@walkhi/code-relax 0.1.0-beta.29 → 0.1.0-beta.30

package/dist/src/platform/macos/retained-runtime.mjs

@@ -0,0 +1,127 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import { readRecord, writeRecord } from '../../service-lifecycle.mjs';
+
+const owner = 'code-relax-macos-runtime';
+const manifestName = '.code-relax-runtime.json';
+function filesAt(root, relative = '') {
+  const result = [];
+  if (fs.lstatSync(root).isSymbolicLink()) throw new Error('Codex 运行时目录不能是符号链接。');
+  for (const entry of fs.readdirSync(path.join(root, relative), { withFileTypes: true })) {
+    const name = path.join(relative, entry.name);
+    if (entry.isDirectory()) result.push(...filesAt(root, name));
+    else if (entry.isFile()) result.push(name);
+    else throw new Error(`Codex 运行时包含不支持的链接或文件：${name}`);
+  }
+  return result.sort();
+}
+export function packageRoot(executable) {
+  const bundleSuffix = path.join('CodexCLI.app', 'Contents', 'MacOS', 'codex');
+  const bundled = executable.endsWith(path.sep + bundleSuffix);
+  const root = bundled ? path.resolve(executable, '../../../..') : path.dirname(path.dirname(executable));
+  const metadata = readRecord(path.join(root, 'codex-package.json'));
+  if ((!bundled && path.basename(path.dirname(executable)) !== 'bin') || path.basename(executable) !== 'codex'
+      || metadata?.layoutVersion !== 1 || metadata.entrypoint !== 'bin/codex' || metadata.variant !== 'codex'
+      || !['aarch64-apple-darwin', 'x86_64-apple-darwin'].includes(metadata.target)
+      || metadata.resourcesDir !== 'codex-resources' || metadata.pathDir !== 'codex-path')
+    throw new Error('需要完整的官方 Mac Codex 运行时包，不能仅复制 codex 单个文件。');
+  for (const file of ['bin/codex', 'bin/codex-code-mode-host', 'codex-path/rg']) {
+    if (!fs.statSync(path.join(root, file)).isFile()) throw new Error(`Codex 运行时缺少 ${file}`);
+  }
+  if (!fs.statSync(path.join(root, 'codex-resources')).isDirectory()) throw new Error('Codex 运行时缺少资源目录。');
+  return root;
+}
+export function runtimeFingerprint(executable) {
+  const root = packageRoot(executable);
+  return JSON.stringify(filesAt(root).filter(name => name !== manifestName).map(name => {
+    const stat = fs.statSync(path.join(root, name));
+    return [name, stat.size, stat.mtimeMs, stat.ctimeMs, stat.ino, stat.mode & 0o777];
+  }));
+}
+async function digestFiles(root) {
+  const records = [];
+  for (const name of filesAt(root).filter(name => name !== manifestName)) {
+    const file = path.join(root, name), hash = createHash('sha256');
+    const before = fs.statSync(file);
+    for await (const chunk of fs.createReadStream(file)) hash.update(chunk);
+    const after = fs.statSync(file);
+    if (before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs || before.ino !== after.ino)
+      throw new Error('Codex 更新正在替换文件，请待安装完成后重试。');
+    records.push({ name, size: after.size, mode: after.mode & 0o777, sha256: hash.digest('hex') });
+  }
+  return records;
+}
+const treeHash = files => createHash('sha256').update(JSON.stringify(files)).digest('hex');
+function removeFiles(root, names) {
+  for (const name of names) {
+    fs.unlinkSync(path.join(root, name));
+  }
+  // Empty package resource directories must also be removed, without recursive deletion.
+  const collect = directory => {
+    for (const entry of fs.readdirSync(directory, { withFileTypes: true })) {
+      if (!entry.isDirectory()) throw new Error('运行时清理期间出现未知文件，保留目录。');
+      const child = path.join(directory, entry.name); collect(child); fs.rmdirSync(child);
+    }
+  };
+  collect(root);
+  fs.rmdirSync(root);
+}
+
+export async function retainRuntime(executable, stateRoot, version) {
+  const source = packageRoot(executable);
+  const sourceFingerprint = runtimeFingerprint(executable);
+  const files = await digestFiles(source);
+  if (sourceFingerprint !== runtimeFingerprint(executable)) throw new Error('Codex 包在核对期间发生变化，未切换内核。');
+  const digest = treeHash(files);
+  const parent = path.join(stateRoot, 'macos-runtimes'), target = path.join(parent, digest);
+  const retained = path.join(target, path.relative(source, executable));
+  if (fs.existsSync(target)) {
+    const manifest = readRecord(path.join(target, manifestName));
+    if (manifest?.owner !== owner || manifest.digest !== digest || treeHash(await digestFiles(target)) !== digest)
+      throw new Error('已保留的 Mac 内核内容不完整，未覆盖运行中的文件。');
+    return { executable: retained, sourceExecutable: executable, sourceFingerprint };
+  }
+  fs.mkdirSync(parent, { recursive: true, mode: 0o700 });
+  const staging = path.join(parent, `.${randomUUID()}.tmp`);
+  fs.mkdirSync(staging, { mode: 0o700 });
+  const created = [];
+  try {
+    for (const file of files) {
+      const destination = path.join(staging, file.name);
+      fs.mkdirSync(path.dirname(destination), { recursive: true, mode: 0o700 });
+      // APFS can clone blocks, but each snapshot has independent file identity.
+      // A hard link would let an in-place npm update modify the running kernel.
+      fs.copyFileSync(path.join(source, file.name), destination, fs.constants.COPYFILE_EXCL | fs.constants.COPYFILE_FICLONE);
+      created.push(file.name);
+      fs.chmodSync(destination, file.mode);
+    }
+    fs.mkdirSync(path.join(staging, 'codex-resources'), { recursive: true, mode: 0o700 });
+    if (treeHash(await digestFiles(staging)) !== digest || sourceFingerprint !== runtimeFingerprint(executable))
+      throw new Error('复制期间 Codex 包发生变化，未使用混合版本。');
+    writeRecord(path.join(staging, manifestName), { owner, digest, version, files });
+    created.push(manifestName);
+    fs.renameSync(staging, target);
+    return { executable: retained, sourceExecutable: executable, sourceFingerprint };
+  } catch (error) {
+    if (fs.existsSync(staging)) removeFiles(staging, created);
+    throw error;
+  }
+}
+
+export async function pruneRetainedDesktopRuntimes(stateRoot, keepExecutable) {
+  const parent = path.join(stateRoot, 'macos-runtimes');
+  if (!fs.existsSync(parent)) return;
+  const keep = packageRoot(path.resolve(keepExecutable));
+  // An installed (non-retained) process is not authority to clean this store.
+  if (path.dirname(keep) !== path.resolve(parent) || !/^[a-f0-9]{64}$/.test(path.basename(keep))) return;
+  for (const entry of fs.readdirSync(parent, { withFileTypes: true })) {
+    const directory = path.join(parent, entry.name);
+    if (!entry.isDirectory() || !/^[a-f0-9]{64}$/.test(entry.name) || directory === keep) continue;
+    const manifest = readRecord(path.join(directory, manifestName));
+    if (manifest?.owner !== owner || manifest.digest !== entry.name || !Array.isArray(manifest.files)) continue;
+    const actual = await digestFiles(directory);
+    if (treeHash(actual) !== entry.name || JSON.stringify(actual) !== JSON.stringify(manifest.files)) continue;
+    removeFiles(directory, [...actual.map(file => file.name), manifestName]);
+  }
+}

