@walkhi/code-relax 0.1.0-beta.3 → 0.1.0-beta.30

package/dist/src/service-control.mjs

@@ -1,72 +1,82 @@
-import http from 'node:http';
-import { timingSafeEqual } from 'node:crypto';
-
-function matches(left, right) {
-  const a = Buffer.from(left || '');
-  const b = Buffer.from(right || '');
-  return a.length === b.length && timingSafeEqual(a, b);
-}
-
-// Separate from the LAN listener: mobile credentials never authorize lifecycle operations.
-export async function openControl({ instanceId, secret, shutdown, status = () => ({}), actions = {} }) {
-  const server = http.createServer((request, response) => {
-    if (!matches(request.headers.authorization, `Bearer ${secret}`)) {
-      response.writeHead(403).end();
-      return;
-    }
-    const action = Object.keys(actions).find(name => request.url === `/${instanceId}/${name}`);
-    if ((!action && request.url !== `/${instanceId}`) || !['GET', 'POST'].includes(request.method) || (action && request.method !== 'POST')) {
-      response.writeHead(404).end();
-      return;
-    }
-    response.setHeader('Content-Type', 'application/json');
-    response.setHeader('Connection', 'close');
-    if (action) {
-      Promise.resolve().then(() => actions[action]()).then(result => {
-        response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
-      }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
-      return;
-    }
-    if (request.method === 'POST') response.once('finish', () => {
-      Promise.resolve(shutdown()).catch(error => {
-        console.error('Bridge 关闭失败：', error.message);
-        process.exitCode = 1;
-      });
-    });
-    response.end(JSON.stringify({ ...status(), instanceId, pid: process.pid }));
-  });
-  await new Promise((resolve, reject) => {
-    server.once('error', reject);
-    server.listen(0, '127.0.0.1', resolve);
-  });
-  return { port: server.address().port, close: () => new Promise((resolve, reject) => {
-    server.close(error => error ? reject(error) : resolve());
-  }) };
-}
-
-export function controlRequest(session, method = 'GET', action = '') {
-  return new Promise((resolve, reject) => {
-    const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
-      path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
-      headers: { Authorization: `Bearer ${session.controlSecret}` }, timeout: action ? 25000 : 2000 }, response => {
-      let body = '';
-      response.setEncoding('utf8');
-      response.on('data', chunk => { body += chunk; });
-      response.on('error', reject);
-      response.on('end', () => {
-        try {
-          if (response.statusCode === 409) throw new Error(JSON.parse(body).error);
-          if (response.statusCode !== 200) throw new Error('Bridge 管理通道身份验证失败。');
-          const identity = JSON.parse(body);
-          if (identity.instanceId !== session.instanceId || identity.pid !== session.pid) {
-            throw new Error('Bridge 实例身份不匹配。');
-          }
-          resolve(identity);
-        } catch (error) { reject(error); }
-      });
-    });
-    request.on('timeout', () => request.destroy(new Error('Bridge 管理通道响应超时。')));
-    request.on('error', reject);
-    request.end();
-  });
-}
+import http from 'node:http';
+import { timingSafeEqual } from 'node:crypto';
+
+function matches(left, right) {
+  const a = Buffer.from(left || '');
+  const b = Buffer.from(right || '');
+  return a.length === b.length && timingSafeEqual(a, b);
+}
+
+// Separate from the LAN listener: mobile credentials never authorize lifecycle operations.
