device-center 0.2.0-beta.4 → 0.2.0-beta.6

package/server/drivers/cliClient.mjs

@@ -0,0 +1,87 @@
+import { defaultLinkFile, readLink } from './cloudLink.mjs';
+import { machinePost } from './remote.mjs';
+
+export function cliError(code, message, statusCode = 400) {
+  return Object.assign(new Error(message), { cliCode: code, statusCode });
+}
+export function localClient({ port = 5174, fetchImpl = fetch } = {}) {
+  if (!Number.isInteger(port) || port < 1024 || port > 65535) throw cliError('invalid_arguments', '端口须为 1024–65535。');
+  const origin = `http://127.0.0.1:${port}`;
+  async function request(path, input) {
+    let response;
+    try { response = await fetchImpl(origin + path, { method: input === undefined ? 'GET' : 'POST',
+      headers: { origin, ...(input === undefined ? {} : { 'content-type': 'application/json' }) },
+      ...(input === undefined ? {} : { body: JSON.stringify(input) }), redirect: 'error', signal: AbortSignal.timeout(30_000) }); }
+    catch { throw cliError('local_driver_unavailable', '本机 Driver 未响应。先检查 device-center service status 或启动 device-center start。', 503); }
+    if (!/^application\/json(?:;|$)/i.test(response.headers.get('content-type') ?? '')) throw cliError('invalid_driver_response', '本机端口未返回 Device Center JSON。', 502);
+    const chunks = []; let size = 0;
+    try { for await (const chunk of response.body) { size += chunk.length; if (size > 2_097_152) throw cliError('response_too_large', '本机响应过大。', 502); chunks.push(chunk); } }
+    catch (error) { if (error.cliCode) throw error; throw cliError('local_driver_unavailable', '本机响应中断。', 503); }
+    let data;
+    try { data = JSON.parse(Buffer.concat(chunks).toString('utf8')); } catch { throw cliError('invalid_driver_response', '本机响应格式无效。', 502); }
+    if (!response.ok) throw cliError(/^[a-z_]+$/.test(data?.error ?? '') ? data.error : 'local_request_failed', '本机请求失败。', response.status);
+    return data;
+  }
+  let ready = false;
+  async function local() {
+    if (ready) return;
+    const health = await request('/api/health');
+    if (health?.ok !== true || health.mode !== 'local') throw cliError('local_driver_required', '这个端口不是本机 Driver。', 409);
+    ready = true;
+  }
+  const get = path => async () => { await local(); return request(path); };
+  const post = path => async input => { await local(); return request(path, input); };
+  return { origin, health: get('/api/health'), overview: get('/api/overview'), link: get('/api/driver/link'),
+    setup: get('/api/connector/setup'), connector: get('/api/connector/status'),
+    candidates: get('/api/ssh/initialization'), collect: post('/api/devices/collect'), profile: post('/api/devices/profile'),
+    importSsh: post('/api/ssh/initialize'), checkSsh: post('/api/devices/ssh/check'), removeSsh: post('/api/devices/ssh/remove'),
+    async mcp(method, params) { await local();
+      // MCP has its own Accept contract. No arbitrary URL or JSON-RPC method is exposed.
+      if (!['tools/list', 'tools/call'].includes(method)) throw cliError('invalid_arguments', '不支持的 MCP 方法。');
+      let response;
+      try { response = await fetchImpl(origin + '/mcp', { method: 'POST', headers: { origin, 'content-type': 'application/json', accept: 'application/json, text/event-stream' },
+        body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, params }), redirect: 'error', signal: AbortSignal.timeout(30_000) }); }
+      catch { throw cliError('mcp_unavailable', 'MCP 未响应。', 503); }
+      if (!response.ok) throw cliError('mcp_unavailable', 'MCP 未响应。', response.status);
+      if (!/^application\/json(?:;|$)/i.test(response.headers.get('content-type') ?? '')) throw cliError('invalid_driver_response', 'MCP 响应格式无效。', 502);
+      const chunks = []; let size = 0;
+      try { for await (const chunk of response.body) { size += chunk.length; if (size > 2_097_152) throw cliError('response_too_large', 'MCP 响应过大。', 502); chunks.push(chunk); } }
+      catch (error) { if (error.cliCode) throw error; throw cliError('mcp_unavailable', 'MCP 响应中断。', 503); }
+      let value;
+      try { value = JSON.parse(Buffer.concat(chunks).toString('utf8')); } catch { throw cliError('invalid_driver_response', 'MCP 响应格式无效。', 502); }
+      if (value.error || value.result?.isError) throw cliError('mcp_tool_failed', '工具未完成；检查参数、本机信任与目标日志授权。', 409);
+      return value.result;
+    },
+  };
+}
+
+export function cloudClient({ file = defaultLinkFile(), fetchImpl, read = readLink } = {}) {
+  const state = read(file);
+  if (!state?.driverId || state.disabled) throw cliError('device_binding_required', '先运行 connect 绑定这台管理电脑，再 auth login 单独授权 CLI。', 403);
+  const call = async (action, input = {}) => {
+    try { return await machinePost(state, `cli/${action}`, input, fetchImpl); }
+    catch (error) {
+      if (Number.isInteger(error.statusCode)) throw error;
+      throw cliError('cloud_driver_unavailable', '已绑定的控制面未响应有效数据；检查网络和控制面版本。', 503);
+    }
+  };
+  return { origin: state.origin, fingerprint: state.fingerprint, call,
+    async devices() {
+      const devices = []; let offset = 0, total;
+      for (let page = 0; page < 26; page++) {
+        const result = await call('list', { offset, limit: 10 });
+        if (!Array.isArray(result.devices) || result.devices.length > 10 || !Number.isInteger(result.total) || result.total > 256 ||
+            (result.nextOffset !== null && result.nextOffset !== offset + 10)) throw cliError('invalid_cloud_response', '云端分页响应无效。', 502);
+        total ??= result.total;
+        if (total !== result.total) throw cliError('inventory_changed', '设备清单在分页期间变化，请重新 list。', 409);
+        devices.push(...result.devices);
+        if (result.nextOffset === null) {
+          if (devices.length !== total || new Set(devices.map(d => d.id)).size !== total) throw cliError('inventory_changed', '设备清单在分页期间变化，请重新 list。', 409);
+          return { devices, total };
+        }
+        offset = result.nextOffset;
+      }
+      throw cliError('invalid_cloud_response', '云端分页超出上限。', 502);
+    },
+  };
+}