package/dist/src/platform/macos/service-host.mjs

@@ -0,0 +1,18 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { runtimePaths } from '../runtime-paths.mjs';
+import { readRecord } from '../../service-lifecycle.mjs';
+import { lanNetworks } from './network-info.mjs';
+import { desktopHost } from './desktop-host.mjs';
+
+export { lanNetworks };
+export const lanAddress = async () => (await lanNetworks())[0]?.address || '';
+export const sharedServiceUrl = () => desktopHost.sharedServiceUrl();
+export async function bridgeEnvironment() {
+  const environment = { ...process.env };
+  const installed = readRecord(path.join(runtimePaths().serviceRoot, 'installation.json'));
+  if (!installed?.nodeExecutable || !fs.existsSync(installed.nodeExecutable)) throw new Error('安装时选用的 Node 不存在，请重新执行 relax setup。');
+  environment.CODEX_MCP_NODE_PATH = installed.nodeExecutable;
+  delete environment.CODEX_APP_TOOLS_PIPE_PATH;
+  return { executable: installed.nodeExecutable, environment };
+}

package/dist/src/platform/macos/system.mjs

@@ -0,0 +1,29 @@
+import fs from 'node:fs';
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+export const hostBinary = fileURLToPath(new URL('../../../native/macos-host/CodeRelaxHost', import.meta.url));
+export function systemRequest(request) {
+  if (process.platform !== 'darwin') return Promise.reject(new Error('需要 macOS 工作站。'));
+  if (!fs.existsSync(hostBinary)) return Promise.reject(new Error('缺少 Mac 系统适配组件，请先在 Mac 上执行 npm run build。'));
+  return new Promise((resolve, reject) => {
+    const child = spawn(hostBinary, [], { stdio: ['pipe', 'pipe', 'pipe'] });
+    let output = '', diagnostic = '', failure;
+    const timer = setTimeout(() => { failure = new Error('macOS 系统操作超时；请检查钥匙串是否已解锁。'); child.kill(); }, 60000);
+    child.stdout.setEncoding('utf8'); child.stderr.setEncoding('utf8');
+    child.stdout.on('data', value => {
+      output += value;
+      if (Buffer.byteLength(output) > 2 * 1024 * 1024) { failure = new Error('macOS 系统响应过大。'); child.kill(); }
+    });
+    child.stderr.on('data', value => { diagnostic = (diagnostic + value).slice(0, 1024); });
+    child.stdin.on('error', () => {});
+    child.once('error', () => { clearTimeout(timer); reject(new Error('无法启动 macOS 系统适配组件。')); });
+    child.once('close', code => {
+      clearTimeout(timer);
+      if (failure || code !== 0) return reject(failure || new Error(`macOS 系统操作失败：${diagnostic.trim() || code}`));
+      try { resolve(JSON.parse(output)); }
+      catch { reject(new Error('macOS 系统组件返回无效结果。')); }
+    });
+    child.stdin.end(JSON.stringify(request));
+  });
+}

