device-center 0.2.0-beta.4 → 0.2.0-beta.6

package/docs/windows-acceptance.md

@@ -0,0 +1,57 @@
+# Windows 11 手动接入验收
+
+**0.2.0-beta.6 · Windows 11 预览版。** 安装前可用 `npm.cmd view device-center@0.2.0-beta.6 version` 确认发布状态。Windows CI 的脚本、安全存储及安装检查不能替代你的 Windows 11 实机验收。
+
+## 准备与安装
+
+需要 Windows 11、当前普通用户、Windows PowerShell 5.1+、官方 [Node.js 24+](https://nodejs.org/)（含 npm），能访问 npm registry 和选定 HTTPS 控制面。无需 AI Agent、MCP、AD 域或管理员窗口；不使用 WSL。
+
+在**目标 Windows 电脑**打开[手动安装指南](https://devices.owenshen.top/start?lang=zh-CN&method=manual&mode=official&os=windows#install-title)，选择官方托管、Windows 11、手动安装，再复制 PowerShell 脚本。不需要下载 ZIP，也不需要目标电脑有 AI Agent。
+
+```text
+在目标 Windows 电脑打开手动安装指南、复制脚本
+  → 开始菜单搜索 PowerShell，点“打开”（不用管理员）
+  → 粘贴到 PowerShell，回车
+  → 浏览器自动打开本次绑定申请
+  → 登录自己的账号，对照终端完整指纹，批准一次
+  → 终端自动确认首次资源回报；无需回 Agent 说“已批准”
+```
+
+选择“本机使用”只安装本机面板，不申请云端绑定。已有 CLI、服务配置、任务或占用端口时停止，保留原状态；不要反复运行安装脚本。缺少 Node.js 时从官网安装后重开 PowerShell。安装需要联网访问 npm；复制文本执行不需要修改 PowerShell 执行策略。
+
+**电脑在国内公司、不在身边：** 把上述指南发给能操作它的同事。可选“无浏览器／服务器”，让同事在那台 Windows 的 PowerShell 执行脚本，保持窗口打开；你在自己的电脑登录官方控制面，输入终端配对码，核对完整指纹并批准。代码只在实际运行时生成，不预放在脚本里，也不要发给 AI Agent。目标电脑仍需出站 HTTPS、npm 连通；不要求两台电脑在同一局域网或开放入站端口。
+
+## 验收清单
+
+1. `--version` 是 `0.2.0-beta.6`；后台状态显示 `windows-task`，本机面板 `http://127.0.0.1:5174` 正常加载，页面脚本无 404。
+2. 浏览器只批准刚由本机发起的申请；完整指纹与终端一致。终端有“云端已接收首次资源回报”，`firstReport.verified=true`。仅 `configured=true` 不算连通。
+3. 云端出现这台 Windows 电脑，内存和用户目录所在卷磁盘分别显示真实数值；没有测试设备或伪造在线。可填写设备名、用途与标签。
+4. 点击云端“采集一次”，采集时间在约 30–75 秒内更新。关闭安装终端后仍更新；注销/休眠会停止回报，登录/唤醒且网络恢复后继续。
+5. 在 Windows 任务计划程序中查看 `DeviceCenter-…`：当前用户、用户登录时触发、非最高权限。重启并登录后不重新安装也能恢复；长期停在登录界面不会运行。
+6. 本机身份文件在 `%USERPROFILE%\AppData\Local\Device Center\driver-link.json`，只存 DPAPI 密文，目录访问限当前用户与 SYSTEM。**不要打开或分享私钥，也不要把身份文件搬到其他电脑/用户。** DPAPI 不防同账号恶意程序或管理员控制。
+7. 不接 AI Agent 也可使用设备回报。需要管理端 AI 时，在有 Agent 的管理电脑添加它自己的 loopback `/mcp`；目标 Windows 不需要 MCP 客户端。
+
+## 状态与排查
+
+在普通用户 PowerShell 执行：
+
+```powershell
+& "$HOME\AppData\Local\Programs\Device Center\cli\device-center.cmd" --version
+& "$HOME\AppData\Local\Programs\Device Center\cli\device-center.cmd" status
+& "$HOME\AppData\Local\Programs\Device Center\cli\device-center.cmd" service status --port 5174
+```
+
+- **打不开网页**：核对 Node 版本、5174 是否被占用、服务状态；不停止别的程序。若选择另一端口，要让服务与 connect 使用同一端口。
+- **任务被策略阻止**：保留错误。可显式选择 `start --port 5174` 前台运行并保持终端；不改组策略、执行策略或防火墙。
+- **安全存储失败**：确认当前用户、用户目录在支持 NTFS ACL 的本地卷、系统 PowerShell 可用；目录被共享或变为链接时程序会拒绝。不要把权限放宽到 Everyone 来解决。
+- **绑定成功但没有回报**：检查电脑唤醒、网络、系统时间、HTTPS 可达与后台日志。不要重复绑定；没有入站端口要求。
+- **未回报/待刷新**：表示近期没收到状态，不是设备身份私钥过期。睡眠、注销、断网时无法采集。
+- **后续读 Windows 日志**：需两端核对指纹并单独 `access trust` / `access grant`。仅允许显式本地盘文件，例如 `C:\Logs\app.log`，不接受 UNC 共享或备用数据流。绑定不开放任意命令，也不授予日志权限。本轮先验收安装/配对/后台，真实跨平台日志再独立确认。
+
+需要停止并卸载本次后台任务时，由用户明确执行，默认保留数据和身份：
+
+```powershell
+& "$HOME\AppData\Local\Programs\Device Center\cli\device-center.cmd" service uninstall --port 5174 --confirm
+```
+
+卸载仅处理与当前计划完全一致的任务；不能确认监听已停止时保留配置并报错，不杀其他程序。反馈只需系统版本、CLI 版本、失败步骤和已去敏的错误；不附账号凭据、配对码、身份文件或日志正文。

