agentroam 0.2.0-preview.16 → 0.2.0-preview.18

package/dist/platform.test.js

@@ -2,15 +2,15 @@ import { describe, expect, it } from "vitest";
 import { detectPlatform, detectPlatformTarget } from "./platform.js";
 describe("detectPlatform", () => {
     it("maps supported targets", () => {
-        expect(detectPlatform("darwin", "arm64", "22.1.0")).toBe("darwin-arm64");
-        expect(detectPlatform("win32", "x64", "22.1.0")).toBe("windows-amd64");
+        expect(detectPlatform("darwin", "arm64", "22.22.0")).toBe("darwin-arm64");
+        expect(detectPlatform("win32", "x64", "25.8.0")).toBe("windows-amd64");
     });
     it("detects a target before Node version validation", () => {
         expect(detectPlatformTarget("darwin", "arm64")).toBe("darwin-arm64");
         expect(detectPlatformTarget("win32", "x64")).toBe("windows-amd64");
     });
     it("rejects unsupported versions", () => {
-        expect(() => detectPlatform("darwin", "arm64", "23.0.0")).toThrow("Node.js 22");
+        expect(() => detectPlatform("darwin", "arm64", "22.21.9")).toThrow("Node.js >=22.22.0");
     });
     it("rejects unsupported platforms", () => {
         expect(() => detectPlatformTarget("linux", "x64")).toThrow("unsupported platform");

package/dist/runtime-manager.js

@@ -18,7 +18,7 @@ export class RuntimeManager {
         this.report = report;
         this.opencodeResolver = opencodeResolver;
     }
-    async start(options, pairing, target) {
+    async start(options, target) {
         const port = await findAvailablePort(options.port);
         const dataDir = resolve(options.dataDir);
         await Promise.all(["data", "bin", "cache", "logs"].map((name) => mkdir(resolve(dataDir, name), { recursive: true })));
@@ -27,19 +27,17 @@ export class RuntimeManager {
         const { runtimeRoot } = resolvePlatformRuntime(target);
         await repairNativeRuntimePermissions(runtimeRoot);
         const gateway = resolve(runtimeRoot, "ws-server.mjs");
-        const child = this.supervisor.spawn(process.execPath, [gateway], {
+        const child = this.supervisor.spawn(process.execPath, [gateway, ...(options.testNoPairing ? ["--test-no-pairing"] : [])], {
             cwd: runtimeRoot,
             env: {
                 ...childEnvironment,
                 NODE_ENV: "production",
                 NEXT_DIST_DIR: ".next",
                 PORT: String(port),
-                HOST: "127.0.0.1",
+                HOST: options.localOnly ? "0.0.0.0" : "127.0.0.1",
                 AGENT_DATA_DIR: resolve(dataDir, "data"),
                 AGENT_WEB_ROOTS: options.roots.join(delimiter),
                 AGENT_TRUST_TUNNEL_PROXY: "1",
-                AGENT_PAIRING_HASH: pairing?.hashHex || "",
-                AGENT_PAIRING_EXPIRES_AT: pairing?.expiresAt || "",
                 AGENTROAM_VERSION: resolvePlatformRuntime(target).manifest.packageVersion,
                 AGENTROAM_DATA_DIR: dataDir,
                 AGENTROAM_CLI_PATH: fileURLToPath(new URL("../bin/agentroam.mjs", import.meta.url)),

