@walkhi/code-relax 0.1.0-beta.66 → 0.1.0-beta.68

package/dist/src/thread-title-generation.mjs

@@ -1,150 +1,150 @@
-import { randomUUID } from 'node:crypto';
-
-const TITLE_MODEL = 'gpt-5.6-luna';
-const TITLE_TIMEOUT_MS = 30_000;
-const TITLE_SCHEMA = Object.freeze({
-  type: 'object',
-  properties: {
-    title: { type: 'string', minLength: 1, maxLength: 36 },
-    description: { type: 'string', minLength: 1, maxLength: 100 },
-  },
-  required: ['title', 'description'],
-  additionalProperties: false,
-});
-
-function titlePrompt(prompt) {
-  return [
-    'You are a helpful assistant. You will be presented with a user prompt, and your job is to provide a short title for a task that will be created from that prompt.',
-    'The title will be shown in the UI to represent the prompt.',
-    'Generate a concise UI title of at most 36 characters and fill the structured title field with plain text.',
-    'Fill the structured description field with a compact, search-oriented summary of at most 100 characters.',
-    'Write both values in the user\'s locale. Do not include quotes, markdown, formatting characters, or trailing punctuation.',
-    'Capture the question or core change requested instead of copying the whole prompt.',
-    'Do not respond to the user or attempt to solve the problem; only fill the structured fields.',
-    '',
-    'User prompt:',
-    prompt,
-  ].join('\n');
-}
-
-function normalizeTitle(value) {
-  let title = String(value || '').replace(/\r\n/g, '\n').split('\n').find(line => line.trim())?.trim() || '';
-  title = title.replace(/^title[:\s]+/i, '');
-  title = title.replace(/^[`"'“”‘’]+|[`"'“”‘’]+$/g, '');
-  title = title.replace(/\s+/g, ' ').replace(/[.?!。？！]+$/, '').trim();
-  if (!title) return null;
-  if (title.length <= 36) return title;
-  let end = 36;
-  if (title[end] !== ' ' && title[end - 1] !== ' ') {
-    const nextSpace = title.indexOf(' ', end);
-    end = nextSpace < 0 ? title.length : nextSpace;
-  }
-  const head = title.slice(0, end).trimEnd();
-  return title.slice(end).trim() ? `${head}…` : head;
-}
-
-function parseStructuredTitle(text) {
-  if (!text?.trim()) return null;
-  try {
-    const value = JSON.parse(text.trim());
-    return normalizeTitle(value?.title);
-  } catch {
-    return null;
-  }
-}
-
-export async function generateThreadTitle({ request, subscribe, prompt, cwd = null,
-  timeoutMs = TITLE_TIMEOUT_MS, uuid = randomUUID }) {
-  const source = String(prompt || '').trim();
-  if (!source) return null;
-  const { thread } = await request('thread/start', {
-    model: TITLE_MODEL,
-    modelProvider: null,
-    allowProviderModelFallback: true,
-    cwd,
-    approvalPolicy: 'never',
-    permissions: ':read-only',
-    runtimeWorkspaceRoots: [],
-    config: {
-      'features.enable_fanout': false,
-      'features.hooks': false,
-      'features.multi_agent': false,
-      'features.multi_agent_v2': false,
-      'features.plugins': false,
-      'features.shell_snapshot': false,
-      'features.tool_suggest': false,
-      'features.apps': false,
-      'mcp_servers.codex_app': { enabled: false, command: '' },
-      apps: { _default: { enabled: false, destructive_enabled: false, open_world_enabled: false } },
-      model_reasoning_effort: 'low',
-      web_search: 'disabled',
-    },
-    personality: null,
-    ephemeral: true,
-    threadSource: 'thread_title',
-    experimentalRawEvents: false,
-    dynamicTools: null,
-    serviceTier: null,
-  });
-  const threadId = thread.id;
-  let message = '';
-  let turnId = null;
-  let stop = () => {};
-  try {
-    const completed = new Promise((resolve, reject) => {
-      const timer = setTimeout(() => reject(new Error('生成对话标题超时。')), timeoutMs);
-      timer.unref?.();
-      const unsubscribe = subscribe(({ method, params }) => {
-        if (params.threadId !== threadId) return;
-        if (method === 'turn/started') turnId = params.turn?.id || turnId;
-        if (turnId && params.turnId && params.turnId !== turnId) return;
