@walkhi/code-relax 0.1.0-beta.4 → 0.1.0-beta.40

package/dist/src/platform/windows/codex-runtime.mjs

@@ -0,0 +1,215 @@
+import fs from 'node:fs';
+import { compareVersions, verifyProtocol } from '../codex-protocol.mjs';
+import os from 'node:os';
+import path from 'node:path';
+import { createRequire } from 'node:module';
+import { execFile } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+import { promisify } from 'node:util';
+import { readRecord, writeRecord } from '../../service-lifecycle.mjs';
+
+const exec = promisify(execFile);
+export const codeModeHostPath = executable => path.join(path.dirname(executable), 'codex-code-mode-host.exe');
+export const runtimeFilesAvailable = executable => fs.existsSync(executable) && fs.existsSync(codeModeHostPath(executable));
+const fingerprint = executable => [executable, codeModeHostPath(executable)]
+  .map(file => { const s = fs.statSync(file); return `${s.size}:${s.mtimeMs}`; }).join('|');
+export const runtimeFingerprint = fingerprint;
+const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+const desktopRuntimeScript = path.join(path.dirname(fileURLToPath(import.meta.url)), 'desktop-runtime.ps1');
+
+async function fileHash(file) {
+  const hash = createHash('sha256');
+  for await (const chunk of fs.createReadStream(file)) hash.update(chunk);
+  return hash.digest('hex');
+}
+
+async function installedDesktopRuntime() {
+  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass',
+    '-File', desktopRuntimeScript], { windowsHide: true, encoding: 'utf8', timeout: 30000 });
+  return JSON.parse(stdout.trim());
+}
+
+async function matchesInstalledDesktop(executable, installed) {
+  if (!installed || !runtimeFilesAvailable(executable) || !runtimeFilesAvailable(installed.executable)) return false;
+  const files = [[executable, installed.executable], [codeModeHostPath(executable), installed.codeModeHost]];
+  for (const [candidate, bundled] of files) {
+    if (fs.statSync(candidate).size !== fs.statSync(bundled).size || await fileHash(candidate) !== await fileHash(bundled)) return false;
+  }
+  return true;
+}
+
+function runtimeFiles(directory, relative = '') {
+  const files = [];
+  for (const entry of fs.readdirSync(path.join(directory, relative), { withFileTypes: true })) {
+    const name = path.join(relative, entry.name);
+    if (entry.isDirectory()) files.push(...runtimeFiles(directory, name));
+    else if (entry.isFile()) files.push(name);
+    else throw new Error(`Codex 内核目录包含不支持的文件类型：${name}`);
+  }
+  return files.sort();
+}
+
+function runtimeDirectories(files) {
+  const directories = new Set();
+  for (const file of files) {
+    let directory = path.dirname(file);
+    while (directory !== '.') { directories.add(directory); directory = path.dirname(directory); }
+  }
+  return [...directories].sort((a, b) => a.split(path.sep).length - b.split(path.sep).length);
+}
+
+async function retainDesktopRuntime(executable, installed, stateRoot) {
+  if (!/^[\w.-]+$/.test(installed.package)) throw new Error('Codex Desktop 安装包名称无效。');
+  const source = path.dirname(executable);
+  const files = runtimeFiles(source);
+  if (files.includes('runtime.json')) throw new Error('Codex 内核目录与保留清单文件名冲突。');
+  const directories = runtimeDirectories(files);
+  const root = path.join(stateRoot, 'desktop-runtimes');
+  const target = path.join(root, installed.package);
+  const retained = path.join(target, 'codex.exe');
+  if (fs.existsSync(target)) {
+    const manifest = readRecord(path.join(target, 'runtime.json'));
+    if (manifest?.package !== installed.package || JSON.stringify(manifest.files) !== JSON.stringify(files)
+      || JSON.stringify(runtimeFiles(target)) !== JSON.stringify([...files, 'runtime.json'].sort())
+      || !await matchesInstalledDesktop(retained, installed)) {
+      throw new Error(`已保留的 Codex 内核文件不完整：${target}`);
+    }
+    return retained;
+  }
+  fs.mkdirSync(root, { recursive: true });
+  const staging = path.join(root, `.${installed.package}.${randomUUID()}.tmp`);
+  fs.mkdirSync(staging);
+  const created = [];
+  try {
+    for (const directory of directories) fs.mkdirSync(path.join(staging, directory));
+    for (const name of files) {
+      const from = path.join(source, name), to = path.join(staging, name);
+      created.push(to);
+      try { fs.linkSync(from, to); }
+      catch (error) {
+        if (error.code !== 'EXDEV') throw error;
+        fs.copyFileSync(from, to);
+      }
+    }