package/dist/service/service-command.js

@@ -1,9 +1,11 @@
 import { delimiter, dirname, isAbsolute, resolve, win32 } from "node:path";
 import { resolveCodexRuntime } from "../codex-runtime-manager.js";
 import { detectPlatform } from "../platform.js";
+import { printPairingCode } from "../device-pairing.js";
 import { renderQr } from "../qr.js";
 import { MacLaunchAgent } from "./macos-launch-agent.js";
 import { WindowsTaskService } from "./windows-task-service.js";
+import { assertSupportedNodeVersion } from "../../bin/runtime-policy.mjs";
 export async function runServiceCommand(options, context) {
     const platform = context.platform ?? process.platform;
     const log = context.log ?? console.log;
@@ -19,9 +21,7 @@ export async function runServiceCommand(options, context) {
     switch (options.serviceAction) {
         case "install": {
             const nodeVersion = context.nodeVersion ?? process.versions.node;
-            if (Number(nodeVersion.split(".")[0]) !== 22) {
-                throw cliError(`Node.js 22 is required to install the service (current ${nodeVersion})`);
-            }
+            assertSupportedNodeVersion(nodeVersion);
             const now = context.now?.() ?? new Date();
             const environment = context.environment ?? process.env;
             const environmentPath = buildServiceEnvironmentPath(context.nodePath, environment.PATH ?? environment.Path, platform);
@@ -57,10 +57,14 @@ export async function runServiceCommand(options, context) {
             };
             const { definition, state } = await controller.install(config);
             log(`✓ AgentRoam service installed: ${definition}`);
-            if (state?.status === "ready" && state.accessUrl)
-                await logAccessUrl(state.accessUrl);
+            if (state?.status === "ready" && state.accessUrl) {
+                log(`Open: ${state.accessUrl}`);
+                if (state.localUrl)
+                    log(`电脑本机：${state.localUrl.replace(/\/$/, "")}/web（配对后可进行远程授权）`);
+                await (context.pairingPrinter ?? printPairingCode)(options.dataDir, log, { accessUrl: state.accessUrl, qr: options.qr, interactive: stdoutIsTTY });
+            }
             else
-                log("Service is starting. Run `agentroam service url` shortly.");
+                log("Service is starting. Run `agentroam service url` and `agentroam pair` shortly.");
             return;
         }
         case "start": {

package/dist/service/service-command.test.js

@@ -2,6 +2,26 @@ import { resolve } from "node:path";
 import { describe, expect, it, vi } from "vitest";
 import { buildServiceEnvironmentPath, runServiceCommand } from "./service-command.js";
 describe("runServiceCommand", () => {
+    it.each(["22.22.0", "24.0.0", "25.8.0", "26.0.0"])("keeps the selected Node %s when installing a service", async (nodeVersion) => {
+        const install = vi.fn(async () => ({ definition: "/test/service.plist" }));
+        const nodePath = `/runtimes/node-${nodeVersion}/bin/node`;
+        const codexResolver = vi.fn(async () => ({ executable: "/tools/codex", version: "test", source: "global" }));
+        await runServiceCommand(options("install"), {
+            platform: "darwin", arch: "arm64", nodeVersion, nodePath,
+            cliPath: "/agentroam.mjs", version: "test", environment: { PATH: "/usr/bin" },
+            codexResolver, controller: controller({ install }), log: vi.fn(),
+        });
+        expect(install).toHaveBeenCalledWith(expect.objectContaining({ nodePath }));
+        expect(codexResolver).toHaveBeenCalledWith(expect.objectContaining({ nodeExecutable: nodePath }));
+    });
+    it("rejects a below-minimum service runtime before installation", async () => {
+        const install = vi.fn();
+        await expect(runServiceCommand(options("install"), {
+            platform: "darwin", nodePath: "/node", nodeVersion: "22.21.9", cliPath: "/agentroam.mjs",
+            version: "test", controller: controller({ install }),
+        })).rejects.toThrow("Node.js >=22.22.0");
+        expect(install).not.toHaveBeenCalled();
+    });
     it("installs the service using absolute runtime context and parsed start options", async () => {
         const install = vi.fn(async (config) => ({
             paths: { plistPath: "/Users/test/Library/LaunchAgents/com.agentroam.service.plist" },
@@ -20,6 +40,7 @@ describe("runServiceCommand", () => {
             now: () => new Date("2026-09-03T00:00:00.000Z"),
             log,
             controller: controller({ install }),
+            pairingPrinter: vi.fn(async () => { }),
         });
         expect(install).toHaveBeenCalledWith(expect.objectContaining({
             nodePath: "/node",

package/dist/tunnel/public-readiness.js

@@ -22,7 +22,7 @@ export async function waitForPublicReadiness(publicUrl, options = {}) {
             try {
                 const response = await fetchImpl(endpoint, {
                     cache: "no-store",
-                    headers: { "user-agent": "agentroam-readiness/0.2.0-preview.16" },
+                    headers: { "user-agent": "agentroam-readiness/0.2.0-preview.18" },
                     signal: options.signal,
                 });
                 if (response.ok) {

