@walkhi/code-relax 0.1.0-beta.66 → 0.1.0-beta.68

package/dist/src/service-control.mjs

@@ -1,82 +1,82 @@
-import http from 'node:http';
-import { timingSafeEqual } from 'node:crypto';
-
-function matches(left, right) {
-  const a = Buffer.from(left || '');
-  const b = Buffer.from(right || '');
-  return a.length === b.length && timingSafeEqual(a, b);
-}
-
-// Separate from the LAN listener: mobile credentials never authorize lifecycle operations.
-export async function openControl({ instanceId, secret, shutdown, status = () => ({}), actions = {} }) {
-  const server = http.createServer((request, response) => {
-    if (!matches(request.headers.authorization, `Bearer ${secret}`)) {
-      response.writeHead(403).end();
-      return;
-    }
-    const action = Object.keys(actions).find(name => request.url === `/${instanceId}/${name}`);
-    if ((!action && request.url !== `/${instanceId}`) || !['GET', 'POST'].includes(request.method) || (action && request.method !== 'POST')) {
-      response.writeHead(404).end();
-      return;
-    }
-    response.setHeader('Content-Type', 'application/json');
-    response.setHeader('Connection', 'close');
-    if (action) {
-      Promise.resolve().then(async () => {
-        let body = '';
-        request.setEncoding('utf8');
-        for await (const chunk of request) {
-          body += chunk;
-          if (Buffer.byteLength(body) > 4096) throw new Error('管理请求过大');
-        }
-        const details = body ? JSON.parse(body) : {};
-        if (!details || typeof details !== 'object' || Array.isArray(details)) throw new Error('无效管理请求');
-        return actions[action](details);
-      }).then(result => {
-        response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
-      }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
-      return;
-    }
-    if (request.method === 'POST') response.once('finish', () => {
-      Promise.resolve(shutdown()).catch(error => {
-        console.error('桌面服务关闭失败：', error.message);
-        process.exitCode = 1;
-      });
-    });
-    response.end(JSON.stringify({ ...status(), instanceId, pid: process.pid }));
-  });
-  await new Promise((resolve, reject) => {
-    server.once('error', reject);
-    server.listen(0, '127.0.0.1', resolve);
-  });
-  return { port: server.address().port, close: () => new Promise((resolve, reject) => {
-    server.close(error => error ? reject(error) : resolve());
-  }) };
-}
-
-export function controlRequest(session, method = 'GET', action = '', details) {
-  return new Promise((resolve, reject) => {
-    const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
-      path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
-      headers: { Authorization: `Bearer ${session.controlSecret}` }, timeout: action ? 25000 : 2000 }, response => {
-      let body = '';
-      response.setEncoding('utf8');
-      response.on('data', chunk => { body += chunk; });
-      response.on('error', reject);
-      response.on('end', () => {
-        try {
-          if (response.statusCode === 409) throw new Error(JSON.parse(body).error);
-          if (response.statusCode !== 200) throw new Error('桌面服务管理通道身份验证失败。');
-          const identity = JSON.parse(body);
-          if (identity.instanceId !== session.instanceId || identity.pid !== session.pid) {
-            throw new Error('桌面服务实例身份不匹配。');
-          }
-          resolve(identity);
-        } catch (error) { reject(error); }
-      });
-    });
-    request.on('timeout', () => request.destroy(new Error('桌面服务管理通道响应超时。')));
-    request.on('error', reject);
-    request.end(details === undefined ? undefined : JSON.stringify(details));
-  });
-}
+import http from 'node:http';
+import { timingSafeEqual } from 'node:crypto';
+
+function matches(left, right) {
+  const a = Buffer.from(left || '');
+  const b = Buffer.from(right || '');
+  return a.length === b.length && timingSafeEqual(a, b);
+}
+
+// Separate from the LAN listener: mobile credentials never authorize lifecycle operations.
