@dsh-sup/dsh-core-linux-x64 0.1.6-BETA.13 → 0.1.6-BETA.14

package/core.cjs

@@ -833,7 +833,11 @@ var require_config = __commonJS({
       // 不配置 = LAN 受 RFC1918 白名单约束，FRP 暴露仍强制 remoteToken。
       apiAccessKey: null,
       // 关闭窗口行为（系统级）：'hide' = 隐藏至托盘、服务常驻（默认）；'exit' = 退出管家并停全部服务链。
-      closeAction: "hide"
+      closeAction: "hide",
+      // 外部打开的浏览器偏好（系统级，本机配置）：存环境表单候选清单里的 id，null = 未选。
+      // 与「系统默认浏览器」分两个字段是刻意的：前者是用户在本产品里的选择，后者是操作系统的事实；
+      // 系统说不出默认时按候选次序分发并如实标注，用户可在这里定一次覆盖它（见 platform/os/environment.js）。
+      externalBrowser: null
     };
     function buildDefaults2(ext) {
       const pending = normalizeExtension(ext).defaults.slice();
@@ -947,7 +951,7 @@ var require_version = __commonJS({
     var fs2 = require("node:fs");
     var path2 = require("node:path");
     function guardVersion() {
-      if (true) return String("0.1.6-BETA.13");
+      if (true) return String("0.1.6-BETA.14");
       try {
         return JSON.parse(fs2.readFileSync(path2.join(__dirname, "..", "..", "package.json"), "utf8")).version || "unknown";
       } catch {
@@ -1080,6 +1084,7 @@ var require_fs = __commonJS({
   "src/platform/util/fs.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
+    var os2 = require("node:os");
     var path2 = require("node:path");
     function dirSizeBytes(root) {
       let total = 0;
@@ -1140,7 +1145,26 @@ var require_fs = __commonJS({
         throw e;
       }
     }
-    module2.exports = { dirSizeBytes, writeAtomic };
+    function removeTreeDeferred(dir, ms) {
+      if (!dir) return null;
+      const t = setTimeout(() => {
+        try {
+          fs2.rmSync(dir, { recursive: true, force: true });
+        } catch {
+        }
+      }, ms === void 0 ? 6e4 : ms);
+      if (t.unref) t.unref();
+      return t;
+    }
+    function allocTempDir(prefix) {
+      const dir = fs2.mkdtempSync(path2.join(os2.tmpdir(), prefix || "dsh-"));
+      try {
+        fs2.chmodSync(dir, 448);
+      } catch {
+      }
+      return dir;
+    }
+    module2.exports = { dirSizeBytes, writeAtomic, removeTreeDeferred, allocTempDir };
   }
 });
 
@@ -4831,1218 +4855,1446 @@ var require_capability_profile = __commonJS({
   }
 });
 
-// src/platform/os/process.js
-var require_process = __commonJS({
-  "src/platform/os/process.js"(exports2, module2) {
-    "use strict";
-    var ex2 = require_exec();
-    var isWindows = process.platform === "win32";
-    function signalProcess(pid, sig) {
-      if (!Number.isInteger(pid) || pid <= 0) return;
-      if (isWindows) {
-        try {
-          process.kill(pid, sig);
-        } catch {
-        }
-        return;
-      }
-      try {
-        process.kill(-pid, sig);
-      } catch {
-        try {
-          process.kill(pid, sig);
-        } catch {
-        }
-      }
-    }
-    function killTree(pid, sig, cb, opts) {
-      if (!Number.isInteger(pid) || pid <= 0) {
-        if (cb) cb(new Error("invalid pid"));
-        return;
-      }
-      if (isWindows) {
-        ex2.runAsync("taskkill", ["/PID", String(pid), "/T", "/F"], { timeoutMs: 1e4 }).then((r) => {
-          if (cb) cb(r.ok ? null : new Error(r.error || "taskkill failed"));
-        });
-        return;
-      }
-      if (opts && opts.ownGroup === true) {
-        signalProcess(pid, sig || "SIGTERM");
-      } else {
-        try {
-          process.kill(pid, sig || "SIGTERM");
-        } catch {
-        }
-      }
-      if (cb) process.nextTick(cb, null);
-    }
-    module2.exports = { signalProcess, killTree };
-  }
-});
-
-// src/platform/os/file-protect.js
-var require_file_protect = __commonJS({
-  "src/platform/os/file-protect.js"(exports2, module2) {
+// src/platform/os/browser-inventory.js
+var require_browser_inventory = __commonJS({
+  "src/platform/os/browser-inventory.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
-    var os2 = require("node:os");
     var path2 = require("node:path");
-    var ex2 = require_exec();
-    var IS_WINDOWS2 = process.platform === "win32";
-    var _icacls = null;
-    function hasIcacls(platform) {
-      if ((platform || process.platform) !== "win32") return false;
-      if (_icacls !== null) return _icacls;
-      _icacls = ex2.runOut("icacls", ["/?"], { timeoutMs: 3e3 }) !== null;
-      return _icacls;
+    var os2 = require("node:os");
+    var exec = require_exec();
+    var { isExecutableFile } = require_exec_path();
+    var PROBE_TIMEOUT_MS = 1500;
+    function engineOf(bin) {
+      const base = String(bin || "").toLowerCase().split(/[\\/]/).pop();
+      if (/(chrome|chromium|msedge|edge|brave|vivaldi|opera|thorium)/.test(base)) return "chromium";
+      if (/(firefox|librewolf|waterfox)/.test(base)) return "firefox";
+      return "other";
     }
-    function currentUser() {
-      return process.env.USERNAME || process.env.USER || (() => {
-        try {
-          return os2.userInfo().username;
-        } catch {
-          return null;
+    function tokenizeExec(line) {
+      const toks = [];
+      let cur = "";
+      let q = null;
+      let esc = false;
+      let has = false;
+      for (const ch of String(line)) {
+        if (esc) {
+          cur += ch;
+          esc = false;
+          continue;
         }
-      })();
-    }
-    function protectFile(file) {
-      if (!IS_WINDOWS2) {
-        try {
-          fs2.chmodSync(file, 384);
-          return { ok: true, mode: "posix-0600" };
-        } catch (e) {
-          return { ok: false, mode: "posix-0600", reason: e.message };
+        if (ch === "\\") {
+          esc = true;
+          has = true;
+          continue;
         }
-      }
-      if (!hasIcacls()) return { ok: false, mode: "none", reason: "icacls \u4E0D\u53EF\u7528" };
-      const user = currentUser();
-      if (!user) return { ok: false, mode: "icacls", reason: "\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u7528\u6237" };
-      const r = ex2.runDetail("icacls", [file, "/inheritance:r", "/grant:r", user + ":F"], { stdio: "ignore", timeoutMs: 5e3 });
-      return r.ok ? { ok: true, mode: "icacls-file" } : { ok: false, mode: "icacls-file", reason: r.error || "\u9000\u51FA\u7801 " + r.code };
-    }
-    function protectDir(dir) {
-      if (!IS_WINDOWS2) {
-        try {
-          fs2.chmodSync(dir, 448);
-          return { ok: true, mode: "posix-0700" };
-        } catch (e) {
-          return { ok: false, mode: "posix-0700", reason: e.message };
+        if (q) {
+          if (ch === q) q = null;
+          else cur += ch;
+          continue;
         }
-      }
-      if (!hasIcacls()) return { ok: false, mode: "none", reason: "icacls \u4E0D\u53EF\u7528" };
-      const user = currentUser();
-      if (!user) return { ok: false, mode: "icacls", reason: "\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u7528\u6237" };
-      const r = ex2.runDetail("icacls", [dir, "/inheritance:r", "/grant:r", user + ":(OI)(CI)F"], { stdio: "ignore", timeoutMs: 1e4 });
-      return r.ok ? { ok: true, mode: "icacls-dir" } : { ok: false, mode: "icacls-dir", reason: r.error || "\u9000\u51FA\u7801 " + r.code };
-    }
-    function ensurePrivateDir(dir) {
-      try {
-        fs2.mkdirSync(dir, { recursive: true });
-      } catch (e) {
-        return { ok: false, mode: "mkdir", reason: e.message };
-      }
-      return protectDir(dir);
-    }
-    function writePrivate(file, data) {
-      try {
-        const dir = path2.dirname(file);
-        try {
-          fs2.mkdirSync(dir, { recursive: true });
-        } catch {
+        if (ch === "'" || ch === '"') {
+          q = ch;
+          has = true;
+          continue;
         }
-        const tmp = file + ".tmp" + process.pid;
-        fs2.writeFileSync(tmp, data, { mode: 384 });
-        const p1 = protectFile(tmp);
-        if (p1 && p1.ok === false) {
-          try {
-            fs2.rmSync(tmp, { force: true });
-          } catch {
+        if (/\s/.test(ch)) {
+          if (has) {
+            toks.push(cur);
+            cur = "";
+            has = false;
           }
-          return { ok: false, reason: "protect(tmp): " + (p1.reason || p1.mode), mode: p1.mode };
+          continue;
         }
-        fs2.renameSync(tmp, file);
-        const p2 = protectFile(file);
-        if (p2 && p2.ok === false) return { ok: false, reason: "protect(file): " + (p2.reason || p2.mode), mode: p2.mode };
-        return { ok: true };
-      } catch (e) {
-        return { ok: false, reason: e.message };
+        cur += ch;
+        has = true;
       }
+      if (has) toks.push(cur);
+      return toks;
     }
-    module2.exports = { protectFile, protectDir, ensurePrivateDir, writePrivate, hasIcacls, currentUser, IS_WINDOWS: IS_WINDOWS2 };
-  }
-});
-
-// src/platform/util/input.js
-var require_input = __commonJS({
-  "src/platform/util/input.js"(exports2, module2) {
-    "use strict";
-    var PKG_NAME_RE = /^(@[a-zA-Z0-9._-]+\/)?[a-zA-Z0-9._-]+$/;
-    var ARGV_UNSAFE_RE = /[\s;|&<>`'"$(){}\\*?~#]/;
-    var WIN_ABS_PATH_RE = /^[A-Za-z]:\\[^;|&<>`'"$*?~#\s]*$/;
-    var UNIT_NAME_RE = /^[A-Za-z0-9:@._-]{1,128}$/;
-    var UNSAFE_LEDGER_KEYS = ["__proto__", "prototype", "constructor"];
-    var LEDGER_UNSAFE_RE = /[\s\u0000-\u001f\u007f]/;
-    function argvViolation(arg) {
-      const s = String(arg == null ? "" : arg);
-      if (!s) return "\u7A7A\u7684 argv \u9879";
-      if (ARGV_UNSAFE_RE.test(s) && !WIN_ABS_PATH_RE.test(s)) return "argv \u9879\u542B\u7981\u7528\u5B57\u7B26\uFF08\u7A7A\u767D/shell \u5143\u5B57\u7B26\uFF09: " + s.slice(0, 80);
-      return null;
-    }
-    var CONTROL_RE = /[\u0000-\u001f\u007f]/;
-    function isAbsoluteForm(p) {
-      const s = String(p == null ? "" : p);
-      return s.charCodeAt(0) === 47 || /^[A-Za-z]:[\\/]/.test(s) || s.charCodeAt(0) === 92 && s.charCodeAt(1) === 92;
+    function parseExecLine(line) {
+      let toks = tokenizeExec(line).filter((t) => t !== "%%" && !/^%[a-zA-Z]$/.test(t));
+      if (toks[0] === "env") {
+        let i = 1;
+        while (i < toks.length && /=/.test(toks[i])) i++;
+        toks = toks.slice(i);
+      }
+      if (!toks.length) return null;
+      return { bin: toks[0], baseArgs: toks.slice(1) };
     }
-    function prefixViolation(prefix) {
-      const s = String(prefix == null ? "" : prefix);
-      if (!s.trim()) return "\u7A7A\u7684\u5B89\u88C5\u524D\u7F00";
-      if (CONTROL_RE.test(s)) return "\u5B89\u88C5\u524D\u7F00\u542B\u63A7\u5236\u7B26: " + s.slice(0, 80);
-      if (s.length > 4096) return "\u5B89\u88C5\u524D\u7F00\u8D85\u957F: " + s.slice(0, 60) + "...";
