function elevateHelper(argument) {
+  const script = `$ErrorActionPreference = 'Stop'; try { $child = Start-Process -FilePath ${quote(binary)} -ArgumentList ${quote(argument)} -Verb RunAs -PassThru -Wait; exit $child.ExitCode } catch { [Console]::Error.WriteLine($_.Exception.Message); exit 1 }`;
+  try { await exec(powershell, ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded(script)], { windowsHide: true, timeout: 180000 }); }
+  catch (error) { throw new Error(`桌面操作辅助服务配置未完成，需要在工作站确认 UAC：${error.stderr?.trim() || error.message}`); }
+}
+
+export async function removeDesktopHelper() {
+  const current = await desktopHelperStatus();
+  if (!current.installed) return { installed: false, removed: false };
+  await elevateHelper('--remove');
+  const result = await desktopHelperStatus();
+  if (result.installed) throw new Error('桌面操作辅助服务尚未移除。');
+  return { ...result, removed: true };
+}
+
+export async function updateDesktopHelperIfEnabled() {
+  const current = await desktopHelperStatus();
+  if (!current.installed || current.updateProtocol !== 1) return { ...current, changed: false, silentUpdateEnabled: false };
+  return installDesktopHelper({ silentOnly: true });
+}
+
+async function silentUpdate(current) {
+  const bytes = fs.readFileSync(binary);
+  const manifest = JSON.parse(fs.readFileSync(binary + '.update.json', 'utf8'));
+  if (manifest.protocol !== 1 || !Number.isSafeInteger(manifest.revision) || manifest.revision <= current.revision ||
+      manifest.size !== bytes.length || bytes.length > 16 * 1024 * 1024 || !/^[a-f0-9]{768}$/.test(manifest.signature))
+    throw new Error('桌面辅助组件签名包无效或版本未递增；未请求 UAC');
+  const pipe = new PipeSession('\\\\.\\pipe\\CodeRelax.Desktop.Update.v1', 30000);
+  try {
+    const result = await pipe.request(`UPDATE ${manifest.revision} ${bytes.length} ${manifest.signature}`, bytes);
+    if (result.state !== 'updating' || result.revision !== manifest.revision) throw new Error('辅助组件未确认升级');
+  } finally { pipe.close(); }
+  const resultPath = path.join(path.dirname(current.path), 'update-result.json');
+  const deadline = Date.now() + 60000;
+  // Give the service its normal restart window before opening the result file.
+  await delay(2000);
+  while (Date.now() < deadline) {
+    await delay(250);
+    const result = JSON.parse(fs.readFileSync(resultPath, 'utf8'));
+    if (result.revision !== manifest.revision || result.state === 'updating') continue;
+    if (result.state !== 'complete') throw new Error(`桌面辅助组件升级失败（${result.state}）：${result.error}；未请求 UAC`);
+    const installed = await desktopHelperStatus();
+    if (!installed.running || installed.revision !== manifest.revision) throw new Error('辅助组件升级后尚未就绪；未请求 UAC');
+    return { ...installed, changed: true, silent: true };
+  }
+  throw new Error('桌面辅助组件升级结果待确认，请检查服务状态；未重发或请求 UAC');
+}
+
+export async function installDesktopHelper({ silentOnly = false } = {}) {
+  if (!fs.existsSync(binary)) throw new Error('缺少原生 桌面操作辅助组件，请先构建或安装完整 npm 包。');
+  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded('[Console]::OutputEncoding = New-Object Text.UTF8Encoding; [Security.Principal.WindowsIdentity]::GetCurrent().User.Value')], { windowsHide: true, encoding: 'utf8' });
+  const sid = stdout.trim();
+  if (!/^S-1-5-21-(?:\d+-){3}\d+$/.test(sid)) throw new Error('无法获取当前 Windows 用户 SID。');
+  const current = await desktopHelperStatus();
+  const hash = target => createHash('sha256').update(fs.readFileSync(target)).digest('hex');
+  if (current.running && current.userSid === sid && hash(binary) === hash(current.path)) return { ...current, changed: false };