package/login.html

@@ -1,5 +1,5 @@
 <!doctype html>
 <html lang="zh-CN">
 <head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.svg" type="image/svg+xml"><title data-i18n="login.title">登录 · Device Center</title><link rel="stylesheet" href="/src/login.css"><link rel="stylesheet" href="/src/i18n.css"></head>
-<body class="login-page"><main><div class="language-picker" data-language-picker></div><div class="mark">DC</div><h1>Device Center</h1><p data-i18n="login.subtitle">登录你的设备控制面</p><p id="loading" role="status" data-i18n="login.loading">正在读取登录方式…</p><form id="login" hidden><label><span data-i18n="login.username">用户名</span><input name="username" autocomplete="username" required maxlength="64"></label><label><span data-i18n="login.password">密码</span><input name="password" type="password" autocomplete="current-password" required maxlength="256"></label><button type="submit" data-i18n="login.submit">登录</button><p id="message" role="alert"></p></form><section id="unified" hidden><p data-i18n="login.unified">使用 App Services／个人站的统一账号。</p><a id="unified-login" class="login-link" target="_blank" rel="noopener noreferrer" data-i18n="login.link">使用统一账号登录 ↗</a><p class="help" data-i18n="login.help">在新页面用邮箱或 Google 完成登录，回到这里会自动进入设备面板。</p><button id="continue-login" type="button" data-i18n="login.continue">我已登录，继续</button><p id="unified-message" role="status"></p></section><p class="install-help"><span data-i18n="login.notInstalled">还未安装？</span><a href="/start" target="_blank" rel="noopener noreferrer" data-language-link data-i18n="login.guide">查看一页试用指南 ↗</a><br><span data-i18n="login.installHint">本机使用无需账号；官方托管需登录并核对绑定。</span></p><small id="access-notes" data-i18n="login.multi">账号设备隔离 · HTTPS 保护</small></main><script type="module" src="/src/login.js"></script></body>
+<body class="login-page"><main><div class="language-picker" data-language-picker></div><div class="mark">DC</div><h1>Device Center</h1><p data-i18n="login.subtitle">登录你的设备控制面</p><p id="loading" role="status" data-i18n="login.loading">正在读取登录方式…</p><form id="login" hidden><label><span data-i18n="login.username">用户名</span><input name="username" autocomplete="username" required maxlength="64"></label><label><span data-i18n="login.password">密码</span><input name="password" type="password" autocomplete="current-password" required maxlength="256"></label><button type="submit" data-i18n="login.submit">登录</button><p id="message" role="alert"></p></form><section id="unified" hidden><p data-i18n="login.unified">使用 App Services／个人站的统一账号。</p><button id="continue-login" type="button" data-i18n="login.continue">进入控制面</button><p id="unified-message" role="status" aria-live="polite"></p><p class="help" data-i18n="login.help">已有登录会自动进入。需要登录时打开下方账号页，完成后回到这里继续。</p><a id="unified-login" class="login-link" target="_blank" rel="noopener noreferrer" data-i18n="login.link">使用统一账号登录 ↗</a></section><p class="install-help"><span data-i18n="login.notInstalled">还未安装？</span><a href="/start" target="_blank" rel="noopener noreferrer" data-language-link data-i18n="login.guide">查看一页试用指南 ↗</a><br><span data-i18n="login.installHint">本机使用无需账号；官方托管需登录并核对绑定。</span></p><small id="access-notes" data-i18n="login.multi">账号设备隔离 · HTTPS 保护</small></main><script type="module" src="/src/login.js"></script></body>
 </html>

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "device-center",
-  "version": "0.2.0-beta.4",
+  "version": "0.2.0-beta.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "device-center",
-      "version": "0.2.0-beta.4",
+      "version": "0.2.0-beta.6",
       "license": "MIT",
       "dependencies": {
         "@peculiar/x509": "2.1.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "device-center",
-  "version": "0.2.0-beta.4",
+  "version": "0.2.0-beta.6",
   "license": "MIT",
   "type": "module",
   "description": "Local device connector with account-bound pairing, TLS encrypted relay and explicitly authorized log access",
@@ -34,12 +34,14 @@
     "SECURITY.md",
     "LICENSE",
     "scripts/access.mjs",
+    "docs/cli.md",
     "docs/remote-access.md",
     "npm-shrinkwrap.json",
     "start.html",
     "favicon.svg",
     "docs/friend-trial.md",
-    "docs/i18n.md"
+    "docs/i18n.md",
+    "docs/windows-acceptance.md"
   ],
   "publishConfig": {
     "access": "public",

package/scripts/access.mjs

@@ -21,7 +21,6 @@ export async function main(argv = []) {
   const allowed={peers:[],status:[],enable:['confirm'],renew:['confirm'],trust:['peer','lan','port','confirm'],grant:['peer','log','label','minutes','confirm'],revoke:['peer','confirm'],listen:['bind','port','confirm'],'listen-off':['confirm'],read:['peer','label','bytes']}[action];
   const options={};
   for(let i=1;i<argv.length;i++){const key=argv[i].slice(2);if(!argv[i].startsWith('--')||!allowed.includes(key)||Object.hasOwn(options,key))throw new Error(usage);if(key==='confirm')options[key]=true;else{if(!argv[i+1]||argv[i+1].startsWith('--'))throw new Error(usage);options[key]=argv[++i];}}
-  if(process.platform==='win32')throw new Error('Windows 原生私钥权限与服务尚未验收；本版支持 macOS/Linux。');
   const file=defaultLinkFile(),local=accessFile(file);
   if(action==='status'){const a=readAccess(local);return {trusts:a.trusts.map(({certificate,...p})=>p),grants:a.grants.map(({certificate,...p})=>p),listen:a.listen};}
   const state=readLink(file);if(!state?.driverId||state.disabled)throw new Error('先 connect 并在云端核对批准。');

