@walkhi/code-relax 0.1.0-beta.4 → 0.1.0-beta.41

package/dist/src/platform/windows/desktop-info.ps1

@@ -1,16 +1,14 @@
-param([int]$ProcessId = 0)
-$ErrorActionPreference = 'Stop'
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-if ($ProcessId -gt 0) {
-    $item = Get-CimInstance Win32_Process -Filter "ProcessId=$ProcessId"
-    if ($item) { @{ pid=$item.ProcessId; executable=$item.ExecutablePath; command=$item.CommandLine; created=$item.CreationDate.ToUniversalTime().ToString('o') } | ConvertTo-Json -Compress }
-    else { 'null' }
-    exit
-}
-$package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
-if (-not $package) { throw '未找到 Codex Desktop，请先安装并登录。' }
-$desktop = Join-Path $package.InstallLocation 'app/ChatGPT.exe'
-$running = @(Get-Process ChatGPT -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq $desktop })
-$binaryRoot = Join-Path $env:LOCALAPPDATA 'OpenAI/Codex/bin'
-$cli = Get-ChildItem -LiteralPath $binaryRoot -Filter codex.exe -Recurse -ErrorAction SilentlyContinue | Sort-Object LastWriteTime -Descending | Select-Object -First 1
-@{ desktop=$desktop; cli=$cli.FullName; running=($running.Count -gt 0) } | ConvertTo-Json -Compress
+param([int]$ProcessId = 0)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+if ($ProcessId -gt 0) {
+    $item = Get-CimInstance Win32_Process -Filter "ProcessId=$ProcessId"
+    if ($item) { @{ pid=$item.ProcessId; executable=$item.ExecutablePath; command=$item.CommandLine; created=$item.CreationDate.ToUniversalTime().ToString('o') } | ConvertTo-Json -Compress }
+    else { 'null' }
+    exit
+}
+$package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
+if (-not $package) { @{ desktop=$null; running=$false } | ConvertTo-Json -Compress; exit }
+$desktop = Join-Path $package.InstallLocation 'app/ChatGPT.exe'
+$running = @(Get-Process ChatGPT -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq $desktop })
+@{ desktop=$desktop; running=($running.Count -gt 0); hasWindow=(@($running | Where-Object { $_.MainWindowHandle -ne 0 }).Count -gt 0) } | ConvertTo-Json -Compress

package/dist/src/platform/windows/desktop-project-registration.mjs

@@ -0,0 +1,4 @@
+import { desktopHost } from './desktop-host.mjs';
+import { withDesktopProjectRegistration as register } from '../desktop-project-store.mjs';
+export { registerProjectInState, desktopProjectRestartWarning } from '../desktop-project-store.mjs';
+export const withDesktopProjectRegistration = (options, action) => register({ host: desktopHost, ...options }, action);

package/dist/src/platform/windows/desktop-runtime.ps1

@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
+if (-not $package) { 'null'; exit }
+$resources = Join-Path $package.InstallLocation 'app\resources'
+@{
+    package = $package.PackageFullName
+    executable = Join-Path $resources 'codex.exe'
+    codeModeHost = Join-Path $resources 'codex-code-mode-host.exe'
+} | ConvertTo-Json -Compress

package/dist/src/platform/windows/desktop-shortcuts.ps1

@@ -1,28 +1,21 @@
-param([string]$NodePath, [string]$Entry, [switch]$Remove, [string]$Destination)
-$ErrorActionPreference = 'Stop'
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-$shell = New-Object -ComObject WScript.Shell
-if (-not $Destination) { $Destination = $shell.SpecialFolders.Item('Desktop') }
-$launcher = Join-Path $PSScriptRoot 'desktop-shortcut-run.ps1'
-$items = @(@{Name='Code Relax - 完整控制'; Command='shared-start'}, @{Name='Code Relax - 基础控制'; Command='desktop-start'})
-$results = @()
-foreach ($item in $items) {
-    $target = Join-Path $Destination ($item.Name + '.lnk')
-    $arguments = '-NoProfile -NoExit -ExecutionPolicy Bypass -File "' + $launcher + '" -NodePath "' + $NodePath + '" -Entry "' + $Entry + '" -Action ' + $item.Command
-    if (Test-Path -LiteralPath $target) {
-        $existing = $shell.CreateShortcut($target)
-        if ($existing.Arguments -ne $arguments) { throw ('快捷方式不是本安装创建的，未覆盖或删除：' + $target) }
-    }
-    if ($Remove) {
-        if (Test-Path -LiteralPath $target) { Remove-Item -LiteralPath $target }
-    } else {
-        $link = $shell.CreateShortcut($target)
-        $link.TargetPath = Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
-        $link.Arguments = $arguments
-        $link.WorkingDirectory = Split-Path $Entry -Parent
-        $link.Description = $item.Name
-        $link.Save()
-    }
-    $results += $target
-}
-ConvertTo-Json -InputObject $results -Compress
+param([string]$NodePath, [string]$Entry, [string]$Destination)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$shell = New-Object -ComObject WScript.Shell
+if (-not $Destination) { $Destination = $shell.SpecialFolders.Item('Desktop') }
+# Only identify and remove the retired shortcut; never create a new launcher.
+$launcher = Join-Path $PSScriptRoot 'desktop-shortcut-run.ps1'
+$items = @(@{Name='Code Relax - Codex 内核'; Command='shared-start'})
+$results = @()
+foreach ($item in $items) {
+    $target = Join-Path $Destination ($item.Name + '.lnk')
+    $arguments = '-NoProfile -NoExit -ExecutionPolicy Bypass -File "' + $launcher + '" -NodePath "' + $NodePath + '" -Entry "' + $Entry + '" -Action ' + $item.Command
+    if (Test-Path -LiteralPath $target) {
+        $existing = $shell.CreateShortcut($target)
+        $powershell = Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
+        if ($existing.Arguments -ne $arguments -or $existing.TargetPath -ne $powershell) { continue }
+    }
+    if (Test-Path -LiteralPath $target) { Remove-Item -LiteralPath $target }
+    $results += $target
+}
+ConvertTo-Json -InputObject $results -Compress

