device-center 0.2.0-beta.4 → 0.2.0-beta.5

package/scripts/service.mjs

@@ -3,25 +3,29 @@
 // Default command is a plan; importing this module has no side effects.
 import { mkdir, writeFile, unlink, lstat } from 'node:fs/promises';
 import { homedir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
+import { dirname, join, resolve, win32 } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { spawnSync } from 'node:child_process';
+import { defaultDataDirectory, ensurePrivateDirectory, writePrivateJson, readPrivateJson } from '../server/drivers/privateFiles.mjs';
+import { windowsServiceDefinition, windowsTask } from '../server/drivers/windowsService.mjs';
 
 const ROOT = resolve(fileURLToPath(new URL('..', import.meta.url)));
 const LABEL = 'local.device-center.control-plane';
 const xml = (v) => String(v).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&apos;' })[c]);
 const unitQuote = (v) => `"${String(v).replaceAll('\\', '\\\\').replaceAll('"', '\\"').replaceAll('%', '%%')}"`;
 
-export function servicePlan({ platform = process.platform, home = homedir(), root = ROOT, node = process.execPath, port = 5173 } = {}) {
+export function servicePlan({ platform = process.platform, home = homedir(), root = ROOT, node = process.execPath, port = 5173, environment = process.env } = {}) {
   if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new Error('Choose a port from 1024 to 65535.');
   if (![home, root, node].every((s) => typeof s === 'string' && !/[\r\n\0]/.test(s))) throw new Error('Invalid path.');
-  const supported = ['darwin', 'linux'].includes(platform);
-  const dataDirectory = platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : join(home, '.local', 'share', 'device-center');
-  const dbPath = join(dataDirectory, 'device-center.sqlite');
-  const script = join(root, 'server/index.mjs');
-  const manager = platform === 'darwin' ? 'launchd' : platform === 'linux' ? 'systemd' : 'unsupported';
-  const configPath = platform === 'darwin' ? join(home, 'Library', 'LaunchAgents', `${LABEL}.plist`) : join(home, '.config', 'systemd', 'user', 'device-center.service');
+  const supported = ['darwin', 'linux', 'win32'].includes(platform);
+  const dataDirectory = defaultDataDirectory(home, platform);
+  const pathJoin = platform === 'win32' ? win32.join : join;
+  const dbPath = pathJoin(dataDirectory, 'device-center.sqlite');
+  const script = pathJoin(root, 'server', 'index.mjs');
+  const manager = platform === 'darwin' ? 'launchd' : platform === 'linux' ? 'systemd' : platform === 'win32' ? 'windows-task' : 'unsupported';
+  const configPath = platform === 'darwin' ? join(home, 'Library', 'LaunchAgents', `${LABEL}.plist`) : platform === 'win32' ? pathJoin(dataDirectory, 'service.json') : join(home, '.config', 'systemd', 'user', 'device-center.service');
   let configuration = null;
+  let task = null;
   if (platform === 'darwin') {
     configuration = `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0"><dict>
 <key>Label</key><string>${LABEL}</string>
@@ -34,8 +38,11 @@ export function servicePlan({ platform = process.platform, home = homedir(), roo
 </dict></plist>\n`;
   } else if (platform === 'linux') {
     configuration = `[Unit]\nDescription=Device Center local read-only connector\n[Service]\nType=simple\nWorkingDirectory=${unitQuote(root)}\nExecStart=${unitQuote(node)} ${unitQuote(script)}\nEnvironment="PORT=${port}"\nEnvironment=${unitQuote(`DEVICE_CENTER_DB_PATH=${dbPath}`)}\nEnvironment="DEVICE_CENTER_SERVICE_MANAGER=systemd"\nRestart=on-failure\nRestartSec=10\nUMask=0077\nNoNewPrivileges=true\n[Install]\nWantedBy=default.target\n`;
+  } else if (platform === 'win32') {
+    task = windowsServiceDefinition({ home, root, node, script, port, dbPath, logPath: pathJoin(dataDirectory, 'service.log'), errorLogPath: pathJoin(dataDirectory, 'service-error.log'), environment });
+    configuration = JSON.stringify(task);
   }
-  return { supported, manager, label: LABEL, configPath: supported ? configPath : null, dataDirectory, dbPath, url: `http://127.0.0.1:${port}`, node, root, port, configuration, scope: 'current user; starts at login; not a resource Agent', effects: ['Register a user-level background service', 'Create a private local data directory and logs', 'Read-only local MCP; no keys, host access, remote tasks, or Codex config changes'] };
+  return { supported, manager, label: LABEL, configPath: supported ? configPath : null, dataDirectory, dbPath, url: `http://127.0.0.1:${port}`, node, root, port, configuration, ...(task ? { task } : {}), scope: 'current user; starts at login; no reports while logged out, sleeping or offline', effects: ['Register a user-level background service', 'Create a private local data directory and logs', 'Read-only local MCP; no new keys, host access, remote tasks, or AI client config changes'] };
 }
 function run(command, args) {
   const child = spawnSync(command, args, { encoding: 'utf8', timeout: 10_000 });
@@ -44,21 +51,28 @@ function run(command, args) {
 }
 async function exists(path) { try { await lstat(path); return true; } catch (e) { if (e.code === 'ENOENT') return false; throw e; } }
