@walkhi/code-relax 0.1.0-beta.30 → 0.1.0-beta.31

package/dist/bin/codex-remote.mjs

@@ -1,367 +1,374 @@
-#!/usr/bin/env node
-import { phonePairingSteps, desktopSetupSteps, pairingDisplayText } from '../src/onboarding.mjs';
-import { lifecycle, readRecord, writeRecord } from '../src/service-lifecycle.mjs';
-import { runtimePaths } from '../src/platform/runtime-paths.mjs';
-import * as host from '../src/platform/service-host.mjs';
-import { installService, uninstallService, packageRoot } from '../src/service-install.mjs';
-import { installSkill, removeSkill, inspectSkill } from '../src/skill-install.mjs';
-import { doctor, formatDoctorOutput } from '../src/service-doctor.mjs';
-import { launchDesktop } from '../src/desktop-launcher.mjs';
-import { desktopHost, removeDesktopShortcut, residentStartup, resolveStateRoot } from '../src/platform/desktop-host.mjs';
-import { selfRelay } from '../src/self-relay/lifecycle.mjs';
-import { fileURLToPath } from 'node:url';
-import path from 'node:path';
-import { executableKey } from '../src/platform/path-identity.mjs';
-import fs from 'node:fs';
-import { spawn } from 'node:child_process';
-import { setTimeout as delay } from 'node:timers/promises';
-import { requestRecovery, recoveryWarning } from '../src/shared-recovery.mjs';
-import { configureManagedEnvironment, clearManagedEnvironment } from '../src/platform/user-environment.mjs';
-import { resolveCodexRuntime } from '../src/platform/codex-runtime.mjs';
-import { controlRequest } from '../src/service-control.mjs';
-import { processAlive } from '../src/background-process.mjs';
-import { prepareNativePackage } from '../src/platform/native-package.mjs';
-import { managedAppServerUrl } from '../src/managed-app-server.mjs';
-import { readDotsTasks } from '../src/dots-task-catalog.mjs';
-import { installDesktopHelper, desktopHelperStatus, removeDesktopHelper } from '../src/platform/windows/desktop-helper.mjs';
-
-const help = `Code Relax（Windows / macOS）
-用法：relax <命令>
-常用指令：
-  start   启动或复用桌面服务和 Codex 内核，并恢复已配置的 Code Relax 中继
-  pair    启动或复用桌面服务，并打开一次性配对二维码
-  pair --expires <带时区的截止时间> 创建本工作站可重复使用的长期二维码
-  pair-list 查看本工作站长期邀请的 ID 和截止时间
-  pair-revoke <邀请ID> 废止本工作站指定长期邀请
-  dots-tasks 读取当前 ChatGPT 账号的 Dots 委派任务与最近轮次状态
-维护指令：
-  setup   部署并启动桌面服务、Codex 内核和登录自启动；安全配置 Desktop 后续接入
-  setup --desktop-helper （Windows）同时安装受保护的桌面操作辅助服务，首次需要工作站 UAC 授权
-  desktop-helper-install （Windows）单独安装桌面操作辅助服务，保持现有桌面服务和 Codex 内核
-  desktop-helper-status （Windows）查看桌面操作辅助服务状态
-  desktop-helper-remove （Windows）移除桌面操作辅助服务，需要工作站 UAC 授权
-  doctor  简单检查工作站是否正常
-  diag 输出详细诊断报告，供客服或技术人员排查
-  kernel-restart --confirm 重启 Codex 内核并启用已选更新；等待新内核就绪
-  desktop-recover --confirm 重新打开 Desktop 并接入 Codex 内核；不强制重启已有内核
-  uninstall 停止并移除固定目录服务和本包 Skill，清理自有 Desktop 环境变量，保留其他配置与附件
-默认监听 0.0.0.0，移动端与电脑需在同一受信任局域网。
---json 仅供安装脚本等程序调用。`;
-
-function currentNodeExecutable() {
-  const link = process.env.NVM_SYMLINK && path.join(process.env.NVM_SYMLINK, 'node.exe');
-  if (link && fs.existsSync(link)) {
-    try {
-      if (fs.realpathSync(link).toLowerCase() === fs.realpathSync(process.execPath).toLowerCase()) return link;
-    } catch {}
-  }
-  return process.execPath;
-}
-
-async function main() {
-  const [command, ...flags] = process.argv.slice(2);
-  if (!command || command === '--help' || command === '-h') {
-    console.log(help);
-    return;
-  }
-  const options = flags.filter(flag => flag !== '--json');
-  const longPair = command === 'pair' && options.length === 2 && options[0] === '--expires';
-  const revokeInvite = command === 'pair-revoke' && options.length === 1 && /^[\w-]{16,128}$/.test(options[0]);
-  if (!['kernel-restart', 'desktop-recover', 'setup', 'doctor', 'diag', 'uninstall', 'start', 'pair', 'pair-list', 'pair-revoke', 'dots-tasks', 'desktop-helper-install', 'desktop-helper-status', 'desktop-helper-remove'].includes(command)
-    || (!longPair && !revokeInvite && (command === 'pair-revoke' || options.some(flag => !((['kernel-restart', 'desktop-recover'].includes(command) && flag === '--confirm') || (command === 'setup' && flag === '--desktop-helper')))))) {
-    throw new Error('无效命令或参数。使用 --help 查看用法。');
-  }
-  const inviteExpires = longPair ? Date.parse(options[1]) : undefined;
-  if (longPair && (!/(Z|[+-]\d{2}:\d{2})$/.test(options[1]) || !Number.isSafeInteger(inviteExpires) || inviteExpires <= Date.now())) {
-    throw new Error('截止时间必须在未来且含时区，例如 2026-11-01T00:00:00+08:00。');
-  }
-  if (!['win32', 'darwin'].includes(process.platform)) throw new Error('工作站目前支持 Windows 和 macOS。');
-  if (process.platform !== 'win32' && (command.startsWith('desktop-helper-') || options.includes('--desktop-helper')))
-    throw new Error('Mac 版不提供远程桌面画面、鼠标和键盘控制。');
-  if (command === 'desktop-recover' && desktopHost.desktopIntegration === false)
-    throw new Error('Mac 的 Codex Desktop 自动接入尚未支持。');
-  const json = flags.includes('--json');
-  if (['desktop-helper-install', 'desktop-helper-status', 'desktop-helper-remove'].includes(command)) {
-    const result = command === 'desktop-helper-install' ? await installDesktopHelper() : command === 'desktop-helper-remove' ? await removeDesktopHelper() : await desktopHelperStatus();
-    console.log(json ? JSON.stringify(result) : result.removed ? '桌面操作辅助服务已移除。' : result.running ? '桌面操作辅助服务已就绪，手机可按需获取画面并确认点击。' : '桌面操作辅助服务尚未就绪，请运行 relax desktop-helper-install。');
-    return;
-  }
-  if (command === 'dots-tasks') {
-    const result = await readDotsTasks(managedAppServerUrl);
-    const statuses = { completed: '完成', inProgress: '进行中', failed: '失败', interrupted: '已中断' };
-    console.log(json ? JSON.stringify(result) : result.tasks.length