package/dist/src/platform/macos/user-environment.mjs

@@ -0,0 +1,7 @@
+// Launch Services receives these settings for one new application instance.
+// Do not mutate shell profiles or the login session's global environment.
+export async function configureManagedEnvironment() {
+  return { configured: true, changed: false, owned: false, persistent: false,
+    scope: 'application-launch', value: 'ws://127.0.0.1:45839' };
+}
+export async function clearManagedEnvironment() { return { removed: false, preserved: false, reason: 'application-launch-only' }; }

package/dist/src/platform/native-package.mjs

@@ -0,0 +1,46 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createRequire } from 'node:module';
+
+export const nativeTargets = Object.freeze({
+  'win32-x64': { packageName: '@walkhi/code-relax-native-win32-x64', file: 'desktop-helper/CodeRelaxDesktop.exe' },
+  'darwin-arm64': { packageName: '@walkhi/code-relax-native-darwin-arm64', file: 'macos-host/CodeRelaxHost' },
+  'darwin-x64': { packageName: '@walkhi/code-relax-native-darwin-x64', file: 'macos-host/CodeRelaxHost' },
+});
+
+const readJson = file => JSON.parse(fs.readFileSync(file, 'utf8').replace(/^\uFEFF/, ''));
+
+// Native dependencies are selected by npm's os/cpu filters. Materialize only
+// this platform's helper before setup touches the installed workstation.
+export function prepareNativePackage(packageRoot, { platform = process.platform, arch = process.arch } = {}) {
+  const target = nativeTargets[`${platform}-${arch}`];
+  if (!target) throw new Error(`尚不支持此工作站平台：${platform}-${arch}。`);
+  const marker = path.join(packageRoot, 'dist/build-platform.json');
+  const build = readJson(marker);
+  const destination = path.join(packageRoot, 'dist/native', target.file);
+  if (build.platform === platform && build.arch === arch) {
+    if (!fs.statSync(destination).isFile()) throw new Error('安装包缺少当前平台原生组件，请重新安装。');
+    return { platform, arch, materialized: false };
+  }
+  const pkg = readJson(path.join(packageRoot, 'package.json'));
+  if (build.layout !== 'npm-platform-packages' || build.version !== pkg.version)
+    throw new Error('安装包构建与当前系统、架构或版本不匹配，请重新安装。');
+  let manifest;
+  try { manifest = createRequire(path.join(packageRoot, 'package.json')).resolve(`${target.packageName}/package.json`); }
+  catch (error) {
+    if (error.code !== 'MODULE_NOT_FOUND') throw error;
+    throw new Error(`缺少 ${target.packageName}@${pkg.version}；请勿省略 optional 依赖，使用 npm install -g @walkhi/code-relax@${pkg.version} --include=optional 重新安装。`);
+  }
+  const native = readJson(manifest);
+  if (native.name !== target.packageName || native.version !== pkg.version
+      || native.os?.length !== 1 || native.os[0] !== platform || native.cpu?.length !== 1 || native.cpu[0] !== arch)
+    throw new Error('原生组件包的系统、架构或版本不匹配，未更新工作站。');
+  const source = path.join(path.dirname(manifest), 'native', target.file);
+  if (!fs.statSync(source).isFile()) throw new Error('平台包缺少原生组件，未更新工作站。');
+  fs.mkdirSync(path.dirname(destination), { recursive: true });
+  fs.copyFileSync(source, destination);
+  if (platform === 'darwin') fs.chmodSync(destination, 0o755);
+  // Only commit the selected platform after the component has been copied.
+  fs.writeFileSync(marker, JSON.stringify({ platform, arch, version: pkg.version }));
+  return { platform, arch, packageName: native.name, materialized: true };
+}

package/dist/src/platform/network-info.mjs

@@ -0,0 +1,3 @@
+import { platformModule } from './select.mjs';
+const adapter = await import(platformModule('network-info'));
+export const { lanNetworks } = adapter;