 async function install(plan) {
-  if (!plan.supported) throw new Error('Windows user service installer is not implemented. Use foreground mode or the optional local Docker recipe.');
+  if (!plan.supported) throw new Error('Unsupported user service platform.');
   if (await exists(plan.configPath)) throw new Error('The service config already exists. Inspect it first; this installer will not overwrite it.');
+  if (plan.task && windowsTask('status', plan.task).exists) throw new Error('An existing Windows task was preserved. Inspect it before installing.');
   // Refuse to replace an existing foreground listener or another application.
   try {
     await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1500) });
     throw new Error('The chosen port is already responding. Stop the foreground service yourself or choose another --port.');
   } catch (e) { if (e.message.startsWith('The chosen port')) throw e; }
-  await mkdir(plan.dataDirectory, { recursive: true, mode: 0o700 });
+  ensurePrivateDirectory(plan.dataDirectory);
   await mkdir(dirname(plan.configPath), { recursive: true });
-  await writeFile(plan.configPath, plan.configuration, { flag: 'wx', mode: 0o600 });
+  if (plan.task) writePrivateJson(plan.configPath, plan.task, { create: true });
+  else await writeFile(plan.configPath, plan.configuration, { flag: 'wx', mode: 0o600 });
   if (plan.manager === 'launchd') run('launchctl', ['bootstrap', `gui/${process.getuid()}`, plan.configPath]);
+  else if (plan.task) windowsTask('install', plan.task);
   else { run('systemctl', ['--user', 'daemon-reload']); run('systemctl', ['--user', 'enable', '--now', 'device-center.service']); }
   let healthy = false;
-  for (let attempt = 0; attempt < 12; attempt++) {
-    try { healthy = (await (await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1000) })).json()).ok === true; } catch { /* wait for manager startup */ }
+  for (let attempt = 0; attempt < (plan.task ? 40 : 12); attempt++) {
+    try {
+      const health = await (await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1000) })).json();
+      const status = await (await fetch(`${plan.url}/api/connector/status`, { signal: AbortSignal.timeout(1000) })).json();
+      healthy = health.ok === true && health.mode === 'local' && status.service?.persistence === plan.manager;
+    } catch { /* wait for manager startup */ }
     if (healthy) break;
     await new Promise((done) => setTimeout(done, 250));
   }
@@ -69,8 +83,20 @@ async function uninstall(plan) {
   if (!plan.supported || !await exists(plan.configPath)) throw new Error('No supported user service config exists.');
   // Only remove the exact config generated for this stable repository/runtime.
   const { readFile } = await import('node:fs/promises');
-  if (await readFile(plan.configPath, 'utf8') !== plan.configuration) throw new Error('Service config differs from this plan. Inspect it manually; no overwrite or removal.');
+  const configuration = plan.task ? JSON.stringify(readPrivateJson(plan.configPath, null)) : await readFile(plan.configPath, 'utf8');
+  if (configuration !== plan.configuration) throw new Error('Service config differs from this plan. Inspect it manually; no overwrite or removal.');
   if (plan.manager === 'launchd') run('launchctl', ['bootout', `gui/${process.getuid()}/${LABEL}`]);
+  else if (plan.task) {
+    windowsTask('stop', plan.task);
+    let stopped = false;
+    for (let attempt = 0; attempt < 20; attempt++) {
+      try { await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(500) }); }
+      catch { stopped = true; break; }
+      await new Promise(done => setTimeout(done, 250));
+    }
+    if (!stopped) throw new Error('Task stop did not stop the listener. Config and task retained; inspect Task Scheduler. No unrelated process was killed.');
+    windowsTask('remove', plan.task);
+  }
   else { run('systemctl', ['--user', 'disable', '--now', 'device-center.service']); }
   await unlink(plan.configPath);
   if (plan.manager === 'systemd') run('systemctl', ['--user', 'daemon-reload']);
@@ -92,7 +118,7 @@ export async function main(argv = process.argv.slice(2)) {
   if (command === 'status') {
     let health = null;
     try { health = await (await fetch(`${plan.url}/api/connector/status`, { signal: AbortSignal.timeout(1500) })).json(); } catch { /* stopped */ }
-    return { configExists: plan.supported && await exists(plan.configPath), status: health, url: plan.url, note: 'A present config does not prove a running service. The HTTP response identifies foreground vs managed runtime.' };
+    return { configExists: plan.supported && await exists(plan.configPath), ...(plan.task ? { task: windowsTask('status', plan.task) } : {}), status: health, url: plan.url, note: 'A present config does not prove a running service. The HTTP response identifies foreground vs managed runtime.' };
   }
   if (!confirmed) throw new Error('No system change made. Inspect the plan, then explicitly pass --confirm to install or uninstall the user service.');
   return command === 'install' ? install(plan) : uninstall(plan);