package/dist/src/platform/windows/dots-profile.mjs

@@ -0,0 +1,49 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { dotsProfile } from '../../dots-profile.mjs';
+
+// Desktop 26.928.2636.0 persists its current TBO sidebar profiles here.
+// Read display names, appearance colors and snapshot references; identity comes from the authenticated kernel.
+export function desktopDotsProfiles(codexDataRoot, stateRoot) {
+  const snapshotPath = ({ accountId, userId }) => stateRoot && path.join(stateRoot, 'dots-profiles',
+    createHash('sha256').update(JSON.stringify([accountId, userId])).digest('hex') + '.json');
+  const read = async ({ accountId, userId }) => {
+    let state;
+    try {
+      state = JSON.parse(await fs.readFile(path.join(codexDataRoot, '.codex-global-state.json'), 'utf8'));
+    } catch (error) {
+      if (error.code !== 'ENOENT') throw error;
+    }
+    const cache = state?.['electron-persisted-atom-state']?.['cloud-aeon-sidebar-cache-v1'];
+    const names = new Map();
+    if (!accountId || !userId) return names;
+    const matching = cache?.hostId === 'durable' && cache.accountId === accountId && cache.userId === userId;
+    for (const [threadId, profile] of Object.entries(matching ? cache.profilesByThreadId || {} : {})) {
+      const value = dotsProfile(profile);
+      for (const id of [threadId, profile.active_root_thread_id, profile.root_thread_id]) {
+        if (typeof id === 'string' && id) names.set(id, value);
+      }
+    }
+    const file = snapshotPath({ accountId, userId });
+    if (file) {
+      try {
+        const saved = JSON.parse(await fs.readFile(file, 'utf8'));
+        if (saved.accountId !== accountId || saved.userId !== userId || !Array.isArray(saved.profiles)) throw new Error('点点资料缓存身份无效。');
+        const profiles = new Map(saved.profiles);
+        const byId = new Map([...profiles.values()].map(profile => [profile.profileId, profile]));
+        for (const [id, profile] of names) if (byId.has(profile.profileId)) names.set(id, byId.get(profile.profileId));
+        for (const [id, profile] of profiles) names.set(id, profile);
+      } catch (error) { if (error.code !== 'ENOENT') console.error('读取点点资料缓存失败：', error.message); }
+    }
+    return names;
+  };
+  read.save = async (identity, profiles) => {
+    const file = snapshotPath(identity);
+    if (!file) return;
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    await fs.writeFile(file + '.tmp', JSON.stringify({ ...identity, profiles: [...profiles] }), 'utf8');
+    await fs.rename(file + '.tmp', file);
+  };
+  return read;
+}

package/dist/src/platform/windows/keep-awake.ps1

@@ -0,0 +1,20 @@
+$ErrorActionPreference = 'Stop'
+Import-Module "$env:SystemRoot\System32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1"
+Add-Type -TypeDefinition @'
+using System;
+using System.Runtime.InteropServices;
+public static class CodeRelaxPowerLease {
+    [DllImport("kernel32.dll", SetLastError = true)]
+    static extern uint SetThreadExecutionState(uint flags);
+    public static void Hold() {
+        if (SetThreadExecutionState(0x80000001u) == 0)
+            throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error());
+        try {
+            Console.WriteLine("ready");
+            Console.Out.Flush();
+            Console.In.ReadLine();
+        } finally { SetThreadExecutionState(0x80000000u); }
+    }
+}
+'@
+[CodeRelaxPowerLease]::Hold()