package/dist/src/platform/path-identity.mjs

@@ -0,0 +1,5 @@
+import path from 'node:path';
+export function executableKey(file, platform = process.platform) {
+  const resolved = path.resolve(file);
+  return platform === 'win32' ? resolved.toLowerCase() : resolved;
+}

package/dist/src/platform/posix/runtime-paths.mjs

@@ -0,0 +1,25 @@
+import os from 'node:os';
+import path from 'node:path';
+
+// These are user-owned locations; resolving paths does not create or migrate data.
+export function runtimePaths(environment = process.env, home = os.homedir(), platform = process.platform) {
+  if (!['darwin', 'linux'].includes(platform)) throw new Error(`Unsupported POSIX host: ${platform}`);
+  const join = path.posix.join;
+  const xdgRoot = (name, fallback) => path.posix.isAbsolute(environment[name] || '')
+    ? environment[name] : join(home, fallback);
+  const dataRoot = platform === 'darwin'
+    ? join(home, 'Library', 'Application Support', 'CodexRemote')
+    : join(xdgRoot('XDG_DATA_HOME', '.local/share'), 'CodexRemote');
+  const stateRoot = platform === 'darwin'
+    ? join(dataRoot, 'state')
+    : join(xdgRoot('XDG_STATE_HOME', '.local/state'), 'CodexRemote');
+  const codexDataRoot = environment.CODEX_HOME?.trim() || join(home, '.codex');
+  return {
+    codexDataRoot,
+    sessionsRoot: join(codexDataRoot, 'sessions'),
+    stateRoot,
+    serviceRoot: join(dataRoot, 'service'),
+    uploadsRoot: join(dataRoot, 'attachments'),
+    credentialsRoot: join(dataRoot, 'credentials'),
+  };
+}

package/dist/src/platform/project-locations.mjs

@@ -0,0 +1,3 @@
+import { platformModule } from './select.mjs';
+const adapter = await import(platformModule('project-locations'));
+export const { projectLocations } = adapter;

package/dist/src/platform/runtime-paths.mjs

@@ -0,0 +1,8 @@
+import { runtimePaths as windowsPaths } from './windows/runtime-paths.mjs';
+import { runtimePaths as posixPaths } from './posix/runtime-paths.mjs';
+
+export function runtimePaths(environment = process.env, home, platform = process.platform) {
+  if (platform === 'win32') return windowsPaths(environment, home);
+  if (platform === 'darwin' || platform === 'linux') return posixPaths(environment, home, platform);
+  throw new Error(`Unsupported workstation platform: ${platform}`);
+}

package/dist/src/platform/select.mjs

@@ -0,0 +1,5 @@
+export function platformModule(name, platform = process.platform) {
+  const directory = { win32: 'windows', darwin: 'macos' }[platform];
+  if (!directory) throw new Error(`工作站暂不支持此系统：${platform}`);
+  return new URL(`./${directory}/${name}.mjs`, import.meta.url);
+}

package/dist/src/platform/service-host.mjs

@@ -0,0 +1,3 @@
+import { platformModule } from './select.mjs';
+const adapter = await import(platformModule('service-host'));
+export const { sharedServiceUrl, lanAddress, lanNetworks, bridgeEnvironment } = adapter;

package/dist/src/platform/user-environment.mjs

@@ -0,0 +1,3 @@
+import { platformModule } from './select.mjs';
+const adapter = await import(platformModule('user-environment'));
+export const { configureManagedEnvironment, clearManagedEnvironment } = adapter;

