@ycodium-ai/plugin-devices 0.2.3510 → 0.2.3566

package/dist/environment-helper.mjs

@@ -0,0 +1,239 @@
+// 独立 host:node 助手，只处理指定 SDK 或 Apple 官方工具，不修改系统设置。
+import * as NodeFS from "node:fs";
+import * as NodePath from "node:path";
+import * as NodeChildProcess from "node:child_process";
+import * as NodeNet from "node:net";
+import * as NodeModule from "node:module";
+// oxlint-disable-next-line ycodium/no-global-process-runtime -- 独立子进程助手，没有宿主 Effect 上下文。
+const hostPlatform = process.platform;
+
+/** 以交付文件和实际装载结果判定；原生助手可由对应平台的构建阶段提供，不能在用户机器现编。 */
+export function probeIosTools(runtimeDir) {
+  if (hostPlatform !== "darwin" || !runtimeDir) return { available: false };
+  const dist = NodePath.join(
+    runtimeDir,
+    "node_modules",
+    "expo-device-hub",
+    "vendor",
+    "serve-sim",
+    "dist",
+  );
+  try {
+    for (const file of [
+      "serve-sim.js",
+      "bin/LiveKitWebRTC.framework/LiveKitWebRTC",
+      "simax/serve-sim-ax-settings",
+      "simcam/serve-sim-camera-helper",
+      "simcam/libSimCameraInjector.dylib",
+      "capability-loader/libServeSimCapabilityLoader.dylib",
+    ])
+      NodeFS.accessSync(NodePath.join(dist, file), NodeFS.constants.R_OK);
+    NodeModule.createRequire(import.meta.url)(
+      NodePath.join(dist, "native", "serve-sim-native.node"),
+    );
+    return { available: true };
+  } catch {
+    return { available: false };
+  }
+}
+
+export function privateAndroidEnvironment(root, sdk, env = process.env) {
+  const user = NodePath.join(root, "user");
+  return {
+    ...env,
+    ANDROID_HOME: sdk,
+    ANDROID_SDK_ROOT: sdk,
+    ANDROID_USER_HOME: user,
+    ANDROID_EMULATOR_HOME: user,
+    ANDROID_AVD_HOME: NodePath.join(root, "avd"),
+    ANDROID_SDK_HOME: root,
+    XDG_CONFIG_HOME: NodePath.join(root, "config"),
+    XDG_CACHE_HOME: NodePath.join(root, "cache"),
+    TMPDIR: NodePath.join(root, "temp"),
+    TMP: NodePath.join(root, "temp"),
+    TEMP: NodePath.join(root, "temp"),
+  };
+}
+
+/** adb 自身会结束协议版本不符的服务器；在调用客户端之前只读握手，发现冲突就让用户处理。 */
+export async function guardAdbServer(
+  sdk,
+  env = process.env,
+  versionProbe = () =>
+    run(NodePath.join(sdk, "platform-tools", hostPlatform === "win32" ? "adb.exe" : "adb"), [
+      "version",
+    ]),
+) {
+  const version = versionProbe();
+  const protocol = /Android Debug Bridge version \d+\.\d+\.(\d+)/.exec(version.stdout)?.[1];
+  if (version.code !== 0 || !protocol) throw new Error("The selected Android SDK adb cannot run");
+  const specified = env.ADB_SERVER_SOCKET;
+  const endpoint = specified ? /^tcp:([^:]+):(\d+)$/.exec(specified) : null;
+  if (specified && !endpoint)
+    throw new Error(
+      "The configured ADB server socket cannot be checked safely; use a TCP server socket",
+    );
+  const host = endpoint?.[1] ?? "127.0.0.1";
+  const port = Number(endpoint?.[2] ?? env.ANDROID_ADB_SERVER_PORT ?? "5037");
+  await new Promise((resolve, reject) => {
+    const socket = NodeNet.createConnection({ host, port });
+    let received = Buffer.alloc(0);
+    const finish = (error) => {
+      socket.destroy();
+      if (error) reject(error);
+      else resolve();
+    };
+    socket.setTimeout(3000, () =>
+      finish(new Error("The existing ADB server did not answer; Ycodium will not restart it")),
+    );
+    socket.on("error", (error) =>
+      error.code === "ECONNREFUSED"
+        ? finish()
