@walkhi/code-relax 0.1.0-beta.71 → 0.1.0-beta.78

package/dist/src/dots-message-images.mjs

@@ -254,7 +254,6 @@ export class DotsMessageImages {
     }
     const headers = await this.authorization(image.identity);
     await this.metadata(image, headers);
-    if (image.size > this.maxBytes) throw new Error('点点附件超过 20 MiB 下载上限。');
     const revision = image.id;
     const { offset, length } = fileRange(query, image.size, revision);
     if (!offset || !image.downloadUrl) image.downloadUrl = await this.contentUrl(image, headers, true);

package/dist/src/dots-room-activity.mjs

@@ -1,6 +1,6 @@
 import { EventEmitter } from 'node:events';
 
-// Desktop 26.1007.9446.0: room-live activity and responding heartbeats are
+// Desktop 26.1016.6573.0: room-live activity and responding heartbeats are
 // independent. Heartbeats expire after 10s; Dot reply handoff lasts at most 5s.
 const typingTimeout = 10000, handoffTimeout = 5000;
 const statusLabels = {
@@ -8,6 +8,7 @@ const statusLabels = {
   payment: '等待支付', 'needs input': '等待你的输入', paused: '已暂停',
 };
 const waitingStates = new Set(['payment', 'needs input', 'paused']);
+const retryableStatus = status => status == null || status === 408 || status === 429 || status >= 500;
 
 export class DotsRoomActivity extends EventEmitter {
   constructor(server) {
@@ -41,6 +42,13 @@ export class DotsRoomActivity extends EventEmitter {
       if (!watch.listeners.size) { this.watches.delete(threadId); this.stop(watch); }
     };
   }
+  retryUnavailable(threadId) {
+    const watch = this.watches.get(threadId);
+    if (!watch?.unavailable || !watch.listeners.size || watch.controller || watch.timer) return false;
+    watch.attempts = 0;
+    void this.start(watch);
+    return true;
+  }
   publish(watch, activity) {
     if (JSON.stringify(watch.activity) === JSON.stringify(activity)) return;
     watch.activity = activity;
@@ -100,14 +108,17 @@ export class DotsRoomActivity extends EventEmitter {
   }
   apply(watch, value) {
     if (value.subscription_id !== watch.subscriptionId || !Number.isSafeInteger(value.revision) || value.revision <= watch.revision) return;
-    watch.revision = value.revision;
     if (value.type === 'calpico-room-live-error') {
+      watch.revision = value.revision;
       this.fail(watch, new Error('点点活动暂不可用。'), value.code === 'temporarily_unavailable'); return;
     }
     if (value.type !== 'calpico-room-live-state' || !Array.isArray(value.threads)) return;
+    watch.revision = value.revision;
+    clearTimeout(watch.initialTimer); watch.initialTimer = null;
     const current = value.threads[0];
     watch.idle = value.threads.length === 0;
-    watch.attempts = 0; watch.unavailable = false; watch.liveActivity = null;
+    if (value.threads.some(thread => thread.stream_state === 'attached')) watch.attempts = 0;
+    watch.unavailable = false; watch.liveActivity = null;
     if (current?.stream_state !== 'attached') { this.refresh(watch); return; }
     if (current.turn_status === 'failed') {
       this.clearReply(watch); watch.liveActivity = { kind: 'error', label: '回复出错', spinning: false };
@@ -133,6 +144,11 @@ export class DotsRoomActivity extends EventEmitter {
     const generation = ++watch.generation, controller = new AbortController();
     watch.controller = controller; watch.pending = new Map(); watch.subscriptionId = null; watch.revision = -1;
     const current = () => this.watches.get(watch.threadId) === watch && generation === watch.generation && !controller.signal.aborted;
+    // Ready/keepalive on SSE does not establish delivery on the Celsius topic.
+    watch.initialTimer = setTimeout(() => {
+      if (current()) this.fail(watch, new Error('点点活动首次状态等待超时。'), true);
+    }, 30000);
+    watch.initialTimer.unref();
     try {
       await this.server.connect();
       const room = this.server.bindings.get(watch.threadId) || await this.server.room(watch.threadId);
@@ -155,9 +171,13 @@ export class DotsRoomActivity extends EventEmitter {
         },
       });
       if (current()) this.fail(watch, new Error('点点活动连接已结束。'), true);
-    } catch (error) { if (current()) this.fail(watch, error, ![401, 403, 404].includes(error.status)); }
+    } catch (error) { if (current()) this.fail(watch, error, retryableStatus(error.status)); }
   }
   fail(watch, error, retry) {
+    console.error(JSON.stringify({ time: new Date().toISOString(), event: 'dots-room-activity',
+      threadId: watch.threadId, roomId: watch.roomId, status: error.status || 0,
+      stage: watch.subscriptionId ? 'state' : 'subscribe', retry, attempts: watch.attempts,
+      responseKind: error.details?.responseKind || 'none' }));
     this.stop(watch, true); watch.unavailable = true; this.refresh(watch); this.emit('unavailable', error);
     if (retry && watch.listeners.size && this.server.ready && watch.attempts < 5) {
       watch.timer = setTimeout(() => { watch.timer = null; void this.start(watch); }, Math.min(30000, 1000 * 2 ** watch.attempts++));
@@ -166,6 +186,7 @@ export class DotsRoomActivity extends EventEmitter {
   }
   stop(watch, keepReply = false) {
     watch.generation++; clearTimeout(watch.timer); watch.timer = null;
+    clearTimeout(watch.initialTimer); watch.initialTimer = null;
     watch.controller?.abort(); watch.controller = null; watch.pending?.clear(); watch.liveActivity = null;
     watch.subscriptionId = null; watch.revision = -1; watch.idle = false;
     if (!keepReply) { this.clearReply(watch); watch.unavailable = false; watch.roomId = null; }