+export async function openControl({ instanceId, secret, shutdown, status = () => ({}), actions = {} }) {
+  const server = http.createServer((request, response) => {
+    if (!matches(request.headers.authorization, `Bearer ${secret}`)) {
+      response.writeHead(403).end();
+      return;
+    }
+    const action = Object.keys(actions).find(name => request.url === `/${instanceId}/${name}`);
+    if ((!action && request.url !== `/${instanceId}`) || !['GET', 'POST'].includes(request.method) || (action && request.method !== 'POST')) {
+      response.writeHead(404).end();
+      return;
+    }
+    response.setHeader('Content-Type', 'application/json');
+    response.setHeader('Connection', 'close');
+    if (action) {
+      Promise.resolve().then(async () => {
+        let body = '';
+        request.setEncoding('utf8');
+        for await (const chunk of request) {
+          body += chunk;
+          if (Buffer.byteLength(body) > 4096) throw new Error('管理请求过大');
+        }
+        const details = body ? JSON.parse(body) : {};
+        if (!details || typeof details !== 'object' || Array.isArray(details)) throw new Error('无效管理请求');
+        return actions[action](details);
+      }).then(result => {
+        response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
+      }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
+      return;
+    }
+    if (request.method === 'POST') response.once('finish', () => {
+      Promise.resolve(shutdown()).catch(error => {
+        console.error('桌面服务关闭失败：', error.message);
+        process.exitCode = 1;
+      });
+    });
+    response.end(JSON.stringify({ ...status(), instanceId, pid: process.pid }));
+  });
+  await new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', resolve);
+  });
+  return { port: server.address().port, close: () => new Promise((resolve, reject) => {
+    server.close(error => error ? reject(error) : resolve());
+  }) };
+}
+
+export function controlRequest(session, method = 'GET', action = '', details) {
+  return new Promise((resolve, reject) => {
+    const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
+      path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
+      headers: { Authorization: `Bearer ${session.controlSecret}` }, timeout: action ? 25000 : 2000 }, response => {
+      let body = '';
+      response.setEncoding('utf8');
+      response.on('data', chunk => { body += chunk; });
+      response.on('error', reject);
+      response.on('end', () => {
+        try {
+          if (response.statusCode === 409) throw new Error(JSON.parse(body).error);
+          if (response.statusCode !== 200) throw new Error('桌面服务管理通道身份验证失败。');
+          const identity = JSON.parse(body);
+          if (identity.instanceId !== session.instanceId || identity.pid !== session.pid) {
+            throw new Error('桌面服务实例身份不匹配。');
+          }
+          resolve(identity);
+        } catch (error) { reject(error); }
+      });
+    });
+    request.on('timeout', () => request.destroy(new Error('桌面服务管理通道响应超时。')));
+    request.on('error', reject);
+    request.end(details === undefined ? undefined : JSON.stringify(details));
+  });
+}

package/dist/src/service-health.mjs

@@ -1,33 +1,33 @@
-import WebSocket from 'ws';
-
-// Use the same authenticated LAN protocol as mobile clients; never replay requests.
-export function serviceHealth(session) {
-  if (!session) return Promise.resolve(null);
-  return new Promise((resolve, reject) => {
-    const token = new URL(session.accessUrl).searchParams.get('token');
-    const socket = new WebSocket(`ws://127.0.0.1:${session.port}/api/socket`);
-    let done = false;
-    const finish = (error, value = null) => {
-      if (done) return;
-      done = true;
-      clearTimeout(timer);
-      socket.terminate();
-      if (error) reject(error); else resolve(value);
-    };
-    const timer = setTimeout(() => finish(new Error('桌面服务健康检查超时。')), 6000);
-    socket.on('open', () => socket.send(JSON.stringify({ type: 'auth', token })));
-    socket.on('message', data => {
-      try {
-        const message = JSON.parse(data.toString());
-        if (message.type === 'ready') {
-          socket.send(JSON.stringify({ type: 'request', id: 1, method: 'GET', path: '/api/health' }));
-        } else if (message.type === 'response' && message.id === 1) {
-          finish(null, message.status === 200 ? message.body : null);
-        }
-      } catch (error) { finish(error); }
-    });
-    socket.on('error', error => finish(error.code === 'ECONNREFUSED' ? null : error));
-    socket.on('close', code => finish(new Error(code === 1008
-      ? '桌面服务健康检查鉴权失败。' : '桌面服务健康检查连接已断开。')));
-  });
-}
+import WebSocket from 'ws';
+
+// Use the same authenticated LAN protocol as mobile clients; never replay requests.
