orbit-codex-bridge 0.1.6 → 0.1.8

package/lib/updates.mjs

@@ -0,0 +1,97 @@
+const registryUrl = 'https://registry.npmjs.org/orbit-codex-bridge/latest';
+const versionPattern = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][a-zA-Z0-9-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][a-zA-Z0-9-]*))*))?(?:\+[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*)?$/;
+
+function parseVersion(value) {
+  if (typeof value !== 'string' || value.length > 120) throw new Error('版本格式无效。');
+  const match = value.match(versionPattern);
+  if (!match) throw new Error('版本格式无效。');
+  return { core:match.slice(1, 4).map(part => BigInt(part)), prerelease:match[4]?.split('.') || [] };
+}
+
+export function compareVersions(left, right) {
+  const first = parseVersion(left);
+  const second = parseVersion(right);
+  for (let index = 0; index < 3; index++) {
+    if (first.core[index] !== second.core[index]) return first.core[index] > second.core[index] ? 1 : -1;
+  }
+  if (!first.prerelease.length || !second.prerelease.length) {
+    return first.prerelease.length === second.prerelease.length ? 0 : first.prerelease.length ? -1 : 1;
+  }
+  for (let index = 0; index < Math.max(first.prerelease.length, second.prerelease.length); index++) {
+    const firstPart = first.prerelease[index];
+    const secondPart = second.prerelease[index];
+    if (firstPart === secondPart) continue;
+    if (firstPart === undefined || secondPart === undefined) return firstPart === undefined ? -1 : 1;
+    const firstNumeric = /^\d+$/.test(firstPart);
+    const secondNumeric = /^\d+$/.test(secondPart);
+    if (firstNumeric !== secondNumeric) return firstNumeric ? -1 : 1;
+    return firstNumeric ? BigInt(firstPart) > BigInt(secondPart) ? 1 : -1 : firstPart > secondPart ? 1 : -1;
+  }
+  return 0;
+}
+
+export function updateCommand(platform = process.platform) {
+  return `${platform === 'win32' ? 'npx.cmd' : 'npx'} --yes --package=orbit-codex-bridge@latest orbit login`;
+}
+
+async function readMetadata(response) {
+  if (!response.ok || !response.body) throw new Error('更新服务暂不可用。');
+  const reader = response.body.getReader();
+  const chunks = [];
+  let bytes = 0;
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      bytes += value.byteLength;
+      if (bytes > 256 * 1024) throw new Error('版本信息过大。');
+      chunks.push(Buffer.from(value));
+    }
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+  } finally { await reader.cancel().catch(() => {}); }
+}
+
+export function createUpdateChecker(currentVersion, {
+  fetchImpl = globalThis.fetch,
+  now = Date.now,
+  platform = process.platform,
+  timeout = 5000,
+  cacheLifetime = 6 * 60 * 60 * 1000,
+  failureLifetime = 5 * 60 * 1000,
+  minimumInterval = 60000
+} = {}) {
+  parseVersion(currentVersion);
+  let result = { currentVersion, latestVersion:null, available:false, status:'unchecked', checkedAt:null, command:updateCommand(platform) };
+  let inFlight = null;
+  const snapshot = () => ({ ...result });
+  async function check({ force = false } = {}) {
+    if (inFlight) return inFlight;
+    const age = result.checkedAt === null ? Infinity : Math.max(0, now() - result.checkedAt);
+    const lifetime = force ? minimumInterval : result.status === 'unavailable' ? failureLifetime : cacheLifetime;
+    if (age < lifetime) return snapshot();
+    inFlight = (async () => {
+      try {
+        const response = await fetchImpl(registryUrl, {
+          headers:{ Accept:'application/json' }, signal:AbortSignal.timeout(timeout), redirect:'error', cache:'no-store'
+        });
+        const metadata = await readMetadata(response);
+        if (metadata.name !== 'orbit-codex-bridge') throw new Error('包信息不一致。');
+        const comparison = compareVersions(metadata.version, currentVersion);
+        result = {
+          currentVersion, latestVersion:metadata.version, available:comparison > 0,
+          status:comparison > 0 ? 'update-available' : comparison < 0 ? 'ahead' : 'up-to-date',
+          checkedAt:now(), command:updateCommand(platform)
+        };
+      } catch {
+        result = {
+          currentVersion, latestVersion:null, available:false, status:'unavailable', checkedAt:now(),
+          command:updateCommand(platform), message:'暂时无法检查更新，请稍后重试。'
+        };
+      }
+      return snapshot();
+    })();
+    try { return await inFlight; }
+    finally { inFlight = null; }
+  }
+  return { check, snapshot };