-      ? result.tasks.map(task => `${task.title || task.id} — ${statuses[task.latestTurn?.status] || task.status || '暂无轮次'}\n${task.cwd || ''}`).join('\n\n')
-      : '当前账号没有未归档的 Dots 委派任务。');
-    return;
-  }
-  const paths = runtimePaths();
-  const { stateRoot, serviceRoot } = paths;
-  const installedEntry = path.join(serviceRoot, 'dist/bin/codex-remote.mjs');
-  const installationPath = path.join(serviceRoot, 'installation.json');
-  const [nodeMajor, nodeMinor] = process.versions.node.split('.').map(Number);
-  const currentNodeSupported = nodeMajor > 22 || (nodeMajor === 22 && nodeMinor >= 12);
-  const installed = executableKey(fileURLToPath(import.meta.url)) === executableKey(installedEntry);
-  const installation = readRecord(installationPath);
-  if (installation?.nodeExecutable && !fs.existsSync(installation.nodeExecutable) && currentNodeSupported
-    && ['start', 'pair', 'doctor'].includes(command)) {
-    writeRecord(installationPath, { ...installation, nodeExecutable: currentNodeExecutable() });
-  }
-  if (['kernel-restart', 'desktop-recover', 'start', 'pair', 'pair-list', 'pair-revoke'].includes(command) && !installed) {
-    if (!fs.existsSync(installedEntry)) throw new Error('尚未部署服务，请先执行 relax setup。');
-    const executable = readRecord(installationPath)?.nodeExecutable;
-    if (!executable || !fs.existsSync(executable)) throw new Error('安装时选用的 Node 不存在，请重新执行 relax setup。');
-    const child = spawn(executable, [installedEntry, command, ...flags], { stdio: 'inherit', windowsHide: true });
-    const code = await new Promise((resolve, reject) => { child.once('error', reject); child.once('exit', resolve); });
-    process.exitCode = code ?? 1;
-    return;
-  }
-  const service = lifecycle({ stateRoot, host });
-  const ensureAutostart = async () => {
-    const currentInstallation = readRecord(installationPath);
-    if (!currentInstallation?.nodeExecutable) throw new Error('请先执行 setup。');
-    const startup = { serviceRoot, nodeExecutable: currentInstallation.nodeExecutable };
-    const current = await residentStartup(startup, 'status');
-    if (current.enabled) return { ...current, repaired: false };
-    const result = await residentStartup(startup, 'enable');
-    return { ...result, repaired: true };
-  };
-  if (command === 'kernel-restart') {
-    if (!flags.includes('--confirm')) {
-      throw new Error('重启会立即结束当前 Codex 内核，正在运行的任务、待审批和未确认结果可能中断；恢复后不会自动重发。使用 --confirm 确认。');
-    }
-    const previous = await service.status();
-    if (!previous.running) throw new Error('桌面服务尚未运行，请先执行 relax start。');
-    await service.restartManagedAppServer(true);
-    const deadline = Date.now() + 60_000;
-    let current = await service.status();
-    while (current.managedAppServer?.restart?.status === 'running' && Date.now() < deadline) {
-      await delay(250);
-      current = await service.status();
-    }
-    if (current.managedAppServer?.restart?.status === 'failed') {
-      throw new Error(current.managedAppServer.restart.error || 'Codex 内核重启失败。');
-    }
-    if (!current.running || current.managedAppServer?.state !== 'ready'
-      || current.managedAppServer?.restart?.status !== 'completed') {
-      throw new Error('Codex 内核未在 60 秒内完成重启，请运行 relax doctor 查看状态。');
-    }
-    if (previous.managedAppServer?.updatePending && current.managedAppServer.updatePending) {
-      throw new Error('Codex 内核已重启，但更新仍未应用；请运行 relax doctor 查看状态。');
-    }
-    const result = { status: 'completed', message: previous.managedAppServer?.updatePending
-      ? 'Codex 内核已重启并应用更新。' : 'Codex 内核已重启。',
-      previousVersion: previous.managedAppServer?.version || null,
-      version: current.managedAppServer.version || null,
-      selectedVersion: current.managedAppServer.selectedVersion || null,
-      updateApplied: previous.managedAppServer?.updatePending === true,
-      updatePending: current.managedAppServer.updatePending === true,
-      pid: current.managedAppServer.pid || null,
-      executionReady: current.execution?.ready === true };
-    console.log(json ? JSON.stringify(result) : `${result.message}\n版本：${result.version || '未知'}\n执行状态：${result.executionReady ? '已就绪' : '正在恢复'}`);
-    return;
-  }
-  if (command === 'desktop-recover') {
-    if (!flags.includes('--confirm')) throw new Error(recoveryWarning + ' 使用 --confirm 确认。');
-    const result = await requestRecovery(stateRoot, { confirmed: true });
-    console.log(json ? JSON.stringify(result) : `${result.message || result.status}${result.error ? '\n' + result.error : ''}\n${result.operationId || ''}`.trim());
-    return;
-  }
-  if (command === 'pair-list' || command === 'pair-revoke') {
-    const result = await selfRelay(command === 'pair-list' ? 'invite-list' : 'invite-revoke', stateRoot,
-      command === 'pair-revoke' ? { id: options[0] } : undefined);
-    console.log(json ? JSON.stringify(result) : result.displayText);
-    return;
-  }
-  if (command === 'pair') {
-    await ensureAutostart();
-    let bridge = await service.status();
-    if (!bridge.running) {
-      await service.start();
-      bridge = await service.status();
-    }
-    if (!bridge.running) throw new Error('Code Relax 工作站服务未能启动。');
-    if (longPair) await selfRelay('relay-start', stateRoot);
-    const result = await selfRelay(longPair ? 'invite-create' : 'relay-pair', stateRoot, longPair ? { expires: inviteExpires } : undefined);
-    if (!json && result.qrPath) {
-      const viewer = spawn(process.platform === 'darwin' ? '/usr/bin/open' : 'explorer.exe', [result.qrPath], { detached: true, stdio: 'ignore', windowsHide: true });
