@walkhi/code-relax 0.1.0-beta.30 → 0.1.0-beta.32

package/dist/src/service-control.mjs

@@ -1,82 +1,82 @@
-import http from 'node:http';
-import { timingSafeEqual } from 'node:crypto';
-
-function matches(left, right) {
-  const a = Buffer.from(left || '');
-  const b = Buffer.from(right || '');
-  return a.length === b.length && timingSafeEqual(a, b);
-}
-
-// Separate from the LAN listener: mobile credentials never authorize lifecycle operations.
-export async function openControl({ instanceId, secret, shutdown, status = () => ({}), actions = {} }) {
-  const server = http.createServer((request, response) => {
-    if (!matches(request.headers.authorization, `Bearer ${secret}`)) {
-      response.writeHead(403).end();
-      return;
-    }
-    const action = Object.keys(actions).find(name => request.url === `/${instanceId}/${name}`);
-    if ((!action && request.url !== `/${instanceId}`) || !['GET', 'POST'].includes(request.method) || (action && request.method !== 'POST')) {
-      response.writeHead(404).end();
-      return;
-    }
-    response.setHeader('Content-Type', 'application/json');
-    response.setHeader('Connection', 'close');
-    if (action) {
-      Promise.resolve().then(async () => {
-        let body = '';
-        request.setEncoding('utf8');
-        for await (const chunk of request) {
-          body += chunk;
-          if (Buffer.byteLength(body) > 4096) throw new Error('管理请求过大');
-        }
-        const details = body ? JSON.parse(body) : {};
-        if (!details || typeof details !== 'object' || Array.isArray(details)) throw new Error('无效管理请求');
-        return actions[action](details);
-      }).then(result => {
-        response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
-      }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
-      return;
-    }
-    if (request.method === 'POST') response.once('finish', () => {
-      Promise.resolve(shutdown()).catch(error => {
-        console.error('桌面服务关闭失败：', error.message);
-        process.exitCode = 1;
-      });
-    });
-    response.end(JSON.stringify({ ...status(), instanceId, pid: process.pid }));
-  });
-  await new Promise((resolve, reject) => {
-    server.once('error', reject);
-    server.listen(0, '127.0.0.1', resolve);
-  });
-  return { port: server.address().port, close: () => new Promise((resolve, reject) => {
-    server.close(error => error ? reject(error) : resolve());
-  }) };
-}
-
-export function controlRequest(session, method = 'GET', action = '', details) {
-  return new Promise((resolve, reject) => {
-    const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
-      path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
-      headers: { Authorization: `Bearer ${session.controlSecret}` }, timeout: action ? 25000 : 2000 }, response => {
-      let body = '';
-      response.setEncoding('utf8');
-      response.on('data', chunk => { body += chunk; });
-      response.on('error', reject);
-      response.on('end', () => {
-        try {
-          if (response.statusCode === 409) throw new Error(JSON.parse(body).error);
-          if (response.statusCode !== 200) throw new Error('桌面服务管理通道身份验证失败。');
-          const identity = JSON.parse(body);
-          if (identity.instanceId !== session.instanceId || identity.pid !== session.pid) {
-            throw new Error('桌面服务实例身份不匹配。');
-          }
-          resolve(identity);
-        } catch (error) { reject(error); }
-      });
-    });
-    request.on('timeout', () => request.destroy(new Error('桌面服务管理通道响应超时。')));
-    request.on('error', reject);
-    request.end(details === undefined ? undefined : JSON.stringify(details));
-  });
-}
+import http from 'node:http';
+import { timingSafeEqual } from 'node:crypto';
+
+function matches(left, right) {
+  const a = Buffer.from(left || '');
+  const b = Buffer.from(right || '');
+  return a.length === b.length && timingSafeEqual(a, b);
+}
+
+// Separate from the LAN listener: mobile credentials never authorize lifecycle operations.
