@walkhi/code-relax 0.1.0-beta.28 → 0.1.0-beta.29

package/dist/bin/codex-remote.mjs

@@ -27,6 +27,9 @@ const help = `Code Relax（Windows）
 常用指令：
   start   启动或复用桌面服务和 Codex 内核，并恢复已配置的 Code Relax 中继
   pair    启动或复用桌面服务，并打开一次性配对二维码
+  pair --expires <带时区的截止时间> 创建本工作站可重复使用的长期二维码
+  pair-list 查看本工作站长期邀请的 ID 和截止时间
+  pair-revoke <邀请ID> 废止本工作站指定长期邀请
   dots-tasks 读取当前 ChatGPT 账号的 Dots 委派任务与最近轮次状态
 维护指令：
   setup   部署并启动桌面服务、Codex 内核和登录自启动；安全配置 Desktop 后续接入
@@ -53,10 +56,17 @@ async function main() {
     console.log(help);
     return;
   }
-  if (!['kernel-restart', 'desktop-recover', 'setup', 'doctor', 'uninstall', 'start', 'pair', 'dots-tasks'].includes(command)
-    || flags.some(flag => flag !== '--json' && !(['kernel-restart', 'desktop-recover'].includes(command) && flag === '--confirm'))) {
+  const options = flags.filter(flag => flag !== '--json');
+  const longPair = command === 'pair' && options.length === 2 && options[0] === '--expires';
+  const revokeInvite = command === 'pair-revoke' && options.length === 1 && /^[\w-]{16,128}$/.test(options[0]);
+  if (!['kernel-restart', 'desktop-recover', 'setup', 'doctor', 'uninstall', 'start', 'pair', 'pair-list', 'pair-revoke', 'dots-tasks'].includes(command)
+    || (!longPair && !revokeInvite && (command === 'pair-revoke' || options.some(flag => !(['kernel-restart', 'desktop-recover'].includes(command) && flag === '--confirm'))))) {
     throw new Error('无效命令或参数。使用 --help 查看用法。');
   }
+  const inviteExpires = longPair ? Date.parse(options[1]) : undefined;
+  if (longPair && (!/(Z|[+-]\d{2}:\d{2})$/.test(options[1]) || !Number.isSafeInteger(inviteExpires) || inviteExpires <= Date.now())) {
+    throw new Error('截止时间必须在未来且含时区，例如 2026-11-01T00:00:00+08:00。');
+  }
   if (process.platform !== 'win32') throw new Error('当前被控端仅支持 Windows。');
   const json = flags.includes('--json');
   if (command === 'dots-tasks') {
@@ -79,7 +89,7 @@ async function main() {
     && ['start', 'pair', 'doctor'].includes(command)) {
     writeRecord(installationPath, { ...installation, nodeExecutable: currentNodeExecutable() });
   }
-  if (['kernel-restart', 'desktop-recover', 'start', 'pair'].includes(command) && !installed) {
+  if (['kernel-restart', 'desktop-recover', 'start', 'pair', 'pair-list', 'pair-revoke'].includes(command) && !installed) {
     if (!fs.existsSync(installedEntry)) throw new Error('尚未部署服务，请先执行 relax setup。');
     const executable = readRecord(installationPath)?.nodeExecutable;
     if (!executable || !fs.existsSync(executable)) throw new Error('安装时选用的 Node 不存在，请重新执行 relax setup。');
@@ -139,6 +149,12 @@ async function main() {
     console.log(json ? JSON.stringify(result) : `${result.message || result.status}${result.error ? '\n' + result.error : ''}\n${result.operationId || ''}`.trim());
     return;
   }
+  if (command === 'pair-list' || command === 'pair-revoke') {
+    const result = await selfRelay(command === 'pair-list' ? 'invite-list' : 'invite-revoke', stateRoot,
+      command === 'pair-revoke' ? { id: options[0] } : undefined);
+    console.log(json ? JSON.stringify(result) : result.displayText);
+    return;
+  }
   if (command === 'pair') {
     await ensureAutostart();
     let bridge = await service.status();
@@ -147,7 +163,8 @@ async function main() {
       bridge = await service.status();
     }
     if (!bridge.running) throw new Error('Code Relax 工作站服务未能启动。');
-    const result = await selfRelay('relay-pair', stateRoot);
+    if (longPair) await selfRelay('relay-start', stateRoot);
+    const result = await selfRelay(longPair ? 'invite-create' : 'relay-pair', stateRoot, longPair ? { expires: inviteExpires } : undefined);
     if (!json && result.qrPath) {
       const viewer = spawn('explorer.exe', [result.qrPath], { detached: true, stdio: 'ignore', windowsHide: true });
       viewer.unref();

