@walkhi/code-relax 0.1.0-beta.30 → 0.1.0-beta.32

package/dist/src/platform/windows/dots-profile.mjs

@@ -1,49 +1,49 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { createHash } from 'node:crypto';
-import { dotsProfile } from '../../dots-profile.mjs';
-
-// Desktop 26.928.2636.0 persists its current TBO sidebar profiles here.
-// Read display names, appearance colors and snapshot references; identity comes from the authenticated kernel.
-export function desktopDotsProfiles(codexDataRoot, stateRoot) {
-  const snapshotPath = ({ accountId, userId }) => stateRoot && path.join(stateRoot, 'dots-profiles',
-    createHash('sha256').update(JSON.stringify([accountId, userId])).digest('hex') + '.json');
-  const read = async ({ accountId, userId }) => {
-    let state;
-    try {
-      state = JSON.parse(await fs.readFile(path.join(codexDataRoot, '.codex-global-state.json'), 'utf8'));
-    } catch (error) {
-      if (error.code !== 'ENOENT') throw error;
-    }
-    const cache = state?.['electron-persisted-atom-state']?.['cloud-aeon-sidebar-cache-v1'];
-    const names = new Map();
-    if (!accountId || !userId) return names;
-    const matching = cache?.hostId === 'durable' && cache.accountId === accountId && cache.userId === userId;
-    for (const [threadId, profile] of Object.entries(matching ? cache.profilesByThreadId || {} : {})) {
-      const value = dotsProfile(profile);
-      for (const id of [threadId, profile.active_root_thread_id, profile.root_thread_id]) {
-        if (typeof id === 'string' && id) names.set(id, value);
-      }
-    }
-    const file = snapshotPath({ accountId, userId });
-    if (file) {
-      try {
-        const saved = JSON.parse(await fs.readFile(file, 'utf8'));
-        if (saved.accountId !== accountId || saved.userId !== userId || !Array.isArray(saved.profiles)) throw new Error('点点资料缓存身份无效。');
-        const profiles = new Map(saved.profiles);
-        const byId = new Map([...profiles.values()].map(profile => [profile.profileId, profile]));
-        for (const [id, profile] of names) if (byId.has(profile.profileId)) names.set(id, byId.get(profile.profileId));
-        for (const [id, profile] of profiles) names.set(id, profile);
-      } catch (error) { if (error.code !== 'ENOENT') console.error('读取点点资料缓存失败：', error.message); }
-    }
-    return names;
-  };
-  read.save = async (identity, profiles) => {
-    const file = snapshotPath(identity);
-    if (!file) return;
-    await fs.mkdir(path.dirname(file), { recursive: true });
-    await fs.writeFile(file + '.tmp', JSON.stringify({ ...identity, profiles: [...profiles] }), 'utf8');
-    await fs.rename(file + '.tmp', file);
-  };
-  return read;
-}
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { dotsProfile } from '../../dots-profile.mjs';
+
+// Desktop 26.928.2636.0 persists its current TBO sidebar profiles here.
+// Read display names, appearance colors and snapshot references; identity comes from the authenticated kernel.
+export function desktopDotsProfiles(codexDataRoot, stateRoot) {
+  const snapshotPath = ({ accountId, userId }) => stateRoot && path.join(stateRoot, 'dots-profiles',
+    createHash('sha256').update(JSON.stringify([accountId, userId])).digest('hex') + '.json');
+  const read = async ({ accountId, userId }) => {
+    let state;
+    try {
+      state = JSON.parse(await fs.readFile(path.join(codexDataRoot, '.codex-global-state.json'), 'utf8'));
+    } catch (error) {
+      if (error.code !== 'ENOENT') throw error;
+    }
+    const cache = state?.['electron-persisted-atom-state']?.['cloud-aeon-sidebar-cache-v1'];
+    const names = new Map();
+    if (!accountId || !userId) return names;
+    const matching = cache?.hostId === 'durable' && cache.accountId === accountId && cache.userId === userId;
+    for (const [threadId, profile] of Object.entries(matching ? cache.profilesByThreadId || {} : {})) {
+      const value = dotsProfile(profile);
+      for (const id of [threadId, profile.active_root_thread_id, profile.root_thread_id]) {
+        if (typeof id === 'string' && id) names.set(id, value);
+      }
+    }
+    const file = snapshotPath({ accountId, userId });
+    if (file) {
+      try {
+        const saved = JSON.parse(await fs.readFile(file, 'utf8'));
+        if (saved.accountId !== accountId || saved.userId !== userId || !Array.isArray(saved.profiles)) throw new Error('点点资料缓存身份无效。');
+        const profiles = new Map(saved.profiles);
+        const byId = new Map([...profiles.values()].map(profile => [profile.profileId, profile]));
+        for (const [id, profile] of names) if (byId.has(profile.profileId)) names.set(id, byId.get(profile.profileId));
+        for (const [id, profile] of profiles) names.set(id, profile);
+      } catch (error) { if (error.code !== 'ENOENT') console.error('读取点点资料缓存失败：', error.message); }
+    }
+    return names;
+  };
+  read.save = async (identity, profiles) => {
+    const file = snapshotPath(identity);
+    if (!file) return;
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    await fs.writeFile(file + '.tmp', JSON.stringify({ ...identity, profiles: [...profiles] }), 'utf8');
+    await fs.rename(file + '.tmp', file);
+  };
+  return read;
+}