+export async function openControl({ instanceId, secret, shutdown, status = () => ({}), actions = {} }) {
+  const server = http.createServer((request, response) => {
+    if (!matches(request.headers.authorization, `Bearer ${secret}`)) {
+      response.writeHead(403).end();
+      return;
+    }
+    const action = Object.keys(actions).find(name => request.url === `/${instanceId}/${name}`);
+    if ((!action && request.url !== `/${instanceId}`) || !['GET', 'POST'].includes(request.method) || (action && request.method !== 'POST')) {
+      response.writeHead(404).end();
+      return;
+    }
+    response.setHeader('Content-Type', 'application/json');
+    response.setHeader('Connection', 'close');
+    if (action) {
+      Promise.resolve().then(async () => {
+        let body = '';
+        request.setEncoding('utf8');
+        for await (const chunk of request) {
+          body += chunk;
+          if (Buffer.byteLength(body) > 4096) throw new Error('管理请求过大');
+        }
+        const details = body ? JSON.parse(body) : {};
+        if (!details || typeof details !== 'object' || Array.isArray(details)) throw new Error('无效管理请求');
+        return actions[action](details);
+      }).then(result => {
+        response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
+      }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
+      return;
+    }
+    if (request.method === 'POST') response.once('finish', () => {
+      Promise.resolve(shutdown()).catch(error => {
+        console.error('桌面服务关闭失败：', error.message);
+        process.exitCode = 1;
+      });
+    });
+    response.end(JSON.stringify({ ...status(), instanceId, pid: process.pid }));
+  });
+  await new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', resolve);
+  });
+  return { port: server.address().port, close: () => new Promise((resolve, reject) => {
+    server.close(error => error ? reject(error) : resolve());
+  }) };
+}
+
+export function controlRequest(session, method = 'GET', action = '', details) {
+  return new Promise((resolve, reject) => {
+    const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
+      path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
+      headers: { Authorization: `Bearer ${session.controlSecret}` }, timeout: action ? 25000 : 2000 }, response => {
+      let body = '';
+      response.setEncoding('utf8');
+      response.on('data', chunk => { body += chunk; });
+      response.on('error', reject);
+      response.on('end', () => {
+        try {
+          if (response.statusCode === 409) throw new Error(JSON.parse(body).error);
+          if (response.statusCode !== 200) throw new Error('桌面服务管理通道身份验证失败。');
+          const identity = JSON.parse(body);
+          if (identity.instanceId !== session.instanceId || identity.pid !== session.pid) {
+            throw new Error('桌面服务实例身份不匹配。');
+          }
+          resolve(identity);
+        } catch (error) { reject(error); }
+      });
+    });
+    request.on('timeout', () => request.destroy(new Error('桌面服务管理通道响应超时。')));
+    request.on('error', reject);
+    request.end(details === undefined ? undefined : JSON.stringify(details));
+  });
+}

package/dist/src/service-doctor.mjs

@@ -1,110 +1,110 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import os from 'node:os';
-import { readRecord } from './service-lifecycle.mjs';
-import { inspectSkill } from './skill-install.mjs';
-import { recoveryStatus } from './shared-recovery.mjs';
-
-export async function doctor({ paths, host, service, skillTarget, ensureAutostart, diagnostics = false }) {
-  const checks = [];
-  let installedVersion;
-  let kernelUpdate = null;
-  let desktopRecovery = null;
-  let serviceState = null;
-  const add = (id, status, message) => checks.push({ id, status, message });
-  const check = async (id, task) => {
-    try { await task(); } catch (error) { add(id, 'error', error.message); }