-        if (method === 'item/agentMessage/delta') message += params.delta || '';
-        if (method === 'item/completed' && params.item?.type === 'agentMessage') message = params.item.text || message;
-        if (method === 'error') {
-          clearTimeout(timer);
-          reject(new Error(params.error?.message || '生成对话标题失败。'));
-        }
-        if (method === 'turn/completed') {
-          clearTimeout(timer);
-          if (params.turn?.status !== 'completed') {
-            reject(new Error(params.turn?.error?.message || `生成对话标题失败：${params.turn?.status || 'unknown'}`));
-          } else resolve(parseStructuredTitle(message));
-        }
-      });
-      stop = () => { clearTimeout(timer); unsubscribe(); };
-    });
-    const started = await request('turn/start', {
-      threadId,
-      turnTrigger: 'thread_title',
-      clientUserMessageId: uuid(),
-      input: [{ type: 'text', text: titlePrompt(source), text_elements: [] }],
-      cwd: null,
-      approvalPolicy: null,
-      permissions: ':read-only',
-      runtimeWorkspaceRoots: [],
-      model: null,
-      effort: null,
-      serviceTier: null,
-      personality: null,
-      outputSchema: TITLE_SCHEMA,
-      collaborationMode: null,
-    });
-    turnId ||= started.turn?.id || null;
-    return await completed;
-  } finally {
-    stop();
-    await request('thread/unsubscribe', { threadId }).catch(() => {});
-  }
-}
-
-export async function generateAndSetThreadTitle({ request, subscribe, threadId, prompt, cwd = null,
-  timeoutMs, uuid }) {
-  const title = await generateThreadTitle({ request, subscribe, prompt, cwd, timeoutMs, uuid });
-  if (!title) return null;
-  const current = await request('thread/read', { threadId, includeTurns: false });
-  if (current.thread?.name?.trim()) return null;
-  await request('thread/name/set', { threadId, name: title });
-  return title;
-}
-
-export const threadTitleInternals = { normalizeTitle, parseStructuredTitle, TITLE_SCHEMA, TITLE_MODEL };
+import { randomUUID } from 'node:crypto';
+
+const TITLE_MODEL = 'gpt-5.6-luna';
+const TITLE_TIMEOUT_MS = 30_000;
+const TITLE_SCHEMA = Object.freeze({
+  type: 'object',
+  properties: {
+    title: { type: 'string', minLength: 1, maxLength: 36 },
+    description: { type: 'string', minLength: 1, maxLength: 100 },
+  },
+  required: ['title', 'description'],
+  additionalProperties: false,
+});
+
+function titlePrompt(prompt) {
+  return [
+    'You are a helpful assistant. You will be presented with a user prompt, and your job is to provide a short title for a task that will be created from that prompt.',
+    'The title will be shown in the UI to represent the prompt.',
+    'Generate a concise UI title of at most 36 characters and fill the structured title field with plain text.',
+    'Fill the structured description field with a compact, search-oriented summary of at most 100 characters.',
+    'Write both values in the user\'s locale. Do not include quotes, markdown, formatting characters, or trailing punctuation.',
+    'Capture the question or core change requested instead of copying the whole prompt.',
+    'Do not respond to the user or attempt to solve the problem; only fill the structured fields.',
+    '',
+    'User prompt:',
+    prompt,
+  ].join('\n');
+}
+
+function normalizeTitle(value) {
+  let title = String(value || '').replace(/\r\n/g, '\n').split('\n').find(line => line.trim())?.trim() || '';
+  title = title.replace(/^title[:\s]+/i, '');
+  title = title.replace(/^[`"'“”‘’]+|[`"'“”‘’]+$/g, '');
+  title = title.replace(/\s+/g, ' ').replace(/[.?!。？！]+$/, '').trim();
+  if (!title) return null;
+  if (title.length <= 36) return title;
+  let end = 36;
+  if (title[end] !== ' ' && title[end - 1] !== ' ') {
+    const nextSpace = title.indexOf(' ', end);
+    end = nextSpace < 0 ? title.length : nextSpace;
+  }
+  const head = title.slice(0, end).trimEnd();
+  return title.slice(end).trim() ? `${head}…` : head;
+}
+
+function parseStructuredTitle(text) {
+  if (!text?.trim()) return null;