+export function serviceHealth(session) {
+  if (!session) return Promise.resolve(null);
+  return new Promise((resolve, reject) => {
+    const token = new URL(session.accessUrl).searchParams.get('token');
+    const socket = new WebSocket(`ws://127.0.0.1:${session.port}/api/socket`);
+    let done = false;
+    const finish = (error, value = null) => {
+      if (done) return;
+      done = true;
+      clearTimeout(timer);
+      socket.terminate();
+      if (error) reject(error); else resolve(value);
+    };
+    const timer = setTimeout(() => finish(new Error('桌面服务健康检查超时。')), 6000);
+    socket.on('open', () => socket.send(JSON.stringify({ type: 'auth', token })));
+    socket.on('message', data => {
+      try {
+        const message = JSON.parse(data.toString());
+        if (message.type === 'ready') {
+          socket.send(JSON.stringify({ type: 'request', id: 1, method: 'GET', path: '/api/health' }));
+        } else if (message.type === 'response' && message.id === 1) {
+          finish(null, message.status === 200 ? message.body : null);
+        }
+      } catch (error) { finish(error); }
+    });
+    socket.on('error', error => finish(error.code === 'ECONNREFUSED' ? null : error));
+    socket.on('close', code => finish(new Error(code === 1008
+      ? '桌面服务健康检查鉴权失败。' : '桌面服务健康检查连接已断开。')));
+  });
+}

package/dist/src/service-power.mjs

@@ -1,58 +1,58 @@
-import path from 'node:path';
-import { readRecord, writeRecord } from './service-lifecycle.mjs';
-import { launchPowerInhibitor } from './platform/power-inhibitor.mjs';
-
-export const powerConfigPath = stateRoot => path.join(stateRoot, 'keep-awake.json');
-export const powerEnabled = stateRoot => readRecord(powerConfigPath(stateRoot))?.enabled !== false;
-
-export function createPowerManager(stateRoot, { launch = launchPowerInhibitor, report = console.error } = {}) {
-  let enabled = powerEnabled(stateRoot), active = false, error = '', child = null, closed, stopping = false;
-  let queue = Promise.resolve();
-  const snapshot = () => ({ enabled, active, error });
-  async function release() {
-    if (!child) return;
-    stopping = true;
-    child.stdin.end();
-    await closed;
-  }
-  async function acquire() {
-    if (child || !enabled) return;
-    error = '';
-    try {
-      const process = launch();
-      stopping = false;
-      child = process;
-      let stderr = '', output = '';
-      process.stderr.on('data', data => { stderr = (stderr + data).slice(-2048); });
-      process.stdin.on('error', cause => { if (cause.code !== 'EPIPE') report(`保持唤醒通道异常：${cause.message}`); });
-      closed = new Promise(resolve => process.once('close', code => {
-        if (active && !stopping) { error = stderr.trim() || `保持唤醒进程意外退出（${code}）`; report(error); }
-        child = null; active = false; resolve();
-      }));
-      await new Promise((resolve, reject) => {
-        const timer = setTimeout(() => { process.kill(); reject(new Error('保持唤醒申请超时')); }, 8000);
-        const finish = cause => { clearTimeout(timer); cause ? reject(cause) : resolve(); };
-        process.once('error', finish);
-        process.once('close', code => {
-          finish(new Error(stderr.trim() || `保持唤醒进程已退出（${code}）`));
-        });
-        process.stdout.on('data', data => {
-          output += data;
-          if (output.includes('ready\n') || output.includes('ready\r\n')) { active = true; finish(); }
-        });
-      });
-    } catch (cause) { error = cause.message; report(`保持唤醒未生效：${error}`); }
-  }
-  const serial = task => { const result = queue.then(task); queue = result.catch(() => {}); return result; };
-  return {
-    snapshot,
-    start: () => serial(async () => { await acquire(); return snapshot(); }),
-    setEnabled: value => serial(async () => {
-      writeRecord(powerConfigPath(stateRoot), { enabled: value });
-      enabled = value;
-      if (enabled) await acquire(); else { await release(); error = ''; }
-      return snapshot();
-    }),
-    close: () => serial(async () => { enabled = false; await release(); }),
-  };
-}
+import path from 'node:path';
+import { readRecord, writeRecord } from './service-lifecycle.mjs';
+import { launchPowerInhibitor } from './platform/power-inhibitor.mjs';
+