package/install/README.md

@@ -1,11 +1,11 @@
 # AgentRoam bootstrap installers
 
-These versioned installers support macOS Apple Silicon and Windows x64. They reuse a visible Node.js 22 installation when available. Otherwise they install the verified private Node.js `22.22.0` runtime under the AgentRoam data directory. They then register and start the current-user AgentRoam background service. They never modify, replace, or uninstall system Node.js or global power settings.
+These versioned installers support macOS Apple Silicon and Windows x64. They reuse the active Node.js installation when it meets `>=22.22.0`, with no upper version bound. Otherwise they search NVM for the highest compatible version, then fall back to the verified private Node.js `22.22.0` runtime under the AgentRoam data directory. They then register and start the current-user AgentRoam background service. They never modify, replace, or uninstall system Node.js or global power settings.
 
 ## macOS Apple Silicon
 
 ```sh
-curl -fsSL https://gitee.com/caoqu/team-agent/releases/download/v0.2.0-preview.16/install-agentroam.sh | sh
+curl -fsSL https://gitee.com/caoqu/team-agent/raw/master/packages/cli/install/install-agentroam.sh | sh
 ```
 
 The command installs the wrapper at `~/.local/bin/agentroam`. If that directory is not already in `PATH`, the installer prints the required shell setting without editing shell profiles.
@@ -13,14 +13,14 @@ The command installs the wrapper at `~/.local/bin/agentroam`. If that directory
 ## Windows x64
 
 ```powershell
-irm https://gitee.com/caoqu/team-agent/releases/download/v0.2.0-preview.16/install-agentroam.ps1 | iex
+irm https://gitee.com/caoqu/team-agent/raw/master/packages/cli/install/install-agentroam.ps1 | iex
 ```
 
 The command installs `%USERPROFILE%\.agentroam\bin\agentroam.cmd` and adds only that user directory to the user-level `PATH`. It does not require administrator access or change the machine-level `PATH`.
 
 ## Service behavior
 
-Run the installer from the project directory AgentRoam should expose, or set `AGENTROAM_ROOT` explicitly. An installer launched from the home directory without an explicit root stops before service registration so it cannot expose the entire home directory accidentally.
+Run the installer from the project directory AgentRoam should expose, or set `AGENTROAM_ROOT` explicitly. The current directory is accepted even when it is the home directory.
 
 The installer registers and starts the service after Node, CLI, and `doctor` validation. When a previous AgentRoam user service is installed, the new CLI stops it, waits for its process and platform registration to exit, removes only the old service registration, and then registers the replacement. Session data, pairing state, managed runtimes, and logs remain in the data directory. While foreground AgentRoam or the service is running, it prevents idle system sleep but still allows the display to dim and turn off. Lid close, explicit sleep, hibernation, shutdown, and low-battery forced sleep remain controlled by the operating system.
 
@@ -40,8 +40,16 @@ agentroam service uninstall
 
 ## Data and updates
 
-Set `AGENTROAM_DATA_DIR` before running either installer to override the default `~/.agentroam` data directory. Node is stored at `<data-dir>/runtimes/node/22.22.0`, and the launcher is stored at `<data-dir>/launcher/0.2.0-preview.16`.
+Set `AGENTROAM_DATA_DIR` before running either installer to override the default `~/.agentroam` data directory. Node is stored at `<data-dir>/runtimes/node/22.22.0`, and the launcher is stored at `<data-dir>/launcher/0.2.0-preview.18`.
 
 Each AgentRoam release pins its own Node patch and installer assets. Updates happen only by running a newer versioned installer or installing a newer AgentRoam release; startup never follows a moving Node.js release channel.
 