+}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "orbit-codex-bridge",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "type": "module",
-  "description": "Connect your original Codex desktop conversations to Orbit on the web.",
+  "description": "Connect your computer and original Codex conversations to Orbit.",
   "engines": {
     "node": ">=24"
   },
@@ -14,25 +14,26 @@
     "orbit",
     "server.mjs",
     "relay-agent.mjs",
-    "relay-server.mjs",
-    "relay-store.mjs",
-    "lib/",
-    "public/"
+    "lib/approvals.mjs",
+    "lib/client-files.mjs",
+    "lib/connector-service.mjs",
+    "lib/desktop.mjs",
+    "lib/resume-manager.mjs",
+    "lib/rpc.mjs",
+    "lib/store.mjs",
+    "lib/updates.mjs",
+    "scripts/verify-client-package.mjs"
   ],
   "scripts": {
-    "start": "node --env-file-if-exists=.env.local server.mjs",
-    "relay": "node --env-file-if-exists=.env.relay relay-server.mjs",
-    "relay:agent": "node --env-file-if-exists=.env.local relay-agent.mjs",
-    "prepublishOnly": "npm run check && npm test",
-    "test": "node --test test/*.test.mjs",
-    "test:browser": "node --test test/browser/*.test.mjs",
-    "test:native": "node test/native-smoke.mjs",
-    "check": "node --check cli.mjs && node --check server.mjs && node --check lib/store.mjs && node --check lib/rpc.mjs && node --check lib/desktop.mjs && node --check lib/resume-manager.mjs && node --check lib/device-auth.mjs && node --check lib/connector-service.mjs && node --check public/app.js && node --check public/connect.js && node --check relay-server.mjs && node --check relay-store.mjs && node --check relay-agent.mjs && node --check public/admin.js"
+    "start": "node server.mjs",
+    "prepublishOnly": "node scripts/verify-client-package.mjs"
   },
   "dependencies": {
-    "dompurify": "^3.3.0",
-    "marked": "^17.0.0",
-    "qrcode": "^1.5.4",
     "ws": "^8.18.3"
-  }
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public"
+  },
+  "orbitDistribution": "client"
 }

package/relay-agent.mjs

@@ -69,9 +69,7 @@ export function createRelayAgent(options = {}) {
           requests.delete(request);
           resolve({statusCode:response.statusCode || 502,headers:{
             'content-type':response.headers['content-type'] || 'application/json',
-            ...(response.headers['set-cookie'] ? {'set-cookie':response.headers['set-cookie']} : {}),
-            ...Object.fromEntries(['content-disposition','content-length','accept-ranges','content-range','etag']
-              .filter(name=>typeof response.headers[name]==='string').map(name=>[name,response.headers[name]]))
+            ...(response.headers['set-cookie'] ? {'set-cookie':response.headers['set-cookie']} : {})
           },body:Buffer.concat(chunks)});
         });
       });
@@ -99,7 +97,7 @@ export function createRelayAgent(options = {}) {
     const body = Buffer.from(message.body || '', 'base64');
     if (body.length > maxBody) return;
     const headers = {};
-    for (const name of ['accept','content-type','cookie','user-agent','range','if-range','if-none-match']) {
+    for (const name of ['accept','content-type','cookie','user-agent']) {
       const value = message.headers?.[name];
       if (typeof value === 'string') headers[name] = value;
     }
@@ -228,8 +226,15 @@ export function createRelayAgent(options = {}) {
       if (!stopped) {
         if (code === 1008 || code === 1012 && reason.toString() === 'Replaced by a newer agent') {
           stopped = true;
-          const detail = code === 1008 ? '电脑凭证被拒绝，请检查账号或重新登录。' : '连接已由另一个 Orbit 实例接管。';
-          onState({status:'blocked',reason:detail});
+          const replaced = code === 1012;
+          const authenticationFailed = code === 1008 && reason.toString() === 'Agent authentication failed';
+          const reasonCode = replaced ? 'AGENT_REPLACED' : authenticationFailed ? 'DEVICE_AUTH_REJECTED' : 'AGENT_ACCESS_DENIED';
+          const detail = replaced
+            ? '连接已由另一个 Orbit 实例接管。请只保留一个连接器实例；确认后运行 orbit restart。'
+            : authenticationFailed
+              ? '云端拒绝了此电脑的连接凭证。请确认账号有效、电脑绑定未撤销；需要重新绑定时运行 orbit rebind。'
+              : '云端拒绝了此电脑的访问。请检查账号状态、有效期及电脑绑定；恢复权限后运行 orbit restart。';
+          onState({status:'blocked',reason:detail,reasonCode});
           onError(new Error(detail));
           return;
         }

package/scripts/verify-client-package.mjs

@@ -0,0 +1,34 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { isDeepStrictEqual } from 'node:util';