+    if (!await matchesInstalledDesktop(path.join(staging, 'codex.exe'), installed)) {
+      throw new Error('保留的 Codex 内核与当前安装包不一致。');
+    }
+    const manifestPath = path.join(staging, 'runtime.json');
+    writeRecord(manifestPath, { package: installed.package, files });
+    created.push(manifestPath);
+    fs.renameSync(staging, target);
+    return retained;
+  } catch (error) {
+    for (const file of created) fs.rmSync(file, { force: true });
+    for (const directory of directories.reverse()) {
+      const nested = path.join(staging, directory);
+      if (fs.existsSync(nested)) fs.rmdirSync(nested);
+    }
+    fs.rmdirSync(staging);
+    throw error;
+  }
+}
+
+export function pruneRetainedDesktopRuntimes(stateRoot, keepExecutable) {
+  const root = path.join(stateRoot, 'desktop-runtimes');
+  if (!fs.existsSync(root)) return;
+  const keep = path.resolve(path.dirname(keepExecutable)).toLowerCase();
+  for (const entry of fs.readdirSync(root, { withFileTypes: true })) {
+    if (!entry.isDirectory() || !/^OpenAI\.Codex_[\w.-]+$/.test(entry.name)) continue;
+    const directory = path.join(root, entry.name);
+    if (path.resolve(directory).toLowerCase() === keep || fs.lstatSync(directory).isSymbolicLink()) continue;
+    const manifest = readRecord(path.join(directory, 'runtime.json'));
+    const files = manifest?.files;
+    if (manifest?.package !== entry.name || !Array.isArray(files) || !files.includes('codex.exe')
+      || !files.includes('codex-code-mode-host.exe') || new Set(files).size !== files.length
+      || !files.every(name => typeof name === 'string' && name !== 'runtime.json'
+        && path.resolve(directory, name).toLowerCase().startsWith(`${path.resolve(directory).toLowerCase()}${path.sep}`))) continue;
+    const expected = [...files, 'runtime.json'].sort();
+    if (JSON.stringify(runtimeFiles(directory)) !== JSON.stringify(expected)) continue;
+    if (!fs.lstatSync(path.join(directory, 'runtime.json')).isFile()
+      || !files.every(name => fs.lstatSync(path.join(directory, name)).isFile())) continue;
+    for (const name of files) fs.unlinkSync(path.join(directory, name));
+    fs.unlinkSync(path.join(directory, 'runtime.json'));
+    for (const name of runtimeDirectories(files).reverse()) fs.rmdirSync(path.join(directory, name));
+    fs.rmdirSync(directory);
+  }
+}
+
+// Resolve native binaries, never execute a shell shim from a background task.
+export function discoverCodex(environment = process.env) {
+  const found = new Map();
+  const add = (file, source) => {
+    if (!fs.existsSync(file) || !fs.statSync(file).isFile()) return;
+    const executable = fs.realpathSync(file);
+    if (!found.has(executable.toLowerCase()) || source === 'desktop') found.set(executable.toLowerCase(), { executable, source });
+  };
+  if (environment.CODE_RELAX_CODEX_PATH) {
+    const file = environment.CODE_RELAX_CODEX_PATH;
+    if (!path.isAbsolute(file) || path.basename(file).toLowerCase() !== 'codex.exe') throw new Error('CODE_RELAX_CODEX_PATH 必须是 codex.exe 的绝对路径。');
+    add(file, 'explicit');
+    if (!found.size) throw new Error('CODE_RELAX_CODEX_PATH 指定的程序不存在。');
+    return [...found.values()];
+  }
+  const local = environment.LOCALAPPDATA || path.join(os.homedir(), 'AppData/Local');
+  const home = environment.CODEX_HOME || path.join(os.homedir(), '.codex');
+  const directories = [...String(environment.PATH || environment.Path || '').split(';').filter(Boolean),
+    environment.CODEX_INSTALL_DIR, path.join(local, 'Programs/OpenAI/Codex/bin'),
+    path.join(home, 'packages/standalone/current/bin')].filter(Boolean);
+  for (const directory of directories) {
+    add(path.join(directory, 'codex.exe'), 'cli');
+    const packageFile = path.join(directory, 'node_modules/@openai/codex/package.json');
+    if (!fs.existsSync(packageFile)) continue;
+    const root = path.dirname(fs.realpathSync(packageFile));
+    let vendor = path.join(root, 'vendor');
+    try { vendor = path.join(path.dirname(createRequire(packageFile).resolve('@openai/codex-win32-x64/package.json')), 'vendor'); }
+    catch (error) { if (error.code !== 'MODULE_NOT_FOUND') throw error; }
+    add(path.join(vendor, 'x86_64-pc-windows-msvc/bin/codex.exe'), 'npm');
+  }
+  const desktopRoot = path.join(local, 'OpenAI/Codex/bin');
+  add(path.join(desktopRoot, 'codex.exe'), 'desktop');
+  if (fs.existsSync(desktopRoot)) for (const entry of fs.readdirSync(desktopRoot, { withFileTypes: true })) {