 To uninstall the wrapper, remove `~/.local/bin/agentroam` on macOS or `%USERPROFILE%\.agentroam\bin\agentroam.cmd` on Windows. The private runtime, launcher, session data, and configuration under the data directory are preserved until explicitly removed by the user.
+
+## Optional desktop app
+
+After CLI setup succeeds, interactive installers ask whether to download the desktop app. Answer `y` to download the matching macOS DMG or Windows installer into a unique folder under Downloads, verify its release-manifest SHA-256, and show the file. Open it to complete installation. Answer `n` or press Enter to keep using CLI only. Noninteractive runs skip the prompt.
+
+Set `AGENTROAM_INSTALL_DESKTOP=yes` or `no` explicitly for automation. The Shell installer reads `/dev/tty`, so `curl ... | sh` remains interactive. A missing desktop artifact or failed download does not undo CLI installation. This requires a published CLI that includes `bin/desktop-download.mjs` and matching desktop release assets.
+
+On macOS, the desktop app opens its own permission guide on first launch, even before connecting to a service. Screen Recording enables phone viewing; Accessibility enables keyboard and mouse control. Returning from System Settings rechecks permissions and resumes an enabled session. Restart the desktop app if macOS requires it. Desktop live publishing follows the selected CLI service, including its actual port. Windows desktop download is supported, but the current screen/input helper is macOS-only.

package/install/install-agentroam.ps1

@@ -2,7 +2,10 @@ $ErrorActionPreference = "Stop"
 $ProgressPreference = "SilentlyContinue"
 
 $NodeVersion = "22.22.0"
-$AgentRoamVersion = "0.2.0-preview.16"
+$MinimumNodeVersion = "22.22.0"
+# 默认跟随 npm preview 最新标签；可用 $env:AGENTROAM_VERSION 钉精确版本
+$AgentRoamVersionRequest = if ($env:AGENTROAM_VERSION) { $env:AGENTROAM_VERSION } else { "preview" }
+$AgentRoamVersion = "pending-version"
 $NodeArchive = "node-v22.22.0-win-x64.zip"
 $NodeSha256 = "c97fa376d2becdc8863fcd3ca2dd9a83a9f3468ee7ccf7a6d076ec66a645c77a"
 $NodeUrl = "https://nodejs.org/dist/v22.22.0/$NodeArchive"
@@ -20,16 +23,16 @@ $ServiceRootExplicit = -not [string]::IsNullOrWhiteSpace($env:AGENTROAM_ROOT)
 $ServiceRoot = if ($ServiceRootExplicit) { $env:AGENTROAM_ROOT } else { (Get-Location).Path }
 if (-not (Test-Path -LiteralPath $ServiceRoot -PathType Container)) { throw "AgentRoam root is not a directory: $ServiceRoot" }
 $ServiceRoot = [System.IO.Path]::GetFullPath($ServiceRoot).TrimEnd([System.IO.Path]::DirectorySeparatorChar)
-$HomeRoot = [System.IO.Path]::GetFullPath($HOME).TrimEnd([System.IO.Path]::DirectorySeparatorChar)
-if (-not $ServiceRootExplicit -and $ServiceRoot -eq $HomeRoot) {
-  throw "Refusing to expose the entire home directory implicitly; run from a project directory or set AGENTROAM_ROOT explicitly"
-}
-
 New-Item -ItemType Directory -Force -Path $NodeParent, $LauncherParent, $WrapperDir | Out-Null
 
-function Test-Node22([string]$NodeBin) {
+function Test-NodeVersion([string]$VersionText) {
+  if ($VersionText -notmatch '^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$') { return $false }
+  try { return [Version]($VersionText.Split('+')[0]) -ge [Version]$MinimumNodeVersion } catch { return $false }
+}
+
+function Test-SupportedNode([string]$NodeBin) {
   if (-not (Test-Path -LiteralPath $NodeBin -PathType Leaf)) { return $false }
-  try { return (& $NodeBin -p 'process.versions.node.split(".")[0]' 2>$null) -eq "22" } catch { return $false }
+  try { return Test-NodeVersion ((& $NodeBin -p 'process.versions.node' 2>$null).Trim()) } catch { return $false }
 }
 
 function Get-NvmRoots {
@@ -50,15 +53,15 @@ function Get-NvmRoots {
   @($Candidates | Where-Object { $_ -and (Test-Path -LiteralPath $_ -PathType Container) } | Select-Object -Unique)
 }
 