package/server/drivers/cliManagement.mjs

@@ -0,0 +1,119 @@
+import { randomBytes, randomUUID, createHash } from 'node:crypto';
+import { fail, object } from './driverProtocol.mjs';
+
+export const CLI_SCOPES = Object.freeze(['devices:read', 'devices:profile', 'devices:collect']);
+const hash = value => createHash('sha256').update(value).digest('hex');
+const AGE = 300_000;
+// A bound telemetry identity is not an account management credential. A human owner
+// grants this separate, short-lived capability; every call still proves the device key.
+export function createCliManagement({ db, now = Date.now, account }) {
+  db.exec(`CREATE TABLE IF NOT EXISTS cli_requests (
+    id TEXT PRIMARY KEY, driver_id TEXT NOT NULL, ticket_hash TEXT UNIQUE NOT NULL,
+    created_at INTEGER NOT NULL, expires_at INTEGER NOT NULL, minutes INTEGER NOT NULL,
+    state TEXT NOT NULL DEFAULT 'pending');
+    CREATE TABLE IF NOT EXISTS cli_grants (
+    driver_id TEXT PRIMARY KEY, created_at INTEGER NOT NULL, expires_at INTEGER NOT NULL,
+    revoked_at INTEGER, last_used_at INTEGER)`);
+  const descriptor = row => ({ driverId: row.id, name: row.name, platform: row.platform, fingerprint: row.fingerprint });
+  const status = row => {
+    const grant = db.prepare('SELECT * FROM cli_grants WHERE driver_id=?').get(row.id);
+    return { authorized: Boolean(grant && grant.revoked_at == null && grant.expires_at > now()),
+      scopes: [...CLI_SCOPES], expiresAt: grant?.expires_at ?? null, revokedAt: grant?.revoked_at ?? null,
+      lastUsedAt: grant?.last_used_at ?? null, ...descriptor(row) };
+  };
+  function pending(input, tenantId) {
+    if (typeof input.ticket !== 'string' || !/^[a-f0-9]{64}$/.test(input.ticket)) fail('cli_request_unavailable', 404);
+    const request = db.prepare(`SELECT r.*, d.tenant_id, d.name, d.platform, d.fingerprint, d.revoked_at
+      FROM cli_requests r JOIN cloud_drivers d ON d.id=r.driver_id WHERE r.ticket_hash=?`).get(hash(input.ticket));
+    if (!request || request.tenant_id !== tenantId || request.revoked_at != null || request.expires_at <= now() || request.state !== 'pending') fail('cli_request_unavailable', 404);
+    return request;
+  }
+  return {
+    owner(tenantId) {
+      return {
+        lookup(input) {
+          object(input, ['ticket']); const row = pending(input, tenantId);
+          return { id: row.id, driverId: row.driver_id, name: row.name, platform: row.platform, fingerprint: row.fingerprint,
+            scopes: [...CLI_SCOPES], minutes: row.minutes, expiresAt: row.expires_at };
+        },
+        approve(input) {
+          object(input, ['ticket', 'fingerprint']); const row = pending(input, tenantId);
+          if (input.fingerprint !== row.fingerprint) fail('cli_confirmation_required', 400);
+          const expiresAt = now() + row.minutes * 60_000;
+          db.exec('BEGIN IMMEDIATE');
+          try {
+            db.prepare("UPDATE cli_requests SET state='approved' WHERE id=? AND state='pending'").run(row.id);
+            db.prepare(`INSERT INTO cli_grants VALUES (?,?,?,NULL,NULL) ON CONFLICT(driver_id)
+              DO UPDATE SET created_at=excluded.created_at, expires_at=excluded.expires_at, revoked_at=NULL, last_used_at=NULL`).run(row.driver_id, now(), expiresAt);
+            db.exec('COMMIT');
+          } catch (error) { db.exec('ROLLBACK'); throw error; }
+          return { authorized: true, scopes: [...CLI_SCOPES], expiresAt };
+        },
+        deny(input) {
+          object(input, ['ticket']); const row = pending(input, tenantId);
+          db.prepare("UPDATE cli_requests SET state='denied' WHERE id=?").run(row.id);
+          return { ok: true };
+        },
+        grants() {
+          return { grants: db.prepare(`SELECT d.* FROM cloud_drivers d JOIN cli_grants g ON g.driver_id=d.id
+            WHERE d.tenant_id=? AND d.revoked_at IS NULL ORDER BY g.created_at DESC`).all(tenantId).map(status) };
+        },
+        revoke(input) {
+          object(input, ['driverId']);