+        : finish(new Error("The configured ADB server could not be checked")),
+    );
+    socket.on("connect", () => socket.write("000chost:version"));
+    socket.on("data", (data) => {
+      received = Buffer.concat([received, data]);
+      if (received.length < 8) return;
+      const length = Number.parseInt(received.subarray(4, 8).toString(), 16);
+      if (received.subarray(0, 4).toString() !== "OKAY" || !Number.isFinite(length) || length > 64)
+        return finish(new Error("The existing ADB server returned an incompatible protocol"));
+      if (received.length < 8 + length) return;
+      const server = Number.parseInt(received.subarray(8, 8 + length).toString(), 16);
+      finish(
+        server === Number(protocol)
+          ? undefined
+          : new Error(
+              "An incompatible ADB server is already running. Ycodium will not stop or restart it; select the matching SDK or manage that server yourself",
+            ),
+      );
+    });
+    socket.on("end", () => {
+      if (received.length < 12)
+        finish(new Error("The existing ADB server closed before reporting its version"));
+    });
+  });
+}
+
+/** 仅私有 SDK 的属主标记允许重定向 AVD；外部 SDK 保留用户自己的 AVD 查找路径。 */
+export function applyPrivateAndroidEnvironment(sdk, env = process.env) {
+  if (!sdk) return false;
+  const root = NodePath.dirname(sdk);
+  try {
+    const record = JSON.parse(
+      NodeFS.readFileSync(NodePath.join(root, ".ycodium-devices-environment.json"), "utf8"),
+    );
+    if (
+      record.owner !== "ycodium-devices" ||
+      NodePath.resolve(record.sdk) !== NodePath.resolve(sdk)
+    )
+      return false;
+    Object.assign(env, privateAndroidEnvironment(root, sdk, env));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function run(command, args, timeout = 15000) {
+  const result = NodeChildProcess.spawnSync(command, args, {
+    encoding: "utf8",
+    timeout,
+    windowsHide: true,
+  });
+  return {
+    code: result.status ?? 127,
+    stdout: result.stdout ?? "",
+    stderr: result.stderr ?? result.error?.message ?? "",
+  };
+}
+export function probeXcode() {
+  if (hostPlatform !== "darwin")
+    return { ready: false, reasonCode: "ios-needs-macos", runtimes: [] };
+  const selected = run("xcode-select", ["--print-path"]);
+  const directory = selected.stdout.trim();
+  if (selected.code !== 0 || !directory.includes(".app/Contents/Developer"))
+    return { ready: false, reasonCode: "xcode-missing", runtimes: [] };
+  if (run("xcodebuild", ["-checkFirstLaunchStatus"]).code !== 0)
+    return { ready: false, reasonCode: "xcode-incomplete", runtimes: [] };
+  const result = run("xcrun", ["simctl", "list", "runtimes", "--json"]);
+  try {
+    const runtimes = JSON.parse(result.stdout).runtimes.filter(
+      (item) => item.isAvailable && item.identifier?.includes("iOS"),
+    );
+    return {
+      ready: true,
+      directory,
+      runtimes,
+      reasonCode: runtimes.length ? undefined : "ios-runtime-missing",
+    };
+  } catch {
+    return { ready: false, reasonCode: "xcode-incomplete", runtimes: [] };
+  }
+}
+export function checkAcceleration(sdk) {
+  const command = NodePath.join(
+    sdk,
+    "emulator",
+    hostPlatform === "win32" ? "emulator.exe" : "emulator",
+  );
+  return run(command, ["-accel-check"]);
+}
+
+/** HypervisorPresent 说明当前 hypervisor 是否运行，不代表 CPU 或固件的虚拟化开关。 */