-function Find-NvmNode22 {
+function Find-NvmNode {
   $VersionMatches = foreach ($NvmRoot in (Get-NvmRoots)) {
     foreach ($VersionDirectory in Get-ChildItem -LiteralPath $NvmRoot -Directory -ErrorAction SilentlyContinue) {
       $Candidate = Join-Path $VersionDirectory.FullName "node.exe"
       if (-not (Test-Path -LiteralPath $Candidate -PathType Leaf)) { continue }
       try {
         $VersionText = (& $Candidate -p 'process.versions.node' 2>$null).Trim()
-        $Version = [Version]$VersionText
-        if ($Version.Major -eq 22) {
+        if (Test-NodeVersion $VersionText) {
+          $Version = [Version]($VersionText.Split('+')[0])
           [pscustomobject]@{ Path = $Candidate; Version = $Version }
         }
       } catch {}
@@ -97,10 +100,10 @@ function Enter-InstallLock([string]$Path) {
 
 $SystemNode = Get-Command node.exe -ErrorAction SilentlyContinue
 if ($env:AGENTROAM_BOOTSTRAP_TEST -eq "1" -and $env:AGENTROAM_FORCE_PRIVATE_NODE -eq "1") { $SystemNode = $null }
-if ($SystemNode -and (Test-Node22 $SystemNode.Source)) {
+if ($SystemNode -and (Test-SupportedNode $SystemNode.Source)) {
   $NodeBin = $SystemNode.Source
 } else {
-  $NvmNode = if ($env:AGENTROAM_BOOTSTRAP_TEST -eq "1" -and $env:AGENTROAM_FORCE_PRIVATE_NODE -eq "1") { $null } else { Find-NvmNode22 }
+  $NvmNode = if ($env:AGENTROAM_BOOTSTRAP_TEST -eq "1" -and $env:AGENTROAM_FORCE_PRIVATE_NODE -eq "1") { $null } else { Find-NvmNode }
   if ($NvmNode) {
     $NodeBin = $NvmNode
     Write-Host "Using Node.js $(& $NodeBin --version) from NVM: $NodeBin"
@@ -158,6 +161,17 @@ $NpmCandidates = @(
 $NpmCli = $NpmCandidates | Where-Object { Test-Path -LiteralPath $_ -PathType Leaf } | Select-Object -First 1
 if (-not $NpmCli) { throw "npm CLI was not found beside $NodeBin" }
 
+# 解析 dist-tag → 精确版本（安装最总是最新发布）
+if ($AgentRoamVersionRequest -notmatch '\d$') {
+    $Resolved = (& $NodeBin $NpmCli view "agentroam@$AgentRoamVersionRequest" version --registry $NpmRegistry 2>$null | Select-Object -Last 1)
+    if (-not $Resolved) { throw "could not resolve agentroam@$AgentRoamVersionRequest from $NpmRegistry" }
+    $AgentRoamVersion = ([string]$Resolved).Trim()
+    Write-Host "Installing AgentRoam $AgentRoamVersion (resolved from $AgentRoamVersionRequest)"
+} else {
+    $AgentRoamVersion = $AgentRoamVersionRequest
+}
+$LauncherRoot = Join-Path $LauncherParent $AgentRoamVersion
+$LauncherLock = Join-Path $LauncherRoot ".lock"
 $PackageSpec = "agentroam@$AgentRoamVersion"
 $ExtraPackageSpecs = @()
 if ($env:AGENTROAM_BOOTSTRAP_TEST -eq "1" -and $env:AGENTROAM_PACKAGE_SPEC) {
@@ -221,3 +235,21 @@ if ($env:AGENTROAM_INSTALL_SKIP_SERVICE -eq "1") {
 }
 Write-Host "`nAgentRoam $AgentRoamVersion installed: $WrapperPath"
 Write-Host "Open a new terminal, then run: agentroam service status"
+
+$DesktopChoice = if ($env:AGENTROAM_INSTALL_DESKTOP) { $env:AGENTROAM_INSTALL_DESKTOP } else { "ask" }
+if ($env:AGENTROAM_INSTALL_SKIP_SERVICE -eq "1" -and $DesktopChoice -eq "ask") { $DesktopChoice = "no" }
+if ($DesktopChoice -eq "ask") {
+  $DesktopChoice = "no"
+  if ([Environment]::UserInteractive -and -not [Console]::IsInputRedirected) {
+    try { $DesktopChoice = Read-Host "是否下载桌面端？用于手机查看和控制电脑桌面 [y/N]" } catch { $DesktopChoice = "no" }
+  }
+}
+if ($DesktopChoice -match '^(y|yes|是)$') {
+  $DesktopHelper = Join-Path $LauncherRoot "node_modules\agentroam\bin\desktop-download.mjs"
+  if (Test-Path -LiteralPath $DesktopHelper -PathType Leaf) {
+    & $NodeBin $DesktopHelper $AgentRoamVersion
+    if ($LASTEXITCODE -ne 0) { Write-Warning "CLI 安装已完成，桌面端可稍后重新下载。" }
+  } else {
+    Write-Warning "当前发布的 CLI 尚未包含桌面下载功能，请在新版发布后重试。CLI 安装已完成。"
+  }
+} else { Write-Host "已跳过桌面端下载，CLI 可正常使用。" }