package/dist/src/dots-room-client.mjs

@@ -1,137 +1,163 @@
-import http2 from 'node:http2';
-import { CelsiusClient } from './celsius-client.mjs';
-
-const topic = 'calpico-chatgpt-messaging';
-const identityKey = identity => JSON.stringify([identity?.accountId, identity?.userId]);
-
-// Desktop 26.1002.7124.0: the DM API and Celsius share the kernel account,
-// but are independent of the hosted execution socket. Never replay a POST.
-export class DotsRoomClient extends CelsiusClient {
-  constructor(transport) {
-    super({ topics: [topic] }); this.transport = transport;
-    this.getConnection = () => this.request('/celsius/ws/user');
-    this.controllers = new Set(); this.routes = new Map();
-  }
-
-  async authorization() {
-    const identity = this.transport.profileIdentity, generation = this.generation;
-    const auth = await this.transport.localServer.request('getAuthStatus', { includeToken: true, refreshToken: false });
-    const principal = auth.authToken && JSON.parse(Buffer.from(auth.authToken.split('.')[1], 'base64url'))['https://api.openai.com/auth'];
-    if (!identity?.accountId || principal?.chatgpt_account_id !== identity.accountId
-      || principal.chatgpt_user_id !== identity.userId || generation !== this.generation
-      || identityKey(identity) !== identityKey(this.transport.profileIdentity)) throw new Error('点点账号已变化，请重新连接。');
-    return { identity, generation, headers: { authorization: `Bearer ${auth.authToken}`,
-      'chatgpt-account-id': identity.accountId, 'user-agent': 'Code-Relax/0.1.0' } };
-  }
-
-  async request(route, { method = 'GET', body, contentType, signal, onEvent, rawResponse = false } = {}) {
-    const auth = await this.authorization();
-    const controller = new AbortController(); this.controllers.add(controller);
-    const cancelled = () => controller.abort(signal.reason);
-    signal?.addEventListener('abort', cancelled, { once: true });
-    if (signal?.aborted) cancelled();
-    let sent = false, status, timer;
-    try {
-      return await new Promise((resolve, reject) => {
-        const session = http2.connect('https://chatgpt.com');
-        let request, settled = false, bytes = 0, text = '';
-        const current = () => auth.generation === this.generation
-          && identityKey(auth.identity) === identityKey(this.transport.profileIdentity);
-        const finish = (error, value) => {
-          if (settled) return; settled = true;
-          clearTimeout(timer); controller.signal.removeEventListener('abort', abort);
-          request?.destroy(); session.destroy();
-          if (error) {
-            if (method !== 'GET' && !onEvent) error.deliveryUnknown = sent && !(status >= 400 && status < 500 && status !== 408);
-            reject(error);
-          } else resolve(value);
-        };
-        const abort = () => finish(controller.signal.reason || new Error('点点请求已取消。'));
-        controller.signal.addEventListener('abort', abort, { once: true });
-        session.on('error', error => finish(error));
-        if (controller.signal.aborted) { abort(); return; }
-        const roomRoute = /^\/messaging\/rooms\/([^/]+)\/messages$/.exec(route)?.[1];
-        request = session.request({ ':method': method, ':path': `/backend-api${route}`, ...auth.headers,
-          accept: onEvent ? 'text/event-stream' : 'application/json',
-          ...(body != null ? { 'content-type': contentType || 'application/json' } : {}),
-          ...(roomRoute && this.routes.has(roomRoute) ? { 'x-openai-thread-route': this.routes.get(roomRoute) } : {}) });
-        timer = setTimeout(() => finish(new Error('点点请求超时，请重新核对状态。')), 30000);
-        request.setEncoding('utf8');
-        request.on('response', headers => {
-          status = headers[':status'];
-          if (roomRoute && typeof headers['x-openai-thread-route'] === 'string' && headers['x-openai-thread-route'].length <= 1024 && current()) this.routes.set(roomRoute, headers['x-openai-thread-route']);
-          if (status < 200 || status >= 300) {
-            console.error(JSON.stringify({ event: 'dots-room-request', method, status, route: route.split('?')[0] }));
-            const message = status === 401 ? '点点登录状态需要恢复，请重新连接。'
-              : status === 403 || status === 404 ? '点点消息暂不可用，请稍后重新同步。'
-                : status === 429 ? '点点暂时繁忙，请稍后再试。' : '点点请求尚未完成，请稍后核对。';
-            finish(Object.assign(new Error(message), { status }));
-          }
-        });