+  try {
+    const value = JSON.parse(text.trim());
+    return normalizeTitle(value?.title);
+  } catch {
+    return null;
+  }
+}
+
+export async function generateThreadTitle({ request, subscribe, prompt, cwd = null,
+  timeoutMs = TITLE_TIMEOUT_MS, uuid = randomUUID }) {
+  const source = String(prompt || '').trim();
+  if (!source) return null;
+  const { thread } = await request('thread/start', {
+    model: TITLE_MODEL,
+    modelProvider: null,
+    allowProviderModelFallback: true,
+    cwd,
+    approvalPolicy: 'never',
+    permissions: ':read-only',
+    runtimeWorkspaceRoots: [],
+    config: {
+      'features.enable_fanout': false,
+      'features.hooks': false,
+      'features.multi_agent': false,
+      'features.multi_agent_v2': false,
+      'features.plugins': false,
+      'features.shell_snapshot': false,
+      'features.tool_suggest': false,
+      'features.apps': false,
+      'mcp_servers.codex_app': { enabled: false, command: '' },
+      apps: { _default: { enabled: false, destructive_enabled: false, open_world_enabled: false } },
+      model_reasoning_effort: 'low',
+      web_search: 'disabled',
+    },
+    personality: null,
+    ephemeral: true,
+    threadSource: 'thread_title',
+    experimentalRawEvents: false,
+    dynamicTools: null,
+    serviceTier: null,
+  });
+  const threadId = thread.id;
+  let message = '';
+  let turnId = null;
+  let stop = () => {};
+  try {
+    const completed = new Promise((resolve, reject) => {
+      const timer = setTimeout(() => reject(new Error('生成对话标题超时。')), timeoutMs);
+      timer.unref?.();
+      const unsubscribe = subscribe(({ method, params }) => {
+        if (params.threadId !== threadId) return;
+        if (method === 'turn/started') turnId = params.turn?.id || turnId;
+        if (turnId && params.turnId && params.turnId !== turnId) return;
+        if (method === 'item/agentMessage/delta') message += params.delta || '';
+        if (method === 'item/completed' && params.item?.type === 'agentMessage') message = params.item.text || message;
+        if (method === 'error') {
+          clearTimeout(timer);
+          reject(new Error(params.error?.message || '生成对话标题失败。'));
+        }
+        if (method === 'turn/completed') {
+          clearTimeout(timer);
+          if (params.turn?.status !== 'completed') {
+            reject(new Error(params.turn?.error?.message || `生成对话标题失败：${params.turn?.status || 'unknown'}`));
+          } else resolve(parseStructuredTitle(message));
+        }
+      });
+      stop = () => { clearTimeout(timer); unsubscribe(); };
+    });
+    const started = await request('turn/start', {
+      threadId,
+      turnTrigger: 'thread_title',
+      clientUserMessageId: uuid(),
+      input: [{ type: 'text', text: titlePrompt(source), text_elements: [] }],
+      cwd: null,
+      approvalPolicy: null,
+      permissions: ':read-only',
+      runtimeWorkspaceRoots: [],
+      model: null,
+      effort: null,
+      serviceTier: null,
+      personality: null,
+      outputSchema: TITLE_SCHEMA,
+      collaborationMode: null,
+    });
+    turnId ||= started.turn?.id || null;
+    return await completed;
+  } finally {
+    stop();
+    await request('thread/unsubscribe', { threadId }).catch(() => {});
+  }
+}
+
+export async function generateAndSetThreadTitle({ request, subscribe, threadId, prompt, cwd = null,
+  timeoutMs, uuid }) {
+  const title = await generateThreadTitle({ request, subscribe, prompt, cwd, timeoutMs, uuid });
+  if (!title) return null;
+  const current = await request('thread/read', { threadId, includeTurns: false });
+  if (current.thread?.name?.trim()) return null;
+  await request('thread/name/set', { threadId, name: title });
+  return title;
+}
+
+export const threadTitleInternals = { normalizeTitle, parseStructuredTitle, TITLE_SCHEMA, TITLE_MODEL };

package/dist/src/turn-model-history.mjs

@@ -1,47 +1,47 @@
-import fs from 'node:fs';
-
-// Read authoritative turn contexts locally; never send rollout text to a terminal.