package/scripts/driver.mjs

@@ -24,7 +24,7 @@ export function driverPlan(argv = []) {
   }
   if (!['plan', 'connect', 'run', 'status', 'disconnect'].includes(command) || !Number.isInteger(port) || port < 1024 || port > 65535) throw new Error(usage);
   cloudOrigin(origin);
-  return { command, origin, port, confirm, shareSsh, browser, fields: ['管理电脑名称', '系统类型', '内存', '用户目录卷磁盘', ...(shareSsh ? ['至多15个已关联SSH主机的名称和缓存资源状态（不含地址、用户、路径或配置）'] : [])], keyStorage: '仅本机私有目录/0600文件；当前不是Keychain/TPM封装', tasksAuthorized: false, backgroundInstalled: false };
+  return { command, origin, port, confirm, shareSsh, browser, fields: ['管理电脑名称', '系统类型', '内存', '用户目录卷磁盘', ...(shareSsh ? ['至多15个已关联SSH主机的名称和缓存资源状态（不含地址、用户、路径或配置）'] : [])], keyStorage: process.platform === 'win32' ? '本机 DPAPI CurrentUser 加密与当前用户/SYSTEM NTFS ACL；非 TPM，不防同账号恶意程序' : '仅本机私有目录/0600文件；当前不是Keychain/TPM封装', tasksAuthorized: false, backgroundInstalled: false };
 }
 export async function runLocal(plan) {
   // Reuse only a running native Driver that implements this protocol; never stop another listener.
@@ -49,7 +49,6 @@ export async function main(argv = process.argv.slice(2), { file = defaultLinkFil
   const plan = driverPlan(argv);
   if (Number(process.versions.node.split('.')[0]) < 24) throw new Error('需要 Node.js 24 或更高版本。');
   if (plan.command === 'plan') return plan; // No files, key generation, network or installation.
-  if (process.platform === 'win32') throw new Error('Windows 身份文件的安全存储尚未实现，当前管理 Driver 只支持 macOS/Linux。');
   let state = readLink(file);
   if (plan.command === 'status') return linkSummary(state);
   if (plan.command === 'run') { if (!state?.driverId || state.disabled) throw new Error('请先 connect 完成配对。'); await runLocal(plan); return linkSummary(state); }
@@ -69,7 +68,7 @@ export async function main(argv = process.argv.slice(2), { file = defaultLinkFil
   }
   if (!state.certificate) { state.certificate = await issueCertificate(state); writeLink(file, state); }
   let pending;
-  try { pending = await post(plan.origin, '/api/driver/pair/start', { publicKey: state.publicKey, certificate: state.certificate, name: hostname().slice(0,80), platform: ({ darwin: 'macOS', linux: 'Linux' })[platform()], shareSsh: plan.shareSsh, ...(plan.browser ? { browser: true } : {}) }); }
+  try { pending = await post(plan.origin, '/api/driver/pair/start', { publicKey: state.publicKey, certificate: state.certificate, name: hostname().slice(0,80), platform: ({ darwin: 'macOS', linux: 'Linux', win32: 'Windows' })[platform()] ?? platform(), shareSsh: plan.shareSsh, ...(plan.browser ? { browser: true } : {}) }); }
   catch (error) {
     if (plan.browser && error.statusCode === 400 && error.message === 'invalid_driver_input') throw new Error('控制面尚不支持浏览器接入，请升级控制面；或在本机终端使用不带 --browser 的 connect。未自动输出配对凭据。');
     throw error;

package/scripts/service.mjs

@@ -3,25 +3,29 @@
 // Default command is a plan; importing this module has no side effects.
 import { mkdir, writeFile, unlink, lstat } from 'node:fs/promises';
 import { homedir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
+import { dirname, join, resolve, win32 } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { spawnSync } from 'node:child_process';
+import { defaultDataDirectory, ensurePrivateDirectory, writePrivateJson, readPrivateJson } from '../server/drivers/privateFiles.mjs';
+import { windowsServiceDefinition, windowsTask } from '../server/drivers/windowsService.mjs';
 
 const ROOT = resolve(fileURLToPath(new URL('..', import.meta.url)));
 const LABEL = 'local.device-center.control-plane';
 const xml = (v) => String(v).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&apos;' })[c]);
 const unitQuote = (v) => `"${String(v).replaceAll('\\', '\\\\').replaceAll('"', '\\"').replaceAll('%', '%%')}"`;
 
