@walkhi/code-relax 0.1.0-beta.68 → 0.1.0-beta.69

package/dist/src/platform/windows/IsolatedProcess.cs

@@ -1,79 +1,79 @@
-using System;
-using System.ComponentModel;
-using System.Runtime.InteropServices;
-using System.Text;
-
-// Only the three explicitly opened standard handles cross the process boundary.
-// In particular, inherited app-server sockets must not reach background workers.
-public static class IsolatedProcess {
-    [StructLayout(LayoutKind.Sequential)] struct Security { public int length; public IntPtr descriptor; public int inherit; }
-    [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct Startup {
-        public int cb; public string reserved, desktop, title;
-        public int x,y,xSize,ySize,xCount,yCount,fill,flags; public short show,reservedSize;
-        public IntPtr reservedBytes,input,output,error;
-    }
-    [StructLayout(LayoutKind.Sequential)] struct StartupEx { public Startup startup; public IntPtr attributes; }
-    [StructLayout(LayoutKind.Sequential)] struct ProcessInfo { public IntPtr process,thread; public int pid,tid; }
-    [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr CreateFileW(string name,uint access,uint share,ref Security security,uint disposition,uint flags,IntPtr template);
-    [DllImport("kernel32.dll", SetLastError=true)] static extern bool InitializeProcThreadAttributeList(IntPtr list,int count,int flags,ref IntPtr size);
-    [DllImport("kernel32.dll", SetLastError=true)] static extern bool UpdateProcThreadAttribute(IntPtr list,uint flags,IntPtr attribute,IntPtr value,IntPtr size,IntPtr previous,IntPtr returned);
-    [DllImport("kernel32.dll")] static extern void DeleteProcThreadAttributeList(IntPtr list);
-    [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool CreateProcessW(string application,StringBuilder command,IntPtr processSecurity,IntPtr threadSecurity,bool inherit,uint flags,IntPtr environment,string cwd,ref StartupEx startup,out ProcessInfo info);
-    [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
-    [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern uint GetFinalPathNameByHandleW(IntPtr handle,StringBuilder path,uint length,uint flags);
-    public static string ResolvePath(string path) {
-        var security=new Security {length=Marshal.SizeOf(typeof(Security))};
-        var handle=CreateFileW(path,0,7,ref security,3,0x02000000,IntPtr.Zero);
-        if(handle==new IntPtr(-1)) throw new Win32Exception(Marshal.GetLastWin32Error());
-        try {
-            var result=new StringBuilder(32768);
-            uint length=GetFinalPathNameByHandleW(handle,result,(uint)result.Capacity,0);
-            if(length==0 || length>=result.Capacity) throw new Win32Exception(Marshal.GetLastWin32Error());
-            var value=result.ToString();
-            return value.StartsWith(@"\\?\UNC\") ? @"\\"+value.Substring(8) : value.StartsWith(@"\\?\") ? value.Substring(4) : value;
-        } finally { CloseHandle(handle); }
-    }
-    static string Quote(string value) {
-        var result=new StringBuilder("\""); int slashes=0;
-        foreach(char c in value) {
-            if(c=='\\') { slashes++; continue; }
-            result.Append('\\', c=='"' ? slashes*2+1 : slashes); slashes=0; result.Append(c);
-        }
-        result.Append('\\',slashes*2); return result.Append('"').ToString();
-    }
-    static IntPtr File(string file,bool input) {
-        var sa=new Security { length=Marshal.SizeOf(typeof(Security)), inherit=1 };
-        // FILE_APPEND_DATA avoids truncating diagnostic history on recovery.
