@dsh-enhanced/dsh-rsi-cli 0.1.48

package/lib/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1C,YAAY,EAAE,CACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;KAAE,KAChC,OAAO,CAAC,MAAM,CAAC,CAAA;CACrB;AAED,eAAO,MAAM,eAAe,EAAE,eAa7B,CAAA;AAED,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,IAAI,EAAE,KAAK,GAAG,OAAO,CAAA;IACrB,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAA;IAClB,mBAAmB;IACnB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,eAAe,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoC5E"}

package/lib/install.js

@@ -0,0 +1,64 @@
+import { spawn } from 'node:child_process';
+import { chmod, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { PurgeError } from "./purge.js";
+const INSTALL_BASE_URL = 'https://raw.githubusercontent.com/22-ai-00/dsh-enhanced';
+export const defaultExecutor = {
+    async download(url) {
+        const response = await fetch(url, { redirect: 'follow' });
+        if (!response.ok)
+            throw new Error(`HTTP ${response.status}`);
+        return await response.text();
+    },
+    runInherited(command, args, options) {
+        return new Promise((resolve, reject) => {
+            const child = spawn(command, [...args], { stdio: 'inherit', env: options.env });
+            child.on('error', reject);
+            child.on('close', code => resolve(code ?? 1));
+        });
+    },
+};
+/**
+ * 薄委托：dsh-rsi 不复制任何安装逻辑。
+ * npm 形态只负责把与自身版本同 tag 的 install-npm.sh 拉到临时目录执行，
+ * common.sh 的 SHA-256 自校验由脚本自身完成；local 形态直接执行 checkout 内脚本。
+ * 安装器 stdio 与当前终端直连，交互提示/输出不经缓冲。
+ * 返回安装器退出码。
+ */
+export async function runInstall(options) {
+    const executor = options.executor ?? defaultExecutor;
+    const env = { ...process.env };
+    if (options.dshHome !== undefined)
+        env.DSH_HOME = options.dshHome;
+    if (options.mode === 'local') {
+        const root = options.localRepositoryRoot;
+        if (root === undefined || root.length === 0) {
+            throw new PurgeError('local 安装形态需要 --local <checkout 目录>');
+        }
+        const script = join(root, 'scripts', 'install', 'install-local.sh');
+        return await executor.runInherited('bash', [script, ...options.passthrough], { env });
+    }
+    if (!/^v\d+\.\d+\.\d+$/u.test(options.releaseRef)) {
+        throw new PurgeError(`非法的 release ref：${options.releaseRef}（应为 vX.Y.Z）`);
+    }
+    const url = `${INSTALL_BASE_URL}/${options.releaseRef}/scripts/install/install-npm.sh`;
+    let scriptBody;
+    try {
+        scriptBody = await executor.download(url);
+    }
+    catch (error) {
+        throw new PurgeError(`下载 install-npm.sh 失败（${url}）：${error.message}。请检查网络，或改用 local 形态。`);
+    }
+    const staging = await mkdtemp(join(tmpdir(), 'dsh-rsi-install-'));
+    const scriptPath = join(staging, 'install-npm.sh');
+    try {
+        await writeFile(scriptPath, scriptBody, { mode: 0o700 });
+        await chmod(scriptPath, 0o700);
+        return await executor.runInherited('bash', [scriptPath, ...options.passthrough], { env });
+    }
+    finally {
+        await rm(staging, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=install.js.map

package/lib/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvC,MAAM,gBAAgB,GAAG,yDAAyD,CAAA;AAelF,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QAC5D,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IACD,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO;QACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;YAC/E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;IACJ,CAAC;CACF,CAAA;AAgBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAA;IACpD,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;IACjD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAA;IAEjE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,mBAAmB,CAAA;QACxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAA;QACnE,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,UAAU,CAAC,mBAAmB,OAAO,CAAC,UAAU,aAAa,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,gBAAgB,IAAI,OAAO,CAAC,UAAU,iCAAiC,CAAA;IACtF,IAAI,UAAkB,CAAA;IACtB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAClB,wBAAwB,GAAG,KAAM,KAAe,CAAC,OAAO,sBAAsB,CAC/E,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAC9B,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IAC3F,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,CAAC;AACH,CAAC"}