+export function windowsAccelerationStatus(facts) {
+  if (!facts || typeof facts !== "object")
+    return { available: false, reasonCode: "virtualization-probe-failed" };
+  const bool = (value) => (typeof value === "boolean" ? value : null);
+  const state = {
+    hardwareSupported: bool(facts.hardwareSupported),
+    firmwareEnabled: bool(facts.firmwareEnabled),
+    slatSupported: bool(facts.slatSupported),
+    hypervisorPresent: bool(facts.hypervisorPresent),
+    whpxEnabled:
+      facts.whpxInstallState === 1
+        ? true
+        : facts.whpxInstallState === 2 || facts.whpxInstallState === 3
+          ? false
+          : null,
+  };
+  if (state.hypervisorPresent === true && state.whpxEnabled === true)
+    return { ...state, available: true };
+  if (state.hypervisorPresent === false && state.firmwareEnabled === false)
+    return { ...state, available: false, reasonCode: "virtualization-firmware-disabled" };
+  if (state.whpxEnabled === false)
+    return { ...state, available: false, reasonCode: "windows-hypervisor-platform-disabled" };
+  if (state.whpxEnabled === true && state.hypervisorPresent === false)
+    return { ...state, available: false, reasonCode: "windows-hypervisor-not-running" };
+  return { ...state, available: false, reasonCode: "virtualization-probe-failed" };
+}
+
+export function probeWindowsAcceleration(execute = run) {
+  const result = execute("powershell.exe", [
+    "-NoProfile",
+    "-NonInteractive",
+    "-Command",
+    "$ErrorActionPreference = 'Stop'; $cpu = @(Get-CimInstance Win32_Processor)[0]; $machine = Get-CimInstance Win32_ComputerSystem; $feature = Get-CimInstance Win32_OptionalFeature -Filter \"Name='HypervisorPlatform'\"; @{ hardwareSupported = $cpu.VMMonitorModeExtensions; firmwareEnabled = $cpu.VirtualizationFirmwareEnabled; slatSupported = $cpu.SecondLevelAddressTranslationExtensions; hypervisorPresent = $machine.HypervisorPresent; whpxInstallState = $feature.InstallState } | ConvertTo-Json -Compress",
+  ]);
+  if (result.code !== 0) return windowsAccelerationStatus(null);
+  try {
+    return windowsAccelerationStatus(JSON.parse(result.stdout));
+  } catch {
+    return windowsAccelerationStatus(null);
+  }
+}
+
+export function probeVirtualization() {
+  if (hostPlatform === "darwin")
+    return { available: run("sysctl", ["-n", "kern.hv_support"]).stdout.trim() === "1" };
+  if (hostPlatform === "linux") {
+    try {
+      NodeFS.accessSync("/dev/kvm", NodeFS.constants.R_OK | NodeFS.constants.W_OK);
+      return { available: true };
+    } catch {
+      return { available: false };
+    }
+  }
+  if (hostPlatform === "win32") return probeWindowsAcceleration();
+  return { available: false };
+}

package/dist/helper.mjs

@@ -2,8 +2,7 @@
 // 跑在服务器自己的 Node 上（桌面版是带 ELECTRON_RUN_AS_NODE 的 Electron）。
 //
 // 宿主不许插件给子进程改 PATH，而 hub 在 Windows 上只靠 PATH 找模拟器、agent-device 的守护进程
-// 也要 adb，npm 的安装脚本要在 PATH 上找 node。所以这几类子进程都经这里：在这个进程里补好 PATH，
-// 再在同一进程里装载目标脚本（`node`、`npm` 模式）或起目标程序（`run` 模式）。插件停用时宿主杀的
+// 也要 adb。这几类子进程经这里补好 PATH，再装载随包入口（`node` 模式）或起目标程序（`run` 模式）。插件停用时宿主杀的
 // 是这个进程，装载进来的目标脚本也就跟着没了。
 //
 // 只用 node 内置模块；输出给插件解析的一律是单行 JSON。
@@ -21,23 +20,33 @@ import * as NodeDiagnosticsChannel from "node:diagnostics_channel";
 import * as NodeFS from "node:fs";
 import * as NodePath from "node:path";
 import * as NodeURL from "node:url";
-import * as NodeZlib from "node:zlib";