-      if (s[0] === "-") return "\u5B89\u88C5\u524D\u7F00\u4EE5 - \u5F00\u5934\uFF08\u4F1A\u88AB\u5F53\u4F5C npm \u9009\u9879\uFF09: " + s.slice(0, 80);
-      if (!isAbsoluteForm(s)) return "\u5B89\u88C5\u524D\u7F00\u987B\u4E3A\u7EDD\u5BF9\u8DEF\u5F84\uFF08/ \u5F00\u5934\u3001win \u76D8\u7B26\u6216 UNC\uFF09: " + s.slice(0, 80);
-      return null;
+    function regValueOf(out) {
+      const m = String(out || "").match(/REG_(?:EXPAND_SZ|SZ)\s+(.*)/);
+      if (!m) return null;
+      return m[1].trim() || null;
     }
-    function pkgNameViolation(pkg) {
-      const s = String(pkg == null ? "" : pkg);
-      return PKG_NAME_RE.test(s) ? null : "\u975E\u6CD5\u5305\u540D\uFF08\u5B57\u7B26\u96C6\u767D\u540D\u5355\u4E0D\u901A\u8FC7\uFF09: " + s.slice(0, 80);
+    function expandEnvVars(value, env) {
+      const e = env || process.env;
+      return String(value).replace(/%([^%]+)%/g, (all, name) => e[name] === void 0 ? all : e[name]);
     }
-    function unitNameViolation(unit) {
-      const s = String(unit == null ? "" : unit);
-      if (!UNIT_NAME_RE.test(s)) return "\u975E\u6CD5\u5355\u5143\u540D\uFF08\u5B57\u7B26\u96C6/\u957F\u5EA6\u767D\u540D\u5355\u4E0D\u901A\u8FC7\uFF09: " + s.slice(0, 80);
-      const dot = s.indexOf(".");
-      if (dot >= 0 && !/\.service$/.test(s)) return "\u5355\u5143\u540D\u540E\u7F00\u4E0D\u53D7\u652F\u6301\uFF08\u4EC5\u5141\u8BB8 .service \u6216\u65E0\u540E\u7F00\uFF09: " + s.slice(0, 80);
-      return null;
+    function exeFromCmdLine(cmdLine) {
+      const s = String(cmdLine || "");
+      let m = s.match(/^\s*"([^"]+\.exe)"/i);
+      if (m) return m[1];
+      m = s.match(/^\s*(.*?\.exe)/i);
+      return m ? m[1] : null;
     }
-    function ledgerKey(raw, opts) {
-      const o = opts || {};
-      const max = typeof o.max === "number" ? o.max : 128;
-      const empty = o.empty == null ? "unknown" : o.empty;
-      const unsafe = o.unsafe == null ? "(other)" : o.unsafe;
-      if (typeof raw !== "string" || !raw) return empty;
-      const s = raw.length > max ? raw.slice(0, max) : raw;
-      if (UNSAFE_LEDGER_KEYS.indexOf(s) >= 0 || LEDGER_UNSAFE_RE.test(s)) return unsafe;
-      return s;
+    function safeRegKeyPart(s) {
+      return typeof s === "string" && s.length > 0 && s.length <= 200 && /^[\x20-\x7e]+$/.test(s) && !/[;|&`$()<>^"'\r\n]/.test(s);
     }
-    module2.exports = {
-      PKG_NAME_RE,
-      ARGV_UNSAFE_RE,
-      WIN_ABS_PATH_RE,
-      UNIT_NAME_RE,
-      UNSAFE_LEDGER_KEYS,
-      LEDGER_UNSAFE_KEYS_RE: LEDGER_UNSAFE_RE,
-      argvViolation,
-      pkgNameViolation,
-      unitNameViolation,
-      ledgerKey,
-      CONTROL_RE,
-      isAbsoluteForm,
-      prefixViolation
-    };
-  }
-});
-
-// src/platform/os/spawn.js
-var require_spawn = __commonJS({
-  "src/platform/os/spawn.js"(exports2, module2) {
-    "use strict";
-    var { spawn } = require("node:child_process");
-    function detached(cmd2, args, opts) {
-      const o = opts || {};
-      return spawn(cmd2, args, Object.assign({}, o, {
-        detached: true,
-        windowsHide: true,
-        // 默认 ignore；显式 undefined 也回落 ignore，避免 stdio:undefined 的歧义。
-        stdio: o.stdio === void 0 ? "ignore" : o.stdio
-      }));
-    }
-    function piped(cmd2, args, opts) {
-      const o = opts || {};
-      return spawn(cmd2, args, Object.assign({}, o, {
-        stdio: ["ignore", "pipe", "pipe"],
-        windowsHide: true,
-        detached: o.detached === true
-      }));
+    function regValue(runner, note, key, name) {
+      const args = name ? ["query", key, "/v", name] : ["query", key, "/ve"];
+      const out = runner("reg.exe", args);
+      const v = regValueOf(out);
+      note(name ? key + " /v " + name : key, v ? "ok" : "empty");
+      return v;
     }
-    function detachedIgnored(cmd2, args, opts) {
-      const o = opts || {};
-      return spawn(cmd2, args, Object.assign({}, o, {
-        detached: true,
-        windowsHide: true,
-        stdio: "ignore"
-      }));
+    var REG_HIVE_ALIAS = { HKLM: "HKEY_LOCAL_MACHINE", HKCU: "HKEY_CURRENT_USER", HKCR: "HKEY_CLASSES_ROOT", HKU: "HKEY_USERS", HKCC: "HKEY_CURRENT_CONFIG" };
+    function regKeyFull(key) {
+      const s = String(key || "");
+      const i = s.indexOf("\\");
+      const root = i < 0 ? s : s.slice(0, i);
+      return (REG_HIVE_ALIAS[root.toUpperCase()] || root) + (i < 0 ? "" : s.slice(i));
     }
-    module2.exports = { detached, piped, detachedIgnored };
-  }
-});
-
-// src/platform/os/portable.js
-var require_portable = __commonJS({
-  "src/platform/os/portable.js"(exports2, module2) {
-    "use strict";
-    var fs2 = require("node:fs");
-    var pidlookup = require_pidlookup();
-    var spawner = require_spawn();
-    var procOS = require_process();
-    var STOP_WAIT_CAP_MS = 3e3;
-    var NAP_MS = 150;
-    function nap(ms) {
-      try {
-        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
-      } catch {
+    function regSubkeys(runner, note, key) {
+      const out = runner("reg.exe", ["query", key]);
+      if (!out) {
+        note(key, "unreadable");
+        return [];
       }
-    }
-    function readPidFile(pidFile) {
-      if (!pidFile) return null;
-      try {
-        const n = parseInt(String(fs2.readFileSync(pidFile, "utf8")).trim(), 10);
-        return Number.isInteger(n) && n > 0 ? n : null;
-      } catch {
-        return null;
+      const prefix = regKeyFull(key) + "\\";
+      const names = [];
+      for (const line of String(out).split(/\r?\n/)) {
+        const l = line.trim();
+        if (!/^HKEY_/i.test(l) || l.length <= prefix.length) continue;
+        if (l.slice(0, prefix.length).toUpperCase() !== prefix.toUpperCase()) continue;
+        const rest = l.slice(prefix.length);
+        if (rest && !rest.includes("\\") && safeRegKeyPart(rest)) names.push(rest);
       }
+      note(key, names.length ? names.length + " \u9879" : "\u65E0\u5B50\u952E");
+      return names;
     }
-    function matchesAnchors(pid, anchors) {
-      if (!pid || !Array.isArray(anchors) || !anchors.length) return false;
-      const cmd2 = pidlookup.readCmdline(pid);
-      if (!cmd2) return false;
-      return anchors.some((a) => a && cmd2.indexOf(String(a)) !== -1);
-    }
-    var portOf = (o) => {
-      const p = Number(o && o.port);
-      return Number.isInteger(p) && p > 0 ? p : 0;
-    };
-    var pidFileOf = (o) => o && o.pidFile || null;
-    var anchorsOf = (o) => Array.isArray(o && o.anchors) ? o.anchors : [];
-    function findOurs(o) {
-      const anchors = anchorsOf(o);
-      const fp = readPidFile(pidFileOf(o));
-      if (fp !== null && pidlookup.isAlive(fp) && matchesAnchors(fp, anchors)) return { pid: fp, ownGroup: true };
-      const port = portOf(o);
-      if (port) {
-        const q = pidlookup.findListeningPid(port);
-        if (q !== null && q !== fp && matchesAnchors(q, anchors)) return { pid: q, ownGroup: false };
+    var WIN_APP_PATHS = ["msedge.exe", "chrome.exe", "firefox.exe", "brave.exe", "opera.exe", "vivaldi.exe", "chromium.exe", "thorium.exe", "librewolf.exe"];
+    function winExeOfProgId(runner, note, progId, env) {
+      if (!safeRegKeyPart(progId)) return null;
+      for (const root of ["HKCU\\Software\\Classes", "HKLM\\Software\\Classes"]) {
+        const cmd2 = regValue(runner, note, root + "\\" + progId + "\\shell\\open\\command");
+        const exe = cmd2 ? exeFromCmdLine(expandEnvVars(cmd2, env)) : null;
+        if (exe) return exe;
       }
       return null;
     }
-    function removePidFile(o) {
-      const f = pidFileOf(o);
-      if (f) {
-        try {
-          fs2.unlinkSync(f);
-        } catch {
+    function probeWin(d) {
+      const { runOut, env, canExec } = d;
+      const notes = [];
+      const note = (source, detail) => {
+        notes.push({ source, detail });
+      };
+      const found = /* @__PURE__ */ new Map();
+      const keyOf = (exe) => String(exe || "").toLowerCase().replace(/[\\/]/g, "\\");
+      const push = (exe, how) => {
+        const full = expandEnvVars(exe, env).trim();
+        if (!/\.exe$/i.test(full)) {
+          note(how, "\u6765\u6E90\u7ED9\u51FA\u7684\u4E0D\u662F exe \u8DEF\u5F84: " + full);
+          return null;
         }
-      }
-    }
-    var portable = {
-      kind: "portable",
-      supportsUnits: false,
-      supportsTransient: true,
-      // 无操作 = 成功（与 systemd 的动词返回形态一致，调用方无需按 provider 分支）。
-      daemonReload() {
-        return true;
-      },
-      resetFailed() {
-        return true;
-      },
-      /** 拉起：spawn(detached)——POSIX 自成进程组（kill(-pid) 语义的前提）、win32 windowsHide +
-       *  CREATE_NEW_PROCESS_GROUP（NO-CONSOLE-WINDOW 纪律收口在 platform/os/spawn.js）。
-       *  调用方传来的 props（cgroup 语义）在此如实忽略：本档无内核强制可施加。
-       *  @param {{cmd:string[], env?:object, workingDir?:string, pidFile?:string, port?:number, anchors?:string[]}} o */
-      startTransient(o) {
-        const opts = o || {};
-        const cmd2 = opts.cmd || [];
-        if (!cmd2.length) throw new Error("portable \u62C9\u8D77\u62D2\u7EDD\uFF1A\u7A7A\u547D\u4EE4");
-        const child = spawner.detached(cmd2[0], cmd2.slice(1), {
-          cwd: opts.workingDir || void 0,
-          env: Object.assign({}, process.env, opts.env || {})
-        });
-        child.on("error", () => {
-        });
-        if (!child.pid) {
-          try {
-            child.kill();
-          } catch {
-          }
-          throw new Error("portable \u62C9\u8D77\u5931\u8D25\uFF1Aspawn \u672A\u4EA7\u751F\u8FDB\u7A0B");
+        const k = keyOf(full);
+        const hit = found.get(k);
+        if (hit) {
+          if (!hit.sources.includes(how)) hit.sources.push(how);
+          return hit;
         }
-        try {
-          child.unref();
-        } catch {
+        if (!canExec(full)) {
+          note(how, "\u6307\u5411\u7684\u6587\u4EF6\u4E0D\u53EF\u6267\u884C: " + full);
+          return null;
         }
-        if (opts.pidFile) {
-          try {
-            fs2.writeFileSync(opts.pidFile, String(child.pid));
-          } catch {
-          }
+        const item = { id: k, name: path2.basename(full).replace(/\.exe$/i, ""), engine: engineOf(full), bin: full, source: how, sources: [how] };
+        found.set(k, item);
+        note(how, item.name);
+        return item;
+      };
+      const progIds = /* @__PURE__ */ new Map();
+      const addProgId = (pid, how) => {
+        const s = String(pid || "").trim();
+        if (!safeRegKeyPart(s)) return;
+        if (progIds.get(s) === "userchoice") return;
+        progIds.set(s, how);
+      };
+      let defaultId = null;
