codexpanel 0.1.9 → 0.1.11

package/bin/codexpanel.cjs

@@ -11,7 +11,7 @@ const crypto = require("crypto");
 const readline = require("readline");
 const { spawn, spawnSync } = require("child_process");
 
-const VERSION = "0.1.9";
+const VERSION = "0.1.11";
 const PROD_URL = "https://codexpanel.com";
 const TEST_URL = "https://jd.6a.gs";
 const LOCAL_HOST = "127.0.0.1";
@@ -34,6 +34,7 @@ Options:
   --token-login                 Ask for a one-time terminal token from the setup page
   --no-browser                  Do not open a browser; print the login URL instead
   --no-autostart                Do not enable Windows login autostart
+  --install-only                Install/update the local agent and panel without binding
   --dry-run                     Print resolved installer details without installing
   --print-command               Print the equivalent PowerShell bootstrap command after login approval
   -h, --help                    Show help
@@ -59,6 +60,7 @@ function parseArgs(argv) {
     autoStart: true,
     dryRun: false,
     printCommand: false,
+    installOnly: false,
   };
 
   const readValue = (flag) => {
@@ -80,6 +82,7 @@ function parseArgs(argv) {
     else if (arg === "--token-login") options.tokenLogin = true;
     else if (arg === "--no-browser") options.browser = false;
     else if (arg === "--no-autostart") options.autoStart = false;
+    else if (arg === "--install-only") options.installOnly = true;
     else if (arg === "--legacy-tunnel") throw new Error("--legacy-tunnel has been retired. Device traffic uses the server WSS gateway.");
     else if (arg === "--no-tunnel") throw new Error("--no-tunnel has been retired. Device traffic uses the server WSS gateway.");
     else if (arg === "--dry-run") options.dryRun = true;
@@ -364,6 +367,8 @@ async function preloadResources(relayUrl) {
   let manifest = {};
   try { manifest = JSON.parse(manifestText); }
   catch { throw new Error("Server returned an invalid agent manifest."); }
+  const cacheKey = crypto.createHash("sha256").update(manifestText).digest("hex").slice(0, 16);
+  const preloadDir = path.join(localAgentRoot(), "preload", cacheKey);
   const resources = [
     manifest.hostRuntime,
     manifest.hostRuntimeSchema,
@@ -376,9 +381,16 @@ async function preloadResources(relayUrl) {
     const text = await downloadText(resourceUrl, 60000);
     const hash = crypto.createHash("sha256").update(Buffer.from(text, "utf8")).digest("hex");
     if (item.sha256 && hash !== item.sha256) throw new Error(`Checksum mismatch for ${item.fileName || item.path}`);
+    if (!item.dynamicAfterApproval && item.fileName) {
+      const target = path.join(preloadDir, ...String(item.fileName).split(/[\\/]+/));
+      fs.mkdirSync(path.dirname(target), { recursive: true });
+      fs.writeFileSync(target, text, "utf8");
+    }
   }
   console.log("CodexPanel: 资源已下载并校验完成 / Resources downloaded and verified.");
-  return manifest;
+  fs.mkdirSync(preloadDir, { recursive: true });
+  fs.writeFileSync(path.join(preloadDir, "manifest.json"), JSON.stringify(manifest, null, 2));
+  return { manifest, preloadDir };
 }
 
 function powershellCommand(url) {
@@ -427,14 +439,14 @@ async function tokenLogin(relayUrl, flowId, flowSecret) {
   }
 }
 
-async function runBootstrap(relayUrl, approval, options) {
+async function runBootstrap(relayUrl, profile, options, preloadDir = "") {
   const url = new URL("/agent/bootstrap.ps1", relayUrl);
-  url.searchParams.set("setupToken", approval.setupToken);
   url.searchParams.set("manualDeviceId", "1");
   url.searchParams.set("manualDeviceName", "1");
-  url.searchParams.set("deviceId", approval.deviceId || stableDeviceId());
-  if (approval.deviceName) url.searchParams.set("deviceName", approval.deviceName);
+  url.searchParams.set("deviceId", profile.deviceId || stableDeviceId());
+  if (profile.deviceName) url.searchParams.set("deviceName", profile.deviceName);
   if (options.workspace) url.searchParams.set("workspace", options.workspace);
+  if (preloadDir) url.searchParams.set("preloadDir", preloadDir);
   url.searchParams.set("mode", "host-runtime");
   url.searchParams.set("autoStart", options.autoStart ? "1" : "0");
 
@@ -453,9 +465,48 @@ async function runBootstrap(relayUrl, approval, options) {
   if (result.status !== 0) throw new Error(`PowerShell installer exited with code ${result.status}`);
 }
 