-export class TurnModelHistory {
-  constructor() { this.files = new Map(); }
-
-  async read(file, turnIds) {
-    if (!file || !turnIds.length) return [];
-    let state = this.files.get(file);
-    if (!state) {
-      state = { offset: 0, lastModel: '', turns: new Map(), changes: new Map(), tail: Promise.resolve() };
-      this.files.set(file, state);
-      if (this.files.size > 16) this.files.delete(this.files.keys().next().value);
-    }
-    const task = state.tail.then(async () => {
-      const stat = await fs.promises.stat(file);
-      if (stat.size < state.offset) {
-        state.offset = 0; state.lastModel = ''; state.turns.clear(); state.changes.clear();
-      }
-      if (stat.size > state.offset) {
-        let pending = Buffer.alloc(0);
-        const stream = fs.createReadStream(file, { start: state.offset, end: stat.size - 1 });
-        for await (const chunk of stream) {
-          const data = pending.length ? Buffer.concat([pending, chunk]) : chunk;
-          let start = 0, end;
-          while ((end = data.indexOf(10, start)) !== -1) {
-            const line = data.subarray(start, end);
-            if (line.subarray(0, 160).includes(Buffer.from('"turn_context"'))) {
-              const event = JSON.parse(line.toString('utf8'));
-              const { turn_id: turnId, model } = event.payload || {};
-              if (event.type === 'turn_context' && typeof turnId === 'string' && typeof model === 'string' && model && !state.turns.has(turnId)) {
-                if (state.lastModel && state.lastModel !== model) state.changes.set(turnId, { turnId, fromModel: state.lastModel, toModel: model });
-                state.turns.set(turnId, model); state.lastModel = model;
-              }
-            }
-            state.offset += end - start + 1;
-            start = end + 1;
-          }
-          pending = data.subarray(start);
-        }
-      }
-      return turnIds.flatMap(id => state.changes.has(id) ? [state.changes.get(id)] : []);
-    });
-    state.tail = task.catch(() => {});
-    return task;
-  }
-}
+import fs from 'node:fs';
+
+// Read authoritative turn contexts locally; never send rollout text to a terminal.
+export class TurnModelHistory {
+  constructor() { this.files = new Map(); }
+
+  async read(file, turnIds) {
+    if (!file || !turnIds.length) return [];
+    let state = this.files.get(file);
+    if (!state) {
+      state = { offset: 0, lastModel: '', turns: new Map(), changes: new Map(), tail: Promise.resolve() };
+      this.files.set(file, state);
+      if (this.files.size > 16) this.files.delete(this.files.keys().next().value);
+    }
+    const task = state.tail.then(async () => {
+      const stat = await fs.promises.stat(file);
+      if (stat.size < state.offset) {
+        state.offset = 0; state.lastModel = ''; state.turns.clear(); state.changes.clear();
+      }
+      if (stat.size > state.offset) {
+        let pending = Buffer.alloc(0);
+        const stream = fs.createReadStream(file, { start: state.offset, end: stat.size - 1 });
+        for await (const chunk of stream) {
+          const data = pending.length ? Buffer.concat([pending, chunk]) : chunk;
+          let start = 0, end;
+          while ((end = data.indexOf(10, start)) !== -1) {
+            const line = data.subarray(start, end);
+            if (line.subarray(0, 160).includes(Buffer.from('"turn_context"'))) {
+              const event = JSON.parse(line.toString('utf8'));
+              const { turn_id: turnId, model } = event.payload || {};