package/dist/src/platform/windows/launch-worker.mjs

@@ -1,41 +1,41 @@
-import fs from 'node:fs';
-import { spawn } from 'node:child_process';
-import { attachProcessLog } from '../../bounded-process-log.mjs';
-
-const [requestPath, readyPath, instance, diagnosticPath] = process.argv.slice(2);
-let result = { instance, brokerPid: process.pid };
-
-function diagnostic(message) {
-  if (!diagnosticPath) return;
-  fs.appendFileSync(diagnosticPath, `${new Date().toISOString()} ${message}\n`, 'utf8');
-}
-
-try {
-  const spec = JSON.parse(fs.readFileSync(requestPath, 'utf8').replace(/^\uFEFF/u, ''));
-  diagnostic('request loaded');
-  if (spec.instance !== instance) throw new Error('Windows process broker request identity mismatch.');
-  fs.rmSync(requestPath, { force: true });
-  const logs = spec.logs || [];
-  const child = spawn(spec.executable, spec.args || [], {
-    windowsHide: true,
-    env: spec.environment,
-    stdio: ['ignore', logs[0] ? 'pipe' : 'ignore', logs[1] ? 'pipe' : 'ignore'],
-  });
-  if (child.stdout) attachProcessLog(child.stdout, logs[0]);
-  if (child.stderr) attachProcessLog(child.stderr, logs[1]);
-  await new Promise((resolve, reject) => {
-    child.once('spawn', resolve);
-    child.once('error', reject);
-  });
-  // Keep this WMI-owned broker alive with the target so Codex tools inherit
-  // its hidden console instead of creating a visible console per command.
-  result.pid = child.pid;
-  diagnostic(`target started (PID ${child.pid})`);
-} catch (error) {
-  result.error = error?.stack || error?.message || String(error);
-  try { diagnostic(`failed: ${result.error}`); } catch {}
-}
-
-const temporary = `${readyPath}.tmp`;
-fs.writeFileSync(temporary, JSON.stringify(result), 'utf8');
-fs.renameSync(temporary, readyPath);
+import fs from 'node:fs';
+import { spawn } from 'node:child_process';
+import { attachProcessLog } from '../../bounded-process-log.mjs';
+
+const [requestPath, readyPath, instance, diagnosticPath] = process.argv.slice(2);
+let result = { instance, brokerPid: process.pid };
+
+function diagnostic(message) {
+  if (!diagnosticPath) return;
+  fs.appendFileSync(diagnosticPath, `${new Date().toISOString()} ${message}\n`, 'utf8');
+}
+
+try {
+  const spec = JSON.parse(fs.readFileSync(requestPath, 'utf8').replace(/^\uFEFF/u, ''));
+  diagnostic('request loaded');
+  if (spec.instance !== instance) throw new Error('Windows process broker request identity mismatch.');
+  fs.rmSync(requestPath, { force: true });
+  const logs = spec.logs || [];
+  const child = spawn(spec.executable, spec.args || [], {
+    windowsHide: true,
+    env: spec.environment,
+    stdio: ['ignore', logs[0] ? 'pipe' : 'ignore', logs[1] ? 'pipe' : 'ignore'],
+  });
+  if (child.stdout) attachProcessLog(child.stdout, logs[0]);
+  if (child.stderr) attachProcessLog(child.stderr, logs[1]);
+  await new Promise((resolve, reject) => {
+    child.once('spawn', resolve);
+    child.once('error', reject);
+  });
+  // Keep this WMI-owned broker alive with the target so Codex tools inherit
+  // its hidden console instead of creating a visible console per command.
+  result.pid = child.pid;
+  diagnostic(`target started (PID ${child.pid})`);
+} catch (error) {
+  result.error = error?.stack || error?.message || String(error);
+  try { diagnostic(`failed: ${result.error}`); } catch {}
+}
+
+const temporary = `${readyPath}.tmp`;
+fs.writeFileSync(temporary, JSON.stringify(result), 'utf8');
+fs.renameSync(temporary, readyPath);

