benchgo 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,25 @@
-# Temporary Holding Version
+# benchgo
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+BenchGo 工作台命令。安装和管工作台，可以连接外部中继，不安装中继服务。
+
+```sh
+npm install -g benchgo
+benchgo install
+benchgo server status
+```
+
+也可以：
+
+```sh
+benchgo update
+benchgo server <install|update|status|start|stop|restart>
+```
+
+中继服务器是另一个包：
+
+```sh
+npm install -g benchgo-relay
+benchgo-relay install --config /path/to/relay.json
+```
+
+`benchgo install` 需要 Linux、Node.js 22+ 和 systemd 用户服务。资源目录不在当前工作区时，用 `BENCHGO_ROOT` 或 `--root`。

package/bin/benchgo.mjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { main } from '../src/cli.mjs';
+
+await main(process.argv.slice(2));

package/package.json

@@ -1,6 +1,25 @@
 {
   "name": "benchgo",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zhuogo/BenchGo.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "description": "BenchGo workbench CLI",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "benchgo": "./bin/benchgo.mjs"
+  },
+  "files": [
+    "bin",
+    "src",
+    "resources"
+  ],
+  "engines": {
+    "node": ">=22"
+  }
+}

package/resources/server/bootstrap.mjs

@@ -0,0 +1,147 @@
+/** Run only through a verified SSH channel. Final stdout JSON is a private protocol response. */
+import { createHash, randomUUID, X509Certificate } from 'node:crypto';
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { createServer } from 'node:net';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { spawn } from 'node:child_process';
+import { request as httpsRequest } from 'node:https';
+const source = process.argv[2] ?? 'mirror', operation = process.argv[3] ?? 'connect';
+if (!['mirror', 'github'].includes(source) || !['connect', 'update'].includes(operation)) throw new Error('无效的服务器安装参数');
+const assets = dirname(fileURLToPath(import.meta.url));
+const manifest = JSON.parse(await readFile(join(assets, 'manifest.json'), 'utf8'));
+if (manifest.schemaVersion !== 1 || !/^[0-9a-f]{64}$/.test(manifest.sha256) || !/^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(manifest.harnessVersion) || !/^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(manifest.pluginVersion)) throw new Error('服务器安装清单无效');
+const archive = join(assets, 'server-seed.tar.gz');
+if (createHash('sha256').update(await readFile(archive)).digest('hex') !== manifest.sha256) throw new Error('服务器插件包校验失败');
+const base = join(homedir(), '.local/share/benchgo/server');
+const stateFile = join(base, 'installation.json'), ownerFile = join(base, 'owner.json');
+const registry = source === 'mirror' ? 'https://registry.npmmirror.com' : 'https://registry.npmjs.org';
+const wait = ms => new Promise(r => setTimeout(r, ms));
+const present = async path => { try { await readFile(path); return true; } catch (e) { if (e.code === 'ENOENT') return false; throw e; } };
+async function run(command, args, options = {}) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, args, { env: { ...process.env, DSH_TELEMETRY_DISABLED: '1', npm_config_registry: registry }, stdio: ['ignore', 'pipe', 'pipe'], ...options });
+    let output = '';
+    for (const stream of [child.stdout, child.stderr]) stream.on('data', data => { output = (output + data).slice(-12000); });
+    child.once('error', reject);
+    child.once('exit', code => {
+      if (code === 0) return resolve(output);
+      const detail = output.trim();
+      reject(new Error((command === 'systemctl' ? '服务器服务操作' : '安装依赖') + '失败（' + code + '）' + (detail ? '：\n' + detail : '')));
+    });
+  });
+}
+async function atomic(path, value) { const tmp = path + '.' + randomUUID() + '.tmp'; await writeFile(tmp, value, { mode: 0o600 }); await rename(tmp, path); }