+          if (typeof input.driverId !== 'string' || !db.prepare('SELECT 1 FROM cloud_drivers WHERE id=? AND tenant_id=?').get(input.driverId, tenantId)) fail('driver_unknown', 404);
+          db.prepare('UPDATE cli_grants SET revoked_at=COALESCE(revoked_at,?) WHERE driver_id=?').run(now(), input.driverId);
+          db.prepare("UPDATE cli_requests SET state='cancelled' WHERE driver_id=? AND state='pending'").run(input.driverId);
+          return { ok: true };
+        },
+      };
+    },
+    machine(action, row, input) {
+      if (action === 'status') { object(input, []); return status(row); }
+      if (action === 'start') {
+        object(input, ['minutes']); const minutes = input.minutes ?? 480;
+        if (!Number.isInteger(minutes) || minutes < 5 || minutes > 480) fail('invalid_cli_duration');
+        // Only expired protocol handoffs are discarded, never account/device data.
+        db.prepare('DELETE FROM cli_requests WHERE expires_at<=?').run(now());
+        if (db.prepare('SELECT count(*) AS n FROM cli_requests').get().n >= 128 ||
+            db.prepare('SELECT count(*) AS n FROM cli_requests WHERE driver_id=? AND created_at>?').get(row.id, now() - 60_000).n >= 3) fail('cli_rate_limited', 429);
+        db.prepare("UPDATE cli_requests SET state='cancelled' WHERE driver_id=? AND state='pending'").run(row.id);
+        const id = randomUUID(), ticket = randomBytes(32).toString('hex');
+        db.prepare('INSERT INTO cli_requests (id,driver_id,ticket_hash,created_at,expires_at,minutes) VALUES (?,?,?,?,?,?)').run(id, row.id, hash(ticket), now(), now() + AGE, minutes);
+        return { id, ticket, expiresAt: now() + AGE, fingerprint: row.fingerprint, scopes: [...CLI_SCOPES], minutes };
+      }
+      if (action === 'poll' || action === 'cancel') {
+        object(input, ['id']);
+        if (typeof input.id !== 'string') fail('cli_request_unavailable', 404);
+        const request = db.prepare('SELECT * FROM cli_requests WHERE id=? AND driver_id=?').get(input.id, row.id);
+        if (!request || request.expires_at <= now()) fail('cli_request_expired', 410);
+        if (action === 'cancel') db.prepare("UPDATE cli_requests SET state='cancelled' WHERE id=? AND state='pending'").run(request.id);
+        return { state: action === 'cancel' && request.state === 'pending' ? 'cancelled' : request.state, ...status(row) };
+      }
+      if (action === 'logout') {
+        object(input, []);
+        db.prepare('UPDATE cli_grants SET revoked_at=COALESCE(revoked_at,?) WHERE driver_id=?').run(now(), row.id);
+        db.prepare("UPDATE cli_requests SET state='cancelled' WHERE driver_id=? AND state='pending'").run(row.id);
+        return { authorized: false, deviceBindingRetained: true };
+      }
+      if (!status(row).authorized) fail('cli_authorization_required', 403);
+      const owner = account(row.tenant_id);
+      let result;
+      if (action === 'list') {
+        object(input, ['offset', 'limit']); const offset = input.offset ?? 0, limit = input.limit ?? 10;
+        if (!Number.isSafeInteger(offset) || offset < 0 || offset > 256 || !Number.isInteger(limit) || limit < 1 || limit > 10) fail('invalid_cli_page');
+        const devices = owner.devices();
+        result = { devices: devices.slice(offset, offset + limit), total: devices.length, nextOffset: offset + limit < devices.length ? offset + limit : null };
+      } else if (action === 'show') {
+        object(input, ['deviceId']);
+        if (typeof input.deviceId !== 'string') fail('invalid_device_id');
+        const device = owner.devices().find(d => d.id === input.deviceId);
+        if (!device) fail('device_not_found', 404);
+        result = { device };
+      } else if (action === 'profile') result = owner.saveProfile(input);
+      else if (action === 'collect') result = owner.collect(input);
+      else fail('cli_action_unavailable', 404);
+      db.prepare('UPDATE cli_grants SET last_used_at=? WHERE driver_id=?').run(now(), row.id);
+      return result;
+    },
+  };
+}