-  };
-  await check('installation', async () => {
-    const record = readRecord(path.join(paths.serviceRoot, 'installation.json'));
-    if (!record || !fs.existsSync(path.join(paths.serviceRoot, 'dist/bin/codex-remote.mjs'))) throw Error('尚未完整部署服务，请重新安装 Code Relax。');
-    if (!record.nodeExecutable || !fs.existsSync(record.nodeExecutable)) throw Error('记录的 Node 已失效，请用可用的 Node 重新安装 Code Relax。');
-    installedVersion = record.version;
-    add('installation', 'ok', `已安装版本：${record.version}；Node：${record.nodeExecutable}`);
-  });
-  await check('bridge-runtime', async () => {
-    await host.bridgeEnvironment();
-    add('bridge-runtime', 'ok', '桌面服务启动环境正常。');
-  });
-  await check('network', async () => {
-    const address = await host.lanAddress();
-    if (!address) { add('network', 'warning', '未连接局域网；需要局域网连接时，请接入 Wi-Fi 或有线网络。'); return; }
-    add('network', 'ok', `局域网地址：${address}`);
-  });
-  await check('autostart', async () => {
-    const state = await ensureAutostart();
-    add('autostart', 'ok', `当前用户登录自启：${state.repaired ? '已自动恢复' : '已启用'}。`);
-  });
-  await check('service', async () => {
-    const state = await service.status();
-    serviceState = state;
-    add('service', state.running ? 'ok' : 'error', state.running
-      ? `本机服务正常：${state.mode}，端口 ${state.port}，运行版本：${state.version || '未知'}` : '服务未就绪；安装后执行 relax start。');
-    if (state.running && installedVersion && state.version !== installedVersion) add('service-version', 'warning', state.version
-      ? `已安装版本 ${installedVersion}，但当前运行版本为 ${state.version}；请重新执行安装或重启工作站服务。`
-      : `已安装版本 ${installedVersion}，但当前运行的桌面服务未报告版本，可能仍是旧进程；请重新执行安装或重启桌面服务。`);
-    const currentVersion = state.managedAppServer?.version || null;
-    const selectedVersion = state.managedAppServer?.selectedVersion || null;
-    if (state.managedAppServer) kernelUpdate = { pending: state.managedAppServer.updatePending === true,
-      currentVersion, selectedVersion,
-      command: state.managedAppServer.updatePending ? 'relax kernel-restart --confirm' : null };
-    if (state.running) add('managed-app-server', state.managedAppServer?.state === 'ready' ? 'ok' : 'error',
-      state.managedAppServer?.state === 'ready' ? `Codex 内核已就绪：版本 ${currentVersion || '未知'}。`
-        : `${state.managedAppServer?.error || 'Codex 内核尚未就绪。'} 请执行 relax setup 修复；若提示未安装或未登录 Codex，请先完成安装和登录。`);
-    if (state.managedAppServer?.updatePending) {
-      const versionDetail = currentVersion && selectedVersion && currentVersion === selectedVersion
-        ? `内核版本号未变（${currentVersion}），重启后将使用更新后的安装文件`
-        : `当前内核 ${currentVersion || '未知'}，待应用 ${selectedVersion || '未知'}`;
-      add('managed-app-server-update', 'warning',
-        `Codex 更新待应用：${versionDetail}；执行 relax kernel-restart --confirm 应用更新。`);
-    }
-    if (state.managedAppServer?.launcherRestartRequired) add('managed-app-server-launcher', 'warning',
-      '工作站更新尚未完全生效，请执行 relax setup。');
-  });
-  if (diagnostics) {
-    try { desktopRecovery = await recoveryStatus(paths.stateRoot); }
-    catch (error) { desktopRecovery = { status: 'unknown', error: error.message }; }
-  }
-  await check('skill', async () => {
-    const state = inspectSkill(skillTarget);
-    add('skill', state.managed ? 'ok' : 'warning', state.managed ? '本包管理的 Skill 已安装。'
-      : state.installed ? '存在同名自定义 Skill，本包不会覆盖。' : 'Skill 未安装；重新执行 relax setup。');
-  });
-  return { ready: !checks.some(item => item.status === 'error'), kernelUpdate, checks, ...(diagnostics ? { desktopRecovery, diagnostics: {
-    collectedAt: new Date().toISOString(), platform: process.platform, arch: process.arch, osRelease: os.release(),
-    nodeVersion: process.version, nodeExecutable: process.execPath, serviceRoot: paths.serviceRoot,
-    servicePid: serviceState?.pid || null, port: serviceState?.port || null, serviceVersion: serviceState?.version || null,
-  } } : {}) };
-}
-