+async function freePort() { const server = createServer(); await new Promise((r, j) => { server.once('error', j); server.listen(0, '127.0.0.1', r); }); const port = server.address().port; await new Promise(r => server.close(r)); return port; }
+await mkdir(base, { recursive: true, mode: 0o700 });
+let installed; try { installed = JSON.parse(await readFile(stateFile, 'utf8')); } catch (e) { if (e.code !== 'ENOENT') throw e; }
+const lock = join(base, 'install.lock');
+try { await mkdir(lock, { mode: 0o700 }); } catch (e) { if (e.code === 'EEXIST') throw new Error('已有服务器安装正在进行，请稍后重试'); throw e; }
+try {
+  if (!installed || operation === 'update') {
+    if (installed && installed.harnessVersion !== manifest.harnessVersion) throw new Error('此包需要升级服务器引擎，请由维护者处理，现有数据已保留');
+    const runtime = join(base, 'runtimes', manifest.harnessVersion);
+    if (!(await present(join(runtime, 'node_modules/@deepseek-ai/dsh/package.json')))) {
+      process.stderr.write('安装固定版本 Harness…\n');
+      await mkdir(runtime, { recursive: true, mode: 0o700 });
+      await atomic(join(runtime, 'package.json'), JSON.stringify({ private: true, dependencies: {
+        '@deepseek-ai/dsh': manifest.harnessVersion,
+        '@deepseek-ai/cordis': '4.0.5-alpha.2',
+        '@deepseek-ai/dsh-atomic-write': manifest.harnessVersion,
+        '@deepseek-ai/dsh-llm': manifest.harnessVersion
+      } }));
+      await run('npm', ['install', '--prefix', runtime, '--omit=dev', '--no-audit', '--no-fund', '--registry', registry]);
+    }
+    const incoming = join(base, '.seed-' + randomUUID()); await mkdir(incoming, { mode: 0o700 });
+    try {
+      await run('tar', ['-xzf', archive, '-C', incoming, '--no-same-owner', '--no-same-permissions']);
+      const helper = await import(pathToFileURL(join(incoming, 'node_modules/benchgo/shared/plugin-install.mjs')).href);
+      const profile = join(base, 'home/profiles/web');
+      if (!(await present(join(profile, 'package.json')))) {
+        const boot = await import(pathToFileURL(join(runtime, 'node_modules/@deepseek-ai/dsh-app-boot/lib/index.js')).href);
+        boot.initProfile(profile, boot.PROFILE_TEMPLATES.web.bundles);
+      }
+      const release = await helper.prepareRelease({ directory: incoming, root: join(profile, '.benchgo/releases'), version: manifest.pluginVersion, runtime });
+      const webPort = installed?.webPort ?? await freePort(), port = installed?.port ?? await freePort();
+      const dataDir = installed?.dataDir ?? join(base, 'data');
+      if (!installed) await atomic(join(profile, 'cordis.patch.yml'), ['- id: commander', '  config:', '    dataDir: ' + JSON.stringify(dataDir), '    link:', '      directory: ' + JSON.stringify(join(dataDir, 'link')), '- id: session-telemetry-otel', '  disabled: true', ''].join('\n'));
+      if (installed) {
+        const active = await authorize(installed, false);
+        const state = await linkJson(installed, '/link/api/rpc', { action: 'state' }, active.token);
+        await ownerAdmin(installed, { action: 'revoke', id: active.deviceId });
+        if (state.sessions?.some(session => session.running)) throw new Error('服务器有任务运行中，请结束后再升级');
+      }
+      await helper.activateRelease({ profile, release, enabled: true, appVersion: null, migrateLegacy: true });
+      installed = { schemaVersion: 1, harnessVersion: manifest.harnessVersion, pluginVersion: manifest.pluginVersion, runtime, profile, dataDir, webPort, port };
+      await atomic(stateFile, JSON.stringify(installed));
+      const launcher = '(' + launchServer.toString() + ')(' + [process.execPath, runtime, ownerFile, base, webPort].map(value => JSON.stringify(value)).join(',') + ');';
+      await atomic(join(base, 'start.mjs'), launcher);
+      const units = join(homedir(), '.config/systemd/user'); await mkdir(units, { recursive: true, mode: 0o700 });
