device-center 0.2.0-beta.3 → 0.2.0-beta.5

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "device-center",
-  "version": "0.2.0-beta.3",
+  "version": "0.2.0-beta.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "device-center",
-      "version": "0.2.0-beta.3",
+      "version": "0.2.0-beta.5",
       "license": "MIT",
       "dependencies": {
         "@peculiar/x509": "2.1.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "device-center",
-  "version": "0.2.0-beta.3",
+  "version": "0.2.0-beta.5",
   "license": "MIT",
   "type": "module",
   "description": "Local device connector with account-bound pairing, TLS encrypted relay and explicitly authorized log access",
@@ -37,8 +37,10 @@
     "docs/remote-access.md",
     "npm-shrinkwrap.json",
     "start.html",
+    "favicon.svg",
     "docs/friend-trial.md",
-    "docs/i18n.md"
+    "docs/i18n.md",
+    "docs/windows-acceptance.md"
   ],
   "publishConfig": {
     "access": "public",

package/scripts/access.mjs

@@ -21,7 +21,6 @@ export async function main(argv = []) {
   const allowed={peers:[],status:[],enable:['confirm'],renew:['confirm'],trust:['peer','lan','port','confirm'],grant:['peer','log','label','minutes','confirm'],revoke:['peer','confirm'],listen:['bind','port','confirm'],'listen-off':['confirm'],read:['peer','label','bytes']}[action];
   const options={};
   for(let i=1;i<argv.length;i++){const key=argv[i].slice(2);if(!argv[i].startsWith('--')||!allowed.includes(key)||Object.hasOwn(options,key))throw new Error(usage);if(key==='confirm')options[key]=true;else{if(!argv[i+1]||argv[i+1].startsWith('--'))throw new Error(usage);options[key]=argv[++i];}}
-  if(process.platform==='win32')throw new Error('Windows 原生私钥权限与服务尚未验收；本版支持 macOS/Linux。');
   const file=defaultLinkFile(),local=accessFile(file);
   if(action==='status'){const a=readAccess(local);return {trusts:a.trusts.map(({certificate,...p})=>p),grants:a.grants.map(({certificate,...p})=>p),listen:a.listen};}
   const state=readLink(file);if(!state?.driverId||state.disabled)throw new Error('先 connect 并在云端核对批准。');

package/scripts/driver.mjs

@@ -8,21 +8,23 @@ import { servicePlan } from './service.mjs';
 import { cloudOrigin, publicIdentity, signedRequest } from '../server/drivers/driverProtocol.mjs';
 import { cloudPost, defaultLinkFile, readLink, writeLink, linkSummary, ensurePrivateDirectory } from '../server/drivers/cloudLink.mjs';
 import { issueCertificate } from '../server/drivers/certificates.mjs';
+import { pairingBrowserUrl, openPairingBrowser, waitForFirstReport } from '../server/drivers/browserPairing.mjs';
 