package/dist/src/platform/windows/network-info.mjs

@@ -1,34 +1,34 @@
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const exec = promisify(execFile);
-const bridgeRoot = fileURLToPath(new URL('../../../', import.meta.url));
-
-export async function lanNetworks() {
-  const executable = path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe');
-  const { stdout } = await exec(executable, ['-NoProfile', '-NonInteractive', '-File', path.join(bridgeRoot, 'get-lan-networks.ps1')],
-    { windowsHide: true, encoding: 'utf8' });
-  const records = JSON.parse(stdout.trim() || '[]');
-  if (!Array.isArray(records) || records.length > 8) throw new Error('Windows 返回了无效的局域网信息');
-  return records.map(record => {
-    if (!privateIpv4(record.address) || !['wifi', 'ethernet'].includes(record.networkType) ||
-        !plainLabel(record.networkName) || !plainLabel(record.interfaceName)) throw new Error('Windows 返回了无效的局域网信息');
-    return { address: record.address, networkType: record.networkType,
-      networkName: record.networkName.trim(), interfaceName: record.interfaceName.trim() };
-  });
-}
-
-function privateIpv4(value) {
-  if (typeof value !== 'string') return false;
-  const parts = value.split('.').map(Number);
-  if (parts.length !== 4 || parts.some(part => !Number.isInteger(part) || part < 0 || part > 255)) return false;
-  return parts[0] === 10 || (parts[0] === 192 && parts[1] === 168) ||
-    (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) ||
-    (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127);
-}
-
-function plainLabel(value) {
-  return typeof value === 'string' && value.trim().length > 0 && value.trim().length <= 80 && !/[\u0000-\u001f\u007f]/.test(value);
-}
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const exec = promisify(execFile);
+const bridgeRoot = fileURLToPath(new URL('../../../', import.meta.url));
+
+export async function lanNetworks() {
+  const executable = path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe');
+  const { stdout } = await exec(executable, ['-NoProfile', '-NonInteractive', '-File', path.join(bridgeRoot, 'get-lan-networks.ps1')],
+    { windowsHide: true, encoding: 'utf8' });
+  const records = JSON.parse(stdout.trim() || '[]');
+  if (!Array.isArray(records) || records.length > 8) throw new Error('Windows 返回了无效的局域网信息');
+  return records.map(record => {
+    if (!privateIpv4(record.address) || !['wifi', 'ethernet'].includes(record.networkType) ||
+        !plainLabel(record.networkName) || !plainLabel(record.interfaceName)) throw new Error('Windows 返回了无效的局域网信息');
+    return { address: record.address, networkType: record.networkType,
+      networkName: record.networkName.trim(), interfaceName: record.interfaceName.trim() };
+  });
+}
+
+function privateIpv4(value) {
+  if (typeof value !== 'string') return false;
+  const parts = value.split('.').map(Number);
+  if (parts.length !== 4 || parts.some(part => !Number.isInteger(part) || part < 0 || part > 255)) return false;
+  return parts[0] === 10 || (parts[0] === 192 && parts[1] === 168) ||
+    (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) ||
+    (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127);
+}
+
+function plainLabel(value) {
+  return typeof value === 'string' && value.trim().length > 0 && value.trim().length <= 80 && !/[\u0000-\u001f\u007f]/.test(value);
+}

