@walkhi/code-relax 0.1.0-beta.68 → 0.1.0-beta.69

package/dist/src/self-relay/windows-route-helper.mjs

@@ -1,75 +1,75 @@
-import net from 'node:net';
-
-const pipePath = String.raw`\\.\pipe\CodeRelaxRtcRouteHelper`;
-
-export function createWindowsRouteHelper({ enabled = false, token = '', iceServers = [], report = () => {} } = {}) {
-  const addresses = new Set();
-  const routeAddresses = new Set(iceServers.map(stunAddress).filter(publicIpv4));
-  let chain = Promise.resolve();
-  const enqueue = task => chain = chain.then(task, task);
-  if (!enabled || process.platform !== 'win32') return { prepare() { return Promise.resolve(); }, include() { return Promise.resolve(); } };
-  if (!/^[A-Za-z0-9_-]{32,128}$/.test(token)) throw new Error('Windows RTC 路由辅助凭据无效');
-  const add = values => enqueue(async () => {
-    for (const value of values) addresses.add(value);
-    if (!values.length) return;
-    const result = await request({ token, action: 'add', addresses: [...addresses], ttlSeconds: 120 });
-    if (!result.ok) throw new Error(result.error || 'Windows RTC 路由辅助不可用');
-    report('windows-route-helper', { count: addresses.size });
-  });
-  return {
-    prepare() { return add([...routeAddresses]); },
-    include(message) {
-      const discovered = candidateAddresses(message);
-      return add(discovered.filter(value => !addresses.has(value)));
-    }
-  };
-}
-
-function stunAddress(value) {
-  const match = /^stun:([^:]+):\d{1,5}$/i.exec(value || '');
-  return match?.[1] || '';
-}
-
-function candidateAddresses(message) {
-  const text = message?.kind === 'candidate' ? message.candidate : ['offer', 'answer'].includes(message?.kind) ? message.sdp : '';
-  const result = new Set();
-  for (const line of String(text || '').split(/\r?\n/)) {
-    const parts = line.trim().replace(/^a=/, '').split(/\s+/);
-    if (parts[0]?.startsWith('candidate:') && parts[6] === 'typ' && publicIpv4(parts[4])) result.add(parts[4]);
-  }
-  return [...result];
-}
-
-function publicIpv4(value) {
-  const parts = String(value).split('.').map(Number);
-  if (parts.length !== 4 || parts.some(part => !Number.isInteger(part) || part < 0 || part > 255)) return false;
-  const [a, b] = parts;
-  return a !== 0 && a !== 10 && a !== 127 && a < 224 && !(a === 169 && b === 254) && !(a === 172 && b >= 16 && b <= 31) &&
-    !(a === 192 && b === 168) && !(a === 100 && b >= 64 && b <= 127) && !(a === 198 && (b === 18 || b === 19));
-}
-
-function request(value) {
-  return new Promise((resolve, reject) => {
-    const socket = net.createConnection(pipePath);
-    let text = '';
-    let settled = false;
-    const rejectOnce = error => { if (!settled) { settled = true; reject(error); } };
-    const resolveOnce = result => { if (!settled) { settled = true; resolve(result); } };
-    socket.setTimeout(3000);
-    socket.setEncoding('utf8');
-    socket.once('connect', () => socket.write(`${JSON.stringify(value)}\n`));
-    socket.on('data', chunk => {
-      text += chunk;
-      const line = text.indexOf('\n');
-      if (line < 0) return;
-      try { resolveOnce(JSON.parse(text.slice(0, line))); socket.end(); }
-      catch { rejectOnce(new Error('Windows RTC 路由辅助响应无效')); socket.destroy(); }
-    });
-    socket.once('timeout', () => socket.destroy(new Error('Windows RTC 路由辅助超时')));
-    socket.once('error', rejectOnce);
-    socket.once('close', hadError => {
-      if (hadError || settled) return;