-        var handle=CreateFileW(file,input?0x80000000u:4u,7,ref sa,input?3u:4u,0x80,IntPtr.Zero);
-        if(handle==new IntPtr(-1)) throw new Win32Exception(Marshal.GetLastWin32Error());
-        return handle;
-    }
-    public static int Start(string executable,string[] arguments,string stdout,string stderr,string[] environment) {
-        IntPtr input=IntPtr.Zero,output=IntPtr.Zero,error=IntPtr.Zero,list=IntPtr.Zero,handles=IntPtr.Zero,environmentBlock=IntPtr.Zero;
-        bool initialized=false;
-        try {
-            input=File("NUL",true); output=File(String.IsNullOrEmpty(stdout)?"NUL":stdout,false); error=File(String.IsNullOrEmpty(stderr)?"NUL":stderr,false);
-            IntPtr size=IntPtr.Zero; InitializeProcThreadAttributeList(IntPtr.Zero,1,0,ref size);
-            list=Marshal.AllocHGlobal(size);
-            if(!InitializeProcThreadAttributeList(list,1,0,ref size)) throw new Win32Exception(Marshal.GetLastWin32Error());
-            initialized=true; handles=Marshal.AllocHGlobal(IntPtr.Size*3);
-            Marshal.Copy(new IntPtr[]{input,output,error},0,handles,3);
-            if(!UpdateProcThreadAttribute(list,0,new IntPtr(0x20002),handles,new IntPtr(IntPtr.Size*3),IntPtr.Zero,IntPtr.Zero)) throw new Win32Exception(Marshal.GetLastWin32Error());
-            var startup=new StartupEx(); startup.startup.cb=Marshal.SizeOf(typeof(StartupEx));
-            startup.startup.flags=0x101; startup.startup.show=0;
-            startup.startup.input=input; startup.startup.output=output; startup.startup.error=error; startup.attributes=list;
-            var command=new StringBuilder(Quote(executable)); foreach(var argument in arguments) command.Append(' ').Append(Quote(argument));
-            Array.Sort(environment,StringComparer.OrdinalIgnoreCase);
-            var environmentBytes=Encoding.Unicode.GetBytes(String.Join("\0",environment)+"\0\0");
-            environmentBlock=Marshal.AllocHGlobal(environmentBytes.Length); Marshal.Copy(environmentBytes,0,environmentBlock,environmentBytes.Length);
-            ProcessInfo info;
-            if(!CreateProcessW(executable,command,IntPtr.Zero,IntPtr.Zero,true,0x80410,environmentBlock,null,ref startup,out info)) throw new Win32Exception(Marshal.GetLastWin32Error());
-            CloseHandle(info.thread); CloseHandle(info.process); return info.pid;
-        } finally {
-            if(initialized) DeleteProcThreadAttributeList(list);
-            if(list!=IntPtr.Zero) Marshal.FreeHGlobal(list); if(handles!=IntPtr.Zero) Marshal.FreeHGlobal(handles);
-            if(environmentBlock!=IntPtr.Zero) Marshal.FreeHGlobal(environmentBlock);
-            if(input!=IntPtr.Zero) CloseHandle(input); if(output!=IntPtr.Zero) CloseHandle(output); if(error!=IntPtr.Zero) CloseHandle(error);
-        }
-    }
-}
+using System;
+using System.ComponentModel;
+using System.Runtime.InteropServices;
+using System.Text;
+
+// Only the three explicitly opened standard handles cross the process boundary.
+// In particular, inherited app-server sockets must not reach background workers.
+public static class IsolatedProcess {
+    [StructLayout(LayoutKind.Sequential)] struct Security { public int length; public IntPtr descriptor; public int inherit; }
+    [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct Startup {
+        public int cb; public string reserved, desktop, title;
+        public int x,y,xSize,ySize,xCount,yCount,fill,flags; public short show,reservedSize;
+        public IntPtr reservedBytes,input,output,error;
+    }
+    [StructLayout(LayoutKind.Sequential)] struct StartupEx { public Startup startup; public IntPtr attributes; }
+    [StructLayout(LayoutKind.Sequential)] struct ProcessInfo { public IntPtr process,thread; public int pid,tid; }
+    [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr CreateFileW(string name,uint access,uint share,ref Security security,uint disposition,uint flags,IntPtr template);
+    [DllImport("kernel32.dll", SetLastError=true)] static extern bool InitializeProcThreadAttributeList(IntPtr list,int count,int flags,ref IntPtr size);
+    [DllImport("kernel32.dll", SetLastError=true)] static extern bool UpdateProcThreadAttribute(IntPtr list,uint flags,IntPtr attribute,IntPtr value,IntPtr size,IntPtr previous,IntPtr returned);
+    [DllImport("kernel32.dll")] static extern void DeleteProcThreadAttributeList(IntPtr list);
+    [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern bool CreateProcessW(string application,StringBuilder command,IntPtr processSecurity,IntPtr threadSecurity,bool inherit,uint flags,IntPtr environment,string cwd,ref StartupEx startup,out ProcessInfo info);
+    [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
+    [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern uint GetFinalPathNameByHandleW(IntPtr handle,StringBuilder path,uint length,uint flags);
+    public static string ResolvePath(string path) {
+        var security=new Security {length=Marshal.SizeOf(typeof(Security))};
+        var handle=CreateFileW(path,0,7,ref security,3,0x02000000,IntPtr.Zero);
+        if(handle==new IntPtr(-1)) throw new Win32Exception(Marshal.GetLastWin32Error());
+        try {
+            var result=new StringBuilder(32768);
+            uint length=GetFinalPathNameByHandleW(handle,result,(uint)result.Capacity,0);
+            if(length==0 || length>=result.Capacity) throw new Win32Exception(Marshal.GetLastWin32Error());
+            var value=result.ToString();
+            return value.StartsWith(@"\\?\UNC\") ? @"\\"+value.Substring(8) : value.StartsWith(@"\\?\") ? value.Substring(4) : value;
+        } finally { CloseHandle(handle); }
+    }
+    static string Quote(string value) {
+        var result=new StringBuilder("\""); int slashes=0;
+        foreach(char c in value) {
+            if(c=='\\') { slashes++; continue; }
+            result.Append('\\', c=='"' ? slashes*2+1 : slashes); slashes=0; result.Append(c);
+        }
+        result.Append('\\',slashes*2); return result.Append('"').ToString();
+    }
+    static IntPtr File(string file,bool input) {
+        var sa=new Security { length=Marshal.SizeOf(typeof(Security)), inherit=1 };
+        // FILE_APPEND_DATA avoids truncating diagnostic history on recovery.