+import { clientFiles, clientManifest } from '../lib/client-files.mjs';
+
+export function verifyClientPackage(directory) {
+  const root=fs.realpathSync(directory);
+  const manifest=JSON.parse(fs.readFileSync(path.join(root,'package.json'),'utf8'));
+  if (!isDeepStrictEqual(manifest,clientManifest(manifest))) throw new Error('客户端 package.json 不符合发布白名单。');
+  const allowed=new Set(['package.json','package-lock.json','README.md',...clientFiles]);
+  const found=new Set();
+  const visit=(current,prefix='')=>{
+    for(const entry of fs.readdirSync(current,{withFileTypes:true})){
+      if(!prefix&&entry.name==='node_modules'){
+        if(!entry.isDirectory()||entry.isSymbolicLink())throw new Error('node_modules 必须是普通目录。');
+        continue;
+      }
+      const relative=prefix+entry.name;
+      if(entry.isSymbolicLink())throw new Error(`客户端发布目录不允许符号链接：${relative}`);
+      if(entry.isDirectory())visit(path.join(current,entry.name),`${relative}/`);
+      else if(entry.isFile()&&allowed.has(relative))found.add(relative);
+      else throw new Error(`客户端包含非白名单文件：${relative}`);
+    }
+  };
+  visit(root);
+  for(const filename of ['package.json','README.md',...clientFiles])if(!found.has(filename))throw new Error(`客户端缺少文件：${filename}`);
+  return {version:manifest.version,files:[...found].sort()};
+}
+
+if(process.argv[1]&&path.resolve(process.argv[1])===fileURLToPath(import.meta.url)){
+  const result=verifyClientPackage(path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..'));
+  console.log(`Client package verified: ${result.version} · ${result.files.length} files`);
+}

package/server.mjs

@@ -5,14 +5,15 @@ import os from 'node:os';
 import crypto from 'node:crypto';
 import { fileURLToPath } from 'node:url';
 import { WebSocketServer, WebSocket } from 'ws';
-import QRCode from 'qrcode';
 import { NativeStore } from './lib/store.mjs';
 import { CodexRpc } from './lib/rpc.mjs';
 import { DesktopRpc } from './lib/desktop.mjs';
 import { ResumeManager } from './lib/resume-manager.mjs';
+import { createUpdateChecker } from './lib/updates.mjs';
 
 const root = path.dirname(fileURLToPath(import.meta.url));
-const packageVersion = JSON.parse(fs.readFileSync(path.join(root,'package.json'),'utf8')).version;
+const packageManifest = JSON.parse(fs.readFileSync(path.join(root,'package.json'),'utf8'));
+const packageVersion = packageManifest.version;
 const sessionLifetime = 12 * 60 * 60 * 1000;
 const attachmentLifetime = 30 * 60 * 1000;
 const attachmentRetention = 24 * 60 * 60 * 1000;
@@ -47,107 +48,9 @@ function cleanupStaleAttachments(store) {
   }
 }
 
-const excludedProjectEntries=new Set([
-  '.git','.codex','.orbit-attachments','node_modules','.venv','venv','dist','build',
-  '.ssh','.aws','.azure','.config','.npm','.docker','secrets','credentials'
-]);
-const excludedProjectFiles=/^(?:\.env(?:\..*)?|\.npmrc|\.pypirc|\.netrc|\.git-credentials|id_(?:rsa|ed25519)(?:\.pub)?|.*(?:secret|credential)(?:\..*)?|.*\.(?:pem|p12|pfx|key|keystore))$/i;
-
-function checkedProjectEntry(row,relativePath=''){
-  if(!row?.cwd||typeof relativePath!=='string'||relativePath.length>1024||relativePath.includes('\0'))throw new Error('项目文件路径无效。');
-  const root=fs.realpathSync(row.cwd);
-  if(!fs.statSync(root).isDirectory())throw new Error('会话工作目录不可用。');
-  const parts=relativePath?relativePath.split(/[\\/]/):[];
-  if(parts.some(part=>!part||part==='.'||part==='..'))throw new Error('不允许访问项目目录之外的路径。');
-  let current=root;
-  for(const part of parts){
-    if(excludedProjectEntries.has(part.toLowerCase())||excludedProjectFiles.test(part))throw new Error('此系统目录或凭证文件不开放传输。');
-    current=path.join(current,part);
-    const stat=fs.lstatSync(current);
-    if(stat.isSymbolicLink())throw new Error('不支持通过符号链接传输文件。');
-  }
-  const resolved=path.resolve(current);
-  const relative=path.relative(root,resolved);
-  if(relative==='..'||relative.startsWith(`..${path.sep}`)||path.isAbsolute(relative))throw new Error('不允许访问项目目录之外的路径。');
-  return {root,path:resolved,stat:fs.statSync(resolved),relative:parts.join(path.sep)};
-}
-
-function projectFileList(row,relativePath=''){
-  const directory=checkedProjectEntry(row,relativePath);
-  if(!directory.stat.isDirectory())throw new Error('所选路径不是文件夹。');
-  const entries=[];
-  const visit=(current,relative,depth)=>{
-    if(depth>8||entries.length>=1000)return;
-    for(const name of fs.readdirSync(current)){
-      if(excludedProjectEntries.has(name.toLowerCase())||excludedProjectFiles.test(name))continue;