package/dist/bin/self-relay-server.mjs

@@ -14,6 +14,7 @@ if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new Error('Inv
 const stateFile = process.env.RELAY_STATE_FILE;
 const mysqlConfigFile = process.env.RELAY_MYSQL_CONFIG_FILE;
 const accountConfigFile = process.env.RELAY_ACCOUNT_CONFIG_FILE;
+const longPairingFile = process.env.RELAY_LONG_PAIRING_FILE || '/etc/codex-relay/long-pairing.json';
 if (!stateFile && !mysqlConfigFile) throw new Error('RELAY_STATE_FILE or RELAY_MYSQL_CONFIG_FILE is required');
 const debugAllowlistFile = process.env.RELAY_DEBUG_ALLOWLIST_FILE || '/etc/codex-relay/debug-allowlist.json';
 const adminStateFile = process.env.RELAY_ADMIN_STATE_FILE || '/var/lib/codex-relay/admin.json';
@@ -53,6 +54,7 @@ if (revokeIndex >= 0) {
   console.log('Computer and phone authorization revoked'); process.exit(0);
 }
 const relay = await startSelfRelay({ port, hostKey, stateFile, mysqlConfigFile, accountConfigFile, debugAllowlistFile, adminStateFile, maxRelaySessions,
+  longPairingFile,
   usageDiagnosticKeyFile: process.env.RELAY_USAGE_DIAGNOSTIC_KEY_FILE,
   publicRelayUrl: process.env.RELAY_PUBLIC_URL || serviceEndpoints.relayUrl, appDownloadUrl: process.env.RELAY_APP_DOWNLOAD_URL || serviceEndpoints.installUrl,
   log: entry => console.log(JSON.stringify({ time: new Date().toISOString(), ...entry })) });

package/dist/src/self-relay/connector.mjs

@@ -243,7 +243,7 @@ export function connectBridgeRelay({ relayUrl, hostKey, bridgeUrl, bridgeToken,
           resolve(message); return;
         }
         if (!registered) throw new Error('Relay not registered');
-        if (message.type === 'pair-code' || message.type === 'revoked' || message.type === 'status') {
+        if (['pair-code', 'revoked', 'status', 'invite-create', 'invite-list', 'invite-revoke'].includes(message.type)) {
           if (operation && message.commandId === operation.id && message.type === operation.responseType) {
             clearTimeout(operation.timer); const pending = operation; operation = undefined;
             message.error ? pending.reject(new Error(message.error)) : pending.resolve(message);

package/dist/src/self-relay/email-accounts.mjs

@@ -27,6 +27,12 @@ export function openEmailAccounts(pool, configFile, providerOverride) {
   const provider = providerOverride || tencentAccountProvider(config);
   const codeHash = (email, code) => createHmac('sha256', config.codePepper).update(`${email}\0${code}`).digest('hex');
   const scopeHash = value => createHmac('sha256', config.codePepper).update(value).digest('hex');
+  const review = config.reviewLogin?.enabled === true ? config.reviewLogin : null;
+  if (review && (review.email !== normalizeEmail(review.email) || !/^[a-f0-9]{64}$/.test(review.codeHash || '')
+    || !Number.isFinite(Date.parse(review.startsAt)) || !Number.isFinite(Date.parse(review.expiresAt))
+    || Date.parse(review.startsAt) >= Date.parse(review.expiresAt))) {
+    throw new Error('Invalid review login configuration');
+  }
 