package/dist/src/platform/windows/IsolatedProcess.cs

@@ -1,79 +1,79 @@
-using System;
-using System.ComponentModel;
-using System.Runtime.InteropServices;
-using System.Text;
-
-// Only the three explicitly opened standard handles cross the process boundary.
-// In particular, inherited app-server sockets must not reach background workers.
-public static class IsolatedProcess {
-    [StructLayout(LayoutKind.Sequential)] struct Security { public int length; public IntPtr descriptor; public int inherit; }
-    [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct Startup {
-        public int cb; public string reserved, desktop, title;
-        public int x,y,xSize,ySize,xCount,yCount,fill,flags; public short show,reservedSize;
-        public IntPtr reservedBytes,input,output,error;
-    }
-    [StructLayout(LayoutKind.Sequential)] struct StartupEx { public Startup startup; public IntPtr attributes; }
-    [StructLayout(LayoutKind.Sequential)] struct ProcessInfo { public IntPtr process,thread; public int pid,tid; }
-    [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr CreateFileW(string name,uint access,uint share,ref Security security,uint disposition,uint flags,IntPtr template);
-    [DllImport("kernel32.dll", SetLastError=true)] static extern bool InitializeProcThreadAttributeList(IntPtr list,int count,int flags,ref IntPtr size);
-    [DllImport("kernel32.dll", SetLastError=true)] static extern bool UpdateProcThreadAttribute(IntPtr list,uint flags,IntPtr attribute,IntPtr value,IntPtr size,IntPtr previous,IntPtr returned);
-    [DllImport("kernel32.dll")] static extern void DeleteProcThreadAttributeList(IntPtr list);
-    [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool CreateProcessW(string application,StringBuilder command,IntPtr processSecurity,IntPtr threadSecurity,bool inherit,uint flags,IntPtr environment,string cwd,ref StartupEx startup,out ProcessInfo info);
-    [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
-    [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern uint GetFinalPathNameByHandleW(IntPtr handle,StringBuilder path,uint length,uint flags);
-    public static string ResolvePath(string path) {
-        var security=new Security {length=Marshal.SizeOf(typeof(Security))};
-        var handle=CreateFileW(path,0,7,ref security,3,0x02000000,IntPtr.Zero);
-        if(handle==new IntPtr(-1)) throw new Win32Exception(Marshal.GetLastWin32Error());
-        try {
-            var result=new StringBuilder(32768);
-            uint length=GetFinalPathNameByHandleW(handle,result,(uint)result.Capacity,0);
-            if(length==0 || length>=result.Capacity) throw new Win32Exception(Marshal.GetLastWin32Error());
-            var value=result.ToString();
-            return value.StartsWith(@"\\?\UNC\") ? @"\\"+value.Substring(8) : value.StartsWith(@"\\?\") ? value.Substring(4) : value;
-        } finally { CloseHandle(handle); }
-    }
-    static string Quote(string value) {
-        var result=new StringBuilder("\""); int slashes=0;
-        foreach(char c in value) {
-            if(c=='\\') { slashes++; continue; }
-            result.Append('\\', c=='"' ? slashes*2+1 : slashes); slashes=0; result.Append(c);
-        }
-        result.Append('\\',slashes*2); return result.Append('"').ToString();
-    }
-    static IntPtr File(string file,bool input) {
-        var sa=new Security { length=Marshal.SizeOf(typeof(Security)), inherit=1 };
-        // FILE_APPEND_DATA avoids truncating diagnostic history on recovery.
-        var handle=CreateFileW(file,input?0x80000000u:4u,7,ref sa,input?3u:4u,0x80,IntPtr.Zero);
-        if(handle==new IntPtr(-1)) throw new Win32Exception(Marshal.GetLastWin32Error());
-        return handle;
-    }
-    public static int Start(string executable,string[] arguments,string stdout,string stderr,string[] environment) {
-        IntPtr input=IntPtr.Zero,output=IntPtr.Zero,error=IntPtr.Zero,list=IntPtr.Zero,handles=IntPtr.Zero,environmentBlock=IntPtr.Zero;
-        bool initialized=false;
-        try {
-            input=File("NUL",true); output=File(String.IsNullOrEmpty(stdout)?"NUL":stdout,false); error=File(String.IsNullOrEmpty(stderr)?"NUL":stderr,false);
-            IntPtr size=IntPtr.Zero; InitializeProcThreadAttributeList(IntPtr.Zero,1,0,ref size);
-            list=Marshal.AllocHGlobal(size);
-            if(!InitializeProcThreadAttributeList(list,1,0,ref size)) throw new Win32Exception(Marshal.GetLastWin32Error());
-            initialized=true; handles=Marshal.AllocHGlobal(IntPtr.Size*3);
-            Marshal.Copy(new IntPtr[]{input,output,error},0,handles,3);
-            if(!UpdateProcThreadAttribute(list,0,new IntPtr(0x20002),handles,new IntPtr(IntPtr.Size*3),IntPtr.Zero,IntPtr.Zero)) throw new Win32Exception(Marshal.GetLastWin32Error());
-            var startup=new StartupEx(); startup.startup.cb=Marshal.SizeOf(typeof(StartupEx));
-            startup.startup.flags=0x101; startup.startup.show=0;
-            startup.startup.input=input; startup.startup.output=output; startup.startup.error=error; startup.attributes=list;
-            var command=new StringBuilder(Quote(executable)); foreach(var argument in arguments) command.Append(' ').Append(Quote(argument));
-            Array.Sort(environment,StringComparer.OrdinalIgnoreCase);
-            var environmentBytes=Encoding.Unicode.GetBytes(String.Join("\0",environment)+"\0\0");
-            environmentBlock=Marshal.AllocHGlobal(environmentBytes.Length); Marshal.Copy(environmentBytes,0,environmentBlock,environmentBytes.Length);
-            ProcessInfo info;
-            if(!CreateProcessW(executable,command,IntPtr.Zero,IntPtr.Zero,true,0x80410,environmentBlock,null,ref startup,out info)) throw new Win32Exception(Marshal.GetLastWin32Error());
-            CloseHandle(info.thread); CloseHandle(info.process); return info.pid;
-        } finally {
-            if(initialized) DeleteProcThreadAttributeList(list);
-            if(list!=IntPtr.Zero) Marshal.FreeHGlobal(list); if(handles!=IntPtr.Zero) Marshal.FreeHGlobal(handles);
-            if(environmentBlock!=IntPtr.Zero) Marshal.FreeHGlobal(environmentBlock);
-            if(input!=IntPtr.Zero) CloseHandle(input); if(output!=IntPtr.Zero) CloseHandle(output); if(error!=IntPtr.Zero) CloseHandle(error);