+
+import {
+  applyPrivateAndroidEnvironment,
+  probeXcode,
+  probeVirtualization,
+  checkAcceleration,
+  guardAdbServer,
+  probeIosTools,
+} from "./environment-helper.mjs";
 
 // oxlint-disable-next-line ycodium/no-global-process-runtime -- 独立子进程脚本，没有 Effect 运行时可注入。
 const hostPlatform = process.platform;
+// oxlint-disable-next-line ycodium/no-global-process-runtime -- 独立子进程助手，没有宿主 Effect 上下文。
+const hostArch = process.arch;
 const isWindows = hostPlatform === "win32";
 const exe = (name) => (isWindows ? `${name}.exe` : name);
 
 /** `--sdk x --shim y -- rest…`：选项在 `--` 之前，其余原样交给目标。其它环境变量由插件经 spawn 的 env 给。 */
 function parseArgs(argv) {
-  const options = { sdk: null, shim: null, rest: [] };
+  const options = { sdk: null, shim: null, tools: null, rest: [] };
   for (let index = 0; index < argv.length; index += 1) {
     const value = argv[index];
     if (value === "--") {
       options.rest = argv.slice(index + 1);
       break;
     }
-    if (value === "--sdk" || value === "--shim") {
+    if (value === "--sdk" || value === "--shim" || value === "--tools") {
       options[value.slice(2)] = argv[index + 1] || null;
       index += 1;
     }
@@ -145,103 +154,6 @@ function observeEmulatorLaunches(shim) {
   });
 }
 
-/**
- * 在 `directory` 里放一个叫 node 的垫片，指向跑这个助手的可执行文件。npm 的安装脚本
- * （比如原生依赖的预编译下载器）按名字在 PATH 上找 node，而这台机器的 PATH 上可能根本没有。
- * ELECTRON_RUN_AS_NODE 已经在本进程环境里（宿主起 host:node 时补的），垫片起的进程照样继承。
- */
-function writeNodeShim(directory) {
-  NodeFS.mkdirSync(directory, { recursive: true });
-  if (isWindows) {
-    NodeFS.writeFileSync(NodePath.join(directory, "node.cmd"), `@"${process.execPath}" %*\r\n`);
-  } else {
-    const file = NodePath.join(directory, "node");
-    NodeFS.writeFileSync(
-      file,
-      `#!/bin/sh\nexec '${process.execPath.replaceAll("'", `'"'"'`)}' "$@"\n`,
-    );
-    NodeFS.chmodSync(file, 0o755);
-  }
-}
-
-/** 读 tar 头里的一个八进制数字段。 */
-function octal(block, start, length) {
-  const text = block
-    .subarray(start, start + length)
-    .toString("utf8")
-    .replaceAll("\0", "")
-    .trim();
-  return text.length === 0 ? 0 : Number.parseInt(text, 8);
-}
-
-function text(block, start, length) {
-  const raw = block.subarray(start, start + length);
-  const end = raw.indexOf(0);
-  return raw.subarray(0, end === -1 ? raw.length : end).toString("utf8");
-}
-
-/** PAX 扩展头里的 `path=`；其余键这里用不到。 */
-function paxPath(body) {
-  let offset = 0;
-  while (offset < body.length) {
-    const space = body.indexOf(0x20, offset);
-    if (space === -1) break;
-    const length = Number.parseInt(body.subarray(offset, space).toString("utf8"), 10);
-    if (!Number.isFinite(length) || length <= 0) break;
-    const record = body.subarray(space + 1, offset + length - 1).toString("utf8");
-    if (record.startsWith("path=")) return record.slice("path=".length);
-    offset += length;
-  }
-  return null;
-}
-
-/**
- * 解一个 npm 包的 .tgz 到 `destination`，去掉包内统一的第一层目录（npm 包是 `package/`）。
- * 只认普通文件和目录；条目路径解析后必须仍在 `destination` 内。
- */
-function extractTarball(file, destination) {
-  const archive = NodeZlib.gunzipSync(NodeFS.readFileSync(file));
-  const root = NodePath.resolve(destination);
-  let offset = 0;
-  let pendingName = null;
-  let count = 0;
-  while (offset + 512 <= archive.length) {
-    const block = archive.subarray(offset, offset + 512);
-    if (block.every((byte) => byte === 0)) break;
