@walkhi/code-relax 0.1.0-beta.29 → 0.1.0-beta.30

package/dist/src/platform/windows/user-environment.mjs

@@ -1,50 +1,50 @@
-import path from 'node:path';
-import fs from 'node:fs';
-import { readRecord, writeRecord } from '../../service-lifecycle.mjs';
-import { runScript } from './desktop-host.mjs';
-import { managedAppServerUrl } from '../../managed-app-server.mjs';
-
-const ownershipFile = 'managed-environment.json';
-
-export async function readManagedEnvironment() {
-  return JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Read']));
-}
-
-export async function configureManagedEnvironment(stateRoot) {
-  const current = await readManagedEnvironment();
-  const ownershipPath = path.join(stateRoot, ownershipFile);
-  const ownership = readRecord(ownershipPath);
-  if (current.forceCliUser === '1' || current.forceCliMachine === '1') {
-    throw new Error('CODEX_APP_SERVER_FORCE_CLI=1 会让 Codex 忽略当前内核地址；未修改该配置。');
-  }
-  if (current.userValue && current.userValue !== managedAppServerUrl) {
-    throw new Error(`用户已有 CODEX_APP_SERVER_WS_URL=${current.userValue}；未覆盖该配置。`);
-  }
-  if (current.userValue === managedAppServerUrl) {
-    const owned = ownership?.value === managedAppServerUrl;
-    return { configured: true, value: current.userValue, changed: false, owned };
-  }
-  const applied = JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Set', '-Value', managedAppServerUrl]));
-  writeRecord(ownershipPath, { name: 'CODEX_APP_SERVER_WS_URL', value: managedAppServerUrl,
-    configuredAt: new Date().toISOString() });
-  return { configured: true, value: applied.userValue, changed: true, owned: true };
-}
-
-export async function clearManagedEnvironment(stateRoot) {
-  const ownershipPath = path.join(stateRoot, ownershipFile);
-  const ownership = readRecord(ownershipPath);
-  const current = await readManagedEnvironment();
-  if (!current.userValue) {
-    fs.rmSync(ownershipPath, { force: true });
-    return { removed: false, preserved: false, reason: 'already-empty' };
-  }
-  if (ownership?.value !== managedAppServerUrl || current.userValue !== managedAppServerUrl) {
-    fs.rmSync(ownershipPath, { force: true });
-    return { removed: false, preserved: true, value: current.userValue,
-      reason: ownership?.value === managedAppServerUrl ? 'user-modified' : 'not-owned' };
-  }
-  const result = JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Clear']));
-  if (result.userValue) throw new Error('CODEX_APP_SERVER_WS_URL 清理后读回仍不为空。');
-  fs.rmSync(ownershipPath, { force: true });
-  return { removed: true, preserved: false, reason: 'removed' };
-}
+import path from 'node:path';
+import fs from 'node:fs';
+import { readRecord, writeRecord } from '../../service-lifecycle.mjs';
+import { runScript } from './desktop-host.mjs';
+import { managedAppServerUrl } from '../../managed-app-server.mjs';
+
+const ownershipFile = 'managed-environment.json';
+
+export async function readManagedEnvironment() {
+  return JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Read']));
+}
+
+export async function configureManagedEnvironment(stateRoot) {
+  const current = await readManagedEnvironment();
+  const ownershipPath = path.join(stateRoot, ownershipFile);
+  const ownership = readRecord(ownershipPath);
+  if (current.forceCliUser === '1' || current.forceCliMachine === '1') {
+    throw new Error('CODEX_APP_SERVER_FORCE_CLI=1 会让 Codex 忽略当前内核地址；未修改该配置。');
+  }
+  if (current.userValue && current.userValue !== managedAppServerUrl) {
+    throw new Error(`用户已有 CODEX_APP_SERVER_WS_URL=${current.userValue}；未覆盖该配置。`);