-const usage = 'npm run driver -- plan|connect|run|status|disconnect --cloud https://你的域名 [--share-ssh] [--port 5174] [--confirm]';
+const usage = 'npm run driver -- plan|connect|run|status|disconnect --cloud https://你的域名 [--browser] [--share-ssh] [--port 5174] [--confirm]';
 export function driverPlan(argv = []) {
   const command = argv[0] ?? 'plan';
-  let origin = 'https://devices.owenshen.top', port = 5174, confirm = false, shareSsh = false;
+  let origin = 'https://devices.owenshen.top', port = 5174, confirm = false, shareSsh = false, browser = false;
   for (let i = 1; i < argv.length; i++) {
     if (argv[i] === '--cloud' && argv[i+1]) origin = argv[++i];
     else if (argv[i] === '--port' && argv[i+1]) port = Number(argv[++i]);
     else if (argv[i] === '--confirm') confirm = true;
     else if (argv[i] === '--share-ssh') shareSsh = true;
+    else if (argv[i] === '--browser') browser = true;
     else throw new Error(usage);
   }
   if (!['plan', 'connect', 'run', 'status', 'disconnect'].includes(command) || !Number.isInteger(port) || port < 1024 || port > 65535) throw new Error(usage);
   cloudOrigin(origin);
-  return { command, origin, port, confirm, shareSsh, fields: ['管理电脑名称', '系统类型', '内存', '用户目录卷磁盘', ...(shareSsh ? ['至多15个已关联SSH主机的名称和缓存资源状态（不含地址、用户、路径或配置）'] : [])], keyStorage: '仅本机私有目录/0600文件；当前不是Keychain/TPM封装', tasksAuthorized: false, backgroundInstalled: false };
+  return { command, origin, port, confirm, shareSsh, browser, fields: ['管理电脑名称', '系统类型', '内存', '用户目录卷磁盘', ...(shareSsh ? ['至多15个已关联SSH主机的名称和缓存资源状态（不含地址、用户、路径或配置）'] : [])], keyStorage: process.platform === 'win32' ? '本机 DPAPI CurrentUser 加密与当前用户/SYSTEM NTFS ACL；非 TPM，不防同账号恶意程序' : '仅本机私有目录/0600文件；当前不是Keychain/TPM封装', tasksAuthorized: false, backgroundInstalled: false };
 }
 export async function runLocal(plan) {
   // Reuse only a running native Driver that implements this protocol; never stop another listener.
@@ -43,11 +45,10 @@ export async function runLocal(plan) {
   const shutdown = () => instance.server.close(() => { instance.db.close(); process.exit(0); });
   process.once('SIGINT', shutdown); process.once('SIGTERM', shutdown);
 }
-export async function main(argv = process.argv.slice(2)) {
-  const plan = driverPlan(argv), file = defaultLinkFile();
+export async function main(argv = process.argv.slice(2), { file = defaultLinkFile(), post = cloudPost, openBrowser = openPairingBrowser, runDriver = runLocal, waitReport = waitForFirstReport } = {}) {
+  const plan = driverPlan(argv);
   if (Number(process.versions.node.split('.')[0]) < 24) throw new Error('需要 Node.js 24 或更高版本。');
   if (plan.command === 'plan') return plan; // No files, key generation, network or installation.
-  if (process.platform === 'win32') throw new Error('Windows 身份文件的安全存储尚未实现，当前管理 Driver 只支持 macOS/Linux。');
   let state = readLink(file);
   if (plan.command === 'status') return linkSummary(state);
   if (plan.command === 'run') { if (!state?.driverId || state.disabled) throw new Error('请先 connect 完成配对。'); await runLocal(plan); return linkSummary(state); }
@@ -66,16 +67,31 @@ export async function main(argv = process.argv.slice(2)) {
     writeLink(file, state, { create: true });
   }
   if (!state.certificate) { state.certificate = await issueCertificate(state); writeLink(file, state); }
-  const pending = await cloudPost(plan.origin, '/api/driver/pair/start', { publicKey: state.publicKey, certificate: state.certificate, name: hostname().slice(0,80), platform: ({ darwin: 'macOS', linux: 'Linux' })[platform()], shareSsh: plan.shareSsh });
-  if (!/^[a-f0-9-]{36}$/.test(pending.id) || !/^[A-F0-9]{4}-[A-F0-9]{4}$/.test(pending.code) || pending.fingerprint !== state.fingerprint || !Number.isSafeInteger(pending.expiresAt)) throw new Error('云端配对响应无效。');
-  console.log(`请打开 ${plan.origin}，点“连接我的电脑”，在面板单独输入以下配对码（5分钟内有效）：\n${pending.code}\n核对本机公钥指纹：${state.fingerprint}\n仅批准你刚在这台电脑发起的请求；配对码不放入智能体prompt或安装脚本。`);
+  let pending;
+  try { pending = await post(plan.origin, '/api/driver/pair/start', { publicKey: state.publicKey, certificate: state.certificate, name: hostname().slice(0,80), platform: ({ darwin: 'macOS', linux: 'Linux', win32: 'Windows' })[platform()] ?? platform(), shareSsh: plan.shareSsh, ...(plan.browser ? { browser: true } : {}) }); }
+  catch (error) {
+    if (plan.browser && error.statusCode === 400 && error.message === 'invalid_driver_input') throw new Error('控制面尚不支持浏览器接入，请升级控制面；或在本机终端使用不带 --browser 的 connect。未自动输出配对凭据。');
+    throw error;
+  }
+  if (!/^[a-f0-9-]{36}$/.test(pending.id) || (!plan.browser && !/^[A-F0-9]{4}-[A-F0-9]{4}$/.test(pending.code)) || pending.fingerprint !== state.fingerprint || !Number.isSafeInteger(pending.expiresAt)) throw new Error('云端配对响应无效。');
+  if (plan.browser) {
+    const url = pairingBrowserUrl(plan.origin, pending);
+    console.log(`正在打开本机浏览器。请本人登录账号，核对设备后批准一次。\n本机公钥指纹：${state.fingerprint}\n无需填写配对码，也无需回复 Agent；程序会自动等待并核验。`);
+    await openBrowser(url);
+  } else console.log(`请打开 ${plan.origin}，点“连接我的电脑”，在面板单独输入以下配对码（5分钟内有效）：\n${pending.code}\n核对本机公钥指纹：${state.fingerprint}\n仅批准你刚在这台电脑发起的请求；配对码不放入智能体prompt或安装脚本。`);
   const deadline = Math.min(pending.expiresAt, Date.now() + 300_000);
   while (Date.now() < deadline) {
-    const result = await cloudPost(plan.origin, '/api/driver/pair/poll', signedRequest(state.privateKey, plan.origin, '/api/driver/pair/poll', pending.id, {}));
+    const result = await post(plan.origin, '/api/driver/pair/poll', signedRequest(state.privateKey, plan.origin, '/api/driver/pair/poll', pending.id, {}));
     if (result.state === 'approved') {
       if (!/^[a-f0-9-]{36}$/.test(result.driverId) || typeof result.shareSsh !== 'boolean' || result.shareSsh && !plan.shareSsh) throw new Error('云端批准范围无效。');
       state = { ...state, driverId: result.driverId, shareSsh: result.shareSsh, disabled: false }; writeLink(file, state);
-      console.log('已绑定。私钥留在本机，只回报获准字段；远程任务未授权。'); await runLocal(plan); return linkSummary(state);
+      console.log('已绑定。私钥留在本机，只回报获准字段；远程任务未授权。');
+      const since = Date.now();
+      await runDriver(plan);
+      if (!plan.browser) return linkSummary(state);
+      const report = await waitReport({ port: plan.port, driverId: state.driverId, origin: state.origin, since });
+      console.log(report.verified ? '云端已接收首次资源回报，接入完成。' : '账号绑定已完成，但尚未确认首次资源回报。请检查本机服务与网络，不要重复绑定。');
+      return { ...linkSummary(state), firstReport: report };
     }
     if (result.state !== 'pending') throw new Error('配对响应无效。');
     await new Promise(done => setTimeout(done, 5000));

package/scripts/service.mjs

@@ -3,25 +3,29 @@
 // Default command is a plan; importing this module has no side effects.
 import { mkdir, writeFile, unlink, lstat } from 'node:fs/promises';
 import { homedir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
+import { dirname, join, resolve, win32 } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { spawnSync } from 'node:child_process';
+import { defaultDataDirectory, ensurePrivateDirectory, writePrivateJson, readPrivateJson } from '../server/drivers/privateFiles.mjs';
+import { windowsServiceDefinition, windowsTask } from '../server/drivers/windowsService.mjs';
 
 const ROOT = resolve(fileURLToPath(new URL('..', import.meta.url)));
 const LABEL = 'local.device-center.control-plane';
 const xml = (v) => String(v).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&apos;' })[c]);
 const unitQuote = (v) => `"${String(v).replaceAll('\\', '\\\\').replaceAll('"', '\\"').replaceAll('%', '%%')}"`;
 