+  if (current.running && current.userSid === sid && current.updateProtocol === 1) return silentUpdate(current);
+  if (silentOnly) throw new Error('辅助组件尚未启用静默升级或服务未运行；未请求 UAC');
+  // Only this installer is elevated. Node and the workstation remain user-level.
+  await elevateHelper(`--install ${sid}`);
+  const installed = await desktopHelperStatus();
+  if (!installed.running || installed.userSid !== sid) throw new Error('桌面操作辅助服务尚未就绪。');
+  return { ...installed, changed: true };
+}
+
+class PipeSession {
+  constructor(pipeName = '\\\\.\\pipe\\CodeRelax.Desktop.v1', timeoutMs = 10000) {
+    this.timeoutMs = timeoutMs;
+    this.socket = net.createConnection(pipeName);
+    this.socket.setEncoding('utf8');
+    this.buffer = '';
+    this.waiter = null;
+    this.closed = false;
+    this.socket.on('data', data => {
+      this.buffer += data;
+      if (Buffer.byteLength(this.buffer) > maxFrameBytes) { this.fail(new Error('桌面画面超过大小限制')); return; }
+      const end = this.buffer.indexOf('\n');
+      if (end < 0) return;
+      try {
+        const result = JSON.parse(this.buffer.slice(0, end));
+        this.buffer = this.buffer.slice(end + 1);
+        if (!this.waiter) throw new Error('收到未请求的 桌面数据');
+        const waiter = this.waiter; this.waiter = null; clearTimeout(waiter.timer);
+        const complete = () => result.error
+          ? waiter.reject(Object.assign(new Error(result.error), { code: 'desktop_native_error' })) : waiter.resolve(result);
+        if (result.state === 'pending' || result.continuing === true) complete();
+        else this.socket.write('ACK\n', error => {
+          if (error) console.warn(JSON.stringify({ event: 'desktop-response-ack', code: error.code || 'write_failed' }));
+          // The parsed result remains authoritative even if cleanup disconnects.
+          complete();
+        });
+      } catch (error) { this.fail(error); }
+    });
+    this.socket.on('error', error => this.fail(error));
+    this.socket.on('close', () => { this.closed = true; this.fail(new Error('桌面操作辅助连接已关闭，请重新获取画面')); });
+  }
+  fail(error) {
+    if (this.waiter) { const waiter = this.waiter; this.waiter = null; clearTimeout(waiter.timer); waiter.reject(error); }
+    this.socket.destroy();
+  }
+  request(command, payload) {
+    if (this.closed || this.socket.destroyed || this.waiter) return Promise.reject(new Error('桌面操作辅助连接不可用'));
+    return new Promise((resolve, reject) => {
+      this.waiter = { resolve, reject, timer: setTimeout(() => this.fail(new Error('桌面辅助请求超时，结果未知；未自动重发')), this.timeoutMs) };
+      this.socket.write(`${command}\n`);
+      if (payload) this.socket.write(payload);
+    });
+  }
+  close() { this.fail(new Error('桌面画面已释放')); }
+}
+
+// Frame and input share one worker pipe. Serialize them without replaying input.
+export class DesktopHelper {
+  constructor() { this.active = null; this.reading = false; this.queue = Promise.resolve(); this.version = 0; }
+  serial(operation, context) {
+    const version = this.version;
+    const result = this.queue.then(() => {
+      context?.signal?.throwIfAborted();
+      context?.requestSignal?.throwIfAborted();
+      if (version !== this.version) throw Object.assign(new Error('桌面操作已取消，请刷新'), { code: 'desktop_session_invalid' });
+      return operation();
+    });
+    this.queue = result.catch(() => {});
+    return result;
+  }
+  clear(current = this.active) {
+    if (!current) return;
+    clearTimeout(current.timer); current.detachDrag?.(); current.session.close();
+    if (this.active === current) this.active = null;
+  }