package/dist/src/platform/windows/project-locations.mjs

@@ -1,16 +1,16 @@
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import path from 'node:path';
-import { powershell } from './desktop-host.mjs';
-
-const exec = promisify(execFile);
-
-export async function projectLocations() {
-  const command = "[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false); $projectDocuments = [Environment]::GetFolderPath('MyDocuments'); $projectUserDirectory = [Environment]::GetFolderPath('UserProfile'); $projectDownloads = [Environment]::ExpandEnvironmentVariables((Get-ItemPropertyValue -LiteralPath 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders' -Name '{374DE290-123F-4565-9164-39C4925E467B}' -ErrorAction Stop)); $projectDriveRoots = @(Get-PSDrive -PSProvider FileSystem | ForEach-Object { $_.Root }); @{ documents = $projectDocuments; home = $projectUserDirectory; downloads = $projectDownloads; roots = $projectDriveRoots } | ConvertTo-Json -Compress";
-  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-Command', command],
-    { windowsHide: true, encoding: 'utf8', timeout: 10000 });
-  const locations = JSON.parse(stdout);
-  if (!path.isAbsolute(locations.documents)) throw new Error('无法取得电脑的文档目录。');
-  if (!path.isAbsolute(locations.downloads)) throw new Error('无法取得电脑的下载目录。');
-  return { defaultParent: path.join(locations.documents, 'ChatGPT'), home: locations.home, downloads: locations.downloads, roots: locations.roots };
-}
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import { powershell } from './desktop-host.mjs';
+
+const exec = promisify(execFile);
+
+export async function projectLocations() {
+  const command = "[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false); $projectDocuments = [Environment]::GetFolderPath('MyDocuments'); $projectUserDirectory = [Environment]::GetFolderPath('UserProfile'); $projectDownloads = [Environment]::ExpandEnvironmentVariables((Get-ItemPropertyValue -LiteralPath 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders' -Name '{374DE290-123F-4565-9164-39C4925E467B}' -ErrorAction Stop)); $projectDriveRoots = @(Get-PSDrive -PSProvider FileSystem | ForEach-Object { $_.Root }); @{ documents = $projectDocuments; home = $projectUserDirectory; downloads = $projectDownloads; roots = $projectDriveRoots } | ConvertTo-Json -Compress";
+  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-Command', command],
+    { windowsHide: true, encoding: 'utf8', timeout: 10000 });
+  const locations = JSON.parse(stdout);
+  if (!path.isAbsolute(locations.documents)) throw new Error('无法取得电脑的文档目录。');
+  if (!path.isAbsolute(locations.downloads)) throw new Error('无法取得电脑的下载目录。');
+  return { defaultParent: path.join(locations.documents, 'ChatGPT'), home: locations.home, downloads: locations.downloads, roots: locations.roots };
+}

package/dist/src/platform/windows/resident-start.js

@@ -1,20 +1,20 @@
-// Windows Script Host has no console. Keep the login task alive until the
-// short-lived CLI has handed the resident service to the background broker.
-if (WScript.Arguments.length !== 2) WScript.Quit(2);
-var shell = new ActiveXObject('WScript.Shell');
-var files = new ActiveXObject('Scripting.FileSystemObject');
-var node = WScript.Arguments.Item(0);
-var entry = WScript.Arguments.Item(1);
-if (!files.FileExists(node)) {
-  var directories = shell.Environment('PROCESS').Item('PATH').split(';');
-  node = '';
-  for (var i = 0; i < directories.length; i++) {
-    var directory = directories[i].replace(/^"|"$/g, '');
-    if (!directory) continue;
-    var candidate = files.BuildPath(directory, 'node.exe');
-    if (files.FileExists(candidate)) { node = candidate; break; }
-  }
-  if (!node) WScript.Quit(2);
-}
-var command = '"' + node + '" "' + entry + '" start --json';
-WScript.Quit(shell.Run(command, 0, true));
+// Windows Script Host has no console. Keep the login task alive until the
+// short-lived CLI has handed the resident service to the background broker.
+if (WScript.Arguments.length !== 2) WScript.Quit(2);
+var shell = new ActiveXObject('WScript.Shell');
+var files = new ActiveXObject('Scripting.FileSystemObject');
+var node = WScript.Arguments.Item(0);
+var entry = WScript.Arguments.Item(1);
+if (!files.FileExists(node)) {
+  var directories = shell.Environment('PROCESS').Item('PATH').split(';');
+  node = '';
+  for (var i = 0; i < directories.length; i++) {
+    var directory = directories[i].replace(/^"|"$/g, '');
+    if (!directory) continue;
+    var candidate = files.BuildPath(directory, 'node.exe');
+    if (files.FileExists(candidate)) { node = candidate; break; }
+  }
+  if (!node) WScript.Quit(2);
+}
+var command = '"' + node + '" "' + entry + '" start --json';
+WScript.Quit(shell.Run(command, 0, true));