+      const quote = value => JSON.stringify(String(value)).replaceAll('%', '%%');
+      const unit = ['[Unit]', 'Description=BenchGo server', 'After=network-online.target', '', '[Service]', 'Type=simple', 'UMask=0077', 'WorkingDirectory=' + base, 'ExecStart=' + quote(process.execPath) + ' ' + quote(join(base, 'start.mjs')), 'Environment=' + quote('PATH=' + process.env.PATH), 'Restart=on-failure', 'RestartSec=3', '', '[Install]', 'WantedBy=default.target', ''].join('\n');
+      await atomic(join(units, 'benchgo.service'), unit);
+      await run('systemctl', ['--user', 'daemon-reload']); await run('systemctl', ['--user', 'enable', 'benchgo.service']);
+      await rm(ownerFile, { force: true }); await run('systemctl', ['--user', 'restart', 'benchgo.service']);
+    } finally { await rm(incoming, { recursive: true, force: true }); }
+  } else { process.stderr.write('复用已安装的 BenchGo…\n'); await run('systemctl', ['--user', 'start', 'benchgo.service']); }
+  if (operation === 'update') {
+    let ready = false;
+    for (let i = 0; i < 100; i++) { try { const status = await ownerAdmin(installed, { action: 'status' }); if (status.enabled && status.port === installed.port && status.host === '127.0.0.1') { ready = true; break; } } catch {} await wait(500); }
+    if (!ready) throw new Error('服务器升级后未正常就绪，请查看服务日志');
+  }
+  const result = operation === 'update' ? { port: installed.port, pin: createHash('sha256').update(new X509Certificate(JSON.parse(await readFile(join(installed.dataDir, 'link/tls.json'), 'utf8')).cert).publicKey.export({ type: 'spki', format: 'der' })).digest('base64') } : await authorize(installed, true);
+  const linger = await run('loginctl', ['show-user', String(process.getuid()), '--property=Linger', '--value']).catch(() => 'unknown');
+  process.stdout.write(JSON.stringify({ ...result, version: installed.pluginVersion, persistent: linger.trim() === 'yes', ...(linger.trim() !== 'yes' ? { warning: '系统尚未启用用户常驻服务，退出所有 SSH 会话后服务可能停止；维护者可执行 loginctl enable-linger 用户名' } : {}) }) + '\n');
+} finally { await rm(lock, { recursive: true, force: true }); }
+async function ownerAdmin(state, input) {
+  const owner = JSON.parse(await readFile(ownerFile, 'utf8')); const url = new URL(owner.url);
+  if (url.hostname !== '127.0.0.1' || Number(url.port) !== state.webPort) throw new Error('服务器启动授权地址无效');
+  const login = await fetch(url, { redirect: 'manual', signal: AbortSignal.timeout(5000) });
+  const cookie = login.headers.getSetCookie().map(value => value.split(';')[0]).join('; '); if (!cookie) throw new Error('服务器尚未准备好');
+  const response = await fetch(url.origin + '/api/commander-link', { method: 'POST', headers: { cookie, 'content-type': 'application/json', origin: url.origin }, body: JSON.stringify(input), signal: AbortSignal.timeout(10000) });
+  const value = await response.json(); if (!response.ok) throw new Error(value.error ?? '服务器初始化失败'); return value;
+}
+async function linkJson(state, path, value, token) {
+  const identity = JSON.parse(await readFile(join(state.dataDir, 'link/tls.json'), 'utf8'));
+  return new Promise((resolve, reject) => {
+    const request = httpsRequest('https://127.0.0.1:' + state.port + path, { method: 'POST', ca: identity.cert, headers: { 'content-type': 'application/json', ...(token ? { authorization: 'Bearer ' + token } : {}) }, timeout: 10000 }, response => {
+      let data = ''; response.on('data', chunk => { data += chunk; }); response.on('end', () => { try { const result = JSON.parse(data); response.statusCode < 400 ? resolve(result) : reject(new Error(result.error ?? '服务器授权失败')); } catch (error) { reject(error); } });
+    }); request.on('error', reject); request.on('timeout', () => request.destroy(new Error('服务器授权超时'))); request.end(JSON.stringify(value));
+  });
+}
+async function authorize(state, retry) {