package/dist/src/platform/windows/launch-worker.mjs

@@ -1,5 +1,6 @@
 import fs from 'node:fs';
 import { spawn } from 'node:child_process';
+import { attachProcessLog } from '../../bounded-process-log.mjs';
 
 const [requestPath, readyPath, instance, diagnosticPath] = process.argv.slice(2);
 let result = { instance, brokerPid: process.pid };
@@ -14,24 +15,22 @@ try {
   diagnostic('request loaded');
   if (spec.instance !== instance) throw new Error('Windows process broker request identity mismatch.');
   fs.rmSync(requestPath, { force: true });
-  const descriptors = (spec.logs || []).map(file => fs.openSync(file, 'a'));
-  try {
-    const child = spawn(spec.executable, spec.args || [], {
-      detached: true,
-      windowsHide: true,
-      env: spec.environment,
-      stdio: ['ignore', descriptors[0] ?? 'ignore', descriptors[1] ?? 'ignore'],
-    });
-    await new Promise((resolve, reject) => {
-      child.once('spawn', resolve);
-      child.once('error', reject);
-    });
-    child.unref();
-    result.pid = child.pid;
-    diagnostic(`target started (PID ${child.pid})`);
-  } finally {
-    descriptors.forEach(descriptor => fs.closeSync(descriptor));
-  }
+  const logs = spec.logs || [];
+  const child = spawn(spec.executable, spec.args || [], {
+    windowsHide: true,
+    env: spec.environment,
+    stdio: ['ignore', logs[0] ? 'pipe' : 'ignore', logs[1] ? 'pipe' : 'ignore'],
+  });
+  if (child.stdout) attachProcessLog(child.stdout, logs[0]);
+  if (child.stderr) attachProcessLog(child.stderr, logs[1]);
+  await new Promise((resolve, reject) => {
+    child.once('spawn', resolve);
+    child.once('error', reject);
+  });
+  // Keep this WMI-owned broker alive with the target so Codex tools inherit
+  // its hidden console instead of creating a visible console per command.
+  result.pid = child.pid;
+  diagnostic(`target started (PID ${child.pid})`);
 } catch (error) {
   result.error = error?.stack || error?.message || String(error);
   try { diagnostic(`failed: ${result.error}`); } catch {}

package/dist/src/platform/windows/project-locations.mjs

@@ -0,0 +1,16 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import { powershell } from './desktop-host.mjs';
+
+const exec = promisify(execFile);
+
+export async function projectLocations() {
+  const command = "[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false); $projectDocuments = [Environment]::GetFolderPath('MyDocuments'); $projectUserDirectory = [Environment]::GetFolderPath('UserProfile'); $projectDownloads = [Environment]::ExpandEnvironmentVariables((Get-ItemPropertyValue -LiteralPath 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders' -Name '{374DE290-123F-4565-9164-39C4925E467B}' -ErrorAction Stop)); $projectDriveRoots = @(Get-PSDrive -PSProvider FileSystem | ForEach-Object { $_.Root }); @{ documents = $projectDocuments; home = $projectUserDirectory; downloads = $projectDownloads; roots = $projectDriveRoots } | ConvertTo-Json -Compress";
+  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-Command', command],
+    { windowsHide: true, encoding: 'utf8', timeout: 10000 });
+  const locations = JSON.parse(stdout);
+  if (!path.isAbsolute(locations.documents)) throw new Error('无法取得电脑的文档目录。');
+  if (!path.isAbsolute(locations.downloads)) throw new Error('无法取得电脑的下载目录。');
+  return { defaultParent: path.join(locations.documents, 'ChatGPT'), home: locations.home, downloads: locations.downloads, roots: locations.roots };
+}

package/dist/src/platform/windows/resident-start.js

@@ -0,0 +1,20 @@
+// Windows Script Host has no console. Keep the login task alive until the
+// short-lived CLI has handed the resident service to the background broker.
+if (WScript.Arguments.length !== 2) WScript.Quit(2);
+var shell = new ActiveXObject('WScript.Shell');
+var files = new ActiveXObject('Scripting.FileSystemObject');
+var node = WScript.Arguments.Item(0);
+var entry = WScript.Arguments.Item(1);
+if (!files.FileExists(node)) {
+  var directories = shell.Environment('PROCESS').Item('PATH').split(';');
+  node = '';
+  for (var i = 0; i < directories.length; i++) {
+    var directory = directories[i].replace(/^"|"$/g, '');
+    if (!directory) continue;
+    var candidate = files.BuildPath(directory, 'node.exe');
+    if (files.FileExists(candidate)) { node = candidate; break; }
+  }
+  if (!node) WScript.Quit(2);
+}
+var command = '"' + node + '" "' + entry + '" start --json';
+WScript.Quit(shell.Run(command, 0, true));