package/dist/src/platform/windows/resident-start.ps1

@@ -1,7 +1,7 @@
-param([Parameter(Mandatory=$true)][string]$NodePath, [Parameter(Mandatory=$true)][string]$Entry)
-$ErrorActionPreference = 'Stop'
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-$state = Join-Path $env:LOCALAPPDATA 'CodexRemote'
-New-Item -ItemType Directory -Path $state -Force | Out-Null
-& $NodePath $Entry start --json >> (Join-Path $state 'resident-start.log') 2>&1
-exit $LASTEXITCODE
+param([Parameter(Mandatory=$true)][string]$NodePath, [Parameter(Mandatory=$true)][string]$Entry)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$state = Join-Path $env:LOCALAPPDATA 'CodexRemote'
+New-Item -ItemType Directory -Path $state -Force | Out-Null
+& $NodePath $Entry start --json >> (Join-Path $state 'resident-start.log') 2>&1
+exit $LASTEXITCODE

package/dist/src/platform/windows/resident-startup.ps1

@@ -1,83 +1,83 @@
-param([string]$NodePath, [string]$Entry, [ValidateSet('enable','disable','status')][string]$Action='status')
-$ErrorActionPreference = 'Stop'
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-
-$taskName = 'Code Relax 桌面服务'
-$legacyTaskName = 'Code Relax Bridge'
-$taskSource = '@walkhi/code-relax'
-$taskPath = '\' + $taskName
-$launcher = Join-Path $PSScriptRoot 'resident-start.js'
-$wscript = Join-Path $env:WINDIR 'System32\wscript.exe'
-$arguments = '//B //Nologo "' + $launcher + '" "' + $NodePath + '" "' + $Entry + '"'
-$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
-
-$scheduler = New-Object -ComObject 'Schedule.Service'
-$scheduler.Connect()
-$root = $scheduler.GetFolder('\')
-$registered = @($root.GetTasks(1) | Where-Object { $_.Name -eq $taskName } | Select-Object -First 1)
-$legacyRegistered = @($root.GetTasks(1) | Where-Object { $_.Name -eq $legacyTaskName } | Select-Object -First 1)
-if ($registered.Count -gt 0 -and $registered[0].Definition.RegistrationInfo.Source -ne $taskSource) {
-    throw 'Scheduled task is not owned by this installation.'
-}
-if ($legacyRegistered.Count -gt 0 -and $legacyRegistered[0].Definition.RegistrationInfo.Source -ne $taskSource) {
-    throw 'Legacy scheduled task is not owned by this installation.'
-}
-
-# Remove only the legacy shortcut created by this package. A Startup LNK that
-# launches hidden PowerShell with ExecutionPolicy Bypass triggers AV heuristics.
-$shell = New-Object -ComObject WScript.Shell
-$legacyPath = Join-Path $shell.SpecialFolders.Item('Startup') 'Code Relax Bridge.lnk'
-$legacyLauncher = Join-Path $PSScriptRoot 'resident-start.ps1'
-$legacyExists = Test-Path -LiteralPath $legacyPath
-if ($Action -ne 'status' -and $legacyExists) {
-    $legacy = $shell.CreateShortcut($legacyPath)
-    if (-not $legacy.Arguments.Contains('"' + $legacyLauncher + '"')) {
-        throw 'Legacy startup shortcut is not owned by this installation.'
-    }
-}
-
-if ($Action -eq 'enable') {
-    if (-not (Test-Path -LiteralPath $NodePath) -or -not (Test-Path -LiteralPath $Entry) -or
-        -not (Test-Path -LiteralPath $launcher) -or -not (Test-Path -LiteralPath $wscript)) { throw 'Installed runtime is missing.' }
-    $definition = $scheduler.NewTask(0)
-    $definition.RegistrationInfo.Description = 'Start the Code Relax desktop service when this user signs in.'
-    $definition.RegistrationInfo.Source = $taskSource
-    $definition.Principal.UserId = $currentUser
-    $definition.Principal.LogonType = 3 # TASK_LOGON_INTERACTIVE_TOKEN