+        var handle=CreateFileW(file,input?0x80000000u:4u,7,ref sa,input?3u:4u,0x80,IntPtr.Zero);
+        if(handle==new IntPtr(-1)) throw new Win32Exception(Marshal.GetLastWin32Error());
+        return handle;
+    }
+    public static int Start(string executable,string[] arguments,string stdout,string stderr,string[] environment) {
+        IntPtr input=IntPtr.Zero,output=IntPtr.Zero,error=IntPtr.Zero,list=IntPtr.Zero,handles=IntPtr.Zero,environmentBlock=IntPtr.Zero;
+        bool initialized=false;
+        try {
+            input=File("NUL",true); output=File(String.IsNullOrEmpty(stdout)?"NUL":stdout,false); error=File(String.IsNullOrEmpty(stderr)?"NUL":stderr,false);
+            IntPtr size=IntPtr.Zero; InitializeProcThreadAttributeList(IntPtr.Zero,1,0,ref size);
+            list=Marshal.AllocHGlobal(size);
+            if(!InitializeProcThreadAttributeList(list,1,0,ref size)) throw new Win32Exception(Marshal.GetLastWin32Error());
+            initialized=true; handles=Marshal.AllocHGlobal(IntPtr.Size*3);
+            Marshal.Copy(new IntPtr[]{input,output,error},0,handles,3);
+            if(!UpdateProcThreadAttribute(list,0,new IntPtr(0x20002),handles,new IntPtr(IntPtr.Size*3),IntPtr.Zero,IntPtr.Zero)) throw new Win32Exception(Marshal.GetLastWin32Error());
+            var startup=new StartupEx(); startup.startup.cb=Marshal.SizeOf(typeof(StartupEx));
+            startup.startup.flags=0x101; startup.startup.show=0;
+            startup.startup.input=input; startup.startup.output=output; startup.startup.error=error; startup.attributes=list;
+            var command=new StringBuilder(Quote(executable)); foreach(var argument in arguments) command.Append(' ').Append(Quote(argument));
+            Array.Sort(environment,StringComparer.OrdinalIgnoreCase);
+            var environmentBytes=Encoding.Unicode.GetBytes(String.Join("\0",environment)+"\0\0");
+            environmentBlock=Marshal.AllocHGlobal(environmentBytes.Length); Marshal.Copy(environmentBytes,0,environmentBlock,environmentBytes.Length);
+            ProcessInfo info;
+            if(!CreateProcessW(executable,command,IntPtr.Zero,IntPtr.Zero,true,0x80410,environmentBlock,null,ref startup,out info)) throw new Win32Exception(Marshal.GetLastWin32Error());
+            CloseHandle(info.thread); CloseHandle(info.process); return info.pid;
+        } finally {
+            if(initialized) DeleteProcThreadAttributeList(list);
+            if(list!=IntPtr.Zero) Marshal.FreeHGlobal(list); if(handles!=IntPtr.Zero) Marshal.FreeHGlobal(handles);
+            if(environmentBlock!=IntPtr.Zero) Marshal.FreeHGlobal(environmentBlock);
+            if(input!=IntPtr.Zero) CloseHandle(input); if(output!=IntPtr.Zero) CloseHandle(output); if(error!=IntPtr.Zero) CloseHandle(error);
+        }
+    }
+}

package/dist/src/platform/windows/background-process.mjs

@@ -1,30 +1,30 @@
-import { spawn } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-import path from 'node:path';
-
-export function startWindowsProcess(executable, args, environment, logs = []) {
-  return new Promise((resolve, reject) => {
-    const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
-    const helperEnvironment = {};
-    for (const name of ['SystemRoot', 'windir', 'LOCALAPPDATA', 'USERPROFILE', 'TEMP', 'TMP', 'PSModulePath']) {
-      const key = Object.keys(process.env).find(item => item.toLowerCase() === name.toLowerCase());
-      if (key) helperEnvironment[key] = process.env[key];
-    }
-    const helper = spawn(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
-      fileURLToPath(new URL('./start-hidden-console.ps1', import.meta.url))], {
-      windowsHide: true, env: helperEnvironment, stdio: ['pipe', 'pipe', 'pipe'],
-    });
-    let output = '', error = '';
-    helper.stdout.setEncoding('utf8').on('data', chunk => { output += chunk; });
-    helper.stderr.setEncoding('utf8').on('data', chunk => { error += chunk; });
-    helper.once('error', reject); helper.stdin.on('error', reject);
-    helper.once('exit', code => {
-      helper.stdout.destroy(); helper.stderr.destroy(); helper.stdin.destroy();
-      if (code !== 0) return reject(new Error(error.trim() || `后台启动失败 (${code})`));
-      const pid = Number(output.trim());
-      if (!Number.isSafeInteger(pid) || pid <= 0) return reject(new Error('后台启动未返回有效 PID'));
-      resolve(pid);
-    });
-    helper.stdin.end(JSON.stringify({ brokerExecutable: process.execPath, executable, args, logs, environment }));
-  });
-}