-export function servicePlan({ platform = process.platform, home = homedir(), root = ROOT, node = process.execPath, port = 5173 } = {}) {
+export function servicePlan({ platform = process.platform, home = homedir(), root = ROOT, node = process.execPath, port = 5173, environment = process.env } = {}) {
   if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new Error('Choose a port from 1024 to 65535.');
   if (![home, root, node].every((s) => typeof s === 'string' && !/[\r\n\0]/.test(s))) throw new Error('Invalid path.');
-  const supported = ['darwin', 'linux'].includes(platform);
-  const dataDirectory = platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : join(home, '.local', 'share', 'device-center');
-  const dbPath = join(dataDirectory, 'device-center.sqlite');
-  const script = join(root, 'server/index.mjs');
-  const manager = platform === 'darwin' ? 'launchd' : platform === 'linux' ? 'systemd' : 'unsupported';
-  const configPath = platform === 'darwin' ? join(home, 'Library', 'LaunchAgents', `${LABEL}.plist`) : join(home, '.config', 'systemd', 'user', 'device-center.service');
+  const supported = ['darwin', 'linux', 'win32'].includes(platform);
+  const dataDirectory = defaultDataDirectory(home, platform);
+  const pathJoin = platform === 'win32' ? win32.join : join;
+  const dbPath = pathJoin(dataDirectory, 'device-center.sqlite');
+  const script = pathJoin(root, 'server', 'index.mjs');
+  const manager = platform === 'darwin' ? 'launchd' : platform === 'linux' ? 'systemd' : platform === 'win32' ? 'windows-task' : 'unsupported';
+  const configPath = platform === 'darwin' ? join(home, 'Library', 'LaunchAgents', `${LABEL}.plist`) : platform === 'win32' ? pathJoin(dataDirectory, 'service.json') : join(home, '.config', 'systemd', 'user', 'device-center.service');
   let configuration = null;
+  let task = null;
   if (platform === 'darwin') {
     configuration = `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0"><dict>
 <key>Label</key><string>${LABEL}</string>
@@ -34,8 +38,11 @@ export function servicePlan({ platform = process.platform, home = homedir(), roo
 </dict></plist>\n`;
   } else if (platform === 'linux') {
     configuration = `[Unit]\nDescription=Device Center local read-only connector\n[Service]\nType=simple\nWorkingDirectory=${unitQuote(root)}\nExecStart=${unitQuote(node)} ${unitQuote(script)}\nEnvironment="PORT=${port}"\nEnvironment=${unitQuote(`DEVICE_CENTER_DB_PATH=${dbPath}`)}\nEnvironment="DEVICE_CENTER_SERVICE_MANAGER=systemd"\nRestart=on-failure\nRestartSec=10\nUMask=0077\nNoNewPrivileges=true\n[Install]\nWantedBy=default.target\n`;
+  } else if (platform === 'win32') {
+    task = windowsServiceDefinition({ home, root, node, script, port, dbPath, logPath: pathJoin(dataDirectory, 'service.log'), errorLogPath: pathJoin(dataDirectory, 'service-error.log'), environment });
+    configuration = JSON.stringify(task);
   }
-  return { supported, manager, label: LABEL, configPath: supported ? configPath : null, dataDirectory, dbPath, url: `http://127.0.0.1:${port}`, node, root, port, configuration, scope: 'current user; starts at login; not a resource Agent', effects: ['Register a user-level background service', 'Create a private local data directory and logs', 'Read-only local MCP; no keys, host access, remote tasks, or Codex config changes'] };
+  return { supported, manager, label: LABEL, configPath: supported ? configPath : null, dataDirectory, dbPath, url: `http://127.0.0.1:${port}`, node, root, port, configuration, ...(task ? { task } : {}), scope: 'current user; starts at login; no reports while logged out, sleeping or offline', effects: ['Register a user-level background service', 'Create a private local data directory and logs', 'Read-only local MCP; no new keys, host access, remote tasks, or AI client config changes'] };
 }
 function run(command, args) {
   const child = spawnSync(command, args, { encoding: 'utf8', timeout: 10_000 });
@@ -44,21 +51,28 @@ function run(command, args) {
 }
 async function exists(path) { try { await lstat(path); return true; } catch (e) { if (e.code === 'ENOENT') return false; throw e; } }
 async function install(plan) {
-  if (!plan.supported) throw new Error('Windows user service installer is not implemented. Use foreground mode or the optional local Docker recipe.');
+  if (!plan.supported) throw new Error('Unsupported user service platform.');
   if (await exists(plan.configPath)) throw new Error('The service config already exists. Inspect it first; this installer will not overwrite it.');
+  if (plan.task && windowsTask('status', plan.task).exists) throw new Error('An existing Windows task was preserved. Inspect it before installing.');
   // Refuse to replace an existing foreground listener or another application.
   try {
     await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1500) });
     throw new Error('The chosen port is already responding. Stop the foreground service yourself or choose another --port.');
   } catch (e) { if (e.message.startsWith('The chosen port')) throw e; }
-  await mkdir(plan.dataDirectory, { recursive: true, mode: 0o700 });
+  ensurePrivateDirectory(plan.dataDirectory);
   await mkdir(dirname(plan.configPath), { recursive: true });
-  await writeFile(plan.configPath, plan.configuration, { flag: 'wx', mode: 0o600 });
+  if (plan.task) writePrivateJson(plan.configPath, plan.task, { create: true });
+  else await writeFile(plan.configPath, plan.configuration, { flag: 'wx', mode: 0o600 });
   if (plan.manager === 'launchd') run('launchctl', ['bootstrap', `gui/${process.getuid()}`, plan.configPath]);
+  else if (plan.task) windowsTask('install', plan.task);
   else { run('systemctl', ['--user', 'daemon-reload']); run('systemctl', ['--user', 'enable', '--now', 'device-center.service']); }
   let healthy = false;
-  for (let attempt = 0; attempt < 12; attempt++) {
-    try { healthy = (await (await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1000) })).json()).ok === true; } catch { /* wait for manager startup */ }
+  for (let attempt = 0; attempt < (plan.task ? 40 : 12); attempt++) {
+    try {
+      const health = await (await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1000) })).json();
+      const status = await (await fetch(`${plan.url}/api/connector/status`, { signal: AbortSignal.timeout(1000) })).json();
+      healthy = health.ok === true && health.mode === 'local' && status.service?.persistence === plan.manager;
+    } catch { /* wait for manager startup */ }
     if (healthy) break;
     await new Promise((done) => setTimeout(done, 250));
   }
@@ -69,8 +83,20 @@ async function uninstall(plan) {
   if (!plan.supported || !await exists(plan.configPath)) throw new Error('No supported user service config exists.');
   // Only remove the exact config generated for this stable repository/runtime.
   const { readFile } = await import('node:fs/promises');
-  if (await readFile(plan.configPath, 'utf8') !== plan.configuration) throw new Error('Service config differs from this plan. Inspect it manually; no overwrite or removal.');
+  const configuration = plan.task ? JSON.stringify(readPrivateJson(plan.configPath, null)) : await readFile(plan.configPath, 'utf8');
+  if (configuration !== plan.configuration) throw new Error('Service config differs from this plan. Inspect it manually; no overwrite or removal.');
   if (plan.manager === 'launchd') run('launchctl', ['bootout', `gui/${process.getuid()}/${LABEL}`]);
+  else if (plan.task) {
+    windowsTask('stop', plan.task);
+    let stopped = false;
+    for (let attempt = 0; attempt < 20; attempt++) {
+      try { await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(500) }); }
+      catch { stopped = true; break; }
+      await new Promise(done => setTimeout(done, 250));
+    }
+    if (!stopped) throw new Error('Task stop did not stop the listener. Config and task retained; inspect Task Scheduler. No unrelated process was killed.');
+    windowsTask('remove', plan.task);
+  }
   else { run('systemctl', ['--user', 'disable', '--now', 'device-center.service']); }
   await unlink(plan.configPath);
   if (plan.manager === 'systemd') run('systemctl', ['--user', 'daemon-reload']);
@@ -92,7 +118,7 @@ export async function main(argv = process.argv.slice(2)) {
   if (command === 'status') {
     let health = null;
     try { health = await (await fetch(`${plan.url}/api/connector/status`, { signal: AbortSignal.timeout(1500) })).json(); } catch { /* stopped */ }
-    return { configExists: plan.supported && await exists(plan.configPath), status: health, url: plan.url, note: 'A present config does not prove a running service. The HTTP response identifies foreground vs managed runtime.' };
+    return { configExists: plan.supported && await exists(plan.configPath), ...(plan.task ? { task: windowsTask('status', plan.task) } : {}), status: health, url: plan.url, note: 'A present config does not prove a running service. The HTTP response identifies foreground vs managed runtime.' };
   }
   if (!confirmed) throw new Error('No system change made. Inspect the plan, then explicitly pass --confirm to install or uninstall the user service.');
   return command === 'install' ? install(plan) : uninstall(plan);