package/dist/src/platform/windows/resident-startup.ps1

@@ -1,27 +1,83 @@
-param([string]$NodePath, [string]$Entry, [ValidateSet('enable','disable','status')][string]$Action='status')
+param([string]$NodePath, [string]$Entry, [ValidateSet('enable','disable','status')][string]$Action='status')
 $ErrorActionPreference = 'Stop'
 [Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+
+$taskName = 'Code Relax 桌面服务'
+$legacyTaskName = 'Code Relax Bridge'
+$taskSource = '@walkhi/code-relax'
+$taskPath = '\' + $taskName
+$launcher = Join-Path $PSScriptRoot 'resident-start.js'
+$wscript = Join-Path $env:WINDIR 'System32\wscript.exe'
+$arguments = '//B //Nologo "' + $launcher + '" "' + $NodePath + '" "' + $Entry + '"'
+$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+
+$scheduler = New-Object -ComObject 'Schedule.Service'
+$scheduler.Connect()
+$root = $scheduler.GetFolder('\')
+$registered = @($root.GetTasks(1) | Where-Object { $_.Name -eq $taskName } | Select-Object -First 1)
+$legacyRegistered = @($root.GetTasks(1) | Where-Object { $_.Name -eq $legacyTaskName } | Select-Object -First 1)
+if ($registered.Count -gt 0 -and $registered[0].Definition.RegistrationInfo.Source -ne $taskSource) {
+    throw 'Scheduled task is not owned by this installation.'
+}
+if ($legacyRegistered.Count -gt 0 -and $legacyRegistered[0].Definition.RegistrationInfo.Source -ne $taskSource) {
+    throw 'Legacy scheduled task is not owned by this installation.'
+}
+
+# Remove only the legacy shortcut created by this package. A Startup LNK that
+# launches hidden PowerShell with ExecutionPolicy Bypass triggers AV heuristics.
 $shell = New-Object -ComObject WScript.Shell
-$target = Join-Path $shell.SpecialFolders.Item('Startup') 'Code Relax Bridge.lnk'
-$launcher = Join-Path $PSScriptRoot 'resident-start.ps1'
-$powershell = Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
-$exists = Test-Path -LiteralPath $target
-if ($exists) {
-    $existing = $shell.CreateShortcut($target)
-    if ($existing.TargetPath -ne $powershell -or -not $existing.Arguments.Contains('"' + $launcher + '"')) {
-        throw 'Startup shortcut is not owned by this installation.'
+$legacyPath = Join-Path $shell.SpecialFolders.Item('Startup') 'Code Relax Bridge.lnk'
+$legacyLauncher = Join-Path $PSScriptRoot 'resident-start.ps1'
+$legacyExists = Test-Path -LiteralPath $legacyPath
+if ($Action -ne 'status' -and $legacyExists) {
+    $legacy = $shell.CreateShortcut($legacyPath)
+    if (-not $legacy.Arguments.Contains('"' + $legacyLauncher + '"')) {
+        throw 'Legacy startup shortcut is not owned by this installation.'
     }
 }
+
 if ($Action -eq 'enable') {
-    if (-not (Test-Path -LiteralPath $NodePath) -or -not (Test-Path -LiteralPath $Entry)) { throw 'Installed runtime is missing.' }
-    $link = $shell.CreateShortcut($target)
-    $link.TargetPath = $powershell
-    $link.Arguments = '-NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File "' + $launcher + '" -NodePath "' + $NodePath + '" -Entry "' + $Entry + '"'
-    $link.WorkingDirectory = $env:USERPROFILE
