@chatcode/chatcode-cli 3.0.2 → 3.0.4-rc.1

package/lib/tui-compat.js

@@ -1,7 +1,7 @@
-import { n as DEFAULT_STATUS_BAR, s as normalizePageMargin } from "./tuiDisplayPrefs-BCHRRcfe.js";
-import { t as SHORTCUT_ACTIONS } from "./keymap-CFChEJ2W.js";
+import { c as normalizePageMargin, g as liveConfigValues, n as createStatusBarSchema, v as withLiveSettings } from "./statusBarSettings-BPPS_Usm.js";
+import { t as SHORTCUT_ACTIONS } from "./keymap-CJ1kvLR2.js";
 import z from "@deepseek-ai/schemastery";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/force-production-react.js
+//#region ../../../dsh-TUI/lib/types/force-production-react.js
 /**
 * React-reconciler selects its dev/production build at require time from
 * NODE_ENV; the dev build records one performance.measure() per render into
@@ -14,10 +14,18 @@ import z from "@deepseek-ai/schemastery";
 */
 process.env.NODE_ENV ??= "production";
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/index.js
+//#region ../../../dsh-TUI/lib/types/dsh-adapter/index.js
+/**
+* dsh-tui plugin entry. The TUI implementation lives in `./plugin.tsx` (its
+* render path is JSX); this module owns the plugin surface (`name`/`inject`/
+* `Config`/`apply`) at the canonical `src/index.ts` location and delegates
+* `apply` through a dynamic import so entry-scanning tooling and the Loader
+* resolve a plain `.ts` module.
+* @module @chatcode/cco-tui
+*/
 const name = "dsh-tui";
-const inject = ["agents"];
-const Config = z.object({
+const inject$1 = ["agents"];
+const Config$1 = withLiveSettings(z.object({
 	sessionId: z.string().required(false),
 	provider: z.string().required(false),
 	model: z.string().required(false),
@@ -51,26 +59,10 @@ const Config = z.object({
 	promptSessionLabel: z.boolean().default(false),
 	expandEditor: z.boolean().default(true),
 	smoothStreaming: z.boolean().default(true),
-	statusBar: z.object({
-		compact: z.boolean().default(DEFAULT_STATUS_BAR.compact),
-		tokenDashboard: z.boolean().default(DEFAULT_STATUS_BAR.tokenDashboard),
-		model: z.boolean().default(DEFAULT_STATUS_BAR.model),
-		thinking: z.boolean().default(DEFAULT_STATUS_BAR.thinking),
-		cwd: z.boolean().default(DEFAULT_STATUS_BAR.cwd),
-		contextUsage: z.boolean().default(DEFAULT_STATUS_BAR.contextUsage),
-		cache: z.boolean().default(DEFAULT_STATUS_BAR.cache),
-		tokens: z.boolean().default(DEFAULT_STATUS_BAR.tokens),
-		tps: z.boolean().default(DEFAULT_STATUS_BAR.tps),
-		gitBranch: z.boolean().default(DEFAULT_STATUS_BAR.gitBranch),
-		sessionTitle: z.boolean().default(DEFAULT_STATUS_BAR.sessionTitle),
-		sessionId: z.boolean().default(DEFAULT_STATUS_BAR.sessionId),
-		goal: z.boolean().default(DEFAULT_STATUS_BAR.goal),
-		mode: z.boolean().default(DEFAULT_STATUS_BAR.mode),
-		contextBar: z.boolean().default(DEFAULT_STATUS_BAR.contextBar),
-		activity: z.boolean().default(DEFAULT_STATUS_BAR.activity),
-		trajectory: z.boolean().default(DEFAULT_STATUS_BAR.trajectory),
-		shortcutHint: z.boolean().default(DEFAULT_STATUS_BAR.shortcutHint)
-	}).default({ ...DEFAULT_STATUS_BAR }),
+	whale: z.boolean().default(true),
+	minimal: z.boolean().default(false),
+	recapOnOpen: z.boolean().default(true),
+	statusBar: createStatusBarSchema(),
 	shortcuts: z.object(Object.fromEntries(SHORTCUT_ACTIONS.map((action) => [action.id, z.string().required(false)]))).required(false),
 	modes: z.array(z.object({
 		id: z.string(),
@@ -83,7 +75,24 @@ const Config = z.object({
 		]).required(false),
 		approval: z.union(["ask", "never"]).required(false)
 	})).required(false)
-});
+}), [
+	"fullscreen",
+	"lang",
+	"diffLayout",
+	"thinkingFold",
+	"toolBackground",
+	"scrollGutter",
+	"pageMargin",
+	"foldTerminalCommand",
+	"promptSessionLabel",
+	"expandEditor",
+	"smoothStreaming",
+	"statusBar",
+	"shortcuts",
+	"whale",
+	"minimal",
+	"recapOnOpen"
+]);
 /**
 * Start the interactive TUI front door, delegating to the JSX implementation
 * in `./plugin.tsx` (see its module doc for the full contract).
@@ -92,8 +101,14 @@ const Config = z.object({
 * @returns a promise settling when the TUI teardown completes.
 */
 async function apply(ctx, config) {
-	const { apply: ccTuiApply } = await import("./plugin-jvd9PCVt.js");
-	return ccTuiApply(ctx, config);
+	const { apply: ccTuiApply } = await import("./plugin-XR7ncbnW.js");
+	return ccTuiApply(ctx, liveConfigValues(config));
 }
 //#endregion
+//#region lib/types/tui-compat.js
+/** Validate the TUI's declared live fields using the launcher's own schema runtime. */
+const Config = new z(Config$1.toJSON());
+/** Wait for the shared model default before the TUI creates its first session. */
+const inject = [...inject$1, "agentDefaultModel"];
+//#endregion
 export { Config, apply, inject, name };