-    const size = octal(block, 124, 12);
-    const type = String.fromCharCode(block[156] || 0x30);
-    const bodyStart = offset + 512;
-    const body = archive.subarray(bodyStart, bodyStart + size);
-    offset = bodyStart + Math.ceil(size / 512) * 512;
-    if (type === "x") {
-      pendingName = paxPath(body);
-      continue;
-    }
-    if (type === "L") {
-      pendingName = text(body, 0, body.length);
-      continue;
-    }
-    if (type === "g") continue;
-    const prefix = text(block, 345, 155);
-    const name = pendingName ?? (prefix ? `${prefix}/${text(block, 0, 100)}` : text(block, 0, 100));
-    pendingName = null;
-    const relative = name.split("/").slice(1).join("/");
-    if (relative.length === 0) continue;
-    const target = NodePath.resolve(root, relative);
-    if (target !== root && !target.startsWith(root + NodePath.sep)) {
-      throw new Error(`tar entry escapes the destination: ${name}`);
-    }
-    if (type === "5") {
-      NodeFS.mkdirSync(target, { recursive: true });
-    } else if (type === "0" || type === "\0" || type === "7") {
-      NodeFS.mkdirSync(NodePath.dirname(target), { recursive: true });
-      NodeFS.writeFileSync(target, body, { mode: octal(block, 100, 8) & 0o777 || 0o644 });
-      count += 1;
-    }
-  }
-  return count;
-}
-
 function exists(file) {
   try {
     NodeFS.accessSync(file);
@@ -294,20 +206,13 @@ function probeAndroidSdk(override) {
   return { root: null, adb: false, emulator: false, avdmanager: false, legacyAvdmanager: false };
 }
 
-function hasXcrun() {
-  if (hostPlatform !== "darwin") return false;
-  const result = NodeChildProcess.spawnSync("xcrun", ["--version"], {
-    stdio: "ignore",
-    timeout: 10_000,
-  });
-  return result.status === 0;
-}
-
 /** 把 SDK 的两个目录排到 PATH 最前，并设好 ANDROID_HOME。 */
 function applySdkEnvironment(sdk) {
   if (!sdk) return;
   prependPath([NodePath.join(sdk, "platform-tools"), NodePath.join(sdk, "emulator")]);
   process.env.ANDROID_HOME = sdk;
+  process.env.ANDROID_SDK_ROOT = sdk;
+  applyPrivateAndroidEnvironment(sdk);
 }
 
 /** 在本进程里装载一个 Node 入口脚本，就像 `node entry …args` 起的一样。 */
@@ -319,23 +224,75 @@ async function loadEntry(entry, args) {
 async function main() {
   const [mode, ...rest] = process.argv.slice(2);
   const options = parseArgs(rest);
+  if (mode === "environment-probe") {
+    process.stdout.write(
+      `${JSON.stringify({ platform: hostPlatform, arch: hostArch, iosToolsAvailable: probeIosTools(options.tools).available, virtualization: probeVirtualization(), xcode: probeXcode(), ...(options.sdk ? { acceleration: checkAcceleration(options.sdk) } : {}) })}\n`,
+    );
+    return;
+  }
   if (mode === "probe") {
+    const android = probeAndroidSdk(options.sdk);
+    applySdkEnvironment(android.root);
+    const androidValidated =
+      android.adb &&
+      android.emulator &&
+      [
+        [NodePath.join(android.root, "platform-tools", exe("adb")), ["version"]],
+        [NodePath.join(android.root, "emulator", exe("emulator")), ["-version"]],
+      ].every(
+        ([program, argv]) =>
+          NodeChildProcess.spawnSync(program, argv, {
+            stdio: "ignore",
+            timeout: 10000,
+            windowsHide: true,
+          }).status === 0,
+      );
+    const xcode = probeXcode();
     process.stdout.write(
       `${JSON.stringify({
         node: process.version,