+  }
+  if (current.userValue === managedAppServerUrl) {
+    const owned = ownership?.value === managedAppServerUrl;
+    return { configured: true, value: current.userValue, changed: false, owned };
+  }
+  const applied = JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Set', '-Value', managedAppServerUrl]));
+  writeRecord(ownershipPath, { name: 'CODEX_APP_SERVER_WS_URL', value: managedAppServerUrl,
+    configuredAt: new Date().toISOString() });
+  return { configured: true, value: applied.userValue, changed: true, owned: true };
+}
+
+export async function clearManagedEnvironment(stateRoot) {
+  const ownershipPath = path.join(stateRoot, ownershipFile);
+  const ownership = readRecord(ownershipPath);
+  const current = await readManagedEnvironment();
+  if (!current.userValue) {
+    fs.rmSync(ownershipPath, { force: true });
+    return { removed: false, preserved: false, reason: 'already-empty' };
+  }
+  if (ownership?.value !== managedAppServerUrl || current.userValue !== managedAppServerUrl) {
+    fs.rmSync(ownershipPath, { force: true });
+    return { removed: false, preserved: true, value: current.userValue,
+      reason: ownership?.value === managedAppServerUrl ? 'user-modified' : 'not-owned' };
+  }
+  const result = JSON.parse(await runScript('user-environment.ps1', ['-Action', 'Clear']));
+  if (result.userValue) throw new Error('CODEX_APP_SERVER_WS_URL 清理后读回仍不为空。');
+  fs.rmSync(ownershipPath, { force: true });
+  return { removed: true, preserved: false, reason: 'removed' };
+}

package/dist/src/platform/windows/user-environment.ps1

@@ -1,41 +1,41 @@
-param(
-    [ValidateSet('Read', 'Set', 'Clear')][string]$Action = 'Read',
-    [string]$Value = ''
-)
-$ErrorActionPreference = 'Stop'
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-$name = 'CODEX_APP_SERVER_WS_URL'
-
-function Broadcast-EnvironmentChange {
-    if (-not ('CodeRelax.EnvironmentBroadcast' -as [type])) {
-        Add-Type -Namespace CodeRelax -Name EnvironmentBroadcast -MemberDefinition @'
-[System.Runtime.InteropServices.DllImport("user32.dll", CharSet=System.Runtime.InteropServices.CharSet.Unicode, SetLastError=true)]
-public static extern System.IntPtr SendMessageTimeout(
-    System.IntPtr hWnd, uint Msg, System.UIntPtr wParam, string lParam,
-    uint flags, uint timeout, out System.UIntPtr result);
-'@
-    }
-    [UIntPtr]$result = [UIntPtr]::Zero
-    [void][CodeRelax.EnvironmentBroadcast]::SendMessageTimeout(
-        [IntPtr]0xffff, 0x001A, [UIntPtr]::Zero, 'Environment', 0x0002, 5000, [ref]$result)
-}
-
-if ($Action -eq 'Set') {
-    if ([string]::IsNullOrWhiteSpace($Value)) { throw 'Environment value is required.' }
-    [Environment]::SetEnvironmentVariable($name, $Value, 'User')
-    Broadcast-EnvironmentChange
-} elseif ($Action -eq 'Clear') {
-    [Environment]::SetEnvironmentVariable($name, $null, 'User')
-    Broadcast-EnvironmentChange
-}
-
-$userValue = [Environment]::GetEnvironmentVariable($name, 'User')
-$result = @{
-    userValue = $userValue
-    machineValue = [Environment]::GetEnvironmentVariable($name, 'Machine')
-    forceCliUser = [Environment]::GetEnvironmentVariable('CODEX_APP_SERVER_FORCE_CLI', 'User')
-    forceCliMachine = [Environment]::GetEnvironmentVariable('CODEX_APP_SERVER_FORCE_CLI', 'Machine')
-}
-if ($Action -eq 'Set' -and $userValue -ne $Value) { throw 'Environment value verification failed.' }
-if ($Action -eq 'Clear' -and -not [string]::IsNullOrEmpty($userValue)) { throw 'Environment removal verification failed.' }
-$result | ConvertTo-Json -Compress
+param(