-      const target=path.join(current,name);
-      let stat;
-      try{stat=fs.lstatSync(target)}catch{continue}
-      if(stat.isSymbolicLink())continue;
-      const child=relative?`${relative}/${name}`:name;
-      if(stat.isDirectory())entries.push({name,path:child,type:'directory',size:null,updatedAt:stat.mtimeMs});
-      else if(stat.isFile())entries.push({name,path:child,type:'file',size:stat.size,updatedAt:stat.mtimeMs});
-      if(stat.isDirectory())visit(target,child,depth+1);
-      if(entries.length>=1000)break;
-    }
-  };
-  visit(directory.path,directory.relative,0);
-  entries.sort((left,right)=>left.type===right.type?left.name.localeCompare(right.name):left.type==='directory'?-1:1);
-  return {path:directory.relative,entries:entries.slice(0,1000),truncated:entries.length>=1000};
-}
-
-const projectMimeTypes=new Map([
-  ['.txt','text/plain; charset=utf-8'],['.md','text/markdown; charset=utf-8'],['.json','application/json'],
-  ['.csv','text/csv; charset=utf-8'],['.html','text/html; charset=utf-8'],['.css','text/css; charset=utf-8'],
-  ['.js','text/javascript; charset=utf-8'],['.ts','text/plain; charset=utf-8'],['.xml','application/xml'],
-  ['.pdf','application/pdf'],['.png','image/png'],['.jpg','image/jpeg'],['.jpeg','image/jpeg'],['.gif','image/gif'],
-  ['.webp','image/webp'],['.svg','image/svg+xml'],['.zip','application/zip']
-]);
-
-function sendFileRange(request,response,row,relativePath){
-  const file=checkedProjectEntry(row,relativePath);
-  if(!file.stat.isFile())throw new Error('所选路径不是文件。');
-  if(file.stat.size>8*1024*1024)throw Object.assign(new Error('单个文件下载不得超过 8 MiB。'),{status:413});
-  const filename=path.basename(file.path);
-  const fallback=filename.replace(/[^\x20-\x7e]|["\\;]/g,'_');
-  const encoded=encodeURIComponent(filename).replace(/[!'()*]/g,character=>`%${character.charCodeAt(0).toString(16).toUpperCase()}`);
-  const etag=`"orbit-${file.stat.size}-${Math.trunc(file.stat.mtimeMs)}"`;
-  const headers={
-    'Content-Type':projectMimeTypes.get(path.extname(filename).toLowerCase())||'application/octet-stream',
-    'Accept-Ranges':'bytes',
-    'ETag':etag,
-    'Content-Disposition':`attachment; filename="${fallback}"; filename*=UTF-8''${encoded}`,
-    'X-Content-Type-Options':'nosniff'
-  };
-  if(request.headers['if-none-match']===etag){response.writeHead(304,headers);return response.end()}
-  const ifRange=request.headers['if-range'];
-  const range=ifRange&&ifRange!==etag?null:request.headers.range;
-  if(!range){
-    response.writeHead(200,{...headers,'Content-Length':file.stat.size});
-    if(request.method==='HEAD')return response.end();
-    return fs.createReadStream(file.path).pipe(response);
-  }
-  const match=String(range).match(/^bytes=(\d*)-(\d*)$/);
-  if(!match||(!match[1]&&!match[2])){response.writeHead(416,{...headers,'Content-Range':`bytes */${file.stat.size}`});return response.end()}
-  let start,end;
-  if(!match[1]){
-    const suffix=Number(match[2]);
-    if(!Number.isSafeInteger(suffix)||suffix<=0)return response.writeHead(416,{'Content-Range':`bytes */${file.stat.size}`}).end();
-    start=Math.max(0,file.stat.size-suffix);end=file.stat.size-1;
-  }else{
-    start=Number(match[1]);end=match[2]?Number(match[2]):file.stat.size-1;
-  }
-  if(!Number.isSafeInteger(start)||!Number.isSafeInteger(end)||start<0||start>=file.stat.size||end<start){
-    response.writeHead(416,{...headers,'Content-Range':`bytes */${file.stat.size}`});return response.end();
-  }
-  end=Math.min(end,file.stat.size-1);
-  const length=end-start+1;
-  response.writeHead(206,{...headers,'Content-Length':length,'Content-Range':`bytes ${start}-${end}/${file.stat.size}`});
-  if(request.method==='HEAD')return response.end();
-  fs.createReadStream(file.path,{start,end}).pipe(response);
-}
-
 export function createOrbitServer(options = {}) {
+  const clientOnly=options.clientOnly ?? packageManifest.orbitDistribution==='client';
+  const updateChecker=options.updateChecker || createUpdateChecker(packageVersion);
   const home = options.home || process.env.ORBIT_CODEX_HOME || process.env.CODEX_HOME || path.join(os.homedir(), '.codex');
   const dataDir = options.dataDir || path.join(root, '.runtime');
   fs.mkdirSync(dataDir, { recursive: true, mode: 0o700 });
@@ -173,7 +76,7 @@ export function createOrbitServer(options = {}) {
   }
   async function attachThread(id) {
     if (executionMode !== 'desktop') return null;