package/lib/paths.d.ts

@@ -0,0 +1,61 @@
+/**
+ * dsh 受管 profile 在 macOS LaunchAgent 中使用的 label 前缀。
+ * 与 plugins/lark-channel/src/launchd.ts 的 launchAgentPaths 保持一致。
+ */
+export declare const LAUNCHD_LABEL_PREFIX = "ai.deepseek.dsh.profile.";
+/** Linux systemd --user 受管 unit 命名（lifecycle-profile.mjs SYSTEMD_UNIT）。 */
+export declare const SYSTEMD_UNIT_PATTERN: RegExp;
+/** 生命周期事务目录后缀（lifecycle-profile.mjs:17）。 */
+export declare const TRANSACTION_SUFFIX = ".dsh-enhanced-transaction";
+/** 生命周期 home 级锁后缀（lifecycle-profile.mjs:504）。 */
+export declare const HOME_LOCK_SUFFIX = ".dsh-enhanced-lifecycle.lock";
+/** Keychain / Secret Service 中受管凭据的 service 前缀。 */
+export declare const CREDENTIAL_SERVICE_PREFIX = "dsh/";
+export declare function resolveDshHome(env?: NodeJS.ProcessEnv): string;
+export declare function profilesDirectory(dshHome: string): string;
+export declare function logsDirectory(dshHome: string): string;
+/**
+ * 列出 DSH home 下的全部 profile 名。
+ * profiles/ 不存在时返回空数组（机器上尚未安装任何 profile）。
+ */
+export declare function listProfiles(dshHome: string): Promise<string[]>;
+export interface ProfilePlugin {
+    /** node_modules/@dsh-enhanced 下的包名，含 scope。 */
+    name: string;
+    /** local = 指向 checkout 的符号链接；npm = 实体副本。 */
+    kind: 'npm' | 'local';
+    /** local 形态下符号链接指向的绝对路径（checkout 内的包目录）。 */
+    linkTarget?: string;
+}
+/**
+ * 枚举一个 profile 中安装的 @dsh-enhanced 插件及其安装形态。
+ * 符号链接（pnpm link / dsh plugin add <checkout>）判定为 local；
+ * 实体目录判定为 npm cohort 副本。
+ */
+export declare function listProfilePlugins(dshHome: string, profile: string): Promise<ProfilePlugin[]>;
+/**
+ * 汇总一批 profile 中 local 形态解析出的 checkout 包路径。
+ * purge 绝不删除这些路径，只在报告中提示用户自行处理 checkout 源码。
+ */
+export declare function collectLocalCheckouts(plugins: readonly ProfilePlugin[]): string[];
+/**
+ * home 之外/同级的生命周期残留：
+ *  - `${home}.dsh-enhanced-transaction` 及 `.failed-<profile>-*` 失败诊断目录
+ *  - `${home}.dsh-enhanced-lifecycle.lock`
+ *  - `/tmp/.dsh-enhanced-lifecycle-<uid>-<sha256(home)>.lock` rendezvous 锁
+ * 后两者按精确名直接判断；事务/诊断目录在父目录中按前缀枚举。
+ */
+export declare function listLifecycleResiduals(dshHome: string, parentEntries: readonly string[], tmpEntries?: readonly string[], uid?: number): Promise<string[]>;
+/** 一个 profile 对应的受管日志文件（stdout/stderr）。 */
+export declare function profileLogPaths(dshHome: string, profile: string): string[];
+/** macOS LaunchAgent label / plist 路径（与 launchd.ts launchAgentPaths 对齐）。 */
+export declare function launchAgentTargets(home: string, profile: string): {
+    label: string;
+    plistPath: string;
+};
+/** Linux systemd --user unit 名。 */
+export declare function systemdUnitName(profile: string): string;
+export declare function systemdUserDirectory(home: string): string;
+/** 备份包默认落点：~（HOME）下 dsh-purge-backup-<UTC 时间戳>.tar.gz。 */
+export declare function backupArchivePath(home: string, stamp: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/lib/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAC9D,2EAA2E;AAC3E,eAAO,MAAM,oBAAoB,QAA8D,CAAA;AAC/F,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,8BAA8B,CAAA;AAC7D,iDAAiD;AACjD,eAAO,MAAM,gBAAgB,iCAAiC,CAAA;AAC9D,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,SAAS,CAAA;AAE/C,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAG3E;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAuBrE;AAED,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,IAAI,EAAE,KAAK,GAAG,OAAO,CAAA;IACrB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CA2BnG;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,EAAE,CAMjF;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,UAAU,GAAE,SAAS,MAAM,EAAO,EAClC,GAAG,GAAE,MAAyC,GAC7C,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAOD,2CAA2C;AAC3C,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAK1E;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAGtG;AAED,mCAAmC;AACnC,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAErE"}