+export async function openControl({ instanceId, secret, shutdown, status = () => ({}), actions = {} }) {
+  const server = http.createServer((request, response) => {
+    if (!matches(request.headers.authorization, `Bearer ${secret}`)) {
+      response.writeHead(403).end();
+      return;
+    }
+    const action = Object.keys(actions).find(name => request.url === `/${instanceId}/${name}`);
+    if ((!action && request.url !== `/${instanceId}`) || !['GET', 'POST'].includes(request.method) || (action && request.method !== 'POST')) {
+      response.writeHead(404).end();
+      return;
+    }
+    response.setHeader('Content-Type', 'application/json');
+    response.setHeader('Connection', 'close');
+    if (action) {
+      Promise.resolve().then(async () => {
+        let body = '';
+        request.setEncoding('utf8');
+        for await (const chunk of request) {
+          body += chunk;
+          if (Buffer.byteLength(body) > 4096) throw new Error('管理请求过大');
+        }
+        const details = body ? JSON.parse(body) : {};
+        if (!details || typeof details !== 'object' || Array.isArray(details)) throw new Error('无效管理请求');
+        return actions[action](details);
+      }).then(result => {
+        response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
+      }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
+      return;
+    }
+    if (request.method === 'POST') response.once('finish', () => {
+      Promise.resolve(shutdown()).catch(error => {
+        console.error('桌面服务关闭失败：', error.message);
+        process.exitCode = 1;
+      });
+    });
+    response.end(JSON.stringify({ ...status(), instanceId, pid: process.pid }));
+  });
+  await new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', resolve);
+  });
+  return { port: server.address().port, close: () => new Promise((resolve, reject) => {
+    server.close(error => error ? reject(error) : resolve());
+  }) };
+}
+
+export function controlRequest(session, method = 'GET', action = '', details) {
+  return new Promise((resolve, reject) => {
+    const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
+      path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
+      headers: { Authorization: `Bearer ${session.controlSecret}` }, timeout: action ? 25000 : 2000 }, response => {
+      let body = '';
+      response.setEncoding('utf8');
+      response.on('data', chunk => { body += chunk; });
+      response.on('error', reject);
+      response.on('end', () => {
+        try {
+          if (response.statusCode === 409) throw new Error(JSON.parse(body).error);
+          if (response.statusCode !== 200) throw new Error('桌面服务管理通道身份验证失败。');
+          const identity = JSON.parse(body);
+          if (identity.instanceId !== session.instanceId || identity.pid !== session.pid) {
+            throw new Error('桌面服务实例身份不匹配。');
+          }
+          resolve(identity);
+        } catch (error) { reject(error); }
+      });
+    });
+    request.on('timeout', () => request.destroy(new Error('桌面服务管理通道响应超时。')));
+    request.on('error', reject);
+    request.end(details === undefined ? undefined : JSON.stringify(details));
+  });
+}

package/dist/src/service-doctor.mjs

@@ -1,63 +1,110 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import { readRecord } from './service-lifecycle.mjs';
-import { inspectSkill } from './skill-install.mjs';
-import { readManagedEnvironment } from './platform/windows/user-environment.mjs';
-import { managedAppServerUrl } from './managed-app-server.mjs';
-
-export async function doctor({ paths, host, service, skillTarget }) {
-  const checks = [];
-  const add = (id, status, message) => checks.push({ id, status, message });
-  const check = async (id, task) => {
-    try { await task(); } catch (error) { add(id, 'error', error.message); }
-  };
-  await check('installation', async () => {
-    const record = readRecord(path.join(paths.serviceRoot, 'installation.json'));
-    if (!record || !fs.existsSync(path.join(paths.serviceRoot, 'dist/bin/codex-remote.mjs'))) throw Error('尚未完整部署服务，请重新安装 Code Relax。');
-    if (!record.nodeExecutable || !fs.existsSync(record.nodeExecutable)) throw Error('记录的 Node 已失效，请用可用的 Node 重新安装 Code Relax。');
-    add('installation', 'ok', `服务 ${record.version}；Node：${record.nodeExecutable}`);
-  });
-  let sharedUrl;
-  await check('shared-service', async () => {
-    sharedUrl = await host.sharedServiceUrl();
-    add('shared-service', 'ok', sharedUrl ? '完整控制连接可用。' : '当前使用基础控制。');
-  });
-  await check('desktop', async () => {