   async function requestCode({ email: rawEmail, ticket, randstr }, ip) {
     const email = normalizeEmail(rawEmail);
@@ -78,17 +84,33 @@ export function openEmailAccounts(pool, configFile, providerOverride) {
     const db = await pool.getConnection();
     try {
       await db.beginTransaction();
-      const [challenges] = await db.execute('SELECT code_hash,attempts,expires_at FROM email_login_challenges WHERE email=? FOR UPDATE', [email]);
-      const challenge = challenges[0];
-      if (!challenge || new Date(`${challenge.expires_at.replace(' ', 'T')}Z`).getTime() <= Date.now()) throw error(401, 'Code expired or incorrect');
-      const supplied = Buffer.from(codeHash(email, code), 'hex');
-      if (!timingSafeEqual(supplied, Buffer.from(challenge.code_hash, 'hex'))) {
-        if (challenge.attempts >= 4) await db.execute('DELETE FROM email_login_challenges WHERE email=?', [email]);
-        else await db.execute('UPDATE email_login_challenges SET attempts=attempts+1 WHERE email=?', [email]);
+      const reviewActive = review?.email === email && Date.now() >= Date.parse(review.startsAt)
+        && Date.now() < Date.parse(review.expiresAt);
+      let reviewLogin = false;
+      if (reviewActive) {
+        // Reuse the persisted rate-limit table so restarts cannot reset guesses.
+        const windowStart = sqlTime(new Date(Math.floor(Date.now() / 3600000) * 3600000).toISOString()).slice(0, 19);
+        const key = scopeHash(`review-login:${email}`);
+        await db.execute('INSERT INTO email_send_limits (scope_hash,window_start,request_count) VALUES (?,?,1) ON DUPLICATE KEY UPDATE request_count=request_count+1', [key, windowStart]);
+        const [attempts] = await db.execute('SELECT request_count FROM email_send_limits WHERE scope_hash=? AND window_start=? FOR UPDATE', [key, windowStart]);
         await db.commit();
-        throw error(401, 'Code expired or incorrect');
+        if (attempts[0].request_count > 10) throw error(429, 'Too many login attempts');
+        await db.beginTransaction();
+        reviewLogin = timingSafeEqual(Buffer.from(codeHash(email, code), 'hex'), Buffer.from(review.codeHash, 'hex'));
+      }
+      if (!reviewLogin) {
+        const [challenges] = await db.execute('SELECT code_hash,attempts,expires_at FROM email_login_challenges WHERE email=? FOR UPDATE', [email]);
+        const challenge = challenges[0];
+        if (!challenge || new Date(`${challenge.expires_at.replace(' ', 'T')}Z`).getTime() <= Date.now()) throw error(401, 'Code expired or incorrect');
+        const supplied = Buffer.from(codeHash(email, code), 'hex');
+        if (!timingSafeEqual(supplied, Buffer.from(challenge.code_hash, 'hex'))) {
+          if (challenge.attempts >= 4) await db.execute('DELETE FROM email_login_challenges WHERE email=?', [email]);
+          else await db.execute('UPDATE email_login_challenges SET attempts=attempts+1 WHERE email=?', [email]);
+          await db.commit();
+          throw error(401, 'Code expired or incorrect');
       }
       await db.execute('DELETE FROM email_login_challenges WHERE email=?', [email]);
+      }
       const [identities] = await db.execute(`SELECT u.id,u.status FROM user_login_identities i
         JOIN users u ON u.id=i.user_id WHERE i.kind='email' AND i.normalized_value=?`, [email]);
       let userId = identities[0]?.id;
@@ -101,10 +123,13 @@ export function openEmailAccounts(pool, configFile, providerOverride) {
           VALUES (?,'email',?,UTC_TIMESTAMP(3),UTC_TIMESTAMP(3))`, [userId, email]);
       }
       const token = randomBytes(32).toString('base64url');
+      const expiresAt = Math.min(Date.now() + 30 * 86400000, reviewLogin ? Date.parse(review.expiresAt) : Infinity);
+      if (expiresAt <= Date.now()) throw error(401, 'Code expired or incorrect');
       await db.execute(`INSERT INTO user_sessions (token_hash,user_id,created_at,expires_at)
-        VALUES (?,?,UTC_TIMESTAMP(3),UTC_TIMESTAMP(3) + INTERVAL 30 DAY)`, [tokenHash(token), userId]);
+        VALUES (?,?,UTC_TIMESTAMP(3),?)`, [tokenHash(token), userId, sqlTime(new Date(expiresAt).toISOString())]);
       await db.commit();
-      return { token, user: { id: userId, email }, expiresInSeconds: 30 * 86400 };
+      if (reviewLogin) console.info(JSON.stringify({ event: 'review-login', userId, expiresAt: new Date(expiresAt).toISOString() }));
+      return { token, user: { id: userId, email }, expiresInSeconds: Math.max(0, Math.floor((expiresAt - Date.now()) / 1000)) };
     } catch (failure) { await db.rollback(); throw failure; }
     finally { db.release(); }
   }