-    $definition.Principal.RunLevel = 0 # TASK_RUNLEVEL_LUA
-    $definition.Settings.Enabled = $true
-    $definition.Settings.Hidden = $true
-    $definition.Settings.StartWhenAvailable = $true
-    $definition.Settings.DisallowStartIfOnBatteries = $false
-    $definition.Settings.StopIfGoingOnBatteries = $false
-    $definition.Settings.ExecutionTimeLimit = 'PT5M'
-    $definition.Settings.MultipleInstances = 2 # TASK_INSTANCES_IGNORE_NEW
-    $trigger = $definition.Triggers.Create(9) # TASK_TRIGGER_LOGON
-    $trigger.UserId = $currentUser
-    $trigger.Enabled = $true
-    $exec = $definition.Actions.Create(0) # TASK_ACTION_EXEC
-    $exec.Path = $wscript
-    $exec.Arguments = $arguments
-    $exec.WorkingDirectory = $env:USERPROFILE
-    [void]$root.RegisterTaskDefinition($taskName, $definition, 6, $null, $null, 3, $null) # TASK_CREATE_OR_UPDATE
-    if ($legacyRegistered.Count -gt 0) { $root.DeleteTask($legacyTaskName, 0) }
-} elseif ($Action -eq 'disable') {
-    if ($registered.Count -gt 0) { $root.DeleteTask($taskName, 0) }
-    if ($legacyRegistered.Count -gt 0) { $root.DeleteTask($legacyTaskName, 0) }
-}
-if ($Action -ne 'status' -and $legacyExists) { Remove-Item -LiteralPath $legacyPath }
-
-$active = @($root.GetTasks(1) | Where-Object { $_.Name -eq $taskName } | Select-Object -First 1)
-$taskEnabled = $active.Count -gt 0 -and $active[0].Enabled
-$taskCurrent = $false
-if ($taskEnabled) {
-    $taskAction = $active[0].Definition.Actions.Item(1)
-    $taskCurrent = $taskAction.Path -ieq $wscript -and $taskAction.Arguments -ieq $arguments
-}
-@{
-    enabled=($taskCurrent -and $legacyRegistered.Count -eq 0)
-    taskPresent=$taskEnabled
-    path=$(if ($taskEnabled) { 'Task Scheduler:' + $taskPath } elseif ($legacyRegistered.Count -gt 0) { 'Task Scheduler:\' + $legacyTaskName } elseif ($legacyExists) { $legacyPath } else { 'Task Scheduler:' + $taskPath })
-    scope='current-user-logon'
-    mechanism=$(if ($taskCurrent -and $legacyRegistered.Count -eq 0) { 'task-scheduler' } elseif ($taskEnabled -or $legacyRegistered.Count -gt 0) { 'stale-task-scheduler' } elseif ($legacyExists) { 'legacy-startup-shortcut' } else { 'task-scheduler' })
-} | ConvertTo-Json -Compress
+param([string]$NodePath, [string]$Entry, [ValidateSet('enable','disable','status')][string]$Action='status')
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+
+$taskName = 'Code Relax 桌面服务'
+$legacyTaskName = 'Code Relax Bridge'
+$taskSource = '@walkhi/code-relax'
+$taskPath = '\' + $taskName
+$launcher = Join-Path $PSScriptRoot 'resident-start.js'
+$wscript = Join-Path $env:WINDIR 'System32\wscript.exe'
+$arguments = '//B //Nologo "' + $launcher + '" "' + $NodePath + '" "' + $Entry + '"'
+$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+
+$scheduler = New-Object -ComObject 'Schedule.Service'
+$scheduler.Connect()
+$root = $scheduler.GetFolder('\')
+$registered = @($root.GetTasks(1) | Where-Object { $_.Name -eq $taskName } | Select-Object -First 1)
+$legacyRegistered = @($root.GetTasks(1) | Where-Object { $_.Name -eq $legacyTaskName } | Select-Object -First 1)
+if ($registered.Count -gt 0 -and $registered[0].Definition.RegistrationInfo.Source -ne $taskSource) {
+    throw 'Scheduled task is not owned by this installation.'
+}
+if ($legacyRegistered.Count -gt 0 -and $legacyRegistered[0].Definition.RegistrationInfo.Source -ne $taskSource) {
+    throw 'Legacy scheduled task is not owned by this installation.'
+}
+