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import path from 'node:path';
+
+export function startWindowsProcess(executable, args, environment, logs = []) {
+  return new Promise((resolve, reject) => {
+    const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+    const helperEnvironment = {};
+    for (const name of ['SystemRoot', 'windir', 'LOCALAPPDATA', 'USERPROFILE', 'TEMP', 'TMP', 'PSModulePath']) {
+      const key = Object.keys(process.env).find(item => item.toLowerCase() === name.toLowerCase());
+      if (key) helperEnvironment[key] = process.env[key];
+    }
+    const helper = spawn(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
+      fileURLToPath(new URL('./start-hidden-console.ps1', import.meta.url))], {
+      windowsHide: true, env: helperEnvironment, stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    let output = '', error = '';
+    helper.stdout.setEncoding('utf8').on('data', chunk => { output += chunk; });
+    helper.stderr.setEncoding('utf8').on('data', chunk => { error += chunk; });
+    helper.once('error', reject); helper.stdin.on('error', reject);
+    helper.once('exit', code => {
+      helper.stdout.destroy(); helper.stderr.destroy(); helper.stdin.destroy();
+      if (code !== 0) return reject(new Error(error.trim() || `后台启动失败 (${code})`));
+      const pid = Number(output.trim());
+      if (!Number.isSafeInteger(pid) || pid <= 0) return reject(new Error('后台启动未返回有效 PID'));
+      resolve(pid);
+    });
+    helper.stdin.end(JSON.stringify({ brokerExecutable: process.execPath, executable, args, logs, environment }));
+  });
+}

package/dist/src/platform/windows/desktop-helper.mjs

@@ -1,179 +1,179 @@
-import net from 'node:net';
-import fs from 'node:fs';
-import path from 'node:path';
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import { createHash } from 'node:crypto';
-import { fileURLToPath } from 'node:url';
-
-const exec = promisify(execFile);
-const binary = fileURLToPath(new URL('../../../native/desktop-helper/CodeRelaxDesktop.exe', import.meta.url));
-const powershell = path.join(process.env.SystemRoot || 'C:/Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
-const quote = value => `'${String(value).replaceAll("'", "''")}'`;
-const encoded = script => Buffer.from(script, 'utf16le').toString('base64');
-const maxFrameBytes = 6 * 1024 * 1024;
-
-export async function desktopHelperStatus() {
-  if (process.platform !== 'win32' || !fs.existsSync(binary)) return { installed: false, running: false, state: 'unavailable' };
-  const { stdout } = await exec(binary, ['--status'], { windowsHide: true, encoding: 'utf8', timeout: 5000 });
-  const result = JSON.parse(stdout.trim());
-  if (result.error) throw new Error(result.error);
-  return result;
-}
-
-async function elevateHelper(argument) {
-  const script = `$ErrorActionPreference = 'Stop'; try { $child = Start-Process -FilePath ${quote(binary)} -ArgumentList ${quote(argument)} -Verb RunAs -PassThru -Wait; exit $child.ExitCode } catch { [Console]::Error.WriteLine($_.Exception.Message); exit 1 }`;
-  try { await exec(powershell, ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded(script)], { windowsHide: true, timeout: 180000 }); }
-  catch (error) { throw new Error(`桌面操作辅助服务配置未完成，需要在工作站确认 UAC：${error.stderr?.trim() || error.message}`); }
-}
-
-export async function removeDesktopHelper() {
-  const current = await desktopHelperStatus();
-  if (!current.installed) return { installed: false, removed: false };
-  await elevateHelper('--remove');
-  const result = await desktopHelperStatus();
-  if (result.installed) throw new Error('桌面操作辅助服务尚未移除。');
-  return { ...result, removed: true };
-}
-
-export async function installDesktopHelper() {
-  if (!fs.existsSync(binary)) throw new Error('缺少原生 桌面操作辅助组件，请先构建或安装完整 npm 包。');
-  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded('[Console]::OutputEncoding = New-Object Text.UTF8Encoding; [Security.Principal.WindowsIdentity]::GetCurrent().User.Value')], { windowsHide: true, encoding: 'utf8' });
-  const sid = stdout.trim();
-  if (!/^S-1-5-21-(?:\d+-){3}\d+$/.test(sid)) throw new Error('无法获取当前 Windows 用户 SID。');
-  const current = await desktopHelperStatus();
-  const hash = target => createHash('sha256').update(fs.readFileSync(target)).digest('hex');
-  if (current.running && current.userSid === sid && hash(binary) === hash(current.path)) return { ...current, changed: false };
-  // Only this installer is elevated. Node and the workstation remain user-level.