+  async frame({ preview = false, encodedOnly = false } = {}, context) {
+    if (this.reading) throw new Error('正在获取桌面画面，请稍候');
+    this.reading = true;
+    try { return await this.serial(async () => {
+      if (this.active?.dragOwner) throw new Error('拖动过程中暂不截图');
+      if (!this.active || this.active.preview !== preview) {
+        this.clear();
+        const version = this.version;
+        const status = await desktopHelperStatus();
+        context?.signal?.throwIfAborted(); context?.requestSignal?.throwIfAborted();
+        if (version !== this.version) throw new Error('桌面操作已取消');
+        if (!status.running) return { state: 'unavailable', message: '工作站桌面服务尚未就绪' };
+        this.active = { session: new PipeSession(), preview };
+      }
+      const current = this.active;
+      try {
+        clearTimeout(current.timer);
+        const frame = await current.session.request(current.frame ? 'FRAME' : preview ? 'PREVIEW' : 'FRAME');
+        if (this.active !== current) throw new Error('桌面画面已释放');
+        if (frame.state !== 'pending') { this.clear(current); return frame; }
+        if (!/^[a-f0-9]{32}$/.test(frame.frameId) || !/^[a-f0-9]{32}$/.test(frame.sessionId) || !Number.isSafeInteger(frame.width) || !Number.isSafeInteger(frame.height) ||
+            !['image/png', 'image/jpeg'].includes(frame.mimeType) || !frame.image?.startsWith('data:' + frame.mimeType + ';base64,') ||
+            frame.width < 1 || frame.height < 1 || frame.preview !== preview) throw new Error('桌面画面格式无效');
+        current.imageData = encodedOnly ? frame.image : null;
+        const image = encodedOnly ? null : Buffer.from(frame.image.slice(('data:' + frame.mimeType + ';base64,').length), 'base64');
+        delete frame.image;
+        current.sessionId = frame.sessionId;
+        frame.imagePath = '/api/desktop/frames/' + frame.frameId;
+        frame.size = image?.length ?? Math.floor(current.imageData.split(',')[1].length * 3 / 4);
+        current.frame = frame; current.image = image; current.expires = Date.now() + 30000;
+        current.timer = setTimeout(() => this.release(undefined, current.sessionId), 30000);
+        return frame;
+      } catch (error) { this.clear(current); throw error; }
+    }, context); } finally { this.reading = false; }
+  }
+  input(sessionId, command, context, dragState) {
+    return this.serial(async () => {
+      const current = this.active;
+      if (!current?.frame || sessionId !== current.sessionId || Date.now() >= current.expires)
+        throw Object.assign(new Error('请刷新桌面后操作'), { code: 'desktop_session_invalid' });
+      if (current.dragOwner && current.dragOwner !== context?.owner) throw new Error('另一控制连接正在拖动鼠标');
+      if (dragState === 'down') {
+        if (!context?.owner || !context.signal || current.dragOwner) throw new Error('拖动会话无效');
+        current.dragOwner = context.owner;
+        const cancel = () => { if (this.active === current) this.release(undefined, sessionId); };
+        context.signal.addEventListener('abort', cancel, { once: true });
+        current.detachDrag = () => { context.signal.removeEventListener('abort', cancel); current.dragOwner = null; current.detachDrag = null; };
+      }
+      if (dragState === 'up' && !current.dragOwner) throw new Error('鼠标未由此连接按下');
+      try {
+        const result = await current.session.request(command);
+        if (this.active !== current) throw new Error('桌面操作已取消');
+        context?.signal?.throwIfAborted();
+        context?.requestSignal?.throwIfAborted();
+        if (dragState === 'up') current.detachDrag?.();
+        if (result.continuing !== true) this.clear(current);