-      rejectOnce(new Error('Windows RTC 路由辅助响应无效'));
-    });
-  });
-}
+import net from 'node:net';
+
+const pipePath = String.raw`\\.\pipe\CodeRelaxRtcRouteHelper`;
+
+export function createWindowsRouteHelper({ enabled = false, token = '', iceServers = [], report = () => {} } = {}) {
+  const addresses = new Set();
+  const routeAddresses = new Set(iceServers.map(stunAddress).filter(publicIpv4));
+  let chain = Promise.resolve();
+  const enqueue = task => chain = chain.then(task, task);
+  if (!enabled || process.platform !== 'win32') return { prepare() { return Promise.resolve(); }, include() { return Promise.resolve(); } };
+  if (!/^[A-Za-z0-9_-]{32,128}$/.test(token)) throw new Error('Windows RTC 路由辅助凭据无效');
+  const add = values => enqueue(async () => {
+    for (const value of values) addresses.add(value);
+    if (!values.length) return;
+    const result = await request({ token, action: 'add', addresses: [...addresses], ttlSeconds: 120 });
+    if (!result.ok) throw new Error(result.error || 'Windows RTC 路由辅助不可用');
+    report('windows-route-helper', { count: addresses.size });
+  });
+  return {
+    prepare() { return add([...routeAddresses]); },
+    include(message) {
+      const discovered = candidateAddresses(message);
+      return add(discovered.filter(value => !addresses.has(value)));
+    }
+  };
+}
+
+function stunAddress(value) {
+  const match = /^stun:([^:]+):\d{1,5}$/i.exec(value || '');
+  return match?.[1] || '';
+}
+
+function candidateAddresses(message) {
+  const text = message?.kind === 'candidate' ? message.candidate : ['offer', 'answer'].includes(message?.kind) ? message.sdp : '';
+  const result = new Set();
+  for (const line of String(text || '').split(/\r?\n/)) {
+    const parts = line.trim().replace(/^a=/, '').split(/\s+/);
+    if (parts[0]?.startsWith('candidate:') && parts[6] === 'typ' && publicIpv4(parts[4])) result.add(parts[4]);
+  }
+  return [...result];
+}
+
+function publicIpv4(value) {
+  const parts = String(value).split('.').map(Number);
+  if (parts.length !== 4 || parts.some(part => !Number.isInteger(part) || part < 0 || part > 255)) return false;
+  const [a, b] = parts;
+  return a !== 0 && a !== 10 && a !== 127 && a < 224 && !(a === 169 && b === 254) && !(a === 172 && b >= 16 && b <= 31) &&
+    !(a === 192 && b === 168) && !(a === 100 && b >= 64 && b <= 127) && !(a === 198 && (b === 18 || b === 19));
+}
+
+function request(value) {
+  return new Promise((resolve, reject) => {
+    const socket = net.createConnection(pipePath);
+    let text = '';
+    let settled = false;
+    const rejectOnce = error => { if (!settled) { settled = true; reject(error); } };
+    const resolveOnce = result => { if (!settled) { settled = true; resolve(result); } };
+    socket.setTimeout(3000);
+    socket.setEncoding('utf8');
+    socket.once('connect', () => socket.write(`${JSON.stringify(value)}\n`));
+    socket.on('data', chunk => {
+      text += chunk;
+      const line = text.indexOf('\n');
+      if (line < 0) return;
+      try { resolveOnce(JSON.parse(text.slice(0, line))); socket.end(); }
+      catch { rejectOnce(new Error('Windows RTC 路由辅助响应无效')); socket.destroy(); }
+    });
+    socket.once('timeout', () => socket.destroy(new Error('Windows RTC 路由辅助超时')));
+    socket.once('error', rejectOnce);
+    socket.once('close', hadError => {
+      if (hadError || settled) return;
+      rejectOnce(new Error('Windows RTC 路由辅助响应无效'));
+    });
+  });
+}