+export const powerConfigPath = stateRoot => path.join(stateRoot, 'keep-awake.json');
+export const powerEnabled = stateRoot => readRecord(powerConfigPath(stateRoot))?.enabled !== false;
+
+export function createPowerManager(stateRoot, { launch = launchPowerInhibitor, report = console.error } = {}) {
+  let enabled = powerEnabled(stateRoot), active = false, error = '', child = null, closed, stopping = false;
+  let queue = Promise.resolve();
+  const snapshot = () => ({ enabled, active, error });
+  async function release() {
+    if (!child) return;
+    stopping = true;
+    child.stdin.end();
+    await closed;
+  }
+  async function acquire() {
+    if (child || !enabled) return;
+    error = '';
+    try {
+      const process = launch();
+      stopping = false;
+      child = process;
+      let stderr = '', output = '';
+      process.stderr.on('data', data => { stderr = (stderr + data).slice(-2048); });
+      process.stdin.on('error', cause => { if (cause.code !== 'EPIPE') report(`保持唤醒通道异常：${cause.message}`); });
+      closed = new Promise(resolve => process.once('close', code => {
+        if (active && !stopping) { error = stderr.trim() || `保持唤醒进程意外退出（${code}）`; report(error); }
+        child = null; active = false; resolve();
+      }));
+      await new Promise((resolve, reject) => {
+        const timer = setTimeout(() => { process.kill(); reject(new Error('保持唤醒申请超时')); }, 8000);
+        const finish = cause => { clearTimeout(timer); cause ? reject(cause) : resolve(); };
+        process.once('error', finish);
+        process.once('close', code => {
+          finish(new Error(stderr.trim() || `保持唤醒进程已退出（${code}）`));
+        });
+        process.stdout.on('data', data => {
+          output += data;
+          if (output.includes('ready\n') || output.includes('ready\r\n')) { active = true; finish(); }
+        });
+      });
+    } catch (cause) { error = cause.message; report(`保持唤醒未生效：${error}`); }
+  }
+  const serial = task => { const result = queue.then(task); queue = result.catch(() => {}); return result; };
+  return {
+    snapshot,
+    start: () => serial(async () => { await acquire(); return snapshot(); }),
+    setEnabled: value => serial(async () => {
+      writeRecord(powerConfigPath(stateRoot), { enabled: value });
+      enabled = value;
+      if (enabled) await acquire(); else { await release(); error = ''; }
+      return snapshot();
+    }),
+    close: () => serial(async () => { enabled = false; await release(); }),
+  };
+}

package/dist/src/service-restart.mjs

@@ -1,81 +1,81 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import { randomUUID } from 'node:crypto';
-import { fileURLToPath } from 'node:url';
-import { setTimeout as delay } from 'node:timers/promises';
-import { startBackground } from './background-process.mjs';
-import { lifecycle, readRecord, writeRecord } from './service-lifecycle.mjs';
-import * as host from './platform/service-host.mjs';
-import { desktopHost } from './platform/desktop-host.mjs';
-
-const script = fileURLToPath(import.meta.url);
-const sameProcess = (expected, actual) => expected && actual && expected.pid === actual.pid &&
-  expected.created === actual.created && expected.executable === actual.executable;
-async function processIdentity(pid) {
-  const current = await desktopHost.process(pid);
-  return current ? { pid: current.pid, created: current.created, executable: current.executable } : null;
-}
-
-export async function requestServiceRestart(stateRoot) {
-  const lock = path.join(stateRoot, 'service-restart.lock');
-  const operationId = randomUUID();
-  const owner = await processIdentity(process.pid);
-  if (!owner) throw new Error('无法确认桌面服务重启请求进程。');
-  const previous = readRecord(lock);
-  if (previous) {
-    const actual = previous.owner?.pid ? await processIdentity(previous.owner.pid) : null;
-    if (sameProcess(previous.owner, actual) || readRecord(lock)?.operationId !== previous.operationId) {
-      throw new Error('桌面服务已在重启中。');
-    }
-    fs.rmSync(lock);
-  }
-  const temporary = `${lock}.${operationId}.tmp`;
-  try {
-    fs.writeFileSync(temporary, JSON.stringify({ operationId, owner, requestedAt: new Date().toISOString() }),
-      { flag: 'wx', mode: 0o600 });
-    // Publish a complete record exclusively; a crash cannot leave a half-written lock.