+              if (event.type === 'turn_context' && typeof turnId === 'string' && typeof model === 'string' && model && !state.turns.has(turnId)) {
+                if (state.lastModel && state.lastModel !== model) state.changes.set(turnId, { turnId, fromModel: state.lastModel, toModel: model });
+                state.turns.set(turnId, model); state.lastModel = model;
+              }
+            }
+            state.offset += end - start + 1;
+            start = end + 1;
+          }
+          pending = data.subarray(start);
+        }
+      }
+      return turnIds.flatMap(id => state.changes.has(id) ? [state.changes.get(id)] : []);
+    });
+    state.tail = task.catch(() => {});
+    return task;
+  }
+}

package/dist/tools/rtc-route-helper.ps1

@@ -1,99 +1,99 @@
-param(
-  [Parameter(Mandatory = $true)][string]$Token,
-  [int]$IdleSeconds = 1800
-)
-
-$ErrorActionPreference = 'Stop'
-$pipeName = 'CodeRelaxRtcRouteHelper'
-$leases = @{}
-$pipeSecurity = [System.IO.Pipes.PipeSecurity]::new()
-$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
-$pipeSecurity.AddAccessRule([System.IO.Pipes.PipeAccessRule]::new($currentUser, [System.IO.Pipes.PipeAccessRights]::ReadWrite,
-  [System.Security.AccessControl.AccessControlType]::Allow))
-$pipeSecurity.AddAccessRule([System.IO.Pipes.PipeAccessRule]::new([System.Security.Principal.SecurityIdentifier]::new('S-1-5-18'),
-  [System.IO.Pipes.PipeAccessRights]::FullControl, [System.Security.AccessControl.AccessControlType]::Allow))
-$pipeSecurity.AddAccessRule([System.IO.Pipes.PipeAccessRule]::new([System.Security.Principal.SecurityIdentifier]::new('S-1-5-32-544'),
-  [System.IO.Pipes.PipeAccessRights]::FullControl, [System.Security.AccessControl.AccessControlType]::Allow))
-
-function Test-PublicIpv4([string]$Address) {
-  $parts = $Address.Split('.')
-  if ($parts.Count -ne 4) { return $false }
-  try { $bytes = $parts | ForEach-Object { [byte]$_ } } catch { return $false }
-  $a = $bytes[0]; $b = $bytes[1]
-  return $a -ne 0 -and $a -ne 10 -and $a -ne 127 -and $a -lt 224 -and -not ($a -eq 169 -and $b -eq 254) -and
-    -not ($a -eq 172 -and $b -ge 16 -and $b -le 31) -and -not ($a -eq 192 -and $b -eq 168) -and
-    -not ($a -eq 100 -and $b -ge 64 -and $b -le 127) -and -not ($a -eq 198 -and ($b -eq 18 -or $b -eq 19))
-}
-
-function Get-PhysicalDefaultRoute {
-  $routes = Get-NetRoute -DestinationPrefix '0.0.0.0/0' -AddressFamily IPv4 | Where-Object {
-    $adapter = Get-NetAdapter -InterfaceIndex $_.InterfaceIndex -ErrorAction SilentlyContinue
-    $_.NextHop -and $_.NextHop -ne '0.0.0.0' -and $adapter.Status -eq 'Up' -and $adapter.HardwareInterface -eq $true -and $adapter.Virtual -ne $true
-  } | Sort-Object @{ Expression = { $_.RouteMetric + $_.InterfaceMetric } }
-  foreach ($route in $routes) {
-    $adapter = Get-NetAdapter -InterfaceIndex $route.InterfaceIndex -ErrorAction SilentlyContinue
-    if ($adapter.Name -notmatch 'Mihomo|Meta|Tunnel|VPN|TAP|Wintun') { return $route }
-  }
-  throw '找不到活动物理 IPv4 默认路由'
-}
-
-function Clear-ExpiredRoutes {
-  $now = Get-Date
-  foreach ($address in @($leases.Keys)) {
-    if ($leases[$address].expires -gt $now) { continue }
-    $lease = $leases[$address]
-    if ($lease.created) {
-      Get-NetRoute -DestinationPrefix "$address/32" -InterfaceIndex $lease.ifIndex -NextHop $lease.nextHop -ErrorAction SilentlyContinue |
-        Remove-NetRoute -Confirm:$false -ErrorAction SilentlyContinue
-    }
-    $leases.Remove($address)
-  }
-}
-