package/dist/src/self-relay/wire.mjs

@@ -1,36 +1,36 @@
-import { randomBytes, createHash, timingSafeEqual } from 'node:crypto';
-import { WebSocket } from 'ws';
-
-export const secret = () => randomBytes(32).toString('base64url');
-export const digest = value => createHash('sha256').update(value).digest('hex');
-export const validSecret = value => typeof value === 'string' && /^[\w-]{43}$/.test(value);
-export function matches(value, hash) {
-  return validSecret(value) && typeof hash === 'string' && timingSafeEqual(Buffer.from(digest(value)), Buffer.from(hash));
-}
-export function send(socket, message) {
-  if (socket.readyState !== WebSocket.OPEN) return false;
-  if (socket.bufferedAmount > 64 * 1024 * 1024) { socket.close(1013, 'Receiver too slow'); return false; }
-  socket.send(JSON.stringify(message)); return true;
-}
-export function decode(bytes, binary) {
-  if (binary) throw new Error('Text frames required');
-  const value = JSON.parse(bytes.toString());
-  if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error('Object required');
-  return value;
-}
-export function loopbackUrl(value, pathname) {
-  const url = new URL(value);
-  if (url.protocol !== 'ws:' || url.hostname !== '127.0.0.1' || url.pathname !== pathname || url.search || url.hash || url.username || url.password) {
-    throw new Error('本地原型仅接受指定路径的 ws://127.0.0.1 地址');
-  }
-  return url.href;
-}
-
-export function relayAddress(value) {
-  const url = new URL(value);
-  if (url.protocol === 'ws:') return loopbackUrl(value, '/relay');
-  if (url.protocol !== 'wss:' || url.pathname !== '/relay' || url.search || url.hash || url.username || url.password) {
-    throw new Error('远程中继必须使用无查询凭据的 wss://主机/relay 地址');
-  }
-  return url.href;
-}
+import { randomBytes, createHash, timingSafeEqual } from 'node:crypto';
+import { WebSocket } from 'ws';
+
+export const secret = () => randomBytes(32).toString('base64url');
+export const digest = value => createHash('sha256').update(value).digest('hex');
+export const validSecret = value => typeof value === 'string' && /^[\w-]{43}$/.test(value);
+export function matches(value, hash) {
+  return validSecret(value) && typeof hash === 'string' && timingSafeEqual(Buffer.from(digest(value)), Buffer.from(hash));
+}
+export function send(socket, message) {
+  if (socket.readyState !== WebSocket.OPEN) return false;
+  if (socket.bufferedAmount > 64 * 1024 * 1024) { socket.close(1013, 'Receiver too slow'); return false; }
+  socket.send(JSON.stringify(message)); return true;
+}
+export function decode(bytes, binary) {
+  if (binary) throw new Error('Text frames required');
+  const value = JSON.parse(bytes.toString());
+  if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error('Object required');
+  return value;
+}
+export function loopbackUrl(value, pathname) {
+  const url = new URL(value);
+  if (url.protocol !== 'ws:' || url.hostname !== '127.0.0.1' || url.pathname !== pathname || url.search || url.hash || url.username || url.password) {
+    throw new Error('本地原型仅接受指定路径的 ws://127.0.0.1 地址');
+  }
+  return url.href;
+}
+
+export function relayAddress(value) {
+  const url = new URL(value);
+  if (url.protocol === 'ws:') return loopbackUrl(value, '/relay');
+  if (url.protocol !== 'wss:' || url.pathname !== '/relay' || url.search || url.hash || url.username || url.password) {
+    throw new Error('远程中继必须使用无查询凭据的 wss://主机/relay 地址');
+  }
+  return url.href;
+}

package/dist/src/server.mjs

@@ -143,6 +143,25 @@ const executionHealth = new ExecutionHealth(async () => {
     : ready ? 'full' : 'unavailable';
   return { state, ready, canWrite: ready, mode: executionMode };
 });
+function workstationHealth() {
+  const executionReady = executionHealth.state.ready && sharedServer?.ready === true;
+  return {
+    status: 'ok', resident: true, version: runtimeVersion, serviceInstanceId,
+    keepAwake: powerManager.snapshot(),
+    serviceUpdate: serviceUpdateStatus(stateRoot),
+    execution: { ...executionHealth.state, ready: executionReady, canWrite: executionReady,
+      mode: executionMode },
+    managedAppServer: managedAppServer.snapshot(),
+    ...runtimeDiscovery.state,
+    sharedAppServerConnected: sharedServer?.ready === true,
+    sharedRecoveryAvailable: runtimeDiscovery.state.desktop?.installed === true,
+    mode: options.lan ? 'lan' : 'loopback',
+    tokenRequired: Boolean(options.token),
+    nativeImageTransport: sharedServer ? 'shared-app-server' : null,
+    transportMode: sharedServer?.ready === true ? 'lan-shared' : 'unavailable',
+  };
+}
+
 async function refreshExecution() {
   await executionHealth.refresh();
   return { mode: executionMode };
@@ -320,24 +339,27 @@ async function handleRequest(request, response) {
     }
 