package/install/install-agentroam.sh

@@ -2,7 +2,11 @@
 set -eu
 
 NODE_VERSION="22.22.0"
-AGENTROAM_VERSION="0.2.0-preview.16"
+MINIMUM_NODE_VERSION="22.22.0"
+# Default to the newest published preview; pin an exact version via
+# AGENTROAM_VERSION=0.2.0-preview.18 sh install-agentroam.sh
+AGENTROAM_VERSION_REQUEST="${AGENTROAM_VERSION:-preview}"
+AGENTROAM_VERSION=""
 NODE_ARCHIVE="node-v22.22.0-darwin-arm64.tar.xz"
 NODE_SHA256="2bd596bbfc4a275ceb8721a5954ee97daea5ebe673e96a185ebd732f6fb023ac"
 NODE_URL="https://nodejs.org/dist/v22.22.0/$NODE_ARCHIVE"
@@ -12,14 +16,12 @@ NODE_PARENT="$DATA_DIR/runtimes/node"
 NODE_ROOT="$NODE_PARENT/$NODE_VERSION"
 NODE_LOCK="$NODE_ROOT.lock"
 LAUNCHER_PARENT="$DATA_DIR/launcher"
-LAUNCHER_ROOT="$LAUNCHER_PARENT/$AGENTROAM_VERSION"
+LAUNCHER_ROOT="$LAUNCHER_PARENT/pending-version"
 LAUNCHER_LOCK="$LAUNCHER_ROOT.lock"
 WRAPPER_DIR="$HOME/.local/bin"
 WRAPPER_PATH="$WRAPPER_DIR/agentroam"
-SERVICE_ROOT_EXPLICIT=0
 if [ "${AGENTROAM_ROOT+x}" = "x" ]; then
   SERVICE_ROOT="$AGENTROAM_ROOT"
-  SERVICE_ROOT_EXPLICIT=1
 else
   SERVICE_ROOT="$PWD"
 fi
@@ -48,33 +50,44 @@ command -v shasum >/dev/null 2>&1 || fail "shasum is required"
 [ -x /usr/bin/tar ] || fail "/usr/bin/tar is required"
 [ -d "$SERVICE_ROOT" ] || fail "AgentRoam root is not a directory: $SERVICE_ROOT"
 service_root_physical=$(cd "$SERVICE_ROOT" && pwd -P)
-home_physical=$(cd "$HOME" && pwd -P)
-if [ "$SERVICE_ROOT_EXPLICIT" -eq 0 ] && [ "$service_root_physical" = "$home_physical" ]; then
-  fail "refusing to expose the entire home directory implicitly; run from a project directory or set AGENTROAM_ROOT explicitly"
-fi
 SERVICE_ROOT="$service_root_physical"
 
 mkdir -p "$NODE_PARENT" "$LAUNCHER_PARENT" "$WRAPPER_DIR"
 
-node_is_22() {
-  [ -x "$1" ] && [ "$("$1" -p 'process.versions.node.split(".")[0]' 2>/dev/null || true)" = "22" ]
+version_is_supported() {
+  awk -v version="$1" -v minimum="$MINIMUM_NODE_VERSION" 'BEGIN {
+    if (version !~ /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/) exit 1;
+    sub(/\+.*/, "", version);
+    split(version, actual, "."); split(minimum, required, ".");
+    for (component = 1; component <= 3; component++) {
+      if (actual[component] + 0 > required[component] + 0) exit 0;
+      if (actual[component] + 0 < required[component] + 0) exit 1;
+    }
+    exit 0;
+  }'
+}
+
+node_is_supported() {
+  [ -x "$1" ] && version_is_supported "$("$1" -p 'process.versions.node' 2>/dev/null || true)"
 }
 