-        }
-    }
-}
+using System;
+using System.ComponentModel;
+using System.Runtime.InteropServices;
+using System.Text;
+
+// Only the three explicitly opened standard handles cross the process boundary.
+// In particular, inherited app-server sockets must not reach background workers.
+public static class IsolatedProcess {
+    [StructLayout(LayoutKind.Sequential)] struct Security { public int length; public IntPtr descriptor; public int inherit; }
+    [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct Startup {
+        public int cb; public string reserved, desktop, title;
+        public int x,y,xSize,ySize,xCount,yCount,fill,flags; public short show,reservedSize;
+        public IntPtr reservedBytes,input,output,error;
+    }
+    [StructLayout(LayoutKind.Sequential)] struct StartupEx { public Startup startup; public IntPtr attributes; }
+    [StructLayout(LayoutKind.Sequential)] struct ProcessInfo { public IntPtr process,thread; public int pid,tid; }
+    [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr CreateFileW(string name,uint access,uint share,ref Security security,uint disposition,uint flags,IntPtr template);
+    [DllImport("kernel32.dll", SetLastError=true)] static extern bool InitializeProcThreadAttributeList(IntPtr list,int count,int flags,ref IntPtr size);
+    [DllImport("kernel32.dll", SetLastError=true)] static extern bool UpdateProcThreadAttribute(IntPtr list,uint flags,IntPtr attribute,IntPtr value,IntPtr size,IntPtr previous,IntPtr returned);
+    [DllImport("kernel32.dll")] static extern void DeleteProcThreadAttributeList(IntPtr list);
+    [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool CreateProcessW(string application,StringBuilder command,IntPtr processSecurity,IntPtr threadSecurity,bool inherit,uint flags,IntPtr environment,string cwd,ref StartupEx startup,out ProcessInfo info);
+    [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
+    [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern uint GetFinalPathNameByHandleW(IntPtr handle,StringBuilder path,uint length,uint flags);
+    public static string ResolvePath(string path) {
+        var security=new Security {length=Marshal.SizeOf(typeof(Security))};
+        var handle=CreateFileW(path,0,7,ref security,3,0x02000000,IntPtr.Zero);
+        if(handle==new IntPtr(-1)) throw new Win32Exception(Marshal.GetLastWin32Error());
+        try {
+            var result=new StringBuilder(32768);
+            uint length=GetFinalPathNameByHandleW(handle,result,(uint)result.Capacity,0);
+            if(length==0 || length>=result.Capacity) throw new Win32Exception(Marshal.GetLastWin32Error());
+            var value=result.ToString();
+            return value.StartsWith(@"\\?\UNC\") ? @"\\"+value.Substring(8) : value.StartsWith(@"\\?\") ? value.Substring(4) : value;
+        } finally { CloseHandle(handle); }
+    }
+    static string Quote(string value) {
+        var result=new StringBuilder("\""); int slashes=0;
+        foreach(char c in value) {
+            if(c=='\\') { slashes++; continue; }
+            result.Append('\\', c=='"' ? slashes*2+1 : slashes); slashes=0; result.Append(c);
+        }
+        result.Append('\\',slashes*2); return result.Append('"').ToString();
+    }
+    static IntPtr File(string file,bool input) {
+        var sa=new Security { length=Marshal.SizeOf(typeof(Security)), inherit=1 };
+        // FILE_APPEND_DATA avoids truncating diagnostic history on recovery.
+        var handle=CreateFileW(file,input?0x80000000u:4u,7,ref sa,input?3u:4u,0x80,IntPtr.Zero);
+        if(handle==new IntPtr(-1)) throw new Win32Exception(Marshal.GetLastWin32Error());
+        return handle;
+    }
+    public static int Start(string executable,string[] arguments,string stdout,string stderr,string[] environment) {
+        IntPtr input=IntPtr.Zero,output=IntPtr.Zero,error=IntPtr.Zero,list=IntPtr.Zero,handles=IntPtr.Zero,environmentBlock=IntPtr.Zero;
+        bool initialized=false;
+        try {
+            input=File("NUL",true); output=File(String.IsNullOrEmpty(stdout)?"NUL":stdout,false); error=File(String.IsNullOrEmpty(stderr)?"NUL":stderr,false);
+            IntPtr size=IntPtr.Zero; InitializeProcThreadAttributeList(IntPtr.Zero,1,0,ref size);
+            list=Marshal.AllocHGlobal(size);
+            if(!InitializeProcThreadAttributeList(list,1,0,ref size)) throw new Win32Exception(Marshal.GetLastWin32Error());
+            initialized=true; handles=Marshal.AllocHGlobal(IntPtr.Size*3);
+            Marshal.Copy(new IntPtr[]{input,output,error},0,handles,3);
+            if(!UpdateProcThreadAttribute(list,0,new IntPtr(0x20002),handles,new IntPtr(IntPtr.Size*3),IntPtr.Zero,IntPtr.Zero)) throw new Win32Exception(Marshal.GetLastWin32Error());
+            var startup=new StartupEx(); startup.startup.cb=Marshal.SizeOf(typeof(StartupEx));
+            startup.startup.flags=0x101; startup.startup.show=0;
+            startup.startup.input=input; startup.startup.output=output; startup.startup.error=error; startup.attributes=list;
+            var command=new StringBuilder(Quote(executable)); foreach(var argument in arguments) command.Append(' ').Append(Quote(argument));
+            Array.Sort(environment,StringComparer.OrdinalIgnoreCase);
+            var environmentBytes=Encoding.Unicode.GetBytes(String.Join("\0",environment)+"\0\0");
+            environmentBlock=Marshal.AllocHGlobal(environmentBytes.Length); Marshal.Copy(environmentBytes,0,environmentBlock,environmentBytes.Length);
+            ProcessInfo info;
+            if(!CreateProcessW(executable,command,IntPtr.Zero,IntPtr.Zero,true,0x80410,environmentBlock,null,ref startup,out info)) throw new Win32Exception(Marshal.GetLastWin32Error());
+            CloseHandle(info.thread); CloseHandle(info.process); return info.pid;
+        } finally {
+            if(initialized) DeleteProcThreadAttributeList(list);
+            if(list!=IntPtr.Zero) Marshal.FreeHGlobal(list); if(handles!=IntPtr.Zero) Marshal.FreeHGlobal(handles);
+            if(environmentBlock!=IntPtr.Zero) Marshal.FreeHGlobal(environmentBlock);
+            if(input!=IntPtr.Zero) CloseHandle(input); if(output!=IntPtr.Zero) CloseHandle(output); if(error!=IntPtr.Zero) CloseHandle(error);
+        }
+    }
+}