package/lib/types/args.d.ts

@@ -34,6 +34,8 @@ interface ProfileInvocation {
     patches: string[];
     /** Everything after the launcher's own flags, verbatim, for injected app plugins. */
     args: string[];
+    /** Explicitly unrestricted file access and automatic tool approval for this process. */
+    dangerouslySkipPermissions?: true;
 }
 /** Print a composed profile tree and exit without booting. */
 interface DumpConfigInvocation {

package/lib/types/home-migration.d.ts

@@ -49,6 +49,14 @@ export declare function isTransientMigrationPath(relativePath: string, kind: Hom
 export declare function resolveHomeMigrationRoots(env?: Record<string, string | undefined>): HomeMigrationRoots;
 /** Find legacy trees with durable entries that are still absent from the canonical home. */
 export declare function detectPendingHomeMigrations(roots: HomeMigrationRoots): Promise<HomeMigrationPlan[]>;
+/**
+ * Probe the legacy roots for a startup reminder without descending or reading file contents.
+ * A positive result reports legacy data, not a claim that it still needs copying;
+ * the explicit migration command owns destination comparison and fingerprinting.
+ * @param roots - legacy directories and their canonical destinations.
+ * @returns whether either distinct, readable legacy root contains a durable entry.
+ */
+export declare function hasLegacyHomeData(roots: HomeMigrationRoots): Promise<boolean>;
 /** Inspect both trees and return a deterministic, side-effect-free migration plan. */
 export declare function planHomeMigration(source: string, destination: string): Promise<HomeMigrationPlan>;
 /** Apply exactly one reviewed plan without overwriting destinations or removing legacy data. */

package/lib/types/permission-bypass.d.ts

@@ -0,0 +1,16 @@
+/** Process-local permission overrides for explicitly unrestricted CLI launches. */
+import type { Context } from '@deepseek-ai/cordis';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        /** Process-local tool approval and sandbox override installed by the launcher. */
+        chatcodePermissionBypass?: true;
+    }
+}
+/**
+ * Allow tool approval requests and remove file confinement until this root is disposed.
+ * Session permission events and saved profile settings remain unchanged, including on resume.
+ * ApprovalService still records its asked/decided pair and honors cancellation.
+ * @param ctx - profile root, before application plugins mount.
+ */
+export declare function installPermissionBypass(ctx: Context): void;
+//# sourceMappingURL=permission-bypass.d.ts.map