-export function servicePlan({ platform = process.platform, home = homedir(), root = ROOT, node = process.execPath, port = 5173 } = {}) {
+export function servicePlan({ platform = process.platform, home = homedir(), root = ROOT, node = process.execPath, port = 5173, environment = process.env } = {}) {
   if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new Error('Choose a port from 1024 to 65535.');
   if (![home, root, node].every((s) => typeof s === 'string' && !/[\r\n\0]/.test(s))) throw new Error('Invalid path.');
-  const supported = ['darwin', 'linux'].includes(platform);
-  const dataDirectory = platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : join(home, '.local', 'share', 'device-center');
-  const dbPath = join(dataDirectory, 'device-center.sqlite');
-  const script = join(root, 'server/index.mjs');
-  const manager = platform === 'darwin' ? 'launchd' : platform === 'linux' ? 'systemd' : 'unsupported';
-  const configPath = platform === 'darwin' ? join(home, 'Library', 'LaunchAgents', `${LABEL}.plist`) : join(home, '.config', 'systemd', 'user', 'device-center.service');
+  const supported = ['darwin', 'linux', 'win32'].includes(platform);
+  const dataDirectory = defaultDataDirectory(home, platform);
+  const pathJoin = platform === 'win32' ? win32.join : join;
+  const dbPath = pathJoin(dataDirectory, 'device-center.sqlite');
+  const script = pathJoin(root, 'server', 'index.mjs');
+  const manager = platform === 'darwin' ? 'launchd' : platform === 'linux' ? 'systemd' : platform === 'win32' ? 'windows-task' : 'unsupported';
+  const configPath = platform === 'darwin' ? join(home, 'Library', 'LaunchAgents', `${LABEL}.plist`) : platform === 'win32' ? pathJoin(dataDirectory, 'service.json') : join(home, '.config', 'systemd', 'user', 'device-center.service');
   let configuration = null;
+  let task = null;
   if (platform === 'darwin') {
     configuration = `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0"><dict>
 <key>Label</key><string>${LABEL}</string>
@@ -34,8 +38,11 @@ export function servicePlan({ platform = process.platform, home = homedir(), roo
 </dict></plist>\n`;
   } else if (platform === 'linux') {
     configuration = `[Unit]\nDescription=Device Center local read-only connector\n[Service]\nType=simple\nWorkingDirectory=${unitQuote(root)}\nExecStart=${unitQuote(node)} ${unitQuote(script)}\nEnvironment="PORT=${port}"\nEnvironment=${unitQuote(`DEVICE_CENTER_DB_PATH=${dbPath}`)}\nEnvironment="DEVICE_CENTER_SERVICE_MANAGER=systemd"\nRestart=on-failure\nRestartSec=10\nUMask=0077\nNoNewPrivileges=true\n[Install]\nWantedBy=default.target\n`;
+  } else if (platform === 'win32') {
+    task = windowsServiceDefinition({ home, root, node, script, port, dbPath, logPath: pathJoin(dataDirectory, 'service.log'), errorLogPath: pathJoin(dataDirectory, 'service-error.log'), environment });
+    configuration = JSON.stringify(task);
   }
-  return { supported, manager, label: LABEL, configPath: supported ? configPath : null, dataDirectory, dbPath, url: `http://127.0.0.1:${port}`, node, root, port, configuration, scope: 'current user; starts at login; not a resource Agent', effects: ['Register a user-level background service', 'Create a private local data directory and logs', 'Read-only local MCP; no keys, host access, remote tasks, or Codex config changes'] };
+  return { supported, manager, label: LABEL, configPath: supported ? configPath : null, dataDirectory, dbPath, url: `http://127.0.0.1:${port}`, node, root, port, configuration, ...(task ? { task } : {}), scope: 'current user; starts at login; no reports while logged out, sleeping or offline', effects: ['Register a user-level background service', 'Create a private local data directory and logs', 'Read-only local MCP; no new keys, host access, remote tasks, or AI client config changes'] };
 }
 function run(command, args) {
   const child = spawnSync(command, args, { encoding: 'utf8', timeout: 10_000 });
@@ -44,21 +51,28 @@ function run(command, args) {
 }
 async function exists(path) { try { await lstat(path); return true; } catch (e) { if (e.code === 'ENOENT') return false; throw e; } }
 async function install(plan) {
-  if (!plan.supported) throw new Error('Windows user service installer is not implemented. Use foreground mode or the optional local Docker recipe.');
+  if (!plan.supported) throw new Error('Unsupported user service platform.');
   if (await exists(plan.configPath)) throw new Error('The service config already exists. Inspect it first; this installer will not overwrite it.');
+  if (plan.task && windowsTask('status', plan.task).exists) throw new Error('An existing Windows task was preserved. Inspect it before installing.');
   // Refuse to replace an existing foreground listener or another application.
   try {
     await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1500) });
     throw new Error('The chosen port is already responding. Stop the foreground service yourself or choose another --port.');
   } catch (e) { if (e.message.startsWith('The chosen port')) throw e; }
-  await mkdir(plan.dataDirectory, { recursive: true, mode: 0o700 });
+  ensurePrivateDirectory(plan.dataDirectory);
   await mkdir(dirname(plan.configPath), { recursive: true });
-  await writeFile(plan.configPath, plan.configuration, { flag: 'wx', mode: 0o600 });
+  if (plan.task) writePrivateJson(plan.configPath, plan.task, { create: true });
+  else await writeFile(plan.configPath, plan.configuration, { flag: 'wx', mode: 0o600 });
   if (plan.manager === 'launchd') run('launchctl', ['bootstrap', `gui/${process.getuid()}`, plan.configPath]);
+  else if (plan.task) windowsTask('install', plan.task);
   else { run('systemctl', ['--user', 'daemon-reload']); run('systemctl', ['--user', 'enable', '--now', 'device-center.service']); }
   let healthy = false;
-  for (let attempt = 0; attempt < 12; attempt++) {
-    try { healthy = (await (await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1000) })).json()).ok === true; } catch { /* wait for manager startup */ }
+  for (let attempt = 0; attempt < (plan.task ? 40 : 12); attempt++) {
+    try {
+      const health = await (await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(1000) })).json();
+      const status = await (await fetch(`${plan.url}/api/connector/status`, { signal: AbortSignal.timeout(1000) })).json();
+      healthy = health.ok === true && health.mode === 'local' && status.service?.persistence === plan.manager;
+    } catch { /* wait for manager startup */ }
     if (healthy) break;
     await new Promise((done) => setTimeout(done, 250));
   }
@@ -69,8 +83,20 @@ async function uninstall(plan) {
   if (!plan.supported || !await exists(plan.configPath)) throw new Error('No supported user service config exists.');
   // Only remove the exact config generated for this stable repository/runtime.
   const { readFile } = await import('node:fs/promises');
-  if (await readFile(plan.configPath, 'utf8') !== plan.configuration) throw new Error('Service config differs from this plan. Inspect it manually; no overwrite or removal.');
+  const configuration = plan.task ? JSON.stringify(readPrivateJson(plan.configPath, null)) : await readFile(plan.configPath, 'utf8');
+  if (configuration !== plan.configuration) throw new Error('Service config differs from this plan. Inspect it manually; no overwrite or removal.');
   if (plan.manager === 'launchd') run('launchctl', ['bootout', `gui/${process.getuid()}/${LABEL}`]);
+  else if (plan.task) {
+    windowsTask('stop', plan.task);
+    let stopped = false;
+    for (let attempt = 0; attempt < 20; attempt++) {
+      try { await fetch(`${plan.url}/api/health`, { signal: AbortSignal.timeout(500) }); }
+      catch { stopped = true; break; }
+      await new Promise(done => setTimeout(done, 250));
+    }
+    if (!stopped) throw new Error('Task stop did not stop the listener. Config and task retained; inspect Task Scheduler. No unrelated process was killed.');
+    windowsTask('remove', plan.task);
+  }
   else { run('systemctl', ['--user', 'disable', '--now', 'device-center.service']); }
   await unlink(plan.configPath);
   if (plan.manager === 'systemd') run('systemctl', ['--user', 'daemon-reload']);
@@ -92,7 +118,7 @@ export async function main(argv = process.argv.slice(2)) {
   if (command === 'status') {
     let health = null;
     try { health = await (await fetch(`${plan.url}/api/connector/status`, { signal: AbortSignal.timeout(1500) })).json(); } catch { /* stopped */ }
-    return { configExists: plan.supported && await exists(plan.configPath), status: health, url: plan.url, note: 'A present config does not prove a running service. The HTTP response identifies foreground vs managed runtime.' };
+    return { configExists: plan.supported && await exists(plan.configPath), ...(plan.task ? { task: windowsTask('status', plan.task) } : {}), status: health, url: plan.url, note: 'A present config does not prove a running service. The HTTP response identifies foreground vs managed runtime.' };
   }
   if (!confirmed) throw new Error('No system change made. Inspect the plan, then explicitly pass --confirm to install or uninstall the user service.');
   return command === 'install' ? install(plan) : uninstall(plan);