-    fs.linkSync(temporary, lock);
-  } catch (error) {
-    if (error.code === 'EEXIST') throw new Error('桌面服务已在重启中。');
-    throw error;
-  } finally { fs.rmSync(temporary, { force: true }); }
-  try {
-    const log = path.join(stateRoot, 'service-restart.log');
-    const pid = await startBackground(process.execPath, [script, '--worker', stateRoot, operationId], process.env, [log, log]);
-    const worker = await processIdentity(pid);
-    if (!worker) throw new Error('桌面服务重启进程未启动。');
-    const current = readRecord(lock);
-    if (current?.operationId !== operationId) throw new Error('桌面服务重启实例已失效。');
-    writeRecord(lock, { ...current, owner: worker });
-    return { operationId, status: 'scheduled', message: '桌面服务重启已安排。' };
-  } catch (error) {
-    const current = readRecord(lock);
-    if (current?.operationId === operationId && sameProcess(current.owner, owner)) fs.rmSync(lock, { force: true });
-    throw error;
-  }
-}
-
-async function run(stateRoot, operationId) {
-  const lock = path.join(stateRoot, 'service-restart.lock');
-  try {
-    const deadline = Date.now() + 30000;
-    while (true) {
-      const record = readRecord(lock);
-      if (record?.operationId !== operationId) throw new Error('桌面服务重启实例已失效。');
-      if (record.owner?.pid === process.pid) break;
-      if (Date.now() >= deadline) throw new Error('桌面服务重启进程交接超时。');
-      await delay(100);
-    }
-    const service = lifecycle({ stateRoot, host });
-    await delay(1000);
-    await service.stop();
-    await service.start();
-  } finally {
-    if (readRecord(lock)?.operationId === operationId) fs.rmSync(lock, { force: true });
-  }
-}
-
-if (process.argv[1] && path.resolve(process.argv[1]) === script && process.argv[2] === '--worker') {
-  const [stateRoot, operationId] = process.argv.slice(3);
-  run(stateRoot, operationId).catch(error => { console.error(error.message); process.exitCode = 1; });
-}
+import fs from 'node:fs';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+import { setTimeout as delay } from 'node:timers/promises';
+import { startBackground } from './background-process.mjs';
+import { lifecycle, readRecord, writeRecord } from './service-lifecycle.mjs';
+import * as host from './platform/service-host.mjs';
+import { desktopHost } from './platform/desktop-host.mjs';
+
+const script = fileURLToPath(import.meta.url);
+const sameProcess = (expected, actual) => expected && actual && expected.pid === actual.pid &&
+  expected.created === actual.created && expected.executable === actual.executable;
+async function processIdentity(pid) {
+  const current = await desktopHost.process(pid);
+  return current ? { pid: current.pid, created: current.created, executable: current.executable } : null;
+}
+
+export async function requestServiceRestart(stateRoot) {
+  const lock = path.join(stateRoot, 'service-restart.lock');
+  const operationId = randomUUID();
+  const owner = await processIdentity(process.pid);
+  if (!owner) throw new Error('无法确认桌面服务重启请求进程。');
+  const previous = readRecord(lock);
+  if (previous) {
+    const actual = previous.owner?.pid ? await processIdentity(previous.owner.pid) : null;
+    if (sameProcess(previous.owner, actual) || readRecord(lock)?.operationId !== previous.operationId) {
+      throw new Error('桌面服务已在重启中。');
+    }
+    fs.rmSync(lock);
+  }
+  const temporary = `${lock}.${operationId}.tmp`;
+  try {
+    fs.writeFileSync(temporary, JSON.stringify({ operationId, owner, requestedAt: new Date().toISOString() }),
+      { flag: 'wx', mode: 0o600 });
+    // Publish a complete record exclusively; a crash cannot leave a half-written lock.