package/server/drivers/access.mjs

@@ -1,21 +1,15 @@
-import { constants, openSync, closeSync, fstatSync, readFileSync, lstatSync, realpathSync, readSync, writeSync } from 'node:fs';
+import { constants, openSync, closeSync, fstatSync, lstatSync, realpathSync, readSync, writeSync } from 'node:fs';
 import { dirname, isAbsolute, resolve, join } from 'node:path';
 import { isIP } from 'node:net';
 import { publicIdentity, object, fail } from './driverProtocol.mjs';
 import { validateCertificate } from './certificates.mjs';
-import { ensurePrivateDirectory, writeLink } from './cloudLink.mjs';
+import { ensurePrivateDirectory, readPrivateJson, writePrivateJson, assertPrivateFile, secureCreatedPrivateFile } from './privateFiles.mjs';
 
 export const accessFile = linkFile => join(dirname(linkFile), 'access.json');
 export const validFingerprint = fp => typeof fp === 'string' && /^[a-f0-9]{64}$/.test(fp);
 export function privateJson(file, fallback) {
-  let fd;
-  try {
-    fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
-    const s = fstatSync(fd);
-    if (!s.isFile() || s.nlink !== 1 || s.size > 65536 || (s.mode & 0o077) || (process.getuid && s.uid !== process.getuid())) fail('access_private_file_required');
-    return JSON.parse(readFileSync(fd, 'utf8'));
-  } catch(e) { if(e.code === 'ENOENT') return fallback; throw e; }
-  finally { if(fd !== undefined) closeSync(fd); }
+  try { return readPrivateJson(file, fallback); }
+  catch (error) { if (error.message === 'driver_private_file_required') fail('access_private_file_required'); throw error; }
 }
 export function readAccess(file) {
   const value = privateJson(file, { trusts: [], grants: [], listen: null });
@@ -36,6 +30,7 @@ export function lanEndpoint(value) {
 }
 export function safeLogPath(path) {
   if (typeof path !== 'string' || !isAbsolute(path) || path.length > 4096) fail('access_absolute_log_required');
+  if (process.platform === 'win32' && (!/^[A-Za-z]:\\/.test(path) || /[<>:"|?*]/.test(path.slice(2)))) fail('access_local_drive_log_required');
   const canonical = realpathSync(path);
   checkLog(canonical); return canonical;
 }
@@ -52,10 +47,16 @@ export function peerFingerprint(socket) {
 }
 export function audit(file, entry) {
   ensurePrivateDirectory(dirname(file));
-  const fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | constants.O_NOFOLLOW, 0o600);
+  let fd;
+  try { fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | (constants.O_NOFOLLOW ?? 0)); }
+  catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+    fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
+    try { secureCreatedPrivateFile(file); } catch (error) { closeSync(fd); throw error; }
+  }
   try {
     const s = fstatSync(fd);
-    if (!s.isFile() || s.nlink !== 1 || s.mode & 0o077 || s.size > 1024 ** 2 || process.getuid && s.uid !== process.getuid()) fail('access_audit_unavailable');
+    try { assertPrivateFile(file, s, 1024 ** 2); } catch { fail('access_audit_unavailable'); }
     writeSync(fd, JSON.stringify({ ...entry, at: Date.now() }) + '\n');
   } finally { closeSync(fd); }
 }
@@ -69,7 +70,7 @@ export function readGrantedLog({ file, fingerprint, request, route, now = Date.n
   let fd;
   try {
     checkLog(grant.path);
-    fd = openSync(grant.path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    fd = openSync(grant.path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     const s = fstatSync(fd), current = lstatSync(grant.path);
     if (!s.isFile() || s.nlink !== 1 || s.ino !== current.ino || s.dev !== current.dev || realpathSync(grant.path) !== grant.path) fail('access_log_changed');
     const data = Buffer.alloc(Math.min(request.bytes, s.size));
@@ -81,4 +82,4 @@ export function readGrantedLog({ file, fingerprint, request, route, now = Date.n
   } catch(error) { audit(auditFile, { fingerprint, label: request.label, route, outcome: 'denied' }); throw error; }
   finally { if(fd !== undefined) closeSync(fd); }
 }
-export const writeAccess = (file,value) => writeLink(file,value);
+export const writeAccess = (file,value) => writePrivateJson(file,value);