package/server/drivers/cloudLink.mjs

@@ -1,38 +1,37 @@
-import { constants, openSync, closeSync, fstatSync, readFileSync, mkdirSync, lstatSync, writeFileSync, renameSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { createHash, createPrivateKey, createPublicKey, randomBytes } from 'node:crypto';
+import { join } from 'node:path';
+import { createHash, createPrivateKey, createPublicKey } from 'node:crypto';
 import { cloudOrigin, signedRequest, publicIdentity } from './driverProtocol.mjs';
 import { observeLocalDriver } from './local.mjs';
 import { validateCertificate } from './certificates.mjs';
+import { readPrivateJson, writePrivateJson, defaultDataDirectory } from './privateFiles.mjs';
+import { protectWindowsIdentity, unprotectWindowsIdentity } from './windowsSecurity.mjs';
+export { ensurePrivateDirectory, defaultDataDirectory } from './privateFiles.mjs';
 
-export const defaultLinkFile = (home = homedir(), platform = process.platform) => join(platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : join(home, '.local', 'share', 'device-center'), 'driver-link.json');
+export const defaultLinkFile = (home = homedir(), platform = process.platform) => join(defaultDataDirectory(home, platform), 'driver-link.json');
+const decrypted = new Map();
 export function readLink(file) {
-  let fd;
   try {
-    fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
-    const info = fstatSync(fd);
-    if (!info.isFile() || info.nlink !== 1 || info.size > 8192 || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_file_required');
-    const state = JSON.parse(readFileSync(fd, 'utf8'));
+    const stored = readPrivateJson(file, null, process.platform === 'win32' ? 32768 : 8192);
+    if (stored === null) return null;
+    let state = stored;
+    if (process.platform === 'win32') {
+      const cached = decrypted.get(file);
+      state = cached?.data === stored.data ? structuredClone(cached.state) : unprotectWindowsIdentity(stored);
+      if (stored.format !== 'device-center-dpapi-v1') throw new Error('windows_encrypted_identity_required');
+      if (decrypted.size > 8) decrypted.clear();
+      decrypted.set(file, { data: stored.data, state: structuredClone(state) });
+    }
     cloudOrigin(state.origin);
     const key = createPrivateKey(state.privateKey), identity = publicIdentity(state.publicKey);
     if (key.asymmetricKeyType !== 'ed25519' || createPublicKey(key).export({ type: 'spki', format: 'pem' }).toString() !== identity.publicKey || identity.fingerprint !== state.fingerprint || typeof state.shareSsh !== 'boolean' || typeof state.disabled !== 'boolean' || (state.driverId != null && !/^[a-f0-9-]{36}$/.test(state.driverId))) throw new Error('driver_private_file_invalid');
     if (state.certificate) validateCertificate(state.certificate, state.fingerprint, Date.now(), true);
     return state;
   } catch (error) { if (error.code === 'ENOENT') return null; throw new Error('driver_private_file_invalid'); }
-  finally { if (fd !== undefined) closeSync(fd); }
-}
-export function ensurePrivateDirectory(directory) {
-  mkdirSync(directory, { recursive: true, mode: 0o700 });
-  const info = lstatSync(directory);
-  if (!info.isDirectory() || info.isSymbolicLink() || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_directory_required');
 }
 export function writeLink(file, state, { create = false } = {}) {
-  ensurePrivateDirectory(dirname(file));
-  if (create) { writeFileSync(file, JSON.stringify(state), { mode: 0o600, flag: 'wx' }); return; }
-  const temp = `${file}.${randomBytes(6).toString('hex')}.tmp`;
-  writeFileSync(temp, JSON.stringify(state), { mode: 0o600, flag: 'wx' });
-  renameSync(temp, file);
+  writePrivateJson(file, process.platform === 'win32' ? protectWindowsIdentity(state) : state, { create });
+  decrypted.delete(file);
 }
 export function linkSummary(state) {
   return { protocol: 'device-center-driver-v1', configured: Boolean(state?.driverId && !state.disabled), origin: state?.origin ?? null, driverId: state?.driverId ?? null, fingerprint: state?.fingerprint ?? null, secureTransportReady: Boolean(state?.certificate), shareSsh: Boolean(state?.shareSsh), disabled: Boolean(state?.disabled) };