-    if (resumeManager?.has(id)) return resumeManager.runtime(id);
+    if (resumeManager?.has(id)) return resumeManager.resume(id);
     try { return await rpc.attach(id); }
     catch (error) {
       const row = store.row(id);
@@ -215,6 +118,21 @@ export function createOrbitServer(options = {}) {
     }).finally(() => { modelLoading = null; });
     return modelLoading;
   }
+  function workspaceCatalog() {
+    const workspaces=new Map();
+    workspaces.set('personal',{id:'personal',cwd:path.join(dataDir,'workspaces','personal'),projectId:null,label:'个人会话 · 不绑定项目',isDefault:true});
+    const add=(directory,label,projectId=null)=>{
+      try{
+        const resolved=fs.realpathSync(directory);
+        if(!fs.statSync(resolved).isDirectory())return;
+        const key=`${projectId||''}:${process.platform==='win32'?resolved.toLowerCase():resolved}`;
+        if(!workspaces.has(key))workspaces.set(key,{id:key,cwd:resolved,label,projectId,isDefault:false});
+      }catch{}
+    };
+    for(const workspace of store.projectWorkspaces?.()||[])add(workspace.cwd,workspace.label,workspace.projectId);
+    for(const thread of store.list())if(thread.cwd)add(thread.cwd,thread.projectName||path.basename(thread.cwd),thread.nativeProjectId||null);
+    return [...workspaces.values()].sort((left,right)=>Number(right.isDefault)-Number(left.isDefault)||left.label.localeCompare(right.label));
+  }
   const publicUrl = options.publicUrl || process.env.ORBIT_PUBLIC_URL || '';
   if (publicUrl && new URL(publicUrl).protocol !== 'https:') throw new Error('ORBIT_PUBLIC_URL 必须使用 HTTPS。');
   const host = options.host || process.env.ORBIT_HOST || '127.0.0.1';
@@ -229,6 +147,7 @@ export function createOrbitServer(options = {}) {
   let port = Number(options.port ?? process.env.ORBIT_PORT ?? 4318);
   let revision = store.revision();
   let timer;
+  let updateTimer;
   let lastDesktopConnect = 0;
   let lastAttachmentCleanup=Date.now();
 
@@ -333,7 +252,7 @@ export function createOrbitServer(options = {}) {
     const resumedIds = resumeManager?.ids() || [];
     for (const id of session.enabled.keys()) controlFor(session, id);
     return {
-      product: 'Orbit', version: packageVersion, device: os.hostname(), platform: process.platform, home,
+      product: 'Orbit', version: packageVersion, updates:updateChecker.snapshot(), device: os.hostname(), platform: process.platform, home,
       threadCount: threads.length, projectCount: new Set(threads.map(thread => thread.projectId)).size,
       archivedCount: threads.filter(thread => thread.archived).length, lockedCount: threads.filter(thread => thread.locked).length,
       bridge: 'connected', transport: 'websocket', readOnlyMirror: true,
@@ -447,7 +366,9 @@ export function createOrbitServer(options = {}) {
         const session = sessionFor(request);
         if (!session) return json(response, 401, { error: '请先配对这台电脑。' });
         if (request.method === 'GET' && url.pathname === '/api/status') return json(response, 200, status(session));
+        if (request.method === 'GET' && url.pathname === '/api/updates') return json(response, 200, await updateChecker.check({force:true}));
         if (request.method === 'GET' && url.pathname === '/api/threads') return json(response, 200, { threads: store.list(), revision });
+        if (request.method === 'GET' && url.pathname === '/api/workspaces') return json(response, 200, { workspaces:workspaceCatalog() });
         if (request.method === 'GET' && url.pathname === '/api/models') return json(response, 200, { models: await modelCatalog() });
         if (request.method === 'POST' && url.pathname === '/api/logout') {
           sessions.delete(session.key);
@@ -456,9 +377,11 @@ export function createOrbitServer(options = {}) {
           return json(response, 200, { ok: true }, { 'Set-Cookie': 'orbit_session=; HttpOnly; SameSite=Strict; Path=/; Max-Age=0' });
         }
         if (request.method === 'POST' && url.pathname === '/api/pair/qr') {
+          if(clientOnly)return json(response,404,{error:'电脑连接器不提供网页配对，请在工作台登录账号。'});
           const body = await readBody(request);
           const connection = status(session).connectionUrls.find(value => value === body.url);
           if (!connection) return json(response, 400, { error: '请选择桥接服务提供的连接地址。' });
+          const {default:QRCode}=await import('qrcode');
           return json(response, 200, { image: await QRCode.toDataURL(`${connection}/#pair=${encodeURIComponent(pairingKey)}`, { width: 280, margin: 2 }), warning: '扫码者将能查看本机会话。仅向可信设备展示。' });