+    [ValidateSet('Read', 'Set', 'Clear')][string]$Action = 'Read',
+    [string]$Value = ''
+)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$name = 'CODEX_APP_SERVER_WS_URL'
+
+function Broadcast-EnvironmentChange {
+    if (-not ('CodeRelax.EnvironmentBroadcast' -as [type])) {
+        Add-Type -Namespace CodeRelax -Name EnvironmentBroadcast -MemberDefinition @'
+[System.Runtime.InteropServices.DllImport("user32.dll", CharSet=System.Runtime.InteropServices.CharSet.Unicode, SetLastError=true)]
+public static extern System.IntPtr SendMessageTimeout(
+    System.IntPtr hWnd, uint Msg, System.UIntPtr wParam, string lParam,
+    uint flags, uint timeout, out System.UIntPtr result);
+'@
+    }
+    [UIntPtr]$result = [UIntPtr]::Zero
+    [void][CodeRelax.EnvironmentBroadcast]::SendMessageTimeout(
+        [IntPtr]0xffff, 0x001A, [UIntPtr]::Zero, 'Environment', 0x0002, 5000, [ref]$result)
+}
+
+if ($Action -eq 'Set') {
+    if ([string]::IsNullOrWhiteSpace($Value)) { throw 'Environment value is required.' }
+    [Environment]::SetEnvironmentVariable($name, $Value, 'User')
+    Broadcast-EnvironmentChange
+} elseif ($Action -eq 'Clear') {
+    [Environment]::SetEnvironmentVariable($name, $null, 'User')
+    Broadcast-EnvironmentChange
+}
+
+$userValue = [Environment]::GetEnvironmentVariable($name, 'User')
+$result = @{
+    userValue = $userValue
+    machineValue = [Environment]::GetEnvironmentVariable($name, 'Machine')
+    forceCliUser = [Environment]::GetEnvironmentVariable('CODEX_APP_SERVER_FORCE_CLI', 'User')
+    forceCliMachine = [Environment]::GetEnvironmentVariable('CODEX_APP_SERVER_FORCE_CLI', 'Machine')
+}
+if ($Action -eq 'Set' -and $userValue -ne $Value) { throw 'Environment value verification failed.' }
+if ($Action -eq 'Clear' -and -not [string]::IsNullOrEmpty($userValue)) { throw 'Environment removal verification failed.' }
+$result | ConvertTo-Json -Compress

package/dist/src/project-create.mjs

@@ -3,13 +3,13 @@ import path from 'node:path';
 import { createHash } from 'node:crypto';
 import { readRecord, writeRecord } from './service-lifecycle.mjs';
 import { projectRoots, projectSummary } from './project-management.mjs';
-import { projectLocations } from './platform/windows/project-locations.mjs';
-import { withDesktopProjectRegistration } from './platform/windows/desktop-project-registration.mjs';
+import { projectLocations } from './platform/project-locations.mjs';
+import { withDesktopProjectRegistration } from './platform/desktop-project-registration.mjs';
 
 const pending = new Map();
 const uuid = /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i;
 const fail = message => { throw Object.assign(new Error(message), { statusCode: 400 }); };
-const pathKey = value => path.normalize(value).toLowerCase();
+const pathKey = value => process.platform === 'win32' ? path.normalize(value).toLowerCase() : path.normalize(value);
 
 function defaultName(name) {
   let value = path.basename(name).trim().replace(/[<>:"/\\|?*\x00-\x1f]/g, '_').replace(/[ .]+$/g, '') || 'New project';
@@ -49,7 +49,7 @@ export async function createWorkstationProject(server, stateRoot, codexDataRoot,
     try {
       return await register({ stateRoot, codexDataRoot, operationId: body.idempotencyKey,
         confirmed: body.confirmDesktopRestart === true, serverUrl: server.url }, async desktop => {
-        // The restart confirmation and version/state checks happen before any
+        // The restart confirmation and state checks happen before any
         // directory or project write. Existing folders are never moved or copied.