-export function formatDoctorOutput(result, detail = false) {
-  const labels = { installation: '安装文件', 'bridge-runtime': '运行环境', network: '局域网',
-    autostart: '登录自启动', service: '工作站服务', 'managed-app-server': 'Codex 内核',
-    'service-version': '服务版本', 'managed-app-server-update': 'Codex 更新',
-    'managed-app-server-launcher': '工作站更新', skill: 'Codex Skill' };
-  const byId = id => result.checks.find(item => item.id === id);
-  const summary = (id, success) => {
-    const item = byId(id);
-    return `${labels[id]}：${!item ? '未检查（工作站服务尚未启动）' : item.status === 'ok' ? success : '异常，见下方处理方法'}`;
-  };
-  const issues = result.checks.filter(item => item.status !== 'ok');
-  const lines = [result.ready ? '工作站检查通过。' : '工作站检查发现问题。',
-    summary('installation', '完整'), summary('service', '正在运行'), summary('managed-app-server', '已就绪')];
-  if (issues.length) lines.push('', '需要处理或留意：', ...issues.map(item => `- ${labels[item.id] || item.id}：${item.message}`));
-  if (detail) {
-    const info = result.diagnostics || {};
-    lines.unshift('Code Relax 诊断报告（供客服或技术人员排查）', `采集时间：${info.collectedAt || '未知'}`,
-      `系统：${info.platform || process.platform} ${info.arch || process.arch} ${info.osRelease || ''}`,
-      `Node：${info.nodeVersion || process.version}；${info.nodeExecutable || process.execPath}`,
-      `服务目录：${info.serviceRoot || '未知'}`, `服务进程：${info.servicePid || '未运行'}；端口：${info.port || '未知'}`, '');
-    lines.push('', '检查详情：', ...result.checks.filter(item => item.status === 'ok').map(item => `- ${labels[item.id] || item.id}：${item.message}`));
-    const recovery = result.desktopRecovery;
-    if (recovery && !['none', 'unsupported'].includes(recovery.status)) {
-      const status = { failed: '未完成', completed: '已完成', succeeded: '已完成', running: '进行中', unknown: '无法读取' }[recovery.status] || recovery.status;
-      lines.push('', `Desktop 接入排障记录（仅用于排查上次接入，不代表当前服务状态）：上次 Codex Desktop 接入${status}。`);
-      if (recovery.error) lines.push(`记录原因：${recovery.error}`);
-    }
-  }
-  lines.push('', result.ready ? '添加手机：运行 relax pair 生成配对二维码。' : '按上述方法处理后，再运行 relax doctor。');
-  return lines.join('\n');
-}
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { readRecord } from './service-lifecycle.mjs';
+import { inspectSkill } from './skill-install.mjs';
+import { recoveryStatus } from './shared-recovery.mjs';
+
+export async function doctor({ paths, host, service, skillTarget, ensureAutostart, diagnostics = false }) {
+  const checks = [];
+  let installedVersion;
+  let kernelUpdate = null;
+  let desktopRecovery = null;
+  let serviceState = null;
+  const add = (id, status, message) => checks.push({ id, status, message });
+  const check = async (id, task) => {
+    try { await task(); } catch (error) { add(id, 'error', error.message); }
+  };
+  await check('installation', async () => {
+    const record = readRecord(path.join(paths.serviceRoot, 'installation.json'));
+    if (!record || !fs.existsSync(path.join(paths.serviceRoot, 'dist/bin/codex-remote.mjs'))) throw Error('尚未完整部署服务，请重新安装 Code Relax。');
+    if (!record.nodeExecutable || !fs.existsSync(record.nodeExecutable)) throw Error('记录的 Node 已失效，请用可用的 Node 重新安装 Code Relax。');
+    installedVersion = record.version;
+    add('installation', 'ok', `已安装版本：${record.version}；Node：${record.nodeExecutable}`);
+  });
+  await check('bridge-runtime', async () => {
+    await host.bridgeEnvironment();
+    add('bridge-runtime', 'ok', '桌面服务启动环境正常。');
+  });
+  await check('network', async () => {
+    const address = await host.lanAddress();
+    if (!address) { add('network', 'warning', '未连接局域网；需要局域网连接时，请接入 Wi-Fi 或有线网络。'); return; }
+    add('network', 'ok', `局域网地址：${address}`);
+  });
+  await check('autostart', async () => {
+    const state = await ensureAutostart();
+    add('autostart', 'ok', `当前用户登录自启：${state.repaired ? '已自动恢复' : '已启用'}。`);
+  });
+  await check('service', async () => {
+    const state = await service.status();