-        request.on('data', chunk => {
-          if (!current()) { finish(new Error('点点账号已变化，请重新连接。')); return; }
-          bytes += Buffer.byteLength(chunk); text += chunk;
-          if (onEvent) {
-            text = text.replace(/\r\n/g, '\n');
-            let end;
-            while ((end = text.indexOf('\n\n')) >= 0) {
-              const frame = text.slice(0, end); text = text.slice(end + 2);
-              const data = frame.split('\n').filter(line => line.startsWith('data:')).map(line => line.slice(5).trimStart()).join('\n');
-              // Desktop's ChatGPT SSE treats [DONE] as completion, not JSON.
-              if (data.trim() === '[DONE]') { finish(null, null); return; }
-              if (data) try { onEvent(JSON.parse(data)); clearTimeout(timer); } catch (error) { finish(error); return; }
-            }
-            bytes = Buffer.byteLength(text);
-          }
-          if (bytes > 8 * 1024 * 1024) finish(new Error('点点响应超出单次读取上限。'));
-        });
-        request.on('error', error => finish(error));
-        request.on('end', () => {
-          if (!current()) { finish(new Error('点点账号已变化，请重新连接。')); return; }
-          try { finish(null, onEvent ? null : rawResponse ? text : text ? JSON.parse(text) : null); } catch (error) { finish(error); }
-        });
-        request.on('close', () => { if (!settled) finish(new Error('点点请求连接已断开。')); });
-        // end() can queue data before TLS connects. Only a ready HTTP/2 stream
-        // has been assigned an ID and may have submitted the request.
-        sent = !request.pending;
-        request.once('ready', () => { sent = true; });
-        request.end(body == null ? undefined : Buffer.isBuffer(body) ? body : JSON.stringify(body));
-      });
-    } finally { this.controllers.delete(controller); signal?.removeEventListener('abort', cancelled); }
-  }
-
-  async roomId(threadId) {
-    let profile = this.transport.liveProfiles.get(threadId);
-    if (!profile?.messagingRoomId) {
-      const value = await this.request(`/tbo/by-thread/${encodeURIComponent(threadId)}`);
-      profile = { messagingRoomId: value?.messaging_room_id };
-    }
-    if (typeof profile.messagingRoomId !== 'string' || !profile.messagingRoomId) throw new Error('点点消息房间暂不可用。');
-    return profile.messagingRoomId;
-  }
-
-  async room(id) {
-    const room = await this.request(`/messaging/rooms/${encodeURIComponent(id)}`);
-    if (room?.id !== id || room.type !== 'DM' || room.app_source !== 'chatgpt:messaging' || !Array.isArray(room.members)) {
-      throw new Error('点点消息房间身份不匹配。');
-    }
-    return room;
-  }
-
-  async messages(roomId, { before, after, around, limit = 20 } = {}) {
-    const query = new URLSearchParams({ limit: String(limit), ...(before ? { before } : {}),
-      ...(after ? { after } : {}), ...(around ? { around } : {}) });
-    const page = await this.request(`/messaging/rooms/${encodeURIComponent(roomId)}/messages?${query}`);
-    if (!Array.isArray(page?.items) || page.items.some(message => typeof message.id !== 'string' || !message.id)) throw new Error('点点消息页格式无效。');
-    // Null prev_cursor is also returned for nonempty middle pages. Desktop uses
-    // the first message ID; only an empty page proves that history is exhausted.
-    return { items: page.items, before: page.prev_cursor ?? page.items[0]?.id ?? null,
-      after: page.next_cursor ?? (after && page.items.length >= limit ? page.items.at(-1)?.id : null) };
-  }
-
-  close() {
-    super.close();
-    for (const controller of this.controllers) controller.abort(new Error('点点连接已结束。'));
-    this.controllers.clear(); this.routes.clear();
-  }
-}
+import http2 from 'node:http2';
+import { Readable } from 'node:stream';
+import { CelsiusClient } from './celsius-client.mjs';
+
+const topic = 'calpico-chatgpt-messaging';
+const identityKey = identity => JSON.stringify([identity?.accountId, identity?.userId]);
+
+// Desktop 26.1016.6573.0: the DM API and Celsius share the kernel account,
+// but are independent of the hosted execution socket. Never replay a POST.
+export class DotsRoomClient extends CelsiusClient {
+  constructor(transport) {
+    super({ topics: [topic] }); this.transport = transport;
+    this.getConnection = () => this.request('/celsius/ws/user');
+    this.controllers = new Set(); this.routes = new Map();
+  }
+
+  async authorization() {
+    const identity = this.transport.profileIdentity, generation = this.generation;