         execPath: process.execPath,
         electron: process.versions.electron ?? null,
         platform: hostPlatform,
-        android: probeAndroidSdk(options.sdk),
-        xcrun: hasXcrun(),
+        arch: hostArch,
+        android,
+        androidValidated,
+        xcrun: xcode.ready,
+        iosRuntimeAvailable: xcode.runtimes.length > 0,
+        iosToolsAvailable: probeIosTools(options.tools).available,
       })}\n`,
     );
     return;
   }
+  if (mode === "validate-android") {
+    if (!options.sdk) throw new Error("SDK directory is required");
+    applySdkEnvironment(options.sdk);
+    const commands = [
+      [NodePath.join(options.sdk, "platform-tools", exe("adb")), ["version"]],
+      [NodePath.join(options.sdk, "emulator", exe("emulator")), ["-version"]],
+      [NodePath.join(options.sdk, "emulator", exe("emulator")), ["-list-avds"]],
+      [NodePath.join(options.sdk, "emulator", exe("emulator")), ["-accel-check"]],
+    ];
+    for (const [program, argv] of commands) {
+      const result = NodeChildProcess.spawnSync(program, argv, {
+        encoding: "utf8",
+        timeout: 15000,
+        windowsHide: true,
+      });
+      if (
+        result.status !== 0 ||
+        (argv[0] === "-list-avds" && !result.stdout.includes("Ycodium_API_35"))
+      )
+        throw new Error(`Private SDK validation failed: ${argv[0]}`);
+    }
+    process.stdout.write(`${JSON.stringify({ validated: true })}\n`);
+    return;
+  }
   if (mode === "node") {
     const [entry, ...args] = options.rest;
     if (!entry) throw new Error("helper node: missing entry script");
     applySdkEnvironment(options.sdk);
+    if (options.sdk) await guardAdbServer(options.sdk);
     const shim = prepareBreakawayShim({
       platform: hostPlatform,
       directory: options.shim,
@@ -345,24 +302,12 @@ async function main() {
     await loadEntry(entry, args);
     return;
   }
-  if (mode === "npm") {
-    const [npmCli, ...args] = options.rest;
-    if (!npmCli || !options.shim) throw new Error("helper npm: missing npm-cli.js or --shim");
-    writeNodeShim(options.shim);
-    prependPath([options.shim]);
-    await loadEntry(npmCli, args);
-    return;
-  }
-  if (mode === "extract") {
-    const [file, destination] = options.rest;
-    if (!file || !destination) throw new Error("helper extract: missing archive or destination");
-    process.stdout.write(`${JSON.stringify({ files: extractTarball(file, destination) })}\n`);
-    return;
-  }
   if (mode === "run") {
     const [command, ...args] = options.rest;
     if (!command) throw new Error("helper run: missing command");
     applySdkEnvironment(options.sdk);
+    if (options.sdk && command === "adb" && args[0] !== "version")
+      await guardAdbServer(options.sdk);
     const resolved =
       command === "emulator" && options.sdk
         ? NodePath.join(options.sdk, "emulator", exe("emulator"))
@@ -390,7 +335,11 @@ async function main() {
   throw new Error(`helper: unknown mode ${String(mode)}`);
 }
 
-if (process.argv[1] && NodePath.resolve(process.argv[1]) === NodeURL.fileURLToPath(import.meta.url))
+if (
+  process.argv[1] &&
+  NodeFS.realpathSync(process.argv[1]) ===
+    NodeFS.realpathSync(NodeURL.fileURLToPath(import.meta.url))
+)
   main().catch((error) => {
     process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
     process.exitCode = 1;