-    $link.WindowStyle = 7
-    $link.Description = 'Code Relax resident computer connection'
-    $link.Save()
-} elseif ($Action -eq 'disable' -and $exists) {
-    Remove-Item -LiteralPath $target
+    if (-not (Test-Path -LiteralPath $NodePath) -or -not (Test-Path -LiteralPath $Entry) -or
+        -not (Test-Path -LiteralPath $launcher) -or -not (Test-Path -LiteralPath $wscript)) { throw 'Installed runtime is missing.' }
+    $definition = $scheduler.NewTask(0)
+    $definition.RegistrationInfo.Description = 'Start the Code Relax desktop service when this user signs in.'
+    $definition.RegistrationInfo.Source = $taskSource
+    $definition.Principal.UserId = $currentUser
+    $definition.Principal.LogonType = 3 # TASK_LOGON_INTERACTIVE_TOKEN
+    $definition.Principal.RunLevel = 0 # TASK_RUNLEVEL_LUA
+    $definition.Settings.Enabled = $true
+    $definition.Settings.Hidden = $true
+    $definition.Settings.StartWhenAvailable = $true
+    $definition.Settings.DisallowStartIfOnBatteries = $false
+    $definition.Settings.StopIfGoingOnBatteries = $false
+    $definition.Settings.ExecutionTimeLimit = 'PT5M'
+    $definition.Settings.MultipleInstances = 2 # TASK_INSTANCES_IGNORE_NEW
+    $trigger = $definition.Triggers.Create(9) # TASK_TRIGGER_LOGON
+    $trigger.UserId = $currentUser
+    $trigger.Enabled = $true
+    $exec = $definition.Actions.Create(0) # TASK_ACTION_EXEC
+    $exec.Path = $wscript
+    $exec.Arguments = $arguments
+    $exec.WorkingDirectory = $env:USERPROFILE
+    [void]$root.RegisterTaskDefinition($taskName, $definition, 6, $null, $null, 3, $null) # TASK_CREATE_OR_UPDATE
+    if ($legacyRegistered.Count -gt 0) { $root.DeleteTask($legacyTaskName, 0) }
+} elseif ($Action -eq 'disable') {
+    if ($registered.Count -gt 0) { $root.DeleteTask($taskName, 0) }
+    if ($legacyRegistered.Count -gt 0) { $root.DeleteTask($legacyTaskName, 0) }
+}
+if ($Action -ne 'status' -and $legacyExists) { Remove-Item -LiteralPath $legacyPath }
+
+$active = @($root.GetTasks(1) | Where-Object { $_.Name -eq $taskName } | Select-Object -First 1)
+$taskEnabled = $active.Count -gt 0 -and $active[0].Enabled
+$taskCurrent = $false
+if ($taskEnabled) {
+    $taskAction = $active[0].Definition.Actions.Item(1)
+    $taskCurrent = $taskAction.Path -ieq $wscript -and $taskAction.Arguments -ieq $arguments
 }
-@{ enabled=(Test-Path -LiteralPath $target); path=$target; scope='current-user-logon' } | ConvertTo-Json -Compress
+@{
+    enabled=($taskCurrent -and $legacyRegistered.Count -eq 0)
+    taskPresent=$taskEnabled
+    path=$(if ($taskEnabled) { 'Task Scheduler:' + $taskPath } elseif ($legacyRegistered.Count -gt 0) { 'Task Scheduler:\' + $legacyTaskName } elseif ($legacyExists) { $legacyPath } else { 'Task Scheduler:' + $taskPath })
+    scope='current-user-logon'
+    mechanism=$(if ($taskCurrent -and $legacyRegistered.Count -eq 0) { 'task-scheduler' } elseif ($taskEnabled -or $legacyRegistered.Count -gt 0) { 'stale-task-scheduler' } elseif ($legacyExists) { 'legacy-startup-shortcut' } else { 'task-scheduler' })
+} | ConvertTo-Json -Compress