+    const auth = await this.transport.localServer.request('getAuthStatus', { includeToken: true, refreshToken: false });
+    const principal = auth.authToken && JSON.parse(Buffer.from(auth.authToken.split('.')[1], 'base64url'))['https://api.openai.com/auth'];
+    if (!identity?.accountId || principal?.chatgpt_account_id !== identity.accountId
+      || principal.chatgpt_user_id !== identity.userId || generation !== this.generation
+      || identityKey(identity) !== identityKey(this.transport.profileIdentity)) throw new Error('点点账号已变化，请重新连接。');
+    return { identity, generation, headers: { authorization: `Bearer ${auth.authToken}`,
+      'chatgpt-account-id': identity.accountId, 'user-agent': 'Code-Relax/0.1.0' } };
+  }
+
+  async request(route, { method = 'GET', body, contentType, signal, onEvent, rawResponse = false } = {}) {
+    const auth = await this.authorization();
+    const controller = new AbortController(); this.controllers.add(controller);
+    const cancelled = () => controller.abort(signal.reason);
+    signal?.addEventListener('abort', cancelled, { once: true });
+    if (signal?.aborted) cancelled();
+    let sent = false, status, timer, responseKind = 'none';
+    const started = Date.now();
+    const clientId = method === 'POST' && /^[a-f0-9-]{36}$/i.test(body?.request_id || '') ? body.request_id : undefined;
+    try {
+      return await new Promise((resolve, reject) => {
+        const session = http2.connect('https://chatgpt.com');
+        let request, settled = false, bytes = 0, text = '';
+        const current = () => auth.generation === this.generation
+          && identityKey(auth.identity) === identityKey(this.transport.profileIdentity);
+        const finish = (error, value) => {
+          if (settled) return; settled = true;
+          clearTimeout(timer); controller.signal.removeEventListener('abort', abort);
+          request?.destroy(); session.destroy();
+          if (error) {
+            error.details = { ...error.details, ...(status ? { upstreamStatus: status } : {}), responseKind };
+            if (!controller.signal.aborted) console.error(JSON.stringify({ time: new Date().toISOString(), event: 'dots-room-request', method,
+              route: route.split('?')[0], clientId, status: status || 0, responseKind,
+              ms: Date.now() - started, outcome: 'failed' }));
+            if (method !== 'GET' && !onEvent) error.deliveryUnknown = sent && !(status >= 400 && status < 500 && status !== 408);
+            reject(error);
+          } else resolve(value);
+        };
+        const abort = () => finish(controller.signal.reason || new Error('点点请求已取消。'));
+        controller.signal.addEventListener('abort', abort, { once: true });
+        session.on('error', error => finish(error));
+        if (controller.signal.aborted) { abort(); return; }
+        const roomRoute = method === 'POST' ? /^\/messaging\/rooms\/([^/]+)\/messages$/.exec(route)?.[1] : null;
+        request = session.request({ ':method': method, ':path': `/backend-api${route}`, ...auth.headers,
+          accept: onEvent ? 'text/event-stream' : 'application/json',
+          ...(body != null ? { 'content-type': contentType || 'application/json' } : {}),
+          ...(roomRoute && this.routes.has(roomRoute) ? { 'x-openai-thread-route': this.routes.get(roomRoute) } : {}) });
+        timer = setTimeout(() => finish(new Error('点点请求超时，请重新核对状态。')), 30000);
+        request.setEncoding('utf8');
+        request.on('response', headers => {
+          status = headers[':status'];
+          const type = String(headers['content-type'] || '').split(';')[0].trim().toLowerCase();
+          responseKind = headers['cf-mitigated'] === 'challenge' ? 'challenge'
+            : type === 'application/json' ? 'json' : type === 'text/html' ? 'html' : type === 'text/event-stream' ? 'sse' : 'other';
+          if (roomRoute && current()) {
+            // Desktop replaces the route on every send response, including removal.
+            this.routes.delete(roomRoute);
+            const routeHint = headers['x-openai-thread-route'];
+            if (typeof routeHint === 'string' && routeHint && routeHint.length <= 1024) {
+              if (this.routes.size >= 128) this.routes.clear();
+              this.routes.set(roomRoute, routeHint);
+            }
+          }
+          if (status < 200 || status >= 300) {
+            const message = status === 401 ? '点点登录状态需要恢复，请重新连接。'