-find_nvm_node_22() {
+find_nvm_node() {
   best_bin=""
+  best_major=-1
   best_minor=-1
   best_patch=-1
   for nvm_root in "${NVM_DIR:-}" "$HOME/.nvm"; do
     [ -n "$nvm_root" ] || continue
-    for candidate in "$nvm_root"/versions/node/v22*/bin/node; do
+    for candidate in "$nvm_root"/versions/node/v*/bin/node; do
       [ -x "$candidate" ] || continue
       version=$("$candidate" -p 'process.versions.node' 2>/dev/null || true)
+      version_is_supported "$version" || continue
       major=$(printf '%s\n' "$version" | awk -F. '{ print $1 + 0 }')
       minor=$(printf '%s\n' "$version" | awk -F. '{ print $2 + 0 }')
       patch=$(printf '%s\n' "$version" | awk -F. '{ sub(/[^0-9].*$/, "", $3); print $3 + 0 }')
-      [ "$major" -eq 22 ] 2>/dev/null || continue
-      if [ "$minor" -gt "$best_minor" ] || { [ "$minor" -eq "$best_minor" ] && [ "$patch" -gt "$best_patch" ]; }; then
+      if [ "$major" -gt "$best_major" ] || { [ "$major" -eq "$best_major" ] && { [ "$minor" -gt "$best_minor" ] || { [ "$minor" -eq "$best_minor" ] && [ "$patch" -gt "$best_patch" ]; }; }; }; then
         best_bin="$candidate"
+        best_major=$major
         best_minor=$minor
         best_patch=$patch
       fi
@@ -112,13 +125,13 @@ SYSTEM_NODE=$(command -v node 2>/dev/null || true)
 if [ "${AGENTROAM_BOOTSTRAP_TEST:-}" = "1" ] && [ "${AGENTROAM_FORCE_PRIVATE_NODE:-}" = "1" ]; then
   SYSTEM_NODE=""
 fi
-if [ -n "$SYSTEM_NODE" ] && node_is_22 "$SYSTEM_NODE"; then
+if [ -n "$SYSTEM_NODE" ] && node_is_supported "$SYSTEM_NODE"; then
   NODE_BIN="$SYSTEM_NODE"
 else
   if [ "${AGENTROAM_BOOTSTRAP_TEST:-}" = "1" ] && [ "${AGENTROAM_FORCE_PRIVATE_NODE:-}" = "1" ]; then
     NVM_NODE=""
   else
-    NVM_NODE=$(find_nvm_node_22 || true)
+    NVM_NODE=$(find_nvm_node || true)
   fi
   if [ -n "$NVM_NODE" ]; then
     NODE_BIN="$NVM_NODE"
@@ -184,7 +197,23 @@ find_npm_cli() {
 }
 