+# Remove only the legacy shortcut created by this package. A Startup LNK that
+# launches hidden PowerShell with ExecutionPolicy Bypass triggers AV heuristics.
+$shell = New-Object -ComObject WScript.Shell
+$legacyPath = Join-Path $shell.SpecialFolders.Item('Startup') 'Code Relax Bridge.lnk'
+$legacyLauncher = Join-Path $PSScriptRoot 'resident-start.ps1'
+$legacyExists = Test-Path -LiteralPath $legacyPath
+if ($Action -ne 'status' -and $legacyExists) {
+    $legacy = $shell.CreateShortcut($legacyPath)
+    if (-not $legacy.Arguments.Contains('"' + $legacyLauncher + '"')) {
+        throw 'Legacy startup shortcut is not owned by this installation.'
+    }
+}
+
+if ($Action -eq 'enable') {
+    if (-not (Test-Path -LiteralPath $NodePath) -or -not (Test-Path -LiteralPath $Entry) -or
+        -not (Test-Path -LiteralPath $launcher) -or -not (Test-Path -LiteralPath $wscript)) { throw 'Installed runtime is missing.' }
+    $definition = $scheduler.NewTask(0)
+    $definition.RegistrationInfo.Description = 'Start the Code Relax desktop service when this user signs in.'
+    $definition.RegistrationInfo.Source = $taskSource
+    $definition.Principal.UserId = $currentUser
+    $definition.Principal.LogonType = 3 # TASK_LOGON_INTERACTIVE_TOKEN
+    $definition.Principal.RunLevel = 0 # TASK_RUNLEVEL_LUA
+    $definition.Settings.Enabled = $true
+    $definition.Settings.Hidden = $true
+    $definition.Settings.StartWhenAvailable = $true
+    $definition.Settings.DisallowStartIfOnBatteries = $false
+    $definition.Settings.StopIfGoingOnBatteries = $false
+    $definition.Settings.ExecutionTimeLimit = 'PT5M'
+    $definition.Settings.MultipleInstances = 2 # TASK_INSTANCES_IGNORE_NEW
+    $trigger = $definition.Triggers.Create(9) # TASK_TRIGGER_LOGON
+    $trigger.UserId = $currentUser
+    $trigger.Enabled = $true
+    $exec = $definition.Actions.Create(0) # TASK_ACTION_EXEC
+    $exec.Path = $wscript
+    $exec.Arguments = $arguments
+    $exec.WorkingDirectory = $env:USERPROFILE
+    [void]$root.RegisterTaskDefinition($taskName, $definition, 6, $null, $null, 3, $null) # TASK_CREATE_OR_UPDATE
+    if ($legacyRegistered.Count -gt 0) { $root.DeleteTask($legacyTaskName, 0) }
+} elseif ($Action -eq 'disable') {
+    if ($registered.Count -gt 0) { $root.DeleteTask($taskName, 0) }
+    if ($legacyRegistered.Count -gt 0) { $root.DeleteTask($legacyTaskName, 0) }
+}
+if ($Action -ne 'status' -and $legacyExists) { Remove-Item -LiteralPath $legacyPath }
+
+$active = @($root.GetTasks(1) | Where-Object { $_.Name -eq $taskName } | Select-Object -First 1)
+$taskEnabled = $active.Count -gt 0 -and $active[0].Enabled
+$taskCurrent = $false
+if ($taskEnabled) {
+    $taskAction = $active[0].Definition.Actions.Item(1)
+    $taskCurrent = $taskAction.Path -ieq $wscript -and $taskAction.Arguments -ieq $arguments
+}
+@{
+    enabled=($taskCurrent -and $legacyRegistered.Count -eq 0)
+    taskPresent=$taskEnabled
+    path=$(if ($taskEnabled) { 'Task Scheduler:' + $taskPath } elseif ($legacyRegistered.Count -gt 0) { 'Task Scheduler:\' + $legacyTaskName } elseif ($legacyExists) { $legacyPath } else { 'Task Scheduler:' + $taskPath })
+    scope='current-user-logon'
+    mechanism=$(if ($taskCurrent -and $legacyRegistered.Count -eq 0) { 'task-scheduler' } elseif ($taskEnabled -or $legacyRegistered.Count -gt 0) { 'stale-task-scheduler' } elseif ($legacyExists) { 'legacy-startup-shortcut' } else { 'task-scheduler' })
+} | ConvertTo-Json -Compress