+              : status === 403 ? '点点服务拒绝访问（HTTP 403），请稍后重试。'
+                : status === 404 ? '点点消息暂不可用，请稍后重新同步。'
+                : status === 429 ? '点点暂时繁忙，请稍后再试。' : '点点请求尚未完成，请稍后核对。';
+            finish(Object.assign(new Error(message), { status }));
+          } else if (roomRoute || onEvent) {
+            console.log(JSON.stringify({ time: new Date().toISOString(), event: 'dots-room-request', method,
+              route: route.split('?')[0], clientId, status, responseKind, ms: Date.now() - started, outcome: 'response' }));
+          }
+        });
+        request.on('data', chunk => {
+          if (!current()) { finish(new Error('点点账号已变化，请重新连接。')); return; }
+          bytes += Buffer.byteLength(chunk); text += chunk;
+          if (onEvent) {
+            text = text.replace(/\r\n/g, '\n');
+            let end;
+            while ((end = text.indexOf('\n\n')) >= 0) {
+              const frame = text.slice(0, end); text = text.slice(end + 2);
+              const data = frame.split('\n').filter(line => line.startsWith('data:')).map(line => line.slice(5).trimStart()).join('\n');
+              // Desktop's ChatGPT SSE treats [DONE] as completion, not JSON.
+              if (data.trim() === '[DONE]') { finish(null, null); return; }
+              if (data) try { onEvent(JSON.parse(data)); clearTimeout(timer); } catch (error) { finish(error); return; }
+            }
+            bytes = Buffer.byteLength(text);
+          }
+          if (bytes > 8 * 1024 * 1024) finish(new Error('点点响应超出单次读取上限。'));
+        });
+        request.on('error', error => finish(error));
+        request.on('end', () => {
+          if (!current()) { finish(new Error('点点账号已变化，请重新连接。')); return; }
+          try { finish(null, onEvent ? null : rawResponse ? text : text ? JSON.parse(text) : null); } catch (error) { finish(error); }
+        });
+        request.on('close', () => { if (!settled) finish(new Error('点点请求连接已断开。')); });
+        // end() can queue data before TLS connects. Only a ready HTTP/2 stream
+        // has been assigned an ID and may have submitted the request.
+        sent = !request.pending;
+        request.once('ready', () => { sent = true; });
+        if (body instanceof Blob) {
+          const source = Readable.fromWeb(body.stream());
+          source.on('error', error => finish(error));
+          request.on('close', () => source.destroy());
+          source.pipe(request);
+        } else request.end(body == null ? undefined : Buffer.isBuffer(body) ? body : JSON.stringify(body));
+      });
+    } finally { this.controllers.delete(controller); signal?.removeEventListener('abort', cancelled); }
+  }
+
+  async roomId(threadId) {
+    let profile = this.transport.liveProfiles.get(threadId);
+    if (!profile?.messagingRoomId) {
+      const value = await this.request(`/tbo/by-thread/${encodeURIComponent(threadId)}`);
+      profile = { messagingRoomId: value?.messaging_room_id };
+    }
+    if (typeof profile.messagingRoomId !== 'string' || !profile.messagingRoomId) throw new Error('点点消息房间暂不可用。');
+    return profile.messagingRoomId;
+  }
+
+  async room(id) {
+    const room = await this.request(`/messaging/rooms/${encodeURIComponent(id)}`);
+    if (room?.id !== id || room.type !== 'DM' || room.app_source !== 'chatgpt:messaging' || !Array.isArray(room.members)) {
+      throw new Error('点点消息房间身份不匹配。');
+    }
+    return room;
+  }
+
+  async messages(roomId, { before, after, around, limit = 20 } = {}) {
+    const query = new URLSearchParams({ limit: String(limit), ...(before ? { before } : {}),
+      ...(after ? { after } : {}), ...(around ? { around } : {}) });
+    const page = await this.request(`/messaging/rooms/${encodeURIComponent(roomId)}/messages?${query}`);
+    if (!Array.isArray(page?.items) || page.items.some(message => typeof message.id !== 'string' || !message.id)) throw new Error('点点消息页格式无效。');
+    // Null prev_cursor is also returned for nonempty middle pages. Desktop uses
+    // the first message ID; only an empty page proves that history is exhausted.
+    return { items: page.items, before: page.prev_cursor ?? page.items[0]?.id ?? null,
+      after: page.next_cursor ?? (after && page.items.length >= limit ? page.items.at(-1)?.id : null) };
+  }
+
+  close() {
+    super.close();
+    for (const controller of this.controllers) controller.abort(new Error('点点连接已结束。'));
+    this.controllers.clear(); this.routes.clear();
+  }
+}