package/lib/types/profile-boot.d.ts

@@ -14,6 +14,7 @@ import type { PatchOptions } from '@deepseek-ai/cordis-plugin-include';
 import { type ProfileContext, type Profile, type ProfileTemplate, type RuntimeResolution } from '@deepseek-ai/dsh-app-boot';
 import { type LaunchEnvironmentSnapshot } from '@deepseek-ai/dsh-launch-environment';
 import { type ProcessShutdown } from './process-shutdown.ts';
+import { type WebInstanceRegistration } from './web-instance.ts';
 /** Profile templates shipped by ChatCode CLI in addition to the upstream runtime profiles. */
 export declare const CHATCODE_PROFILE_TEMPLATES: Readonly<Record<string, ProfileTemplate>>;
 /** Exact compatibility bridge for ChatCode-owned releases qualified against this upstream runtime. */
@@ -55,6 +56,13 @@ export declare function preferEmbeddedRuntimeResolution(resolution: RuntimeResol
 export declare function restoreTrustedTuiLayer(profile: Profile, installAnchor?: string, runtimeVersion?: string): Profile;
 /** Resolve installed ChatCode product patches without changing persisted profiles. */
 export declare function chatCodeProfilePatchFiles(profile: string, installAnchor?: string): string[];
+/**
+ * Deduplicate overlay files shared by startup, YAML dumps, and schema dumps.
+ * @param files - product and command-line overlay paths, in application order.
+ * @returns absolute paths in first-occurrence order, preserving relative-resource bases;
+ * missing files remain in the result for the patch loader to diagnose.
+ */
+export declare function uniqueProfilePatchFiles(files: readonly string[]): string[];
 /** Root config filename inside a profile directory. */
 export declare const PROFILE_ROOT_FILENAME = "cordis.yml";
 /**
@@ -94,6 +102,10 @@ export interface ResolvedProfileRuntime {
 }
 /** Options for {@link runProfile}. */
 export interface RunProfileOptions {
+    /** Private Web registration supplied by the serialized public Web launcher. */
+    webInstance?: WebInstanceRegistration | undefined;
+    /** Unrestricted file access and automatic tool approval for this process only. */
+    dangerouslySkipPermissions?: boolean | undefined;
     /** This run's frozen environment snapshot, provided before any entry mounts. */
     environment: LaunchEnvironmentSnapshot;
     /** The profile name to boot. */

package/lib/types/startup-diagnostics.d.ts

@@ -1,4 +1,5 @@
 /** Save original startup diagnostics while keeping the terminal report concise. */
+import { type Context } from '@deepseek-ai/cordis';
 import type { StartupError } from '@deepseek-ai/dsh-app-boot';
 /** Launcher-owned context; no environment values or plugin configurations are collected. */
 interface StartupDiagnosticContext {
@@ -6,6 +7,18 @@ interface StartupDiagnosticContext {
     version: string;
     profile: string;
 }
+/**
+ * Trace one startup phase to stderr when CHATCODE_CLI_STARTUP_TRACE=1.
+ * @param phase - launcher-owned label; exclude paths, arguments and configuration values.
+ * @returns a callback recording the elapsed milliseconds when the phase completes.
+ */
+export declare function startStartupPhase(phase: string): () => void;
+/**
+ * Trace plugin activation until the launcher's initial boot settles.
+ * @param ctx - the root context before profile entries mount.
+ * @returns the listener disposer; call before handing control to the interactive surface.
+ */
+export declare function traceStartupPlugins(ctx: Context): () => void;
 /**
  * Print the startup summary and save a private, uniquely named report under DSH_HOME/logs.
  * Failed writes print the complete report to stderr instead of claiming a saved path.