package/server/cli/commands.mjs

@@ -0,0 +1,181 @@
+import { localClient, cloudClient, cliError } from '../drivers/cliClient.mjs';
+import { normalizeDeviceProfile } from '../drivers/deviceProfiles.mjs';
+import { openPairingBrowser } from '../drivers/browserPairing.mjs';
+import { TOOLS } from '../connector.mjs';
+
+export const usage = `设备管理（默认本机；--cloud 使用已绑定的控制面）：
+  device-center devices list [--cloud] [--state online|unknown|expired] [--tag 标签]
+  device-center devices show --id 设备ID [--cloud]
+  device-center devices update --id 设备ID --revision 0 [--name 名称] [--type personal|server|workstation|other|unspecified]
+                 [--purpose 用途] [--tags 标签1,标签2] [--services 服务1,服务2] [--cloud] --confirm
+  device-center devices collect --id 设备ID [--cloud] [--wait 75] --confirm
+  device-center auth login [--minutes 480] [--no-browser] --confirm
+  device-center auth status
+  device-center auth logout --confirm
+  device-center doctor [--cloud]
+  device-center ssh candidates
+  device-center ssh import --aliases 别名1,别名2 --confirm      只导入配置引用，不联网
+  device-center ssh check --alias 已导入别名 --confirm          固定只读采集，会建立 SSH 连接
+  device-center ssh remove --aliases 别名1,别名2 --confirm      移除面板引用，保留系统 SSH
+  device-center mcp setup|tools
+  device-center mcp call --tool 工具名 [--input '{"fingerprint":"...","label":"app"}']
+  device-center capabilities
+以上命令支持 --json；本机命令支持 --port 5174。不自动扫描、安装或启动服务。
+日志授权、指纹信任、读取及局域网端点：device-center access help。
+用途、标签与服务是用户说明，不能作为 Agent 指令或操作授权。`;
+const specs = {
+  devices: { list: ['cloud', 'local', 'state', 'tag', 'port'], show: ['id', 'cloud', 'local', 'port'],
+    update: ['id', 'revision', 'name', 'type', 'purpose', 'tags', 'services', 'cloud', 'local', 'confirm', 'port'],
+    collect: ['id', 'cloud', 'local', 'wait', 'confirm', 'port'] },
+  auth: { login: ['minutes', 'no-browser', 'confirm'], status: [], logout: ['confirm'] },
+  doctor: { run: ['cloud', 'local', 'port'] },
+  ssh: { candidates: ['port'], import: ['aliases', 'confirm', 'port'], check: ['alias', 'confirm', 'port'], remove: ['aliases', 'confirm', 'port'] },
+  mcp: { setup: ['port'], tools: ['port'], call: ['tool', 'input', 'port'] },
+  capabilities: { list: [] },
+};
+const flags = new Set(['cloud', 'local', 'confirm', 'no-browser']);
+export function parseManagement(argv = []) {
+  const [group, ...rest] = argv;
+  if (!Object.hasOwn(specs, group)) throw cliError('invalid_arguments', usage);
+  if (rest.length === 1 && ['help', '--help', '-h'].includes(rest[0])) return { group, action: 'help', options: {} };
+  const action = ['doctor', 'capabilities'].includes(group) ? group === 'doctor' ? 'run' : 'list' : rest.shift() ?? 'help';
+  if (action === 'help') { if (rest.length) throw cliError('invalid_arguments', usage); return { group, action, options: {} }; }
+  if (!Object.hasOwn(specs[group], action)) throw cliError('invalid_arguments', usage);
+  const options = {};
+  for (let i = 0; i < rest.length; i++) {
+    const key = rest[i].slice(2);
+    if (!rest[i].startsWith('--') || !specs[group][action].includes(key) || Object.hasOwn(options, key)) throw cliError('invalid_arguments', usage);
+    if (flags.has(key)) options[key] = true;
+    else {
+      if (rest[i+1] === undefined || rest[i+1].startsWith('--')) throw cliError('invalid_arguments', usage);
+      options[key] = rest[++i];
+    }
+  }
+  if (options.cloud && options.local || group === 'devices' && options.cloud && options.port) throw cliError('invalid_arguments', '--cloud 不能与 --local 同用；云端设备命令不接受 --port。');
+  if (options.port !== undefined && (!/^\d+$/.test(options.port) || Number(options.port) < 1024 || Number(options.port) > 65535)) throw cliError('invalid_arguments', '端口须为 1024–65535。');
+  if (options.state && !['online', 'unknown', 'expired'].includes(options.state)) throw cliError('invalid_arguments', '状态为 online、unknown 或 expired。');
+  if (['show', 'update', 'collect'].includes(action) && group === 'devices' && (typeof options.id !== 'string' || !options.id || options.id.length > 200 || /[\x00-\x1f\x7f]/.test(options.id))) throw cliError('invalid_arguments', '请提供完整 --id；名称不能用作设备身份。');
+  if (action === 'update') {
+    if (!/^\d+$/.test(options.revision ?? '') || !Number.isSafeInteger(Number(options.revision))) throw cliError('invalid_arguments', '请通过 show 获取当前 --revision，防止覆盖他人修改。');
+    if (!['name', 'type', 'purpose', 'tags', 'services'].some(key => Object.hasOwn(options, key))) throw cliError('invalid_arguments', '至少提供一个设备说明字段。');
+  }
+  if (options.wait !== undefined && (!/^\d+$/.test(options.wait) || Number(options.wait) < 1 || Number(options.wait) > 90)) throw cliError('invalid_arguments', '--wait 为 1–90 秒。');
+  if (options.minutes !== undefined && (!/^\d+$/.test(options.minutes) || Number(options.minutes) < 5 || Number(options.minutes) > 480)) throw cliError('invalid_arguments', '授权有效期为 5–480 分钟。');
+  const mutation = group === 'devices' && ['update', 'collect'].includes(action) || group === 'auth' && ['login', 'logout'].includes(action) || group === 'ssh' && action !== 'candidates';
+  if (mutation && !options.confirm) throw cliError('confirmation_required', '该操作需显式 --confirm；尚未更改或联系设备。', 403);
+  if (group === 'ssh' && ['import', 'remove'].includes(action) && (!options.aliases || options.aliases.split(',').some(v => !v.trim()))) throw cliError('invalid_arguments', '请提供 --aliases，以逗号分隔。');
+  if (group === 'ssh' && action === 'check' && !options.alias) throw cliError('invalid_arguments', '请提供已导入的 --alias。');
+  if (group === 'mcp' && action === 'call') {
+    if (!TOOLS.some(tool => tool.name === options.tool)) throw cliError('invalid_arguments', '只允许 device-center mcp tools 列出的工具。');
+    try { options.input = JSON.parse(options.input ?? '{}'); } catch { throw cliError('invalid_arguments', '--input 须为 JSON 对象。'); }
+    if (!options.input || typeof options.input !== 'object' || Array.isArray(options.input) || JSON.stringify(options.input).length > 4096) throw cliError('invalid_arguments', '--input 须为不超过 4KiB 的 JSON 对象。');
+  }
+  return { group, action, options };
+}
+
+export async function main(argv, { makeLocal = localClient, makeCloud = cloudClient, openBrowser = openPairingBrowser,
+  now = Date.now, sleep = ms => new Promise(done => setTimeout(done, ms)),
+  progress = value => process.stderr.write(value + '\n'), terminal = Boolean(process.stderr.isTTY) } = {}) {
+  const { group, action, options: o } = parseManagement(argv);
+  if (action === 'help') return usage;
+  if (group === 'capabilities') return { schemaVersion: 1, groups: ['devices', 'auth', 'doctor', 'ssh', 'mcp', 'access', 'service', 'connect', 'status'],
+    cloudManagement: { login: 'separate browser owner approval', scopes: ['devices:read', 'devices:profile', 'devices:collect'], maximumMinutes: 480 },