package/server/cloudAccess.mjs

@@ -4,6 +4,7 @@ import { createUnifiedAccess } from './unifiedAccess.mjs';
 
 const SESSION_AGE = 8 * 60 * 60 * 1000;
 const COOKIE = '__Host-device-center';
+const ENTRY_PAGES = new Set(['/', '/index.html', '/login', '/start', '/start.html', '/pair']);
 const digest = (value) => createHash('sha256').update(value).digest('hex');
 const reject = (message) => { throw new Error(message); };
 
@@ -42,9 +43,14 @@ export function createCloudAccess({ publicOrigin, authFile, now = Date.now, fetc
     origin: publicOrigin,
     validate(request) {
       // The process stays on loopback. The proxy preserves Host and overwrites X-Forwarded-Proto.
+      const site = request.headers['sec-fetch-site'];
+      // External links may open HTML pages; API requests, frames and writes remain isolated.
+      const entryNavigation = request.method === 'GET' && ['same-site', 'cross-site'].includes(site) &&
+        request.headers['sec-fetch-mode'] === 'navigate' && request.headers['sec-fetch-dest'] === 'document' &&
+        ENTRY_PAGES.has(new URL(request.url ?? '/', publicOrigin).pathname);
       if (request.headers.host !== url.host || request.headers['x-forwarded-proto'] !== 'https' ||
           (request.headers.origin && request.headers.origin !== publicOrigin) ||
-          (request.headers['sec-fetch-site'] && !['same-origin', 'none'].includes(request.headers['sec-fetch-site']))) {
+          (site && !['same-origin', 'none'].includes(site) && !entryNavigation)) {
         throw Object.assign(new Error('cloud_origin_required'), { statusCode: 403 });
       }
       return publicOrigin;