+    fs.linkSync(temporary, lock);
+  } catch (error) {
+    if (error.code === 'EEXIST') throw new Error('桌面服务已在重启中。');
+    throw error;
+  } finally { fs.rmSync(temporary, { force: true }); }
+  try {
+    const log = path.join(stateRoot, 'service-restart.log');
+    const pid = await startBackground(process.execPath, [script, '--worker', stateRoot, operationId], process.env, [log, log]);
+    const worker = await processIdentity(pid);
+    if (!worker) throw new Error('桌面服务重启进程未启动。');
+    const current = readRecord(lock);
+    if (current?.operationId !== operationId) throw new Error('桌面服务重启实例已失效。');
+    writeRecord(lock, { ...current, owner: worker });
+    return { operationId, status: 'scheduled', message: '桌面服务重启已安排。' };
+  } catch (error) {
+    const current = readRecord(lock);
+    if (current?.operationId === operationId && sameProcess(current.owner, owner)) fs.rmSync(lock, { force: true });
+    throw error;
+  }
+}
+
+async function run(stateRoot, operationId) {
+  const lock = path.join(stateRoot, 'service-restart.lock');
+  try {
+    const deadline = Date.now() + 30000;
+    while (true) {
+      const record = readRecord(lock);
+      if (record?.operationId !== operationId) throw new Error('桌面服务重启实例已失效。');
+      if (record.owner?.pid === process.pid) break;
+      if (Date.now() >= deadline) throw new Error('桌面服务重启进程交接超时。');
+      await delay(100);
+    }
+    const service = lifecycle({ stateRoot, host });
+    await delay(1000);
+    await service.stop();
+    await service.start();
+  } finally {
+    if (readRecord(lock)?.operationId === operationId) fs.rmSync(lock, { force: true });
+  }
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === script && process.argv[2] === '--worker') {
+  const [stateRoot, operationId] = process.argv.slice(3);
+  run(stateRoot, operationId).catch(error => { console.error(error.message); process.exitCode = 1; });
+}

package/dist/src/service-update-worker.mjs

@@ -1,42 +1,42 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import { spawn } from 'node:child_process';
-import { setTimeout as delay } from 'node:timers/promises';
-
-// Copied outside both npm and service directories before launch. Builtins only.