package/lib/paths.js

@@ -0,0 +1,168 @@
+import { createHash } from 'node:crypto';
+import { readdir, readlink, lstat } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join, basename } from 'node:path';
+/**
+ * dsh 受管 profile 在 macOS LaunchAgent 中使用的 label 前缀。
+ * 与 plugins/lark-channel/src/launchd.ts 的 launchAgentPaths 保持一致。
+ */
+export const LAUNCHD_LABEL_PREFIX = 'ai.deepseek.dsh.profile.';
+/** Linux systemd --user 受管 unit 命名（lifecycle-profile.mjs SYSTEMD_UNIT）。 */
+export const SYSTEMD_UNIT_PATTERN = /^dsh-profile-([A-Za-z0-9][A-Za-z0-9._-]{0,63})\.service$/u;
+/** 生命周期事务目录后缀（lifecycle-profile.mjs:17）。 */
+export const TRANSACTION_SUFFIX = '.dsh-enhanced-transaction';
+/** 生命周期 home 级锁后缀（lifecycle-profile.mjs:504）。 */
+export const HOME_LOCK_SUFFIX = '.dsh-enhanced-lifecycle.lock';
+/** Keychain / Secret Service 中受管凭据的 service 前缀。 */
+export const CREDENTIAL_SERVICE_PREFIX = 'dsh/';
+export function resolveDshHome(env = process.env) {
+    const explicit = env.DSH_HOME;
+    return explicit && explicit.length > 0 ? explicit : join(homedir(), '.dsh');
+}
+export function profilesDirectory(dshHome) {
+    return join(dshHome, 'profiles');
+}
+export function logsDirectory(dshHome) {
+    return join(dshHome, 'logs');
+}
+/**
+ * 列出 DSH home 下的全部 profile 名。
+ * profiles/ 不存在时返回空数组（机器上尚未安装任何 profile）。
+ */
+export async function listProfiles(dshHome) {
+    const directory = profilesDirectory(dshHome);
+    let entries;
+    try {
+        entries = await readdir(directory);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return [];
+        throw error;
+    }
+    const profiles = [];
+    for (const entry of entries) {
+        if (entry.startsWith('.'))
+            continue;
+        const profilePath = join(directory, entry);
+        const metadata = await lstat(profilePath);
+        if (!metadata.isDirectory() || metadata.isSymbolicLink())
+            continue;
+        // profiles/node_modules is DSH's shared Host peer fallback, not a profile.
+        // A real DSH profile is anchored by its package.json; requiring the marker
+        // also avoids treating arbitrary/cache directories as service targets.
+        let manifest;
+        try {
+            manifest = await lstat(join(profilePath, 'package.json'));
+        }
+        catch {
+            continue;
+        }
+        if (manifest.isFile() && !manifest.isSymbolicLink())
+            profiles.push(entry);
+    }
+    return profiles.sort();
+}
+/**
+ * 枚举一个 profile 中安装的 @dsh-enhanced 插件及其安装形态。
+ * 符号链接（pnpm link / dsh plugin add <checkout>）判定为 local；
+ * 实体目录判定为 npm cohort 副本。
+ */
+export async function listProfilePlugins(dshHome, profile) {
+    const scopeDirectory = join(profilesDirectory(dshHome), profile, 'node_modules', '@dsh-enhanced');
+    let entries;
+    try {
+        entries = await readdir(scopeDirectory);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return [];
+        throw error;
+    }
+    const plugins = [];
+    for (const entry of entries) {
+        if (entry.startsWith('.') || entry.startsWith('@'))
+            continue;
+        const pluginPath = join(scopeDirectory, entry);
+        const metadata = await lstat(pluginPath);