+        else {
+          clearTimeout(current.timer); current.expires = Date.now() + 30000;
+          current.timer = setTimeout(() => this.release(undefined, sessionId), 30000);
+        }
+        return result;
+      } catch (error) { this.clear(current); throw error; }
+    }, context);
+  }
+  cursor({ sessionId }, context) { return this.input(sessionId, 'CURSOR ' + sessionId, context); }
+  move({ sessionId, dx, dy }, context) {
+    if (!Number.isSafeInteger(dx) || !Number.isSafeInteger(dy) || Math.abs(dx) > 512 || Math.abs(dy) > 512 || (!dx && !dy))
+      throw new Error('无效的相对鼠标位移');
+    return this.input(sessionId, 'MOVE ' + sessionId + ' ' + dx + ' ' + dy, context);
+  }
+  click({ sessionId, button, x, y }, context) {
+    if (!['left', 'right', 'double'].includes(button)) throw new Error('无效的鼠标按键');
+    if (x !== undefined || y !== undefined) {
+      if (!Number.isFinite(x) || !Number.isFinite(y) || x < 0 || x > 1 || y < 0 || y > 1) throw new Error('无效的鼠标位置');
+      return this.input(sessionId, `CLICKAT ${sessionId} ${Math.round(x * 65535)} ${Math.round(y * 65535)} ${button}`, context);
+    }
+    return this.input(sessionId, 'BUTTON ' + sessionId + ' ' + button, context);
+  }
+  position({ sessionId, x, y }, context) {
+    if (!Number.isFinite(x) || !Number.isFinite(y) || x < 0 || x > 1 || y < 0 || y > 1) throw new Error('无效的鼠标位置');
+    return this.input(sessionId, `POSITION ${sessionId} ${Math.round(x * 65535)} ${Math.round(y * 65535)}`, context);
+  }
+  pointer({ sessionId, state, x, y }, context) {
+    if (!['down', 'up'].includes(state)) throw new Error('无效的鼠标状态');
+    if (state === 'down') {
+      if (!Number.isFinite(x) || !Number.isFinite(y) || x < 0 || x > 1 || y < 0 || y > 1) throw new Error('无效的鼠标位置');
+      return this.input(sessionId, `DOWN ${sessionId} ${Math.round(x * 65535)} ${Math.round(y * 65535)}`, context, state);
+    }
+    return this.input(sessionId, `UP ${sessionId}`, context, state);
+  }
+  imageData(frameId) {
+    const current = this.active;
+    if (!current?.frame || current.frame.frameId !== frameId || Date.now() >= current.expires) throw new Error('桌面画面已释放或过期，请重新获取');
+    return current.imageData;
+  }
+  image(frameId) {
+    const current = this.active;
+    if (!current?.frame || current.frame.frameId !== frameId || Date.now() >= current.expires)
+      throw new Error('桌面画面已释放或过期，请重新获取');
+    return current.image;
+  }
+  keyboard({ sessionId, key, text, wheel, drag }, context) {
+    if (typeof text === 'string' && text.length > 0 && text.length <= 500 && !/[\u0000-\u0008\u000b\u000c\u000e-\u001f]/.test(text))
+      return this.input(sessionId, `TEXT ${sessionId} ${Buffer.from(text, 'utf16le').toString('hex')}`, context);
+    if (['enter', 'escape', 'tab', 'backspace', 'ctrl-a', 'ctrl-c', 'ctrl-v', 'alt-tab', 'win', 'left', 'right', 'up', 'down'].includes(key))
+      return this.input(sessionId, `KEY ${sessionId} ${key}`, context);
+    if (Number.isSafeInteger(wheel) && wheel !== 0 && Math.abs(wheel) <= 600)
+      return this.input(sessionId, `WHEEL ${sessionId} ${wheel}`, context);
+    if (drag && Number.isSafeInteger(drag.dx) && Number.isSafeInteger(drag.dy) && Math.abs(drag.dx) <= 512 && Math.abs(drag.dy) <= 512 && (drag.dx || drag.dy))
+      return this.input(sessionId, `DRAG ${sessionId} ${drag.dx} ${drag.dy}`, context);
+    throw new Error('无效的键盘或滚动操作');
+  }
+  release(frameId, sessionId) {
+    if (frameId && this.active?.frame?.frameId !== frameId) return;
+    if (sessionId && this.active?.sessionId !== sessionId) return;
+    this.version++; this.clear();
+  }
+}