-      viewer.once('error', error => console.error(`无法打开二维码：${error.message}`));
-      viewer.unref();
-    }
-    console.log(json ? JSON.stringify(result) : `配对二维码已生成。\n${result.displayText}\n二维码文件：${result.qrPath}`);
-    return;
-  }
-  if (command === 'doctor' || command === 'diag') {
-    const result = await doctor({ paths, host, service, ensureAutostart, diagnostics: command === 'diag' });
-    console.log(json ? JSON.stringify(result) : formatDoctorOutput(result, command === 'diag'));
-    if (!result.ready) process.exitCode = 1;
-    return;
-  }
-  if (command === 'uninstall') {
-    const desktopHelper = process.platform === 'win32' ? await removeDesktopHelper() : { removed: false, supported: false };
-    const skill = inspectSkill();
-    let environment;
-    const result = await uninstallService(paths, service, async () => {
-      environment = await clearManagedEnvironment(stateRoot);
-      const installation = readRecord(path.join(serviceRoot, 'installation.json'));
-      if (installation?.nodeExecutable) await removeDesktopShortcut({ serviceRoot, nodeExecutable: installation.nodeExecutable });
-      if (installation?.nodeExecutable) await residentStartup({ serviceRoot, nodeExecutable: installation.nodeExecutable }, 'disable');
-    });
-    result.environment = environment;
-    result.desktopHelper = desktopHelper;
-    result.skill = skill.managed ? removeSkill() : { removed: false, message: '未移除自定义或未安装的 Skill。' };
-    result.message = process.platform === 'darwin'
-      ? '固定目录服务已卸载；配置、附件、钥匙串凭据和可能仍在执行任务的 Codex 内核已保留。'
-      : environment?.preserved
-      ? '固定目录服务已卸载；检测到用户自定义的 CODEX_APP_SERVER_WS_URL，已保留。配置、附件和可能仍在执行任务的 app-server 也已保留；重启电脑可结束该进程。npm 命令入口可再用 npm uninstall -g @walkhi/code-relax 移除。'
-      : '固定目录服务已卸载；Code Relax 设置的 app-server 环境变量已清理，其他配置、附件和可能仍在执行任务的 app-server 已保留；重启电脑可结束该进程。npm 命令入口可再用 npm uninstall -g @walkhi/code-relax 移除。';
-    console.log(json ? JSON.stringify(result) : `${result.message}\n${result.skill.message}`);
-    return;
-  }
-  if (command === 'setup') {
-    prepareNativePackage(packageRoot(path.dirname(fileURLToPath(import.meta.url))));
-    const [major, minor] = process.versions.node.split('.').map(Number);
-    if (major < 22 || (major === 22 && minor < 12)) throw new Error('需要 Node >=22.12。');
-    const physicalStateRoot = await resolveStateRoot(stateRoot);
-    // Preserve the effective package view; never replace a newer file already in it.
-    for (const name of ['bridge-config.json', 'bridge-session.json', 'bridge-startup-context.json',
-      'self-relay-config.json', 'self-relay-session.json', 'lan-device-authorizations.json',
-      'managed-app-server.json', 'managed-environment.json', 'shared-recovery.json', 'shared-recovery.lock']) {
-      const source = path.join(stateRoot, name), target = path.join(physicalStateRoot, name);
-      if (fs.existsSync(source) && !fs.existsSync(target)) fs.copyFileSync(source, target, fs.constants.COPYFILE_EXCL);
-    }
-    const hadInstalledService = fs.existsSync(path.join(serviceRoot, 'installation.json'));
-    const previousInstallation = readRecord(path.join(serviceRoot, 'installation.json'));
-    if (previousInstallation?.nodeExecutable) await removeDesktopShortcut({ serviceRoot, nodeExecutable: previousInstallation.nodeExecutable });
-    const desktopBeforeSetup = desktopHost.desktopIntegration === false ? { running: false, desktop: null } : await desktopHost.inspect();
-    const runtime = await resolveCodexRuntime(physicalStateRoot, { refresh: true });
-    const desktopNeedsAttach = desktopBeforeSetup.running && !await host.sharedServiceUrl();
-    const previous = hadInstalledService ? await service.status() : { processRunning: false };
-    const legacyRelaySession = readRecord(path.join(stateRoot, 'self-relay-session.json'));
-    const previousRelay = legacyRelaySession ? await controlRequest(legacyRelaySession) : await selfRelay('relay-status', stateRoot);
-    const resumeAfterUpdate = previous.processRunning || previousRelay.running;
-    const executable = currentNodeExecutable();
-    const startInstalled = async () => {
-      const entry = path.join(serviceRoot, 'dist/bin/codex-remote.mjs');
-      const child = spawn(executable, [entry, 'start', '--json'], { windowsHide: true, stdio: ['ignore', 'ignore', 'pipe'] });
-      let errors = '';
-      child.stderr.on('data', chunk => { errors += chunk; });
-      const code = await new Promise((resolve, reject) => { child.once('error', reject); child.once('exit', resolve); });
-      if (code) {
-        try { await selfRelay('relay-stop', stateRoot); } catch {}
-        try { await service.stop(); } catch {}
-        throw new Error(errors.trim().replace(/^(?:Code Relax：)+/u, '') || '桌面服务启动失败');
-      }
-    };
-    let stoppedForUpdate = false;
-    const installed = await installService(packageRoot(path.dirname(fileURLToPath(import.meta.url))), serviceRoot, executable, physicalStateRoot, {
-      beforeActivate: async () => {
-        if (desktopNeedsAttach) await desktopHost.closeDesktop(desktopBeforeSetup.desktop);
-        stoppedForUpdate = resumeAfterUpdate;
-        if (previousRelay.running && legacyRelaySession) {
-          await controlRequest(legacyRelaySession, 'POST');
-          const deadline = Date.now() + 10000;
-          while (processAlive(legacyRelaySession.pid)) {
-            if (Date.now() >= deadline) throw new Error('旧中继进程未在 10 秒内退出。');
-            await delay(100);
-          }
-        } else if (previousRelay.running) await selfRelay('relay-stop', stateRoot);
-        if (previous.processRunning) await service.stop();