+        const name = `@dsh-enhanced/${entry}`;
+        if (metadata.isSymbolicLink()) {
+            const target = await readlink(pluginPath);
+            plugins.push({
+                name,
+                kind: 'local',
+                linkTarget: target.startsWith('/') ? target : join(scopeDirectory, target),
+            });
+        }
+        else if (metadata.isDirectory()) {
+            plugins.push({ name, kind: 'npm' });
+        }
+    }
+    return plugins.sort((a, b) => a.name.localeCompare(b.name));
+}
+/**
+ * 汇总一批 profile 中 local 形态解析出的 checkout 包路径。
+ * purge 绝不删除这些路径，只在报告中提示用户自行处理 checkout 源码。
+ */
+export function collectLocalCheckouts(plugins) {
+    const targets = new Set();
+    for (const plugin of plugins) {
+        if (plugin.kind === 'local' && plugin.linkTarget !== undefined)
+            targets.add(plugin.linkTarget);
+    }
+    return [...targets].sort();
+}
+/**
+ * home 之外/同级的生命周期残留：
+ *  - `${home}.dsh-enhanced-transaction` 及 `.failed-<profile>-*` 失败诊断目录
+ *  - `${home}.dsh-enhanced-lifecycle.lock`
+ *  - `/tmp/.dsh-enhanced-lifecycle-<uid>-<sha256(home)>.lock` rendezvous 锁
+ * 后两者按精确名直接判断；事务/诊断目录在父目录中按前缀枚举。
+ */
+export async function listLifecycleResiduals(dshHome, parentEntries, tmpEntries = [], uid = process.getuid?.() ?? Number.NaN) {
+    const residuals = new Set();
+    const homeBase = basename(dshHome);
+    const transactionPrefix = `${homeBase}${TRANSACTION_SUFFIX}`;
+    for (const entry of parentEntries) {
+        if (entry === transactionPrefix || entry.startsWith(`${transactionPrefix}.failed-`)) {
+            residuals.add(join(parentOf(dshHome), entry));
+        }
+        if (entry === `${homeBase}${HOME_LOCK_SUFFIX}`) {
+            residuals.add(join(parentOf(dshHome), entry));
+        }
+    }
+    if (Number.isFinite(uid)) {
+        const rendezvous = `.dsh-enhanced-lifecycle-${uid}-${createHash('sha256').update(dshHome).digest('hex')}.lock`;
+        if (tmpEntries.includes(rendezvous))
+            residuals.add(join('/tmp', rendezvous));
+    }
+    return [...residuals].sort();
+}
+function parentOf(path) {
+    const index = path.lastIndexOf('/');
+    return index <= 0 ? '/' : path.slice(0, index);
+}
+/** 一个 profile 对应的受管日志文件（stdout/stderr）。 */
+export function profileLogPaths(dshHome, profile) {
+    return [
+        join(logsDirectory(dshHome), `${profile}-host.log`),
+        join(logsDirectory(dshHome), `${profile}-host.error.log`),
+    ];
+}
+/** macOS LaunchAgent label / plist 路径（与 launchd.ts launchAgentPaths 对齐）。 */
+export function launchAgentTargets(home, profile) {
+    const label = `${LAUNCHD_LABEL_PREFIX}${profile}`;
+    return { label, plistPath: join(home, 'Library', 'LaunchAgents', `${label}.plist`) };
+}
+/** Linux systemd --user unit 名。 */
+export function systemdUnitName(profile) {
+    return `dsh-profile-${profile}.service`;
+}
+export function systemdUserDirectory(home) {
+    return join(home, '.config', 'systemd', 'user');
+}
+/** 备份包默认落点：~（HOME）下 dsh-purge-backup-<UTC 时间戳>.tar.gz。 */
+export function backupArchivePath(home, stamp) {
+    return join(home, `dsh-purge-backup-${stamp}.tar.gz`);
+}
+//# sourceMappingURL=paths.js.map