package/server/drivers/browserPairing.mjs

@@ -1,5 +1,8 @@
 import { spawn } from 'node:child_process';
 import { cloudOrigin } from './driverProtocol.mjs';
+import { powershellArguments, powershellPath } from './windowsSecurity.mjs';
+
+export const windowsBrowserSource = `[Console]::InputEncoding = [System.Text.UTF8Encoding]::new($false)\n$ErrorActionPreference = 'Stop'\n$url = [Console]::In.ReadToEnd()\nStart-Process -FilePath $url | Out-Null\n`;
 
 export function pairingBrowserUrl(origin, pending) {
   cloudOrigin(origin);
@@ -10,15 +13,17 @@ export function pairingBrowserUrl(origin, pending) {
   return url.href;
 }
 
-export async function openPairingBrowser(url, { platform = process.platform, spawnImpl = spawn } = {}) {
+export async function openPairingBrowser(url, { platform = process.platform, spawnImpl = spawn, environment = process.env } = {}) {
   const target = new URL(url);
   cloudOrigin(target.origin);
   if (target.pathname !== '/pair' || target.search || !/^#ticket=[a-f0-9]{64}&expires=\d+$/.test(target.hash)) throw new Error('无效的浏览器交接。');
-  const command = platform === 'darwin' ? '/usr/bin/open' : platform === 'linux' ? 'xdg-open' : null;
+  const windows = platform === 'win32';
+  const command = platform === 'darwin' ? '/usr/bin/open' : platform === 'linux' ? 'xdg-open' : windows ? powershellPath(environment) : null;
   if (!command) throw new Error('此系统尚不支持浏览器接入。');
   // No shell, URL echo or opener output in the Agent transcript.
   await new Promise((resolve, reject) => {
-    const child = spawnImpl(command, [target.href], { stdio: 'ignore', shell: false });
+    const child = spawnImpl(command, windows ? powershellArguments(windowsBrowserSource) : [target.href], windows ? { stdio: ['pipe', 'ignore', 'ignore'], shell: false, windowsHide: true } : { stdio: 'ignore', shell: false });
+    if (windows) { child.stdin.on('error', () => {}); child.stdin.end(target.href); }
     const timer = setTimeout(() => { child.kill(); reject(new Error('无法打开本机浏览器。请在本机终端执行不带 --browser 的 connect 手动配对；不会自动输出凭据。')); }, 10_000);
     child.once('error', () => { clearTimeout(timer); reject(new Error('无法打开本机浏览器，请在本机终端使用不带 --browser 的 connect 手动配对。')); });
     child.once('close', code => { clearTimeout(timer); code === 0 ? resolve() : reject(new Error('浏览器打开失败，请在本机终端使用不带 --browser 的 connect 手动配对。')); });

package/server/drivers/cloudLink.mjs

@@ -1,38 +1,37 @@
-import { constants, openSync, closeSync, fstatSync, readFileSync, mkdirSync, lstatSync, writeFileSync, renameSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { createHash, createPrivateKey, createPublicKey, randomBytes } from 'node:crypto';
+import { join } from 'node:path';
+import { createHash, createPrivateKey, createPublicKey } from 'node:crypto';
 import { cloudOrigin, signedRequest, publicIdentity } from './driverProtocol.mjs';
 import { observeLocalDriver } from './local.mjs';
 import { validateCertificate } from './certificates.mjs';
+import { readPrivateJson, writePrivateJson, defaultDataDirectory } from './privateFiles.mjs';
+import { protectWindowsIdentity, unprotectWindowsIdentity } from './windowsSecurity.mjs';
+export { ensurePrivateDirectory, defaultDataDirectory } from './privateFiles.mjs';
 