package/dist/src/dots-task-catalog.mjs

@@ -346,7 +346,10 @@ export class DotsAppServer extends HostedHistoryAppServer {
       const previous = this.profileNames.get(id);
       if (previous?.avatar && previous.avatarFileId === profile.avatarFileId) profile.avatar = previous.avatar;
     }
-    if (identity === this.profileIdentity) this.profileNames = names;
+    if (identity === this.profileIdentity) {
+      this.profileNames = names;
+      this.emit('profiles-changed');
+    }
   }
 
   refreshLiveProfiles() {

package/dist/src/dots-task-files.mjs

@@ -9,7 +9,7 @@ export async function uploadTaskFiles(files, { uploadsRoot, client, current, fet
   for (const file of uploads) {
     current();
     const reserved = await client.request('/files', { method: 'POST', body: {
-      file_name: file.name, file_size: file.bytes.length, mime_type: file.mimeType,
+      file_name: file.name, file_size: file.bytes.size ?? file.bytes.length, mime_type: file.mimeType,
       use_case: 'codex', store_in_library: false, timezone_offset_min: new Date().getTimezoneOffset(), reset_rate_limits: false,
     } });
     current();
@@ -22,7 +22,7 @@ export async function uploadTaskFiles(files, { uploadsRoot, client, current, fet
       if (!uploadUrl) throw new Error('云端文件上传地址缺少参数。');
       const boundary = `relax-${randomUUID()}`;
       const name = file.name.replaceAll('"', '%22').replaceAll('\\', '%5C');
-      const body = Buffer.concat([Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="file"; filename="${name}"\r\nContent-Type: ${file.mimeType}\r\n\r\n`),
+      const body = new Blob([Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="file"; filename="${name}"\r\nContent-Type: ${file.mimeType}\r\n\r\n`),
         file.bytes, Buffer.from(`\r\n--${boundary}\r\nContent-Disposition: form-data; name="upload_url"\r\n\r\n${uploadUrl}\r\n--${boundary}--\r\n`)]);
       await client.request(url.pathname.slice('/backend-api'.length) + url.search, {
         method: 'POST', body, contentType: `multipart/form-data; boundary=${boundary}`, rawResponse: true,

package/dist/src/file-upload-session.mjs

@@ -56,9 +56,16 @@ export function createFileUploadSession(root) {
     completed.clear(); files.clear(); completedBytes = 0;
   };
   return {
-    async receive(message) {
+    async receive(message, { relayed = false } = {}) {
       if (!message || typeof message !== 'object') throw new Error('无效的文件上传请求');
       if (message.type === 'cancel') { await clear(); return { type: 'cancelled' }; }
+      // Recheck the complete batch on every relayed request, including resume
+      // and commit after a direct connection has been replaced.
+      if (relayed) {
+        const originals = [...files.values()].filter(file => !file.previewOf);
+        if (originals.some(file => file.size > MAX_FILE_BYTES)) throw new Error('服务器转发仅支持单个文件不超过 20 MiB，请使用局域网或 RTC 直连');
+        if (originals.reduce((sum, file) => sum + file.size, 0) > MAX_TOTAL_BYTES) throw new Error('服务器转发仅支持每批合计不超过 40 MiB，请使用局域网或 RTC 直连');
+      }
       if (message.type === 'commit') {
         if (upload) throw new Error('文件尚未上传完成');
         committed = true;
@@ -86,14 +93,14 @@ export function createFileUploadSession(root) {
         if (committed) throw new Error('文件批次已提交');
         if (upload) throw new Error('已有文件正在上传');
         if (!validName(message.name)) throw new Error('文件名无效');
-        if (!Number.isSafeInteger(message.size) || message.size < 1 || message.size > MAX_FILE_BYTES) {
-          throw new Error('单个文件不得超过 20 MiB');
+        if (!Number.isSafeInteger(message.size) || message.size < 1) {
+          throw new Error('文件大小无效');
         }
+        if (relayed && message.size > MAX_FILE_BYTES) throw new Error('服务器转发仅支持单个文件不超过 20 MiB，请使用局域网或 RTC 直连');
         const parent = message.previewOf ? completed.get(message.previewOf) : null;
         if (message.previewOf && (!parent || parent.preview || message.size > FILE_CHUNK_BYTES)) throw new Error('预览图关联无效或超过 256 KiB');
-        if (!parent && (completed.size >= MAX_FILE_COUNT || completedBytes + message.size > MAX_TOTAL_BYTES)) {
-          throw new Error('每条消息最多 4 个文件，合计不超过 40 MiB');
-        }
+        if (!parent && completed.size >= MAX_FILE_COUNT) throw new Error('每条消息最多 4 个文件');
+        if (!parent && relayed && completedBytes + message.size > MAX_TOTAL_BYTES) throw new Error('服务器转发仅支持每批合计不超过 40 MiB，请使用局域网或 RTC 直连');
         if (!/^[a-f0-9]{64}$/i.test(message.sha256 || '')) throw new Error('文件校验值无效');
         const id = crypto.randomUUID();
         await fs.mkdir(directory, { recursive: true });