-  await elevateHelper(`--install ${sid}`);
-  const installed = await desktopHelperStatus();
-  if (!installed.running || installed.userSid !== sid) throw new Error('桌面操作辅助服务尚未就绪。');
-  return { ...installed, changed: true };
-}
-
-class PipeSession {
-  constructor() {
-    this.socket = net.createConnection('\\\\.\\pipe\\CodeRelax.Desktop.v1');
-    this.socket.setEncoding('utf8');
-    this.buffer = '';
-    this.waiter = null;
-    this.closed = false;
-    this.socket.on('data', data => {
-      this.buffer += data;
-      if (Buffer.byteLength(this.buffer) > maxFrameBytes) { this.fail(new Error('桌面画面超过大小限制')); return; }
-      const end = this.buffer.indexOf('\n');
-      if (end < 0) return;
-      try {
-        const result = JSON.parse(this.buffer.slice(0, end));
-        this.buffer = this.buffer.slice(end + 1);
-        if (!this.waiter) throw new Error('收到未请求的 桌面数据');
-        const waiter = this.waiter; this.waiter = null; clearTimeout(waiter.timer);
-        const complete = () => result.error
-          ? waiter.reject(Object.assign(new Error(result.error), { code: 'desktop_native_error' })) : waiter.resolve(result);
-        if (result.state === 'pending' || result.continuing === true) complete();
-        else this.socket.write('ACK\n', error => {
-          if (error) console.warn(JSON.stringify({ event: 'desktop-response-ack', code: error.code || 'write_failed' }));
-          // The parsed result remains authoritative even if cleanup disconnects.
-          complete();
-        });
-      } catch (error) { this.fail(error); }
-    });
-    this.socket.on('error', error => this.fail(error));
-    this.socket.on('close', () => { this.closed = true; this.fail(new Error('桌面操作辅助连接已关闭，请重新获取画面')); });
-  }
-  fail(error) {
-    if (this.waiter) { const waiter = this.waiter; this.waiter = null; clearTimeout(waiter.timer); waiter.reject(error); }
-    this.socket.destroy();
-  }
-  request(command) {
-    if (this.closed || this.socket.destroyed || this.waiter) return Promise.reject(new Error('桌面操作辅助连接不可用'));
-    return new Promise((resolve, reject) => {
-      this.waiter = { resolve, reject, timer: setTimeout(() => this.fail(new Error('桌面操作辅助请求超时；点击不会自动重发，请刷新画面核对')), 10000) };
-      this.socket.write(`${command}\n`);
-    });
-  }
-  close() { this.fail(new Error('桌面画面已释放')); }
-}
-
-// Frame and input share one worker pipe. Serialize them without replaying input.