-    await host.desktopEnvironment(readRecord(path.join(paths.stateRoot, 'bridge-startup-context.json')), sharedUrl);
-    add('desktop', 'ok', 'Desktop 来源上下文和工具管道已定位；实际任务操作尚未验证。');
-  });
-  await check('network', async () => {
-    const address = await host.lanAddress();
-    if (!address) throw Error('未找到局域网 IPv4；请连接受信任的 Wi-Fi 或有线网络。');
-    add('network', 'ok', `局域网地址：${address}`);
-  });
-  await check('service', async () => {
-    const state = await service.status();
-    add('service', state.running ? 'ok' : 'warning', state.running
-      ? `本机服务正常：${state.mode}，端口 ${state.port}` : '服务未就绪；安装后执行 relax start。');
-    if (state.running) add('managed-app-server', state.managedAppServer?.state === 'ready' ? 'ok' : 'error',
-      state.managedAppServer?.state === 'ready' ? '受管 app-server 已就绪。'
-        : state.managedAppServer?.error || '受管 app-server 尚未就绪。');
-    if (state.managedAppServer?.updatePending) add('managed-app-server-update', 'warning',
-      'Codex Desktop 已提供新版 CLI；当前 app-server 会继续完成任务，并在下次进程自然重启或重新登录 Windows 后采用新版。');
-  });
-  await check('desktop-environment', async () => {
-    const environment = await readManagedEnvironment();
-    if (environment.forceCliUser === '1' || environment.forceCliMachine === '1') {
-      add('desktop-environment', 'error', 'CODEX_APP_SERVER_FORCE_CLI=1 会阻止 Desktop 使用受管 app-server。');
-    } else if (environment.userValue === managedAppServerUrl) {
-      add('desktop-environment', 'ok', `Desktop 后续启动地址：${managedAppServerUrl}`);
-    } else {
-      add('desktop-environment', 'warning', environment.userValue
-        ? `用户配置了其他 app-server 地址：${environment.userValue}`
-        : '尚未配置 Desktop 后续启动地址；请重新执行 setup。');
-    }
-  });
-  await check('skill', async () => {
-    const state = inspectSkill(skillTarget);
-    add('skill', state.managed ? 'ok' : 'warning', state.managed ? '本包管理的 Skill 已安装。'
-      : state.installed ? '存在同名自定义 Skill，本包不会覆盖。' : '可执行 relax skill-install 安装 Skill。');
-  });
-  add('firewall', 'warning', '手机连通性未验证。首次启动请允许记录的 Node 在受信任的专用网络通信；若曾拒绝，可在 Windows 安全中心的防火墙“允许应用通过防火墙”中检查该 Node。不要关闭整个防火墙。');
-  return { ready: !checks.some(item => item.status === 'error'), lanAccess: 'unverified', checks };
-}
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { readRecord } from './service-lifecycle.mjs';
+import { inspectSkill } from './skill-install.mjs';
+import { recoveryStatus } from './shared-recovery.mjs';
+
+export async function doctor({ paths, host, service, skillTarget, ensureAutostart, diagnostics = false }) {
+  const checks = [];
+  let installedVersion;
+  let kernelUpdate = null;
+  let desktopRecovery = null;
+  let serviceState = null;
+  const add = (id, status, message) => checks.push({ id, status, message });
+  const check = async (id, task) => {
+    try { await task(); } catch (error) { add(id, 'error', error.message); }
+  };
+  await check('installation', async () => {
+    const record = readRecord(path.join(paths.serviceRoot, 'installation.json'));
+    if (!record || !fs.existsSync(path.join(paths.serviceRoot, 'dist/bin/codex-remote.mjs'))) throw Error('尚未完整部署服务，请重新安装 Code Relax。');
+    if (!record.nodeExecutable || !fs.existsSync(record.nodeExecutable)) throw Error('记录的 Node 已失效，请用可用的 Node 重新安装 Code Relax。');
+    installedVersion = record.version;
+    add('installation', 'ok', `已安装版本：${record.version}；Node：${record.nodeExecutable}`);
+  });
+  await check('bridge-runtime', async () => {
+    await host.bridgeEnvironment();
+    add('bridge-runtime', 'ok', '桌面服务启动环境正常。');
+  });
+  await check('network', async () => {
+    const address = await host.lanAddress();
+    if (!address) { add('network', 'warning', '未连接局域网；需要局域网连接时，请接入 Wi-Fi 或有线网络。'); return; }
+    add('network', 'ok', `局域网地址：${address}`);
+  });
+  await check('autostart', async () => {
+    const state = await ensureAutostart();
+    add('autostart', 'ok', `当前用户登录自启：${state.repaired ? '已自动恢复' : '已启用'}。`);
+  });
+  await check('service', async () => {
+    const state = await service.status();
+    serviceState = state;
+    add('service', state.running ? 'ok' : 'error', state.running
+      ? `本机服务正常：${state.mode}，端口 ${state.port}，运行版本：${state.version || '未知'}` : '服务未就绪；安装后执行 relax start。');
+    if (state.running && installedVersion && state.version !== installedVersion) add('service-version', 'warning', state.version
+      ? `已安装版本 ${installedVersion}，但当前运行版本为 ${state.version}；请重新执行安装或重启工作站服务。`
+      : `已安装版本 ${installedVersion}，但当前运行的桌面服务未报告版本，可能仍是旧进程；请重新执行安装或重启桌面服务。`);