package/dist/src/lan-socket-server.mjs

@@ -48,7 +48,7 @@ export function attachLanSocket(server, { token, dispatch, authorizeDevice = ()
     target.handleUpgrade(request, socket, head, ws => target.emit('connection', ws));
   });
   uploadWss.on('connection', ws => {
-    let authenticated = false, stopped = false, identity = '', upload, purpose, chunk, uploadEntry, uploadId;
+    let authenticated = false, stopped = false, identity = '', upload, purpose, chunk, uploadEntry, uploadId, fileRelay = false;
     let release, discardUpload = false;
     const released = new Promise(resolve => { release = resolve; });
     let queued = 0;
@@ -84,7 +84,7 @@ export function attachLanSocket(server, { token, dispatch, authorizeDevice = ()
         if (binary) {
           if (!authenticated || purpose !== 'upload' || !chunk || bytes.length !== chunk.length) throw new Error('无效的文件分片');
           const current = chunk; chunk = undefined;
-          reply(await upload.receive({ ...current, data: bytes })); return;
+          reply(await upload.receive({ ...current, data: bytes }, { relayed: fileRelay })); return;
         }
         if (bytes.length > 16 * 1024 || chunk) throw new Error('无效的文件请求');
         const message = JSON.parse(bytes.toString());
@@ -98,6 +98,7 @@ export function attachLanSocket(server, { token, dispatch, authorizeDevice = ()
             if (supplied.length === expected.length && crypto.timingSafeEqual(supplied, expected)) {
               identity = typeof message.relayClientId === 'string' && message.relayClientId.length <= 200
                 ? `relay:${message.relayClientId}` : 'local-token';
+              fileRelay = message.fileRelay === true;
             }
           }
           if (identity && purpose === 'upload') {
@@ -141,17 +142,19 @@ export function attachLanSocket(server, { token, dispatch, authorizeDevice = ()
             Object.assign(uploadEntry, { ws, released });
             upload = uploadEntry.session;
           }
-          reply({ type: 'ready', version: 3, purpose, maxDownloadBytes: FILE_READ_LIMIT, maxFileBytes: MAX_FILE_BYTES, maxFileCount: MAX_FILE_COUNT,
-            maxTotalBytes: MAX_TOTAL_BYTES, chunkBytes: FILE_CHUNK_BYTES, uploadSessionId: uploadId });
+          reply({ type: 'ready', version: 4, purpose, maxDownloadBytes: fileRelay ? FILE_READ_LIMIT : null, maxFileBytes: fileRelay ? MAX_FILE_BYTES : null, maxFileCount: MAX_FILE_COUNT,
+            maxTotalBytes: fileRelay ? MAX_TOTAL_BYTES : null, chunkBytes: FILE_CHUNK_BYTES, uploadSessionId: uploadId });
           return;
         }
         if (purpose === 'download') {
+          if (fileRelay && /^\/api\/desktop\/frames\//.test(message.path || '')) throw new Error('桌面画面仅支持直连');
           if (message.type !== 'read' || typeof message.path !== 'string' || message.path.length > 12000 ||
               !/^\/api\/(?:images\/[a-f0-9]{64}|files\/(?:local|[a-f0-9]{64})|code\/(?:image|binary)|desktop\/frames\/[a-f0-9]{32})(?:\?|$)/.test(message.path) || message.path.includes('#')) throw new Error('无效的文件读取请求');
           await dispatch({ method: 'GET', url: message.path, headers: {}, socketRequest: true, fileTransfer: true }, {
             json(status, body) { reply({ type: 'error', status, error: body?.error || '文件读取失败' }); },
             filePart(metadata, data) {
               if (stopped || ws.readyState !== WebSocket.OPEN) return;
+              if (fileRelay && metadata.size > FILE_READ_LIMIT) throw new Error('服务器转发仅支持下载不超过 20 MiB 的文件，请使用局域网或 RTC 直连');
               if (!Buffer.isBuffer(data) || data.length > FILE_CHUNK_BYTES || ws.bufferedAmount > 1024 * 1024) throw new Error('文件接收过慢或分片无效');
               reply({ type: 'part', ...metadata, length: data.length });
               ws.send(data);
@@ -163,7 +166,7 @@ export function attachLanSocket(server, { token, dispatch, authorizeDevice = ()
           if (!Number.isSafeInteger(message.length) || message.length < 1 || message.length > FILE_CHUNK_BYTES) throw new Error('文件分片大小无效');
           chunk = message; return;
         }
-        reply(await upload.receive(message));
+        reply(await upload.receive(message, { relayed: fileRelay }));
         if (message.type === 'commit') uploadEntry.committed = true;
         if (message.type === 'cancel') {
           await expireUpload(uploadId, uploadEntry);