package/lib/types/tui-compat.d.ts

@@ -1,3 +1,9 @@
 /** Exact-version TUI bridge owned by the ChatCode launcher. */
 export * from '@deepseek-harness-tui/dsh-tui';
+import { Config as tuiConfig } from '@deepseek-harness-tui/dsh-tui';
+import Schema from '@deepseek-ai/schemastery';
+/** Validate the TUI's declared live fields using the launcher's own schema runtime. */
+export declare const Config: Schema<tuiConfig | NoInfer<Partial<tuiConfig>>, tuiConfig | NoInfer<Partial<tuiConfig>>, "plain">;
+/** Wait for the shared model default before the TUI creates its first session. */
+export declare const inject: string[];
 //# sourceMappingURL=tui-compat.d.ts.map

package/lib/types/web-browser.d.ts

@@ -0,0 +1,6 @@
+/** Open a verified instance URL with the OS browser launcher in a scrubbed Node child.
+ * @param url - authenticated loopback URL returned by the running Web instance.
+ * @returns after the browser launcher exits successfully; rejects without hiding the printed URL.
+ */
+export declare function openWebBrowser(url: string): Promise<void>;
+//# sourceMappingURL=web-browser.d.ts.map

package/lib/types/web-instance.d.ts

@@ -0,0 +1,42 @@
+import { Context } from '@deepseek-ai/cordis';
+import { type Branded } from '@deepseek-ai/dsh-brand';
+/** Process identity retained in the private file and verified control replies. */
+export type WebInstanceId = Branded<'ChatCodeWebInstanceId'>;
+/** A usage diagnostic already printed by the Web app's own argument parser. */
+export declare class WebUsageError extends Error {
+    readonly exitCode: number;
+    /** @param exitCode - exit status selected by the app argument parser. */
+    constructor(exitCode: number);
+}
+/** A registration whose lifetime belongs to this Web process, not a requesting TUI. */
+export interface WebInstanceRegistration {
+    path: string;
+    id: WebInstanceId;
+    secret: string;
+}
+/** Resolve the private instance record under the launcher's canonical home.
+ * @param home - absolute ChatCode CLI home.
+ * @returns the one default Web registration path.
+ */
+export declare function webInstancePath(home: string): string;
+/** Install authenticated local control routes and publish only after the profile is ready.
+ * @param ctx - root profile context, after the application tree has settled.
+ * @param registration - random process identity and private record path.
+ * @param stop - whole-profile shutdown, invoked only for authenticated explicit off requests.
+ * @returns after the initial registration has been written; returns without registering for help-only launches.
+ */
+export declare function registerWebInstance(ctx: Context, registration: WebInstanceRegistration, stop: () => void): Promise<void>;
+/** Operations used by the launcher; the first boot remains in the foreground. */
+export interface ManagedWebOptions {
+    home: string;
+    args: readonly string[];
+    start(registration: WebInstanceRegistration | undefined, args: readonly string[]): Promise<void>;
+    open(url: string): Promise<void>;
+    print(line: string): void;
+}
+/** Start once or reopen a verified existing instance; off waits for its listener to close.
+ * @param options - canonical home, app arguments, and launcher-owned boot/browser operations.
+ * @returns after boot, reuse, or an explicit stop has settled.
+ */
+export declare function runManagedWeb(options: ManagedWebOptions): Promise<void>;
+//# sourceMappingURL=web-instance.d.ts.map

package/lib/web-browser-Vcgfdsv_.js

@@ -0,0 +1,46 @@
+import { spawn } from "node:child_process";
+import { scrubbedParentEnv } from "@deepseek-ai/dsh-subprocess";
+//#region lib/types/web-browser.js
+/** Reopen an authenticated Web URL without inheriting project browser commands or secrets. */
+/** Open a verified instance URL with the OS browser launcher in a scrubbed Node child.
+* @param url - authenticated loopback URL returned by the running Web instance.
+* @returns after the browser launcher exits successfully; rejects without hiding the printed URL.
+*/
+async function openWebBrowser(url) {
+	const script = `
+    try {
+      const { default: open } = await import(${JSON.stringify(import.meta.resolve("open"))});
+      const launcher = await open(process.argv[1]);
+      if (process.platform === 'win32') {
+        const code = launcher.exitCode ?? await new Promise((resolve, reject) => {
+          launcher.ref();
+          launcher.once('error', reject);
+          launcher.once('close', resolve);
+        });
+        if (code !== 0) throw new Error('Browser launcher failed');
+      }
+      process.exitCode = 0;
+    } catch {
+      process.exitCode = 1;
+    }
+  `;
+	const child = spawn(process.execPath, [
+		"--input-type=module",
+		"--eval",
+		script,
+		url
+	], {
+		env: scrubbedParentEnv(),
+		stdio: "ignore",
+		windowsHide: true
+	});
+	await new Promise((resolve, reject) => {
+		child.once("error", reject);
+		child.once("close", (code) => {
+			if (code === 0) resolve();
+			else reject(/* @__PURE__ */ new Error("无法自动打开浏览器；请使用上方访问链接。"));
+		});
+	});
+}
+//#endregion
+export { openWebBrowser };