-export const defaultLinkFile = (home = homedir(), platform = process.platform) => join(platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : join(home, '.local', 'share', 'device-center'), 'driver-link.json');
+export const defaultLinkFile = (home = homedir(), platform = process.platform) => join(defaultDataDirectory(home, platform), 'driver-link.json');
+const decrypted = new Map();
 export function readLink(file) {
-  let fd;
   try {
-    fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
-    const info = fstatSync(fd);
-    if (!info.isFile() || info.nlink !== 1 || info.size > 8192 || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_file_required');
-    const state = JSON.parse(readFileSync(fd, 'utf8'));
+    const stored = readPrivateJson(file, null, process.platform === 'win32' ? 32768 : 8192);
+    if (stored === null) return null;
+    let state = stored;
+    if (process.platform === 'win32') {
+      const cached = decrypted.get(file);
+      state = cached?.data === stored.data ? structuredClone(cached.state) : unprotectWindowsIdentity(stored);
+      if (stored.format !== 'device-center-dpapi-v1') throw new Error('windows_encrypted_identity_required');
+      if (decrypted.size > 8) decrypted.clear();
+      decrypted.set(file, { data: stored.data, state: structuredClone(state) });
+    }
     cloudOrigin(state.origin);
     const key = createPrivateKey(state.privateKey), identity = publicIdentity(state.publicKey);
     if (key.asymmetricKeyType !== 'ed25519' || createPublicKey(key).export({ type: 'spki', format: 'pem' }).toString() !== identity.publicKey || identity.fingerprint !== state.fingerprint || typeof state.shareSsh !== 'boolean' || typeof state.disabled !== 'boolean' || (state.driverId != null && !/^[a-f0-9-]{36}$/.test(state.driverId))) throw new Error('driver_private_file_invalid');
     if (state.certificate) validateCertificate(state.certificate, state.fingerprint, Date.now(), true);
     return state;
   } catch (error) { if (error.code === 'ENOENT') return null; throw new Error('driver_private_file_invalid'); }
-  finally { if (fd !== undefined) closeSync(fd); }
-}
-export function ensurePrivateDirectory(directory) {
-  mkdirSync(directory, { recursive: true, mode: 0o700 });
-  const info = lstatSync(directory);
-  if (!info.isDirectory() || info.isSymbolicLink() || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_directory_required');
 }
 export function writeLink(file, state, { create = false } = {}) {
-  ensurePrivateDirectory(dirname(file));
-  if (create) { writeFileSync(file, JSON.stringify(state), { mode: 0o600, flag: 'wx' }); return; }
-  const temp = `${file}.${randomBytes(6).toString('hex')}.tmp`;
-  writeFileSync(temp, JSON.stringify(state), { mode: 0o600, flag: 'wx' });
-  renameSync(temp, file);
+  writePrivateJson(file, process.platform === 'win32' ? protectWindowsIdentity(state) : state, { create });
+  decrypted.delete(file);
 }
 export function linkSummary(state) {
   return { protocol: 'device-center-driver-v1', configured: Boolean(state?.driverId && !state.disabled), origin: state?.origin ?? null, driverId: state?.driverId ?? null, fingerprint: state?.fingerprint ?? null, secureTransportReady: Boolean(state?.certificate), shareSsh: Boolean(state?.shareSsh), disabled: Boolean(state?.disabled) };

package/server/drivers/privateFiles.mjs

@@ -0,0 +1,57 @@
+import { constants, openSync, closeSync, fstatSync, readFileSync, mkdirSync, lstatSync, writeFileSync, renameSync } from 'node:fs';
+import { dirname, join, win32 } from 'node:path';
+import { homedir } from 'node:os';
+import { randomBytes } from 'node:crypto';
+import { windowsStorage } from './windowsSecurity.mjs';
+
+export const defaultDataDirectory = (home = homedir(), platform = process.platform) => platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : platform === 'win32' ? win32.join(home, 'AppData', 'Local', 'Device Center') : join(home, '.local', 'share', 'device-center');
+
+// Recheck Windows ACLs at least every 30s, or immediately when file metadata changes.
+// This avoids launching PowerShell on every 5s control poll. No private data is cached here.
+const checked = new Map();
+export function secureCreatedPrivateFile(file) {
+  if (process.platform === 'win32') windowsStorage('secure-new-file', { path: file });
+}
+export function ensurePrivateDirectory(directory) {
+  if (process.platform === 'win32') { windowsStorage('ensure-directory', { path: directory }); return; }
+  mkdirSync(directory, { recursive: true, mode: 0o700 });
+  const info = lstatSync(directory);
+  if (!info.isDirectory() || info.isSymbolicLink() || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_directory_required');
+}
+export function assertPrivateFile(file, info, limit = 65536) {
+  const pathInfo = lstatSync(file);
+  if (!info.isFile() || info.nlink !== 1 || info.size > limit || pathInfo.isSymbolicLink() || info.dev !== pathInfo.dev || info.ino !== pathInfo.ino) throw new Error('driver_private_file_required');
+  if (process.platform !== 'win32') {
+    if ((info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_file_required');
+    return;
+  }
+  const signature = `${info.dev}:${info.ino}:${info.ctimeMs}:${info.mtimeMs}:${info.size}`;
+  const previous = checked.get(file);
+  if (!previous || previous.signature !== signature || Date.now() - previous.at >= 30_000) {
+    windowsStorage('assert-file', { path: file });
+    if (checked.size > 32) checked.clear();
+    checked.set(file, { signature, at: Date.now() });
+  }
+}
+export function readPrivateJson(file, fallback, limit = 65536) {
+  let fd;
+  try {
+    fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    assertPrivateFile(file, fstatSync(fd), limit);
+    return JSON.parse(readFileSync(fd, 'utf8'));
+  } catch (error) { if (error.code === 'ENOENT') return fallback; throw error; }
+  finally { if (fd !== undefined) closeSync(fd); }
+}
+export function writePrivateJson(file, value, { create = false } = {}) {
+  ensurePrivateDirectory(dirname(file));
+  const target = create ? file : `${file}.${randomBytes(6).toString('hex')}.tmp`;
+  writeFileSync(target, JSON.stringify(value), { mode: 0o600, flag: 'wx' });
+  // Windows files inherit the protected directory ACL. Validate before activation.
+  if (process.platform === 'win32') {
+    secureCreatedPrivateFile(target);
+    const fd = openSync(target, constants.O_RDONLY);
+    try { assertPrivateFile(target, fstatSync(fd)); } finally { closeSync(fd); }
+  }
+  if (!create) renameSync(target, file);
+  checked.delete(file);
+}