package/server/drivers/access.mjs

@@ -1,21 +1,15 @@
-import { constants, openSync, closeSync, fstatSync, readFileSync, lstatSync, realpathSync, readSync, writeSync } from 'node:fs';
+import { constants, openSync, closeSync, fstatSync, lstatSync, realpathSync, readSync, writeSync } from 'node:fs';
 import { dirname, isAbsolute, resolve, join } from 'node:path';
 import { isIP } from 'node:net';
 import { publicIdentity, object, fail } from './driverProtocol.mjs';
 import { validateCertificate } from './certificates.mjs';
-import { ensurePrivateDirectory, writeLink } from './cloudLink.mjs';
+import { ensurePrivateDirectory, readPrivateJson, writePrivateJson, assertPrivateFile, secureCreatedPrivateFile } from './privateFiles.mjs';
 
 export const accessFile = linkFile => join(dirname(linkFile), 'access.json');
 export const validFingerprint = fp => typeof fp === 'string' && /^[a-f0-9]{64}$/.test(fp);
 export function privateJson(file, fallback) {
-  let fd;
-  try {
-    fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
-    const s = fstatSync(fd);
-    if (!s.isFile() || s.nlink !== 1 || s.size > 65536 || (s.mode & 0o077) || (process.getuid && s.uid !== process.getuid())) fail('access_private_file_required');
-    return JSON.parse(readFileSync(fd, 'utf8'));
-  } catch(e) { if(e.code === 'ENOENT') return fallback; throw e; }
-  finally { if(fd !== undefined) closeSync(fd); }
+  try { return readPrivateJson(file, fallback); }
+  catch (error) { if (error.message === 'driver_private_file_required') fail('access_private_file_required'); throw error; }
 }
 export function readAccess(file) {
   const value = privateJson(file, { trusts: [], grants: [], listen: null });
@@ -36,6 +30,7 @@ export function lanEndpoint(value) {
 }
 export function safeLogPath(path) {
   if (typeof path !== 'string' || !isAbsolute(path) || path.length > 4096) fail('access_absolute_log_required');
+  if (process.platform === 'win32' && (!/^[A-Za-z]:\\/.test(path) || /[<>:"|?*]/.test(path.slice(2)))) fail('access_local_drive_log_required');
   const canonical = realpathSync(path);
   checkLog(canonical); return canonical;
 }
@@ -52,10 +47,16 @@ export function peerFingerprint(socket) {
 }
 export function audit(file, entry) {
   ensurePrivateDirectory(dirname(file));
-  const fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | constants.O_NOFOLLOW, 0o600);
+  let fd;
+  try { fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | (constants.O_NOFOLLOW ?? 0)); }
+  catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+    fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
+    try { secureCreatedPrivateFile(file); } catch (error) { closeSync(fd); throw error; }
+  }
   try {
     const s = fstatSync(fd);
-    if (!s.isFile() || s.nlink !== 1 || s.mode & 0o077 || s.size > 1024 ** 2 || process.getuid && s.uid !== process.getuid()) fail('access_audit_unavailable');
+    try { assertPrivateFile(file, s, 1024 ** 2); } catch { fail('access_audit_unavailable'); }
     writeSync(fd, JSON.stringify({ ...entry, at: Date.now() }) + '\n');
   } finally { closeSync(fd); }
 }
@@ -69,7 +70,7 @@ export function readGrantedLog({ file, fingerprint, request, route, now = Date.n
   let fd;
   try {
     checkLog(grant.path);
-    fd = openSync(grant.path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    fd = openSync(grant.path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     const s = fstatSync(fd), current = lstatSync(grant.path);
     if (!s.isFile() || s.nlink !== 1 || s.ino !== current.ino || s.dev !== current.dev || realpathSync(grant.path) !== grant.path) fail('access_log_changed');
     const data = Buffer.alloc(Math.min(request.bytes, s.size));
@@ -81,4 +82,4 @@ export function readGrantedLog({ file, fingerprint, request, route, now = Date.n
   } catch(error) { audit(auditFile, { fingerprint, label: request.label, route, outcome: 'denied' }); throw error; }
   finally { if(fd !== undefined) closeSync(fd); }
 }
-export const writeAccess = (file,value) => writeLink(file,value);
+export const writeAccess = (file,value) => writePrivateJson(file,value);