-      },
-      verifyActivation: async () => { await startInstalled(); },
-      restoreActivation: async () => { if (stoppedForUpdate) await startInstalled(); },
-    });
-    const autostart = await residentStartup(installed, 'enable');
-    const deadline = Date.now() + 35_000;
-    let bridge = await service.status();
-    while (bridge.running && !['ready', 'failed'].includes(bridge.managedAppServer?.state) && Date.now() < deadline) {
-      await delay(250);
-      bridge = await service.status();
-    }
-    if (!bridge.running || bridge.managedAppServer?.state !== 'ready') {
-      throw new Error(bridge.managedAppServer?.error || '桌面服务已安装，但 Codex 内核未就绪；未写入 Desktop 环境变量。');
-    }
-    const environment = desktopBeforeSetup.desktop
-      ? await configureManagedEnvironment(physicalStateRoot) : { configured: false, reason: desktopHost.desktopIntegration === false ? 'desktop-integration-unsupported' : 'desktop-not-installed' };
-    let managedAppServerMigrated = false;
-    const managedAppServerMigration = {
-      required: bridge.managedAppServer.launcherRestartRequired === true,
-      restarted: false,
-      previousPid: bridge.managedAppServer.pid || null,
-    };
-    let desktopRestarted = false;
-    let desktopRestartReason = null;
-    if (managedAppServerMigration.required) {
-      const desktopInfo = desktopHost.desktopIntegration === false ? { running: false } : await desktopHost.inspect();
-      const desktopAttached = desktopInfo.running
-        && (bridge.desktop?.attachedToManagedServer === true || Boolean(await host.sharedServiceUrl()));
-      if (desktopAttached) await desktopHost.closeDesktop(desktopInfo.desktop);
-      await service.restartManagedAppServer();
-      const migrationDeadline = Date.now() + 40_000;
-      do {
-        await delay(250);
-        bridge = await service.status();
-        if (bridge.managedAppServer?.restart?.status === 'failed') {
-          throw new Error(bridge.managedAppServer.restart.error || 'Codex 内核启动链迁移失败。');
-        }
-      } while (Date.now() < migrationDeadline && (!bridge.running || bridge.managedAppServer?.state !== 'ready' || bridge.managedAppServer.launcherRestartRequired));
-      if (!bridge.running || bridge.managedAppServer?.state !== 'ready' || bridge.managedAppServer.launcherRestartRequired) {
-        throw new Error('Codex 内核未在 40 秒内完成启动链迁移。');
-      }
-      managedAppServerMigrated = true;
-      managedAppServerMigration.restarted = true;
-      if (desktopAttached) {
-        await launchDesktop({ stateRoot: physicalStateRoot, host: desktopHost });
-        desktopRestarted = true;
-        desktopRestartReason = 'app-server-migration';
-        bridge = await service.status();
-      }
-    }
-    const skill = installSkill(path.join(serviceRoot, 'dist/skills/code-relax/SKILL.md'));
-    if (desktopNeedsAttach && !desktopRestarted) {
-      const currentDesktop = await desktopHost.inspect();
-      if (currentDesktop.running) await desktopHost.closeDesktop(currentDesktop.desktop);
-      await launchDesktop({ stateRoot: physicalStateRoot, host: desktopHost });
-      desktopRestarted = true;
-      desktopRestartReason = 'attach-managed-server';
-      bridge = await service.status();
-    }
-    installed.autostart = autostart;
-    installed.skill = skill;
-    installed.restarted = resumeAfterUpdate;
-    installed.environment = environment;
-    installed.managedAppServer = bridge.managedAppServer;
-    installed.codexRuntime = runtime;
-    installed.managedAppServerMigrated = managedAppServerMigrated;
-    installed.managedAppServerMigration = { ...managedAppServerMigration,
-      currentPid: bridge.managedAppServer.pid || null,
-      launcherRevision: bridge.managedAppServer.launcherRevision ?? null };
-    installed.desktopRestarted = desktopRestarted;
-    installed.desktopRestartReason = desktopRestartReason;
-    if (options.includes('--desktop-helper')) installed.desktopHelper = await installDesktopHelper();
-    const migrationText = managedAppServerMigrated ? 'Codex 内核已更新并重启；请检查安装前正在进行的任务。\n' : '';
-    const displayText = `Code Relax ${installed.version} 安装成功。\n${migrationText}${desktopSetupSteps.join('\n')}`;
-    console.log(json ? JSON.stringify({ ...installed, nextSteps: desktopSetupSteps, displayText }) : displayText);
-    return;
-  }
-  if (!json && command === 'start') console.log('正在检查电脑连接并准备桌面服务…');
-  await ensureAutostart();
-  const result = await service[command]();
-  const { accessUrl, qrPath: _legacyQrPath, ...metadata } = result;
-  let relay;
-  if (fs.existsSync(path.join(stateRoot, 'self-relay-config.json'))) relay = await selfRelay('relay-status', stateRoot);
-  const nextSteps = phonePairingSteps(metadata.transportMode, relay?.paired === true);
-  const displayText = pairingDisplayText(nextSteps);
-  const output = { ...metadata, ...(relay ? { relayConnected: relay.relayConnected,
-    paired: relay.paired, clientCount: relay.clientCount, ...(relay.qrPath ? { qrPath: relay.qrPath, expiresAt: relay.expiresAt } : {}) } : {}),
-    nextSteps, displayText, mode: 'lan', listenAddress: '0.0.0.0', address: new URL(accessUrl).host };
-  if (json) console.log(JSON.stringify(output));
-  else {
-    if (relay?.qrPath) console.log(`配对二维码：${relay.qrPath}`);
-    console.log(displayText);
-  }
-}
-
-main().catch(error => {
-  console.error(`Code Relax：${error.message}`);
-  process.exitCode = 1;
-});
+#!/usr/bin/env node
+import { phonePairingSteps, desktopSetupSteps, pairingDisplayText } from '../src/onboarding.mjs';
+import { lifecycle, readRecord, writeRecord } from '../src/service-lifecycle.mjs';