package/dist/src/platform/windows/desktop-host.mjs

@@ -1,53 +1,67 @@
-import { startWindowsProcess } from './background-process.mjs';
+import { startWindowsProcess } from './background-process.mjs';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 import { fileURLToPath } from 'node:url';
 import path from 'node:path';
+import { managedEndpointUrl, readManagedEndpoint } from '../../managed-endpoint.mjs';
+import { runtimePaths } from './runtime-paths.mjs';
 import { sharedServiceUrl } from './service-host.mjs';
+import { configureDesktopBrowserEnvironment } from './desktop-browser-environment.mjs';
 const exec = promisify(execFile);
 const directory = path.dirname(fileURLToPath(import.meta.url));
 export const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
 export async function runScript(name, args = []) {
-  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File', path.join(directory, name), ...args], { windowsHide: true, encoding: 'utf8', timeout: 30000 });
+  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File', path.join(directory, name), ...args], { windowsHide: true, encoding: 'utf8', timeout: 30000 });
   return stdout.trim();
 }
-export const desktopHost = {
+export const desktopHost = {
   inspect: async () => JSON.parse(await runScript('desktop-info.ps1')),
   process: async pid => JSON.parse(await runScript('desktop-info.ps1', ['-ProcessId', String(pid)])),
   sharedServiceUrl,
-  start: startWindowsProcess,
-  closeDesktop: executable => runScript('stop-desktop.ps1', ['-Executable', executable]),
-  stop: pid => process.kill(pid),
-  async prepareKernelRestart() {
-    const info = await this.inspect();
-    if (!info.running || !await this.sharedServiceUrl()) return null;
-    await this.closeDesktop(info.desktop);
-    return info.desktop;
-  },
-  async resumeAfterKernelRestart(executable, environment) {
-    if (!executable) return;
-    await this.start(executable, [], environment, []);
-    const deadline = Date.now() + 30000;
-    while (!await this.sharedServiceUrl()) {
-      if (Date.now() >= deadline) throw new Error('Codex 内核已就绪，但 Desktop 未完成重新接入。');
-      await new Promise(resolve => setTimeout(resolve, 500));
-    }
-  },
+  ownsListener: async (expected, url) => JSON.parse(await runScript('desktop-info.ps1', ['-ProcessId', String(expected.pid), '-Expected', JSON.stringify(expected), '-AppServerUrl', url, '-CheckListener'])),
+  start: startWindowsProcess,
+  startDesktop: async (executable, environment) => {
+    const url = managedEndpointUrl(environment.CODEX_APP_SERVER_WS_URL);
+    if (!url || url !== readManagedEndpoint(runtimePaths().stateRoot)) throw new Error('Desktop 内核地址与工作站不一致。');
+    await configureDesktopBrowserEnvironment(runtimePaths().stateRoot);
+    return runScript('activate-desktop.ps1', [
+      '-Executable', executable, '-AppServerUrl', url,
+    ]);
+  },
+  async desktopReady() {
+    return (await this.inspect()).hasWindow === true && Boolean(await this.sharedServiceUrl());
+  },
+  closeDesktop: executable => runScript('stop-desktop.ps1', ['-Executable', executable]),
+  stop: (pid, expected) => runScript('desktop-info.ps1', ['-ProcessId', String(pid), '-Expected', JSON.stringify(expected), '-StopManagedProcess']),
+  async prepareKernelRestart() {
+    const info = await this.inspect();
+    if (!info.running || !await this.sharedServiceUrl()) return null;
+    await this.closeDesktop(info.desktop);
+    return info.desktop;
+  },
+  async resumeAfterKernelRestart(executable, environment) {
+    if (!executable) return;
+    await this.startDesktop(executable, environment);
+    const deadline = Date.now() + 30000;
+    while (!await this.desktopReady()) {
+      if (Date.now() >= deadline) throw new Error('Codex 内核已就绪，但 Desktop 未完成重新接入。');
+      await new Promise(resolve => setTimeout(resolve, 500));
+    }
+  },
   ready: async url => { try { return (await fetch(url, { signal: AbortSignal.timeout(1000) })).ok; } catch { return false; } },
-};
-export const resolveStateRoot = stateRoot => runScript('resolve-state-root.ps1', ['-StateRoot', stateRoot]);
+};
+export const resolveStateRoot = stateRoot => runScript('resolve-state-root.ps1', ['-StateRoot', stateRoot]);
 
-export async function desktopShortcuts({ serviceRoot, nodeExecutable }, remove = false, destination) {
+export async function removeDesktopShortcut({ serviceRoot, nodeExecutable }, destination) {
   const entry = path.join(serviceRoot, 'dist/bin/codex-remote.mjs');
   const args = ['-NodePath', nodeExecutable, '-Entry', entry];
-  if (remove) args.push('-Remove');
   if (destination) args.push('-Destination', destination);
   return JSON.parse(await runScript('desktop-shortcuts.ps1', args));
-}
-
-export async function residentStartup({ serviceRoot, nodeExecutable }, action = 'status') {
-  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
-    path.join(serviceRoot, 'dist/src/platform/windows/resident-startup.ps1'), '-NodePath', nodeExecutable,
-    '-Entry', path.join(serviceRoot, 'dist/bin/codex-remote.mjs'), '-Action', action], { windowsHide: true, encoding: 'utf8' });
-  return JSON.parse(stdout.trim());
-}
+}
+
+export async function residentStartup({ serviceRoot, nodeExecutable }, action = 'status') {
+  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
+    path.join(serviceRoot, 'dist/src/platform/windows/resident-startup.ps1'), '-NodePath', nodeExecutable,
+    '-Entry', path.join(serviceRoot, 'dist/bin/codex-remote.mjs'), '-Action', action], { windowsHide: true, encoding: 'utf8' });
+  return JSON.parse(stdout.trim());
+}