+    if (entry.isDirectory()) add(path.join(desktopRoot, entry.name, 'codex.exe'), 'desktop');
+  }
+  return [...found.values()];
+}
+
+export async function resolveCodexRuntime(stateRoot, { refresh = false, environment = process.env } = {}) {
+  fs.mkdirSync(stateRoot, { recursive: true });
+  const recordFile = path.join(stateRoot, 'codex-runtime.json');
+  const saved = readRecord(recordFile);
+  environment = { ...environment,
+    CODEX_HOME: environment.CODEX_HOME || saved?.codexHome || path.join(os.homedir(), '.codex'),
+    CODE_RELAX_CODEX_PATH: environment.CODE_RELAX_CODEX_PATH || (saved?.source === 'explicit' ? saved.executable : '') };
+  if (!refresh && saved?.executable && runtimeFilesAvailable(saved.executable)
+    && saved.fingerprint === fingerprint(saved.executable)) return saved;
+  const candidates = [], rejected = [];
+  let installed = null;
+  try { installed = await installedDesktopRuntime(); }
+  catch (error) { rejected.push(`无法读取当前 Codex Desktop 安装包：${error.message}`); }
+  for (const candidate of discoverCodex(environment)) {
+    try {
+      if (!runtimeFilesAvailable(candidate.executable)) throw new Error('缺少同目录的 codex-code-mode-host.exe');
+      if (candidate.source === 'desktop' && !await matchesInstalledDesktop(candidate.executable, installed)) {
+        throw new Error('不是当前 Codex Desktop 安装包配套的 CLI');
+      }
+      const { stdout } = await exec(candidate.executable, ['--version'], { windowsHide: true, timeout: 10000 });
+      const version = /^codex-cli (\d+\.\d+\.\d+(?:-[\w.]+)?)/m.exec(stdout)?.[1];
+      if (!version) throw new Error('无法识别版本');
+      candidates.push({ ...candidate, version });
+    } catch (error) { rejected.push(`${candidate.executable}: ${error.message}`); }
+  }
+  candidates.sort((a, b) => Number(b.source === 'desktop') - Number(a.source === 'desktop') || compareVersions(b.version, a.version));
+  for (const candidate of candidates) {
+    try {
+      const executable = candidate.source === 'desktop'
+        ? await retainDesktopRuntime(candidate.executable, installed, stateRoot) : candidate.executable;
+      await verifyProtocol(executable, stateRoot);
+      const result = { ...candidate, executable, fingerprint: fingerprint(executable),
+        codexHome: path.resolve(environment.CODEX_HOME || path.join(os.homedir(), '.codex')) };
+      writeRecord(recordFile, result);
+      return result;
+    } catch (error) { rejected.push(`${candidate.executable}: ${error.message}`); }
+  }
+  throw new Error(`未找到兼容的 Codex CLI，请安装或更新 Codex CLI 后执行 relax setup。${rejected.length ? '\n' + rejected.join('\n') : ''}`);
+}

package/dist/src/platform/windows/credential-store.mjs

@@ -1,27 +1,27 @@
-import { spawn } from 'node:child_process';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { runtimePaths } from './runtime-paths.mjs';
-
-// Secrets travel over stdin/stdout only; never PowerShell arguments or errors.
-export function credentialStore(action, record, root = runtimePaths().credentialsRoot) {
-  if (process.platform !== 'win32') throw new Error('Credential platform adapter unavailable');
-  return new Promise((resolve, reject) => {
-    const child = spawn(path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe'),
-      ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
-        fileURLToPath(new URL('./credential-store.ps1', import.meta.url))],
-      { windowsHide: true, stdio: ['pipe', 'pipe', 'pipe'] });
-    let output = '', diagnostic = '';
-    const timer = setTimeout(() => child.kill(), 15000);
-    child.stdout.setEncoding('utf8'); child.stdout.on('data', data => { output += data; });
-    child.stderr.setEncoding('utf8'); child.stderr.on('data', data => { diagnostic += data; }); child.stdin.on('error', () => {});
-    child.once('error', () => { clearTimeout(timer); reject(new Error('无法启动 Windows 凭据保护组件')); });
-    child.once('close', code => {
-      clearTimeout(timer);
-      if (code !== 0) return reject(new Error('Windows 凭据保护失败，未使用明文替代；请检查目录权限或 Windows 用户是否一致；' + diagnostic.trim()));
-      try { resolve(JSON.parse(output.replace(/^\uFEFF/, ''))); }
-      catch { reject(new Error('Windows 凭据保护返回无效结果')); }
-    });
-    child.stdin.end(JSON.stringify({ action, root, record }));
-  });
-}
+import { spawn } from 'node:child_process';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { runtimePaths } from './runtime-paths.mjs';
+
+// Secrets travel over stdin/stdout only; never PowerShell arguments or errors.