         if (!operation.resolvedRoots) {
           operation.resolvedRoots = await projectRoots(rpc, roots);

package/dist/src/runtime-discovery.mjs

@@ -1,43 +1,47 @@
-import fs from 'node:fs';
-import { discoverCodex, resolveCodexRuntime } from './platform/windows/codex-runtime.mjs';
-
-// Advisory discovery is independent of execution health. Failure here must never
-// disable an already running app-server or cause an automatic process restart.
-export class RuntimeDiscovery {
-  constructor({ stateRoot, host, url, interval = 60000 }) {
-    Object.assign(this, { stateRoot, host, url, interval });
-    this.state = {};
-  }
-  start() { this.stopped = false; void this.tick(); }
-  stop() { this.stopped = true; clearTimeout(this.timer); }
-  async sample() {
-    const errors = [];
-    try {
-      const candidates = discoverCodex();
-      const signature = JSON.stringify(candidates.map(candidate => {
-        const stat = fs.statSync(candidate.executable);
-        return [candidate.executable, stat.size, stat.mtimeMs];
-      }));
-      if (signature !== this.signature) {
-        await resolveCodexRuntime(this.stateRoot, { refresh: true });
-        this.signature = signature;
-      }
-    } catch (error) { errors.push(error.message); }
-    try {
-      const desktop = await this.host.inspect();
-      const attached = desktop.running && await this.host.sharedServiceUrl() === this.url;
-      this.state = { desktop: { state: !desktop.running ? 'stopped' : attached ? 'managed' : 'ordinary',
-        installed: Boolean(desktop.desktop), attachedToManagedServer: Boolean(attached) },
-        desktopRestartRecommended: Boolean(desktop.running && !attached), checkedAt: new Date().toISOString() };
-    } catch (error) {
-      errors.push(error.message);
-      this.state = { checkedAt: new Date().toISOString() };
-    }
-    if (errors.length) this.state.discoveryError = errors.join('\n');
-    return this.state;
-  }
-  async tick() {
-    await this.sample();
-    if (!this.stopped) { this.timer = setTimeout(() => this.tick(), this.interval); this.timer.unref?.(); }
-  }
-}
+import { discoverCodex, resolveCodexRuntime, runtimeFingerprint } from './platform/codex-runtime.mjs';
+
+// Advisory discovery is independent of execution health. Failure here must never
+// disable an already running app-server or cause an automatic process restart.
+export class RuntimeDiscovery {
+  constructor({ stateRoot, host, url, interval = 60000 }) {
+    Object.assign(this, { stateRoot, host, url, interval });
+    this.state = {};
+  }
+  start() { this.stopped = false; void this.tick(); }
+  stop() { this.stopped = true; clearTimeout(this.timer); }
+  async sample() {
+    const errors = [];
+    try {
+      const candidates = discoverCodex();
+      const signature = JSON.stringify(candidates.map(candidate => {
+        try { return [candidate.executable, runtimeFingerprint(candidate.executable)]; }
+        catch (error) { return [candidate.executable, error.message]; }
+      }));
+      if (signature !== this.signature) {
+        await resolveCodexRuntime(this.stateRoot, { refresh: true });
+        this.signature = signature;
+      }
+    } catch (error) { errors.push(error.message); }
+    try {
+      if (this.host.desktopIntegration === false) {
+        this.state = { desktop: { state: 'unsupported', integrationSupported: false }, checkedAt: new Date().toISOString() };
+        if (errors.length) this.state.discoveryError = errors.join('\n');
+        return this.state;
+      }
+      const desktop = await this.host.inspect();
+      const attached = desktop.running && await this.host.sharedServiceUrl() === this.url;
+      this.state = { desktop: { state: !desktop.running ? 'stopped' : attached ? 'managed' : 'ordinary',
+        installed: Boolean(desktop.desktop), attachedToManagedServer: Boolean(attached) },
+        desktopRestartRecommended: Boolean(desktop.running && !attached), checkedAt: new Date().toISOString() };
+    } catch (error) {
+      errors.push(error.message);
+      this.state = { checkedAt: new Date().toISOString() };
+    }
+    if (errors.length) this.state.discoveryError = errors.join('\n');
+    return this.state;
+  }
+  async tick() {
+    await this.sample();
+    if (!this.stopped) { this.timer = setTimeout(() => this.tick(), this.interval); this.timer.unref?.(); }
+  }
+}

package/dist/src/self-relay/account-connections.mjs

@@ -1,52 +1,52 @@
-import { digest } from './wire.mjs';
-
-// Register before the asynchronous database check so logout also invalidates
-// handshakes whose successful authentication response has not arrived yet.