package/dist/src/platform/windows/rustdesk-video-probe.mjs

@@ -0,0 +1,168 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import net from 'node:net';
+import os from 'node:os';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+import { brotliDecompressSync } from 'node:zlib';
+
+export const RUSTDESK_PROBE_HOST_SHA256 = '8555777215510d83d2d61c9dc984e4fcc838bd7e79f9d18a42585431f5e8bb47';
+const leaseMs = 60_000;
+const pause = ms => new Promise(resolve => setTimeout(resolve, ms));
+const failure = code => Object.assign(new Error('桌面视频测试尚未就绪'), { code, statusCode: 503 });
+
+// The official EXE is a launcher. Extract its verified Brotli payload into our
+// own runtime directory and launch the actual process, so leases own its PID.
+export function prepareRustDeskProbeHost(root) {
+  const bytes = fs.readFileSync(path.join(root, 'rustdesk-1.5.0-x86_64.exe'));
+  if (crypto.createHash('sha256').update(bytes).digest('hex') !== RUSTDESK_PROBE_HOST_SHA256) throw failure('desktop_video_host_hash');
+  const magic = Buffer.from('rustdesk'), decoder = new TextDecoder('utf-8', { fatal: true });
+  let search = 0, entries;
+  while (search < bytes.length) {
+    const at = bytes.indexOf(magic, search); if (at < 0) break; search = at + magic.length;
+    try {
+      let offset = at + magic.length; const files = [];
+      while (!bytes.subarray(offset, offset + magic.length).equals(magic)) {
+        const length = bytes.readUInt32BE(offset); offset += 4;
+        if (length < 1 || length > 512) throw new Error('payload');
+        const name = decoder.decode(bytes.subarray(offset, offset + length)).replaceAll('\\', '/'); offset += length;
+        if (/[\x00-\x1f]/.test(name) || path.posix.isAbsolute(name) || name.includes(':') || name.split('/').includes('..')) throw new Error('payload_path');
+        const size = bytes.readUInt32BE(offset); offset += 4;
+        if (size < 1 || offset + size + 32 > bytes.length) throw new Error('payload');
+        const data = bytes.subarray(offset, offset + size); offset += size;
+        const md5 = bytes.subarray(offset, offset + 32).toString(); offset += 32;
+        if (!/^[a-f0-9]{32}$/.test(md5)) throw new Error('payload');
+        files.push({ name: path.posix.normalize(name), data, md5 });
+        if (files.length > 5000) throw new Error('payload');
+      }
+      if (files.length !== 104 || !files.some(file => file.name === 'rustdesk.exe')) continue;
+      const suffix = Buffer.from('.\\rustdesk.exe');
+      if (!bytes.subarray(offset + 8, offset + 8 + suffix.length).equals(suffix)) continue;
+      entries = files; break;
+    } catch { /* Non-payload occurrences of the ASCII magic are expected in PE strings. */ }
+  }
+  if (!entries) throw failure('desktop_video_host_payload');
+  const runtime = path.resolve(root, 'runtime');
+  for (const file of entries) {
+    const target = path.resolve(runtime, file.name);
+    if (!target.startsWith(runtime + path.sep)) throw failure('desktop_video_host_path');
+    let existing;
+    try { existing = crypto.createHash('md5').update(fs.readFileSync(target)).digest('hex'); } catch {}
+    if (existing === file.md5) continue;
+    const data = brotliDecompressSync(file.data, { maxOutputLength: 128 * 1024 * 1024 });
+    if (crypto.createHash('md5').update(data).digest('hex') !== file.md5) throw failure('desktop_video_host_payload');
+    fs.mkdirSync(path.dirname(target), { recursive: true }); fs.writeFileSync(target, data);
+  }
+  return path.join(runtime, 'rustdesk.exe');
+}
+
+// A read-only, LAN-only prototype. The normal desktop helper and input path are independent.
+export class RustDeskVideoProbe {
+  constructor({ stateRoot, appData = process.env.APPDATA, platform = process.platform } = {}) {
+    this.platform = platform;
+    this.root = path.join(stateRoot, 'desktop-video-probe');
+    this.configRoot = path.join(appData || os.tmpdir(), 'RustDesk', 'config');
+    this.process = null; this.lease = null; this.timer = null; this.starting = false; this.stopped = Promise.resolve(); this.preparedExecutable = null;
+  }
+  configuration(port, password) {
+    const options = {
+      'direct-server': 'Y', 'direct-access-port': String(port),
+      'custom-rendezvous-server': '127.0.0.1:9', 'relay-server': '127.0.0.1:9', 'api-server': 'http://127.0.0.1:9',
+      'enable-hwcodec': 'N', 'access-mode': 'view', 'approve-mode': 'password', 'verification-method': 'use-permanent-password',
+      'enable-keyboard': 'N', 'enable-clipboard': 'N', 'enable-file-transfer': 'N', 'enable-audio': 'N',
+      'enable-tunnel': 'N', 'enable-terminal': 'N', 'enable-record-session': 'N',
+      'allow-auto-record-incoming': 'N', 'allow-auto-record-outgoing': 'N'
+    };
+    return {
+      main: `password = '${password}'\nsalt = '${crypto.randomBytes(16).toString('hex')}'\n`,
+      secondary: "rendezvous_server = '127.0.0.1:9'\n\n[options]\n" + Object.entries(options).map(([key, value]) => `${key} = '${value}'`).join('\n') + '\n'
+    };
+  }
+  async begin() {
+    if (this.platform !== 'win32') throw failure('desktop_video_platform');