+export function credentialStore(action, record, root = runtimePaths().credentialsRoot) {
+  if (process.platform !== 'win32') throw new Error('Credential platform adapter unavailable');
+  return new Promise((resolve, reject) => {
+    const child = spawn(path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe'),
+      ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
+        fileURLToPath(new URL('./credential-store.ps1', import.meta.url))],
+      { windowsHide: true, stdio: ['pipe', 'pipe', 'pipe'] });
+    let output = '', diagnostic = '';
+    const timer = setTimeout(() => child.kill(), 15000);
+    child.stdout.setEncoding('utf8'); child.stdout.on('data', data => { output += data; });
+    child.stderr.setEncoding('utf8'); child.stderr.on('data', data => { diagnostic += data; }); child.stdin.on('error', () => {});
+    child.once('error', () => { clearTimeout(timer); reject(new Error('无法启动 Windows 凭据保护组件')); });
+    child.once('close', code => {
+      clearTimeout(timer);
+      if (code !== 0) return reject(new Error('Windows 凭据保护失败，未使用明文替代；请检查目录权限或 Windows 用户是否一致；' + diagnostic.trim()));
+      try { resolve(JSON.parse(output.replace(/^\uFEFF/, ''))); }
+      catch { reject(new Error('Windows 凭据保护返回无效结果')); }
+    });
+    child.stdin.end(JSON.stringify({ action, root, record }));
+  });
+}

package/dist/src/platform/windows/credential-store.ps1

@@ -1,49 +1,49 @@
-$ErrorActionPreference = 'Stop'
-[Console]::InputEncoding = New-Object System.Text.UTF8Encoding($false)
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-try {
-  Add-Type -AssemblyName System.Security
-  $request = [Console]::In.ReadToEnd() | ConvertFrom-Json
-  $sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
-  $directory = Join-Path ([System.IO.Path]::GetFullPath($request.root)) $sid.Value
-  if (!(Test-Path -LiteralPath $directory)) { New-Item -ItemType Directory -Path $directory -Force | Out-Null }
-  if ((Get-Item -LiteralPath $directory).Attributes -band [System.IO.FileAttributes]::ReparsePoint) { throw 'Invalid credential directory' }
-  $acl = New-Object System.Security.AccessControl.DirectorySecurity
-  $acl.SetAccessRuleProtection($true, $false)
-  foreach ($principal in @($sid.Value, 'S-1-5-18', 'S-1-5-32-544')) {
-    $identity = New-Object System.Security.Principal.SecurityIdentifier($principal)
-    $rule = New-Object System.Security.AccessControl.FileSystemAccessRule($identity, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
-    $acl.AddAccessRule($rule)
-  }
-  [System.IO.Directory]::SetAccessControl($directory, $acl)
-  $file = Join-Path $directory 'self-relay.json'
-  if (Test-Path -LiteralPath $file) {
-    if ((Get-Item -LiteralPath $file).Attributes -band [System.IO.FileAttributes]::ReparsePoint) { throw 'Invalid credential file' }
-  }
-  if ($request.action -eq 'save') {
-    $plain = [System.Text.Encoding]::UTF8.GetBytes(($request.record | ConvertTo-Json -Depth 12 -Compress))
-    $encrypted = [System.Security.Cryptography.ProtectedData]::Protect($plain, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
-    $json = @{ version = 1; protection = 'DPAPI-CurrentUser'; data = [Convert]::ToBase64String($encrypted) } | ConvertTo-Json -Compress
-    $temporary = Join-Path $directory ([Guid]::NewGuid().ToString() + '.tmp')
-    $backup = $temporary + '.bak'
-    try {
-      $stream = [System.IO.File]::Open($temporary, [System.IO.FileMode]::CreateNew, [System.IO.FileAccess]::Write)
-      try { $bytes = [System.Text.Encoding]::UTF8.GetBytes($json); $stream.Write($bytes, 0, $bytes.Length); $stream.Flush($true) } finally { $stream.Dispose() }
-      if (Test-Path -LiteralPath $file) { [System.IO.File]::Replace($temporary, $file, $backup) } else { [System.IO.File]::Move($temporary, $file) }
-    } finally {
-      if (Test-Path -LiteralPath $temporary) { Remove-Item -LiteralPath $temporary -Force }
-      if (Test-Path -LiteralPath $backup) { Remove-Item -LiteralPath $backup -Force }
-    }
-  } elseif ($request.action -ne 'load') { throw 'Invalid operation' }
-  $record = $null
-  if (Test-Path -LiteralPath $file) {
-    $envelope = [System.IO.File]::ReadAllText($file, [System.Text.Encoding]::UTF8) | ConvertFrom-Json