package/lib/web-instance-B0jec7cq.js

@@ -0,0 +1,2 @@
+import { r as runManagedWeb, t as WebUsageError } from "./web-instance-DbP7IHPv.js";
+export { WebUsageError, runManagedWeb };

package/lib/web-instance-DbP7IHPv.js

@@ -0,0 +1,280 @@
+import { dirname, join } from "node:path";
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import { mkdir, readFile, rm } from "node:fs/promises";
+import { provideCmdline } from "@deepseek-ai/dsh-cmdline";
+import { request } from "node:http";
+import { connect } from "node:net";
+import { Context } from "@deepseek-ai/cordis";
+import { brandString } from "@deepseek-ai/dsh-brand";
+import { withFileLock, writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
+import * as WebStartup from "@deepseek-ai/dsh-web-app/startup";
+//#region lib/types/web-instance.js
+/** Private, verified Web instance discovery shared by terminal and standalone launches. */
+const CONTROL_PATH = "/.chatcode-cli/web-instance";
+const START_WAIT_MS = 12e4;
+/** A usage diagnostic already printed by the Web app's own argument parser. */
+var WebUsageError = class extends Error {
+	exitCode;
+	/** @param exitCode - exit status selected by the app argument parser. */
+	constructor(exitCode) {
+		super("Web command-line parsing finished");
+		this.exitCode = exitCode;
+	}
+};
+async function validateArguments(args) {
+	const ctx = new Context();
+	let code;
+	provideCmdline(ctx, {
+		args,
+		exit: (value) => {
+			code = value;
+		},
+		ready: { onReady: () => () => {} }
+	});
+	try {
+		WebStartup.apply(ctx);
+	} finally {
+		await ctx.fiber.dispose();
+	}
+	if (code !== void 0) throw new WebUsageError(code);
+}
+/** Resolve the private instance record under the launcher's canonical home.
+* @param home - absolute ChatCode CLI home.
+* @returns the one default Web registration path.
+*/
+function webInstancePath(home) {
+	return join(home, "web", "instance.json");
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function localUrl(value, token) {
+	if (typeof value !== "string") return void 0;
+	try {
+		const url = new URL(value);
+		if (url.protocol !== "http:" || url.hostname !== "127.0.0.1" || url.port === "" || url.username !== "" || url.password !== "" || url.hash !== "" || url.pathname !== "/") return void 0;
+		if (token ? !url.searchParams.get("token") : url.search !== "") return void 0;
+		return url;
+	} catch {
+		return;
+	}
+}
+async function readInstance(path) {
+	let text;
+	try {
+		text = await readFile(path, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return void 0;
+		throw error;
+	}
+	let value;
+	try {
+		value = JSON.parse(text);
+	} catch (_invalidJson) {
+		throw new Error("Web 实例登记无法解析；未启动或关闭任何进程。");
+	}
+	if (!isRecord(value) || value.version !== 1 || typeof value.id !== "string" || typeof value.pid !== "number" || !Number.isInteger(value.pid) || value.pid < 1 || value.pid > 2147483647 || typeof value.secret !== "string" || !/^[a-f0-9]{64}$/u.test(value.secret) || typeof value.origin !== "string" || localUrl(value.origin, false) === void 0) throw new Error("Web 实例登记无效；未启动或关闭任何进程。");
+	return {
+		version: 1,
+		id: brandString(value.id),
+		pid: value.pid,
+		origin: value.origin,
+		secret: value.secret
+	};
+}
+function processExists(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (error) {
+		if (error.code === "ESRCH") return false;
+		throw error;
+	}
+}
+/** Local HTTP avoids inherited proxies and never follows a redirect carrying the management secret. */
+async function control(record, method) {
+	return new Promise((resolve, reject) => {
+		const req = request(`${record.origin}${CONTROL_PATH}`, {
+			method,
+			headers: {
+				authorization: `Bearer ${record.secret}`,