-export function accountConnections() {
-  const sessions = new Map();
-  return {
-    track(token, onInvalid) {
-      const key = digest(token);
-      const entries = sessions.get(key) || new Set();
-      sessions.set(key, entries);
-      let active = true, expires = Infinity, timer;
-      function dispose() {
-        active = false;
-        clearTimeout(timer);
-        entries.delete(entry);
-        if (!entries.size && sessions.get(key) === entries) sessions.delete(key);
-      }
-      function invalidate() {
-        if (!active) return;
-        dispose();
-        onInvalid();
-      }
-      function valid() {
-        if (active && Date.now() >= expires) invalidate();
-        return active;
-      }
-      function schedule() {
-        if (!valid()) return;
-        // Login lasts 30 days, longer than Node's maximum timer delay.
-        timer = setTimeout(schedule, Math.min(expires - Date.now(), 0x7fffffff));
-        timer.unref();
-      }
-      const entry = {
-        activate(expiresAt) {
-          if (!active) return false;
-          expires = Date.parse(expiresAt);
-          if (!Number.isFinite(expires)) { invalidate(); return false; }
-          schedule();
-          return active;
-        },
-        valid, dispose, invalidate,
-      };
-      entries.add(entry);
-      return entry;
-    },
-    revoke(token) {
-      const entries = sessions.get(digest(token));
-      if (entries) for (const entry of [...entries]) entry.invalidate();
-    },
-  };
-}
+import { digest } from './wire.mjs';
+
+// Register before the asynchronous database check so logout also invalidates
+// handshakes whose successful authentication response has not arrived yet.
+export function accountConnections() {
+  const sessions = new Map();
+  return {
+    track(token, onInvalid) {
+      const key = digest(token);
+      const entries = sessions.get(key) || new Set();
+      sessions.set(key, entries);
+      let active = true, expires = Infinity, timer;
+      function dispose() {
+        active = false;
+        clearTimeout(timer);
+        entries.delete(entry);
+        if (!entries.size && sessions.get(key) === entries) sessions.delete(key);
+      }
+      function invalidate() {
+        if (!active) return;
+        dispose();
+        onInvalid();
+      }
+      function valid() {
+        if (active && Date.now() >= expires) invalidate();
+        return active;
+      }
+      function schedule() {
+        if (!valid()) return;
+        // Login lasts 30 days, longer than Node's maximum timer delay.