package/server/drivers/windowsSecurity.mjs

@@ -0,0 +1,119 @@
+import { spawnSync } from 'node:child_process';
+import { win32 } from 'node:path';
+
+// Fixed PowerShell code; paths and secrets travel only on stdin, never in arguments.
+// No execution-policy change, elevation, password, external download or shell expansion.
+export const powershellPath = (environment = process.env) => {
+  const systemRoot = environment.SystemRoot;
+  if (!systemRoot || !win32.isAbsolute(systemRoot) || /[\r\n\0]/.test(systemRoot)) throw new Error('windows_system_root_required');
+  return win32.join(systemRoot, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+};
+export const powershellArguments = source => ['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(source, 'utf16le').toString('base64')];
+export function runPowerShell(source, input, { spawnImpl = spawnSync, environment = process.env } = {}) {
+  const result = spawnImpl(powershellPath(environment), powershellArguments(source), {
+    input: JSON.stringify(input), encoding: 'utf8', windowsHide: true, shell: false, timeout: 15_000, maxBuffer: 512 * 1024,
+  });
+  // PowerShell diagnostics can contain input values. Never relay them to the caller.
+  if (result.error || result.status !== 0) throw new Error('windows_security_operation_failed');
+  try { return JSON.parse(result.stdout.replace(/^\uFEFF/, '').trim()); }
+  catch { throw new Error('windows_security_response_invalid'); }
+}
+export const powershellPreamble = `
+$ErrorActionPreference = 'Stop'
+# A Node child launched from PowerShell 7 inherits its module search path.
+# Windows PowerShell 5.1 must load its own built-in modules (including Set-Acl),
+# not incompatible PS7 or user-installed modules. This affects only this child.
+$env:PSModulePath = [IO.Path]::Combine($PSHOME, 'Modules')
+[Console]::InputEncoding = [System.Text.UTF8Encoding]::new($false)
+[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+$request = [Console]::In.ReadToEnd() | ConvertFrom-Json
+$sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
+`;
+export const windowsStorageSource = powershellPreamble + `
+function Assert-PlainPath([string] $path) {
+  $cursor = [IO.Path]::GetFullPath($path)
+  while ($cursor) {
+    if ([IO.File]::Exists($cursor) -or [IO.Directory]::Exists($cursor)) {
+      $item = Get-Item -LiteralPath $cursor -Force
+      if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'reparse_point' }
+    }
+    $parent = [IO.Path]::GetDirectoryName($cursor)
+    if ($parent -eq $cursor) { break }
+    $cursor = $parent
+  }
+}
+function Assert-Private([string] $path) {
+  Assert-PlainPath $path
+  $acl = Get-Acl -LiteralPath $path
+  if ($acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value -ne $sid.Value) { throw 'owner_required' }
+  $currentAllowed = $false
+  foreach ($rule in $acl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier])) {
+    if ($rule.AccessControlType -ne [System.Security.AccessControl.AccessControlType]::Allow) { throw 'deny_rule' }
+    if ($rule.IdentityReference.Value -notin @($sid.Value, 'S-1-5-18')) { throw 'private_acl_required' }
+    if ($rule.IdentityReference.Value -eq $sid.Value -and ($rule.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -eq [System.Security.AccessControl.FileSystemRights]::FullControl) { $currentAllowed = $true }
+  }