 NPM_CLI=$(find_npm_cli)
+case "$AGENTROAM_VERSION_REQUEST" in
+  *[0-9])
+    # Looks like an exact version — honor the pin as-is.
+    AGENTROAM_VERSION="$AGENTROAM_VERSION_REQUEST"
+    ;;
+  *)
+    # A dist-tag (default "preview") — resolve to the newest published version
+    # so installs always pick up the latest release without touching this file.
+    resolved_version="$("$NODE_BIN" "$NPM_CLI" view "agentroam@$AGENTROAM_VERSION_REQUEST" version --registry "$NPM_REGISTRY" 2>/dev/null | tail -1 | tr -d '[:space:]')"
+    [ -n "$resolved_version" ] || fail "could not resolve agentroam@$AGENTROAM_VERSION_REQUEST from $NPM_REGISTRY"
+    AGENTROAM_VERSION="$resolved_version"
+    printf 'Installing AgentRoam %s (resolved from %s)\n' "$AGENTROAM_VERSION" "$AGENTROAM_VERSION_REQUEST"
+    ;;
+esac
 PACKAGE_SPEC="agentroam@$AGENTROAM_VERSION"
+LAUNCHER_ROOT="$LAUNCHER_PARENT/$AGENTROAM_VERSION"
+LAUNCHER_LOCK="$LAUNCHER_ROOT.lock"
 EXTRA_PACKAGE_SPECS=""
 if [ "${AGENTROAM_BOOTSTRAP_TEST:-}" = "1" ] && [ -n "${AGENTROAM_PACKAGE_SPEC:-}" ]; then
   PACKAGE_SPEC="$AGENTROAM_PACKAGE_SPEC"
@@ -235,3 +264,26 @@ case ":${PATH:-}:" in
   *":$WRAPPER_DIR:"*) ;;
   *) printf 'Add this directory to PATH: export PATH="%s:$PATH"\n' "$WRAPPER_DIR" ;;
 esac
+
+# stdin is the script itself when launched with curl | sh. Read the choice
+# from the controlling terminal instead; unattended installs never block.
+desktop_choice="${AGENTROAM_INSTALL_DESKTOP:-ask}"
+if [ "${AGENTROAM_INSTALL_SKIP_SERVICE:-}" = "1" ] && [ "$desktop_choice" = "ask" ]; then desktop_choice=no; fi
+if [ "$desktop_choice" = "ask" ]; then
+  desktop_choice=no
+  if ( : </dev/tty ) 2>/dev/null; then
+    printf '\n是否下载桌面端？用于手机查看和控制电脑桌面 [y/N]：' >/dev/tty
+    IFS= read -r desktop_choice </dev/tty || desktop_choice=no
+  fi
+fi
+case "$desktop_choice" in
+  y|Y|yes|YES|是)
+    desktop_helper="$LAUNCHER_ROOT/node_modules/agentroam/bin/desktop-download.mjs"
+    if [ -f "$desktop_helper" ]; then
+      "$NODE_BIN" "$desktop_helper" "$AGENTROAM_VERSION" || printf 'CLI 安装已完成，桌面端可稍后重新下载。\n'
+    else
+      printf '当前发布的 CLI 尚未包含桌面下载功能，请在新版发布后重试。CLI 安装已完成。\n'
+    fi
+    ;;
+  *) printf '已跳过桌面端下载，CLI 可正常使用。\n' ;;
+esac

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentroam",
-  "version": "0.2.0-preview.16",
+  "version": "0.2.0-preview.18",
   "description": "Zero-install mobile remote terminal and file console",
   "type": "module",
   "bin": {
@@ -8,7 +8,7 @@
     "agent-tui": "./bin/agent-tui.mjs"
   },
   "engines": {
-    "node": ">=22 <23"
+    "node": ">=22.22.0"
   },
   "files": [
     "bin",
@@ -26,12 +26,12 @@
     "undici": "^6.25.0"
   },
   "optionalDependencies": {
-    "agentroam-runtime-darwin-arm64": "0.2.0-preview.16",
-    "agentroam-runtime-win32-x64": "0.2.0-preview.16",
-    "agentroam-cloudflared-darwin-arm64": "0.2.0-preview.16",
-    "agentroam-cloudflared-win32-x64": "0.2.0-preview.16",
-    "agentroam-tui-darwin-arm64": "0.2.0-preview.16",
-    "@caoqu/agentroam-tui-win32-x64": "0.2.0-preview.16"
+    "agentroam-runtime-darwin-arm64": "0.2.0-preview.18",
+    "agentroam-runtime-win32-x64": "0.2.0-preview.18",
+    "agentroam-cloudflared-darwin-arm64": "0.2.0-preview.18",
+    "agentroam-cloudflared-win32-x64": "0.2.0-preview.18",
+    "agentroam-tui-darwin-arm64": "0.2.0-preview.18",
+    "@caoqu/agentroam-tui-win32-x64": "0.2.0-preview.18"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/dist/pairing.js

@@ -1,2 +0,0 @@
-import { createHash, randomBytes } from "node:crypto";
-export function createPairingSecret(now = Date.now()) { const token = randomBytes(32).toString("base64url"); return { token, hashHex: createHash("sha256").update(token).digest("hex"), expiresAt: new Date(now + 5 * 60 * 1000).toISOString() }; }