+import { runtimePaths } from '../src/platform/runtime-paths.mjs';
+import { openFile } from '../src/platform/file-opener.mjs';
+import * as host from '../src/platform/service-host.mjs';
+import { installService, uninstallService, packageRoot } from '../src/service-install.mjs';
+import { installSkill, removeSkill, inspectSkill } from '../src/skill-install.mjs';
+import { doctor, formatDoctorOutput } from '../src/service-doctor.mjs';
+import { launchDesktop } from '../src/desktop-launcher.mjs';
+import { desktopHost, removeDesktopShortcut, residentStartup, resolveStateRoot } from '../src/platform/desktop-host.mjs';
+import { selfRelay } from '../src/self-relay/lifecycle.mjs';
+import { fileURLToPath } from 'node:url';
+import path from 'node:path';
+import { executableKey } from '../src/platform/path-identity.mjs';
+import fs from 'node:fs';
+import { spawn } from 'node:child_process';
+import { setTimeout as delay } from 'node:timers/promises';
+import { requestRecovery, recoveryWarning } from '../src/shared-recovery.mjs';
+import { configureManagedEnvironment, clearManagedEnvironment } from '../src/platform/user-environment.mjs';
+import { resolveCodexRuntime } from '../src/platform/codex-runtime.mjs';
+import { controlRequest } from '../src/service-control.mjs';
+import { processAlive } from '../src/background-process.mjs';
+import { prepareNativePackage } from '../src/platform/native-package.mjs';
+import { managedAppServerUrl } from '../src/managed-app-server.mjs';
+import { readDotsTasks } from '../src/dots-task-catalog.mjs';
+import { installDesktopHelper, desktopHelperStatus, removeDesktopHelper } from '../src/platform/windows/desktop-helper.mjs';
+
+const help = `Code Relax（Windows / macOS / Linux）
+用法：relax <命令>
+常用指令：
+  start   启动或复用桌面服务和 Codex 内核，并恢复已配置的 Code Relax 中继
+  pair    启动或复用桌面服务，并打开一次性配对二维码
+  pair --expires <带时区的截止时间> 创建本工作站可重复使用的长期二维码
+  pair-list 查看本工作站长期邀请的 ID 和截止时间
+  pair-revoke <邀请ID> 废止本工作站指定长期邀请
+  devices 查看本工作站配对授权及最后连接时间
+  device-revoke <授权ID> --confirm 撤销指定配对授权
+  dots-tasks 读取当前 ChatGPT 账号的 Dots 委派任务与最近轮次状态
+维护指令：
+  setup   部署并启动桌面服务、Codex 内核和登录自启动；安全配置 Desktop 后续接入
+  setup --desktop-helper （Windows）同时安装受保护的桌面操作辅助服务，首次需要工作站 UAC 授权
+  desktop-helper-install （Windows）单独安装桌面操作辅助服务，保持现有桌面服务和 Codex 内核
+  desktop-helper-status （Windows）查看桌面操作辅助服务状态
+  desktop-helper-remove （Windows）移除桌面操作辅助服务，需要工作站 UAC 授权
+  doctor  简单检查工作站是否正常
+  diag 输出详细诊断报告，供客服或技术人员排查
+  kernel-restart --confirm 重启 Codex 内核并启用已选更新；等待新内核就绪
+  desktop-recover --confirm 重新打开 Desktop 并接入 Codex 内核；不强制重启已有内核
+  uninstall 停止并移除固定目录服务和本包 Skill，清理自有 Desktop 环境变量，保留其他配置与附件
+默认监听 0.0.0.0，移动端与电脑需在同一受信任局域网。
+--json 仅供安装脚本等程序调用。`;
+
+function currentNodeExecutable() {
+  const link = process.env.NVM_SYMLINK && path.join(process.env.NVM_SYMLINK, 'node.exe');
+  if (link && fs.existsSync(link)) {
+    try {
+      if (fs.realpathSync(link).toLowerCase() === fs.realpathSync(process.execPath).toLowerCase()) return link;
+    } catch {}
+  }
+  return process.execPath;
+}
+
+async function main() {
+  const [command, ...flags] = process.argv.slice(2);
+  if (!command || command === '--help' || command === '-h') {
+    console.log(help);
+    return;
+  }
+  const options = flags.filter(flag => flag !== '--json');
+  const longPair = command === 'pair' && options.length === 2 && options[0] === '--expires';
+  const revokeInvite = command === 'pair-revoke' && options.length === 1 && /^[\w-]{16,128}$/.test(options[0]);
+  const revokeDevice = command === 'device-revoke' && options.length === 2 && /^[\w-]{16,128}$/.test(options[0]) && options[1] === '--confirm';
+  if (!['kernel-restart', 'desktop-recover', 'setup', 'doctor', 'diag', 'uninstall', 'start', 'pair', 'pair-list', 'pair-revoke', 'devices', 'device-revoke', 'dots-tasks', 'desktop-helper-install', 'desktop-helper-status', 'desktop-helper-remove'].includes(command)
+    || (!longPair && !revokeInvite && !revokeDevice && (['pair-revoke', 'device-revoke'].includes(command) || options.some(flag => !((['kernel-restart', 'desktop-recover'].includes(command) && flag === '--confirm') || (command === 'setup' && flag === '--desktop-helper')))))) {
+    throw new Error('无效命令或参数。使用 --help 查看用法。');
+  }
+  const inviteExpires = longPair ? Date.parse(options[1]) : undefined;
+  if (longPair && (!/(Z|[+-]\d{2}:\d{2})$/.test(options[1]) || !Number.isSafeInteger(inviteExpires) || inviteExpires <= Date.now())) {
+    throw new Error('截止时间必须在未来且含时区，例如 2026-11-01T00:00:00+08:00。');
+  }
+  if (!['win32', 'darwin', 'linux'].includes(process.platform)) throw new Error('工作站目前支持 Windows、macOS 和 Linux。');
+  if (process.platform !== 'win32' && (command.startsWith('desktop-helper-') || options.includes('--desktop-helper')))
+    throw new Error('此平台不提供远程桌面画面、鼠标和键盘控制。');
+  if (command === 'desktop-recover' && desktopHost.desktopIntegration === false)
+    throw new Error('此平台的 Codex Desktop 自动接入尚未支持。');
+  const json = flags.includes('--json');
+  if (['desktop-helper-install', 'desktop-helper-status', 'desktop-helper-remove'].includes(command)) {
+    const result = command === 'desktop-helper-install' ? await installDesktopHelper() : command === 'desktop-helper-remove' ? await removeDesktopHelper() : await desktopHelperStatus();
+    console.log(json ? JSON.stringify(result) : result.removed ? '桌面操作辅助服务已移除。' : result.running ? '桌面操作辅助服务已就绪，手机可按需获取画面并确认点击。' : '桌面操作辅助服务尚未就绪，请运行 relax desktop-helper-install。');
+    return;
+  }
+  if (command === 'dots-tasks') {
+    const result = await readDotsTasks(managedAppServerUrl);
+    const statuses = { completed: '完成', inProgress: '进行中', failed: '失败', interrupted: '已中断' };