+    const currentVersion = state.managedAppServer?.version || null;
+    const selectedVersion = state.managedAppServer?.selectedVersion || null;
+    if (state.managedAppServer) kernelUpdate = { pending: state.managedAppServer.updatePending === true,
+      currentVersion, selectedVersion,
+      command: state.managedAppServer.updatePending ? 'relax kernel-restart --confirm' : null };
+    if (state.running) add('managed-app-server', state.managedAppServer?.state === 'ready' ? 'ok' : 'error',
+      state.managedAppServer?.state === 'ready' ? `Codex 内核已就绪：版本 ${currentVersion || '未知'}。`
+        : `${state.managedAppServer?.error || 'Codex 内核尚未就绪。'} 请执行 relax setup 修复；若提示未安装或未登录 Codex，请先完成安装和登录。`);
+    if (state.managedAppServer?.updatePending) {
+      const versionDetail = currentVersion && selectedVersion && currentVersion === selectedVersion
+        ? `内核版本号未变（${currentVersion}），重启后将使用更新后的安装文件`
+        : `当前内核 ${currentVersion || '未知'}，待应用 ${selectedVersion || '未知'}`;
+      add('managed-app-server-update', 'warning',
+        `Codex 更新待应用：${versionDetail}；执行 relax kernel-restart --confirm 应用更新。`);
+    }
+    if (state.managedAppServer?.launcherRestartRequired) add('managed-app-server-launcher', 'warning',
+      '工作站更新尚未完全生效，请执行 relax setup。');
+  });
+  if (diagnostics) {
+    try { desktopRecovery = await recoveryStatus(paths.stateRoot); }
+    catch (error) { desktopRecovery = { status: 'unknown', error: error.message }; }
+  }
+  await check('skill', async () => {
+    const state = inspectSkill(skillTarget);
+    add('skill', state.managed ? 'ok' : 'warning', state.managed ? '本包管理的 Skill 已安装。'
+      : state.installed ? '存在同名自定义 Skill，本包不会覆盖。' : 'Skill 未安装；重新执行 relax setup。');
+  });
+  return { ready: !checks.some(item => item.status === 'error'), kernelUpdate, checks, ...(diagnostics ? { desktopRecovery, diagnostics: {
+    collectedAt: new Date().toISOString(), platform: process.platform, arch: process.arch, osRelease: os.release(),
+    nodeVersion: process.version, nodeExecutable: process.execPath, serviceRoot: paths.serviceRoot,
+    servicePid: serviceState?.pid || null, port: serviceState?.port || null, serviceVersion: serviceState?.version || null,
+  } } : {}) };
+}
+
+export function formatDoctorOutput(result, detail = false) {
+  const labels = { installation: '安装文件', 'bridge-runtime': '运行环境', network: '局域网',
+    autostart: '登录自启动', service: '工作站服务', 'managed-app-server': 'Codex 内核',
+    'service-version': '服务版本', 'managed-app-server-update': 'Codex 更新',
+    'managed-app-server-launcher': '工作站更新', skill: 'Codex Skill' };
+  const byId = id => result.checks.find(item => item.id === id);
+  const summary = (id, success) => {
+    const item = byId(id);
+    return `${labels[id]}：${!item ? '未检查（工作站服务尚未启动）' : item.status === 'ok' ? success : '异常，见下方处理方法'}`;
+  };
+  const issues = result.checks.filter(item => item.status !== 'ok');
+  const lines = [result.ready ? '工作站检查通过。' : '工作站检查发现问题。',
+    summary('installation', '完整'), summary('service', '正在运行'), summary('managed-app-server', '已就绪')];
+  if (issues.length) lines.push('', '需要处理或留意：', ...issues.map(item => `- ${labels[item.id] || item.id}：${item.message}`));
+  if (detail) {
+    const info = result.diagnostics || {};
+    lines.unshift('Code Relax 诊断报告（供客服或技术人员排查）', `采集时间：${info.collectedAt || '未知'}`,
+      `系统：${info.platform || process.platform} ${info.arch || process.arch} ${info.osRelease || ''}`,
+      `Node：${info.nodeVersion || process.version}；${info.nodeExecutable || process.execPath}`,
+      `服务目录：${info.serviceRoot || '未知'}`, `服务进程：${info.servicePid || '未运行'}；端口：${info.port || '未知'}`, '');
+    lines.push('', '检查详情：', ...result.checks.filter(item => item.status === 'ok').map(item => `- ${labels[item.id] || item.id}：${item.message}`));
+    const recovery = result.desktopRecovery;
+    if (recovery && !['none', 'unsupported'].includes(recovery.status)) {
+      const status = { failed: '未完成', completed: '已完成', succeeded: '已完成', running: '进行中', unknown: '无法读取' }[recovery.status] || recovery.status;
+      lines.push('', `Desktop 接入排障记录（仅用于排查上次接入，不代表当前服务状态）：上次 Codex Desktop 接入${status}。`);
+      if (recovery.error) lines.push(`记录原因：${recovery.error}`);
+    }
+  }
+  lines.push('', result.ready ? '添加手机：运行 relax pair 生成配对二维码。' : '按上述方法处理后，再运行 relax doctor。');
+  return lines.join('\n');
+}

package/dist/src/service-health.mjs

@@ -1,33 +1,33 @@
-import WebSocket from 'ws';
-
-// Use the same authenticated LAN protocol as mobile clients; never replay requests.