+      let defaultSource = null;
+      const DEF_RANK = { userchoice: 1, "scheme-association": 2, "only-installed": 9 };
+      let defRank = 99;
+      const setDefault = (item, how) => {
+        const r = DEF_RANK[how] === void 0 ? 99 : DEF_RANK[how];
+        if (item && r < defRank) {
+          defRank = r;
+          defaultId = item.id;
+          defaultSource = how;
         }
-        return true;
-      },
-      /** 停止（有界同步复核）：终止我们的进程树，确认「端口锚点与 run.pid 锚点双双消失」才 true。
-       *  无可杀对象（含 run.pid 为陈旧/被 PID 复用）-> 清文件后如实 true（幂等）。 */
-      stopUnit(unit, o) {
-        const opts = o || {};
-        const ours = findOurs(opts);
-        if (!ours) {
-          removePidFile(opts);
-          return true;
+      };
+      const cmdToExe = (raw) => raw ? exeFromCmdLine(expandEnvVars(raw, env)) : null;
+      const uc = regValue(runOut, note, "HKCU\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice", "ProgId");
+      if (uc) addProgId(uc, "userchoice");
+      for (const root of ["HKCU\\Software\\Classes", "HKLM\\Software\\Classes"]) {
+        const pid = regValue(runOut, note, root + "\\https");
+        if (pid) addProgId(pid, "scheme-association");
+        const exe = cmdToExe(regValue(runOut, note, root + "\\https\\shell\\open\\command"));
+        if (exe) setDefault(push(exe, "scheme-association"), "scheme-association");
+      }
+      for (const name of regSubkeys(runOut, note, "HKLM\\SOFTWARE\\Clients\\StartMenuInternet")) {
+        addProgId(name, "startmenu-catalog");
+        const exe = cmdToExe(regValue(runOut, note, "HKLM\\SOFTWARE\\Clients\\StartMenuInternet\\" + name + "\\shell\\open\\command")) || winExeOfProgId(runOut, note, name, env);
+        if (exe) push(exe, "startmenu-catalog");
+      }
+      for (const root of ["HKLM\\SOFTWARE", "HKCU\\SOFTWARE"]) {
+        for (const capPath of regValueTargets(runOut, note, root + "\\RegisteredApplications")) {
+          const https = regValue(runOut, note, capPath + "\\UrlAssociations\\https");
+          const sid = regValue(runOut, note, capPath, "StartMenuInternet");
+          const pid = https || sid;
+          if (pid) addProgId(pid, "registered-apps");
         }
-        try {
-          procOS.killTree(ours.pid, "SIGTERM", void 0, { ownGroup: ours.ownGroup });
-        } catch {
+      }
+      for (const exe of WIN_APP_PATHS) {
+        for (const root of ["HKCU", "HKLM"]) {
+          const v = regValue(runOut, note, root + "\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\" + exe);
+          if (v && push(v, "app-paths")) break;
         }
-        const budget = Math.max(0, Math.min(typeof opts.timeoutMs === "number" ? opts.timeoutMs : STOP_WAIT_CAP_MS, STOP_WAIT_CAP_MS));
-        const t0 = Date.now();
-        for (; ; ) {
-          if (!findOurs(opts)) {
-            removePidFile(opts);
-            return true;
-          }
-          if (Date.now() - t0 >= budget) break;
-          nap(NAP_MS);
-        }
-        try {
-          procOS.killTree(ours.pid, "SIGKILL", void 0, { ownGroup: ours.ownGroup });
-        } catch {
-        }
-        nap(NAP_MS);
-        if (!findOurs(opts)) {
-          removePidFile(opts);
-          return true;
+      }
+      for (const [pid, how] of progIds) {
+        const exe = winExeOfProgId(runOut, note, pid, env);
+        if (!exe) continue;
+        const item = push(exe, how);
+        if (how === "userchoice") setDefault(item, "userchoice");
+      }
+      if (found.size === 1) setDefault([...found.values()][0], "only-installed");
+      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
+    }
+    function regValueTargets(runOut, note, key) {
+      const out = runOut("reg.exe", ["query", key]);
+      if (!out) {
+        note(key, "unreadable");
+        return [];
+      }
+      const paths = [];
+      for (const line of String(out).split(/\r?\n/)) {
+        const m = line.trim().match(/REG_SZ\s+(.*)/);
+        if (!m) continue;
+        const rel = m[1].trim();
+        if (!safeRegKeyPart(rel)) continue;
+        const root = key.slice(0, key.indexOf("\\"));
+        paths.push(root + "\\" + rel);
+      }
+      note(key, paths.length ? paths.length + " \u4E2A\u80FD\u529B\u8DEF\u5F84" : "\u65E0\u503C");
+      return paths;
+    }
+    var MAC_JXA_LIST = [
+      "ObjC.import('Foundation');",
+      "var ws=$.NSWorkspace.sharedWorkspace;",
+      "var u=$.NSURL.URLWithString('https://dsh.local/probe');",
+      "var out=[];var def='';",
+      "try{var d=ws.URLForApplicationToOpenURL(u); if(!d.isNil()) def=ObjC.unwrap(d.path)||'';}catch(e){}",
+      "var list=null;",
+      "try{list=ws.urlsForApplicationsToOpenURL(u);}catch(e){}",
+      "if(list===null||typeof list.count!=='number'){if(def){out.push(def+'\\t\\t1');}}else{",
+      "var n=Number(list.count);",
+      "for(var i=0;i<n;i++){",
+      "var p=ObjC.unwrap(list.objectAtIndex(i).path)||''; if(!p) continue;",
+      "var exe='';var bid='';",
+      "var b=$.NSBundle.bundleWithPath(p);",
+      "if(!b.isNil()){exe=ObjC.unwrap(b.executablePath)||'';bid=ObjC.unwrap(b.bundleIdentifier)||'';}",
+      "out.push((exe||p)+'\\t'+bid+'\\t'+(p&&def&&p===def?1:0));}",
+      "}",
+      // 末句必须是裸表达式：osascript 取的是最后一条**语句**的值，if/else 语句不产结果，
+      //   写在分支里会让整段查询输出空字符串（表现为「系统未报任何可用应用」）。
+      "out.join('\\n');"
+    ].join("");
+    function probeMac(d) {
+      const { runOut, canExec } = d;
+      const notes = [];
+      const note = (source, detail) => {
+        notes.push({ source, detail });
+      };
+      const out = runOut("osascript", ["-l", "JavaScript", "-e", MAC_JXA_LIST]);
+      if (!out || !out.trim()) {
+        note("launchservices", "\u67E5\u8BE2\u65E0\u8F93\u51FA\uFF08\u65E7\u7CFB\u7EDF\u6216\u88AB\u6743\u9650\u62E6\u622A\uFF09");
+        return { browsers: [], defaultId: null, defaultSource: null, probed: notes };
+      }
+      const keyOf = (exe) => String(exe || "").toLowerCase();
+      const found = /* @__PURE__ */ new Map();
+      let defaultId = null;
+      let defaultSource = null;
+      for (const line of out.trim().split("\n")) {
+        const parts = line.split("	");
+        const bin = (parts[0] || "").trim();
+        if (!bin) continue;
+        if (!canExec(bin)) {
+          note("launchservices", "\u4E0D\u53EF\u6267\u884C: " + bin);
+          continue;
         }
-        return false;
-      },
-      /** 活跃判定（三态）：port 与 pidFile 都缺 = 无从查询 -> null，删除保护路径不得把它当「已停止」。
-       *  anchors 为空时降级为「端口有监听即活跃」（monitor.probeInstance 同口径，该调用方本就以此判在线）；
-       *  杀进程（stopUnit）仍要求锚点命中 —— 判定可宽，动手必严。
-       *  存活 pid 的 cmdline 读不到 = 分不清「他人复用」与「查询失败」-> null。 */
-      isUnitActive(unit, o) {
-        const opts = o || {};
-        if (findOurs(opts)) return true;
-        const port = portOf(opts);
-        const pidFile = pidFileOf(opts);
-        const anchors = anchorsOf(opts);
-        if (!port && !pidFile) return null;
-        if (!anchors.length) {
-          const fp2 = readPidFile(pidFile);
-          if (fp2 !== null && pidlookup.isAlive(fp2)) return true;
-          if (port) {
-            const q = pidlookup.findListeningPid(port);
-            if (q !== null) return true;
-            if (fp2 !== null) return false;
-            return null;
+        const k = keyOf(bin);
+        if (!found.has(k)) found.set(k, { id: k, name: path2.basename(bin), engine: engineOf(bin), bin, source: "launchservices", sources: ["launchservices"], isDefault: false });
+        if (parts[2] === "1") {
+          found.get(k).isDefault = true;
+          if (!defaultId) {
+            defaultId = k;
+            defaultSource = "launchservices";
           }
-          return fp2 !== null ? false : null;
         }
-        const fp = readPidFile(pidFile);
-        if (fp !== null && pidlookup.isAlive(fp) && !pidlookup.readCmdline(fp)) return null;
-        return false;
-      },
-      // portable 无 systemd transient 单元文件；run.pid 的清理归 cleanTransient。
-      transientUnitFile() {
-        return null;
-      },
-      /** 清理同名残留：先停掉仍活着的旧进程（重启自愈路径：旧进程未监听端口时端口探测拦不住），再清 run.pid。 */
-      cleanTransient(unit, o) {
-        const opts = o || {};
-        const errors = [];
-        if (this.stopUnit(unit, Object.assign({}, opts, { timeoutMs: 1500 })) === false) errors.push("stop-unconfirmed");
-        removePidFile(opts);
-        return { ok: errors.length === 0, errors };
-      },
-      /** 返回值只表示「是否改动了内核强制」；governor 不因 false 走降级分支 —— 违规处置链本就平台无关。 */
-      setLimits() {
-        return false;
       }
-    };
-    module2.exports = { portable, findOurs, matchesAnchors, _test: { readPidFile, matchesAnchors, findOurs } };
-  }
-});
-
-// src/platform/os/service.js
-var require_service = __commonJS({
-  "src/platform/os/service.js"(exports2, module2) {
-    "use strict";
-    var fs2 = require("node:fs");
-    var os2 = require("node:os");
-    var path2 = require("node:path");
-    var exec = require_exec();
-    var input = require_input();
-    var execPath = require_exec_path();
-    var { portable } = require_portable();
-    var CapabilityError = class extends Error {
-      constructor(msg) {
-        super(msg);
-        this.name = "CapabilityError";
-        this.code = "CAPABILITY_UNSUPPORTED";
+      note("launchservices", found.size ? found.size + " \u4E2A\u53EF\u6253\u5F00 https \u7684\u5E94\u7528" : "\u7CFB\u7EDF\u672A\u62A5\u4EFB\u4F55\u53EF\u7528\u5E94\u7528");
+      if (!defaultId && found.size === 1) {
+        defaultId = [...found.keys()][0];
+        defaultSource = "only-installed";
       }
-    };
-    var PLATFORM = process.platform;
-    function run(cmd2, args, opts) {
-      return exec.run(cmd2, args, opts || {});
+      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
     }
-    var UNIT_NAME_RE = input.UNIT_NAME_RE;
-    function unitNameViolation(unit) {
-      return input.unitNameViolation(unit);
+    var PJ = path2.posix.join;
+    function desktopDirs(env, home) {
+      const dataHome = env.XDG_DATA_HOME || PJ(home, ".local", "share");
+      const dataDirs = String(env.XDG_DATA_DIRS || "/usr/local/share:/usr/share").split(":").filter(Boolean);
+      const dirs = [[dataHome, "xdg"], ...dataDirs.map((p) => [p, "xdg"])];
+      dirs.push([PJ(home, ".local", "share"), "xdg"]);
+      dirs.push(["/var/lib/flatpak/exports/share", "flatpak"]);
+      dirs.push([PJ(home, ".local", "share", "flatpak", "exports", "share"), "flatpak"]);
+      dirs.push(["/var/lib/snapd/desktop", "snap"]);
+      const seen = [];
+      return dirs.map(([root, kind]) => ({ dir: PJ(root, "applications"), kind })).filter((x) => {