+  let failure;
+  for (let i = 0; i < (retry ? 100 : 1); i++) {
+    try {
+      let status = await ownerAdmin(state, { action: 'status' });
+      if (!status.enabled) status = await ownerAdmin(state, { action: 'configure', enabled: true, host: '127.0.0.1', port: state.port, publicUrl: '' });
+      if (status.host !== '127.0.0.1' || status.port !== state.port) throw new Error('服务器 Link 监听配置已改变，请由维护者检查');
+      const pair = await ownerAdmin(state, { action: 'pairing', mode: 'lan' });
+      const pending = await linkJson(state, '/link/api/pair', { code: pair.code, name: 'SSH 设备-' + randomUUID().slice(0, 5) });
+      await ownerAdmin(state, { action: 'confirm', id: pending.requestId });
+      const approved = await linkJson(state, '/link/api/pair/status', pending);
+      const tls = JSON.parse(await readFile(join(state.dataDir, 'link/tls.json'), 'utf8'));
+      const pin = createHash('sha256').update(new X509Certificate(tls.cert).publicKey.export({ type: 'spki', format: 'der' })).digest('base64');
+      return { port: state.port, pin, token: approved.token, deviceId: approved.deviceId };
+    } catch (error) { failure = error; if (retry) await wait(500); }
+  }
+  throw new Error('服务器启动或授权失败：' + (failure?.message ?? '未知错误'));
+}
+
+function launchServer(node, runtime, ownerFile, base, webPort) {
+  Promise.all([import('node:child_process'), import('node:fs'), import('node:path')]).then(([{ spawn }, { writeFileSync, renameSync }, { join }]) => {
+    const child = spawn(node, [join(runtime, 'node_modules/@deepseek-ai/dsh/lib/bin.js'), '--profile', 'web', '--host', '127.0.0.1', '--port', String(webPort), '--no-open'], { env: { ...process.env, DSH_HOME: join(base, 'home'), DSH_TELEMETRY_DISABLED: '1' }, stdio: ['ignore', 'pipe', 'pipe'] });
+    let pending = '';
+    function log(data) {
+      pending = (pending + data.toString()).slice(-65536);
+      const match = pending.match(/dsh web: (http:\/\/127\.0\.0\.1:\d+\/\?token=[^\s]+)/);
+      if (match) { writeFileSync(ownerFile + '.tmp', JSON.stringify({ url: match[1] }), { mode: 0o600 }); renameSync(ownerFile + '.tmp', ownerFile); }
+      const lines = pending.split(/\r?\n/); pending = lines.pop();
+      for (const line of lines) process.stdout.write(line.replace(/([?&]token=)[^\s&]+/g, '$1[redacted]').replace(/Bearer\s+[A-Za-z0-9._-]+/g, 'Bearer [redacted]') + '\n');
+    }
+    child.stdout.on('data', log); child.stderr.on('data', log);
+    child.on('error', () => process.exit(1)); child.on('exit', code => process.exit(code ?? 1));
+    for (const signal of ['SIGTERM', 'SIGINT']) process.on(signal, () => child.kill(signal));
+  }).catch(() => process.exit(1));
+}

package/resources/server/bootstrap.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+set -euo pipefail
+umask 077
+source_name=${1:-mirror}
+operation=${2:-connect}
+case "$source_name" in mirror|github) ;; *) echo '无效下载源' >&2; exit 1;; esac
+case "$operation" in connect|update) ;; *) echo '无效安装操作' >&2; exit 1;; esac
+case "$(uname -s)" in Linux) ;; *) echo '服务器首版仅支持 Linux' >&2; exit 1;; esac
+case "$(uname -m)" in x86_64) node_arch=x64;; aarch64|arm64) node_arch=arm64;; *) echo '仅支持 x64 和 arm64' >&2; exit 1;; esac
+if [ ! -f /etc/os-release ]; then echo '无法识别服务器发行版' >&2; exit 1; fi
+. /etc/os-release
+case " ${ID:-} ${ID_LIKE:-} " in *' debian '*|*' ubuntu '*) ;; *) echo '首版仅支持 Ubuntu / Debian 系统' >&2; exit 1;; esac
+command -v systemctl >/dev/null || { echo '需要 systemd 用户服务' >&2; exit 1; }
+export XDG_RUNTIME_DIR=${XDG_RUNTIME_DIR:-/run/user/$(id -u)}
+export DBUS_SESSION_BUS_ADDRESS=${DBUS_SESSION_BUS_ADDRESS:-unix:path=$XDG_RUNTIME_DIR/bus}
+systemctl --user show-environment >/dev/null 2>&1 || { echo 'systemd 用户服务不可用；请启用用户会话服务后重试' >&2; exit 1; }
+node_root="$HOME/.local/share/benchgo/node"