-function Clear-AllRoutes {
-  foreach ($address in @($leases.Keys)) {
-    $lease = $leases[$address]
-    if ($lease.created) {
-      Get-NetRoute -DestinationPrefix "$address/32" -InterfaceIndex $lease.ifIndex -NextHop $lease.nextHop -ErrorAction SilentlyContinue |
-        Remove-NetRoute -Confirm:$false -ErrorAction SilentlyContinue
-    }
-    $leases.Remove($address)
-  }
-}
-
-try {
-  $deadline = (Get-Date).AddSeconds($IdleSeconds)
-  while ((Get-Date) -lt $deadline) {
-    Clear-ExpiredRoutes
-    $server = [System.IO.Pipes.NamedPipeServerStream]::new($pipeName, [System.IO.Pipes.PipeDirection]::InOut, 1,
-      [System.IO.Pipes.PipeTransmissionMode]::Byte, [System.IO.Pipes.PipeOptions]::Asynchronous, 0, 0, $pipeSecurity)
-  $writer = $null
-  try {
-      $wait = $server.WaitForConnectionAsync()
-      if (-not $wait.Wait(1000)) { continue }
-      $reader = [System.IO.StreamReader]::new($server)
-      $writer = [System.IO.StreamWriter]::new($server); $writer.AutoFlush = $true
-      $request = $reader.ReadLine() | ConvertFrom-Json
-      if ($request.token -cne $Token -or $request.action -ne 'add') { throw '请求未授权' }
-      $ttl = [Math]::Min([Math]::Max([int]$request.ttlSeconds, 15), 180)
-      $route = Get-PhysicalDefaultRoute
-      $rawAddresses = @($request.addresses)
-      $addresses = @($rawAddresses | Where-Object { Test-PublicIpv4 $_ } | Select-Object -Unique)
-      if ($addresses.Count -ne $rawAddresses.Count -or $addresses.Count -gt 8) { throw '路由目标无效' }
-      foreach ($address in $addresses) {
-        $created = $leases[$address].created -eq $true
-        if (-not $leases.ContainsKey($address) -and -not (Get-NetRoute -DestinationPrefix "$address/32" -InterfaceIndex $route.InterfaceIndex -NextHop $route.NextHop -ErrorAction SilentlyContinue)) {
-          New-NetRoute -DestinationPrefix "$address/32" -InterfaceIndex $route.InterfaceIndex -NextHop $route.NextHop -RouteMetric 5 -PolicyStore ActiveStore | Out-Null
-          $created = $true
-        }
-        $leases[$address] = @{ expires = (Get-Date).AddSeconds($ttl); ifIndex = $route.InterfaceIndex; nextHop = $route.NextHop; created = $created }
-      }
-      $writer.WriteLine((@{ ok = $true; count = $addresses.Count } | ConvertTo-Json -Compress))
-    }
-    catch {
-      if ($writer) { $writer.WriteLine((@{ ok = $false; error = $_.Exception.Message } | ConvertTo-Json -Compress)) }
-    }
-    finally { $server.Dispose() }
-  }
-}
-finally { Clear-AllRoutes }
+param(
+  [Parameter(Mandatory = $true)][string]$Token,
+  [int]$IdleSeconds = 1800
+)
+
+$ErrorActionPreference = 'Stop'
+$pipeName = 'CodeRelaxRtcRouteHelper'
+$leases = @{}
+$pipeSecurity = [System.IO.Pipes.PipeSecurity]::new()
+$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
+$pipeSecurity.AddAccessRule([System.IO.Pipes.PipeAccessRule]::new($currentUser, [System.IO.Pipes.PipeAccessRights]::ReadWrite,
+  [System.Security.AccessControl.AccessControlType]::Allow))
+$pipeSecurity.AddAccessRule([System.IO.Pipes.PipeAccessRule]::new([System.Security.Principal.SecurityIdentifier]::new('S-1-5-18'),
+  [System.IO.Pipes.PipeAccessRights]::FullControl, [System.Security.AccessControl.AccessControlType]::Allow))
+$pipeSecurity.AddAccessRule([System.IO.Pipes.PipeAccessRule]::new([System.Security.Principal.SecurityIdentifier]::new('S-1-5-32-544'),
+  [System.IO.Pipes.PipeAccessRights]::FullControl, [System.Security.AccessControl.AccessControlType]::Allow))
+
+function Test-PublicIpv4([string]$Address) {
+  $parts = $Address.Split('.')