+        if (seen.includes(x.dir)) return false;
+        seen.push(x.dir);
+        return true;
+      });
     }
-    var systemd = {
-      kind: "systemd",
-      supportsUnits: true,
-      supportsTransient: true,
-      daemonReload() {
-        try {
-          return run("systemctl", ["--user", "daemon-reload"], { timeoutMs: 15e3 }) !== null;
-        } catch {
-          return false;
-        }
-      },
-      stopUnit(unit, opts) {
-        if (unitNameViolation(unit)) return false;
-        const o = opts || {};
-        try {
-          return run("systemctl", ["--user", "stop", unit], { timeoutMs: o.timeoutMs || 15e3 }) !== null;
-        } catch {
-          return false;
+    function browserFromDesktop(text, kind, file) {
+      let inMain = false;
+      const got = {};
+      for (const line of String(text).split(/\r?\n/)) {
+        if (/^\[Desktop Entry\]\s*$/.test(line)) {
+          inMain = true;
+          continue;
         }
-      },
-      // run() 失败返回 null 而不抛，try/catch 包裹会恒返回 true；如实回传成败。
-      resetFailed(unit) {
-        if (unitNameViolation(unit)) return false;
-        return run("systemctl", ["--user", "reset-failed", unit], { timeoutMs: 1e4 }) !== null;
-      },
-      /** 单元活跃判定（三态）：确认 active -> true；确认不活跃 -> false；查询未完成 -> null（未知）。
-       *  run() 失败只返回 null，「查询未完成」不可折成 false：instance/ops.js 删除数据目录前
-       *  按「!== false 才放行删除」消费本函数，折假即超时窗口内误删沙箱数据。 */
-      isUnitActive(unit) {
-        if (!unit) return true;
-        if (unitNameViolation(unit)) return false;
-        try {
-          const r = exec.runDetail("systemctl", ["--user", "is-active", unit], { timeoutMs: 8e3 });
-          if (r.timedOut) return null;
-          const state = String(r.stdout || "").trim();
-          if (state === "active") return true;
-          if (state || r.code !== null) return false;
-          return null;
-        } catch {
+        if (/^\[/.test(line)) break;
+        if (!inMain) continue;
+        const m = line.match(/^(Exec|Name|TryExec|Categories)=(.*)$/);
+        if (!m) continue;
+        if (m[1] === "Name" && got.Name) continue;
+        got[m[1]] = m[2].trim();
+      }
+      if (!got.Exec) return null;
+      const categories = String(got.Categories || "");
+      const parsed = parseExecLine(got.Exec);
+      if (!parsed) return null;
+      const engine = engineOf(parsed.bin);
+      const claimsBrowser = /(^|;)WebBrowser(;|$)/.test(categories);
+      if (!claimsBrowser && engine === "other") return null;
+      if (engine === "other") return null;
+      return {
+        // id 恒为归一后的可执行文件路径：defaultId 靠它在清单里定位条目，三平台同一契约
+        id: parsed.bin.toLowerCase(),
+        name: got.Name || path2.basename(file, ".desktop"),
+        engine,
+        bin: parsed.bin,
+        baseArgs: parsed.baseArgs,
+        source: kind,
+        desktopFile: file
+      };
+    }
+    function resolveLinuxBin(bin, canExec, env) {
+      const b = String(bin || "").trim();
+      if (!b) return null;
+      if (b.startsWith("/")) return canExec(b) ? b : null;
+      if (b.includes("/")) return null;
+      for (const dir of String(env.PATH || "").split(":")) {
+        if (!dir) continue;
+        const p = PJ(dir.replace(/\/+$/, ""), b);
+        if (canExec(p)) return p;
+      }
+      return null;
+    }
+    function probeLinux(d) {
+      const { runOut, readFile, exists, listDir, canExec, env, home } = d;
+      const notes = [];
+      const note = (source, detail) => {
+        notes.push({ source, detail });
+      };
+      const found = /* @__PURE__ */ new Map();
+      const usable = (item) => {
+        const resolved = resolveLinuxBin(item.bin, canExec, env);
+        if (!resolved) {
+          note(item.source, "\u4E0D\u53EF\u6267\u884C: " + item.bin);
           return null;
         }
-      },
-      transientUnitFile(unit) {
-        if (unitNameViolation(unit)) return null;
-        let uid = 0;
-        try {
-          uid = os2.userInfo().uid;
-        } catch {
+        const k = resolved.toLowerCase();
+        const hit = found.get(k);
+        if (hit) {
+          if (!hit.sources.includes(item.source)) hit.sources.push(item.source);
+          return hit;
         }
-        const rt = process.env.XDG_RUNTIME_DIR || "/run/user/" + uid;
-        return path2.join(rt, "systemd", "transient", unit + ".service");
-      },
-      /** 清理 stale transient 单元：stop/reset-failed/删单元文件/daemon-reload。
-       *  必须 reload：删除文件后 systemd 仍缓存该单元为 loaded，否则 systemd-run 拒绝重建同名单元。
-       *  返回 {ok, errors}：stop/reset-failed 对「从未加载的单元」非零退出属正常，不计入 ok；
-       *  硬失败只有删单元文件与 daemon-reload（run() 失败返回 null 不抛，成败须如实回传）。 */
-      cleanTransient(unit) {
-        const errors = [];
-        const bad = unitNameViolation(unit);
-        if (bad) return { ok: false, errors: [bad] };
-        exec.runDetail("systemctl", ["--user", "stop", unit + ".service"], { timeoutMs: 1e4 });
-        exec.runDetail("systemctl", ["--user", "reset-failed", unit + ".service"], { timeoutMs: 1e4 });
-        let unlinkOk = true;
+        const v = Object.assign({}, item, { id: k, bin: resolved, sources: [item.source] });
+        found.set(k, v);
+        return v;
+      };
+      for (const { dir, kind } of desktopDirs(env, home)) {
+        let names = [];
         try {
-          const f = this.transientUnitFile(unit);
-          if (f) fs2.unlinkSync(f);
+          names = listDir(dir).filter((f) => f.endsWith(".desktop"));
         } catch {
-          unlinkOk = false;
-          errors.push("unlink " + unit + ".service");
+          continue;
+        }
+        for (const f of names) {
+          let text = null;
+          try {
+            text = readFile(PJ(dir, f));
+          } catch {
+            continue;
+          }
+          const item = browserFromDesktop(text, kind, f);
+          if (item) usable(item);
         }
-        if (!exec.runDetail("systemctl", ["--user", "daemon-reload"], { timeoutMs: 15e3 }).ok) errors.push("daemon-reload");
-        return { ok: unlinkOk && errors.length === 0, errors };
-      },
-      /** 以 transient 单元启动（独立 cgroup；每实例隔离）。
-       *  @param {{unit:string, cmd:string[], env?:object, props?:string[], workingDir?:string, description?:string, timeoutMs?:number}} o
-       *    props 为 systemd 属性（如 KillMode=process、MemoryMax=8G），平台层只拼装成 --property，不解释语义。 */
-      startTransient(o) {
-        const opts = o || {};
-        const bad = unitNameViolation(opts.unit);
-        if (bad) throw new Error("systemd-run \u62D2\u7EDD: " + bad);
-        const args = ["--user", "--unit=" + opts.unit];
-        if (opts.description) args.push("--description=" + opts.description);
-        for (const p of opts.props || []) args.push("--property=" + p);
-        for (const [k, v] of Object.entries(opts.env || {})) args.push("--setenv=" + k + "=" + v);
-        if (opts.workingDir) args.push("--working-directory=" + opts.workingDir);
-        args.push("--", ...opts.cmd || []);
-        const r = exec.runDetail("systemd-run", args, { timeoutMs: opts.timeoutMs || 2e4 });
-        if (!r.ok) throw new Error("systemd-run \u5931\u8D25: " + (r.error || "unknown") + (r.stderr ? " | " + String(r.stderr).trim() : ""));
-        return true;
-      },
-      /** 运行期改限额（W3 动态化）：systemctl --user set-property 立即生效，无需重启单元。
-       *  必带 --runtime：transient 单元本不落盘，不带它会把 drop-in 写进用户配置目录，陈旧下限永久黏住。
-       *  值只来自 sandbox.unitProps 同源的 alloc（平台层翻译语义、不决定数额）。 */
-      setLimits(unit, alloc) {
-        if (unitNameViolation(unit)) return false;
-        const a = alloc || {};
-        const props = [];
-        if (a.memoryMax) props.push("MemoryMax=" + a.memoryMax);
-        if (a.memoryHigh) props.push("MemoryHigh=" + a.memoryHigh);
-        if (a.cpuQuota) props.push("CPUQuota=" + a.cpuQuota);
-        if (!props.length) return false;
-        return exec.runDetail(
-          "systemctl",
-          ["--user", "set-property", "--runtime", unit].concat(props),
-          { timeoutMs: 1e4 }
-        ).ok;
       }
-    };
-    function makeUnsupported(kind, label) {
-      return {
-        kind,
-        supportsUnits: false,
-        supportsTransient: false,
-        daemonReload() {
-          return false;
-        },
-        stopUnit() {
-          throw new CapabilityError(label + "\uFF1A\u4E0D\u652F\u6301\u4EE5\u7528\u6237\u5355\u5143\u65B9\u5F0F\u7BA1\u7406\u88AB\u7BA1\u5B9E\u4F8B");
-        },
-        resetFailed() {
-          return false;
-        },
-        isUnitActive(unit) {
-          return unit ? false : true;
-        },
-        transientUnitFile() {
-          return null;
-        },
-        // 无 transient 单元可清 = 成功；返回形态与 systemd 一致，调用方无需分支。
-        cleanTransient() {
-          return { ok: true, errors: [] };
-        },
-        startTransient() {
-          throw new CapabilityError(label + "\uFF1A\u4E0D\u652F\u6301\u62C9\u8D77\u5B9E\u4F8B\u8231\uFF08portable \u6863\u672A\u542F\u7528\uFF09");
-        },
-        setLimits() {
-          return false;
+      let defaultId = null;
+      let defaultSource = null;
+      const fromMime = linuxDefaultFromMimeApps(readFile, exists, env, home, note);
+      if (fromMime) {
+        const item = usable(fromMime);
+        if (item) {
+          defaultId = item.id;
+          defaultSource = "mimeapps";
+        }
+      }
+      const id = runOut("xdg-settings", ["get", "default-web-browser"]);
+      const desktopId = id && String(id).trim();
+      if (!defaultId && desktopId && /^[A-Za-z0-9._-]+\.desktop$/.test(desktopId)) {
+        for (const { dir } of desktopDirs(env, home)) {
+          const p = PJ(dir, desktopId);
+          let text = null;
+          try {
+            if (exists(p)) text = readFile(p);
+          } catch {
+            continue;
+          }
+          if (text === null) continue;
+          const item = browserFromDesktop(text, "xdg-settings", desktopId);
+          const used = item && usable(item);
+          if (used) {
+            defaultId = used.id;
+            defaultSource = "xdg-settings";
+            break;
+          }
+        }
+      }
+      if (!desktopId) note("xdg-settings", "\u65E0\u8F93\u51FA");
+      else if (defaultSource === "xdg-settings") note("xdg-settings", "\u9ED8\u8BA4=" + defaultId);
+      else note("xdg-settings", "\u62A5\u51FA " + desktopId + (defaultId ? "\uFF08\u9ED8\u8BA4\u5DF2\u7531 " + defaultSource + " \u5B9A\u51FA\uFF09" : " \u4F46\u4E0D\u53EF\u7528"));
+      if (!defaultId && found.size === 1) {
+        defaultId = [...found.keys()][0];