-export function serviceHealth(session) {
-  if (!session) return Promise.resolve(null);
-  return new Promise((resolve, reject) => {
-    const token = new URL(session.accessUrl).searchParams.get('token');
-    const socket = new WebSocket(`ws://127.0.0.1:${session.port}/api/socket`);
-    let done = false;
-    const finish = (error, value = null) => {
-      if (done) return;
-      done = true;
-      clearTimeout(timer);
-      socket.terminate();
-      if (error) reject(error); else resolve(value);
-    };
-    const timer = setTimeout(() => finish(new Error('Bridge 健康检查超时。')), 6000);
-    socket.on('open', () => socket.send(JSON.stringify({ type: 'auth', token })));
-    socket.on('message', data => {
-      try {
-        const message = JSON.parse(data.toString());
-        if (message.type === 'ready') {
-          socket.send(JSON.stringify({ type: 'request', id: 1, method: 'GET', path: '/api/health' }));
-        } else if (message.type === 'response' && message.id === 1) {
-          finish(null, message.status === 200 ? message.body : null);
-        }
-      } catch (error) { finish(error); }
-    });
-    socket.on('error', error => finish(error.code === 'ECONNREFUSED' ? null : error));
-    socket.on('close', code => finish(new Error(code === 1008
-      ? 'Bridge 健康检查鉴权失败。' : 'Bridge 健康检查连接已断开。')));
-  });
-}
+import WebSocket from 'ws';
+
+// Use the same authenticated LAN protocol as mobile clients; never replay requests.
+export function serviceHealth(session) {
+  if (!session) return Promise.resolve(null);
+  return new Promise((resolve, reject) => {
+    const token = new URL(session.accessUrl).searchParams.get('token');
+    const socket = new WebSocket(`ws://127.0.0.1:${session.port}/api/socket`);
+    let done = false;
+    const finish = (error, value = null) => {
+      if (done) return;
+      done = true;
+      clearTimeout(timer);
+      socket.terminate();
+      if (error) reject(error); else resolve(value);
+    };
+    const timer = setTimeout(() => finish(new Error('桌面服务健康检查超时。')), 6000);
+    socket.on('open', () => socket.send(JSON.stringify({ type: 'auth', token })));
+    socket.on('message', data => {
+      try {
+        const message = JSON.parse(data.toString());
+        if (message.type === 'ready') {
+          socket.send(JSON.stringify({ type: 'request', id: 1, method: 'GET', path: '/api/health' }));
+        } else if (message.type === 'response' && message.id === 1) {
+          finish(null, message.status === 200 ? message.body : null);
+        }
+      } catch (error) { finish(error); }
+    });
+    socket.on('error', error => finish(error.code === 'ECONNREFUSED' ? null : error));
+    socket.on('close', code => finish(new Error(code === 1008
+      ? '桌面服务健康检查鉴权失败。' : '桌面服务健康检查连接已断开。')));
+  });
+}

package/dist/src/service-install.mjs

@@ -20,10 +20,11 @@ export function packageRoot(from) {
 export async function installService(source, target, executable, stateRoot, hooks = {}) {
   assertPlainPath(target);
   if (!fs.existsSync(path.join(source, 'dist/bin/codex-remote.mjs'))) throw new Error('缺少发布构建；源码目录请先执行 npm run build。');
+  const build = readRecord(path.join(source, 'dist/build-platform.json'));
+  if (build?.platform !== process.platform || build?.arch !== process.arch)
+    throw new Error('构建产物与本机系统或 CPU 不匹配，请在目标工作站安装依赖并重新构建。');
   if (!fs.existsSync(path.join(source, 'node_modules'))) throw new Error('缺少包依赖，请重新安装完整 npm 包。');
   const parent = path.dirname(target);
-  const legacyUploadsRoots = readRecord(path.join(target, 'installation.json'))?.legacyUploadsRoots || [];
-  if (fs.existsSync(path.join(source, 'src/server.mjs'))) legacyUploadsRoots.push(path.join(source, 'uploads'));
   fs.mkdirSync(parent, { recursive: true });
   const stage = path.join(parent, `service-stage-${randomUUID()}`);
   const backup = path.join(parent, `service-backup-${randomUUID()}`);
@@ -35,7 +36,6 @@ export async function installService(source, target, executable, stateRoot, hook