package/lib/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAC9D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,2DAA2D,CAAA;AAC/F,4CAA4C;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,CAAA;AAC7D,iDAAiD;AACjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,8BAA8B,CAAA;AAC9D,mDAAmD;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAA;AAE/C,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;IAC7B,OAAO,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe;IAChD,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACjE,MAAM,KAAK,CAAA;IACb,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE;YAAE,SAAQ;QAClE,2EAA2E;QAC3E,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,QAAQ,CAAA;QACZ,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAQ;QAAC,CAAC;QACpF,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;AACxB,CAAC;AAWD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAAe;IACvE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC,CAAA;IACjG,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAA;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACjE,MAAM,KAAK,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAoB,EAAE,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,iBAAiB,KAAK,EAAE,CAAA;QACrC,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAA;YACzC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC;aAC3E,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,aAAgC,EAChC,aAAgC,EAAE,EAClC,MAAc,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,MAAM,CAAC,GAAG;IAE9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,iBAAiB,GAAG,GAAG,QAAQ,GAAG,kBAAkB,EAAE,CAAA;IAC5D,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,iBAAiB,UAAU,CAAC,EAAE,CAAC;YACpF,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,QAAQ,GAAG,gBAAgB,EAAE,EAAE,CAAC;YAC/C,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,2BAA2B,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAA;QAC9G,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACnC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AAChD,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,OAAe;IAC9D,OAAO;QACL,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,WAAW,CAAC;QACnD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,iBAAiB,CAAC;KAC1D,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe;IAC9D,MAAM,KAAK,GAAG,GAAG,oBAAoB,GAAG,OAAO,EAAE,CAAA;IACjD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAA;AACtF,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,eAAe,OAAO,UAAU,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;AACjD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAa;IAC3D,OAAO,IAAI,CAAC,IAAI,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAA;AACvD,CAAC"}

package/lib/process-guard.d.ts

@@ -0,0 +1,51 @@
+import type { CommandRunner } from './run.ts';
+/**
+ * Purge 前的进程守卫。
+ *
+ * 旧逻辑在停服之前做进程静止检查：只要有 `--profile <p>` 进程在跑就直接 fail，
+ * 连「本应受管、本可自动停掉」的 host 也不放过，导致用户卡在 purge 入口。
+ * 这里把进程分成三类：
+ *   - self    ：dsh-rsi / purge.sh 自身命令行，永远跳过。
+ *   - proven  ：非 self，但命令行指向目标 profile，且归属证据（DSH_HOME 环境变量 /
+ *               cwd / 命令行）能证明它属于本次要清除的 DSH home。可安全终止。
+ *   - foreign ：命令行带 `--profile <p>` 但证据指向别的 home / 无法证明归属；fail-closed，
+ *               绝不自动杀。
+ *
+ * 终止顺序：先 SIGTERM，轮询最多 5 秒；仍在则 SIGKILL。每次复检都重新读取命令行，
+ * 确认 PID 仍是目标进程（防 PID reuse）。
+ */
+export interface GuardedProcess {
+    pid: number;
+    commandLine: string;
+    /** 归属证据（人读），用于交互确认列出。 */
+    evidence: string[];
+    /** proven = 可安全终止；foreign = 无法证明归属，fail-closed。 */
+    owner: 'proven' | 'foreign';
+}
+export interface ProcessScan {
+    processes: GuardedProcess[];
+    /** 非零即环境探测失败（pgrep 不可用等），调用方应 fail-closed。 */
+    error?: string;
+}
+/**
+ * 扫描目标 profile 的运行中进程，分类为 proven / foreign。
+ * 已停掉的受管服务不会再出现（调用方先 stopManagedService）；这里只处理残留进程。
+ */
+export declare function scanRunningProfiles(dshHome: string, profiles: readonly string[], runner?: CommandRunner): Promise<ProcessScan>;
+export interface TerminationReport {
+    terminated: number;
+    /** 仍在运行或身份已变的 PID（复检失败）。 */
+    failed: number[];
+}
+/**
+ * 终止一组已证明归属的 PID。
+ * SIGTERM → 每 200ms 复检一次，最多 5s → 仍在则 SIGKILL。
+ * 复检时重新读命令行：若 PID 已被复用成别的进程，立即放弃该 PID（不杀）。
+ */
+export declare function terminatePids(pids: readonly number[], runner?: CommandRunner, options?: {
+    timeoutMs?: number;
+    intervalMs?: number;
+}): Promise<TerminationReport>;
+/** 供外部判断一个相对路径是否落在 dshHome 内（预留 cwd 证据扩展）。 */
+export declare function pathInside(path: string, base: string): boolean;
+//# sourceMappingURL=process-guard.d.ts.map