+        defaultSource = "only-installed";
+      }
+      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
+    }
+    function linuxDefaultFromMimeApps(readFile, exists, env, home, note) {
+      const cfgHome = env.XDG_CONFIG_HOME || PJ(home, ".config");
+      const cfgDirs = String(env.XDG_CONFIG_DIRS || "/etc/xdg").split(":").filter(Boolean);
+      const dataDirs = String(env.XDG_DATA_DIRS || "/usr/local/share:/usr/share").split(":").filter(Boolean);
+      const files = [
+        PJ(cfgHome, "mimeapps.list"),
+        ...cfgDirs.map((d) => PJ(d, "mimeapps.list")),
+        ...dataDirs.map((d) => PJ(d, "applications", "mimeapps.list"))
+      ];
+      for (const f of files) {
+        if (!exists(f)) continue;
+        let text = null;
+        try {
+          text = readFile(f);
+        } catch {
+          continue;
         }
-      };
-    }
-    var NONE = makeUnsupported("none", "\u5F53\u524D\u5E73\u53F0\u65E0\u670D\u52A1\u7BA1\u7406\u5668");
-    var _systemdRun = null;
-    function hasSystemdRun() {
-      if (_systemdRun === null) {
-        _systemdRun = !!execPath.resolveExecutable("systemd-run") || exec.runOut("systemd-run", ["--version"], { timeoutMs: 3e3 }) !== null;
+        const id = mimeAppsDefault(text);
+        if (!id) continue;
+        note("mimeapps", path2.basename(f) + " -> " + id);
+        for (const { dir, kind } of desktopDirs(env, home)) {
+          const p = PJ(dir, id);
+          if (!exists(p)) continue;
+          let dt = null;
+          try {
+            dt = readFile(p);
+          } catch {
+            continue;
+          }
+          const item = browserFromDesktop(dt, kind, id);
+          if (item) return item;
+        }
+        return null;
       }
-      return _systemdRun;
-    }
-    function current() {
-      if (PLATFORM === "linux") return hasSystemdRun() ? systemd : portable;
-      if (PLATFORM === "darwin" || PLATFORM === "win32") return portable;
-      return NONE;
-    }
-    module2.exports = { current, CapabilityError, kind: () => current().kind, PLATFORM, UNIT_NAME_RE, unitNameViolation, _testProviders: { systemd, portable, NONE } };
-  }
-});
-
-// src/platform/os/notify.js
-var require_notify = __commonJS({
-  "src/platform/os/notify.js"(exports2, module2) {
-    "use strict";
-    var spawnOS = require_spawn();
-    function appleScriptString(s) {
-      return JSON.stringify(String(s));
-    }
-    function powerShellString(s) {
-      return "'" + String(s).replace(/'/g, "''") + "'";
+      note("mimeapps", "\u65E0\u9ED8\u8BA4\u9879");
+      return null;
     }
-    function notifyCommand(platform, title, body) {
-      const pl = platform || process.platform;
-      const t = String(title == null ? "" : title);
-      const b = String(body == null ? "" : body);
-      if (pl === "linux") {
-        return { cmd: "notify-send", args: ["-a", "dsh-supervisor", t, b] };
-      }
-      if (pl === "darwin") {
-        const script = "display notification " + appleScriptString(b) + " with title " + appleScriptString(t);
-        return { cmd: "osascript", args: ["-e", script] };
-      }
-      if (pl === "win32") {
-        const ps = [
-          '[reflection.assembly]::loadwithpartialname("System.Windows.Forms") | Out-Null',
-          '[reflection.assembly]::loadwithpartialname("System.Drawing") | Out-Null',
-          "$n = New-Object System.Windows.Forms.NotifyIcon",
-          "$n.Icon = [System.Drawing.SystemIcons]::Information",
-          "$n.Visible = $true",
-          "$n.ShowBalloonTip(4000, " + powerShellString(t) + ", " + powerShellString(b) + ", [System.Windows.Forms.ToolTipIcon]::None)",
-          "Start-Sleep -Milliseconds 4200",
-          "$n.Dispose(); $n.Visible = $false"
-        ].join("; ");
-        return { cmd: "powershell", args: ["-NoProfile", "-NonInteractive", "-Command", ps] };
+    function mimeAppsDefault(text) {
+      let inDefault = false;
+      for (const line of String(text || "").split(/\r?\n/)) {
+        if (/^\s*\[/.test(line)) {
+          inDefault = /^\s*\[Default Applications\]\s*$/.test(line);
+          continue;
+        }
+        if (!inDefault) continue;
+        const m = line.match(/^\s*x-scheme-handler\/https?\s*=\s*(.*)$/i);
+        if (!m) continue;
+        const ids = m[1].split(";").map((s) => s.trim()).filter((s) => /^[A-Za-z0-9._-]+\.desktop$/.test(s));
+        if (ids.length) return ids[0];
       }
       return null;
     }
-    function notify(title, body, onError) {
+    function probe(platform, d) {
+      const pl = platform || process.platform;
+      const dd = Object.assign({}, d, { canExec: d.canExec || ((p) => isExecutableFile(p, pl)) });
+      if (pl === "win32") return probeWin(dd);
+      if (pl === "darwin") return probeMac(dd);
+      return probeLinux(dd);
+    }
+    var CACHE = /* @__PURE__ */ Object.create(null);
+    function inventory(platform, o) {
+      const ov = o || {};
+      const pl = platform || process.platform;
+      const now = ov.now || (() => Date.now());
+      const ttl = ov.ttlMs === void 0 ? 6e4 : ov.ttlMs;
+      const cached = CACHE[pl];
+      if (!ov.force && cached && now() - cached.at < ttl) return Object.assign({ cached: true }, cached.value);
+      const runOut = ov.runOut || ((bin, args) => exec.runOut(bin, args, { timeoutMs: PROBE_TIMEOUT_MS }));
+      const readFile = ov.readFile || ((p) => fs2.readFileSync(p, "utf8"));
+      const exists = ov.exists || ((p) => fs2.existsSync(p));
+      const listDir = ov.listDir || ((p) => fs2.readdirSync(p));
+      let value;
       try {
-        const plan = notifyCommand(process.platform, title, body);
-        if (!plan) return false;
-        const c = spawnOS.detachedIgnored(plan.cmd, plan.args);
-        c.on("error", () => {
-          if (onError) onError();
-        });
-        c.unref();
-        return true;
-      } catch {
-        if (onError) onError();
-        return false;
+        value = probe(pl, { runOut, readFile, exists, listDir, canExec: ov.canExec, env: ov.env || process.env, home: ov.home || os2.homedir() });
+      } catch (e) {
+        value = { browsers: [], defaultId: null, defaultSource: null, probed: [{ source: "probe-error", detail: String(e && e.message || e) }] };
       }
+      value.at = now();
+      value.platform = pl;
+      value.browsers.sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+      CACHE[pl] = { at: now(), value };
+      return Object.assign({ cached: false }, value);
     }
-    module2.exports = { notify, notifyCommand, appleScriptString, powerShellString };
+    function invalidate(platform) {
+      if (platform) delete CACHE[platform];
+      else for (const k of Object.keys(CACHE)) delete CACHE[k];
+    }
+    module2.exports = {
+      inventory,
+      invalidate,
+      probe,
+      probeWin,
+      probeMac,
+      probeLinux,
+      engineOf,
+      tokenizeExec,
+      parseExecLine,
+      regValueOf,
+      expandEnvVars,
+      exeFromCmdLine,
+      regSubkeys,
+      regKeyFull,
+      regValueTargets,
+      safeRegKeyPart,
+      browserFromDesktop,
+      desktopDirs,
+      resolveLinuxBin,
+      mimeAppsDefault,
+      linuxDefaultFromMimeApps,
+      WIN_APP_PATHS,
+      PROBE_TIMEOUT_MS
+    };
   }
 });
 
-// src/platform/os/browser-inventory.js
-var require_browser_inventory = __commonJS({
-  "src/platform/os/browser-inventory.js"(exports2, module2) {
+// src/platform/os/environment.js
+var require_environment = __commonJS({
+  "src/platform/os/environment.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
-    var path2 = require("node:path");
     var os2 = require("node:os");
-    var exec = require_exec();
-    var { isExecutableFile } = require_exec_path();
-    var PROBE_TIMEOUT_MS = 1500;
-    function engineOf(bin) {
-      const base = String(bin || "").toLowerCase().split(/[\\/]/).pop();
-      if (/(chrome|chromium|msedge|edge|brave|vivaldi|opera|thorium)/.test(base)) return "chromium";
-      if (/(firefox|librewolf|waterfox)/.test(base)) return "firefox";
-      return "other";
+    var path2 = require("node:path");
+    var stateRoot2 = require_state_root();
+    var { writeAtomic } = require_fs();
+    var desktop = require_desktop();
+    var detector = require_browser_inventory();
+    var { engineOf } = detector;
+    var SCHEMA = 1;
+    var FILE_NAME = "environment.json";
+    var FORM_TTL_MS = 6e4;
+    var _sources = {};
+    function bind(sources) {
+      _sources = Object.assign({}, _sources, sources || {});
+      return _sources;
+    }
+    function preferenceId() {
+      const f = _sources.preference;
+      if (typeof f !== "function") return null;
+      const v = f();
+      return typeof v === "string" && v.trim() ? v.trim() : null;
     }
-    function tokenizeExec(line) {
-      const toks = [];
-      let cur = "";
-      let q = null;
-      let esc = false;
-      let has = false;
-      for (const ch of String(line)) {
-        if (esc) {
-          cur += ch;
-          esc = false;
-          continue;
-        }
-        if (ch === "\\") {
-          esc = true;
-          has = true;
-          continue;
-        }
-        if (q) {
-          if (ch === q) q = null;
-          else cur += ch;
-          continue;
-        }
-        if (ch === "'" || ch === '"') {
-          q = ch;
-          has = true;
-          continue;
-        }
-        if (/\s/.test(ch)) {
-          if (has) {
-            toks.push(cur);
-            cur = "";
-            has = false;
-          }
-          continue;
-        }
-        cur += ch;
-        has = true;
-      }
-      if (has) toks.push(cur);
-      return toks;
+    function capabilities() {
+      const f = _sources.capabilities;
+      if (typeof f !== "function") return null;
+      return f() || null;
     }
-    function parseExecLine(line) {
-      let toks = tokenizeExec(line).filter((t) => t !== "%%" && !/^%[a-zA-Z]$/.test(t));
-      if (toks[0] === "env") {
-        let i = 1;
-        while (i < toks.length && /=/.test(toks[i])) i++;
-        toks = toks.slice(i);
+    function identity() {
+      let user = null;
+      try {
+        user = os2.userInfo().username;
+      } catch {
+        user = process.env.USER || process.env.USERNAME || null;
       }
-      if (!toks.length) return null;
-      return { bin: toks[0], baseArgs: toks.slice(1) };
-    }
-    function regValueOf(out) {
-      const m = String(out || "").match(/REG_(?:EXPAND_SZ|SZ)\s+(.*)/);
-      if (!m) return null;
-      return m[1].trim() || null;
-    }