     await exec(executable, [path.join(stage, 'dist/bin/codex-remote.mjs'), '--help'], { windowsHide: true });
     await exec(executable, ['-e', 'const r=require("node:module").createRequire(process.argv[1]); r("sharp"); r("qrcode"); r("ws"); r("node-datachannel");', path.join(stage, 'package.json')], { windowsHide: true });
     writeRecord(path.join(stage, 'installation.json'), { installedAt: new Date().toISOString(), source, nodeExecutable: executable, stateRoot,
-      legacyUploadsRoots: [...new Set(legacyUploadsRoots)],
       version: readRecord(path.join(source, 'package.json')).version });
     const previous = fs.existsSync(target);
     let previousMoved = false, activated = false;
@@ -67,7 +67,7 @@ export async function installService(source, target, executable, stateRoot, hook
   }
 }
 
-export async function uninstallService({ serviceRoot, stateRoot, uploadsRoot, credentialsRoot }, service, beforeRemove = async () => {}) {
+export async function uninstallService({ serviceRoot, stateRoot, uploadsRoot, credentialsRoot }, service, beforeRemove = async () => {}) {
   const target = path.resolve(serviceRoot);
   assertPlainPath(target);
   if (path.basename(target) !== 'service' || path.basename(path.dirname(target)) !== 'CodexRemote') throw new Error('拒绝删除未识别的服务目录。');
@@ -76,11 +76,11 @@ export async function uninstallService({ serviceRoot, stateRoot, uploadsRoot, cr
     const relative = path.relative(target, path.resolve(data));
     if (!relative || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative))) throw new Error('服务目录包含用户数据，拒绝删除。');
   }
-  if (!fs.existsSync(target)) {
-    await service.stop();
-    await beforeRemove();
-    return { removed: false, serviceRoot: target, preserved };
-  }
+  if (!fs.existsSync(target)) {
+    await service.stop();
+    await beforeRemove();
+    return { removed: false, serviceRoot: target, preserved };
+  }
   const pkg = readRecord(path.join(target, 'package.json'));
   const record = readRecord(path.join(target, 'installation.json'));
   if (pkg?.name !== '@walkhi/code-relax' || !record?.installedAt || !record?.nodeExecutable) throw new Error('缺少有效安装记录，未删除服务目录。');

package/dist/src/service-lifecycle.mjs

@@ -1,6 +1,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
-import { startBackground, processAlive } from './background-process.mjs';
+import { startBackground, processAlive } from './background-process.mjs';
 import { randomBytes, randomUUID } from 'node:crypto';
 import { setTimeout as delay } from 'node:timers/promises';
 import { fileURLToPath } from 'node:url';
@@ -23,12 +23,11 @@ export function lifecycle({ stateRoot, host }) {
   fs.mkdirSync(stateRoot, { recursive: true });
   const sessionPath = path.join(stateRoot, 'bridge-session.json');
   const configPath = path.join(stateRoot, 'bridge-config.json');
-  const contextPath = path.join(stateRoot, 'bridge-startup-context.json');
   const scriptPath = fileURLToPath(new URL('./server.mjs', import.meta.url));
 
   async function alive(session) {
     if (!session?.controlPort || !session.instanceId || !session.controlSecret) {
-      if (await health(session)) throw new Error('当前为旧版 Bridge，请先使用旧版停止入口结束服务，再启动新版。');
+      if (await health(session)) throw new Error('当前为旧版桌面服务，请先使用旧版停止入口结束服务，再启动新版。');
       return false;
     }
     try { await controlRequest(session); return true; }
@@ -36,7 +35,7 @@ export function lifecycle({ stateRoot, host }) {
   }
   async function stop() {
     const session = readRecord(sessionPath);
-    if (!await alive(session)) return { stopped: true, message: 'Bridge 已停止。' };
+    if (!await alive(session)) return { stopped: true, message: '桌面服务已停止。' };
     await controlRequest(session, 'POST');
     const deadline = Date.now() + 10000;
     while (true) {
@@ -46,48 +45,51 @@ export function lifecycle({ stateRoot, host }) {
         // Verify refusal on the next connection; never resend the shutdown request.