+    console.log(json ? JSON.stringify(result) : result.tasks.length
+      ? result.tasks.map(task => `${task.title || task.id} — ${statuses[task.latestTurn?.status] || task.status || '暂无轮次'}\n${task.cwd || ''}`).join('\n\n')
+      : '当前账号没有未归档的 Dots 委派任务。');
+    return;
+  }
+  const paths = runtimePaths();
+  const { stateRoot, serviceRoot } = paths;
+  const installedEntry = path.join(serviceRoot, 'dist/bin/codex-remote.mjs');
+  const installationPath = path.join(serviceRoot, 'installation.json');
+  const [nodeMajor, nodeMinor] = process.versions.node.split('.').map(Number);
+  const currentNodeSupported = nodeMajor > 22 || (nodeMajor === 22 && nodeMinor >= 12);
+  const installed = executableKey(fileURLToPath(import.meta.url)) === executableKey(installedEntry);
+  const installation = readRecord(installationPath);
+  if (installation?.nodeExecutable && !fs.existsSync(installation.nodeExecutable) && currentNodeSupported
+    && ['start', 'pair', 'doctor'].includes(command)) {
+    writeRecord(installationPath, { ...installation, nodeExecutable: currentNodeExecutable() });
+  }
+  if (['kernel-restart', 'desktop-recover', 'start', 'pair', 'pair-list', 'pair-revoke', 'devices', 'device-revoke'].includes(command) && !installed) {
+    if (!fs.existsSync(installedEntry)) throw new Error('尚未部署服务，请先执行 relax setup。');
+    const executable = readRecord(installationPath)?.nodeExecutable;
+    if (!executable || !fs.existsSync(executable)) throw new Error('安装时选用的 Node 不存在，请重新执行 relax setup。');
+    const child = spawn(executable, [installedEntry, command, ...flags], { stdio: 'inherit', windowsHide: true });
+    const code = await new Promise((resolve, reject) => { child.once('error', reject); child.once('exit', resolve); });
+    process.exitCode = code ?? 1;
+    return;
+  }
+  const service = lifecycle({ stateRoot, host });
+  const ensureAutostart = async () => {
+    const currentInstallation = readRecord(installationPath);
+    if (!currentInstallation?.nodeExecutable) throw new Error('请先执行 setup。');
+    const startup = { serviceRoot, nodeExecutable: currentInstallation.nodeExecutable };
+    const current = await residentStartup(startup, 'status');
+    if (current.enabled) return { ...current, repaired: false };
+    const result = await residentStartup(startup, 'enable');
+    return { ...result, repaired: true };
+  };
+  if (command === 'kernel-restart') {
+    if (!flags.includes('--confirm')) {
+      throw new Error('重启会立即结束当前 Codex 内核，正在运行的任务、待审批和未确认结果可能中断；恢复后不会自动重发。使用 --confirm 确认。');
+    }
+    const previous = await service.status();
+    if (!previous.running) throw new Error('桌面服务尚未运行，请先执行 relax start。');
+    await service.restartManagedAppServer(true);
+    const deadline = Date.now() + 60_000;
+    let current = await service.status();
+    while (current.managedAppServer?.restart?.status === 'running' && Date.now() < deadline) {
+      await delay(250);
+      current = await service.status();
+    }
+    if (current.managedAppServer?.restart?.status === 'failed') {
+      throw new Error(current.managedAppServer.restart.error || 'Codex 内核重启失败。');
+    }
+    if (!current.running || current.managedAppServer?.state !== 'ready'
+      || current.managedAppServer?.restart?.status !== 'completed') {
+      throw new Error('Codex 内核未在 60 秒内完成重启，请运行 relax doctor 查看状态。');
+    }
+    if (previous.managedAppServer?.updatePending && current.managedAppServer.updatePending) {
+      throw new Error('Codex 内核已重启，但更新仍未应用；请运行 relax doctor 查看状态。');
+    }
+    const result = { status: 'completed', message: previous.managedAppServer?.updatePending
+      ? 'Codex 内核已重启并应用更新。' : 'Codex 内核已重启。',
+      previousVersion: previous.managedAppServer?.version || null,
+      version: current.managedAppServer.version || null,
+      selectedVersion: current.managedAppServer.selectedVersion || null,
+      updateApplied: previous.managedAppServer?.updatePending === true,
+      updatePending: current.managedAppServer.updatePending === true,
+      pid: current.managedAppServer.pid || null,
+      executionReady: current.execution?.ready === true };
+    console.log(json ? JSON.stringify(result) : `${result.message}\n版本：${result.version || '未知'}\n执行状态：${result.executionReady ? '已就绪' : '正在恢复'}`);
+    return;
+  }
+  if (command === 'desktop-recover') {
+    if (!flags.includes('--confirm')) throw new Error(recoveryWarning + ' 使用 --confirm 确认。');
+    const result = await requestRecovery(stateRoot, { confirmed: true });
+    console.log(json ? JSON.stringify(result) : `${result.message || result.status}${result.error ? '\n' + result.error : ''}\n${result.operationId || ''}`.trim());
+    return;
+  }
+  if (command === 'devices' || command === 'device-revoke') {
+    const result = await selfRelay(command === 'devices' ? 'devices-list' : 'device-revoke', stateRoot,
+      command === 'device-revoke' ? { id: options[0], confirmed: true } : undefined);
+    console.log(json ? JSON.stringify(result) : result.displayText); return;
+  }
+  if (command === 'pair-list' || command === 'pair-revoke') {
+    const result = await selfRelay(command === 'pair-list' ? 'invite-list' : 'invite-revoke', stateRoot,
+      command === 'pair-revoke' ? { id: options[0] } : undefined);
+    console.log(json ? JSON.stringify(result) : result.displayText);
+    return;
+  }
+  if (command === 'pair') {
+    await ensureAutostart();
+    let bridge = await service.status();
+    if (!bridge.running) {
+      await service.start();
+      bridge = await service.status();
+    }
+    if (!bridge.running) throw new Error('Code Relax 工作站服务未能启动。');