-    function expandEnvVars(value, env) {
-      const e = env || process.env;
-      return String(value).replace(/%([^%]+)%/g, (all, name) => e[name] === void 0 ? all : e[name]);
-    }
-    function exeFromCmdLine(cmdLine) {
-      const s = String(cmdLine || "");
-      let m = s.match(/^\s*"([^"]+\.exe)"/i);
-      if (m) return m[1];
-      m = s.match(/^\s*(.*?\.exe)/i);
-      return m ? m[1] : null;
+      return {
+        platform: process.platform,
+        arch: process.arch,
+        hostname: os2.hostname(),
+        user: user || null,
+        home: os2.homedir(),
+        node: process.version
+      };
     }
-    function safeRegKeyPart(s) {
-      return typeof s === "string" && s.length > 0 && s.length <= 200 && /^[\x20-\x7e]+$/.test(s) && !/[;|&`$()<>^"'\r\n]/.test(s);
+    function paths() {
+      return { root: stateRoot2.root(), supervisor: stateRoot2.supervisorDir(), shell: stateRoot2.shellDir() };
     }
-    function regValue(runner, note, key, name) {
-      const args = name ? ["query", key, "/v", name] : ["query", key, "/ve"];
-      const out = runner("reg.exe", args);
-      const v = regValueOf(out);
-      note(name ? key + " /v " + name : key, v ? "ok" : "empty");
-      return v;
+    function normalizeInventory(inv, platform) {
+      const list = inv && Array.isArray(inv.browsers) ? inv.browsers : [];
+      const defaultId = inv && inv.defaultId ? inv.defaultId : null;
+      return {
+        platform: inv && inv.platform || platform || process.platform,
+        cached: !!(inv && inv.cached),
+        at: inv && inv.at !== void 0 ? inv.at : null,
+        defaultId,
+        defaultSource: inv && inv.defaultSource || null,
+        browsers: list.map((b) => ({
+          id: b.id,
+          name: b.name,
+          bin: b.bin,
+          engine: b.engine || engineOf(b.bin),
+          baseArgs: b.baseArgs || [],
+          sources: b.sources && b.sources.length ? b.sources : [b.source || "unknown"],
+          isDefault: !!defaultId && b.id === defaultId
+        })),
+        probed: inv && inv.probed || []
+      };
     }
-    var REG_HIVE_ALIAS = { HKLM: "HKEY_LOCAL_MACHINE", HKCU: "HKEY_CURRENT_USER", HKCR: "HKEY_CLASSES_ROOT", HKU: "HKEY_USERS", HKCC: "HKEY_CURRENT_CONFIG" };
-    function regKeyFull(key) {
-      const s = String(key || "");
-      const i = s.indexOf("\\");
-      const root = i < 0 ? s : s.slice(0, i);
-      return (REG_HIVE_ALIAS[root.toUpperCase()] || root) + (i < 0 ? "" : s.slice(i));
+    function browsers(o) {
+      const ov = o || {};
+      const pl = ov.platform || process.platform;
+      if (ov.inventory) return normalizeInventory(ov.inventory, pl);
+      const resolve = typeof ov.resolveInventory === "function" ? ov.resolveInventory : ((platform, deps) => detector.inventory(platform, deps));
+      return normalizeInventory(resolve(pl, ov.resolveDeps || {}), pl);
+    }
+    var ENGINE_RANK = { chromium: 0, firefox: 1, other: 2 };
+    function rankCandidates(list) {
+      const rankOf = (b) => {
+        const r = ENGINE_RANK[b && b.engine];
+        return r === void 0 ? ENGINE_RANK.other : r;
+      };
+      return (Array.isArray(list) ? list : []).slice().sort((a, b) => {
+        if (rankOf(a) !== rankOf(b)) return rankOf(a) - rankOf(b);
+        const ia = String(a && a.id || "");
+        const ib = String(b && b.id || "");
+        return ia < ib ? -1 : ia > ib ? 1 : 0;
+      });
     }
-    function regSubkeys(runner, note, key) {
-      const out = runner("reg.exe", ["query", key]);
-      if (!out) {
-        note(key, "unreadable");
-        return [];
+    function pickLauncher(platform, inv, preference) {
+      const list = inv && Array.isArray(inv.browsers) ? inv.browsers : [];
+      const byId = /* @__PURE__ */ new Map();
+      for (const b of list) byId.set(b.id, b);
+      const wanted = preference === void 0 ? preferenceId() : typeof preference === "string" && preference ? preference : null;
+      const stale = wanted !== null && !byId.has(wanted);
+      const out = (browser, how) => ({ browser, how, wanted, stale });
+      if (wanted !== null && byId.has(wanted)) return out(byId.get(wanted), "user-preference");
+      const sys = inv && inv.defaultId ? byId.get(inv.defaultId) : null;
+      if (sys) return out(sys, inv.defaultSource || "default");
+      if (list.length === 1) return out(list[0], "only-installed");
+      if (list.length > 1) return out(rankCandidates(list)[0], "candidate-rank");
+      return out(null, "none-found");
+    }
+    function snapshotPath() {
+      return path2.join(stateRoot2.supervisorDir(), FILE_NAME);
+    }
+    function readSnapshot() {
+      try {
+        const doc = JSON.parse(fs2.readFileSync(snapshotPath(), "utf8"));
+        return doc && doc.schema === SCHEMA ? doc : null;
+      } catch {
+        return null;
       }
-      const prefix = regKeyFull(key) + "\\";
-      const names = [];
-      for (const line of String(out).split(/\r?\n/)) {
-        const l = line.trim();
-        if (!/^HKEY_/i.test(l) || l.length <= prefix.length) continue;
-        if (l.slice(0, prefix.length).toUpperCase() !== prefix.toUpperCase()) continue;
-        const rest = l.slice(prefix.length);
-        if (rest && !rest.includes("\\") && safeRegKeyPart(rest)) names.push(rest);
+    }
+    var _formCache = null;
+    function form(o) {
+      const ov = o || {};
+      const now = typeof ov.now === "function" ? ov.now : (() => Date.now());
+      const stamp = now();
+      const ttl = ov.ttlMs === void 0 ? FORM_TTL_MS : ov.ttlMs;
+      if (!ov.force && _formCache && stamp - _formCache.at < ttl) {
+        return Object.assign({}, _formCache.value, { cached: true });
+      }
+      const inv = browsers(ov);
+      const caps = capabilities();
+      const session = desktop.describe();
+      const prefId = preferenceId();
+      const prefEntry = prefId ? inv.browsers.find((b) => b.id === prefId) || null : null;
+      const preference = {
+        id: prefId,
+        configured: !!prefId,
+        matched: !!prefEntry,
+        browser: prefEntry ? { id: prefEntry.id, name: prefEntry.name, engine: prefEntry.engine } : null,
+        reason: !prefId ? "not-set" : prefEntry ? "matched" : "stale"
+      };
+      const pick = pickLauncher(inv.platform, inv, prefId);
+      const probed = inv.probed.map((p) => ({ section: "browsers", source: p.source, detail: p.detail }));
+      probed.push({ section: "session", source: "desktop", detail: session.reason + (session.available ? "\uFF08\u53EF\u7528\uFF09" : "\uFF08\u4E0D\u53EF\u7528\uFF09") });
+      probed.push({
+        section: "capabilities",
+        source: "profile",
+        detail: caps ? "openBrowser=" + (caps.openBrowser === true) : "\u672A\u7ED1\u5B9A\u80FD\u529B\u77E9\u9635\uFF08\u7531 platform/os/index.js \u88C5\u914D\u671F\u6CE8\u5165\uFF09"
+      });
+      probed.push({
+        section: "preference",
+        source: "config",
+        detail: preference.reason === "not-set" ? "\u672A\u8BBE\u7F6E\uFF0C\u6309\u7CFB\u7EDF\u9ED8\u8BA4\u6216\u5019\u9009\u6B21\u5E8F\u5206\u53D1" : preference.reason === "matched" ? "\u5DF2\u9009 " + preference.browser.name : "\u504F\u597D\u6240\u6307\u5DF2\u4E0D\u5728\u5019\u9009\u6E05\u5355: " + prefId
+      });
+      probed.push({
+        section: "pick",
+        source: "form",
+        detail: pick.how + (pick.browser ? "\uFF08" + pick.browser.name + "\uFF09" : "\uFF08\u65E0\u5019\u9009\uFF09") + (pick.stale ? "\uFF0C\u504F\u597D\u5DF2\u5931\u6548\u9700\u91CD\u9009" : "")
+      });
+      const value = {
+        schema: SCHEMA,
+        at: stamp,
+        platform: inv.platform,
+        identity: identity(),
+        paths: paths(),
+        session,
+        capabilities: caps,
+        preference,
+        default: inv.defaultId ? { id: inv.defaultId, source: inv.defaultSource } : null,
+        browsers: inv.browsers,
+        pick: { how: pick.how, id: pick.browser ? pick.browser.id : null, name: pick.browser ? pick.browser.name : null, wanted: pick.wanted, stale: pick.stale },
+        probed
+      };
+      const snapshot = { path: snapshotPath(), written: false, error: null };
+      if (ov.persist === true) {
+        try {
+          writeAtomic(snapshot.path, JSON.stringify(value, null, 2) + "\n", { mode: 384 });
+          snapshot.written = true;
+        } catch (e) {
+          snapshot.error = String(e && e.message || e);
+        }
+        probed.push({
+          section: "snapshot",
+          source: FILE_NAME,
+          detail: snapshot.written ? "\u5DF2\u843D\u76D8 " + snapshot.path : "\u843D\u76D8\u5931\u8D25: " + snapshot.error
+        });
       }
-      note(key, names.length ? names.length + " \u9879" : "\u65E0\u5B50\u952E");
-      return names;
+      value.snapshot = snapshot;
+      _formCache = { at: stamp, value };
+      return Object.assign({ cached: false }, value);
     }
-    var WIN_APP_PATHS = ["msedge.exe", "chrome.exe", "firefox.exe", "brave.exe", "opera.exe", "vivaldi.exe", "chromium.exe", "thorium.exe", "librewolf.exe"];
-    function winExeOfProgId(runner, note, progId, env) {
-      if (!safeRegKeyPart(progId)) return null;
-      for (const root of ["HKCU\\Software\\Classes", "HKLM\\Software\\Classes"]) {
-        const cmd2 = regValue(runner, note, root + "\\" + progId + "\\shell\\open\\command");
-        const exe = cmd2 ? exeFromCmdLine(expandEnvVars(cmd2, env)) : null;
-        if (exe) return exe;
+    function invalidate(platform) {
+      _formCache = null;
+      return detector.invalidate(platform);
+    }
+    function checkPreference(value, form2) {
+      const candidates = (form2 && form2.browsers || []).map((b) => ({
+        id: b.id,
+        name: b.name,
+        engine: b.engine,
+        isDefault: b.isDefault === true
+      }));
+      const id = typeof value === "string" ? value.trim() : "";
+      if (!id) return { ok: true, id: null, browser: null, candidates };
+      const hit = candidates.find((c) => c.id === id);
+      if (!hit) {
+        return { ok: false, id: null, browser: null, candidates, error: "\u8BE5\u6D4F\u89C8\u5668\u4E0D\u5728\u672C\u673A\u5019\u9009\u6E05\u5355\u91CC\uFF08\u53EF\u80FD\u5DF2\u5378\u8F7D\u6216\u8DEF\u5F84\u5931\u6548\uFF09\uFF0C\u8BF7\u5148\u5237\u65B0\u73AF\u5883\u8868\u5355" };
       }
-      return null;
+      return { ok: true, id: hit.id, browser: hit, candidates };
     }
-    function probeWin(d) {
-      const { runOut, env, canExec } = d;
-      const notes = [];
-      const note = (source, detail) => {
-        notes.push({ source, detail });