-    if ($envelope.version -ne 1 -or $envelope.protection -ne 'DPAPI-CurrentUser') { throw 'Invalid credential envelope' }
-    $plain = [System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($envelope.data), $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
-    $record = [System.Text.Encoding]::UTF8.GetString($plain) | ConvertFrom-Json
-  }
-  [Console]::Write((@{ path = $file; record = $record } | ConvertTo-Json -Depth 12 -Compress))
-} catch {
-  [Console]::Error.WriteLine('Credential protection failed: ' + $_.Exception.GetType().Name + ' at line ' + $_.InvocationInfo.ScriptLineNumber)
-  exit 1
-}
+$ErrorActionPreference = 'Stop'
+[Console]::InputEncoding = New-Object System.Text.UTF8Encoding($false)
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+try {
+  Add-Type -AssemblyName System.Security
+  $request = [Console]::In.ReadToEnd() | ConvertFrom-Json
+  $sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
+  $directory = Join-Path ([System.IO.Path]::GetFullPath($request.root)) $sid.Value
+  if (!(Test-Path -LiteralPath $directory)) { New-Item -ItemType Directory -Path $directory -Force | Out-Null }
+  if ((Get-Item -LiteralPath $directory).Attributes -band [System.IO.FileAttributes]::ReparsePoint) { throw 'Invalid credential directory' }
+  $acl = New-Object System.Security.AccessControl.DirectorySecurity
+  $acl.SetAccessRuleProtection($true, $false)
+  foreach ($principal in @($sid.Value, 'S-1-5-18', 'S-1-5-32-544')) {
+    $identity = New-Object System.Security.Principal.SecurityIdentifier($principal)
+    $rule = New-Object System.Security.AccessControl.FileSystemAccessRule($identity, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
+    $acl.AddAccessRule($rule)
+  }
+  [System.IO.Directory]::SetAccessControl($directory, $acl)
+  $file = Join-Path $directory 'self-relay.json'
+  if (Test-Path -LiteralPath $file) {
+    if ((Get-Item -LiteralPath $file).Attributes -band [System.IO.FileAttributes]::ReparsePoint) { throw 'Invalid credential file' }
+  }
+  if ($request.action -eq 'save') {
+    $plain = [System.Text.Encoding]::UTF8.GetBytes(($request.record | ConvertTo-Json -Depth 12 -Compress))
+    $encrypted = [System.Security.Cryptography.ProtectedData]::Protect($plain, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
+    $json = @{ version = 1; protection = 'DPAPI-CurrentUser'; data = [Convert]::ToBase64String($encrypted) } | ConvertTo-Json -Compress
+    $temporary = Join-Path $directory ([Guid]::NewGuid().ToString() + '.tmp')
+    $backup = $temporary + '.bak'
+    try {
+      $stream = [System.IO.File]::Open($temporary, [System.IO.FileMode]::CreateNew, [System.IO.FileAccess]::Write)
+      try { $bytes = [System.Text.Encoding]::UTF8.GetBytes($json); $stream.Write($bytes, 0, $bytes.Length); $stream.Flush($true) } finally { $stream.Dispose() }
+      if (Test-Path -LiteralPath $file) { [System.IO.File]::Replace($temporary, $file, $backup) } else { [System.IO.File]::Move($temporary, $file) }
+    } finally {
+      if (Test-Path -LiteralPath $temporary) { Remove-Item -LiteralPath $temporary -Force }
+      if (Test-Path -LiteralPath $backup) { Remove-Item -LiteralPath $backup -Force }
+    }
+  } elseif ($request.action -ne 'load') { throw 'Invalid operation' }
+  $record = $null
+  if (Test-Path -LiteralPath $file) {
+    $envelope = [System.IO.File]::ReadAllText($file, [System.Text.Encoding]::UTF8) | ConvertFrom-Json
+    if ($envelope.version -ne 1 -or $envelope.protection -ne 'DPAPI-CurrentUser') { throw 'Invalid credential envelope' }
+    $plain = [System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($envelope.data), $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
+    $record = [System.Text.Encoding]::UTF8.GetString($plain) | ConvertFrom-Json
+  }
+  [Console]::Write((@{ path = $file; record = $record } | ConvertTo-Json -Depth 12 -Compress))
+} catch {
+  [Console]::Error.WriteLine('Credential protection failed: ' + $_.Exception.GetType().Name + ' at line ' + $_.InvocationInfo.ScriptLineNumber)
+  exit 1
+}

package/dist/src/platform/windows/desktop-helper.mjs

@@ -0,0 +1,179 @@
+import net from 'node:net';
+import fs from 'node:fs';