-export class DesktopHelper {
-  constructor() { this.active = null; this.reading = false; this.queue = Promise.resolve(); this.version = 0; }
-  serial(operation) {
-    const version = this.version;
-    const result = this.queue.then(() => {
-      if (version !== this.version) throw Object.assign(new Error('桌面操作已取消，请刷新'), { code: 'desktop_session_invalid' });
-      return operation();
-    });
-    this.queue = result.catch(() => {});
-    return result;
-  }
-  clear(current = this.active) {
-    if (!current) return;
-    clearTimeout(current.timer); current.session.close();
-    if (this.active === current) this.active = null;
-  }
-  async frame({ preview = false } = {}) {
-    if (this.reading) throw new Error('正在获取桌面画面，请稍候');
-    this.reading = true;
-    try { return await this.serial(async () => {
-      if (!this.active || this.active.preview !== preview) {
-        this.clear();
-        const version = this.version;
-        const status = await desktopHelperStatus();
-        if (version !== this.version) throw new Error('桌面操作已取消');
-        if (!status.running) return { state: 'unavailable', message: '工作站桌面服务尚未就绪' };
-        this.active = { session: new PipeSession(), preview };
-      }
-      const current = this.active;
-      try {
-        clearTimeout(current.timer);
-        const frame = await current.session.request(current.frame ? 'FRAME' : preview ? 'PREVIEW' : 'FRAME');
-        if (this.active !== current) throw new Error('桌面画面已释放');
-        if (frame.state !== 'pending') { this.clear(current); return frame; }
-        if (!/^[a-f0-9]{32}$/.test(frame.frameId) || !/^[a-f0-9]{32}$/.test(frame.sessionId) || !Number.isSafeInteger(frame.width) || !Number.isSafeInteger(frame.height) ||
-            !['image/png', 'image/jpeg'].includes(frame.mimeType) || !frame.image?.startsWith('data:' + frame.mimeType + ';base64,') ||
-            frame.width < 1 || frame.height < 1 || frame.preview !== preview) throw new Error('桌面画面格式无效');
-        const image = Buffer.from(frame.image.slice(('data:' + frame.mimeType + ';base64,').length), 'base64');
-        delete frame.image;
-        current.sessionId = frame.sessionId;
-        frame.imagePath = '/api/desktop/frames/' + frame.frameId;
-        frame.size = image.length;
-        current.frame = frame; current.image = image; current.expires = Date.now() + 30000;
-        current.timer = setTimeout(() => this.release(undefined, current.sessionId), 30000);
-        return frame;
-      } catch (error) { this.clear(current); throw error; }
-    }); } finally { this.reading = false; }
-  }
-  input(sessionId, command) {
-    return this.serial(async () => {
-      const current = this.active;
-      if (!current?.frame || sessionId !== current.sessionId || Date.now() >= current.expires)
-        throw Object.assign(new Error('请刷新桌面后操作'), { code: 'desktop_session_invalid' });
-      try {
-        const result = await current.session.request(command);
-        if (result.continuing !== true) this.clear(current);
-        return result;
-      } catch (error) { this.clear(current); throw error; }
-    });
-  }
-  move({ sessionId, dx, dy }) {
-    if (!Number.isSafeInteger(dx) || !Number.isSafeInteger(dy) || Math.abs(dx) > 512 || Math.abs(dy) > 512 || (!dx && !dy))
-      throw new Error('无效的相对鼠标位移');
-    return this.input(sessionId, 'MOVE ' + sessionId + ' ' + dx + ' ' + dy);
-  }
-  click({ sessionId, button }) {
-    if (!['left', 'right'].includes(button)) throw new Error('无效的鼠标按键');
-    return this.input(sessionId, 'BUTTON ' + sessionId + ' ' + button);
-  }
-  image(frameId) {
-    const current = this.active;
-    if (!current?.frame || current.frame.frameId !== frameId || Date.now() >= current.expires)
-      throw new Error('桌面画面已释放或过期，请重新获取');
-    return current.image;
-  }
-  release(frameId, sessionId) {
-    if (frameId && this.active?.frame?.frameId !== frameId) return;
-    if (sessionId && this.active?.sessionId !== sessionId) return;
-    this.version++; this.clear();
-  }
-}
+import net from 'node:net';
+import fs from 'node:fs';
+import path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { createHash } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+
+const exec = promisify(execFile);
+const binary = fileURLToPath(new URL('../../../native/desktop-helper/CodeRelaxDesktop.exe', import.meta.url));
+const powershell = path.join(process.env.SystemRoot || 'C:/Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+const quote = value => `'${String(value).replaceAll("'", "''")}'`;
+const encoded = script => Buffer.from(script, 'utf16le').toString('base64');