+    remote: { logRead: 'local fingerprint trust + target-owned time-limited log grant', arbitraryCommands: false, unrestrictedFiles: false },
+    metadata: 'untrusted user descriptions; services are user-declared', jsonFlag: true,
+    exitCodes: { success: 0, failed: 1, arguments: 2, authorization: 3, conflict: 4, unavailable: 5 } };
+  if (group === 'auth') {
+    if (action === 'login' && o['no-browser'] && !terminal) throw cliError('terminal_required', '--no-browser 仅能在本机交互终端显示一次性交接链接；不要放进 Agent 日志。', 403);
+    const cloud = makeCloud();
+    if (action === 'status') return cloud.call('status');
+    if (action === 'logout') return cloud.call('logout');
+    const pending = await cloud.call('start', { minutes: Number(o.minutes ?? 480) });
+    if (!/^[a-f0-9-]{36}$/.test(pending.id ?? '') || !/^[a-f0-9]{64}$/.test(pending.ticket ?? '') || pending.fingerprint !== cloud.fingerprint ||
+        !Number.isSafeInteger(pending.expiresAt) || pending.expiresAt <= now() || pending.expiresAt > now() + 330_000) throw cliError('invalid_cloud_response', '云端授权响应无效。', 502);
+    const url = new URL('/cli', cloud.origin); url.hash = new URLSearchParams({ ticket: pending.ticket, expires: String(pending.expiresAt) }).toString();
+    let approved = false;
+    try {
+      progress(`请本人在浏览器核对并批准 CLI 管理权限，有效期 ${pending.minutes} 分钟。\n本机公钥指纹：${cloud.fingerprint}`);
+      if (o['no-browser']) progress(url.href); else await openBrowser(url.href);
+      while (now() < pending.expiresAt) {
+        const result = await cloud.call('poll', { id: pending.id });
+        if (result.state === 'approved' && result.authorized === true) { approved = true; return result; }
+        if (result.state !== 'pending') throw cliError('cli_authorization_denied', 'CLI 授权未批准；设备绑定保留。', 403);
+        await sleep(3000);
+      }
+      throw cliError('cli_request_expired', 'CLI 授权请求已过期，可重新登录。', 410);
+    } finally { if (!approved) await cloud.call('cancel', { id: pending.id }).catch(() => {}); }
+  }
+  const local = () => makeLocal({ port: Number(o.port ?? 5174) });
+  if (group === 'doctor') {
+    const checks = [];
+    async function check(name, fn) { try { checks.push({ name, ok: true, result: await fn() }); } catch (error) { checks.push({ name, ok: false, code: safeCode(error) }); } }
+    checks.push({ name: 'node', ok: Number(process.versions.node.split('.')[0]) >= 24, version: process.versions.node });
+    const client = local();
+    await check('local-health', client.health); await check('local-publisher', client.link); await check('mcp-service', client.connector);
+    if (o.cloud) await check('cloud-authorization', () => makeCloud().call('status'));
+    return { healthy: checks.every(c => c.ok && (c.name !== 'cloud-authorization' || c.result.authorized) &&
+      (c.name !== 'local-publisher' || !c.result.configured || c.result.publisher?.state === 'connected')), checks,
+      networkScope: o.cloud ? 'loopback + already-bound HTTPS control plane' : 'loopback only',
+      advice: ['过期表示最近没有有效资源回报，不表示密钥过期。', '设备休眠、注销、断网或后台停止都会暂停回报；collect 不能唤醒离线电脑。', 'SSH 路径以最近固定采集结果为证，配置偏好不是已连通。'], scans: false, remoteCommands: false };
+  }
+  if (group === 'mcp') {
+    const client = local();
+    if (action === 'setup') return client.setup();
+    return client.mcp(action === 'tools' ? 'tools/list' : 'tools/call', action === 'tools' ? {} : { name: o.tool, arguments: o.input });
+  }
+  if (group === 'ssh') {
+    const client = local();
+    if (action === 'candidates') return client.candidates();
+    if (action === 'check') { const result = await client.checkSsh({ alias: o.alias }); if (!result.ok) throw cliError(result.error ?? 'ssh_check_failed', 'SSH 固定采集未通过；检查现有网络、known_hosts 与认证配置。', 502); return result; }
+    const input = { aliases: [...new Set(o.aliases.split(',').map(v => v.trim()))] };
+    return action === 'import' ? client.importSsh(input) : client.removeSsh(input);
+  }
+  const client = o.cloud ? makeCloud() : local();
+  const list = async () => o.cloud ? client.devices() : client.overview();
+  const show = async () => {
+    const device = o.cloud ? (await client.call('show', { deviceId: o.id })).device : (await list()).devices.find(d => d.id === o.id);
+    if (!device) throw cliError('device_not_found', '没有找到设备，请使用 list 返回的完整 ID。', 404);
+    return { device };
+  };
+  if (action === 'list') {
+    const { devices } = await list();
+    const filtered = devices.filter(d => (!o.state || d.state === o.state) && (!o.tag || d.profile?.tags.includes(o.tag)));
+    return { mode: o.cloud ? 'cloud' : 'local', devices: filtered, total: filtered.length };
+  }
+  if (action === 'show') return show();
+  if (action === 'update') {
+    const { device } = await show();
+    if (device.profile.revision !== Number(o.revision)) throw cliError('device_profile_conflict', '资料已变化，请重新 show 核对 revision。', 409);
+    const profile = Object.fromEntries(['displayName', 'type', 'purpose', 'tags', 'services'].map(k => [k, device.profile[k]]));
+    for (const [flag, field] of [['name', 'displayName'], ['type', 'type'], ['purpose', 'purpose'], ['tags', 'tags'], ['services', 'services']]) {
+      if (Object.hasOwn(o, flag)) profile[field] = ['tags', 'services'].includes(flag) ? o[flag].trim() ? o[flag].split(',').map(v => v.trim()) : [] : o[flag];
+    }
+    const input = { deviceId: o.id, profile: normalizeDeviceProfile(profile), revision: Number(o.revision) };
+    return o.cloud ? client.call('profile', input) : client.profile(input);
+  }
+  const input = { deviceId: o.id };
+  let result = o.cloud ? await client.call('collect', input) : await client.collect(input);
+  if (result.status === 'failed') throw cliError(result.error ?? 'collection_failed', '采集失败。', 502);
+  if (result.status !== 'pending' || !o.wait) return result;
+  const requestedAt = result.collection.requestedAt, deadline = now() + Number(o.wait) * 1000;
+  while (now() < deadline) {
+    await sleep(Math.min(3000, Math.max(1, deadline - now())));
+    const { device } = await show(), collection = device.collection;
+    if (collection?.requestedAt !== requestedAt) throw cliError('collection_changed', '采集请求已变化，请查看设备最新状态。', 409);
+    if (collection.status === 'completed') return { status: 'completed', device };
+    if (collection.status === 'timeout') break;
+  }
+  throw cliError('collection_timeout', '等待采集超时；请求可能仍在队列，先 show 查看结果，不要重复绑定。', 503);
+}
+
+export function safeCode(error) {
+  const code = error.cliCode ?? error.message;
+  return typeof code === 'string' && /^[a-z][a-z_]{1,80}$/.test(code) ? code : 'command_failed';
+}
+export function exitCode(error) {
+  if (error.cliCode === 'invalid_arguments' || error.statusCode === 400) return 2;
+  if ([401, 403].includes(error.statusCode)) return 3;
+  if (error.statusCode === 409) return 4;
+  if (error.statusCode >= 500 || error.statusCode === 429 || error.statusCode === 410) return 5;
+  return 1;
+}