         }
         const uploadMatch=url.pathname.match(/^\/api\/threads\/([a-zA-Z0-9_-]{8,120})\/attachments$/);
@@ -472,18 +395,6 @@ export function createOrbitServer(options = {}) {
           removeAttachment(session,body.attachmentId);
           return json(response,200,{removed:true});
         }
-        const filesMatch=url.pathname.match(/^\/api\/threads\/([a-zA-Z0-9_-]{8,120})\/files$/);
-        if(request.method==='GET'&&filesMatch){
-          const row=store.row(filesMatch[1]);
-          if(!row)return json(response,404,{error:'会话不存在。'});
-          return json(response,200,projectFileList(row,url.searchParams.get('path')||''));
-        }
-        const fileMatch=url.pathname.match(/^\/api\/threads\/([a-zA-Z0-9_-]{8,120})\/file$/);
-        if(request.method==='GET'&&fileMatch){
-          const row=store.row(fileMatch[1]);
-          if(!row)return json(response,404,{error:'会话不存在。'});
-          return sendFileRange(request,response,row,url.searchParams.get('path')||'');
-        }
         const match = url.pathname.match(/^\/api\/threads\/([a-zA-Z0-9_-]{8,120})\/messages$/);
         if (request.method === 'GET' && match) {
           const history = store.historyFor(match[1], url.searchParams.get('before'), url.searchParams.get('limit') || 60);
@@ -491,6 +402,7 @@ export function createOrbitServer(options = {}) {
         }
         return json(response, 404, { error: '接口不存在。' });
       }
+      if(clientOnly)return json(response,404,{error:'这是 Orbit 电脑连接器。请在 Orbit 工作台登录并选择这台电脑。'});
       if (request.method !== 'GET' && request.method !== 'HEAD') return json(response, 405, { error: '不支持的方法。' });
       let file;
       let type;
@@ -548,9 +460,34 @@ export function createOrbitServer(options = {}) {
   async function command(socket, session, message) {
     const body = message.params || {};
     const id = body.threadId;
+    if (message.method === 'thread.create') {
+      if (executionMode !== 'desktop' || !resumeManager) throw new Error('当前执行通道不支持在本机 Codex 会话库创建会话。');
+      if (typeof body.text !== 'string' || !body.text.trim() || body.text.length > 20000) throw new Error('新会话的首条消息不能为空，且不得超过 20000 个字符。');
+      if (!['default','plan'].includes(body.mode || 'default')) throw new Error('新会话模式无效。');
+      const workspace=workspaceCatalog().find(entry=>entry.id===body.workspaceId);
+      if(!workspace)throw new Error('项目空间不可用，请刷新后重新选择。');
+      if(workspace.isDefault)fs.mkdirSync(workspace.cwd,{recursive:true,mode:0o700});
+      let model=null;
+      if(body.model!==undefined&&body.model!==null){
+        if(typeof body.model!=='string')throw new Error('模型选择无效。');
+        model=(await modelCatalog()).find(entry=>entry.model===body.model)?.model||null;
+        if(!model)throw new Error('所选模型不可用，请刷新模型列表。');
+      }
+      const created=await resumeManager.startNew({cwd:workspace.cwd,projectId:workspace.projectId,model,text:body.text.trim(),writable:true,mode:body.mode||'default',onCreated:threadId=>{
+        unwatchDesktop(socket);
+        session.enabled.set(threadId,{sharedExecution:false,desktop:false,writable:true,expires:Date.now()+1800000});
+        if(socket.readyState!==WebSocket.OPEN)return;
+        socket.subscription=threadId;
+        socket.desktopSubscription=threadId;
+        desktopWatchers.set(threadId,(desktopWatchers.get(threadId)||0)+1);
+      }});
+      if(!(desktopWatchers.get(created.threadId)>0))void resumeManager.release(created.threadId).catch(()=>{});
+      if(created.startError)created.startError=safeError(new Error(created.startError));
+      return created;
+    }
     if (message.method === 'thread.subscribe') {
       const row = id ? store.row(id) : null;
-      if (id && !row) throw new Error('会话不存在。');
+      if (id && !row && !resumeManager?.has(id)) throw new Error('会话不存在。');
       if (socket.desktopSubscription && socket.desktopSubscription !== (id || null)) unwatchDesktop(socket);
       socket.subscription = id || null;
       let runtime = null;
@@ -573,13 +510,13 @@ export function createOrbitServer(options = {}) {
         if (resumeManager?.has(id) && (desktopWatchers.get(id) || 0) === 0) void resumeManager.release(id).catch(() => {});
       }
       if (executionMode === 'desktop' && runtime?.attached && body.autoControl === true
-        && !row.archived && !String(row.source).startsWith('{')) {
+        && !row?.archived && !String(row?.source||'').startsWith('{')) {