package/server/drivers/browserPairing.mjs

@@ -0,0 +1,46 @@
+import { spawn } from 'node:child_process';
+import { cloudOrigin } from './driverProtocol.mjs';
+import { powershellArguments, powershellPath } from './windowsSecurity.mjs';
+
+export const windowsBrowserSource = `[Console]::InputEncoding = [System.Text.UTF8Encoding]::new($false)\n$ErrorActionPreference = 'Stop'\n$url = [Console]::In.ReadToEnd()\nStart-Process -FilePath $url | Out-Null\n`;
+
+export function pairingBrowserUrl(origin, pending) {
+  cloudOrigin(origin);
+  if (!/^[a-f0-9]{64}$/.test(pending.browserTicket ?? '') || !Number.isSafeInteger(pending.expiresAt)) throw new Error('控制面尚不支持浏览器接入，请升级控制面；或在本机终端使用不带 --browser 的 connect。');
+  const url = new URL('/pair', origin);
+  // Fragments are excluded from HTTP requests and Referer; the page removes this immediately.
+  url.hash = new URLSearchParams({ ticket: pending.browserTicket, expires: String(pending.expiresAt) }).toString();
+  return url.href;
+}
+
+export async function openPairingBrowser(url, { platform = process.platform, spawnImpl = spawn, environment = process.env } = {}) {
+  const target = new URL(url);
+  cloudOrigin(target.origin);
+  if (target.pathname !== '/pair' || target.search || !/^#ticket=[a-f0-9]{64}&expires=\d+$/.test(target.hash)) throw new Error('无效的浏览器交接。');
+  const windows = platform === 'win32';
+  const command = platform === 'darwin' ? '/usr/bin/open' : platform === 'linux' ? 'xdg-open' : windows ? powershellPath(environment) : null;
+  if (!command) throw new Error('此系统尚不支持浏览器接入。');
+  // No shell, URL echo or opener output in the Agent transcript.
+  await new Promise((resolve, reject) => {
+    const child = spawnImpl(command, windows ? powershellArguments(windowsBrowserSource) : [target.href], windows ? { stdio: ['pipe', 'ignore', 'ignore'], shell: false, windowsHide: true } : { stdio: 'ignore', shell: false });
+    if (windows) { child.stdin.on('error', () => {}); child.stdin.end(target.href); }
+    const timer = setTimeout(() => { child.kill(); reject(new Error('无法打开本机浏览器。请在本机终端执行不带 --browser 的 connect 手动配对；不会自动输出凭据。')); }, 10_000);
+    child.once('error', () => { clearTimeout(timer); reject(new Error('无法打开本机浏览器，请在本机终端使用不带 --browser 的 connect 手动配对。')); });
+    child.once('close', code => { clearTimeout(timer); code === 0 ? resolve() : reject(new Error('浏览器打开失败，请在本机终端使用不带 --browser 的 connect 手动配对。')); });
+  });
+}
+
+export async function waitForFirstReport({ port, driverId, origin, since, fetchImpl = fetch, now = Date.now, sleep = ms => new Promise(done => setTimeout(done, ms)), timeoutMs = 75_000 }) {
+  const deadline = now() + timeoutMs;
+  while (now() < deadline) {
+    try {
+      const reply = await fetchImpl(`http://127.0.0.1:${port}/api/driver/link`, { signal: AbortSignal.timeout(1500), redirect: 'error' });
+      if (reply.ok) {
+        const link = await reply.json();
+        if (link.protocol === 'device-center-driver-v1' && link.driverId === driverId && link.origin === origin && !link.disabled && link.publisher?.state === 'connected' && link.publisher.lastSuccess >= since) return { verified: true, receivedAt: link.publisher.lastSuccess };
+      }
+    } catch { /* Registration and cloud delivery are separate results. */ }
+    await sleep(1500);
+  }
+  return { verified: false, reason: 'first_report_timeout' };
+}

package/server/drivers/cloudLink.mjs

@@ -1,38 +1,37 @@
-import { constants, openSync, closeSync, fstatSync, readFileSync, mkdirSync, lstatSync, writeFileSync, renameSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { createHash, createPrivateKey, createPublicKey, randomBytes } from 'node:crypto';
+import { join } from 'node:path';
+import { createHash, createPrivateKey, createPublicKey } from 'node:crypto';
 import { cloudOrigin, signedRequest, publicIdentity } from './driverProtocol.mjs';
 import { observeLocalDriver } from './local.mjs';
 import { validateCertificate } from './certificates.mjs';
+import { readPrivateJson, writePrivateJson, defaultDataDirectory } from './privateFiles.mjs';
+import { protectWindowsIdentity, unprotectWindowsIdentity } from './windowsSecurity.mjs';
+export { ensurePrivateDirectory, defaultDataDirectory } from './privateFiles.mjs';
 
-export const defaultLinkFile = (home = homedir(), platform = process.platform) => join(platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : join(home, '.local', 'share', 'device-center'), 'driver-link.json');
+export const defaultLinkFile = (home = homedir(), platform = process.platform) => join(defaultDataDirectory(home, platform), 'driver-link.json');
+const decrypted = new Map();
 export function readLink(file) {
-  let fd;
   try {
-    fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
-    const info = fstatSync(fd);
-    if (!info.isFile() || info.nlink !== 1 || info.size > 8192 || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_file_required');
-    const state = JSON.parse(readFileSync(fd, 'utf8'));
+    const stored = readPrivateJson(file, null, process.platform === 'win32' ? 32768 : 8192);
+    if (stored === null) return null;
+    let state = stored;
+    if (process.platform === 'win32') {
+      const cached = decrypted.get(file);
+      state = cached?.data === stored.data ? structuredClone(cached.state) : unprotectWindowsIdentity(stored);
+      if (stored.format !== 'device-center-dpapi-v1') throw new Error('windows_encrypted_identity_required');
+      if (decrypted.size > 8) decrypted.clear();
+      decrypted.set(file, { data: stored.data, state: structuredClone(state) });
+    }
     cloudOrigin(state.origin);
     const key = createPrivateKey(state.privateKey), identity = publicIdentity(state.publicKey);
     if (key.asymmetricKeyType !== 'ed25519' || createPublicKey(key).export({ type: 'spki', format: 'pem' }).toString() !== identity.publicKey || identity.fingerprint !== state.fingerprint || typeof state.shareSsh !== 'boolean' || typeof state.disabled !== 'boolean' || (state.driverId != null && !/^[a-f0-9-]{36}$/.test(state.driverId))) throw new Error('driver_private_file_invalid');
     if (state.certificate) validateCertificate(state.certificate, state.fingerprint, Date.now(), true);
     return state;
   } catch (error) { if (error.code === 'ENOENT') return null; throw new Error('driver_private_file_invalid'); }
-  finally { if (fd !== undefined) closeSync(fd); }
-}
-export function ensurePrivateDirectory(directory) {
-  mkdirSync(directory, { recursive: true, mode: 0o700 });
-  const info = lstatSync(directory);
-  if (!info.isDirectory() || info.isSymbolicLink() || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_directory_required');
 }
 export function writeLink(file, state, { create = false } = {}) {
-  ensurePrivateDirectory(dirname(file));
-  if (create) { writeFileSync(file, JSON.stringify(state), { mode: 0o600, flag: 'wx' }); return; }
-  const temp = `${file}.${randomBytes(6).toString('hex')}.tmp`;
-  writeFileSync(temp, JSON.stringify(state), { mode: 0o600, flag: 'wx' });
-  renameSync(temp, file);
+  writePrivateJson(file, process.platform === 'win32' ? protectWindowsIdentity(state) : state, { create });
+  decrypted.delete(file);
 }
 export function linkSummary(state) {
   return { protocol: 'device-center-driver-v1', configured: Boolean(state?.driverId && !state.disabled), origin: state?.origin ?? null, driverId: state?.driverId ?? null, fingerprint: state?.fingerprint ?? null, secureTransportReady: Boolean(state?.certificate), shareSsh: Boolean(state?.shareSsh), disabled: Boolean(state?.disabled) };