         if (error.code !== 'ECONNRESET') throw error;
       }
-      if (Date.now() > deadline) throw new Error('Bridge 未在 10 秒内退出；未强杀进程。');
+      if (Date.now() > deadline) throw new Error('桌面服务未在 10 秒内退出；未强杀进程。');
       await delay(100);
     }
-    return { stopped: true, message: 'Bridge 已正常关闭。' };
+    return { stopped: true, message: '桌面服务已正常关闭。' };
   }
   async function status() {
     const session = readRecord(sessionPath);
     const running = await alive(session);
-    const result = running ? await health(session) : null;
-    return { running: running && result?.status === 'ok', processRunning: running, pid: session?.pid,
-      port: session?.port, mode: result?.transportMode, execution: result?.execution,
-      managedAppServer: result?.managedAppServer, desktop: result?.desktop,
-      desktopRestartRecommended: result?.desktopRestartRecommended === true,
-      resident: result?.resident === true };
+    const result = running ? await health(session) : null;
+    return { running: running && result?.status === 'ok', processRunning: running, pid: session?.pid,
+      port: session?.port, mode: result?.transportMode, version: result?.version, execution: result?.execution,
+      managedAppServer: result?.managedAppServer, desktop: result?.desktop,
+      desktopRestartRecommended: result?.desktopRestartRecommended === true,
+      resident: result?.resident === true };
   }
   async function pair() {
     const session = readRecord(sessionPath);
     const connection = await alive(session) ? await health(session) : null;
     if (connection?.status !== 'ok' || !session.lan) {
-      throw new Error('没有健康的局域网服务，请先执行 relax start。');
+      throw new Error('没有健康的局域网服务，请先执行 relax start。');
     }
     const address = await host.lanAddress();
     const url = new URL(session.accessUrl);
-    url.hostname = address || '127.0.0.1';
+    url.hostname = address || '127.0.0.1';
     session.accessUrl = url.href;
     writeRecord(sessionPath, session);
-    return { pid: session.pid, port: session.port, transportMode: connection.transportMode,
-      execution: connection.execution, managedAppServer: connection.managedAppServer, desktop: connection.desktop,
-      desktopRestartRecommended: connection.desktopRestartRecommended === true, accessUrl: session.accessUrl,
-      qrPath: path.join(stateRoot, 'connection-qr.png') };
+    return { pid: session.pid, port: session.port, version: connection.version, transportMode: connection.transportMode,
+      execution: connection.execution, managedAppServer: connection.managedAppServer, desktop: connection.desktop,
+      desktopRestartRecommended: connection.desktopRestartRecommended === true, accessUrl: session.accessUrl,
+      qrPath: path.join(stateRoot, 'connection-qr.png') };
   }
-  async function start() {
-    let session = readRecord(sessionPath);
-    if (await alive(session)) {
+  async function restartManagedAppServer(confirmed = false) {
+    const session = readRecord(sessionPath);
+    if (!await alive(session)) throw new Error('桌面服务尚未运行，无法迁移 Codex 内核。');
+    const action = confirmed ? 'restart-managed-app-server-confirmed' : 'restart-managed-app-server';
+    return controlRequest(session, 'POST', action);
+  }
+  async function startBridge() {
+    let session = readRecord(sessionPath);
+    if (await alive(session)) {
       const result = await health(session);
-      if (session.scriptPath === scriptPath && session.lan && result?.status === 'ok' && result.resident) {
-        const context = readRecord(contextPath) || {};
-        const sourceThreadId = process.env.CODEX_THREAD_ID || process.env.CODEX_SESSION_ID || context.sourceThreadId;