+  if ($parts.Count -ne 4) { return $false }
+  try { $bytes = $parts | ForEach-Object { [byte]$_ } } catch { return $false }
+  $a = $bytes[0]; $b = $bytes[1]
+  return $a -ne 0 -and $a -ne 10 -and $a -ne 127 -and $a -lt 224 -and -not ($a -eq 169 -and $b -eq 254) -and
+    -not ($a -eq 172 -and $b -ge 16 -and $b -le 31) -and -not ($a -eq 192 -and $b -eq 168) -and
+    -not ($a -eq 100 -and $b -ge 64 -and $b -le 127) -and -not ($a -eq 198 -and ($b -eq 18 -or $b -eq 19))
+}
+
+function Get-PhysicalDefaultRoute {
+  $routes = Get-NetRoute -DestinationPrefix '0.0.0.0/0' -AddressFamily IPv4 | Where-Object {
+    $adapter = Get-NetAdapter -InterfaceIndex $_.InterfaceIndex -ErrorAction SilentlyContinue
+    $_.NextHop -and $_.NextHop -ne '0.0.0.0' -and $adapter.Status -eq 'Up' -and $adapter.HardwareInterface -eq $true -and $adapter.Virtual -ne $true
+  } | Sort-Object @{ Expression = { $_.RouteMetric + $_.InterfaceMetric } }
+  foreach ($route in $routes) {
+    $adapter = Get-NetAdapter -InterfaceIndex $route.InterfaceIndex -ErrorAction SilentlyContinue
+    if ($adapter.Name -notmatch 'Mihomo|Meta|Tunnel|VPN|TAP|Wintun') { return $route }
+  }
+  throw '找不到活动物理 IPv4 默认路由'
+}
+
+function Clear-ExpiredRoutes {
+  $now = Get-Date
+  foreach ($address in @($leases.Keys)) {
+    if ($leases[$address].expires -gt $now) { continue }
+    $lease = $leases[$address]
+    if ($lease.created) {
+      Get-NetRoute -DestinationPrefix "$address/32" -InterfaceIndex $lease.ifIndex -NextHop $lease.nextHop -ErrorAction SilentlyContinue |
+        Remove-NetRoute -Confirm:$false -ErrorAction SilentlyContinue
+    }
+    $leases.Remove($address)
+  }
+}
+
+function Clear-AllRoutes {
+  foreach ($address in @($leases.Keys)) {
+    $lease = $leases[$address]
+    if ($lease.created) {
+      Get-NetRoute -DestinationPrefix "$address/32" -InterfaceIndex $lease.ifIndex -NextHop $lease.nextHop -ErrorAction SilentlyContinue |
+        Remove-NetRoute -Confirm:$false -ErrorAction SilentlyContinue
+    }
+    $leases.Remove($address)
+  }
+}
+
+try {
+  $deadline = (Get-Date).AddSeconds($IdleSeconds)
+  while ((Get-Date) -lt $deadline) {
+    Clear-ExpiredRoutes
+    $server = [System.IO.Pipes.NamedPipeServerStream]::new($pipeName, [System.IO.Pipes.PipeDirection]::InOut, 1,
+      [System.IO.Pipes.PipeTransmissionMode]::Byte, [System.IO.Pipes.PipeOptions]::Asynchronous, 0, 0, $pipeSecurity)
+  $writer = $null
+  try {
+      $wait = $server.WaitForConnectionAsync()
+      if (-not $wait.Wait(1000)) { continue }
+      $reader = [System.IO.StreamReader]::new($server)
+      $writer = [System.IO.StreamWriter]::new($server); $writer.AutoFlush = $true
+      $request = $reader.ReadLine() | ConvertFrom-Json
+      if ($request.token -cne $Token -or $request.action -ne 'add') { throw '请求未授权' }