+const maxFrameBytes = 6 * 1024 * 1024;
+
+export async function desktopHelperStatus() {
+  if (process.platform !== 'win32' || !fs.existsSync(binary)) return { installed: false, running: false, state: 'unavailable' };
+  const { stdout } = await exec(binary, ['--status'], { windowsHide: true, encoding: 'utf8', timeout: 5000 });
+  const result = JSON.parse(stdout.trim());
+  if (result.error) throw new Error(result.error);
+  return result;
+}
+
+async function elevateHelper(argument) {
+  const script = `$ErrorActionPreference = 'Stop'; try { $child = Start-Process -FilePath ${quote(binary)} -ArgumentList ${quote(argument)} -Verb RunAs -PassThru -Wait; exit $child.ExitCode } catch { [Console]::Error.WriteLine($_.Exception.Message); exit 1 }`;
+  try { await exec(powershell, ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded(script)], { windowsHide: true, timeout: 180000 }); }
+  catch (error) { throw new Error(`桌面操作辅助服务配置未完成，需要在工作站确认 UAC：${error.stderr?.trim() || error.message}`); }
+}
+
+export async function removeDesktopHelper() {
+  const current = await desktopHelperStatus();
+  if (!current.installed) return { installed: false, removed: false };
+  await elevateHelper('--remove');
+  const result = await desktopHelperStatus();
+  if (result.installed) throw new Error('桌面操作辅助服务尚未移除。');
+  return { ...result, removed: true };
+}
+
+export async function installDesktopHelper() {
+  if (!fs.existsSync(binary)) throw new Error('缺少原生 桌面操作辅助组件，请先构建或安装完整 npm 包。');
+  const { stdout } = await exec(powershell, ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded('[Console]::OutputEncoding = New-Object Text.UTF8Encoding; [Security.Principal.WindowsIdentity]::GetCurrent().User.Value')], { windowsHide: true, encoding: 'utf8' });
+  const sid = stdout.trim();
+  if (!/^S-1-5-21-(?:\d+-){3}\d+$/.test(sid)) throw new Error('无法获取当前 Windows 用户 SID。');
+  const current = await desktopHelperStatus();
+  const hash = target => createHash('sha256').update(fs.readFileSync(target)).digest('hex');
+  if (current.running && current.userSid === sid && hash(binary) === hash(current.path)) return { ...current, changed: false };
+  // Only this installer is elevated. Node and the workstation remain user-level.
+  await elevateHelper(`--install ${sid}`);
+  const installed = await desktopHelperStatus();
+  if (!installed.running || installed.userSid !== sid) throw new Error('桌面操作辅助服务尚未就绪。');
+  return { ...installed, changed: true };
+}
+
+class PipeSession {
+  constructor() {
+    this.socket = net.createConnection('\\\\.\\pipe\\CodeRelax.Desktop.v1');
+    this.socket.setEncoding('utf8');
+    this.buffer = '';
+    this.waiter = null;
+    this.closed = false;
+    this.socket.on('data', data => {
+      this.buffer += data;
+      if (Buffer.byteLength(this.buffer) > maxFrameBytes) { this.fail(new Error('桌面画面超过大小限制')); return; }
+      const end = this.buffer.indexOf('\n');
+      if (end < 0) return;
+      try {
+        const result = JSON.parse(this.buffer.slice(0, end));
+        this.buffer = this.buffer.slice(end + 1);
+        if (!this.waiter) throw new Error('收到未请求的 桌面数据');
+        const waiter = this.waiter; this.waiter = null; clearTimeout(waiter.timer);
+        const complete = () => result.error
+          ? waiter.reject(Object.assign(new Error(result.error), { code: 'desktop_native_error' })) : waiter.resolve(result);
+        if (result.state === 'pending' || result.continuing === true) complete();
+        else this.socket.write('ACK\n', error => {
+          if (error) console.warn(JSON.stringify({ event: 'desktop-response-ack', code: error.code || 'write_failed' }));
+          // The parsed result remains authoritative even if cleanup disconnects.
+          complete();
+        });
+      } catch (error) { this.fail(error); }
+    });
+    this.socket.on('error', error => this.fail(error));
+    this.socket.on('close', () => { this.closed = true; this.fail(new Error('桌面操作辅助连接已关闭，请重新获取画面')); });
+  }
+  fail(error) {
+    if (this.waiter) { const waiter = this.waiter; this.waiter = null; clearTimeout(waiter.timer); waiter.reject(error); }
+    this.socket.destroy();
+  }
+  request(command) {
+    if (this.closed || this.socket.destroyed || this.waiter) return Promise.reject(new Error('桌面操作辅助连接不可用'));
+    return new Promise((resolve, reject) => {
+      this.waiter = { resolve, reject, timer: setTimeout(() => this.fail(new Error('桌面操作辅助请求超时；点击不会自动重发，请刷新画面核对')), 10000) };
+      this.socket.write(`${command}\n`);
+    });
+  }
+  close() { this.fail(new Error('桌面画面已释放')); }
+}
+
+// Frame and input share one worker pipe. Serialize them without replaying input.