+    if (longPair) await selfRelay('relay-start', stateRoot);
+    const result = await selfRelay(longPair ? 'invite-create' : 'relay-pair', stateRoot, longPair ? { expires: inviteExpires } : undefined);
+    if (!json && result.qrPath) {
+      openFile(result.qrPath);
+    }
+    console.log(json ? JSON.stringify(result) : `配对二维码已生成。\n${result.displayText}\n二维码文件：${result.qrPath}`);
+    return;
+  }
+  if (command === 'doctor' || command === 'diag') {
+    const result = await doctor({ paths, host, service, ensureAutostart, diagnostics: command === 'diag' });
+    console.log(json ? JSON.stringify(result) : formatDoctorOutput(result, command === 'diag'));
+    if (!result.ready) process.exitCode = 1;
+    return;
+  }
+  if (command === 'uninstall') {
+    const desktopHelper = process.platform === 'win32' ? await removeDesktopHelper() : { removed: false, supported: false };
+    const skill = inspectSkill();
+    let environment;
+    const result = await uninstallService(paths, service, async () => {
+      environment = await clearManagedEnvironment(stateRoot);
+      const installation = readRecord(path.join(serviceRoot, 'installation.json'));
+      if (installation?.nodeExecutable) await removeDesktopShortcut({ serviceRoot, nodeExecutable: installation.nodeExecutable });
+      if (installation?.nodeExecutable) await residentStartup({ serviceRoot, nodeExecutable: installation.nodeExecutable }, 'disable');
+    });
+    result.environment = environment;
+    result.desktopHelper = desktopHelper;
+    result.skill = skill.managed ? removeSkill() : { removed: false, message: '未移除自定义或未安装的 Skill。' };
+    result.message = process.platform !== 'win32'
+      ? '固定目录服务已卸载；配置、附件、钥匙串凭据和可能仍在执行任务的 Codex 内核已保留。'
+      : environment?.preserved
+      ? '固定目录服务已卸载；检测到用户自定义的 CODEX_APP_SERVER_WS_URL，已保留。配置、附件和可能仍在执行任务的 app-server 也已保留；重启电脑可结束该进程。npm 命令入口可再用 npm uninstall -g @walkhi/code-relax 移除。'
+      : '固定目录服务已卸载；Code Relax 设置的 app-server 环境变量已清理，其他配置、附件和可能仍在执行任务的 app-server 已保留；重启电脑可结束该进程。npm 命令入口可再用 npm uninstall -g @walkhi/code-relax 移除。';
+    console.log(json ? JSON.stringify(result) : `${result.message}\n${result.skill.message}`);
+    return;
+  }
+  if (command === 'setup') {
+    prepareNativePackage(packageRoot(path.dirname(fileURLToPath(import.meta.url))));
+    const [major, minor] = process.versions.node.split('.').map(Number);
+    if (major < 22 || (major === 22 && minor < 12)) throw new Error('需要 Node >=22.12。');
+    const physicalStateRoot = await resolveStateRoot(stateRoot);
+    // Preserve the effective package view; never replace a newer file already in it.
+    for (const name of ['bridge-config.json', 'bridge-session.json', 'bridge-startup-context.json',
+      'self-relay-config.json', 'self-relay-session.json', 'lan-device-authorizations.json',
+      'managed-app-server.json', 'managed-environment.json', 'shared-recovery.json', 'shared-recovery.lock']) {
+      const source = path.join(stateRoot, name), target = path.join(physicalStateRoot, name);
+      if (fs.existsSync(source) && !fs.existsSync(target)) fs.copyFileSync(source, target, fs.constants.COPYFILE_EXCL);
+    }
+    const hadInstalledService = fs.existsSync(path.join(serviceRoot, 'installation.json'));
+    const previousInstallation = readRecord(path.join(serviceRoot, 'installation.json'));
+    if (previousInstallation?.nodeExecutable) await removeDesktopShortcut({ serviceRoot, nodeExecutable: previousInstallation.nodeExecutable });
+    const desktopBeforeSetup = desktopHost.desktopIntegration === false ? { running: false, desktop: null } : await desktopHost.inspect();
+    const runtime = await resolveCodexRuntime(physicalStateRoot, { refresh: true });
+    const desktopNeedsAttach = desktopBeforeSetup.running && !await host.sharedServiceUrl();
+    const previous = hadInstalledService ? await service.status() : { processRunning: false };
+    const legacyRelaySession = readRecord(path.join(stateRoot, 'self-relay-session.json'));
+    const previousRelay = legacyRelaySession ? await controlRequest(legacyRelaySession) : await selfRelay('relay-status', stateRoot);
+    const resumeAfterUpdate = previous.processRunning || previousRelay.running;
+    const executable = currentNodeExecutable();
+    const startInstalled = async () => {
+      const entry = path.join(serviceRoot, 'dist/bin/codex-remote.mjs');
+      const child = spawn(executable, [entry, 'start', '--json'], { windowsHide: true, stdio: ['ignore', 'ignore', 'pipe'] });
+      let errors = '';
+      child.stderr.on('data', chunk => { errors += chunk; });
+      const code = await new Promise((resolve, reject) => { child.once('error', reject); child.once('exit', resolve); });
+      if (code) {
+        try { await selfRelay('relay-stop', stateRoot); } catch {}
+        try { await service.stop(); } catch {}
+        throw new Error(errors.trim().replace(/^(?:Code Relax：)+/u, '') || '桌面服务启动失败');
+      }
+    };
+    let stoppedForUpdate = false;
+    const installed = await installService(packageRoot(path.dirname(fileURLToPath(import.meta.url))), serviceRoot, executable, physicalStateRoot, {
+      beforeActivate: async () => {
+        if (desktopNeedsAttach) await desktopHost.closeDesktop(desktopBeforeSetup.desktop);
+        stoppedForUpdate = resumeAfterUpdate;
+        if (previousRelay.running && legacyRelaySession) {
+          await controlRequest(legacyRelaySession, 'POST');
+          const deadline = Date.now() + 10000;
+          while (processAlive(legacyRelaySession.pid)) {
+            if (Date.now() >= deadline) throw new Error('旧中继进程未在 10 秒内退出。');