+        timer = setTimeout(schedule, Math.min(expires - Date.now(), 0x7fffffff));
+        timer.unref();
+      }
+      const entry = {
+        activate(expiresAt) {
+          if (!active) return false;
+          expires = Date.parse(expiresAt);
+          if (!Number.isFinite(expires)) { invalidate(); return false; }
+          schedule();
+          return active;
+        },
+        valid, dispose, invalidate,
+      };
+      entries.add(entry);
+      return entry;
+    },
+    revoke(token) {
+      const entries = sessions.get(digest(token));
+      if (entries) for (const entry of [...entries]) entry.invalidate();
+    },
+  };
+}

package/dist/src/self-relay/admin-cloud.mjs

@@ -1,101 +1,101 @@
-import fs from 'node:fs';
-import tencentcloud from 'tencentcloud-sdk-nodejs-common';
-
-const INSTANCE_ID = 'lhins-byrs7n8o';
-const REGION = 'ap-beijing';
-const { CommonClient } = tencentcloud;
-const METRICS = [
-  ['LighthouseOutratio', 'outRatioPercent', 10],
-  ['LighthouseOuttraffic', 'outMbps', 10],
-  ['LighthouseIntraffic', 'inMbps', 10],
-  ['CpuUsage', 'cpuPercent', 10],
-  ['MemUsage', 'memoryPercent', 10],
-  ['DiskUsage', 'diskPercent', 60],
-  ['CpuLoad1', 'cpuLoad1', 10],
-];
-
-function latestPoint(result) {
-  const point = result?.DataPoints?.[0];
-  if (!point?.Values?.length || !point?.Timestamps?.length) return null;
-  const index = point.Values.length - 1;
-  const value = Number(point.Values[index]);
-  const timestamp = Number(point.Timestamps[index]);
-  return Number.isFinite(value) && Number.isFinite(timestamp)
-    ? { value, sampledAt: new Date(timestamp * 1000).toISOString() } : null;
-}
-
-export function startAdminCloud({ credentialFile = process.env.CREDENTIALS_DIRECTORY
-  ? `${process.env.CREDENTIALS_DIRECTORY}/tencent-monitor.json` : null,
-  metricIntervalMs = 60000, trafficIntervalMs = 300000 } = {}) {
-  if (!credentialFile) return { read: () => ({ configured: false }), close() {} };
-  const { secretId, secretKey } = JSON.parse(fs.readFileSync(credentialFile, 'utf8'));
-  if (!secretId || !secretKey) throw new Error('Tencent monitor credentials are incomplete');
-  const credential = { secretId, secretKey };
-  const profile = { httpProfile: { reqTimeout: 8 } };
-  const monitor = new CommonClient('monitor.tencentcloudapi.com', '2018-07-24',
-    { credential, region: REGION, profile });
-  const lighthouse = new CommonClient('lighthouse.tencentcloudapi.com', '2020-03-24',
-    { credential, region: REGION, profile });
-  let closed = false;
-  let metricBusy = false;
-  let trafficBusy = false;
-  const current = { configured: true, metricAvailable: false, trafficAvailable: false,
-    outRatioPercent: null, outMbps: null, inMbps: null, metricSampledAt: null,
-    cpuPercent: null, memoryPercent: null, diskPercent: null, cpuLoad1: null,
-    trafficUsedBytes: null, trafficTotalBytes: null, trafficRemainingBytes: null,
-    trafficStartAt: null, trafficEndAt: null, trafficSampledAt: null };
-
-  async function sampleMetrics() {
-    if (metricBusy || closed) return;
-    metricBusy = true;
-    const end = new Date();
-    const base = { Namespace: 'QCE/LIGHTHOUSE',
-      StartTime: new Date(end.getTime() - 180000).toISOString(), EndTime: end.toISOString(),
-      Instances: [{ Dimensions: [{ Name: 'InstanceId', Value: INSTANCE_ID }] }] };
-    try {
-      const values = await Promise.allSettled(METRICS.map(([MetricName, , Period]) =>
-        monitor.request('GetMonitorData', { ...base, MetricName, Period })));
-      if (closed) return;