+				connection: "close"
+			}
+		}, (res) => {
+			const chunks = [];
+			let size = 0;
+			res.on("data", (chunk) => {
+				size += chunk.length;
+				if (size > 16384) req.destroy(/* @__PURE__ */ new Error("Web 实例响应过大。"));
+				else chunks.push(chunk);
+			});
+			res.on("error", reject);
+			res.on("end", () => {
+				try {
+					if (res.statusCode !== 200) throw new Error("Web 实例未通过认证；不会复用或关闭此端口上的其他服务。");
+					const value = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+					if (!isRecord(value) || value.id !== record.id || value.pid !== record.pid || localUrl(value.url, true)?.origin !== record.origin || typeof value.url !== "string") throw new Error("Web 实例身份不匹配；未关闭任何进程。");
+					resolve({
+						id: record.id,
+						pid: record.pid,
+						url: value.url
+					});
+				} catch (error) {
+					reject(error instanceof Error ? error : new Error("Web 实例响应无效。", { cause: error }));
+				}
+			});
+		});
+		req.setTimeout(2e3, () => req.destroy(/* @__PURE__ */ new Error("Web 实例暂未响应；请稍后重试。")));
+		req.on("error", (error) => {
+			if (error.code === "ECONNREFUSED") resolve(void 0);
+			else reject(error);
+		});
+		req.end();
+	});
+}
+/** Install authenticated local control routes and publish only after the profile is ready.
+* @param ctx - root profile context, after the application tree has settled.
+* @param registration - random process identity and private record path.
+* @param stop - whole-profile shutdown, invoked only for authenticated explicit off requests.
+* @returns after the initial registration has been written; returns without registering for help-only launches.
+*/
+async function registerWebInstance(ctx, registration, stop) {
+	if (ctx.get("webServer") === void 0 || ctx.get("connection") === void 0) return;
+	let disposed = false;
+	let published = Promise.resolve();
+	const status = () => {
+		const web = ctx.get("webServer");
+		const connection = ctx.get("connection");
+		if (web === void 0 || connection === void 0) throw new Error("Web 服务正在重载。");
+		return {
+			id: registration.id,
+			pid: process.pid,
+			url: connection.authenticatedUrl(`http://127.0.0.1:${web.port}`)
+		};
+	};
+	ctx.inject(["webServer", "connection"], (owner) => {
+		owner.effect(() => owner.webServer.register({
+			kind: "exact",
+			path: CONTROL_PATH,
+			handler(req, res) {
+				res.setHeader("cache-control", "no-store");
+				const auth = req.headers.authorization ?? "";
+				const expected = `Bearer ${registration.secret}`;
+				if (![
+					"127.0.0.1",
+					"::ffff:127.0.0.1",
+					"::1"
+				].includes(req.socket.remoteAddress ?? "") || Buffer.byteLength(auth) !== Buffer.byteLength(expected) || !timingSafeEqual(Buffer.from(auth), Buffer.from(expected))) {
+					res.writeHead(401).end();
+					return;
+				}
+				if (req.method !== "GET" && req.method !== "POST") {
+					res.writeHead(405).end();
+					return;
+				}
+				if (disposed) {
+					res.writeHead(503).end();
+					return;
+				}
+				res.setHeader("content-type", "application/json");
+				if (req.method === "POST") res.once("finish", stop);
+				res.end(JSON.stringify(status()));
+			}
+		}));
+		const current = status();
+		published = published.then(() => writeFileAtomic(registration.path, JSON.stringify({
+			version: 1,
+			id: current.id,
+			pid: current.pid,
+			origin: new URL(current.url).origin,
+			secret: registration.secret
+		}), {
+			mode: 384,
+			dirMode: 448
+		}));
+		return published;
+	});
+	ctx.effect(() => async () => {
+		disposed = true;
+		await published;
+		if ((await readInstance(registration.path))?.id === registration.id) await rm(registration.path, { force: true });
+	});
+	await ctx.loader.await();
+	await published;
+}