+            await delay(100);
+          }
+        } else if (previousRelay.running) await selfRelay('relay-stop', stateRoot);
+        if (previous.processRunning) await service.stop();
+      },
+      verifyActivation: async () => { await startInstalled(); },
+      restoreActivation: async () => { if (stoppedForUpdate) await startInstalled(); },
+    });
+    const autostart = await residentStartup(installed, 'enable');
+    const deadline = Date.now() + 35_000;
+    let bridge = await service.status();
+    while (bridge.running && !['ready', 'failed'].includes(bridge.managedAppServer?.state) && Date.now() < deadline) {
+      await delay(250);
+      bridge = await service.status();
+    }
+    if (!bridge.running || bridge.managedAppServer?.state !== 'ready') {
+      throw new Error(bridge.managedAppServer?.error || '桌面服务已安装，但 Codex 内核未就绪；未写入 Desktop 环境变量。');
+    }
+    const environment = desktopBeforeSetup.desktop
+      ? await configureManagedEnvironment(physicalStateRoot) : { configured: false, reason: desktopHost.desktopIntegration === false ? 'desktop-integration-unsupported' : 'desktop-not-installed' };
+    let managedAppServerMigrated = false;
+    const managedAppServerMigration = {
+      required: bridge.managedAppServer.launcherRestartRequired === true,
+      restarted: false,
+      previousPid: bridge.managedAppServer.pid || null,
+    };
+    let desktopRestarted = false;
+    let desktopRestartReason = null;
+    if (managedAppServerMigration.required) {
+      const desktopInfo = desktopHost.desktopIntegration === false ? { running: false } : await desktopHost.inspect();
+      const desktopAttached = desktopInfo.running
+        && (bridge.desktop?.attachedToManagedServer === true || Boolean(await host.sharedServiceUrl()));
+      if (desktopAttached) await desktopHost.closeDesktop(desktopInfo.desktop);
+      await service.restartManagedAppServer();
+      const migrationDeadline = Date.now() + 40_000;
+      do {
+        await delay(250);
+        bridge = await service.status();
+        if (bridge.managedAppServer?.restart?.status === 'failed') {
+          throw new Error(bridge.managedAppServer.restart.error || 'Codex 内核启动链迁移失败。');
+        }
+      } while (Date.now() < migrationDeadline && (!bridge.running || bridge.managedAppServer?.state !== 'ready' || bridge.managedAppServer.launcherRestartRequired));
+      if (!bridge.running || bridge.managedAppServer?.state !== 'ready' || bridge.managedAppServer.launcherRestartRequired) {
+        throw new Error('Codex 内核未在 40 秒内完成启动链迁移。');
+      }
+      managedAppServerMigrated = true;
+      managedAppServerMigration.restarted = true;
+      if (desktopAttached) {
+        await launchDesktop({ stateRoot: physicalStateRoot, host: desktopHost });
+        desktopRestarted = true;
+        desktopRestartReason = 'app-server-migration';
+        bridge = await service.status();
+      }
+    }
+    const skill = installSkill(path.join(serviceRoot, 'dist/skills/code-relax/SKILL.md'));
+    if (desktopNeedsAttach && !desktopRestarted) {
+      const currentDesktop = await desktopHost.inspect();
+      if (currentDesktop.running) await desktopHost.closeDesktop(currentDesktop.desktop);
+      await launchDesktop({ stateRoot: physicalStateRoot, host: desktopHost });
+      desktopRestarted = true;
+      desktopRestartReason = 'attach-managed-server';
+      bridge = await service.status();
+    }
+    installed.autostart = autostart;
+    installed.skill = skill;
+    installed.restarted = resumeAfterUpdate;
+    installed.environment = environment;
+    installed.managedAppServer = bridge.managedAppServer;
+    installed.codexRuntime = runtime;
+    installed.managedAppServerMigrated = managedAppServerMigrated;
+    installed.managedAppServerMigration = { ...managedAppServerMigration,
+      currentPid: bridge.managedAppServer.pid || null,
+      launcherRevision: bridge.managedAppServer.launcherRevision ?? null };
+    installed.desktopRestarted = desktopRestarted;
+    installed.desktopRestartReason = desktopRestartReason;
+    if (options.includes('--desktop-helper')) installed.desktopHelper = await installDesktopHelper();
+    const migrationText = managedAppServerMigrated ? 'Codex 内核已更新并重启；请检查安装前正在进行的任务。\n' : '';
+    const displayText = `Code Relax ${installed.version} 安装成功。\n${migrationText}${desktopSetupSteps.join('\n')}`;
+    console.log(json ? JSON.stringify({ ...installed, nextSteps: desktopSetupSteps, displayText }) : displayText);
+    return;
+  }
+  if (!json && command === 'start') console.log('正在检查电脑连接并准备桌面服务…');
+  await ensureAutostart();
+  const result = await service[command]();
+  const { accessUrl, qrPath: _legacyQrPath, ...metadata } = result;
+  let relay;
+  if (fs.existsSync(path.join(stateRoot, 'self-relay-config.json'))) relay = await selfRelay('relay-status', stateRoot);
+  const nextSteps = phonePairingSteps(metadata.transportMode, relay?.paired === true);
+  const displayText = pairingDisplayText(nextSteps);
+  const output = { ...metadata, ...(relay ? { relayConnected: relay.relayConnected,
+    paired: relay.paired, clientCount: relay.clientCount, ...(relay.qrPath ? { qrPath: relay.qrPath, expiresAt: relay.expiresAt } : {}) } : {}),
+    nextSteps, displayText, mode: 'lan', listenAddress: '0.0.0.0', address: new URL(accessUrl).host };
+  if (json) console.log(JSON.stringify(output));
+  else {
+    if (relay?.qrPath) console.log(`配对二维码：${relay.qrPath}`);
+    console.log(displayText);
+  }
+}
+
+main().catch(error => {
+  console.error(`Code Relax：${error.message}`);
+  process.exitCode = 1;
+});