package/lib/process-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-guard.d.ts","sourceRoot":"","sources":["../src/process-guard.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAG7C;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,mDAAmD;IACnD,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,cAAc,EAAE,CAAA;IAC3B,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAgCD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,MAAM,GAAE,aAA6B,GACpC,OAAO,CAAC,WAAW,CAAC,CAmCtB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,MAAM,GAAE,aAA6B,EACrC,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,OAAO,CAAC,iBAAiB,CAAC,CAoD5B;AAED,8CAA8C;AAC9C,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAG9D"}

package/lib/process-guard.js

@@ -0,0 +1,143 @@
+import { readFile } from 'node:fs/promises';
+import { relative } from 'node:path';
+import { defaultRunner } from "./run.js";
+/** 这些命令行属于 purge/rsi 自身，即使带 --profile 也绝不视为待终止目标。 */
+function isSelfCommand(commandLine) {
+    return commandLine.includes('dsh-rsi')
+        || commandLine.includes('rsi-cli')
+        || commandLine.includes('purge.sh');
+}
+function escapeRegex(value) {
+    return value.replaceAll(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+}
+/** 读取 PID 的命令行（ps）；失败返回占位。 */
+function readCommandLine(pid, runner) {
+    const shown = runner('ps', ['-p', String(pid), '-o', 'command=']);
+    return shown.stdout.trim() || `PID ${pid}`;
+}
+/** Linux：从 /proc/<pid>/environ 读 DSH_HOME；失败返回 undefined。 */
+async function procDshHome(pid) {
+    try {
+        const raw = await readFile(`/proc/${pid}/environ`, { encoding: 'utf8' });
+        for (const entry of raw.split('\0')) {
+            if (entry.startsWith('DSH_HOME='))
+                return entry.slice('DSH_HOME='.length) || undefined;
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * 扫描目标 profile 的运行中进程，分类为 proven / foreign。
+ * 已停掉的受管服务不会再出现（调用方先 stopManagedService）；这里只处理残留进程。
+ */
+export async function scanRunningProfiles(dshHome, profiles, runner = defaultRunner) {
+    const processes = [];
+    for (const profile of profiles) {
+        const pattern = `[-]-profile ${escapeRegex(profile)}`;
+        const result = runner('pgrep', ['-f', pattern]);
+        if (result.status !== 0 && result.status !== 1) {
+            return { processes, error: result.stderr.trim() || `pgrep 退出码 ${result.status}` };
+        }
+        for (const line of result.stdout.split('\n')) {
+            const pid = Number(line.trim());
+            if (!Number.isInteger(pid) || pid <= 0)
+                continue;
+            const commandLine = readCommandLine(pid, runner);
+            if (isSelfCommand(commandLine))
+                continue;
+            const evidence = [`命令行：${commandLine}`];
+            const envHome = await procDshHome(pid);
+            let owner;
+            if (envHome !== undefined) {
+                // 有 DSH_HOME 环境变量：直接比较，最强证据。
+                evidence.push(`DSH_HOME=${envHome}`);
+                owner = envHome === dshHome ? 'proven' : 'foreign';
+            }
+            else {
+                // 无 /proc（macOS）或无 DSH_HOME 变量：命令行启发式。
+                // 命令行带目标 --profile 且属于 dsh/dsh-rsi/dsh plugin 操作 → proven；
+                // 否则无法证明归属 → foreign（fail-closed）。
+                const looksLikeDsh = /(^|[\s/])(dsh|dsh-rsi)([\s.]|$)/u.test(commandLine)
+                    || commandLine.includes('dsh plugin');
+                owner = looksLikeDsh ? 'proven' : 'foreign';
+                if (!looksLikeDsh)
+                    evidence.push('命令行不含 dsh 操作，无法证明归属');
+            }
+            processes.push({ pid, commandLine, evidence, owner });
+        }
+    }
+    return { processes };
+}
+/**
+ * 终止一组已证明归属的 PID。
+ * SIGTERM → 每 200ms 复检一次，最多 5s → 仍在则 SIGKILL。
+ * 复检时重新读命令行：若 PID 已被复用成别的进程，立即放弃该 PID（不杀）。
+ */
+export async function terminatePids(pids, runner = defaultRunner, options = {}) {
+    const timeoutMs = options.timeoutMs ?? 5_000;
+    const intervalMs = options.intervalMs ?? 200;
+    const report = { terminated: 0, failed: [] };
+    if (pids.length === 0)
+        return report;
+    runner('kill', ['-TERM', ...pids.map(String)]);
+    const deadline = Date.now() + timeoutMs;
+    const stillAlive = [];
+    for (const pid of pids) {
+        const cmd = readCommandLine(pid, runner);
+        if (cmd.startsWith('PID ')) {
+            // 已经退出
+            report.terminated += 1;
+            continue;
+        }
+        stillAlive.push(pid);
+    }
+    if (stillAlive.length === 0)
+        return report;
+    while (Date.now() < deadline && stillAlive.length > 0) {
+        await new Promise(resolve => setTimeout(resolve, intervalMs));
+        const gone = [];
+        for (const pid of stillAlive) {
+            const cmd = readCommandLine(pid, runner);
+            if (cmd.startsWith('PID ') || !cmd.includes('dsh')) {
+                // 退出了；或 PID 已被复用成非 dsh 进程（身份变化）→ 不杀，记 failed。
+                if (!cmd.startsWith('PID '))
+                    report.failed.push(pid);
+                else
+                    report.terminated += 1;
+                gone.push(pid);
+            }
+        }
+        for (const pid of gone) {
+            const idx = stillAlive.indexOf(pid);
+            if (idx >= 0)
+                stillAlive.splice(idx, 1);
+        }
+    }
+    if (stillAlive.length > 0) {
+        runner('kill', ['-KILL', ...stillAlive.map(String)]);
+        // 给 KILL 一点时间回收
+        await new Promise(resolve => setTimeout(resolve, 200));
+        for (const pid of stillAlive) {
+            const cmd = readCommandLine(pid, runner);
+            if (cmd.startsWith('PID ') || !cmd.includes('dsh')) {
+                if (cmd.startsWith('PID '))
+                    report.terminated += 1;
+                else
+                    report.failed.push(pid);
+            }
+            else {
+                report.failed.push(pid);
+            }
+        }
+    }
+    return report;
+}
+/** 供外部判断一个相对路径是否落在 dshHome 内（预留 cwd 证据扩展）。 */
+export function pathInside(path, base) {
+    const rel = relative(base, path);
+    return rel === '' || (!rel.startsWith('..') && !rel.startsWith('/'));
+}
+//# sourceMappingURL=process-guard.js.map