+  if (-not $currentAllowed) { throw 'current_user_access_required' }
+}
+switch ($request.operation) {
+  'ensure-directory' {
+    Assert-PlainPath $request.path
+    if (-not [IO.Directory]::Exists($request.path)) {
+      $directory = [IO.Directory]::CreateDirectory($request.path)
+      $acl = New-Object System.Security.AccessControl.DirectorySecurity
+      $acl.SetOwner($sid)
+      $acl.SetAccessRuleProtection($true, $false)
+      foreach ($principal in @($sid.Value, 'S-1-5-18')) {
+        $identity = [System.Security.Principal.SecurityIdentifier]::new($principal)
+        $rule = [System.Security.AccessControl.FileSystemAccessRule]::new($identity, 'FullControl', 'ContainerInherit, ObjectInherit', 'None', 'Allow')
+        $acl.AddAccessRule($rule)
+      }
+      Set-Acl -LiteralPath $directory.FullName -AclObject $acl
+    }
+    Assert-Private $request.path
+    @{ ok = $true } | ConvertTo-Json -Compress
+  }
+  'assert-file' {
+    Assert-Private ([IO.Path]::GetDirectoryName($request.path))
+    Assert-Private $request.path
+    @{ ok = $true } | ConvertTo-Json -Compress
+  }
+  'secure-new-file' {
+    # Called only after our exclusive wx creation in an already protected directory.
+    Assert-Private ([IO.Path]::GetDirectoryName($request.path))
+    Assert-PlainPath $request.path
+    $acl = [System.Security.AccessControl.FileSecurity]::new()
+    $acl.SetOwner($sid)
+    $acl.SetAccessRuleProtection($true, $false)
+    foreach ($principal in @($sid.Value, 'S-1-5-18')) {
+      $identity = [System.Security.Principal.SecurityIdentifier]::new($principal)
+      $acl.AddAccessRule([System.Security.AccessControl.FileSystemAccessRule]::new($identity, 'FullControl', 'Allow'))
+    }
+    Set-Acl -LiteralPath $request.path -AclObject $acl
+    Assert-Private $request.path
+    @{ ok = $true } | ConvertTo-Json -Compress
+  }
+  'protect' {
+    Add-Type -AssemblyName System.Security
+    $data = [Convert]::FromBase64String($request.data)
+    $encrypted = [System.Security.Cryptography.ProtectedData]::Protect($data, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
+    @{ data = [Convert]::ToBase64String($encrypted) } | ConvertTo-Json -Compress
+    [Array]::Clear($data, 0, $data.Length)
+  }
+  'unprotect' {
+    Add-Type -AssemblyName System.Security
+    $data = [System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($request.data), $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
+    @{ data = [Convert]::ToBase64String($data) } | ConvertTo-Json -Compress
+    [Array]::Clear($data, 0, $data.Length)
+  }
+  default { throw 'unknown_storage_operation' }
+}
+`;
+export function windowsStorage(operation, values) {
+  if (process.platform !== 'win32') throw new Error('windows_only');
+  return runPowerShell(windowsStorageSource, { operation, ...values });
+}
+export const protectWindowsIdentity = value => ({ format: 'device-center-dpapi-v1', data: windowsStorage('protect', { data: Buffer.from(JSON.stringify(value)).toString('base64') }).data });
+export function unprotectWindowsIdentity(value) {
+  if (value?.format !== 'device-center-dpapi-v1' || typeof value.data !== 'string' || !/^[A-Za-z0-9+/]+={0,2}$/.test(value.data)) throw new Error('windows_encrypted_identity_required');
+  return JSON.parse(Buffer.from(windowsStorage('unprotect', { data: value.data }).data, 'base64').toString('utf8'));
+}