+    serviceState = state;
+    add('service', state.running ? 'ok' : 'error', state.running
+      ? `本机服务正常：${state.mode}，端口 ${state.port}，运行版本：${state.version || '未知'}` : '服务未就绪；安装后执行 relax start。');
+    if (state.running && installedVersion && state.version !== installedVersion) add('service-version', 'warning', state.version
+      ? `已安装版本 ${installedVersion}，但当前运行版本为 ${state.version}；请重新执行安装或重启工作站服务。`
+      : `已安装版本 ${installedVersion}，但当前运行的桌面服务未报告版本，可能仍是旧进程；请重新执行安装或重启桌面服务。`);
+    const currentVersion = state.managedAppServer?.version || null;
+    const selectedVersion = state.managedAppServer?.selectedVersion || null;
+    if (state.managedAppServer) kernelUpdate = { pending: state.managedAppServer.updatePending === true,
+      currentVersion, selectedVersion,
+      command: state.managedAppServer.updatePending ? 'relax kernel-restart --confirm' : null };
+    if (state.running) add('managed-app-server', state.managedAppServer?.state === 'ready' ? 'ok' : 'error',
+      state.managedAppServer?.state === 'ready' ? `Codex 内核已就绪：版本 ${currentVersion || '未知'}。`
+        : `${state.managedAppServer?.error || 'Codex 内核尚未就绪。'} 请执行 relax setup 修复；若提示未安装或未登录 Codex，请先完成安装和登录。`);
+    if (state.managedAppServer?.updatePending) {
+      const versionDetail = currentVersion && selectedVersion && currentVersion === selectedVersion
+        ? `内核版本号未变（${currentVersion}），重启后将使用更新后的安装文件`
+        : `当前内核 ${currentVersion || '未知'}，待应用 ${selectedVersion || '未知'}`;
+      add('managed-app-server-update', 'warning',
+        `Codex 更新待应用：${versionDetail}；执行 relax kernel-restart --confirm 应用更新。`);
+    }
+    if (state.managedAppServer?.launcherRestartRequired) add('managed-app-server-launcher', 'warning',
+      '工作站更新尚未完全生效，请执行 relax setup。');
+  });
+  if (diagnostics) {
+    try { desktopRecovery = await recoveryStatus(paths.stateRoot); }
+    catch (error) { desktopRecovery = { status: 'unknown', error: error.message }; }
+  }
+  await check('skill', async () => {
+    const state = inspectSkill(skillTarget);
+    add('skill', state.managed ? 'ok' : 'warning', state.managed ? '本包管理的 Skill 已安装。'
+      : state.installed ? '存在同名自定义 Skill，本包不会覆盖。' : 'Skill 未安装；重新执行 relax setup。');
+  });
+  return { ready: !checks.some(item => item.status === 'error'), kernelUpdate, checks, ...(diagnostics ? { desktopRecovery, diagnostics: {
+    collectedAt: new Date().toISOString(), platform: process.platform, arch: process.arch, osRelease: os.release(),
+    nodeVersion: process.version, nodeExecutable: process.execPath, serviceRoot: paths.serviceRoot,
+    servicePid: serviceState?.pid || null, port: serviceState?.port || null, serviceVersion: serviceState?.version || null,
+  } } : {}) };
+}
+
+export function formatDoctorOutput(result, detail = false) {
+  const labels = { installation: '安装文件', 'bridge-runtime': '运行环境', network: '局域网',
+    autostart: '登录自启动', service: '工作站服务', 'managed-app-server': 'Codex 内核',
+    'service-version': '服务版本', 'managed-app-server-update': 'Codex 更新',
+    'managed-app-server-launcher': '工作站更新', skill: 'Codex Skill' };
+  const byId = id => result.checks.find(item => item.id === id);
+  const summary = (id, success) => {
+    const item = byId(id);
+    return `${labels[id]}：${!item ? '未检查（工作站服务尚未启动）' : item.status === 'ok' ? success : '异常，见下方处理方法'}`;
+  };
+  const issues = result.checks.filter(item => item.status !== 'ok');
+  const lines = [result.ready ? '工作站检查通过。' : '工作站检查发现问题。',
+    summary('installation', '完整'), summary('service', '正在运行'), summary('managed-app-server', '已就绪')];
+  if (issues.length) lines.push('', '需要处理或留意：', ...issues.map(item => `- ${labels[item.id] || item.id}：${item.message}`));
+  if (detail) {
+    const info = result.diagnostics || {};
+    lines.unshift('Code Relax 诊断报告（供客服或技术人员排查）', `采集时间：${info.collectedAt || '未知'}`,
+      `系统：${info.platform || process.platform} ${info.arch || process.arch} ${info.osRelease || ''}`,