package/dist/src/platform/windows/desktop-info.ps1

@@ -1,6 +1,30 @@
-param([int]$ProcessId = 0)
+param([int]$ProcessId = 0, [string]$Expected, [string]$AppServerUrl, [switch]$CheckListener, [switch]$StopManagedProcess)
 $ErrorActionPreference = 'Stop'
 [Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+function Read-Identity([int]$Id) {
+    $item = Get-CimInstance Win32_Process -Filter "ProcessId=$Id"
+    if ($item) { return @{ pid=$item.ProcessId; executable=$item.ExecutablePath; command=$item.CommandLine; created=$item.CreationDate.ToUniversalTime().ToString('o') } }
+    return $null
+}
+function Same-Identity($a, $b) {
+    return $null -ne $a -and $null -ne $b -and $a.pid -eq $b.pid -and $a.executable -ceq $b.executable -and $a.command -ceq $b.command -and $a.created -ceq $b.created
+}
+if ($CheckListener -or $StopManagedProcess) {
+    if ($ProcessId -le 0 -or -not $Expected) { throw 'Missing managed process identity.' }
+    $identity = $Expected | ConvertFrom-Json
+    if ($identity.pid -ne $ProcessId) { throw 'Process identity mismatch.' }
+    $actual = Read-Identity $ProcessId
+    if (-not (Same-Identity $identity $actual)) {
+        if ($StopManagedProcess) { throw 'Process identity changed; nothing stopped.' }
+        'false'; exit
+    }
+    if ($StopManagedProcess) { Stop-Process -Id $ProcessId -ErrorAction Stop; '{"stopped":true}'; exit }
+    if ($AppServerUrl -cnotmatch '^ws://127\.0\.0\.1:([1-9][0-9]{0,4})\z' -or [int]$Matches[1] -gt 65535) { throw 'Invalid managed app-server URL.' }
+    $port = [int]$Matches[1]
+    $listeners = @(Get-NetTCPConnection -LocalPort $port -State Listen -ErrorAction SilentlyContinue | Where-Object { $_.LocalAddress -eq '127.0.0.1' -and $_.OwningProcess -eq $ProcessId })
+    [bool]($listeners.Count -gt 0 -and (Same-Identity $identity (Read-Identity $ProcessId))) | ConvertTo-Json -Compress
+    exit
+}
 if ($ProcessId -gt 0) {
     $item = Get-CimInstance Win32_Process -Filter "ProcessId=$ProcessId"
     if ($item) { @{ pid=$item.ProcessId; executable=$item.ExecutablePath; command=$item.CommandLine; created=$item.CreationDate.ToUniversalTime().ToString('o') } | ConvertTo-Json -Compress }
@@ -8,7 +32,7 @@ if ($ProcessId -gt 0) {
     exit
 }
 $package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
-if (-not $package) { @{ desktop=$null; running=$false } | ConvertTo-Json -Compress; exit }
+if (-not $package) { @{ desktop=$null; running=$false } | ConvertTo-Json -Compress; exit }
 $desktop = Join-Path $package.InstallLocation 'app/ChatGPT.exe'
 $running = @(Get-Process ChatGPT -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq $desktop })
-@{ desktop=$desktop; running=($running.Count -gt 0) } | ConvertTo-Json -Compress
+@{ desktop=$desktop; version=$package.Version.ToString(); running=($running.Count -gt 0); hasWindow=(@($running | Where-Object { $_.MainWindowHandle -ne 0 }).Count -gt 0) } | ConvertTo-Json -Compress

package/dist/src/platform/windows/desktop-project-registration.mjs

@@ -0,0 +1,4 @@
+import { desktopHost } from './desktop-host.mjs';
+import { withDesktopProjectRegistration as register } from '../desktop-project-store.mjs';
+export { registerProjectInState, desktopProjectRestartWarning } from '../desktop-project-store.mjs';
+export const withDesktopProjectRegistration = (options, action) => register({ host: desktopHost, ...options }, action);

package/dist/src/platform/windows/desktop-runtime.ps1

@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
+if (-not $package) { 'null'; exit }
+$resources = Join-Path $package.InstallLocation 'app\resources'
+@{
+    package = $package.PackageFullName
+    executable = Join-Path $resources 'codex.exe'
+    codeModeHost = Join-Path $resources 'codex-code-mode-host.exe'
+} | ConvertTo-Json -Compress