package/server/drivers/cloudRegistry.mjs

@@ -3,6 +3,7 @@ import { fail, object, text, publicIdentity, verifyRequest, normalizeReport } fr
 import { validateCertificate } from './certificates.mjs';
 import { createRelay } from './relay.mjs';
 import { createDeviceProfiles } from './deviceProfiles.mjs';
+import { createCliManagement } from './cliManagement.mjs';
 
 const PAIR_AGE = 5 * 60_000;
 export function createCloudRegistry({ db, origin, now = Date.now, multiUser = false, legacyOwnerMapped = !multiUser }) {
@@ -197,10 +198,14 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
       });
     },
   };
+  const management = createCliManagement({ db, now, account: tenantId => ({
+    devices: () => registry.devices(tenantId), saveProfile: input => registry.saveProfile(input, tenantId), collect: input => registry.collect(input, tenantId),
+  }) });
   return {
     start: registry.start, poll: registry.poll, report: registry.report, disconnect: registry.disconnect,
     machine(action, input) {
       const row = driver(input, `/api/driver/${action}`);
+      if (action.startsWith('cli/')) return management.machine(action.slice(4), row, input.payload);
       if (action === 'control') {
         object(input.payload, []);
         if (row.control_seen_at != null && now() - row.control_seen_at < 3000) fail('driver_control_too_frequent', 429);
@@ -220,6 +225,7 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
         lookup: input => registry.lookup(input, tenantId), approve: input => registry.approve(input, tenantId),
         revoke: input => registry.revoke(input, tenantId), bindings: () => registry.bindings(tenantId), devices: () => registry.devices(tenantId), relayUsage: () => relay.usage(tenantId),
         saveProfile: input => registry.saveProfile(input, tenantId), collect: input => registry.collect(input, tenantId),
+        cli: management.owner(tenantId),
       };
     },
   };

package/server/drivers/privateFiles.mjs

@@ -0,0 +1,57 @@
+import { constants, openSync, closeSync, fstatSync, readFileSync, mkdirSync, lstatSync, writeFileSync, renameSync } from 'node:fs';
+import { dirname, join, win32 } from 'node:path';
+import { homedir } from 'node:os';
+import { randomBytes } from 'node:crypto';
+import { windowsStorage } from './windowsSecurity.mjs';
+
+export const defaultDataDirectory = (home = homedir(), platform = process.platform) => platform === 'darwin' ? join(home, 'Library', 'Application Support', 'Device Center') : platform === 'win32' ? win32.join(home, 'AppData', 'Local', 'Device Center') : join(home, '.local', 'share', 'device-center');
+
+// Recheck Windows ACLs at least every 30s, or immediately when file metadata changes.
+// This avoids launching PowerShell on every 5s control poll. No private data is cached here.
+const checked = new Map();
+export function secureCreatedPrivateFile(file) {
+  if (process.platform === 'win32') windowsStorage('secure-new-file', { path: file });
+}
+export function ensurePrivateDirectory(directory) {
+  if (process.platform === 'win32') { windowsStorage('ensure-directory', { path: directory }); return; }
+  mkdirSync(directory, { recursive: true, mode: 0o700 });
+  const info = lstatSync(directory);
+  if (!info.isDirectory() || info.isSymbolicLink() || (info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_directory_required');
+}
+export function assertPrivateFile(file, info, limit = 65536) {
+  const pathInfo = lstatSync(file);
+  if (!info.isFile() || info.nlink !== 1 || info.size > limit || pathInfo.isSymbolicLink() || info.dev !== pathInfo.dev || info.ino !== pathInfo.ino) throw new Error('driver_private_file_required');
+  if (process.platform !== 'win32') {
+    if ((info.mode & 0o077) || (process.getuid && info.uid !== process.getuid())) throw new Error('driver_private_file_required');
+    return;
+  }
+  const signature = `${info.dev}:${info.ino}:${info.ctimeMs}:${info.mtimeMs}:${info.size}`;
+  const previous = checked.get(file);
+  if (!previous || previous.signature !== signature || Date.now() - previous.at >= 30_000) {
+    windowsStorage('assert-file', { path: file });
+    if (checked.size > 32) checked.clear();
+    checked.set(file, { signature, at: Date.now() });
+  }
+}
+export function readPrivateJson(file, fallback, limit = 65536) {
+  let fd;
+  try {
+    fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    assertPrivateFile(file, fstatSync(fd), limit);
+    return JSON.parse(readFileSync(fd, 'utf8'));
+  } catch (error) { if (error.code === 'ENOENT') return fallback; throw error; }
+  finally { if (fd !== undefined) closeSync(fd); }
+}
+export function writePrivateJson(file, value, { create = false } = {}) {
+  ensurePrivateDirectory(dirname(file));
+  const target = create ? file : `${file}.${randomBytes(6).toString('hex')}.tmp`;
+  writeFileSync(target, JSON.stringify(value), { mode: 0o600, flag: 'wx' });
+  // Windows files inherit the protected directory ACL. Validate before activation.
+  if (process.platform === 'win32') {
+    secureCreatedPrivateFile(target);
+    const fd = openSync(target, constants.O_RDONLY);
+    try { assertPrivateFile(target, fstatSync(fd)); } finally { closeSync(fd); }
+  }
+  if (!create) renameSync(target, file);
+  checked.delete(file);
+}