package/server/cloudAccess.mjs

@@ -4,7 +4,7 @@ import { createUnifiedAccess } from './unifiedAccess.mjs';
 
 const SESSION_AGE = 8 * 60 * 60 * 1000;
 const COOKIE = '__Host-device-center';
-const ENTRY_PAGES = new Set(['/', '/index.html', '/login', '/start', '/start.html', '/pair']);
+const ENTRY_PAGES = new Set(['/', '/index.html', '/login', '/start', '/start.html', '/pair', '/cli']);
 const digest = (value) => createHash('sha256').update(value).digest('hex');
 const reject = (message) => { throw new Error(message); };
 

package/server/drivers/access.mjs

@@ -1,21 +1,15 @@
-import { constants, openSync, closeSync, fstatSync, readFileSync, lstatSync, realpathSync, readSync, writeSync } from 'node:fs';
+import { constants, openSync, closeSync, fstatSync, lstatSync, realpathSync, readSync, writeSync } from 'node:fs';
 import { dirname, isAbsolute, resolve, join } from 'node:path';
 import { isIP } from 'node:net';
 import { publicIdentity, object, fail } from './driverProtocol.mjs';
 import { validateCertificate } from './certificates.mjs';
-import { ensurePrivateDirectory, writeLink } from './cloudLink.mjs';
+import { ensurePrivateDirectory, readPrivateJson, writePrivateJson, assertPrivateFile, secureCreatedPrivateFile } from './privateFiles.mjs';
 