package/dist/src/platform/windows/resolve-state-root.ps1

@@ -1,14 +1,14 @@
-param([Parameter(Mandatory=$true)][string]$StateRoot)
-$ErrorActionPreference='Stop'
-[Console]::OutputEncoding=New-Object Text.UTF8Encoding($false)
-Add-Type -Path (Join-Path $PSScriptRoot 'IsolatedProcess.cs')
-New-Item -ItemType Directory -Path $StateRoot -Force | Out-Null
-$anchor=Join-Path $StateRoot 'bridge-config.json'
-$temporary=$false
-if(-not(Test-Path -LiteralPath $anchor)) {
-    $anchor=Join-Path $StateRoot ('.state-path-'+[Guid]::NewGuid().ToString()+'.tmp')
-    Set-Content -LiteralPath $anchor -Value 'path-resolution' -Encoding ASCII
-    $temporary=$true
-}
-try { [IO.Path]::GetDirectoryName([IsolatedProcess]::ResolvePath($anchor)) }
-finally { if($temporary){Remove-Item -LiteralPath $anchor} }
+param([Parameter(Mandatory=$true)][string]$StateRoot)
+$ErrorActionPreference='Stop'
+[Console]::OutputEncoding=New-Object Text.UTF8Encoding($false)
+Add-Type -Path (Join-Path $PSScriptRoot 'IsolatedProcess.cs')
+New-Item -ItemType Directory -Path $StateRoot -Force | Out-Null
+$anchor=Join-Path $StateRoot 'bridge-config.json'
+$temporary=$false
+if(-not(Test-Path -LiteralPath $anchor)) {
+    $anchor=Join-Path $StateRoot ('.state-path-'+[Guid]::NewGuid().ToString()+'.tmp')
+    Set-Content -LiteralPath $anchor -Value 'path-resolution' -Encoding ASCII
+    $temporary=$true
+}
+try { [IO.Path]::GetDirectoryName([IsolatedProcess]::ResolvePath($anchor)) }
+finally { if($temporary){Remove-Item -LiteralPath $anchor} }

package/dist/src/platform/windows/runtime-paths.mjs

@@ -1,20 +1,20 @@
-import os from 'node:os';
-import path from 'node:path';
-import fs from 'node:fs';
-
-// Windows host data locations. Keep existing paths and historical attachments.
-export function runtimePaths(environment = process.env, home = os.homedir()) {
-  const codexDataRoot = environment.CODEX_HOME?.trim() || path.join(home, '.codex');
-  const serviceRoot = path.join(environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'Programs', 'CodexRemote', 'service');
-  let installed;
-  try { installed = JSON.parse(fs.readFileSync(path.join(serviceRoot, 'installation.json'), 'utf8').replace(/^\uFEFF/, '')); }
-  catch (error) { if (error.code !== 'ENOENT') throw error; }
-  return {
-    codexDataRoot,
-    sessionsRoot: path.join(codexDataRoot, 'sessions'),
-    stateRoot: installed?.stateRoot || path.join(environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'CodexRemote'),
-    serviceRoot,
-    uploadsRoot: path.join(environment.ProgramData || 'C:\\ProgramData', 'CodexRemote', 'attachments'),
-    credentialsRoot: path.join(environment.ProgramData || 'C:\\ProgramData', 'CodexRemote', 'credentials'),
-  };
-}
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'node:fs';
+
+// Windows host data locations. Keep existing paths and historical attachments.
+export function runtimePaths(environment = process.env, home = os.homedir()) {
+  const codexDataRoot = environment.CODEX_HOME?.trim() || path.join(home, '.codex');
+  const serviceRoot = path.join(environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'Programs', 'CodexRemote', 'service');
+  let installed;
+  try { installed = JSON.parse(fs.readFileSync(path.join(serviceRoot, 'installation.json'), 'utf8').replace(/^\uFEFF/, '')); }
+  catch (error) { if (error.code !== 'ENOENT') throw error; }
+  return {
+    codexDataRoot,
+    sessionsRoot: path.join(codexDataRoot, 'sessions'),
+    stateRoot: installed?.stateRoot || path.join(environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'CodexRemote'),
+    serviceRoot,
+    uploadsRoot: path.join(environment.ProgramData || 'C:\\ProgramData', 'CodexRemote', 'attachments'),
+    credentialsRoot: path.join(environment.ProgramData || 'C:\\ProgramData', 'CodexRemote', 'credentials'),
+  };
+}