-      const samples = values.map(result => result.status === 'fulfilled' ? latestPoint(result.value) : null);
-      for (let index = 0; index < METRICS.length; index++) {
-        const [, field] = METRICS[index];
-        const value = samples[index]?.value ?? null;
-        current[field] = value !== null && (field === 'outMbps' || field === 'inMbps') ? value * 8 : value;
-      }
-      current.metricSampledAt = samples.reduce((latest, sample) => sample?.sampledAt > latest
-        ? sample.sampledAt : latest, '') || null;
-      current.metricAvailable = Boolean(current.metricSampledAt);
-    } catch {
-      current.metricAvailable = false;
-    } finally { metricBusy = false; }
-  }
-
-  async function sampleTraffic() {
-    if (trafficBusy || closed) return;
-    trafficBusy = true;
-    try {
-      const data = await lighthouse.request('DescribeInstancesTrafficPackages', { InstanceIds: [INSTANCE_ID] });
-      if (closed) return;
-      const packages = data?.InstanceTrafficPackageSet?.find(item => item.InstanceId === INSTANCE_ID)?.TrafficPackageSet || [];
-      const active = packages.find(item => Date.parse(item.StartTime) <= Date.now()
-        && Date.parse(item.EndTime) >= Date.now()) || packages[0];
-      current.trafficUsedBytes = active?.TrafficUsed ?? null;
-      current.trafficTotalBytes = active?.TrafficPackageTotal ?? null;
-      current.trafficRemainingBytes = active?.TrafficPackageRemaining ?? null;
-      current.trafficStartAt = active?.StartTime ?? null;
-      current.trafficEndAt = active?.EndTime ?? null;
-      current.trafficSampledAt = active ? new Date().toISOString() : null;
-      current.trafficAvailable = Boolean(active);
-    } catch {
-      current.trafficAvailable = false;
-    } finally { trafficBusy = false; }
-  }
-
-  void sampleMetrics();
-  void sampleTraffic();
-  const metricTimer = setInterval(sampleMetrics, metricIntervalMs);
-  const trafficTimer = setInterval(sampleTraffic, trafficIntervalMs);
-  metricTimer.unref();
-  trafficTimer.unref();
-  return { read: () => ({ ...current }), close() { closed = true; clearInterval(metricTimer); clearInterval(trafficTimer); } };
-}
+import fs from 'node:fs';
+import tencentcloud from 'tencentcloud-sdk-nodejs-common';
+
+const INSTANCE_ID = 'lhins-byrs7n8o';
+const REGION = 'ap-beijing';
+const { CommonClient } = tencentcloud;
+const METRICS = [
+  ['LighthouseOutratio', 'outRatioPercent', 10],
+  ['LighthouseOuttraffic', 'outMbps', 10],
+  ['LighthouseIntraffic', 'inMbps', 10],
+  ['CpuUsage', 'cpuPercent', 10],
+  ['MemUsage', 'memoryPercent', 10],
+  ['DiskUsage', 'diskPercent', 60],
+  ['CpuLoad1', 'cpuLoad1', 10],
+];
+
+function latestPoint(result) {
+  const point = result?.DataPoints?.[0];
+  if (!point?.Values?.length || !point?.Timestamps?.length) return null;
+  const index = point.Values.length - 1;
+  const value = Number(point.Values[index]);
+  const timestamp = Number(point.Timestamps[index]);
+  return Number.isFinite(value) && Number.isFinite(timestamp)
+    ? { value, sampledAt: new Date(timestamp * 1000).toISOString() } : null;
+}
+
+export function startAdminCloud({ credentialFile = process.env.CREDENTIALS_DIRECTORY
+  ? `${process.env.CREDENTIALS_DIRECTORY}/tencent-monitor.json` : null,
+  metricIntervalMs = 60000, trafficIntervalMs = 300000 } = {}) {
+  if (!credentialFile) return { read: () => ({ configured: false }), close() {} };
+  const { secretId, secretKey } = JSON.parse(fs.readFileSync(credentialFile, 'utf8'));
+  if (!secretId || !secretKey) throw new Error('Tencent monitor credentials are incomplete');