+async function bindLocalAgent(approval) {
+  const root = localAgentRoot();
+  const script = path.join(root, "bind-agent.ps1");
+  if (!fs.existsSync(script)) throw new Error(`Local bind script not found: ${script}`);
+  const args = [
+    "-NoLogo", "-NoProfile", "-ExecutionPolicy", "Bypass", "-File", script,
+    "-SetupToken", approval.setupToken || "",
+    "-DeviceToken", approval.deviceToken || "",
+    "-UserId", approval.userId || "",
+    "-DeviceId", approval.deviceId || "",
+  ];
+  if (approval.deviceName) args.push("-DeviceName", approval.deviceName);
+  const result = spawnSync(powershellPath(), args, { stdio: "inherit", windowsHide: false });
+  if (result.error) throw result.error;
+  if (result.status !== 0) throw new Error(`PowerShell bind script exited with code ${result.status}`);
+}
+
+function localProfileFromConfig(options, resolved) {
+  try {
+    const runtime = readLocalRuntimeConfig();
+    const config = runtime.config || {};
+    return {
+      ...computerProfile(options, resolved),
+      deviceId: config.deviceId || config.agentId || stableDeviceId(),
+      deviceName: options.deviceName || config.deviceName || `${os.hostname()} / ${defaultUsername()} Codex Desktop Agent`,
+      workspace: options.workspace || config.workspace || process.env.USERPROFILE || process.cwd(),
+    };
+  } catch {
+    return computerProfile(options, resolved);
+  }
+}
+
 async function install(options) {
+  if (options.command === "login" && !process.env.CODEXPANEL_SERVER) {
+    try {
+      const existing = readLocalRuntimeConfig().config;
+      if (existing.relayUrl && options.server === "production") options.server = existing.relayUrl;
+    } catch {}
+  }
   const resolved = await resolveServer(options.server);
-  const profile = computerProfile(options, resolved);
+  const loginOnly = options.command === "login";
+  const profile = loginOnly ? localProfileFromConfig(options, resolved) : computerProfile(options, resolved);
   if (options.dryRun) {
     console.log(JSON.stringify({
       ok: true,
@@ -480,7 +531,16 @@ async function install(options) {
     console.log(`Local relay port / 本地 relay 端口: ${resolved.localPort} (dynamic, not fixed)`);
   }
 
-  const manifest = await preloadResources(resolved.relayUrl);
+  let manifest = {};
+  if (!loginOnly) {
+    const preload = await preloadResources(resolved.relayUrl);
+    manifest = preload.manifest;
+    await runBootstrap(resolved.relayUrl, profile, options, preload.preloadDir);
+  }
+  if (options.installOnly) {
+    console.log("\nCodexPanel: local agent installed. Run `npx -y codexpanel login` to bind this device.");
+    return;
+  }
   const start = await requestJson("POST", resolved.relayUrl, "/api/desktop/setup/start", {
     ...profile,
     agentVersion: manifest.agentVersion || "",
@@ -514,7 +574,7 @@ async function install(options) {
   console.log("\nCodexPanel: 登录绑定成功 / Sign-in and binding approved.");
   console.log(`User / 用户: ${approval.user?.name || approval.userId || "unknown"}`);
   console.log(`Device / 设备: ${approval.deviceName || approval.deviceId}`);
-  await runBootstrap(resolved.relayUrl, approval, options);
+  await bindLocalAgent(approval);
   if (approval.panelUrl) {
     console.log(`CodexPanel local status panel / 本地状态面板: ${approval.panelUrl}`);
     try { openBrowser(approval.panelUrl); } catch {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codexpanel",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "CodexPanel mobile control plane monorepo.",
   "license": "UNLICENSED",
   "private": false,
@@ -28,7 +28,7 @@
     "verify:version": "node scripts/sync-product-version.mjs --check",
     "prebuild": "npm run sync:version",
     "build": "npm run build --workspaces --if-present",
-    "check": "npm run verify:version && npm run scan:encoding && npm run verify:api-contracts && npm run verify:client-gateway && npm run verify:server-gateway-boundary && npm run verify:iam && npm run verify:storage && npm run verify:domain-config && node scripts/money-smoke.cjs && npm run check --workspaces --if-present",
+    "check": "npm run verify:version && npm run verify:codex-adapter && npm run scan:encoding && npm run verify:api-contracts && npm run verify:client-gateway && npm run verify:server-gateway-boundary && npm run verify:iam && npm run verify:storage && npm run verify:domain-config && node scripts/money-smoke.cjs && npm run check --workspaces --if-present",
     "release:local": "node scripts/release-local.mjs",
     "release:server": "bash scripts/server-autodeploy.sh",
     "release:test": "node scripts/test-release.mjs",
@@ -43,6 +43,7 @@
     "generate:codex": "npm run generate -w @codexpanel/codex-app-server",
     "verify:storage": "node scripts/verify-storage-boundary.mjs",
     "verify:domain-config": "node scripts/verify-domain-config.mjs",
+    "verify:codex-adapter": "node scripts/verify-codex-adapter.mjs",
     "smoke:storage": "node scripts/storage-smoke.cjs",
     "purge:retired-desktop-residue": "node scripts/purge-retired-desktop-residue.mjs"
   },