package/server/drivers/cloudRegistry.mjs

@@ -20,6 +20,8 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
   }
   db.exec('CREATE INDEX IF NOT EXISTS cloud_drivers_tenant_created ON cloud_drivers(tenant_id, created_at)');
   for (const table of ['driver_pairings', 'cloud_drivers']) if (!db.prepare(`PRAGMA table_info(${table})`).all().some(c => c.name === 'certificate')) db.exec(`ALTER TABLE ${table} ADD COLUMN certificate TEXT`);
+  if (!db.prepare('PRAGMA table_info(driver_pairings)').all().some(c => c.name === 'browser_hash')) db.exec('ALTER TABLE driver_pairings ADD COLUMN browser_hash TEXT');
+  db.exec('CREATE UNIQUE INDEX IF NOT EXISTS driver_pairings_browser ON driver_pairings(browser_hash)');
   if (!db.prepare('PRAGMA table_info(cloud_drivers)').all().some(c => c.name === 'control_seen_at')) db.exec('ALTER TABLE cloud_drivers ADD COLUMN control_seen_at INTEGER');
   db.exec(`CREATE TABLE IF NOT EXISTS driver_collection_requests (driver_id TEXT PRIMARY KEY, request_id TEXT NOT NULL,
     requested_at INTEGER NOT NULL, expires_at INTEGER NOT NULL, completed_at INTEGER)`);
@@ -43,6 +45,13 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
     if (!row || row.expires_at <= now()) fail('driver_pairing_expired', 410);
     return row;
   }
+  function credential(input) {
+    if (input.browserTicket !== undefined) {
+      if (input.code !== undefined || typeof input.browserTicket !== 'string' || !/^[a-f0-9]{64}$/.test(input.browserTicket)) fail('invalid_pairing_code');
+      return { column: 'browser_hash', hash: publicCodeHash(input.browserTicket) };
+    }
+    return { column: 'code_hash', hash: hashCode(input.code) };
+  }
   function proof(row, path, input) {
     verifyRequest(row.public_key, origin, path, input, now());
     db.prepare('DELETE FROM driver_nonces WHERE expires_at<=?').run(now());
@@ -76,7 +85,8 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
   const registry = {
     start(input) {
       starts = limited(starts, 8);
-      object(input, ['publicKey', 'name', 'platform', 'shareSsh', 'certificate']);
+      object(input, ['publicKey', 'name', 'platform', 'shareSsh', 'certificate', 'browser']);
+      if (input.browser !== undefined && typeof input.browser !== 'boolean') fail('invalid_driver_scope');
       const identity = publicIdentity(input.publicKey);
       const certificate = input.certificate == null ? null : validateCertificate(input.certificate, identity.fingerprint, now());
       const name = text(input.name), platform = text(input.platform, 64);
@@ -87,6 +97,11 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
       if (db.prepare('SELECT count(*) AS n FROM driver_pairings').get().n >= 32) fail('driver_pairing_busy', 429);
       const id = randomUUID(), raw = randomBytes(4).toString('hex').toUpperCase(), code = `${raw.slice(0,4)}-${raw.slice(4)}`;
       db.prepare('INSERT INTO driver_pairings (id,code_hash,public_key,fingerprint,name,platform,requested_ssh,created_at,expires_at,certificate) VALUES (?,?,?,?,?,?,?,?,?,?)').run(id, hashCode(code), identity.publicKey, identity.fingerprint, name, platform, Number(input.shareSsh), now(), now() + PAIR_AGE, certificate);
+      if (input.browser) {
+        const browserTicket = randomBytes(32).toString('hex');
+        db.prepare('UPDATE driver_pairings SET browser_hash=? WHERE id=?').run(publicCodeHash(browserTicket), id);
+        return { id, browserTicket, fingerprint: identity.fingerprint, expiresAt: now() + PAIR_AGE, pollIntervalMs: 5000 };
+      }
       return { id, code, fingerprint: identity.fingerprint, expiresAt: now() + PAIR_AGE, verificationUrl: origin, pollIntervalMs: 5000 };
     },
     poll(input) {
@@ -102,24 +117,26 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
     },
     lookup(input, tenantId) {
       globalLookups = limited(globalLookups, 64);
-      limitAccount(lookups, tenantId); object(input, ['code']);
-      const row = db.prepare('SELECT * FROM driver_pairings WHERE code_hash=?').get(hashCode(input.code));
+      limitAccount(lookups, tenantId); object(input, ['code', 'browserTicket']);
+      const proof = credential(input);
+      const row = db.prepare(`SELECT * FROM driver_pairings WHERE ${proof.column}=?`).get(proof.hash);
       if (!row || row.expires_at <= now() || row.driver_id) fail('driver_pairing_unavailable', 404);
       return { id: row.id, name: row.name, platform: row.platform, fingerprint: row.fingerprint, requestedSsh: Boolean(row.requested_ssh), expiresAt: row.expires_at };
     },
     approve(input, tenantId) {
       globalApprovals = limited(globalApprovals, 64); limitAccount(approvals, tenantId);
-      object(input, ['id', 'code', 'fingerprint', 'shareSsh']);
+      object(input, ['id', 'code', 'browserTicket', 'fingerprint', 'shareSsh']);
       if (typeof input.id !== 'string' || typeof input.shareSsh !== 'boolean') fail('invalid_driver_approval');
-      if (multiUser && (typeof input.code !== 'string' || typeof input.fingerprint !== 'string')) fail('driver_pairing_confirmation_required');
+      if ((multiUser || input.browserTicket !== undefined) && ((typeof input.code !== 'string' && typeof input.browserTicket !== 'string') || typeof input.fingerprint !== 'string')) fail('driver_pairing_confirmation_required');
       db.exec('BEGIN IMMEDIATE');
       try {
         const row = pairing(input.id);
+        if (row.browser_hash != null && ((input.code === undefined && input.browserTicket === undefined) || typeof input.fingerprint !== 'string')) fail('driver_pairing_confirmation_required');
         if (row.driver_id) {
           if (!db.prepare('SELECT id FROM cloud_drivers WHERE id=? AND tenant_id=?').get(row.driver_id, tenantId)) fail('driver_pairing_unavailable', 404);
           fail('driver_pairing_consumed', 409);
         }
-        if (input.code !== undefined && hashCode(input.code) !== row.code_hash) fail('driver_pairing_unavailable', 404);
+        if (input.code !== undefined || input.browserTicket !== undefined) { const proof = credential(input); if (proof.hash !== row[proof.column]) fail('driver_pairing_unavailable', 404); }
         if (input.fingerprint !== undefined && input.fingerprint !== row.fingerprint) fail('driver_pairing_confirmation_required');
         if (input.shareSsh && !row.requested_ssh) fail('driver_scope_violation');
         if (db.prepare('SELECT count(*) AS n FROM cloud_drivers WHERE tenant_id=? AND revoked_at IS NULL').get(tenantId).n >= 16) fail('driver_limit', 409);