+node_binary=$(command -v node || true)
+if [ -z "$node_binary" ] || ! "$node_binary" -e 'const [a,b,c]=process.versions.node.split(".").map(Number);process.exit(a>=24||(a===22&&(b>19||(b===19&&c>=0)))?0:1)' >/dev/null 2>&1; then
+  node_version=22.22.1
+  node_file="node-v$node_version-linux-$node_arch.tar.xz"
+  command -v curl >/dev/null || { echo '安装 Node.js 需要 curl' >&2; exit 1; }
+  command -v sha256sum >/dev/null || { echo '安装 Node.js 需要 sha256sum' >&2; exit 1; }
+  work=$(mktemp -d)
+  trap 'rm -rf -- "$work"' EXIT
+  node_url="https://nodejs.org/dist/v$node_version"
+  if [ "$source_name" = mirror ]; then node_url="https://npmmirror.com/mirrors/node/v$node_version"; fi
+  echo '下载并校验 Node.js…' >&2
+  curl --proto '=https' --tlsv1.2 -fsSL --connect-timeout 15 --max-time 300 "$node_url/$node_file" -o "$work/$node_file"
+  curl --proto '=https' --tlsv1.2 -fsSL --connect-timeout 15 --max-time 60 "https://nodejs.org/dist/v$node_version/SHASUMS256.txt" -o "$work/SHASUMS256.txt"
+  checksum=$(awk -v name="$node_file" '$2==name { print }' "$work/SHASUMS256.txt")
+  [ -n "$checksum" ] || { echo '未找到 Node.js 官方校验值' >&2; exit 1; }
+  (cd "$work" && echo "$checksum" | sha256sum --check --status)
+  mkdir -p -- "$node_root"
+  tar -xJf "$work/$node_file" -C "$node_root" --strip-components=1
+  node_binary="$node_root/bin/node"
+fi
+export PATH="$(dirname "$node_binary"):$PATH"
+exec "$node_binary" "$(dirname "$0")/bootstrap.mjs" "$source_name" "$operation"

package/resources/server/manifest.json

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": 1,
+  "harnessVersion": "0.2.1-alpha.3",
+  "harnessCommit": "571902028a75c64c1d767f4ae5fd099485f0ddf0",
+  "pluginVersion": "0.0.1",
+  "bundle": "@benchgo/desktop-ee51afda5e1e26e6",
+  "sha256": "8ab7a198e1f98b33ae1408a751d410220c76fd80839a3d158604e1b2da9b7ef3"
+}

package/src/cli.mjs

@@ -0,0 +1,132 @@
+import { access, readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { spawn } from 'node:child_process';
+
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..', '..');
+const bundledRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const cliVersion = '0.0.1';
+
+function usage() {
+  return `BenchGo CLI ${cliVersion}
+
+用法:
+  benchgo install
+  benchgo update
+  benchgo server <install|update|status|start|stop|restart>
+
+全局选项:
+  --json       输出机器可读 JSON
+  --root PATH  指定源码或发行资源目录
+  --source     mirror 或 github
+  --version    输出版本
+  --help       显示帮助
+
+说明:
+  本命令安装和管工作台。工作台可以连接外部中继，但不安装中继服务。
+  中继服务器使用独立包 benchgo-relay 的 benchgo-relay。`;
+}
+
+function parseArgs(argv) {
+  const options = { json: false, root: process.env.BENCHGO_ROOT || packageRoot };
+  const positionals = [];
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--help' || arg === '-h') options.help = true;
+    else if (arg === '--version' || arg === '-v') options.version = true;
+    else if (arg === '--root') options.root = argv[++i] ?? '';
+    else if (arg.startsWith('--root=')) options.root = arg.slice('--root='.length);
+    else if (arg === '--source') options.source = argv[++i] ?? '';
+    else if (arg.startsWith('--source=')) options.source = arg.slice('--source='.length);
+    else positionals.push(arg);
+  }
+  return { options, positionals };
+}
+
+function xdgPath(kind, name) {
+  const base = kind === 'data'
+    ? (process.env.XDG_DATA_HOME || join(homedir(), '.local', 'share'))
+    : (process.env.XDG_CONFIG_HOME || join(homedir(), '.config'));
+  return join(base, 'benchgo', name);
+}
+
+async function exists(path) {
+  try { await access(path); return true; } catch { return false; }
+}
+
+function command(bin, args, { capture = false, allowFailure = false } = {}) {
+  return new Promise((resolvePromise, reject) => {