package/dist/src/platform/windows/desktop-shortcuts.ps1

@@ -1,9 +1,10 @@
-param([string]$NodePath, [string]$Entry, [switch]$Remove, [string]$Destination)
+param([string]$NodePath, [string]$Entry, [string]$Destination)
 $ErrorActionPreference = 'Stop'
 [Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
 $shell = New-Object -ComObject WScript.Shell
 if (-not $Destination) { $Destination = $shell.SpecialFolders.Item('Desktop') }
-$launcher = Join-Path $PSScriptRoot 'desktop-shortcut-run.ps1'
+# Only identify and remove the retired shortcut; never create a new launcher.
+$launcher = Join-Path $PSScriptRoot 'desktop-shortcut-run.ps1'
 $items = @(@{Name='Code Relax - Codex 内核'; Command='shared-start'})
 $results = @()
 foreach ($item in $items) {
@@ -11,18 +12,10 @@ foreach ($item in $items) {
     $arguments = '-NoProfile -NoExit -ExecutionPolicy Bypass -File "' + $launcher + '" -NodePath "' + $NodePath + '" -Entry "' + $Entry + '" -Action ' + $item.Command
     if (Test-Path -LiteralPath $target) {
         $existing = $shell.CreateShortcut($target)
-        if ($existing.Arguments -ne $arguments) { throw ('快捷方式不是本安装创建的，未覆盖或删除：' + $target) }
-    }
-    if ($Remove) {
-        if (Test-Path -LiteralPath $target) { Remove-Item -LiteralPath $target }
-    } else {
-        $link = $shell.CreateShortcut($target)
-        $link.TargetPath = Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
-        $link.Arguments = $arguments
-        $link.WorkingDirectory = Split-Path $Entry -Parent
-        $link.Description = $item.Name
-        $link.Save()
+        $powershell = Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
+        if ($existing.Arguments -ne $arguments -or $existing.TargetPath -ne $powershell) { continue }
     }
+    if (Test-Path -LiteralPath $target) { Remove-Item -LiteralPath $target }
     $results += $target
 }
 ConvertTo-Json -InputObject $results -Compress

package/dist/src/platform/windows/dots-profile.mjs

@@ -0,0 +1,49 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { dotsProfile } from '../../dots-profile.mjs';
+
+// Desktop 26.928.2636.0 persists its current TBO sidebar profiles here.
+// Read display names, appearance colors and snapshot references; identity comes from the authenticated kernel.
+export function desktopDotsProfiles(codexDataRoot, stateRoot) {
+  const snapshotPath = ({ accountId, userId }) => stateRoot && path.join(stateRoot, 'dots-profiles',
+    createHash('sha256').update(JSON.stringify([accountId, userId])).digest('hex') + '.json');
+  const read = async ({ accountId, userId }) => {
+    let state;
+    try {
+      state = JSON.parse(await fs.readFile(path.join(codexDataRoot, '.codex-global-state.json'), 'utf8'));
+    } catch (error) {
+      if (error.code !== 'ENOENT') throw error;
+    }
+    const cache = state?.['electron-persisted-atom-state']?.['cloud-aeon-sidebar-cache-v1'];
+    const names = new Map();
+    if (!accountId || !userId) return names;
+    const matching = cache?.hostId === 'durable' && cache.accountId === accountId && cache.userId === userId;
+    for (const [threadId, profile] of Object.entries(matching ? cache.profilesByThreadId || {} : {})) {
+      const value = dotsProfile(profile);
+      for (const id of [threadId, profile.active_root_thread_id, profile.root_thread_id]) {
+        if (typeof id === 'string' && id) names.set(id, value);
+      }
+    }
+    const file = snapshotPath({ accountId, userId });
+    if (file) {
+      try {
+        const saved = JSON.parse(await fs.readFile(file, 'utf8'));
+        if (saved.accountId !== accountId || saved.userId !== userId || !Array.isArray(saved.profiles)) throw new Error('点点资料缓存身份无效。');
+        const profiles = new Map(saved.profiles);
+        const byId = new Map([...profiles.values()].map(profile => [profile.profileId, profile]));
+        for (const [id, profile] of names) if (byId.has(profile.profileId)) names.set(id, byId.get(profile.profileId));
+        for (const [id, profile] of profiles) names.set(id, profile);
+      } catch (error) { if (error.code !== 'ENOENT') console.error('读取点点资料缓存失败：', error.message); }
+    }
+    return names;
+  };
+  read.save = async (identity, profiles) => {
+    const file = snapshotPath(identity);
+    if (!file) return;
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    await fs.writeFile(file + '.tmp', JSON.stringify({ ...identity, profiles: [...profiles] }), 'utf8');
+    await fs.rename(file + '.tmp', file);
+  };
+  return read;
+}