package/dist/src/self-relay/lifecycle.mjs

@@ -33,14 +33,14 @@ async function loadConfig(stateRoot) {
       (pairing.protocol === 'http:' && pairing.hostname !== '127.0.0.1')) throw new Error('self-relay-config.json 的 pairingUrl 必须是 HTTPS /pair 地址。');
   return { ...config, url: resolved, pairingUrl: pairing.href };
 }
-export async function selfRelay(command, stateRoot) {
+export async function selfRelay(command, stateRoot, details) {
   const session = readRecord(path.join(stateRoot, 'bridge-session.json'));
   if (!session) {
     if (command === 'relay-status') return { running: false, displayText: '桌面服务未运行。' };
     if (command === 'relay-stop') return { stopped: true, displayText: '中继连接已停止。' };
     throw new Error('桌面服务尚未运行，请先执行 relax start。');
   }
-  return controlRequest(session, 'POST', command);
+  return controlRequest(session, 'POST', command, details);
 }
 
 async function createRelayRuntime(stateRoot) {
@@ -186,6 +186,22 @@ async function createRelayRuntime(stateRoot) {
     await connector.command('revoke'); paired = false; clientCount = 0; attachedCount = 0; qrPath = undefined; expiresAt = 0;
     return { ...status(), displayText: '全部移动设备授权已撤销；重新添加请调用 relax pair --json。' };
   }
+  async function invite(command, details) {
+    if (!online || closing) throw new Error('中继尚未连接，请先执行 relax start。');
+    const result = await connector.command(command, command === 'invite-create' ? { expires: details.expires } : command === 'invite-revoke' ? { id: details.id } : {});
+    if (command === 'invite-create') {
+      const link = new URL(config.pairingUrl);
+      link.searchParams.set('invite', result.code);
+      const inviteQrPath = path.join(stateRoot, `self-relay-long-qr-${result.id}.png`);
+      try { await QRCode.toFile(inviteQrPath, link.href, { width: 640, margin: 3 }); }
+      catch (error) { throw new Error(`二维码保存失败：${error.message}。邀请 ID：${result.id}；请执行 relax pair-revoke ${result.id} 废止。`); }
+      return { invitationId: result.id, deviceId: result.room, expiresAt: new Date(result.expires).toISOString(), qrPath: inviteQrPath,
+        displayText: `长期配对邀请已创建。邀请 ID：${result.id}\n截止：${new Date(result.expires).toISOString()}` };
+    }
+    if (command === 'invite-list') return { invitations: result.invitations,
+      displayText: result.invitations.length ? result.invitations.map(item => `${item.id}  ${new Date(item.expires).toISOString()}${Date.now() >= item.expires ? '（已过期）' : ''}`).join('\n') : '本工作站没有长期配对邀请。' };
+    return { invitationId: result.id, revoked: result.revoked, displayText: '长期邀请已废止；已配对手机的独立授权保持不变。' };
+  }
   async function refreshLan() {
     if (!online || closing) throw new Error('中继尚未连接，未更新局域网候选。');
     await refreshHealth();
@@ -201,14 +217,14 @@ async function createRelayRuntime(stateRoot) {
     }
     return status();
   };
-  try { await connect(); return { status, inspect, pair, revoke, refreshLan, shutdown }; }
+  try { await connect(); return { status, inspect, pair, revoke, invite, refreshLan, shutdown }; }
   catch (error) { await shutdown(); throw error; }
 }
 