         const desktop = runtime.mode !== 'same-id-resume';
-        session.enabled.set(id, {sharedExecution:desktop,desktop,writable:!desktop,expires:Date.now() + 1800000});
+        session.enabled.set(id, {sharedExecution:desktop,desktop,writable:!desktop&&runtime.permissionMode!=='read-only',expires:Date.now() + 1800000});
       }
       const control = controlFor(session, id);
       const activeRpc = resumeManager?.rpcFor(id) || rpc;
-      const approvals = control ? (executionMode === 'desktop' ? runtime?.approvals || [] : [...activeRpc.approvals.values()].filter(request => request.params.threadId === id).map(request => ({ ...request.params, requestId: String(request.id), method: request.method }))) : [];
+      const approvals = control ? (executionMode === 'desktop' ? runtime?.approvals || [] : [...activeRpc.approvals.entries()].filter(([,request]) => request.params.threadId === id).map(([requestId,request]) => ({ ...request.params, requestId, method: request.method }))) : [];
       return { subscribed: id || null, control, runtime, settings: control ? session.preferences.get(id) || null : null, turnId: runtime?.turnId || activeRpc.threads.get(id)?.turnId || null, approvals, attachments:[...session.attachments.values()].filter(item=>item.threadId===id&&!item.consumed&&item.expires>Date.now()).map(({id,label,size,mimeType})=>({id,label,size,mimeType})) };
     }
     if (message.method === 'thread.enable') {
@@ -593,7 +530,7 @@ export function createOrbitServer(options = {}) {
         catch (error) { lostListener(id,error.message,error.code); throw error; }
         if (!runtime.attached) throw new Error('桌面实时快照未就绪，未授权控制。');
         const desktop = runtime.mode !== 'same-id-resume';
-        const control = { sharedExecution:desktop, desktop, writable:!desktop, expires: Date.now() + 1800000 };
+        const control = { sharedExecution:desktop, desktop, writable:!desktop&&runtime.permissionMode!=='read-only', expires: Date.now() + 1800000 };
         session.enabled.set(id, control);
         return { threadId: id, ...control, mode:runtime.mode || 'desktop', turnId: runtime.turnId };
       }
@@ -612,7 +549,8 @@ export function createOrbitServer(options = {}) {
       if (!store.row(id)) throw new Error('会话不存在。');
       if (!controlFor(session, id)) throw new Error('请先连接并接管这条会话。');
       const runtime = runtimeForThread(id);
-      if (runtime?.mode === 'same-id-resume' || executionMode === 'desktop' && runtime?.attached) return { goal:runtime.goal || null };
+      if (runtime?.mode === 'same-id-resume') return { goal:runtime.goal || null };
+      if (executionMode === 'desktop' && runtime?.attached) return { goal:runtime.goal || null };
       if (rpc.threads?.has(id) && typeof rpc.request === 'function') return rpc.request('thread/goal/get', { threadId:id });
       return { goal:null };
     }
@@ -625,7 +563,7 @@ export function createOrbitServer(options = {}) {
       if (tokenBudget !== null && (!Number.isSafeInteger(tokenBudget) || tokenBudget < 1 || tokenBudget > 10000000)) throw new Error('目标 token 预算必须在 1 至 10000000 之间。');
       const runtime = runtimeForThread(id);
       if (runtime?.mode === 'same-id-resume') return { goal:await resumeManager.setGoal(id, { objective:body.objective.trim(), tokenBudget }) };
-      if (executionMode === 'desktop' && runtime?.attached) throw new Error('当前 Codex 桌面 IPC 未公开原生 Goal 写入接口；请在电脑端设置目标。不会用提示词模拟原生 Goal。');
+      if (executionMode === 'desktop' && runtime?.attached) throw new Error('这条会话由 Codex 桌面持有，目标修改需要桌面 owner 支持。草稿可以继续编辑，当前未保存。');
       if (rpc.threads?.has(id) && typeof rpc.request === 'function') return rpc.request('thread/goal/set', {
         threadId:id, origin:'user', objective:body.objective.trim(), status:'active', tokenBudget
       });
@@ -636,7 +574,7 @@ export function createOrbitServer(options = {}) {
       if (!['active','paused','blocked','complete'].includes(body.status)) throw new Error('无效的目标状态。');
       const runtime = runtimeForThread(id);
       if (runtime?.mode === 'same-id-resume') return { goal:await resumeManager.setGoalStatus(id, body.status) };
-      if (executionMode === 'desktop' && runtime?.attached) throw new Error('当前 Codex 桌面 IPC 未公开原生 Goal 状态接口；不会伪造目标状态。');
+      if (executionMode === 'desktop' && runtime?.attached) throw new Error('这条会话由 Codex 桌面持有，目标状态修改需要桌面 owner 支持。');