+  const credential = { secretId, secretKey };
+  const profile = { httpProfile: { reqTimeout: 8 } };
+  const monitor = new CommonClient('monitor.tencentcloudapi.com', '2018-07-24',
+    { credential, region: REGION, profile });
+  const lighthouse = new CommonClient('lighthouse.tencentcloudapi.com', '2020-03-24',
+    { credential, region: REGION, profile });
+  let closed = false;
+  let metricBusy = false;
+  let trafficBusy = false;
+  const current = { configured: true, metricAvailable: false, trafficAvailable: false,
+    outRatioPercent: null, outMbps: null, inMbps: null, metricSampledAt: null,
+    cpuPercent: null, memoryPercent: null, diskPercent: null, cpuLoad1: null,
+    trafficUsedBytes: null, trafficTotalBytes: null, trafficRemainingBytes: null,
+    trafficStartAt: null, trafficEndAt: null, trafficSampledAt: null };
+
+  async function sampleMetrics() {
+    if (metricBusy || closed) return;
+    metricBusy = true;
+    const end = new Date();
+    const base = { Namespace: 'QCE/LIGHTHOUSE',
+      StartTime: new Date(end.getTime() - 180000).toISOString(), EndTime: end.toISOString(),
+      Instances: [{ Dimensions: [{ Name: 'InstanceId', Value: INSTANCE_ID }] }] };
+    try {
+      const values = await Promise.allSettled(METRICS.map(([MetricName, , Period]) =>
+        monitor.request('GetMonitorData', { ...base, MetricName, Period })));
+      if (closed) return;
+      const samples = values.map(result => result.status === 'fulfilled' ? latestPoint(result.value) : null);
+      for (let index = 0; index < METRICS.length; index++) {
+        const [, field] = METRICS[index];
+        const value = samples[index]?.value ?? null;
+        current[field] = value !== null && (field === 'outMbps' || field === 'inMbps') ? value * 8 : value;
+      }
+      current.metricSampledAt = samples.reduce((latest, sample) => sample?.sampledAt > latest
+        ? sample.sampledAt : latest, '') || null;
+      current.metricAvailable = Boolean(current.metricSampledAt);
+    } catch {
+      current.metricAvailable = false;
+    } finally { metricBusy = false; }
+  }
+
+  async function sampleTraffic() {
+    if (trafficBusy || closed) return;
+    trafficBusy = true;
+    try {
+      const data = await lighthouse.request('DescribeInstancesTrafficPackages', { InstanceIds: [INSTANCE_ID] });
+      if (closed) return;
+      const packages = data?.InstanceTrafficPackageSet?.find(item => item.InstanceId === INSTANCE_ID)?.TrafficPackageSet || [];
+      const active = packages.find(item => Date.parse(item.StartTime) <= Date.now()
+        && Date.parse(item.EndTime) >= Date.now()) || packages[0];
+      current.trafficUsedBytes = active?.TrafficUsed ?? null;
+      current.trafficTotalBytes = active?.TrafficPackageTotal ?? null;
+      current.trafficRemainingBytes = active?.TrafficPackageRemaining ?? null;
+      current.trafficStartAt = active?.StartTime ?? null;
+      current.trafficEndAt = active?.EndTime ?? null;
+      current.trafficSampledAt = active ? new Date().toISOString() : null;
+      current.trafficAvailable = Boolean(active);
+    } catch {
+      current.trafficAvailable = false;
+    } finally { trafficBusy = false; }
+  }
+
+  void sampleMetrics();
+  void sampleTraffic();
+  const metricTimer = setInterval(sampleMetrics, metricIntervalMs);
+  const trafficTimer = setInterval(sampleTraffic, trafficIntervalMs);
+  metricTimer.unref();
+  trafficTimer.unref();
+  return { read: () => ({ ...current }), close() { closed = true; clearInterval(metricTimer); clearInterval(trafficTimer); } };
+}