-const jobFile = process.argv[2];
-const job = JSON.parse(fs.readFileSync(jobFile, 'utf8'));
-process.chdir(path.dirname(jobFile));
-const read = () => JSON.parse(fs.readFileSync(job.statusFile, 'utf8'));
-function update(values) {
-  const current = read();
-  if (current.operationId !== job.operationId) throw new Error('更新操作已被替换');
-  const temporary = `${job.statusFile}.${process.pid}.tmp`;
-  fs.writeFileSync(temporary, JSON.stringify({ ...current, ...values }), { mode: 0o600 });
-  fs.renameSync(temporary, job.statusFile);
-}
-try {
-  const deadline = Date.now() + 30000;
-  while (read().owner?.pid !== process.pid) {
-    if (Date.now() >= deadline) throw new Error('独立更新进程交接超时');
-    await delay(100);
-  }
-  await delay(1500);
-  update({ status: 'running', startedAt: new Date().toISOString() });
-  const args = [job.npmCliPath, 'install', '--global', `@walkhi/code-relax@${job.targetVersion}`,
-    '--foreground-scripts', '--allow-scripts=@walkhi/code-relax,node-datachannel,sharp', '--registry=https://registry.npmjs.org'];
-  if (job.npmPrefix) args.push('--prefix', job.npmPrefix);
-  const child = spawn(job.nodeExecutable, args, { cwd: path.dirname(jobFile), windowsHide: true,
-    stdio: ['ignore', 'inherit', 'inherit'] });
-  const code = await new Promise((resolve, reject) => {
-    child.once('error', reject); child.once('exit', (code, signal) => resolve(code ?? `signal ${signal}`));
-  });
-  if (code !== 0) throw new Error(`npm 安装失败（${code}），请查看桌面服务更新日志。`);
-  const installed = JSON.parse(fs.readFileSync(path.join(job.serviceRoot, 'installation.json'), 'utf8'));
-  if (installed.version !== job.targetVersion) throw new Error('安装结束，但桌面服务版本与目标版本不一致。');
-  update({ status: 'completed', finishedAt: new Date().toISOString(), installedVersion: installed.version });
-} catch (error) {
-  console.error(error.stack || error.message);
-  update({ status: 'failed', finishedAt: new Date().toISOString(), error: error.message });
-  process.exitCode = 1;
-}
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+import { setTimeout as delay } from 'node:timers/promises';
+
+// Copied outside both npm and service directories before launch. Builtins only.
+const jobFile = process.argv[2];
+const job = JSON.parse(fs.readFileSync(jobFile, 'utf8'));
+process.chdir(path.dirname(jobFile));
+const read = () => JSON.parse(fs.readFileSync(job.statusFile, 'utf8'));
+function update(values) {
+  const current = read();
+  if (current.operationId !== job.operationId) throw new Error('更新操作已被替换');
+  const temporary = `${job.statusFile}.${process.pid}.tmp`;
+  fs.writeFileSync(temporary, JSON.stringify({ ...current, ...values }), { mode: 0o600 });
+  fs.renameSync(temporary, job.statusFile);
+}
+try {
+  const deadline = Date.now() + 30000;
+  while (read().owner?.pid !== process.pid) {
+    if (Date.now() >= deadline) throw new Error('独立更新进程交接超时');
+    await delay(100);
+  }
+  await delay(1500);
+  update({ status: 'running', startedAt: new Date().toISOString() });
+  const args = [job.npmCliPath, 'install', '--global', `@walkhi/code-relax@${job.targetVersion}`,
+    '--foreground-scripts', '--allow-scripts=@walkhi/code-relax,node-datachannel,sharp', '--registry=https://registry.npmjs.org'];
+  if (job.npmPrefix) args.push('--prefix', job.npmPrefix);
+  const child = spawn(job.nodeExecutable, args, { cwd: path.dirname(jobFile), windowsHide: true,
+    stdio: ['ignore', 'inherit', 'inherit'] });
+  const code = await new Promise((resolve, reject) => {
+    child.once('error', reject); child.once('exit', (code, signal) => resolve(code ?? `signal ${signal}`));
+  });
+  if (code !== 0) throw new Error(`npm 安装失败（${code}），请查看桌面服务更新日志。`);
+  const installed = JSON.parse(fs.readFileSync(path.join(job.serviceRoot, 'installation.json'), 'utf8'));
+  if (installed.version !== job.targetVersion) throw new Error('安装结束，但桌面服务版本与目标版本不一致。');
+  update({ status: 'completed', finishedAt: new Date().toISOString(), installedVersion: installed.version });
+} catch (error) {
+  console.error(error.stack || error.message);
+  update({ status: 'failed', finishedAt: new Date().toISOString(), error: error.message });
+  process.exitCode = 1;
+}