       if (rpc.threads?.has(id) && typeof rpc.request === 'function') return rpc.request('thread/goal/set', { threadId:id, origin:'user', status:body.status });
       throw new Error('当前执行通道不支持原生 Goal 状态更新。');
     }
@@ -644,7 +582,7 @@ export function createOrbitServer(options = {}) {
       if (!controlFor(session, id) || !store.row(id)) throw new Error('请先连接并接管这条会话。');
       const runtime = runtimeForThread(id);
       if (runtime?.mode === 'same-id-resume') return resumeManager.clearGoal(id);
-      if (executionMode === 'desktop' && runtime?.attached) throw new Error('当前 Codex 桌面 IPC 未公开原生 Goal 清除接口；请在电脑端清除目标。');
+      if (executionMode === 'desktop' && runtime?.attached) throw new Error('这条会话由 Codex 桌面持有，目标清除需要桌面 owner 支持。');
       if (rpc.threads?.has(id) && typeof rpc.request === 'function') return rpc.request('thread/goal/clear', { threadId:id, origin:'user' });
       throw new Error('当前执行通道不支持原生 Goal 清除。');
     }
@@ -789,6 +727,11 @@ export function createOrbitServer(options = {}) {
   async function listen() {
     await new Promise((resolve, reject) => { server.once('error', reject); server.listen(port, host, resolve); });
     port = server.address().port;
+    if(clientOnly){
+      void updateChecker.check();
+      updateTimer=setInterval(()=>{void updateChecker.check();},6*60*60*1000);
+      updateTimer.unref();
+    }
     timer = setInterval(() => {
       try {
         tryDesktopConnect();
@@ -818,7 +761,7 @@ export function createOrbitServer(options = {}) {
   }, 30000);
   heartbeat.unref();
   async function close() {
-    clearInterval(timer); clearInterval(heartbeat);
+    clearInterval(timer); clearInterval(heartbeat); clearInterval(updateTimer);
     for (const socket of sockets) unwatchDesktop(socket);
     for(const session of sessions.values())removeSessionAttachments(session);
     for (const socket of sockets) socket.terminate();

package/lib/device-auth.mjs

@@ -1,69 +0,0 @@
-import crypto from 'node:crypto';
-
-const digest = value => crypto.createHash('sha256').update(value).digest('hex');
-
-export class DeviceAuthorization {
-  constructor({ lifetime = 5 * 60 * 1000, now = Date.now } = {}) {
-    this.lifetime = lifetime;
-    this.now = now;
-    this.pending = new Map();
-    this.codes = new Map();
-  }
-
-  cleanup() {
-    for (const [key, value] of this.pending) {
-      if (value.expiresAt > this.now()) continue;
-      this.pending.delete(key);
-      this.codes.delete(value.userCode);
-    }
-  }
-
-  start(name) {
-    this.cleanup();
-    if (typeof name !== 'string' || !name.trim() || name.length > 120 || /[\u0000-\u001f\u007f]/.test(name)) {
-      throw new Error('电脑名称格式无效。');
-    }
-    if (this.pending.size >= 1000) throw Object.assign(new Error('连接请求过多，请稍后再试。'), {status:429});
-    const deviceCode = crypto.randomBytes(32).toString('base64url');
-    let userCode;
-    do { userCode = crypto.randomBytes(5).toString('hex').toUpperCase(); } while (this.codes.has(userCode));
-    const key = digest(deviceCode);
-    const entry = {name:name.trim(), userCode, expiresAt:this.now() + this.lifetime, result:null};
-    this.pending.set(key, entry);
-    this.codes.set(userCode, key);
-    return {deviceCode, userCode, expiresIn:Math.floor(this.lifetime / 1000), interval:2};
-  }
-
-  preview(userCode) {
-    this.cleanup();
-    if (typeof userCode !== 'string') return null;
-    const entry = this.pending.get(this.codes.get(userCode));
-    return entry && !entry.result ? {name:entry.name, userCode:entry.userCode, expiresAt:entry.expiresAt} : null;
-  }
-
-  approve(userCode, issue) {
-    if (!this.preview(userCode)) throw Object.assign(new Error('连接请求已失效，请在电脑重新运行 orbit login。'), {status:410});
-    const entry = this.pending.get(this.codes.get(userCode));
-    entry.result = issue(entry.name);
-  }
-
-  poll(deviceCode) {
-    this.cleanup();
-    if (typeof deviceCode !== 'string' || !/^[a-zA-Z0-9_-]{43}$/.test(deviceCode)) return {status:410};
-    const key = digest(deviceCode);
-    const entry = this.pending.get(key);
-    if (!entry) return {status:410};
-    if (!entry.result) return {status:202};
-    return {status:200, result:structuredClone(entry.result)};
-  }
-
-  acknowledge(deviceCode) {
-    if (typeof deviceCode !== 'string' || !/^[a-zA-Z0-9_-]{43}$/.test(deviceCode)) return false;
-    const key = digest(deviceCode);
-    const entry = this.pending.get(key);
-    if (!entry?.result) return false;
-    this.pending.delete(key);
-    this.codes.delete(entry.userCode);
-    return true;
-  }
-}