 export const accessFile = linkFile => join(dirname(linkFile), 'access.json');
 export const validFingerprint = fp => typeof fp === 'string' && /^[a-f0-9]{64}$/.test(fp);
 export function privateJson(file, fallback) {
-  let fd;
-  try {
-    fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
-    const s = fstatSync(fd);
-    if (!s.isFile() || s.nlink !== 1 || s.size > 65536 || (s.mode & 0o077) || (process.getuid && s.uid !== process.getuid())) fail('access_private_file_required');
-    return JSON.parse(readFileSync(fd, 'utf8'));
-  } catch(e) { if(e.code === 'ENOENT') return fallback; throw e; }
-  finally { if(fd !== undefined) closeSync(fd); }
+  try { return readPrivateJson(file, fallback); }
+  catch (error) { if (error.message === 'driver_private_file_required') fail('access_private_file_required'); throw error; }
 }
 export function readAccess(file) {
   const value = privateJson(file, { trusts: [], grants: [], listen: null });
@@ -36,6 +30,7 @@ export function lanEndpoint(value) {
 }
 export function safeLogPath(path) {
   if (typeof path !== 'string' || !isAbsolute(path) || path.length > 4096) fail('access_absolute_log_required');
+  if (process.platform === 'win32' && (!/^[A-Za-z]:\\/.test(path) || /[<>:"|?*]/.test(path.slice(2)))) fail('access_local_drive_log_required');
   const canonical = realpathSync(path);
   checkLog(canonical); return canonical;
 }
@@ -52,10 +47,16 @@ export function peerFingerprint(socket) {
 }
 export function audit(file, entry) {
   ensurePrivateDirectory(dirname(file));
-  const fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | constants.O_NOFOLLOW, 0o600);
+  let fd;
+  try { fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | (constants.O_NOFOLLOW ?? 0)); }
+  catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+    fd = openSync(file, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
+    try { secureCreatedPrivateFile(file); } catch (error) { closeSync(fd); throw error; }
+  }
   try {
     const s = fstatSync(fd);
-    if (!s.isFile() || s.nlink !== 1 || s.mode & 0o077 || s.size > 1024 ** 2 || process.getuid && s.uid !== process.getuid()) fail('access_audit_unavailable');
+    try { assertPrivateFile(file, s, 1024 ** 2); } catch { fail('access_audit_unavailable'); }
     writeSync(fd, JSON.stringify({ ...entry, at: Date.now() }) + '\n');
   } finally { closeSync(fd); }
 }
@@ -69,7 +70,7 @@ export function readGrantedLog({ file, fingerprint, request, route, now = Date.n
   let fd;
   try {
     checkLog(grant.path);
-    fd = openSync(grant.path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    fd = openSync(grant.path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     const s = fstatSync(fd), current = lstatSync(grant.path);
     if (!s.isFile() || s.nlink !== 1 || s.ino !== current.ino || s.dev !== current.dev || realpathSync(grant.path) !== grant.path) fail('access_log_changed');
     const data = Buffer.alloc(Math.min(request.bytes, s.size));
@@ -81,4 +82,4 @@ export function readGrantedLog({ file, fingerprint, request, route, now = Date.n
   } catch(error) { audit(auditFile, { fingerprint, label: request.label, route, outcome: 'denied' }); throw error; }
   finally { if(fd !== undefined) closeSync(fd); }
 }
-export const writeAccess = (file,value) => writeLink(file,value);
+export const writeAccess = (file,value) => writePrivateJson(file,value);

package/server/drivers/browserPairing.mjs

@@ -1,5 +1,8 @@
 import { spawn } from 'node:child_process';
 import { cloudOrigin } from './driverProtocol.mjs';
+import { powershellArguments, powershellPath } from './windowsSecurity.mjs';
+
+export const windowsBrowserSource = `[Console]::InputEncoding = [System.Text.UTF8Encoding]::new($false)\n$ErrorActionPreference = 'Stop'\n$url = [Console]::In.ReadToEnd()\nStart-Process -FilePath $url | Out-Null\n`;
 
 export function pairingBrowserUrl(origin, pending) {
   cloudOrigin(origin);
@@ -10,15 +13,17 @@ export function pairingBrowserUrl(origin, pending) {
   return url.href;
 }
 
-export async function openPairingBrowser(url, { platform = process.platform, spawnImpl = spawn } = {}) {
+export async function openPairingBrowser(url, { platform = process.platform, spawnImpl = spawn, environment = process.env } = {}) {
   const target = new URL(url);
   cloudOrigin(target.origin);
-  if (target.pathname !== '/pair' || target.search || !/^#ticket=[a-f0-9]{64}&expires=\d+$/.test(target.hash)) throw new Error('无效的浏览器交接。');
-  const command = platform === 'darwin' ? '/usr/bin/open' : platform === 'linux' ? 'xdg-open' : null;
+  if (!['/pair', '/cli'].includes(target.pathname) || target.search || !/^#ticket=[a-f0-9]{64}&expires=\d+$/.test(target.hash)) throw new Error('无效的浏览器交接。');
+  const windows = platform === 'win32';
+  const command = platform === 'darwin' ? '/usr/bin/open' : platform === 'linux' ? 'xdg-open' : windows ? powershellPath(environment) : null;
   if (!command) throw new Error('此系统尚不支持浏览器接入。');
   // No shell, URL echo or opener output in the Agent transcript.
   await new Promise((resolve, reject) => {
-    const child = spawnImpl(command, [target.href], { stdio: 'ignore', shell: false });
+    const child = spawnImpl(command, windows ? powershellArguments(windowsBrowserSource) : [target.href], windows ? { stdio: ['pipe', 'ignore', 'ignore'], shell: false, windowsHide: true } : { stdio: 'ignore', shell: false });
+    if (windows) { child.stdin.on('error', () => {}); child.stdin.end(target.href); }
     const timer = setTimeout(() => { child.kill(); reject(new Error('无法打开本机浏览器。请在本机终端执行不带 --browser 的 connect 手动配对；不会自动输出凭据。')); }, 10_000);
     child.once('error', () => { clearTimeout(timer); reject(new Error('无法打开本机浏览器，请在本机终端使用不带 --browser 的 connect 手动配对。')); });
     child.once('close', code => { clearTimeout(timer); code === 0 ? resolve() : reject(new Error('浏览器打开失败，请在本机终端使用不带 --browser 的 connect 手动配对。')); });