+      `Node：${info.nodeVersion || process.version}；${info.nodeExecutable || process.execPath}`,
+      `服务目录：${info.serviceRoot || '未知'}`, `服务进程：${info.servicePid || '未运行'}；端口：${info.port || '未知'}`, '');
+    lines.push('', '检查详情：', ...result.checks.filter(item => item.status === 'ok').map(item => `- ${labels[item.id] || item.id}：${item.message}`));
+    const recovery = result.desktopRecovery;
+    if (recovery && !['none', 'unsupported'].includes(recovery.status)) {
+      const status = { failed: '未完成', completed: '已完成', succeeded: '已完成', running: '进行中', unknown: '无法读取' }[recovery.status] || recovery.status;
+      lines.push('', `Desktop 接入排障记录（仅用于排查上次接入，不代表当前服务状态）：上次 Codex Desktop 接入${status}。`);
+      if (recovery.error) lines.push(`记录原因：${recovery.error}`);
+    }
+  }
+  lines.push('', result.ready ? '添加手机：运行 relax pair 生成配对二维码。' : '按上述方法处理后，再运行 relax doctor。');
+  return lines.join('\n');
+}

package/dist/src/service-health.mjs

@@ -1,33 +1,33 @@
-import WebSocket from 'ws';
-
-// Use the same authenticated LAN protocol as mobile clients; never replay requests.
-export function serviceHealth(session) {
-  if (!session) return Promise.resolve(null);
-  return new Promise((resolve, reject) => {
-    const token = new URL(session.accessUrl).searchParams.get('token');
-    const socket = new WebSocket(`ws://127.0.0.1:${session.port}/api/socket`);
-    let done = false;
-    const finish = (error, value = null) => {
-      if (done) return;
-      done = true;
-      clearTimeout(timer);
-      socket.terminate();
-      if (error) reject(error); else resolve(value);
-    };
-    const timer = setTimeout(() => finish(new Error('桌面服务健康检查超时。')), 6000);
-    socket.on('open', () => socket.send(JSON.stringify({ type: 'auth', token })));
-    socket.on('message', data => {
-      try {
-        const message = JSON.parse(data.toString());
-        if (message.type === 'ready') {
-          socket.send(JSON.stringify({ type: 'request', id: 1, method: 'GET', path: '/api/health' }));
-        } else if (message.type === 'response' && message.id === 1) {
-          finish(null, message.status === 200 ? message.body : null);
-        }
-      } catch (error) { finish(error); }
-    });
-    socket.on('error', error => finish(error.code === 'ECONNREFUSED' ? null : error));
-    socket.on('close', code => finish(new Error(code === 1008
-      ? '桌面服务健康检查鉴权失败。' : '桌面服务健康检查连接已断开。')));
-  });
-}
+import WebSocket from 'ws';
+
+// Use the same authenticated LAN protocol as mobile clients; never replay requests.
+export function serviceHealth(session) {
+  if (!session) return Promise.resolve(null);
+  return new Promise((resolve, reject) => {
+    const token = new URL(session.accessUrl).searchParams.get('token');
+    const socket = new WebSocket(`ws://127.0.0.1:${session.port}/api/socket`);
+    let done = false;
+    const finish = (error, value = null) => {
+      if (done) return;
+      done = true;
+      clearTimeout(timer);
+      socket.terminate();
+      if (error) reject(error); else resolve(value);
+    };
+    const timer = setTimeout(() => finish(new Error('桌面服务健康检查超时。')), 6000);
+    socket.on('open', () => socket.send(JSON.stringify({ type: 'auth', token })));
+    socket.on('message', data => {
+      try {
+        const message = JSON.parse(data.toString());
+        if (message.type === 'ready') {
+          socket.send(JSON.stringify({ type: 'request', id: 1, method: 'GET', path: '/api/health' }));
+        } else if (message.type === 'response' && message.id === 1) {
+          finish(null, message.status === 200 ? message.body : null);
+        }
+      } catch (error) { finish(error); }
+    });
+    socket.on('error', error => finish(error.code === 'ECONNREFUSED' ? null : error));
+    socket.on('close', code => finish(new Error(code === 1008
+      ? '桌面服务健康检查鉴权失败。' : '桌面服务健康检查连接已断开。')));
+  });
+}