package/dist/src/platform/windows/background-process.mjs

@@ -1,30 +1,30 @@
-import { spawn } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-import path from 'node:path';
-
-export function startWindowsProcess(executable, args, environment, logs = []) {
-  return new Promise((resolve, reject) => {
-    const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
-    const helperEnvironment = {};
-    for (const name of ['SystemRoot', 'windir', 'LOCALAPPDATA', 'USERPROFILE', 'TEMP', 'TMP', 'PSModulePath']) {
-      const key = Object.keys(process.env).find(item => item.toLowerCase() === name.toLowerCase());
-      if (key) helperEnvironment[key] = process.env[key];
-    }
-    const helper = spawn(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
-      fileURLToPath(new URL('./start-hidden-console.ps1', import.meta.url))], {
-      windowsHide: true, env: helperEnvironment, stdio: ['pipe', 'pipe', 'pipe'],
-    });
-    let output = '', error = '';
-    helper.stdout.setEncoding('utf8').on('data', chunk => { output += chunk; });
-    helper.stderr.setEncoding('utf8').on('data', chunk => { error += chunk; });
-    helper.once('error', reject); helper.stdin.on('error', reject);
-    helper.once('exit', code => {
-      helper.stdout.destroy(); helper.stderr.destroy(); helper.stdin.destroy();
-      if (code !== 0) return reject(new Error(error.trim() || `后台启动失败 (${code})`));
-      const pid = Number(output.trim());
-      if (!Number.isSafeInteger(pid) || pid <= 0) return reject(new Error('后台启动未返回有效 PID'));
-      resolve(pid);
-    });
-    helper.stdin.end(JSON.stringify({ brokerExecutable: process.execPath, executable, args, logs, environment }));
-  });
-}
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import path from 'node:path';
+
+export function startWindowsProcess(executable, args, environment, logs = []) {
+  return new Promise((resolve, reject) => {
+    const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+    const helperEnvironment = {};
+    for (const name of ['SystemRoot', 'windir', 'LOCALAPPDATA', 'USERPROFILE', 'TEMP', 'TMP', 'PSModulePath']) {
+      const key = Object.keys(process.env).find(item => item.toLowerCase() === name.toLowerCase());
+      if (key) helperEnvironment[key] = process.env[key];
+    }
+    const helper = spawn(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
+      fileURLToPath(new URL('./start-hidden-console.ps1', import.meta.url))], {
+      windowsHide: true, env: helperEnvironment, stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    let output = '', error = '';
+    helper.stdout.setEncoding('utf8').on('data', chunk => { output += chunk; });
+    helper.stderr.setEncoding('utf8').on('data', chunk => { error += chunk; });
+    helper.once('error', reject); helper.stdin.on('error', reject);
+    helper.once('exit', code => {
+      helper.stdout.destroy(); helper.stderr.destroy(); helper.stdin.destroy();
+      if (code !== 0) return reject(new Error(error.trim() || `后台启动失败 (${code})`));
+      const pid = Number(output.trim());
+      if (!Number.isSafeInteger(pid) || pid <= 0) return reject(new Error('后台启动未返回有效 PID'));
+      resolve(pid);
+    });
+    helper.stdin.end(JSON.stringify({ brokerExecutable: process.execPath, executable, args, logs, environment }));
+  });
+}