+import path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { createHash } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+
+const exec = promisify(execFile);
+const binary = fileURLToPath(new URL('../../../native/desktop-helper/CodeRelaxDesktop.exe', import.meta.url));
+const powershell = path.join(process.env.SystemRoot || 'C:/Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+const quote = value => `'${String(value).replaceAll("'", "''")}'`;
+const encoded = script => Buffer.from(script, 'utf16le').toString('base64');
+const maxFrameBytes = 6 * 1024 * 1024;
+
+export async function desktopHelperStatus() {
+  if (process.platform !== 'win32' || !fs.existsSync(binary)) return { installed: false, running: false, state: 'unavailable' };
+  const { stdout } = await exec(binary, ['--status'], { windowsHide: true, encoding: 'utf8', timeout: 5000 });
+  const result = JSON.parse(stdout.trim());
+  if (result.error) throw new Error(result.error);
+  return result;
+}
+
+async function elevateHelper(argument) {
+  const script = `$ErrorActionPreference = 'Stop'; try { $child = Start-Process -FilePath ${quote(binary)} -ArgumentList ${quote(argument)} -Verb RunAs -PassThru -Wait; exit $child.ExitCode } catch { [Console]::Error.WriteLine($_.Exception.Message); exit 1 }`;
+  try { await exec(powershell, ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded(script)], { windowsHide: true, timeout: 180000 }); }
+  catch (error) { throw new Error(`桌面操作辅助服务配置未完成，需要在工作站确认 UAC：${error.stderr?.trim() || error.message}`); }
+}
+
+export async function removeDesktopHelper() {
+  const current = await desktopHelperStatus();
+  if (!current.installed) return { installed: false, removed: false };
+  await elevateHelper('--remove');
+  const result = await desktopHelperStatus();
+  if (result.installed) throw new Error('桌面操作辅助服务尚未移除。');
+  return { ...result, removed: true };
+}
+
+export async function installDesktopHelper() {
+  if (!fs.existsSync(binary)) throw new Error('缺少原生 桌面操作辅助组件，请先构建或安装完整 npm 包。');
+  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded('[Console]::OutputEncoding = New-Object Text.UTF8Encoding; [Security.Principal.WindowsIdentity]::GetCurrent().User.Value')], { windowsHide: true, encoding: 'utf8' });
+  const sid = stdout.trim();
+  if (!/^S-1-5-21-(?:\d+-){3}\d+$/.test(sid)) throw new Error('无法获取当前 Windows 用户 SID。');
+  const current = await desktopHelperStatus();
+  const hash = target => createHash('sha256').update(fs.readFileSync(target)).digest('hex');
+  if (current.running && current.userSid === sid && hash(binary) === hash(current.path)) return { ...current, changed: false };
+  // Only this installer is elevated. Node and the workstation remain user-level.
+  await elevateHelper(`--install ${sid}`);
+  const installed = await desktopHelperStatus();
+  if (!installed.running || installed.userSid !== sid) throw new Error('桌面操作辅助服务尚未就绪。');
+  return { ...installed, changed: true };
+}
+
+class PipeSession {
+  constructor() {
+    this.socket = net.createConnection('\\\\.\\pipe\\CodeRelax.Desktop.v1');
+    this.socket.setEncoding('utf8');
+    this.buffer = '';
+    this.waiter = null;
+    this.closed = false;
+    this.socket.on('data', data => {
+      this.buffer += data;
+      if (Buffer.byteLength(this.buffer) > maxFrameBytes) { this.fail(new Error('桌面画面超过大小限制')); return; }
+      const end = this.buffer.indexOf('\n');
+      if (end < 0) return;
+      try {
+        const result = JSON.parse(this.buffer.slice(0, end));
+        this.buffer = this.buffer.slice(end + 1);
+        if (!this.waiter) throw new Error('收到未请求的 桌面数据');
+        const waiter = this.waiter; this.waiter = null; clearTimeout(waiter.timer);
+        const complete = () => result.error
+          ? waiter.reject(Object.assign(new Error(result.error), { code: 'desktop_native_error' })) : waiter.resolve(result);
+        if (result.state === 'pending' || result.continuing === true) complete();
+        else this.socket.write('ACK\n', error => {
+          if (error) console.warn(JSON.stringify({ event: 'desktop-response-ack', code: error.code || 'write_failed' }));
+          // The parsed result remains authoritative even if cleanup disconnects.