+export class DesktopHelper {
+  constructor() { this.active = null; this.reading = false; this.queue = Promise.resolve(); this.version = 0; }
+  serial(operation) {
+    const version = this.version;
+    const result = this.queue.then(() => {
+      if (version !== this.version) throw Object.assign(new Error('桌面操作已取消，请刷新'), { code: 'desktop_session_invalid' });
+      return operation();
+    });
+    this.queue = result.catch(() => {});
+    return result;
+  }
+  clear(current = this.active) {
+    if (!current) return;
+    clearTimeout(current.timer); current.session.close();
+    if (this.active === current) this.active = null;
+  }
+  async frame({ preview = false } = {}) {
+    if (this.reading) throw new Error('正在获取桌面画面，请稍候');
+    this.reading = true;
+    try { return await this.serial(async () => {
+      if (!this.active || this.active.preview !== preview) {
+        this.clear();
+        const version = this.version;
+        const status = await desktopHelperStatus();
+        if (version !== this.version) throw new Error('桌面操作已取消');
+        if (!status.running) return { state: 'unavailable', message: '工作站桌面服务尚未就绪' };
+        this.active = { session: new PipeSession(), preview };
+      }
+      const current = this.active;
+      try {
+        clearTimeout(current.timer);
+        const frame = await current.session.request(current.frame ? 'FRAME' : preview ? 'PREVIEW' : 'FRAME');
+        if (this.active !== current) throw new Error('桌面画面已释放');
+        if (frame.state !== 'pending') { this.clear(current); return frame; }
+        if (!/^[a-f0-9]{32}$/.test(frame.frameId) || !/^[a-f0-9]{32}$/.test(frame.sessionId) || !Number.isSafeInteger(frame.width) || !Number.isSafeInteger(frame.height) ||
+            !['image/png', 'image/jpeg'].includes(frame.mimeType) || !frame.image?.startsWith('data:' + frame.mimeType + ';base64,') ||
+            frame.width < 1 || frame.height < 1 || frame.preview !== preview) throw new Error('桌面画面格式无效');
+        const image = Buffer.from(frame.image.slice(('data:' + frame.mimeType + ';base64,').length), 'base64');
+        delete frame.image;
+        current.sessionId = frame.sessionId;
+        frame.imagePath = '/api/desktop/frames/' + frame.frameId;
+        frame.size = image.length;
+        current.frame = frame; current.image = image; current.expires = Date.now() + 30000;
+        current.timer = setTimeout(() => this.release(undefined, current.sessionId), 30000);
+        return frame;
+      } catch (error) { this.clear(current); throw error; }
+    }); } finally { this.reading = false; }
+  }
+  input(sessionId, command) {
+    return this.serial(async () => {
+      const current = this.active;
+      if (!current?.frame || sessionId !== current.sessionId || Date.now() >= current.expires)
+        throw Object.assign(new Error('请刷新桌面后操作'), { code: 'desktop_session_invalid' });
+      try {
+        const result = await current.session.request(command);
+        if (result.continuing !== true) this.clear(current);
+        return result;
+      } catch (error) { this.clear(current); throw error; }
+    });
+  }
+  move({ sessionId, dx, dy }) {
+    if (!Number.isSafeInteger(dx) || !Number.isSafeInteger(dy) || Math.abs(dx) > 512 || Math.abs(dy) > 512 || (!dx && !dy))
+      throw new Error('无效的相对鼠标位移');
+    return this.input(sessionId, 'MOVE ' + sessionId + ' ' + dx + ' ' + dy);
+  }
+  click({ sessionId, button }) {
+    if (!['left', 'right'].includes(button)) throw new Error('无效的鼠标按键');
+    return this.input(sessionId, 'BUTTON ' + sessionId + ' ' + button);
+  }
+  image(frameId) {
+    const current = this.active;
+    if (!current?.frame || current.frame.frameId !== frameId || Date.now() >= current.expires)
+      throw new Error('桌面画面已释放或过期，请重新获取');
+    return current.image;
+  }
+  release(frameId, sessionId) {
+    if (frameId && this.active?.frame?.frameId !== frameId) return;
+    if (sessionId && this.active?.sessionId !== sessionId) return;
+    this.version++; this.clear();
+  }
+}

package/dist/src/platform/windows/desktop-runtime.ps1

@@ -1,10 +1,10 @@
-$ErrorActionPreference = 'Stop'
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-$package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
-if (-not $package) { 'null'; exit }
-$resources = Join-Path $package.InstallLocation 'app\resources'
-@{
-    package = $package.PackageFullName
-    executable = Join-Path $resources 'codex.exe'
-    codeModeHost = Join-Path $resources 'codex-code-mode-host.exe'
-} | ConvertTo-Json -Compress
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+$package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
+if (-not $package) { 'null'; exit }
+$resources = Join-Path $package.InstallLocation 'app\resources'
+@{
+    package = $package.PackageFullName
+    executable = Join-Path $resources 'codex.exe'
+    codeModeHost = Join-Path $resources 'codex-code-mode-host.exe'
+} | ConvertTo-Json -Compress