-        writeRecord(contextPath, { sourceThreadId });
-        await controlRequest(session, 'POST', 'refresh-execution');
-        return pair();
-      }
+      if (session.scriptPath === scriptPath && session.lan && result?.status === 'ok' && result.resident) {
+        await controlRequest(session, 'POST', 'refresh-execution');
+        return pair();
+      }
       await stop();
     }
     let config = readRecord(configPath);
@@ -96,25 +98,24 @@ export function lifecycle({ stateRoot, host }) {
     if (!Number.isInteger(config.port) || config.port < 1 || config.port > 65535 || !/^[A-Za-z0-9_-]{20,}$/.test(config.token)) {
       throw new Error('bridge-config.json 中端口或 Token 无效；不会自动重置凭据。');
     }
-    const address = await host.lanAddress() || '127.0.0.1';
-    const { executable, environment } = await host.desktopEnvironment(readRecord(contextPath), '');
+    const address = await host.lanAddress() || '127.0.0.1';
+    const { executable, environment } = await host.bridgeEnvironment();
     writeRecord(configPath, config);
-    writeRecord(contextPath, { sourceThreadId: environment.CODEX_THREAD_ID || environment.CODEX_SESSION_ID });
     const instanceId = randomUUID();
     const controlSecret = randomBytes(32).toString('base64url');
     const readyPath = path.join(stateRoot, `bridge-ready-${instanceId}.json`);
-    const pid = await startBackground(executable, [scriptPath, '--lan', '--port', String(config.port), '--token', config.token],
-      { ...environment, CODEX_REMOTE_INSTANCE: instanceId, CODEX_REMOTE_CONTROL_SECRET: controlSecret,
-        CODEX_REMOTE_READY_PATH: readyPath }, [path.join(stateRoot, 'bridge.stdout.log'), path.join(stateRoot, 'bridge.stderr.log')]);
+    const pid = await startBackground(executable, [scriptPath, '--lan', '--port', String(config.port), '--token', config.token],
+      { ...environment, CODEX_REMOTE_INSTANCE: instanceId, CODEX_REMOTE_CONTROL_SECRET: controlSecret,
+        CODEX_REMOTE_READY_PATH: readyPath }, [path.join(stateRoot, 'bridge.stdout.log'), path.join(stateRoot, 'bridge.stderr.log')]);
     try {
       const deadline = Date.now() + 10000;
       let ready;
       while (!(ready = readRecord(readyPath))) {
-        if (!processAlive(pid)) throw new Error('Bridge 启动失败，请查看 bridge.stderr.log。');
-        if (Date.now() > deadline) throw new Error('Bridge 未在 10 秒内就绪。');
+        if (!processAlive(pid)) throw new Error('桌面服务启动失败，请查看 bridge.stderr.log。');
+        if (Date.now() > deadline) throw new Error('桌面服务未在 10 秒内就绪。');
         await delay(100);
       }
-      if (ready.instanceId !== instanceId || ready.pid !== pid) throw new Error('Bridge 启动实例不匹配。');
+      if (ready.instanceId !== instanceId || ready.pid !== pid) throw new Error('桌面服务启动实例不匹配。');
       session = { ...ready, controlSecret, executablePath: executable, scriptPath, port: config.port,
         lan: true, appServer: false, accessUrl: `http://${address}:${config.port}/?token=${config.token}`,
         startedAt: new Date().toISOString() };
@@ -122,9 +123,16 @@ export function lifecycle({ stateRoot, host }) {
       writeRecord(sessionPath, session);
       return await pair();
     } catch (error) {
-      if (processAlive(pid)) process.kill(pid);
+      if (processAlive(pid)) process.kill(pid);
       throw error;
     } finally { fs.rmSync(readyPath, { force: true }); }
   }
-  return { start, pair, status, stop };
+  async function start() {
+    const result = await startBridge();
+    if (fs.existsSync(path.join(stateRoot, 'self-relay-config.json'))) {
+      await controlRequest(readRecord(sessionPath), 'POST', 'relay-start');
+    }
+    return result;
+  }
+  return { start, pair, status, stop, restartManagedAppServer };
 }