+    if (this.starting || this.lease) throw failure('desktop_video_busy');
+    this.starting = true;
+    try {
+      await this.stopped;
+      const executable = path.join(this.root, 'rustdesk-1.5.0-x86_64.exe');
+      let binary;
+      try { binary = fs.readFileSync(executable); } catch { throw failure('desktop_video_host_missing'); }
+      if (crypto.createHash('sha256').update(binary).digest('hex') !== RUSTDESK_PROBE_HOST_SHA256) throw failure('desktop_video_host_hash');
+      const ownerFile = path.join(this.root, 'config-owner.json');
+      let owner;
+      try { owner = JSON.parse(fs.readFileSync(ownerFile, 'utf8')); } catch {}
+      const entries = fs.existsSync(this.configRoot) ? fs.readdirSync(this.configRoot) : [];
+      if (entries.length && (owner?.configRoot !== this.configRoot || !owner.hashes
+        || JSON.stringify(owner.hashes) !== JSON.stringify(this.configHashes()))) throw failure('desktop_video_existing_rustdesk');
+      const port = await new Promise((resolve, reject) => {
+        const server = net.createServer(); server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => { const port = server.address().port; server.close(error => error ? reject(error) : resolve(port)); });
+      });
+      const actualExecutable = this.preparedExecutable ||= prepareRustDeskProbeHost(this.root);
+      const password = crypto.randomBytes(24).toString('hex'), leaseId = crypto.randomBytes(16).toString('hex');
+      const config = this.configuration(port, password);
+      fs.mkdirSync(this.root, { recursive: true, mode: 0o700 });
+      fs.mkdirSync(this.configRoot, { recursive: true, mode: 0o700 });
+      fs.writeFileSync(path.join(this.configRoot, 'RustDesk.toml'), config.main, { mode: 0o600 });
+      fs.writeFileSync(path.join(this.configRoot, 'RustDesk2.toml'), config.secondary, { mode: 0o600 });
+      this.saveOwner();
+      this.process = spawn(actualExecutable, ['--server'], { cwd: path.dirname(actualExecutable),
+        env: { ...process.env, RUSTDESK_APPNAME: 'rustdesk-1.5.0-x86_64.exe' }, windowsHide: true, stdio: 'ignore' });
+      const child = this.process; let launchError = false;
+      console.info(JSON.stringify({ event: 'desktop-video-host', stage: 'spawn', pid: child.pid }));
+      this.stopped = new Promise(resolve => {
+        let ended = false;
+        const finished = () => {
+          console.info(JSON.stringify({ event: 'desktop-video-host', stage: 'exit', pid: child.pid, code: child.exitCode }));
+          if (ended) return; ended = true;
+          try { this.saveOwner(); } catch { console.error(JSON.stringify({ event: 'desktop-video-owner', state: 'failed' })); }
+          if (this.process === child) { clearTimeout(this.timer); this.process = null; this.lease = null; }
+          resolve();
+        };
+        child.once('error', () => { launchError = true; finished(); });
+        child.once('exit', finished);
+      });
+      const deadline = Date.now() + 8_000;
+      let ready = false;
+      while (Date.now() < deadline && child.exitCode === null && !launchError) {
+        ready = await new Promise(resolve => {
+          const socket = net.connect({ host: '127.0.0.1', port });
+          let settled = false;
+          const finish = value => { if (settled) return; settled = true; socket.destroy(); resolve(value); };
+          socket.once('connect', () => finish(true)); socket.once('error', () => finish(false)); socket.setTimeout(300, () => finish(false));
+        });
+        if (ready) break;
+        await pause(150);
+      }
+      if (!ready) throw failure('desktop_video_host_start');
+      this.lease = { leaseId, password, port, codec: 'vp9', fps: 5, viewOnly: true };
+      console.info(JSON.stringify({ event: 'desktop-video-host', stage: 'ready', pid: child.pid }));
+      this.renew(leaseId);
+      return { ...this.lease, engine: 'rustdesk-probe', expiresInMs: leaseMs };
+    } catch (error) { this.stop(); throw error; }
+    finally { this.starting = false; }
+  }
+  configHashes() {
+    return ['RustDesk.toml', 'RustDesk2.toml'].map(name => {
+      try { return crypto.createHash('sha256').update(fs.readFileSync(path.join(this.configRoot, name))).digest('hex'); }
+      catch { return ''; }
+    });
+  }
+  saveOwner() {
+    fs.writeFileSync(path.join(this.root, 'config-owner.json'), JSON.stringify({ configRoot: this.configRoot, hashes: this.configHashes() }), { mode: 0o600 });
+  }
+  renew(leaseId) {
+    if (!this.lease || leaseId !== this.lease.leaseId) throw failure('desktop_video_lease');
+    clearTimeout(this.timer); this.timer = setTimeout(() => this.stop(), leaseMs); this.timer.unref();
+    return { active: true, expiresInMs: leaseMs };
+  }
+  release(leaseId) {
+    if (this.lease?.leaseId === leaseId) this.stop();
+    return { released: true };
+  }
+  stop() {
+    clearTimeout(this.timer); this.timer = null;
+    const child = this.process; this.process = null; this.lease = null;
+    if (child && child.exitCode === null) child.kill();
+  }
+}