     if (request.method === 'GET' && url.pathname === '/api/health') {
-      // Status readers consume the workstation's cached sample. A phone query
-      // must not trigger PowerShell, process-identity, or app-server checks.
-      const executionReady = executionHealth.state.ready && sharedServer?.ready === true;
-      sendJson(response, 200, {
-        status: 'ok', resident: true, version: runtimeVersion, serviceInstanceId,
-        keepAwake: powerManager.snapshot(),
-        serviceUpdate: serviceUpdateStatus(stateRoot),
-        execution: { ...executionHealth.state, ready: executionReady, canWrite: executionReady,
-          mode: executionMode },
-        managedAppServer: managedAppServer.snapshot(),
-        ...runtimeDiscovery.state,
-        sharedAppServerConnected: sharedServer?.ready === true,
-        sharedRecoveryAvailable: runtimeDiscovery.state.desktop?.installed === true,
-        mode: options.lan ? 'lan' : 'loopback',
-        tokenRequired: Boolean(options.token),
-        nativeImageTransport: sharedServer ? 'shared-app-server' : null,
-        transportMode: sharedServer?.ready === true ? 'lan-shared' : 'unavailable',
-      });
+      sendJson(response, 200, workstationHealth()); return;
+    }
+    if (request.method === 'GET' && url.pathname === '/api/health/events') {
+      response.startEvents();
+      let previous = '', stopped = false, timer;
+      const publish = () => {
+        if (stopped) return;
+        try {
+          const health = workstationHealth();
+          // Sampling timestamps alone do not change a workstation's visible state.
+          const signature = JSON.stringify(health, (key, value) => key === 'checkedAt' ? undefined : value);
+          if (signature !== previous) { previous = signature; response.event('health', health); }
+        } catch (error) { previous = ''; response.event('health-error', { error: error.message }); }
+      };
+      const close = () => { stopped = true; clearInterval(timer); managedAppServer.off('state', publish); };
+      response.once('close', close);
+      managedAppServer.on('state', publish);
+      publish();
+      // Reads only existing local samples and operation records, never chat history
+      // or an extra Desktop/process probe. Idle snapshots are not sent over the network.
+      timer = setInterval(publish, 1000); timer.unref?.();
       return;
     }
 