package/dist/src/managed-app-server.mjs

@@ -35,7 +35,8 @@ export function availableManagedPort() {
 export class ManagedAppServer extends EventEmitter {
   constructor({ stateRoot, host, environment = process.env, available = managedPortAvailable,
     wait = delay, timeout = 30_000, now = Date.now, client = new SharedAppServer(`ws://127.0.0.1:${defaultManagedPort}`),
-    selectPort = availableManagedPort, configureEnvironment = configureManagedEnvironment, resolveRuntime = resolveCodexRuntime }) {
+    selectPort = availableManagedPort, configureEnvironment = configureManagedEnvironment, resolveRuntime = resolveCodexRuntime,
+    diagnose = () => {} }) {
     super();
     this.stateRoot = stateRoot;
     this.host = host;
@@ -44,6 +45,7 @@ export class ManagedAppServer extends EventEmitter {
     this.selectPort = selectPort;
     this.configureEnvironment = configureEnvironment;
     this.resolveRuntime = resolveRuntime;
+    this.diagnose = diagnose;
     this.wait = wait;
     this.timeout = timeout;
     this.now = now;
@@ -111,6 +113,13 @@ export class ManagedAppServer extends EventEmitter {
         throw new Error(`运行中的 Codex 内核目录已被移除或缺少配套 code-mode-host：${actual.executable}；请确认重启内核。`);
       }
       if (!actual) {
+        const selection = { reason: this.restarting ? 'confirmed-restart' : record?.pid ? 'previous-process-exited' : 'no-running-kernel',
+          version: runtime.version, source: runtime.source, executable: runtime.executable };
+        const selectionSignature = JSON.stringify(selection);
+        if (selectionSignature !== this.diagnosticSelectionSignature) {
+          this.diagnosticSelectionSignature = selectionSignature;
+          this.diagnose('kernel-start-selected', selection);
+        }
         fs.rmSync(this.pendingPath, { force: true });
         const childEnvironment = { ...this.environment, CODEX_HOME: runtime.codexHome, RUST_LOG: 'warn' };
         for (const key of ['CODEX_APP_SERVER_WS_URL', 'CODEX_APP_SERVER_FORCE_CLI', 'CODEX_APP_TOOLS_PIPE_PATH']) delete childEnvironment[key];
@@ -128,6 +137,8 @@ export class ManagedAppServer extends EventEmitter {
           writeRecord(this.pendingPath, { phase: 'spawning', url, executable: runtime.executable, startedAt: new Date().toISOString() });
           const pid = await this.host.start(runtime.executable, ['app-server', '--listen', url], childEnvironment,
             [path.join(this.stateRoot, 'managed-app-server.stdout.log'), path.join(this.stateRoot, 'managed-app-server.stderr.log')]);
+          this.diagnose('kernel-spawned', { pid, executable: runtime.executable, selectedVersion: runtime.version,
+            source: runtime.source, attempt: attempt + 1 });
           const started = await this.host.process(pid);
           if (!started) {
             fs.rmSync(this.pendingPath, { force: true });
@@ -355,6 +366,20 @@ export class ManagedAppServer extends EventEmitter {
     const changed = JSON.stringify(value) !== JSON.stringify(this.state);
     this.state = value;
     if (changed) this.emit('state', this.snapshot());
+    // Retry transitions remain visible to health consumers; diagnostic output
+    // records a repeated failure once until it changes or the kernel recovers.
+    if (value.state === 'starting' && this.diagnosticState?.state === 'failed') return;
+    const details = { state: value.state, ready: value.ready, pid: value.pid ?? null, created: value.created ?? null,
+      version: value.ready && this.client.ready ? this.client.serverVersion || null : null,
+      executable: value.executable || null, selectedVersion: value.selectedVersion || null,
+      preferredExecutable: value.preferredExecutable || null, source: value.source || null,
+      updatePending: value.updatePending === true, error: value.error || null };
+    const signature = JSON.stringify(details);
+    if (signature === this.diagnosticStateSignature) return;
+    this.diagnosticStateSignature = signature;
+    this.diagnosticState = details;
+    if (value.ready) this.diagnosticSelectionSignature = null;
+    this.diagnose('kernel-state', { ...details, retryAt: value.retryAt || null });
   }
 
   close() {