 export function createRelayManager(stateRoot) {
   let current;
   let operation = Promise.resolve();
-  const run = command => {
+  const run = (command, details = {}) => {
     const next = operation.then(async () => {
       if (command === 'relay-status') return current ? current.inspect() : { running: false, displayText: '中继连接未运行。' };
       if (command === 'relay-stop') {
@@ -216,10 +232,12 @@ export function createRelayManager(stateRoot) {
         return { stopped: true, displayText: '中继连接已停止；桌面服务和 Codex 内核保持运行。' };
       }
       if (!current) {
+        if (command.startsWith('invite-')) throw new Error('请先执行 relax start 连接中继。');
         if (command === 'relay-revoke') throw new Error('请先启动中继连接，再撤销移动端授权。');
         current = await createRelayRuntime(stateRoot);
         return command === 'relay-pair' && current.status().relayConnected ? current.pair() : current.status();
       }
+      if (command.startsWith('invite-')) return current.invite(command, details);
       if (command === 'relay-revoke') return current.revoke();
       if (command === 'relay-pair' || (current.status().relayConnected && !current.status().paired && !current.status().qrPath)) return current.pair();
       if (command === 'relay-start' && current.status().relayConnected) return current.refreshLan();

package/dist/src/self-relay/long-pairing.mjs

@@ -0,0 +1,40 @@
+import fs from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { validId } from './device-store.mjs';
+import { digest, matches, secret } from './wire.mjs';
+
+// Operator-owned file, separate from device state. Only hashes are retained here.
+export function longPairing(file) {
+  function read() {
+    if (!file || !fs.existsSync(file)) return [];
+    const data = JSON.parse(fs.readFileSync(file, 'utf8'));
+    if (data.version !== 1 || !Array.isArray(data.invitations) || data.invitations.some(item =>
+      !validId(item.id) || !validId(item.room) || !/^[a-f0-9]{64}$/.test(item.hash) ||
+      !Number.isSafeInteger(item.expires))) throw new Error('Invalid long pairing invitations');
+    return data.invitations;
+  }
+  function write(invitations) {
+    if (!file) throw new Error('Long pairing file is not configured');
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    try {
+      fs.writeFileSync(temporary, JSON.stringify({ version: 1, invitations }), { mode: 0o600, flag: 'wx' });
+      fs.renameSync(temporary, file);
+    } finally { fs.rmSync(temporary, { force: true }); }
+  }
+  return {
+    list: () => read().map(({ hash, ...item }) => item),
+    find: code => read().find(item => Date.now() < item.expires && matches(code, item.hash)),
+    create(room, expires) {
+      if (!validId(room) || !Number.isSafeInteger(expires) || expires <= Date.now()) throw new Error('Invalid invitation room or expiry');
+      const invitations = read(), code = secret();
+      const item = { id: randomUUID(), room, expires, hash: digest(code) };
+      write([...invitations, item]);
+      return { id: item.id, room, expires, code };
+    },
+    revoke(id) {
+      const invitations = read();
+      if (!invitations.some(item => item.id === id)) throw new Error('Invitation not found');
+      write(invitations.filter(item => item.id !== id));
+    },
+  };
+}