+    const child = spawn(bin, args, { stdio: capture ? ['ignore', 'pipe', 'pipe'] : 'inherit', env: { ...process.env, DSH_TELEMETRY_DISABLED: '1' } });
+    let stdout = '', stderr = '';
+    if (capture) {
+      child.stdout.on('data', data => { stdout += data; });
+      child.stderr.on('data', data => { stderr += data; });
+    }
+    child.once('error', error => allowFailure ? resolvePromise({ code: null, stdout, stderr, error }) : reject(error));
+    child.once('exit', code => {
+      const result = { code: code ?? 1, stdout, stderr };
+      if (result.code !== 0 && !allowFailure) reject(new Error(stderr.trim() || `${bin} 退出码 ${result.code}`));
+      else resolvePromise(result);
+    });
+  });
+}
+
+function serviceArgs(service, operation) {
+  return ['--user', operation, service];
+}
+
+async function serviceOperation(service, operation, { json }) {
+  const result = await command('systemctl', serviceArgs(service, operation), { capture: true, allowFailure: true });
+  if (json) return { service, operation, ok: result.code === 0, output: result.stdout.trim() || result.stderr.trim() };
+  if (result.code !== 0) throw new Error(result.stderr.trim() || `服务操作失败：${operation} ${service}`);
+  return result.stdout.trim() || `${service} ${operation} 完成`;
+}
+
+async function serverStatus({ json }) {
+  const stateFile = xdgPath('data', 'server/installation.json');
+  let installation = null;
+  try { installation = JSON.parse(await readFile(stateFile, 'utf8')); } catch {}
+  const service = await command('systemctl', serviceArgs('benchgo.service', 'is-active'), { capture: true, allowFailure: true });
+  const result = { installed: Boolean(installation), service: service.stdout.trim() || 'unknown', installation: installation ? { ...installation } : null };
+  return json ? result : `工作台：${result.installed ? '已安装' : '未安装'}\n服务：${result.service}`;
+}
+
+async function serverCommand(action, options) {
+  if (action === 'status') return serverStatus(options);
+  if (['start', 'stop', 'restart'].includes(action)) return serviceOperation('benchgo.service', action, options);
+  if (!['install', 'update'].includes(action)) throw new Error(`不支持的工作台操作：${action || '(空)'}`);
+  const script = await exists(resolve(options.root, 'scripts/server/bootstrap.sh'))
+    ? resolve(options.root, 'scripts/server/bootstrap.sh')
+    : resolve(bundledRoot, 'resources/server/bootstrap.sh');
+  if (!await exists(script)) throw new Error('未找到工作台安装器；请设置 BENCHGO_ROOT 指向 BenchGo 资源目录');
+  const source = options.source || 'mirror';
+  if (!['mirror', 'github'].includes(source)) throw new Error('下载源必须是 mirror 或 github');
+  const result = await command('bash', [script, source, action === 'update' ? 'update' : 'connect']);
+  return options.json ? { ok: result.code === 0, action } : `工作台${action === 'update' ? '更新' : '安装'}完成`;
+}
+
+export async function run(argv) {
+  const { options, positionals } = parseArgs(argv);
+  if (options.version) return cliVersion;
+  if (options.help || positionals.length === 0) return usage();
+  const [scope, action] = positionals;
+  if (scope === 'install' || scope === 'update') return serverCommand(scope, options);
+  if (scope === 'server') return serverCommand(action, options);
+  if (scope === 'relay') throw new Error('中继服务器不随工作台安装。请使用 npm install -g benchgo-relay，然后运行 benchgo-relay');
+  throw new Error(`未知命令：${scope}`);
+}
+
+export async function main(argv = process.argv.slice(2)) {
+  const { options } = parseArgs(argv);
+  try {
+    const result = await run(argv);
+    if (result !== undefined) process.stdout.write((options.json && typeof result !== 'string' ? JSON.stringify(result) : String(result)) + '\n');
+  } catch (error) {
+    process.stderr.write((error?.message || String(error)) + '\n');
+    process.exitCode = 1;
+  }
+}
+
+export { parseArgs, usage, xdgPath };