package/lib/process-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-guard.js","sourceRoot":"","sources":["../src/process-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAiCxC,qDAAqD;AACrD,SAAS,aAAa,CAAC,WAAmB;IACxC,OAAO,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;WACjC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;WAC/B,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAA;AACzD,CAAC;AAED,8BAA8B;AAC9B,SAAS,eAAe,CAAC,GAAW,EAAE,MAAqB;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAA;IACjE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,CAAA;AAC5C,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,GAAG,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;QACxE,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,SAAS,CAAA;QACxF,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,QAA2B,EAC3B,SAAwB,aAAa;IAErC,MAAM,SAAS,GAAqB,EAAE,CAAA;IACtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,eAAe,WAAW,CAAC,OAAO,CAAC,EAAE,CAAA;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,aAAa,MAAM,CAAC,MAAM,EAAE,EAAE,CAAA;QACnF,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;gBAAE,SAAQ;YAChD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAChD,IAAI,aAAa,CAAC,WAAW,CAAC;gBAAE,SAAQ;YAExC,MAAM,QAAQ,GAAa,CAAC,OAAO,WAAW,EAAE,CAAC,CAAA;YACjD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAA;YACtC,IAAI,KAA2B,CAAA;YAE/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,6BAA6B;gBAC7B,QAAQ,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC,CAAA;gBACpC,KAAK,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;YACpD,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,2DAA2D;gBAC3D,mCAAmC;gBACnC,MAAM,YAAY,GAAG,kCAAkC,CAAC,IAAI,CAAC,WAAW,CAAC;uBACpE,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;gBACvC,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC3C,IAAI,CAAC,YAAY;oBAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;YACzD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAA;AACtB,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAuB,EACvB,SAAwB,aAAa,EACrC,UAAuD,EAAE;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,GAAG,CAAA;IAC5C,MAAM,MAAM,GAAsB,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAEpC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IACvC,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACxC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO;YACP,MAAM,CAAC,UAAU,IAAI,CAAC,CAAA;YACtB,SAAQ;QACV,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAE1C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAA;QAC7D,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YACxC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,8CAA8C;gBAC9C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;;oBAC/C,MAAM,CAAC,UAAU,IAAI,CAAC,CAAA;gBAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,GAAG,IAAI,CAAC;gBAAE,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACpD,gBAAgB;QAChB,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;QACtD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YACxC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,MAAM,CAAC,UAAU,IAAI,CAAC,CAAA;;oBAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAChC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AACtE,CAAC"}