package/dist/src/service-control.mjs

@@ -1,82 +1,82 @@
-import http from 'node:http';
-import { timingSafeEqual } from 'node:crypto';
-
-function matches(left, right) {
-  const a = Buffer.from(left || '');
-  const b = Buffer.from(right || '');
-  return a.length === b.length && timingSafeEqual(a, b);
-}
-
-// Separate from the LAN listener: mobile credentials never authorize lifecycle operations.
-export async function openControl({ instanceId, secret, shutdown, status = () => ({}), actions = {} }) {
-  const server = http.createServer((request, response) => {
-    if (!matches(request.headers.authorization, `Bearer ${secret}`)) {
-      response.writeHead(403).end();
-      return;
-    }
-    const action = Object.keys(actions).find(name => request.url === `/${instanceId}/${name}`);
-    if ((!action && request.url !== `/${instanceId}`) || !['GET', 'POST'].includes(request.method) || (action && request.method !== 'POST')) {
-      response.writeHead(404).end();
-      return;
-    }
-    response.setHeader('Content-Type', 'application/json');
-    response.setHeader('Connection', 'close');
-    if (action) {
-      Promise.resolve().then(async () => {
-        let body = '';
-        request.setEncoding('utf8');
-        for await (const chunk of request) {
-          body += chunk;
-          if (Buffer.byteLength(body) > 4096) throw new Error('管理请求过大');
-        }
-        const details = body ? JSON.parse(body) : {};
-        if (!details || typeof details !== 'object' || Array.isArray(details)) throw new Error('无效管理请求');
-        return actions[action](details);
-      }).then(result => {
-        response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
-      }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
-      return;
-    }
-    if (request.method === 'POST') response.once('finish', () => {
-      Promise.resolve(shutdown()).catch(error => {
-        console.error('桌面服务关闭失败：', error.message);
-        process.exitCode = 1;
-      });
-    });
-    response.end(JSON.stringify({ ...status(), instanceId, pid: process.pid }));
-  });
-  await new Promise((resolve, reject) => {
-    server.once('error', reject);
-    server.listen(0, '127.0.0.1', resolve);
-  });
-  return { port: server.address().port, close: () => new Promise((resolve, reject) => {
-    server.close(error => error ? reject(error) : resolve());
-  }) };
-}
-
-export function controlRequest(session, method = 'GET', action = '', details) {
-  return new Promise((resolve, reject) => {
-    const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
-      path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
-      headers: { Authorization: `Bearer ${session.controlSecret}` }, timeout: action ? 25000 : 2000 }, response => {
-      let body = '';
-      response.setEncoding('utf8');
-      response.on('data', chunk => { body += chunk; });
-      response.on('error', reject);
-      response.on('end', () => {
-        try {
-          if (response.statusCode === 409) throw new Error(JSON.parse(body).error);
-          if (response.statusCode !== 200) throw new Error('桌面服务管理通道身份验证失败。');
-          const identity = JSON.parse(body);
-          if (identity.instanceId !== session.instanceId || identity.pid !== session.pid) {
-            throw new Error('桌面服务实例身份不匹配。');
-          }
-          resolve(identity);
-        } catch (error) { reject(error); }
-      });
-    });
-    request.on('timeout', () => request.destroy(new Error('桌面服务管理通道响应超时。')));
-    request.on('error', reject);
-    request.end(details === undefined ? undefined : JSON.stringify(details));
-  });
-}
+import http from 'node:http';
+import { timingSafeEqual } from 'node:crypto';
+
+function matches(left, right) {
+  const a = Buffer.from(left || '');
+  const b = Buffer.from(right || '');
+  return a.length === b.length && timingSafeEqual(a, b);
+}
+
+// Separate from the LAN listener: mobile credentials never authorize lifecycle operations.
+export async function openControl({ instanceId, secret, shutdown, status = () => ({}), actions = {} }) {
+  const server = http.createServer((request, response) => {
+    if (!matches(request.headers.authorization, `Bearer ${secret}`)) {
+      response.writeHead(403).end();
+      return;
+    }
+    const action = Object.keys(actions).find(name => request.url === `/${instanceId}/${name}`);
+    if ((!action && request.url !== `/${instanceId}`) || !['GET', 'POST'].includes(request.method) || (action && request.method !== 'POST')) {
+      response.writeHead(404).end();
+      return;
+    }
+    response.setHeader('Content-Type', 'application/json');
+    response.setHeader('Connection', 'close');
+    if (action) {
+      Promise.resolve().then(async () => {
+        let body = '';
+        request.setEncoding('utf8');
+        for await (const chunk of request) {
+          body += chunk;
+          if (Buffer.byteLength(body) > 4096) throw new Error('管理请求过大');
+        }
+        const details = body ? JSON.parse(body) : {};
+        if (!details || typeof details !== 'object' || Array.isArray(details)) throw new Error('无效管理请求');
+        return actions[action](details);
+      }).then(result => {
+        response.end(JSON.stringify({ ...result, instanceId, pid: process.pid }));
+      }).catch(error => { response.writeHead(409).end(JSON.stringify({ error: error.message })); });
+      return;
+    }
+    if (request.method === 'POST') response.once('finish', () => {
+      Promise.resolve(shutdown()).catch(error => {
+        console.error('桌面服务关闭失败：', error.message);
+        process.exitCode = 1;
+      });
+    });
+    response.end(JSON.stringify({ ...status(), instanceId, pid: process.pid }));
+  });
+  await new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', resolve);
+  });
+  return { port: server.address().port, close: () => new Promise((resolve, reject) => {
+    server.close(error => error ? reject(error) : resolve());
+  }) };
+}
+
+export function controlRequest(session, method = 'GET', action = '', details) {
+  return new Promise((resolve, reject) => {
+    const request = http.request({ hostname: '127.0.0.1', port: session.controlPort,
+      path: `/${session.instanceId}${action ? '/' + action : ''}`, method, agent: false,
+      headers: { Authorization: `Bearer ${session.controlSecret}` }, timeout: action ? 25000 : 2000 }, response => {
+      let body = '';
+      response.setEncoding('utf8');
+      response.on('data', chunk => { body += chunk; });
+      response.on('error', reject);
+      response.on('end', () => {
+        try {
+          if (response.statusCode === 409) throw new Error(JSON.parse(body).error);
+          if (response.statusCode !== 200) throw new Error('桌面服务管理通道身份验证失败。');
+          const identity = JSON.parse(body);
+          if (identity.instanceId !== session.instanceId || identity.pid !== session.pid) {
+            throw new Error('桌面服务实例身份不匹配。');
+          }
+          resolve(identity);
+        } catch (error) { reject(error); }
+      });
+    });
+    request.on('timeout', () => request.destroy(new Error('桌面服务管理通道响应超时。')));
+    request.on('error', reject);
+    request.end(details === undefined ? undefined : JSON.stringify(details));
+  });
+}