package/dist/src/self-relay/server.mjs

@@ -1,4 +1,5 @@
 import { privacyPage } from './privacy-page.mjs';
+import { longPairing } from './long-pairing.mjs';
 import http from 'node:http';
 import fs from 'node:fs';
 import { isIP } from 'node:net';
@@ -20,7 +21,13 @@ import { relayDiagnostics } from './diagnostics.mjs';
 export async function startSelfRelay({ port = 0, hostKey = secret(), pairingTtlMs = 120000,
   maxConnections = 128, maxClientsPerHost = 16, maxPayload = 8 * 1024 * 1024, stateFile,
   maxRelaySessions = 8, adminStateFile, mysqlConfigFile, accountConfigFile, usageDiagnosticKeyFile,
-  publicRelayUrl = '', appDownloadUrl = '', debugAllowlistFile, log = () => {} } = {}) {
+  publicRelayUrl = '', appDownloadUrl = '', debugAllowlistFile, longPairingFile, log = () => {} } = {}) {
+  const longInvitations = longPairing(longPairingFile);
+  longInvitations.list();
+  function longInvitation(code) {
+    try { return longInvitations.find(code); }
+    catch (error) { log({ event: 'long-pairing-error', message: error.message }); return undefined; }
+  }
   if (!validSecret(hostKey)) throw new Error('Invalid host credential');
   if (!Number.isSafeInteger(maxClientsPerHost) || maxClientsPerHost < 1 || maxClientsPerHost > 64) throw new Error('Invalid mobile device limit');
   if (!Number.isSafeInteger(maxRelaySessions) || maxRelaySessions < 1 || maxRelaySessions > 256) throw new Error('Invalid relay session limit');
@@ -93,7 +100,10 @@ export async function startSelfRelay({ port = 0, hostKey = secret(), pairingTtlM
   }
   function findInvitation(code) {
     if (!validSecret(code)) return undefined;
-    return [...rooms.values()].find(room => room.status === 'active' && room.pairingHash && Date.now() < room.expires && matches(code, room.pairingHash));
+    const room = [...rooms.values()].find(room => room.status === 'active' && room.pairingHash && Date.now() < room.expires && matches(code, room.pairingHash));
+    if (room) return { room, expires: room.expires };
+    const invite = longInvitation(code), target = invite && rooms.get(invite.room);
+    return target?.status === 'active' ? { room: target, expires: invite.expires } : undefined;
   }
   const server = http.createServer((request, response) => {
     const target = new URL(request.url || '/', `http://${request.headers.host || 'localhost'}`);
@@ -121,19 +131,19 @@ export async function startSelfRelay({ port = 0, hostKey = secret(), pairingTtlM
       response.writeHead(404, { 'Cache-Control': 'no-store' }); response.end(); return;
     }
     const code = target.searchParams.get('invite') || '';
-    const room = findInvitation(code);
-    if (!room) {
+    const invitation = findInvitation(code);
+    if (!invitation) {
       const json = target.pathname === '/pair/resolve' || /application\/json/i.test(request.headers.accept || '');
       const body = json ? JSON.stringify({ error: '配对邀请已过期或已使用' }) : pairingPage({ expired: true });
       response.writeHead(410, pairingHeaders(json ? 'application/json; charset=utf-8' : 'text/html; charset=utf-8', body)); response.end(body); return;
     }
     if (target.pathname === '/pair/resolve' || /application\/json/i.test(request.headers.accept || '')) {
-      const body = JSON.stringify({ version: 6, relayUrl: relayUrl(request), room: room.id, expires: room.expires });
+      const body = JSON.stringify({ version: 6, relayUrl: relayUrl(request), room: invitation.room.id, expires: invitation.expires });
       response.writeHead(200, pairingHeaders('application/json; charset=utf-8', body)); response.end(body); return;
     }
     const secure = request.socket.encrypted || request.headers['x-forwarded-proto'] === 'https';
     const current = new URL(target.pathname + target.search, `${secure ? 'https' : 'http'}://${request.headers.host || new URL(listenUrl).host}`);
-    const body = pairingPage({ deepLink: `codex-remote://pair?url=${encodeURIComponent(current.href)}`, expires: room.expires, appDownloadUrl });
+    const body = pairingPage({ deepLink: `codex-remote://pair?url=${encodeURIComponent(current.href)}`, expires: invitation.expires, appDownloadUrl });
     response.writeHead(200, pairingHeaders('text/html; charset=utf-8', body)); response.end(body);
   });
   function adminReply(response, status, body, type = 'application/json; charset=utf-8') {
@@ -541,7 +551,10 @@ export async function startSelfRelay({ port = 0, hostKey = secret(), pairingTtlM
           room = rooms.get(message.room);
           if (!room || room.status !== 'active') return fail();
           let credential;
-          if (message.type === 'pair' && !room.pairingInProgress && room.pairingHash && Date.now() < room.expires && matches(message.code, room.pairingHash)) {
+          const longInvite = message.type === 'pair' ? longInvitation(message.code) : undefined;
+          const reusableInvite = longInvite?.room === room.id;
+          if (message.type === 'pair' && !room.pairingInProgress && (reusableInvite ||
+              (room.pairingHash && Date.now() < room.expires && matches(message.code, room.pairingHash)))) {
             if (!room.host) return fail(4410, 'Computer offline; authorization retained');
             credential = message.credential || secret();
             clientId = message.clientId || (!room.durable ? randomUUID() : undefined);
@@ -553,7 +566,7 @@ export async function startSelfRelay({ port = 0, hostKey = secret(), pairingTtlM
             room.pairingInProgress = true;
             try {
               await commit(room, current => ({ clients: [...current.clients.filter(item => item.id !== clientId), client], revision: current.revision + 1 }));
-              room.pairingHash = undefined;
+              if (!reusableInvite) room.pairingHash = undefined;
             } finally { room.pairingInProgress = false; }
             if (!room.host) return fail(4410, 'Computer offline; authorization retained');
             send(room.host, { type: 'authorization-changed', clients: room.clients, revision: room.revision });
@@ -695,6 +708,21 @@ export async function startSelfRelay({ port = 0, hostKey = secret(), pairingTtlM
           if (message.type === 'pair-code') {
             send(ws, { type: 'pair-code', commandId: message.commandId, room: room.id, ...invitation(room) }); return;
           }
+          if (['invite-create', 'invite-list', 'invite-revoke'].includes(message.type)) {
+            try {
+              if (!room.durable) throw new Error('长期邀请需要持久工作站身份');
+              let result;
+              if (message.type === 'invite-create') result = longInvitations.create(room.id, message.expires);
+              else if (message.type === 'invite-list') result = { invitations: longInvitations.list().filter(item => item.room === room.id) };
+              else {
+                if (!longInvitations.list().some(item => item.id === message.id && item.room === room.id)) throw new Error('未找到本工作站的邀请');
+                longInvitations.revoke(message.id);
+                result = { id: message.id, revoked: true };
+              }
+              send(ws, { type: message.type, commandId: message.commandId, ...result });
+            } catch (error) { send(ws, { type: message.type, commandId: message.commandId, error: error.message }); }
+            return;
+          }
           if (message.type === 'revoke') {
             await commit(room, current => ({ clients: [], revision: current.revision + 1 }));
             room.pairingHash = undefined;