package/server/drivers/windowsSecurity.mjs

@@ -0,0 +1,119 @@
+import { spawnSync } from 'node:child_process';
+import { win32 } from 'node:path';
+
+// Fixed PowerShell code; paths and secrets travel only on stdin, never in arguments.
+// No execution-policy change, elevation, password, external download or shell expansion.
+export const powershellPath = (environment = process.env) => {
+  const systemRoot = environment.SystemRoot;
+  if (!systemRoot || !win32.isAbsolute(systemRoot) || /[\r\n\0]/.test(systemRoot)) throw new Error('windows_system_root_required');
+  return win32.join(systemRoot, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+};
+export const powershellArguments = source => ['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(source, 'utf16le').toString('base64')];
+export function runPowerShell(source, input, { spawnImpl = spawnSync, environment = process.env } = {}) {
+  const result = spawnImpl(powershellPath(environment), powershellArguments(source), {
+    input: JSON.stringify(input), encoding: 'utf8', windowsHide: true, shell: false, timeout: 15_000, maxBuffer: 512 * 1024,
+  });
+  // PowerShell diagnostics can contain input values. Never relay them to the caller.
+  if (result.error || result.status !== 0) throw new Error('windows_security_operation_failed');
+  try { return JSON.parse(result.stdout.replace(/^\uFEFF/, '').trim()); }
+  catch { throw new Error('windows_security_response_invalid'); }
+}
+export const powershellPreamble = `
+$ErrorActionPreference = 'Stop'
+# A Node child launched from PowerShell 7 inherits its module search path.
+# Windows PowerShell 5.1 must load its own built-in modules (including Set-Acl),
+# not incompatible PS7 or user-installed modules. This affects only this child.
+$env:PSModulePath = [IO.Path]::Combine($PSHOME, 'Modules')
+[Console]::InputEncoding = [System.Text.UTF8Encoding]::new($false)
+[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+$request = [Console]::In.ReadToEnd() | ConvertFrom-Json
+$sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
+`;
+export const windowsStorageSource = powershellPreamble + `
+function Assert-PlainPath([string] $path) {
+  $cursor = [IO.Path]::GetFullPath($path)
+  while ($cursor) {
+    if ([IO.File]::Exists($cursor) -or [IO.Directory]::Exists($cursor)) {
+      $item = Get-Item -LiteralPath $cursor -Force
+      if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'reparse_point' }
+    }
+    $parent = [IO.Path]::GetDirectoryName($cursor)
+    if ($parent -eq $cursor) { break }
+    $cursor = $parent
+  }
+}
+function Assert-Private([string] $path) {
+  Assert-PlainPath $path
+  $acl = Get-Acl -LiteralPath $path
+  if ($acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value -ne $sid.Value) { throw 'owner_required' }
+  $currentAllowed = $false
+  foreach ($rule in $acl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier])) {
+    if ($rule.AccessControlType -ne [System.Security.AccessControl.AccessControlType]::Allow) { throw 'deny_rule' }
+    if ($rule.IdentityReference.Value -notin @($sid.Value, 'S-1-5-18')) { throw 'private_acl_required' }
+    if ($rule.IdentityReference.Value -eq $sid.Value -and ($rule.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -eq [System.Security.AccessControl.FileSystemRights]::FullControl) { $currentAllowed = $true }
+  }