package/dist/src/platform/windows/keep-awake.ps1

@@ -0,0 +1,20 @@
+$ErrorActionPreference = 'Stop'
+Import-Module "$env:SystemRoot\System32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1"
+Add-Type -TypeDefinition @'
+using System;
+using System.Runtime.InteropServices;
+public static class CodeRelaxPowerLease {
+    [DllImport("kernel32.dll", SetLastError = true)]
+    static extern uint SetThreadExecutionState(uint flags);
+    public static void Hold() {
+        if (SetThreadExecutionState(0x80000001u) == 0)
+            throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error());
+        try {
+            Console.WriteLine("ready");
+            Console.Out.Flush();
+            Console.In.ReadLine();
+        } finally { SetThreadExecutionState(0x80000000u); }
+    }
+}
+'@
+[CodeRelaxPowerLease]::Hold()

package/dist/src/platform/windows/launch-worker.mjs

@@ -1,42 +1,41 @@
-import fs from 'node:fs';
-import { spawn } from 'node:child_process';
-
-const [requestPath, readyPath, instance, diagnosticPath] = process.argv.slice(2);
-let result = { instance, brokerPid: process.pid };
-
-function diagnostic(message) {
-  if (!diagnosticPath) return;
-  fs.appendFileSync(diagnosticPath, `${new Date().toISOString()} ${message}\n`, 'utf8');
-}
-
-try {
-  const spec = JSON.parse(fs.readFileSync(requestPath, 'utf8').replace(/^\uFEFF/u, ''));
-  diagnostic('request loaded');
-  if (spec.instance !== instance) throw new Error('Windows process broker request identity mismatch.');
-  fs.rmSync(requestPath, { force: true });
-  const descriptors = (spec.logs || []).map(file => fs.openSync(file, 'a'));
-  try {
-    const child = spawn(spec.executable, spec.args || [], {
-      windowsHide: true,
-      env: spec.environment,
-      stdio: ['ignore', descriptors[0] ?? 'ignore', descriptors[1] ?? 'ignore'],
-    });
-    await new Promise((resolve, reject) => {
-      child.once('spawn', resolve);
-      child.once('error', reject);
-    });
-    // Keep this WMI-owned broker alive with the target so Codex tools inherit
-    // its hidden console instead of creating a visible console per command.
-    result.pid = child.pid;
-    diagnostic(`target started (PID ${child.pid})`);
-  } finally {
-    descriptors.forEach(descriptor => fs.closeSync(descriptor));
-  }
-} catch (error) {
-  result.error = error?.stack || error?.message || String(error);
-  try { diagnostic(`failed: ${result.error}`); } catch {}
-}
-
-const temporary = `${readyPath}.tmp`;
-fs.writeFileSync(temporary, JSON.stringify(result), 'utf8');
-fs.renameSync(temporary, readyPath);
+import fs from 'node:fs';
+import { spawn } from 'node:child_process';
+import { attachProcessLog } from '../../bounded-process-log.mjs';
+
+const [requestPath, readyPath, instance, diagnosticPath] = process.argv.slice(2);
+let result = { instance, brokerPid: process.pid };
+
+function diagnostic(message) {
+  if (!diagnosticPath) return;
+  fs.appendFileSync(diagnosticPath, `${new Date().toISOString()} ${message}\n`, 'utf8');
+}
+
+try {
+  const spec = JSON.parse(fs.readFileSync(requestPath, 'utf8').replace(/^\uFEFF/u, ''));
+  diagnostic('request loaded');
+  if (spec.instance !== instance) throw new Error('Windows process broker request identity mismatch.');
+  fs.rmSync(requestPath, { force: true });
+  const logs = spec.logs || [];
+  const child = spawn(spec.executable, spec.args || [], {
+    windowsHide: true,
+    env: spec.environment,
+    stdio: ['ignore', logs[0] ? 'pipe' : 'ignore', logs[1] ? 'pipe' : 'ignore'],
+  });
+  if (child.stdout) attachProcessLog(child.stdout, logs[0]);
+  if (child.stderr) attachProcessLog(child.stderr, logs[1]);
+  await new Promise((resolve, reject) => {
+    child.once('spawn', resolve);
+    child.once('error', reject);
+  });
+  // Keep this WMI-owned broker alive with the target so Codex tools inherit
+  // its hidden console instead of creating a visible console per command.
+  result.pid = child.pid;
+  diagnostic(`target started (PID ${child.pid})`);
+} catch (error) {
+  result.error = error?.stack || error?.message || String(error);
+  try { diagnostic(`failed: ${result.error}`); } catch {}
+}
+
+const temporary = `${readyPath}.tmp`;
+fs.writeFileSync(temporary, JSON.stringify(result), 'utf8');
+fs.renameSync(temporary, readyPath);