package/dist/src/platform/windows/service-host.mjs

@@ -1,43 +1,31 @@
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import fs from 'node:fs';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import fs from 'node:fs';
 import { runtimePaths } from './runtime-paths.mjs';
 import { readRecord } from '../../service-lifecycle.mjs';
 import { lanNetworks } from './network-info.mjs';
-
-const exec = promisify(execFile);
-const bridgeRoot = fileURLToPath(new URL('../../../', import.meta.url));
-async function detect(script) {
-  const executable = path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe');
-  const { stdout } = await exec(executable, ['-NoProfile', '-NonInteractive', '-File',
-    path.join(bridgeRoot, script)], { windowsHide: true, encoding: 'utf8' });
-  return stdout.trim();
-}
-
-// Windows-only network metadata stays here, outside the lifecycle implementation.
+
+const exec = promisify(execFile);
+const bridgeRoot = fileURLToPath(new URL('../../../', import.meta.url));
+async function detect(script) {
+  const executable = path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe');
+  const { stdout } = await exec(executable, ['-NoProfile', '-NonInteractive', '-File',
+    path.join(bridgeRoot, script)], { windowsHide: true, encoding: 'utf8' });
+  return stdout.trim();
+}
+
+// Windows-only network metadata stays here, outside the lifecycle implementation.
 export const sharedServiceUrl = () => detect('get-shared-service-url.ps1');
 export const lanAddress = async () => (await lanNetworks())[0]?.address || '';
 export { lanNetworks };
-export function migrateState(stateRoot) {
-  fs.mkdirSync(stateRoot, { recursive: true });
-  for (const name of ['bridge-config.json', 'bridge-session.json']) {
-    const target = path.join(stateRoot, name);
-    const old = path.join(bridgeRoot, '../.codex/bridge', name);
-    if (!fs.existsSync(target) && fs.existsSync(old)) fs.copyFileSync(old, target, fs.constants.COPYFILE_EXCL);
-  }
-}
-export async function desktopEnvironment(context, sharedUrl) {
-  const environment = { ...process.env };
-  environment.CODEX_THREAD_ID ||= environment.CODEX_SESSION_ID || context?.sourceThreadId;
-  if (sharedUrl) environment.CODEX_REMOTE_SHARED_WS_URL = sharedUrl;
-  else delete environment.CODEX_REMOTE_SHARED_WS_URL;
-  const installation = readRecord(path.join(runtimePaths(environment).serviceRoot, 'installation.json'));
-  const executable = installation?.nodeExecutable;
+export async function bridgeEnvironment() {
+  const environment = { ...process.env };
+  const installation = readRecord(path.join(runtimePaths(environment).serviceRoot, 'installation.json'));
+  const executable = installation?.nodeExecutable;
   if (!executable || !fs.existsSync(executable)) throw new Error('安装时选用的 Node 不存在，请重新安装 Code Relax。');
-  environment.CODEX_MCP_NODE_PATH = executable;
-  environment.CODEX_REMOTE_LEGACY_UPLOADS_ROOTS = JSON.stringify(installation.legacyUploadsRoots || []);
-  if (sharedUrl) delete environment.CODEX_APP_TOOLS_PIPE_PATH;
-  return { executable, environment };
-}
+  environment.CODEX_MCP_NODE_PATH = executable;
+  delete environment.CODEX_APP_TOOLS_PIPE_PATH;
+  return { executable, environment };
+}

package/dist/src/platform/windows/stop-desktop.ps1

@@ -5,15 +5,18 @@ $package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
 if (-not $package -or $Executable -ne (Join-Path $package.InstallLocation 'app/ChatGPT.exe')) {
     throw 'Desktop executable identity changed; recovery stopped.'
 }
-# This action is only reached after explicit whole-workstation recovery confirmation.
-# Never kill an app-server process tree: the independent recovery worker must survive.
-$workers = @(Get-CimInstance Win32_Process -Filter "Name='ChatGPT.exe'" | Where-Object { $_.ExecutablePath -eq $Executable })
+# Never kill another user's Desktop or an app-server process tree. The independent
+# installer/recovery worker must survive and relaunch only in this interactive session.
+$currentSessionId = (Get-Process -Id $PID -ErrorAction Stop).SessionId
+$workers = @(Get-CimInstance Win32_Process -Filter "Name='ChatGPT.exe'" | Where-Object {
+    $_.ExecutablePath -eq $Executable -and $_.SessionId -eq $currentSessionId
+})
 foreach ($worker in $workers) {
     $actual = Get-CimInstance Win32_Process -Filter "ProcessId=$($worker.ProcessId)"
     if ($actual -and $actual.ExecutablePath -eq $worker.ExecutablePath -and $actual.CreationDate -eq $worker.CreationDate) {
         Stop-Process -Id $worker.ProcessId -Force -ErrorAction Stop
     }
 }
-if (Get-Process ChatGPT -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq $Executable }) {
+if (Get-Process ChatGPT -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq $Executable -and $_.SessionId -eq $currentSessionId }) {
     throw 'Desktop did not exit; recovery stopped.'
 }