+  if (-not $currentAllowed) { throw 'current_user_access_required' }
+}
+switch ($request.operation) {
+  'ensure-directory' {
+    Assert-PlainPath $request.path
+    if (-not [IO.Directory]::Exists($request.path)) {
+      $directory = [IO.Directory]::CreateDirectory($request.path)
+      $acl = New-Object System.Security.AccessControl.DirectorySecurity
+      $acl.SetOwner($sid)
+      $acl.SetAccessRuleProtection($true, $false)
+      foreach ($principal in @($sid.Value, 'S-1-5-18')) {
+        $identity = [System.Security.Principal.SecurityIdentifier]::new($principal)
+        $rule = [System.Security.AccessControl.FileSystemAccessRule]::new($identity, 'FullControl', 'ContainerInherit, ObjectInherit', 'None', 'Allow')
+        $acl.AddAccessRule($rule)
+      }
+      Set-Acl -LiteralPath $directory.FullName -AclObject $acl
+    }
+    Assert-Private $request.path
+    @{ ok = $true } | ConvertTo-Json -Compress
+  }
+  'assert-file' {
+    Assert-Private ([IO.Path]::GetDirectoryName($request.path))
+    Assert-Private $request.path
+    @{ ok = $true } | ConvertTo-Json -Compress
+  }
+  'secure-new-file' {
+    # Called only after our exclusive wx creation in an already protected directory.
+    Assert-Private ([IO.Path]::GetDirectoryName($request.path))
+    Assert-PlainPath $request.path
+    $acl = [System.Security.AccessControl.FileSecurity]::new()
+    $acl.SetOwner($sid)
+    $acl.SetAccessRuleProtection($true, $false)
+    foreach ($principal in @($sid.Value, 'S-1-5-18')) {
+      $identity = [System.Security.Principal.SecurityIdentifier]::new($principal)
+      $acl.AddAccessRule([System.Security.AccessControl.FileSystemAccessRule]::new($identity, 'FullControl', 'Allow'))
+    }
+    Set-Acl -LiteralPath $request.path -AclObject $acl
+    Assert-Private $request.path
+    @{ ok = $true } | ConvertTo-Json -Compress
+  }
+  'protect' {
+    Add-Type -AssemblyName System.Security
+    $data = [Convert]::FromBase64String($request.data)
+    $encrypted = [System.Security.Cryptography.ProtectedData]::Protect($data, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
+    @{ data = [Convert]::ToBase64String($encrypted) } | ConvertTo-Json -Compress
+    [Array]::Clear($data, 0, $data.Length)
+  }
+  'unprotect' {
+    Add-Type -AssemblyName System.Security
+    $data = [System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($request.data), $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
+    @{ data = [Convert]::ToBase64String($data) } | ConvertTo-Json -Compress
+    [Array]::Clear($data, 0, $data.Length)
+  }
+  default { throw 'unknown_storage_operation' }
+}
+`;
+export function windowsStorage(operation, values) {
+  if (process.platform !== 'win32') throw new Error('windows_only');
+  return runPowerShell(windowsStorageSource, { operation, ...values });
+}
+export const protectWindowsIdentity = value => ({ format: 'device-center-dpapi-v1', data: windowsStorage('protect', { data: Buffer.from(JSON.stringify(value)).toString('base64') }).data });
+export function unprotectWindowsIdentity(value) {
+  if (value?.format !== 'device-center-dpapi-v1' || typeof value.data !== 'string' || !/^[A-Za-z0-9+/]+={0,2}$/.test(value.data)) throw new Error('windows_encrypted_identity_required');
+  return JSON.parse(Buffer.from(windowsStorage('unprotect', { data: value.data }).data, 'base64').toString('utf8'));
+}