package/server/drivers/windowsService.mjs

@@ -0,0 +1,77 @@
+import { createHash } from 'node:crypto';
+import { powershellArguments, powershellPath, powershellPreamble, runPowerShell } from './windowsSecurity.mjs';
+
+const literal = value => `'${String(value).replaceAll("'", "''")}'`;
+export function windowsServiceDefinition({ home, root, node, script, port, dbPath, logPath, errorLogPath, environment = process.env }) {
+  const launcher = `$ErrorActionPreference = 'Stop'\n$env:PORT = '${port}'\n$env:DEVICE_CENTER_DB_PATH = ${literal(dbPath)}\n$env:DEVICE_CENTER_SERVICE_MANAGER = 'windows-task'\n$env:DEVICE_CENTER_RUNTIME = 'native'\n$env:DEVICE_CENTER_PUBLIC_ORIGIN = $null\n$env:DEVICE_CENTER_AUTH_FILE = $null\nSet-Location -LiteralPath ${literal(root)}\n# Windows PowerShell 5.1 treats redirected native stderr as ErrorRecord.\n# Keep Node warnings visible in the log; use its exit code for task failure.\n$ErrorActionPreference = 'Continue'\n$LASTEXITCODE = 1\n& ${literal(node)} ${literal(script)} >> ${literal(logPath)} 2>> ${literal(errorLogPath)}\n$exitCode = $LASTEXITCODE\n$ErrorActionPreference = 'Stop'\nexit $exitCode\n`;
+  return {
+    taskName: `DeviceCenter-${createHash('sha256').update(home.toLowerCase()).digest('hex').slice(0, 16)}`,
+    executable: powershellPath(environment),
+    arguments: ['-WindowStyle', 'Hidden', ...powershellArguments(launcher)].join(' '),
+    workingDirectory: root, logonType: 'InteractiveToken', runLevel: 'Limited', trigger: 'CurrentUserLogon',
+  };
+}
+// COM Task Scheduler is built into Windows. Only this user's exact task is touched.
+export const windowsTaskSource = powershellPreamble + `
+$scheduler = New-Object -ComObject 'Schedule.Service'
+$scheduler.Connect()
+$folder = $scheduler.GetFolder('\\')
+$task = $null
+try { $task = $folder.GetTask($request.task.taskName) } catch {
+  $exception = $_.Exception
+  while ($exception.InnerException) { $exception = $exception.InnerException }
+  if ($exception.HResult -ne -2147024894) { throw }
+}
+function Assert-OurTask {
+  if (-not $task) { throw 'task_missing' }
+  $definition = $task.Definition
+  $principal = $definition.Principal
+  $principalSid = $principal.UserId
+  if ($principal.UserId -ne $sid.Value) { $principalSid = ([System.Security.Principal.NTAccount]::new($principal.UserId)).Translate([System.Security.Principal.SecurityIdentifier]).Value }
+  if ($principalSid -ne $sid.Value -or $principal.LogonType -ne 3 -or $principal.RunLevel -ne 0) { throw 'task_principal_changed' }
+  if ($definition.Actions.Count -ne 1 -or $definition.Triggers.Count -ne 1) { throw 'task_changed' }
+  $action = $definition.Actions.Item(1)
+  $trigger = $definition.Triggers.Item(1)
+  if ($action.Type -ne 0 -or $action.Path -ne $request.task.executable -or $action.Arguments -cne $request.task.arguments -or $action.WorkingDirectory -cne $request.task.workingDirectory -or $trigger.Type -ne 9 -or $trigger.UserId -ne $sid.Value) { throw 'task_action_changed' }
+}
+switch ($request.operation) {
+  'install' {
+    if ($task) { throw 'task_already_exists' }
+    $definition = $scheduler.NewTask(0)
+    $definition.RegistrationInfo.Description = 'Device Center: current user local Driver; login startup only.'
+    $definition.Principal.UserId = $sid.Value
+    $definition.Principal.LogonType = 3
+    $definition.Principal.RunLevel = 0
+    $trigger = $definition.Triggers.Create(9)
+    $trigger.UserId = $sid.Value
+    $action = $definition.Actions.Create(0)
+    $action.Path = $request.task.executable
+    $action.Arguments = $request.task.arguments
+    $action.WorkingDirectory = $request.task.workingDirectory
+    $definition.Settings.Enabled = $true
+    $definition.Settings.AllowDemandStart = $true
+    $definition.Settings.StartWhenAvailable = $true
+    $definition.Settings.DisallowStartIfOnBatteries = $false
+    $definition.Settings.StopIfGoingOnBatteries = $false
+    $definition.Settings.ExecutionTimeLimit = 'PT0S'
+    $definition.Settings.MultipleInstances = 2
+    $definition.Settings.RestartInterval = 'PT1M'
+    $definition.Settings.RestartCount = 3
+    $task = $folder.RegisterTaskDefinition($request.task.taskName, $definition, 2, $sid.Value, $null, 3)
+    $null = $task.Run($null)
+    @{ registered = $true } | ConvertTo-Json -Compress
+  }
+  'status' {
+    if ($task) { Assert-OurTask }
+    @{ exists = [bool]$task; state = $(if ($task) { [int]$task.State } else { $null }) } | ConvertTo-Json -Compress
+  }
+  'stop' { Assert-OurTask; $task.Stop(0); @{ stopped = $true } | ConvertTo-Json -Compress }
+  'remove' { Assert-OurTask; $folder.DeleteTask($request.task.taskName, 0); @{ removed = $true } | ConvertTo-Json -Compress }
+  default { throw 'unknown_task_operation' }
+}
+`;
+export function windowsTask(operation, task) {
+  if (process.platform !== 'win32') throw new Error('windows_only');
+  try { return runPowerShell(windowsTaskSource, { operation, task }); }
+  catch { throw new Error('Windows 当前用户任务操作失败。请检查任务计划程序、组策略或既有任务；未提权、改策略或覆盖任务。可改用 start 前台模式。'); }
+}