+      $ttl = [Math]::Min([Math]::Max([int]$request.ttlSeconds, 15), 180)
+      $route = Get-PhysicalDefaultRoute
+      $rawAddresses = @($request.addresses)
+      $addresses = @($rawAddresses | Where-Object { Test-PublicIpv4 $_ } | Select-Object -Unique)
+      if ($addresses.Count -ne $rawAddresses.Count -or $addresses.Count -gt 8) { throw '路由目标无效' }
+      foreach ($address in $addresses) {
+        $created = $leases[$address].created -eq $true
+        if (-not $leases.ContainsKey($address) -and -not (Get-NetRoute -DestinationPrefix "$address/32" -InterfaceIndex $route.InterfaceIndex -NextHop $route.NextHop -ErrorAction SilentlyContinue)) {
+          New-NetRoute -DestinationPrefix "$address/32" -InterfaceIndex $route.InterfaceIndex -NextHop $route.NextHop -RouteMetric 5 -PolicyStore ActiveStore | Out-Null
+          $created = $true
+        }
+        $leases[$address] = @{ expires = (Get-Date).AddSeconds($ttl); ifIndex = $route.InterfaceIndex; nextHop = $route.NextHop; created = $created }
+      }
+      $writer.WriteLine((@{ ok = $true; count = $addresses.Count } | ConvertTo-Json -Compress))
+    }
+    catch {
+      if ($writer) { $writer.WriteLine((@{ ok = $false; error = $_.Exception.Message } | ConvertTo-Json -Compress)) }
+    }
+    finally { $server.Dispose() }
+  }
+}
+finally { Clear-AllRoutes }

package/dist/tools/start-rtc-route-helper.ps1

@@ -1,15 +1,15 @@
-$ErrorActionPreference = 'Stop'
-$roots = @(
-  (Join-Path $env:LOCALAPPDATA 'CodexRemote'),
-  (Join-Path $env:LOCALAPPDATA 'Packages\OpenAI.Codex_2p2nqsd0c76g0\LocalCache\Local\CodexRemote')
-)
-$config = $null
-foreach ($root in $roots) {
-  $path = Join-Path $root 'self-relay-config.json'
-  if (-not (Test-Path -LiteralPath $path)) { continue }
-  $value = Get-Content -LiteralPath $path -Raw -Encoding UTF8 | ConvertFrom-Json
-  if ($value.p2pWindowsRouteHelper -eq $true -and $value.p2pWindowsRouteHelperToken) { $config = $value; break }
-}
-if (-not $config) { throw '未找到已启用的 RTC 路由辅助配置' }
-$helper = Join-Path $PSScriptRoot 'rtc-route-helper.ps1'
-& $helper -Token $config.p2pWindowsRouteHelperToken -IdleSeconds 1800
+$ErrorActionPreference = 'Stop'
+$roots = @(
+  (Join-Path $env:LOCALAPPDATA 'CodexRemote'),
+  (Join-Path $env:LOCALAPPDATA 'Packages\OpenAI.Codex_2p2nqsd0c76g0\LocalCache\Local\CodexRemote')
+)
+$config = $null
+foreach ($root in $roots) {
+  $path = Join-Path $root 'self-relay-config.json'
+  if (-not (Test-Path -LiteralPath $path)) { continue }
+  $value = Get-Content -LiteralPath $path -Raw -Encoding UTF8 | ConvertFrom-Json
+  if ($value.p2pWindowsRouteHelper -eq $true -and $value.p2pWindowsRouteHelperToken) { $config = $value; break }
+}
+if (-not $config) { throw '未找到已启用的 RTC 路由辅助配置' }
+$helper = Join-Path $PSScriptRoot 'rtc-route-helper.ps1'
+& $helper -Token $config.p2pWindowsRouteHelperToken -IdleSeconds 1800