package/dist/src/server.mjs

@@ -819,6 +819,9 @@ server.listen(options.port, options.lan ? '0.0.0.0' : '127.0.0.1', async () => {
           'relay-stop': () => relayManager.run('relay-stop'),
           'relay-pair': () => relayManager.run('relay-pair'),
           'relay-revoke': () => relayManager.run('relay-revoke'),
+          'invite-create': details => relayManager.run('invite-create', details),
+          'invite-list': () => relayManager.run('invite-list'),
+          'invite-revoke': details => relayManager.run('invite-revoke', details),
           'restart-managed-app-server': () => {
             const state = managedAppServer.snapshot();
             return state.launcherRestartRequired ? managedAppServer.restart(crypto.randomUUID()) : state;

package/dist/src/service-control.mjs

@@ -22,7 +22,17 @@ export async function openControl({ instanceId, secret, shutdown, status = () =>
     response.setHeader('Content-Type', 'application/json');
     response.setHeader('Connection', 'close');
     if (action) {
-      Promise.resolve().then(() => actions[action]()).then(result => {
+      Promise.resolve().then(async () => {
+        let body = '';
+        request.setEncoding('utf8');
+        for await (const chunk of request) {
+          body += chunk;
+          if (Buffer.byteLength(body) > 4096) throw new Error('管理请求过大');
+        }
+        const details = body ? JSON.parse(body) : {};
+        if (!details || typeof details !== 'object' || Array.isArray(details)) throw new Error('无效管理请求');
+        return actions[action](details);
+      }).then(result => {
         response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
       }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
       return;
@@ -44,7 +54,7 @@ export async function openControl({ instanceId, secret, shutdown, status = () =>
   }) };
 }
 
-export function controlRequest(session, method = 'GET', action = '') {
+export function controlRequest(session, method = 'GET', action = '', details) {
   return new Promise((resolve, reject) => {
     const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
       path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
@@ -67,6 +77,6 @@ export function controlRequest(session, method = 'GET', action = '') {
     });
     request.on('timeout', () => request.destroy(new Error('桌面服务管理通道响应超时。')));
     request.on('error', reject);
-    request.end();
+    request.end(details === undefined ? undefined : JSON.stringify(details));
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@walkhi/code-relax",
-  "version": "0.1.0-beta.28",
+  "version": "0.1.0-beta.29",
   "license": "UNLICENSED",
   "type": "module",
   "scripts": {