package/dist/src/service-health.mjs

@@ -1,33 +1,33 @@
-import WebSocket from 'ws';
-
-// Use the same authenticated LAN protocol as mobile clients; never replay requests.
-export function serviceHealth(session) {
-  if (!session) return Promise.resolve(null);
-  return new Promise((resolve, reject) => {
-    const token = new URL(session.accessUrl).searchParams.get('token');
-    const socket = new WebSocket(`ws://127.0.0.1:${session.port}/api/socket`);
-    let done = false;
-    const finish = (error, value = null) => {
-      if (done) return;
-      done = true;
-      clearTimeout(timer);
-      socket.terminate();
-      if (error) reject(error); else resolve(value);
-    };
-    const timer = setTimeout(() => finish(new Error('桌面服务健康检查超时。')), 6000);
-    socket.on('open', () => socket.send(JSON.stringify({ type: 'auth', token })));
-    socket.on('message', data => {
-      try {
-        const message = JSON.parse(data.toString());
-        if (message.type === 'ready') {
-          socket.send(JSON.stringify({ type: 'request', id: 1, method: 'GET', path: '/api/health' }));
-        } else if (message.type === 'response' && message.id === 1) {
-          finish(null, message.status === 200 ? message.body : null);
-        }
-      } catch (error) { finish(error); }
-    });
-    socket.on('error', error => finish(error.code === 'ECONNREFUSED' ? null : error));
-    socket.on('close', code => finish(new Error(code === 1008
-      ? '桌面服务健康检查鉴权失败。' : '桌面服务健康检查连接已断开。')));
-  });
-}
+import WebSocket from 'ws';
+
+// Use the same authenticated LAN protocol as mobile clients; never replay requests.
+export function serviceHealth(session) {
+  if (!session) return Promise.resolve(null);
+  return new Promise((resolve, reject) => {
+    const token = new URL(session.accessUrl).searchParams.get('token');
+    const socket = new WebSocket(`ws://127.0.0.1:${session.port}/api/socket`);
+    let done = false;
+    const finish = (error, value = null) => {
+      if (done) return;
+      done = true;
+      clearTimeout(timer);
+      socket.terminate();
+      if (error) reject(error); else resolve(value);
+    };
+    const timer = setTimeout(() => finish(new Error('桌面服务健康检查超时。')), 6000);
+    socket.on('open', () => socket.send(JSON.stringify({ type: 'auth', token })));
+    socket.on('message', data => {
+      try {
+        const message = JSON.parse(data.toString());
+        if (message.type === 'ready') {
+          socket.send(JSON.stringify({ type: 'request', id: 1, method: 'GET', path: '/api/health' }));
+        } else if (message.type === 'response' && message.id === 1) {
+          finish(null, message.status === 200 ? message.body : null);
+        }
+      } catch (error) { finish(error); }
+    });
+    socket.on('error', error => finish(error.code === 'ECONNREFUSED' ? null : error));
+    socket.on('close', code => finish(new Error(code === 1008
+      ? '桌面服务健康检查鉴权失败。' : '桌面服务健康检查连接已断开。')));
+  });
+}