package/server/drivers/windowsService.mjs

@@ -0,0 +1,77 @@
+import { createHash } from 'node:crypto';
+import { powershellArguments, powershellPath, powershellPreamble, runPowerShell } from './windowsSecurity.mjs';
+
+const literal = value => `'${String(value).replaceAll("'", "''")}'`;
+export function windowsServiceDefinition({ home, root, node, script, port, dbPath, logPath, errorLogPath, environment = process.env }) {
+  const launcher = `$ErrorActionPreference = 'Stop'\n$env:PORT = '${port}'\n$env:DEVICE_CENTER_DB_PATH = ${literal(dbPath)}\n$env:DEVICE_CENTER_SERVICE_MANAGER = 'windows-task'\n$env:DEVICE_CENTER_RUNTIME = 'native'\n$env:DEVICE_CENTER_PUBLIC_ORIGIN = $null\n$env:DEVICE_CENTER_AUTH_FILE = $null\nSet-Location -LiteralPath ${literal(root)}\n# Windows PowerShell 5.1 treats redirected native stderr as ErrorRecord.\n# Keep Node warnings visible in the log; use its exit code for task failure.\n$ErrorActionPreference = 'Continue'\n$LASTEXITCODE = 1\n& ${literal(node)} ${literal(script)} >> ${literal(logPath)} 2>> ${literal(errorLogPath)}\n$exitCode = $LASTEXITCODE\n$ErrorActionPreference = 'Stop'\nexit $exitCode\n`;
+  return {
+    taskName: `DeviceCenter-${createHash('sha256').update(home.toLowerCase()).digest('hex').slice(0, 16)}`,
+    executable: powershellPath(environment),
+    arguments: ['-WindowStyle', 'Hidden', ...powershellArguments(launcher)].join(' '),
+    workingDirectory: root, logonType: 'InteractiveToken', runLevel: 'Limited', trigger: 'CurrentUserLogon',
+  };
+}
+// COM Task Scheduler is built into Windows. Only this user's exact task is touched.
+export const windowsTaskSource = powershellPreamble + `
+$scheduler = New-Object -ComObject 'Schedule.Service'
+$scheduler.Connect()
+$folder = $scheduler.GetFolder('\\')
+$task = $null
+try { $task = $folder.GetTask($request.task.taskName) } catch {
+  $exception = $_.Exception
+  while ($exception.InnerException) { $exception = $exception.InnerException }
+  if ($exception.HResult -ne -2147024894) { throw }
+}
+function Assert-OurTask {
+  if (-not $task) { throw 'task_missing' }
+  $definition = $task.Definition
+  $principal = $definition.Principal
+  $principalSid = $principal.UserId
+  if ($principal.UserId -ne $sid.Value) { $principalSid = ([System.Security.Principal.NTAccount]::new($principal.UserId)).Translate([System.Security.Principal.SecurityIdentifier]).Value }
+  if ($principalSid -ne $sid.Value -or $principal.LogonType -ne 3 -or $principal.RunLevel -ne 0) { throw 'task_principal_changed' }
+  if ($definition.Actions.Count -ne 1 -or $definition.Triggers.Count -ne 1) { throw 'task_changed' }
+  $action = $definition.Actions.Item(1)
+  $trigger = $definition.Triggers.Item(1)
+  if ($action.Type -ne 0 -or $action.Path -ne $request.task.executable -or $action.Arguments -cne $request.task.arguments -or $action.WorkingDirectory -cne $request.task.workingDirectory -or $trigger.Type -ne 9 -or $trigger.UserId -ne $sid.Value) { throw 'task_action_changed' }
+}
+switch ($request.operation) {
+  'install' {
+    if ($task) { throw 'task_already_exists' }
+    $definition = $scheduler.NewTask(0)
+    $definition.RegistrationInfo.Description = 'Device Center: current user local Driver; login startup only.'
+    $definition.Principal.UserId = $sid.Value
+    $definition.Principal.LogonType = 3
+    $definition.Principal.RunLevel = 0
+    $trigger = $definition.Triggers.Create(9)
+    $trigger.UserId = $sid.Value
+    $action = $definition.Actions.Create(0)
+    $action.Path = $request.task.executable
+    $action.Arguments = $request.task.arguments
+    $action.WorkingDirectory = $request.task.workingDirectory
+    $definition.Settings.Enabled = $true
+    $definition.Settings.AllowDemandStart = $true
+    $definition.Settings.StartWhenAvailable = $true
+    $definition.Settings.DisallowStartIfOnBatteries = $false
+    $definition.Settings.StopIfGoingOnBatteries = $false
+    $definition.Settings.ExecutionTimeLimit = 'PT0S'
+    $definition.Settings.MultipleInstances = 2
+    $definition.Settings.RestartInterval = 'PT1M'
+    $definition.Settings.RestartCount = 3
+    $task = $folder.RegisterTaskDefinition($request.task.taskName, $definition, 2, $sid.Value, $null, 3)
+    $null = $task.Run($null)
+    @{ registered = $true } | ConvertTo-Json -Compress
+  }
+  'status' {
+    if ($task) { Assert-OurTask }
+    @{ exists = [bool]$task; state = $(if ($task) { [int]$task.State } else { $null }) } | ConvertTo-Json -Compress
+  }
+  'stop' { Assert-OurTask; $task.Stop(0); @{ stopped = $true } | ConvertTo-Json -Compress }
+  'remove' { Assert-OurTask; $folder.DeleteTask($request.task.taskName, 0); @{ removed = $true } | ConvertTo-Json -Compress }
+  default { throw 'unknown_task_operation' }
+}
+`;
+export function windowsTask(operation, task) {
+  if (process.platform !== 'win32') throw new Error('windows_only');
+  try { return runPowerShell(windowsTaskSource, { operation, task }); }
+  catch { throw new Error('Windows 当前用户任务操作失败。请检查任务计划程序、组策略或既有任务；未提权、改策略或覆盖任务。可改用 start 前台模式。'); }
+}