+          complete();
+        });
+      } catch (error) { this.fail(error); }
+    });
+    this.socket.on('error', error => this.fail(error));
+    this.socket.on('close', () => { this.closed = true; this.fail(new Error('桌面操作辅助连接已关闭，请重新获取画面')); });
+  }
+  fail(error) {
+    if (this.waiter) { const waiter = this.waiter; this.waiter = null; clearTimeout(waiter.timer); waiter.reject(error); }
+    this.socket.destroy();
+  }
+  request(command) {
+    if (this.closed || this.socket.destroyed || this.waiter) return Promise.reject(new Error('桌面操作辅助连接不可用'));
+    return new Promise((resolve, reject) => {
+      this.waiter = { resolve, reject, timer: setTimeout(() => this.fail(new Error('桌面操作辅助请求超时；点击不会自动重发，请刷新画面核对')), 10000) };
+      this.socket.write(`${command}\n`);
+    });
+  }
+  close() { this.fail(new Error('桌面画面已释放')); }
+}
+
+// Frame and input share one worker pipe. Serialize them without replaying input.
+export class DesktopHelper {
+  constructor() { this.active = null; this.reading = false; this.queue = Promise.resolve(); this.version = 0; }
+  serial(operation) {
+    const version = this.version;
+    const result = this.queue.then(() => {
+      if (version !== this.version) throw Object.assign(new Error('桌面操作已取消，请刷新'), { code: 'desktop_session_invalid' });
+      return operation();
+    });
+    this.queue = result.catch(() => {});
+    return result;
+  }
+  clear(current = this.active) {
+    if (!current) return;
+    clearTimeout(current.timer); current.session.close();
+    if (this.active === current) this.active = null;
+  }
+  async frame({ preview = false } = {}) {
+    if (this.reading) throw new Error('正在获取桌面画面，请稍候');
+    this.reading = true;
+    try { return await this.serial(async () => {
+      if (!this.active || this.active.preview !== preview) {
+        this.clear();
+        const version = this.version;
+        const status = await desktopHelperStatus();
+        if (version !== this.version) throw new Error('桌面操作已取消');
+        if (!status.running) return { state: 'unavailable', message: '工作站桌面服务尚未就绪' };
+        this.active = { session: new PipeSession(), preview };
+      }
+      const current = this.active;
+      try {
+        clearTimeout(current.timer);
+        const frame = await current.session.request(current.frame ? 'FRAME' : preview ? 'PREVIEW' : 'FRAME');
+        if (this.active !== current) throw new Error('桌面画面已释放');
+        if (frame.state !== 'pending') { this.clear(current); return frame; }
+        if (!/^[a-f0-9]{32}$/.test(frame.frameId) || !/^[a-f0-9]{32}$/.test(frame.sessionId) || !Number.isSafeInteger(frame.width) || !Number.isSafeInteger(frame.height) ||
+            !['image/png', 'image/jpeg'].includes(frame.mimeType) || !frame.image?.startsWith('data:' + frame.mimeType + ';base64,') ||
+            frame.width < 1 || frame.height < 1 || frame.preview !== preview) throw new Error('桌面画面格式无效');
+        const image = Buffer.from(frame.image.slice(('data:' + frame.mimeType + ';base64,').length), 'base64');
+        delete frame.image;
+        current.sessionId = frame.sessionId;
+        frame.imagePath = '/api/desktop/frames/' + frame.frameId;
+        frame.size = image.length;
+        current.frame = frame; current.image = image; current.expires = Date.now() + 30000;
+        current.timer = setTimeout(() => this.release(undefined, current.sessionId), 30000);
+        return frame;
+      } catch (error) { this.clear(current); throw error; }
+    }); } finally { this.reading = false; }
+  }
+  input(sessionId, command) {
+    return this.serial(async () => {
+      const current = this.active;
+      if (!current?.frame || sessionId !== current.sessionId || Date.now() >= current.expires)
+        throw Object.assign(new Error('请刷新桌面后操作'), { code: 'desktop_session_invalid' });
+      try {
+        const result = await current.session.request(command);
+        if (result.continuing !== true) this.clear(current);
+        return result;
+      } catch (error) { this.clear(current); throw error; }
+    });
+  }
+  move({ sessionId, dx, dy }) {
+    if (!Number.isSafeInteger(dx) || !Number.isSafeInteger(dy) || Math.abs(dx) > 512 || Math.abs(dy) > 512 || (!dx && !dy))
+      throw new Error('无效的相对鼠标位移');
+    return this.input(sessionId, 'MOVE ' + sessionId + ' ' + dx + ' ' + dy);
+  }
+  click({ sessionId, button }) {
+    if (!['left', 'right'].includes(button)) throw new Error('无效的鼠标按键');