-      };
-      const found = /* @__PURE__ */ new Map();
-      const keyOf = (exe) => String(exe || "").toLowerCase().replace(/[\\/]/g, "\\");
-      const push = (exe, how) => {
-        const full = expandEnvVars(exe, env).trim();
-        if (!/\.exe$/i.test(full)) {
-          note(how, "\u6765\u6E90\u7ED9\u51FA\u7684\u4E0D\u662F exe \u8DEF\u5F84: " + full);
-          return null;
-        }
-        const k = keyOf(full);
-        const hit = found.get(k);
-        if (hit) {
-          if (!hit.sources.includes(how)) hit.sources.push(how);
-          return hit;
-        }
-        if (!canExec(full)) {
-          note(how, "\u6307\u5411\u7684\u6587\u4EF6\u4E0D\u53EF\u6267\u884C: " + full);
-          return null;
+    module2.exports = {
+      SCHEMA,
+      FILE_NAME,
+      FORM_TTL_MS,
+      bind,
+      preferenceId,
+      capabilities,
+      identity,
+      paths,
+      browsers,
+      normalizeInventory,
+      rankCandidates,
+      pickLauncher,
+      checkPreference,
+      form,
+      snapshotPath,
+      readSnapshot,
+      invalidate
+    };
+  }
+});
+
+// src/platform/os/process.js
+var require_process = __commonJS({
+  "src/platform/os/process.js"(exports2, module2) {
+    "use strict";
+    var ex2 = require_exec();
+    var isWindows = process.platform === "win32";
+    function signalProcess(pid, sig) {
+      if (!Number.isInteger(pid) || pid <= 0) return;
+      if (isWindows) {
+        try {
+          process.kill(pid, sig);
+        } catch {
         }
-        const item = { id: k, name: path2.basename(full).replace(/\.exe$/i, ""), engine: engineOf(full), bin: full, source: how, sources: [how] };
-        found.set(k, item);
-        note(how, item.name);
-        return item;
-      };
-      const progIds = /* @__PURE__ */ new Map();
-      const addProgId = (pid, how) => {
-        const s = String(pid || "").trim();
-        if (!safeRegKeyPart(s)) return;
-        if (progIds.get(s) === "userchoice") return;
-        progIds.set(s, how);
-      };
-      let defaultId = null;
-      let defaultSource = null;
-      const DEF_RANK = { userchoice: 1, "scheme-association": 2, "only-installed": 9 };
-      let defRank = 99;
-      const setDefault = (item, how) => {
-        const r = DEF_RANK[how] === void 0 ? 99 : DEF_RANK[how];
-        if (item && r < defRank) {
-          defRank = r;
-          defaultId = item.id;
-          defaultSource = how;
+        return;
+      }
+      try {
+        process.kill(-pid, sig);
+      } catch {
+        try {
+          process.kill(pid, sig);
+        } catch {
         }
-      };
-      const cmdToExe = (raw) => raw ? exeFromCmdLine(expandEnvVars(raw, env)) : null;
-      const uc = regValue(runOut, note, "HKCU\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice", "ProgId");
-      if (uc) addProgId(uc, "userchoice");
-      for (const root of ["HKCU\\Software\\Classes", "HKLM\\Software\\Classes"]) {
-        const pid = regValue(runOut, note, root + "\\https");
-        if (pid) addProgId(pid, "scheme-association");
-        const exe = cmdToExe(regValue(runOut, note, root + "\\https\\shell\\open\\command"));
-        if (exe) setDefault(push(exe, "scheme-association"), "scheme-association");
       }
-      for (const name of regSubkeys(runOut, note, "HKLM\\SOFTWARE\\Clients\\StartMenuInternet")) {
-        addProgId(name, "startmenu-catalog");
-        const exe = cmdToExe(regValue(runOut, note, "HKLM\\SOFTWARE\\Clients\\StartMenuInternet\\" + name + "\\shell\\open\\command")) || winExeOfProgId(runOut, note, name, env);
-        if (exe) push(exe, "startmenu-catalog");
+    }
+    function killTree(pid, sig, cb, opts) {
+      if (!Number.isInteger(pid) || pid <= 0) {
+        if (cb) cb(new Error("invalid pid"));
+        return;
       }
-      for (const root of ["HKLM\\SOFTWARE", "HKCU\\SOFTWARE"]) {
-        for (const capPath of regValueTargets(runOut, note, root + "\\RegisteredApplications")) {
-          const https = regValue(runOut, note, capPath + "\\UrlAssociations\\https");
-          const sid = regValue(runOut, note, capPath, "StartMenuInternet");
-          const pid = https || sid;
-          if (pid) addProgId(pid, "registered-apps");
-        }
+      if (isWindows) {
+        ex2.runAsync("taskkill", ["/PID", String(pid), "/T", "/F"], { timeoutMs: 1e4 }).then((r) => {
+          if (cb) cb(r.ok ? null : new Error(r.error || "taskkill failed"));
+        });
+        return;
       }
-      for (const exe of WIN_APP_PATHS) {
-        for (const root of ["HKCU", "HKLM"]) {
-          const v = regValue(runOut, note, root + "\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\" + exe);
-          if (v && push(v, "app-paths")) break;
+      if (opts && opts.ownGroup === true) {
+        signalProcess(pid, sig || "SIGTERM");
+      } else {
+        try {
+          process.kill(pid, sig || "SIGTERM");
+        } catch {
         }
       }
-      for (const [pid, how] of progIds) {
-        const exe = winExeOfProgId(runOut, note, pid, env);
-        if (!exe) continue;
-        const item = push(exe, how);
-        if (how === "userchoice") setDefault(item, "userchoice");
+      if (cb) process.nextTick(cb, null);
+    }
+    module2.exports = { signalProcess, killTree };
+  }
+});
+
+// src/platform/os/file-protect.js
+var require_file_protect = __commonJS({
+  "src/platform/os/file-protect.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var ex2 = require_exec();
+    var IS_WINDOWS2 = process.platform === "win32";
+    var _icacls = null;
+    function hasIcacls(platform) {
+      if ((platform || process.platform) !== "win32") return false;
+      if (_icacls !== null) return _icacls;
+      _icacls = ex2.runOut("icacls", ["/?"], { timeoutMs: 3e3 }) !== null;
+      return _icacls;
+    }
+    function currentUser() {
+      return process.env.USERNAME || process.env.USER || (() => {
+        try {
+          return os2.userInfo().username;
+        } catch {
+          return null;
+        }
+      })();
+    }
+    function protectFile(file) {
+      if (!IS_WINDOWS2) {
+        try {
+          fs2.chmodSync(file, 384);
+          return { ok: true, mode: "posix-0600" };
+        } catch (e) {
+          return { ok: false, mode: "posix-0600", reason: e.message };
+        }
       }
-      if (found.size === 1) setDefault([...found.values()][0], "only-installed");
-      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
+      if (!hasIcacls()) return { ok: false, mode: "none", reason: "icacls \u4E0D\u53EF\u7528" };
+      const user = currentUser();
+      if (!user) return { ok: false, mode: "icacls", reason: "\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u7528\u6237" };
+      const r = ex2.runDetail("icacls", [file, "/inheritance:r", "/grant:r", user + ":F"], { stdio: "ignore", timeoutMs: 5e3 });
+      return r.ok ? { ok: true, mode: "icacls-file" } : { ok: false, mode: "icacls-file", reason: r.error || "\u9000\u51FA\u7801 " + r.code };
     }
-    function regValueTargets(runOut, note, key) {
-      const out = runOut("reg.exe", ["query", key]);
-      if (!out) {
-        note(key, "unreadable");
-        return [];
+    function protectDir(dir) {
+      if (!IS_WINDOWS2) {
+        try {
+          fs2.chmodSync(dir, 448);
+          return { ok: true, mode: "posix-0700" };
+        } catch (e) {
+          return { ok: false, mode: "posix-0700", reason: e.message };
+        }
       }
-      const paths = [];
-      for (const line of String(out).split(/\r?\n/)) {
-        const m = line.trim().match(/REG_SZ\s+(.*)/);
-        if (!m) continue;
-        const rel = m[1].trim();
-        if (!safeRegKeyPart(rel)) continue;
-        const root = key.slice(0, key.indexOf("\\"));
-        paths.push(root + "\\" + rel);
+      if (!hasIcacls()) return { ok: false, mode: "none", reason: "icacls \u4E0D\u53EF\u7528" };
+      const user = currentUser();
+      if (!user) return { ok: false, mode: "icacls", reason: "\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u7528\u6237" };
+      const r = ex2.runDetail("icacls", [dir, "/inheritance:r", "/grant:r", user + ":(OI)(CI)F"], { stdio: "ignore", timeoutMs: 1e4 });
+      return r.ok ? { ok: true, mode: "icacls-dir" } : { ok: false, mode: "icacls-dir", reason: r.error || "\u9000\u51FA\u7801 " + r.code };
+    }
+    function ensurePrivateDir(dir) {
+      try {
+        fs2.mkdirSync(dir, { recursive: true });
+      } catch (e) {
+        return { ok: false, mode: "mkdir", reason: e.message };
       }
-      note(key, paths.length ? paths.length + " \u4E2A\u80FD\u529B\u8DEF\u5F84" : "\u65E0\u503C");
-      return paths;
+      return protectDir(dir);
     }
-    var MAC_JXA_LIST = [
-      "ObjC.import('Foundation');",
-      "var ws=$.NSWorkspace.sharedWorkspace;",
-      "var u=$.NSURL.URLWithString('https://dsh.local/probe');",
-      "var out=[];var def='';",
-      "try{var d=ws.URLForApplicationToOpenURL(u); if(!d.isNil()) def=ObjC.unwrap(d.path)||'';}catch(e){}",
-      "var list=null;",
-      "try{list=ws.urlsForApplicationsToOpenURL(u);}catch(e){}",
-      "if(list===null||typeof list.count!=='number'){if(def){out.push(def+'\\t\\t1');}}else{",
-      "var n=Number(list.count);",
-      "for(var i=0;i<n;i++){",
-      "var p=ObjC.unwrap(list.objectAtIndex(i).path)||''; if(!p) continue;",
-      "var exe='';var bid='';",
-      "var b=$.NSBundle.bundleWithPath(p);",
-      "if(!b.isNil()){exe=ObjC.unwrap(b.executablePath)||'';bid=ObjC.unwrap(b.bundleIdentifier)||'';}",
-      "out.push((exe||p)+'\\t'+bid+'\\t'+(p&&def&&p===def?1:0));}",
-      "}",
-      // 末句必须是裸表达式：osascript 取的是最后一条**语句**的值，if/else 语句不产结果，
-      //   写在分支里会让整段查询输出空字符串（表现为「系统未报任何可用应用」）。
-      "out.join('\\n');"
-    ].join("");
-    function probeMac(d) {
-      const { runOut, canExec } = d;
-      const notes = [];
-      const note = (source, detail) => {
-        notes.push({ source, detail });
-      };
-      const out = runOut("osascript", ["-l", "JavaScript", "-e", MAC_JXA_LIST]);
-      if (!out || !out.trim()) {
-        note("launchservices", "\u67E5\u8BE2\u65E0\u8F93\u51FA\uFF08\u65E7\u7CFB\u7EDF\u6216\u88AB\u6743\u9650\u62E6\u622A\uFF09");
-        return { browsers: [], defaultId: null, defaultSource: null, probed: notes };
-      }
-      const keyOf = (exe) => String(exe || "").toLowerCase();
-      const found = /* @__PURE__ */ new Map();
-      let defaultId = null;
-      let defaultSource = null;
-      for (const line of out.trim().split("\n")) {