+function listenerOpen(origin) {
+	return new Promise((resolve, reject) => {
+		const socket = connect({
+			host: "127.0.0.1",
+			port: Number(new URL(origin).port)
+		});
+		socket.once("connect", () => {
+			socket.destroy();
+			resolve(true);
+		});
+		socket.setTimeout(1e3, () => {
+			socket.destroy();
+			resolve(true);
+		});
+		socket.once("error", (error) => {
+			socket.destroy();
+			if (error.code === "ECONNREFUSED") resolve(false);
+			else reject(error);
+		});
+	});
+}
+/** Start once or reopen a verified existing instance; off waits for its listener to close.
+* @param options - canonical home, app arguments, and launcher-owned boot/browser operations.
+* @returns after boot, reuse, or an explicit stop has settled.
+*/
+async function runManagedWeb(options) {
+	const action = options.args[0] === "on" || options.args[0] === "off" ? options.args[0] : "on";
+	const args = options.args[0] === action ? options.args.slice(1) : options.args;
+	const portFlag = args.findIndex((arg) => arg === "--port" || arg.startsWith("--port="));
+	const port = portFlag < 0 ? void 0 : args[portFlag]?.split("=")[1] ?? args[portFlag + 1];
+	if (args.includes("--help") || args.includes("-h") || port === "0") {
+		if (action === "off" && port === "0") throw new Error("Web off 不支持随机端口。");
+		await options.start(void 0, args);
+		return;
+	}
+	await validateArguments(args);
+	const path = webInstancePath(options.home);
+	await mkdir(dirname(path), {
+		recursive: true,
+		mode: 448
+	});
+	await withFileLock(path, async () => {
+		const record = await readInstance(path);
+		const existing = record !== void 0 && processExists(record.pid) ? await control(record, "GET") : void 0;
+		if (record !== void 0 && processExists(record.pid) && existing === void 0) throw new Error("登记的 Web 进程仍在运行，但服务尚未就绪；请稍后重试，不会重复启动。");
+		if (existing !== void 0 && record !== void 0) {
+			if (port !== void 0 && Number(port) !== Number(new URL(existing.url).port)) throw new Error("已有 Web 实例使用不同端口；请先执行 cco web off，再指定新端口启动。");
+			if (action === "off") {
+				await control(record, "POST");
+				const deadline = Date.now() + 6e3;
+				while (await listenerOpen(record.origin)) {
+					if (Date.now() >= deadline) throw new Error("Web 正在关闭，但端口尚未释放；请稍后重试。");
+					await new Promise((resolve) => setTimeout(resolve, 50));
+				}
+				if ((await readInstance(path))?.id === record.id) await rm(path, { force: true });
+				options.print("cco web: stopped");
+			} else {
+				options.print(`cco web: ${existing.url}`);
+				if (!args.includes("--no-open")) await options.open(existing.url);
+			}
+			return;
+		}
+		if (record !== void 0) await rm(path, { force: true });
+		if (action === "off") {
+			options.print("cco web: stopped");
+			return;
+		}
+		await options.start({
+			path,
+			id: brandString(randomBytes(16).toString("hex")),
+			secret: randomBytes(32).toString("hex")
+		}, args);
+	}, { waitMs: START_WAIT_MS });
+}
+//#endregion
+export { webInstancePath as i, registerWebInstance as n, runManagedWeb as r, WebUsageError as t };

package/lib/{workspaces-CznCgVHv.js → workspaces-XY7UdfXp.js}

@@ -1,8 +1,8 @@
-import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, s as requirePluginCaller } from "./host-access-CmD27uhQ.js";
+import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, s as requirePluginCaller } from "./host-access-Bk4xps5E.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { basename, isAbsolute, resolve } from "node:path";
 import { Service } from "@deepseek-ai/cordis";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/workspaces.js
+//#region ../../../dsh-TUI/lib/types/dsh-adapter/workspaces.js
 /**
 * Workspace-target extension seam for terminal front doors.
 *