+    return this.input(sessionId, 'BUTTON ' + sessionId + ' ' + button);
+  }
+  image(frameId) {
+    const current = this.active;
+    if (!current?.frame || current.frame.frameId !== frameId || Date.now() >= current.expires)
+      throw new Error('桌面画面已释放或过期，请重新获取');
+    return current.image;
+  }
+  release(frameId, sessionId) {
+    if (frameId && this.active?.frame?.frameId !== frameId) return;
+    if (sessionId && this.active?.sessionId !== sessionId) return;
+    this.version++; this.clear();
+  }
+}

package/dist/src/platform/windows/desktop-host.mjs

@@ -1,33 +1,53 @@
 import { startWindowsProcess } from './background-process.mjs';
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import { fileURLToPath } from 'node:url';
-import path from 'node:path';
-import { sharedServiceUrl } from './service-host.mjs';
-const exec = promisify(execFile);
-const directory = path.dirname(fileURLToPath(import.meta.url));
-export const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
-export async function runScript(name, args = []) {
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { fileURLToPath } from 'node:url';
+import path from 'node:path';
+import { sharedServiceUrl } from './service-host.mjs';
+const exec = promisify(execFile);
+const directory = path.dirname(fileURLToPath(import.meta.url));
+export const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+export async function runScript(name, args = []) {
   const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File', path.join(directory, name), ...args], { windowsHide: true, encoding: 'utf8', timeout: 30000 });
-  return stdout.trim();
-}
+  return stdout.trim();
+}
 export const desktopHost = {
-  inspect: async () => JSON.parse(await runScript('desktop-info.ps1')),
-  process: async pid => JSON.parse(await runScript('desktop-info.ps1', ['-ProcessId', String(pid)])),
-  sharedServiceUrl,
+  inspect: async () => JSON.parse(await runScript('desktop-info.ps1')),
+  process: async pid => JSON.parse(await runScript('desktop-info.ps1', ['-ProcessId', String(pid)])),
+  sharedServiceUrl,
   start: startWindowsProcess,
+  startDesktop: (executable, environment) => runScript('activate-desktop.ps1', [
+    '-Executable', executable, '-AppServerUrl', environment.CODEX_APP_SERVER_WS_URL,
+  ]),
+  async desktopReady() {
+    return (await this.inspect()).hasWindow === true && Boolean(await this.sharedServiceUrl());
+  },
   closeDesktop: executable => runScript('stop-desktop.ps1', ['-Executable', executable]),
-  stop: pid => process.kill(pid),
-  ready: async url => { try { return (await fetch(url, { signal: AbortSignal.timeout(1000) })).ok; } catch { return false; } },
+  stop: pid => process.kill(pid),
+  async prepareKernelRestart() {
+    const info = await this.inspect();
+    if (!info.running || !await this.sharedServiceUrl()) return null;
+    await this.closeDesktop(info.desktop);
+    return info.desktop;
+  },
+  async resumeAfterKernelRestart(executable, environment) {
+    if (!executable) return;
+    await this.startDesktop(executable, environment);
+    const deadline = Date.now() + 30000;
+    while (!await this.desktopReady()) {
+      if (Date.now() >= deadline) throw new Error('Codex 内核已就绪，但 Desktop 未完成重新接入。');
+      await new Promise(resolve => setTimeout(resolve, 500));
+    }
+  },
+  ready: async url => { try { return (await fetch(url, { signal: AbortSignal.timeout(1000) })).ok; } catch { return false; } },
 };
 export const resolveStateRoot = stateRoot => runScript('resolve-state-root.ps1', ['-StateRoot', stateRoot]);
-
-export async function desktopShortcuts({ serviceRoot, nodeExecutable }, remove = false, destination) {
-  const entry = path.join(serviceRoot, 'dist/bin/codex-remote.mjs');
-  const args = ['-NodePath', nodeExecutable, '-Entry', entry];
-  if (remove) args.push('-Remove');
-  if (destination) args.push('-Destination', destination);
-  return JSON.parse(await runScript('desktop-shortcuts.ps1', args));
+
+export async function removeDesktopShortcut({ serviceRoot, nodeExecutable }, destination) {
+  const entry = path.join(serviceRoot, 'dist/bin/codex-remote.mjs');
+  const args = ['-NodePath', nodeExecutable, '-Entry', entry];
+  if (destination) args.push('-Destination', destination);
+  return JSON.parse(await runScript('desktop-shortcuts.ps1', args));
 }
 
 export async function residentStartup({ serviceRoot, nodeExecutable }, action = 'status') {