package/server/drivers/privateFiles.mjs

@@ -0,0 +1,57 @@
+import { constants, openSync, closeSync, fstatSync, readFileSync, mkdirSync, lstatSync, writeFileSync, renameSync } from 'node:fs';
+import { dirname, join, win32 } from 'node:path';
+import { homedir } from 'node:os';
+import { randomBytes } from 'node:crypto';
+import { windowsStorage } from './windowsSecurity.mjs';
+
+export const defaultDataDirectory = (home = homedir(), platform = process.platform) => platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : platform === 'win32' ? win32.join(home, 'AppData', 'Local', 'Device Center') : join(home, '.local', 'share', 'device-center');
+
+// Recheck Windows ACLs at least every 30s, or immediately when file metadata changes.
+// This avoids launching PowerShell on every 5s control poll. No private data is cached here.
+const checked = new Map();
+export function secureCreatedPrivateFile(file) {
+  if (process.platform === 'win32') windowsStorage('secure-new-file', { path: file });
+}
+export function ensurePrivateDirectory(directory) {
+  if (process.platform === 'win32') { windowsStorage('ensure-directory', { path: directory }); return; }
+  mkdirSync(directory, { recursive: true, mode: 0o700 });
+  const info = lstatSync(directory);
+  if (!info.isDirectory() || info.isSymbolicLink() || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_directory_required');
+}
+export function assertPrivateFile(file, info, limit = 65536) {
+  const pathInfo = lstatSync(file);
+  if (!info.isFile() || info.nlink !== 1 || info.size > limit || pathInfo.isSymbolicLink() || info.dev !== pathInfo.dev || info.ino !== pathInfo.ino) throw new Error('driver_private_file_required');
+  if (process.platform !== 'win32') {
+    if ((info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_file_required');
+    return;
+  }
+  const signature = `${info.dev}:${info.ino}:${info.ctimeMs}:${info.mtimeMs}:${info.size}`;
+  const previous = checked.get(file);
+  if (!previous || previous.signature !== signature || Date.now() - previous.at >= 30_000) {
+    windowsStorage('assert-file', { path: file });
+    if (checked.size > 32) checked.clear();
+    checked.set(file, { signature, at: Date.now() });
+  }
+}
+export function readPrivateJson(file, fallback, limit = 65536) {
+  let fd;
+  try {
+    fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    assertPrivateFile(file, fstatSync(fd), limit);
+    return JSON.parse(readFileSync(fd, 'utf8'));
+  } catch (error) { if (error.code === 'ENOENT') return fallback; throw error; }
+  finally { if (fd !== undefined) closeSync(fd); }
+}
+export function writePrivateJson(file, value, { create = false } = {}) {
+  ensurePrivateDirectory(dirname(file));
+  const target = create ? file : `${file}.${randomBytes(6).toString('hex')}.tmp`;
+  writeFileSync(target, JSON.stringify(value), { mode: 0o600, flag: 'wx' });
+  // Windows files inherit the protected directory ACL. Validate before activation.
+  if (process.platform === 'win32') {
+    secureCreatedPrivateFile(target);
+    const fd = openSync(target, constants.O_RDONLY);
+    try { assertPrivateFile(target, fstatSync(fd)); } finally { closeSync(fd); }
+  }
+  if (!create) renameSync(target, file);
+  checked.delete(file);
+}