package/dist/src/platform/windows/codex-runtime.mjs

@@ -1,4 +1,5 @@
 import fs from 'node:fs';
+import { compareVersions, verifyProtocol } from '../codex-protocol.mjs';
 import os from 'node:os';
 import path from 'node:path';
 import { createRequire } from 'node:module';
@@ -9,16 +10,11 @@ import { promisify } from 'node:util';
 import { readRecord, writeRecord } from '../../service-lifecycle.mjs';
 
 const exec = promisify(execFile);
-const requiredMethods = ['thread/start', 'thread/resume', 'thread/list', 'thread/turns/list',
-  'thread/items/list', 'turn/start', 'turn/steer', 'turn/interrupt', 'model/list', 'project/list',
-  'project/create', 'project/update', 'project/move',
-  'fs/getMetadata', 'fs/readDirectory', 'fs/createDirectory', 'command/exec',
-  'thread/settings/update', 'configRequirements/read', 'thread/queue/list', 'thread/queue/add',
-  'thread/queue/delete', 'thread/queue/start', 'thread/read', 'thread/unsubscribe', 'config/read', 'account/rateLimits/read'];
 export const codeModeHostPath = executable => path.join(path.dirname(executable), 'codex-code-mode-host.exe');
 export const runtimeFilesAvailable = executable => fs.existsSync(executable) && fs.existsSync(codeModeHostPath(executable));
 const fingerprint = executable => [executable, codeModeHostPath(executable)]
   .map(file => { const s = fs.statSync(file); return `${s.size}:${s.mtimeMs}`; }).join('|');
+export const runtimeFingerprint = fingerprint;
 const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
 const desktopRuntimeScript = path.join(path.dirname(fileURLToPath(import.meta.url)), 'desktop-runtime.ps1');
 
@@ -178,40 +174,6 @@ export function discoverCodex(environment = process.env) {
   return [...found.values()];
 }
 
-function compareVersions(a, b) {
-  const parse = v => v.split(/[.-]/).map(part => /^\d+$/.test(part) ? Number(part) : part);
-  const aa = parse(a), bb = parse(b);
-  for (let i = 0; i < Math.max(aa.length, bb.length); i++) {
-    if (aa[i] === bb[i]) continue;
-    if (aa[i] === undefined) return 1;
-    if (bb[i] === undefined) return -1;
-    return typeof aa[i] === 'number' && typeof bb[i] === 'number' ? aa[i] - bb[i] : String(aa[i]).localeCompare(String(bb[i]));
-  }
-  return 0;
-}
-
-async function verifyProtocol(executable, stateRoot) {
-  const directory = fs.mkdtempSync(path.join(stateRoot, 'cli-schema-'));
-  try {
-    await exec(executable, ['app-server', 'generate-json-schema', '--experimental', '--out', directory],
-      { windowsHide: true, timeout: 30000, maxBuffer: 4 * 1024 * 1024 });
-    const request = fs.readFileSync(path.join(directory, 'ClientRequest.json'), 'utf8');
-    const missing = requiredMethods.filter(method => !request.includes(`"${method}"`));
-    const turns = fs.readFileSync(path.join(directory, 'v2/ThreadTurnsListParams.json'), 'utf8');
-    if (!turns.includes('"itemsView"') || !turns.includes('"summary"')) missing.push('turn summary pagination');
-    if (missing.length) throw new Error(`缺少协议能力：${missing.join(', ')}`);
-  } finally {
-    const remove = dir => {
-      for (const item of fs.readdirSync(dir, { withFileTypes: true })) {
-        const file = path.join(dir, item.name);
-        if (item.isDirectory()) remove(file); else fs.unlinkSync(file);
-      }
-      fs.rmdirSync(dir);
-    };
-    remove(directory);
-  }
-}
-
 export async function resolveCodexRuntime(stateRoot, { refresh = false, environment = process.env } = {}) {
   fs.mkdirSync(stateRoot, { recursive: true });
   const recordFile = path.join(stateRoot, 'codex-runtime.json');