package/lib/purge.d.ts

@@ -0,0 +1,58 @@
+import { HOME_LOCK_SUFFIX, TRANSACTION_SUFFIX } from './paths.ts';
+import { type CommandRunner } from './run.ts';
+export declare class PurgeError extends Error {
+}
+export interface PurgeOptions {
+    dshHome: string;
+    /** 用户 HOME：LaunchAgent/systemd unit、备份归档的落点基准。 */
+    home: string;
+    platform?: NodeJS.Platform;
+    /** 指定单 profile；省略表示全量清除整个 DSH home。 */
+    profile?: string;
+    backup: boolean;
+    keepKeychain: boolean;
+    removeHost: boolean;
+    dryRun: boolean;
+    /** UTC 时间戳生成器（测试可注入）。 */
+    stamp?: () => string;
+    runner?: CommandRunner;
+    /** --yes：自动终止已证明归属本 DSH home 的残留进程；否则仅报告并要求显式确认。 */
+    assumeYes?: boolean;
+}
+export interface PurgeReport {
+    scope: 'full' | 'profile';
+    profiles: string[];
+    serviceProfiles: string[];
+    backup?: {
+        archivePath: string;
+        bytes: number;
+    };
+    removedPaths: string[];
+    removedCredentials: string[];
+    credentialErrors: string[];
+    skippedServiceFiles: string[];
+    serviceErrors: string[];
+    keptCheckouts: string[];
+    hostRemoved: boolean;
+    hostPrefix?: string;
+    dryRun: boolean;
+    /** 停服后残留进程的处理结果（proven 终止 / foreign 拒绝）。 */
+    terminatedPids: number[];
+    failedPids: number[];
+    foreignProcesses: string[];
+}
+/**
+ * 彻底卸载（purge）编排：
+ *  1. 进程静止检查（活动 host 拒绝执行，不代用户 kill）
+ *  2. 停用并注销受管常驻服务（fail-closed：停服失败则不进入删除阶段）
+ *  3. tar.gz 备份整个 DSH home（默认开启）
+ *  4. 删除 profile/整个 home 及生命周期残留
+ *  5. 清理外部凭据库条目（--keep-keychain 保留）
+ *  6. 可选卸载全局 @deepseek-ai/dsh host（仅全量模式允许）
+ *
+ * local checkout 形态：只随 profile 目录移除其中的符号链接，checkout 源码绝不动。
+ */
+export declare function runPurge(options: PurgeOptions): Promise<PurgeReport>;
+/** 仅用于外部模块需要时引用（保持路径常量单一来源）。 */
+export { HOME_LOCK_SUFFIX, TRANSACTION_SUFFIX };
+//# sourceMappingURL=purge.d.ts.map

package/lib/purge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge.d.ts","sourceRoot":"","sources":["../src/purge.ts"],"names":[],"mappings":"AAGA,OAAO,EAOL,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAsC,KAAK,aAAa,EAAE,MAAM,UAAU,CAAA;AAIjF,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,OAAO,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,aAAa,CAAA;IACtB,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,MAAM,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/C,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,4CAA4C;IAC5C,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAeD;;;;;;;;;;GAUG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA0K1E;AAED,gCAAgC;AAChC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAA"}