-        const parts = line.split("	");
-        const bin = (parts[0] || "").trim();
-        if (!bin) continue;
-        if (!canExec(bin)) {
-          note("launchservices", "\u4E0D\u53EF\u6267\u884C: " + bin);
-          continue;
+    function writePrivate(file, data) {
+      try {
+        const dir = path2.dirname(file);
+        try {
+          fs2.mkdirSync(dir, { recursive: true });
+        } catch {
         }
-        const k = keyOf(bin);
-        if (!found.has(k)) found.set(k, { id: k, name: path2.basename(bin), engine: engineOf(bin), bin, source: "launchservices", sources: ["launchservices"], isDefault: false });
-        if (parts[2] === "1") {
-          found.get(k).isDefault = true;
-          if (!defaultId) {
-            defaultId = k;
-            defaultSource = "launchservices";
+        const tmp = file + ".tmp" + process.pid;
+        fs2.writeFileSync(tmp, data, { mode: 384 });
+        const p1 = protectFile(tmp);
+        if (p1 && p1.ok === false) {
+          try {
+            fs2.rmSync(tmp, { force: true });
+          } catch {
           }
+          return { ok: false, reason: "protect(tmp): " + (p1.reason || p1.mode), mode: p1.mode };
         }
+        fs2.renameSync(tmp, file);
+        const p2 = protectFile(file);
+        if (p2 && p2.ok === false) return { ok: false, reason: "protect(file): " + (p2.reason || p2.mode), mode: p2.mode };
+        return { ok: true };
+      } catch (e) {
+        return { ok: false, reason: e.message };
       }
-      note("launchservices", found.size ? found.size + " \u4E2A\u53EF\u6253\u5F00 https \u7684\u5E94\u7528" : "\u7CFB\u7EDF\u672A\u62A5\u4EFB\u4F55\u53EF\u7528\u5E94\u7528");
-      if (!defaultId && found.size === 1) {
-        defaultId = [...found.keys()][0];
-        defaultSource = "only-installed";
-      }
-      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
     }
-    var PJ = path2.posix.join;
-    function desktopDirs(env, home) {
-      const dataHome = env.XDG_DATA_HOME || PJ(home, ".local", "share");
-      const dataDirs = String(env.XDG_DATA_DIRS || "/usr/local/share:/usr/share").split(":").filter(Boolean);
-      const dirs = [[dataHome, "xdg"], ...dataDirs.map((p) => [p, "xdg"])];
-      dirs.push([PJ(home, ".local", "share"), "xdg"]);
-      dirs.push(["/var/lib/flatpak/exports/share", "flatpak"]);
-      dirs.push([PJ(home, ".local", "share", "flatpak", "exports", "share"), "flatpak"]);
-      dirs.push(["/var/lib/snapd/desktop", "snap"]);
-      const seen = [];
-      return dirs.map(([root, kind]) => ({ dir: PJ(root, "applications"), kind })).filter((x) => {
-        if (seen.includes(x.dir)) return false;
-        seen.push(x.dir);
-        return true;
-      });
+    module2.exports = { protectFile, protectDir, ensurePrivateDir, writePrivate, hasIcacls, currentUser, IS_WINDOWS: IS_WINDOWS2 };
+  }
+});
+
+// src/platform/util/input.js
+var require_input = __commonJS({
+  "src/platform/util/input.js"(exports2, module2) {
+    "use strict";
+    var PKG_NAME_RE = /^(@[a-zA-Z0-9._-]+\/)?[a-zA-Z0-9._-]+$/;
+    var ARGV_UNSAFE_RE = /[\s;|&<>`'"$(){}\\*?~#]/;
+    var WIN_ABS_PATH_RE = /^[A-Za-z]:\\[^;|&<>`'"$*?~#\s]*$/;
+    var UNIT_NAME_RE = /^[A-Za-z0-9:@._-]{1,128}$/;
+    var UNSAFE_LEDGER_KEYS = ["__proto__", "prototype", "constructor"];
+    var LEDGER_UNSAFE_RE = /[\s\u0000-\u001f\u007f]/;
+    function argvViolation(arg) {
+      const s = String(arg == null ? "" : arg);
+      if (!s) return "\u7A7A\u7684 argv \u9879";
+      if (ARGV_UNSAFE_RE.test(s) && !WIN_ABS_PATH_RE.test(s)) return "argv \u9879\u542B\u7981\u7528\u5B57\u7B26\uFF08\u7A7A\u767D/shell \u5143\u5B57\u7B26\uFF09: " + s.slice(0, 80);
+      return null;
     }
-    function browserFromDesktop(text, kind, file) {
-      let inMain = false;
-      const got = {};
-      for (const line of String(text).split(/\r?\n/)) {
-        if (/^\[Desktop Entry\]\s*$/.test(line)) {
-          inMain = true;
-          continue;
-        }
-        if (/^\[/.test(line)) break;
-        if (!inMain) continue;
-        const m = line.match(/^(Exec|Name|TryExec|Categories)=(.*)$/);
-        if (!m) continue;
-        if (m[1] === "Name" && got.Name) continue;
-        got[m[1]] = m[2].trim();
+    var CONTROL_RE = /[\u0000-\u001f\u007f]/;
+    function isAbsoluteForm(p) {
+      const s = String(p == null ? "" : p);
+      return s.charCodeAt(0) === 47 || /^[A-Za-z]:[\\/]/.test(s) || s.charCodeAt(0) === 92 && s.charCodeAt(1) === 92;
+    }
+    function prefixViolation(prefix) {
+      const s = String(prefix == null ? "" : prefix);
+      if (!s.trim()) return "\u7A7A\u7684\u5B89\u88C5\u524D\u7F00";
+      if (CONTROL_RE.test(s)) return "\u5B89\u88C5\u524D\u7F00\u542B\u63A7\u5236\u7B26: " + s.slice(0, 80);
+      if (s.length > 4096) return "\u5B89\u88C5\u524D\u7F00\u8D85\u957F: " + s.slice(0, 60) + "...";
+      if (s[0] === "-") return "\u5B89\u88C5\u524D\u7F00\u4EE5 - \u5F00\u5934\uFF08\u4F1A\u88AB\u5F53\u4F5C npm \u9009\u9879\uFF09: " + s.slice(0, 80);
+      if (!isAbsoluteForm(s)) return "\u5B89\u88C5\u524D\u7F00\u987B\u4E3A\u7EDD\u5BF9\u8DEF\u5F84\uFF08/ \u5F00\u5934\u3001win \u76D8\u7B26\u6216 UNC\uFF09: " + s.slice(0, 80);
+      return null;
+    }
+    function pkgNameViolation(pkg) {
+      const s = String(pkg == null ? "" : pkg);
+      return PKG_NAME_RE.test(s) ? null : "\u975E\u6CD5\u5305\u540D\uFF08\u5B57\u7B26\u96C6\u767D\u540D\u5355\u4E0D\u901A\u8FC7\uFF09: " + s.slice(0, 80);
+    }
+    function unitNameViolation(unit) {
+      const s = String(unit == null ? "" : unit);
+      if (!UNIT_NAME_RE.test(s)) return "\u975E\u6CD5\u5355\u5143\u540D\uFF08\u5B57\u7B26\u96C6/\u957F\u5EA6\u767D\u540D\u5355\u4E0D\u901A\u8FC7\uFF09: " + s.slice(0, 80);
+      const dot = s.indexOf(".");
+      if (dot >= 0 && !/\.service$/.test(s)) return "\u5355\u5143\u540D\u540E\u7F00\u4E0D\u53D7\u652F\u6301\uFF08\u4EC5\u5141\u8BB8 .service \u6216\u65E0\u540E\u7F00\uFF09: " + s.slice(0, 80);
+      return null;
+    }
+    function ledgerKey(raw, opts) {
+      const o = opts || {};
+      const max = typeof o.max === "number" ? o.max : 128;
+      const empty = o.empty == null ? "unknown" : o.empty;
+      const unsafe = o.unsafe == null ? "(other)" : o.unsafe;
+      if (typeof raw !== "string" || !raw) return empty;
+      const s = raw.length > max ? raw.slice(0, max) : raw;
+      if (UNSAFE_LEDGER_KEYS.indexOf(s) >= 0 || LEDGER_UNSAFE_RE.test(s)) return unsafe;
+      return s;
+    }
+    module2.exports = {
+      PKG_NAME_RE,
+      ARGV_UNSAFE_RE,
+      WIN_ABS_PATH_RE,
+      UNIT_NAME_RE,
+      UNSAFE_LEDGER_KEYS,
+      LEDGER_UNSAFE_KEYS_RE: LEDGER_UNSAFE_RE,
+      argvViolation,
+      pkgNameViolation,
+      unitNameViolation,
+      ledgerKey,
+      CONTROL_RE,
+      isAbsoluteForm,
+      prefixViolation
+    };
+  }
+});
+
+// src/platform/os/spawn.js
+var require_spawn = __commonJS({
+  "src/platform/os/spawn.js"(exports2, module2) {
+    "use strict";
+    var { spawn } = require("node:child_process");
+    function detached(cmd2, args, opts) {
+      const o = opts || {};
+      return spawn(cmd2, args, Object.assign({}, o, {
+        detached: true,
+        windowsHide: true,
+        // 默认 ignore；显式 undefined 也回落 ignore，避免 stdio:undefined 的歧义。
+        stdio: o.stdio === void 0 ? "ignore" : o.stdio
+      }));
+    }
+    function piped(cmd2, args, opts) {
+      const o = opts || {};
+      return spawn(cmd2, args, Object.assign({}, o, {
+        stdio: ["ignore", "pipe", "pipe"],
+        windowsHide: true,
+        detached: o.detached === true
+      }));
+    }
+    function detachedIgnored(cmd2, args, opts) {
+      const o = opts || {};
+      return spawn(cmd2, args, Object.assign({}, o, {
+        detached: true,
+        windowsHide: true,
+        stdio: "ignore"
+      }));
+    }
+    module2.exports = { detached, piped, detachedIgnored };
+  }
+});
+
+// src/platform/os/portable.js
+var require_portable = __commonJS({
+  "src/platform/os/portable.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var pidlookup = require_pidlookup();
+    var spawner = require_spawn();
+    var procOS = require_process();
+    var STOP_WAIT_CAP_MS = 3e3;
+    var NAP_MS = 150;
+    function nap(ms) {
+      try {
+        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+      } catch {
       }
-      if (!got.Exec) return null;
-      const categories = String(got.Categories || "");
-      const parsed = parseExecLine(got.Exec);
-      if (!parsed) return null;
-      const engine = engineOf(parsed.bin);
-      const claimsBrowser = /(^|;)WebBrowser(;|$)/.test(categories);
-      if (!claimsBrowser && engine === "other") return null;
-      if (engine === "other") return null;
-      return {
-        // id 恒为归一后的可执行文件路径：defaultId 靠它在清单里定位条目，三平台同一契约
-        id: parsed.bin.toLowerCase(),
-        name: got.Name || path2.basename(file, ".desktop"),
-        engine,
-        bin: parsed.bin,
-        baseArgs: parsed.baseArgs,
-        source: kind,
-        desktopFile: file
-      };
     }
-    function resolveLinuxBin(bin, canExec, env) {
-      const b = String(bin || "").trim();
-      if (!b) return null;
-      if (b.startsWith("/")) return canExec(b) ? b : null;
-      if (b.includes("/")) return null;
-      for (const dir of String(env.PATH || "").split(":")) {
-        if (!dir) continue;
-        const p = PJ(dir.replace(/\/+$/, ""), b);
-        if (canExec(p)) return p;
+    function readPidFile(pidFile) {
+      if (!pidFile) return null;
+      try {
+        const n = parseInt(String(fs2.readFileSync(pidFile, "utf8")).trim(), 10);
+        return Number.isInteger(n) && n > 0 ? n : null;
+      } catch {
+        return null;
+      }
+    }
+    function matchesAnchors(pid, anchors) {
+      if (!pid || !Array.isArray(anchors) || !anchors.length) return false;
+      const cmd2 = pidlookup.readCmdline(pid);
+      if (!cmd2) return false;
+      return anchors.some((a) => a && cmd2.indexOf(String(a)) !== -1);
+    }
+    var portOf = (o) => {
+      const p = Number(o && o.port);
+      return Number.isInteger(p) && p > 0 ? p : 0;
+    };
+    var pidFileOf = (o) => o && o.pidFile || null;
+    var anchorsOf = (o) => Array.isArray(o && o.anchors) ? o.anchors : [];
+    function findOurs(o) {
+      const anchors = anchorsOf(o);
+      const fp = readPidFile(pidFileOf(o));
+      if (fp !== null && pidlookup.isAlive(fp) && matchesAnchors(fp, anchors)) return { pid: fp, ownGroup: true };
+      const port = portOf(o);
+      if (port) {
+        const q = pidlookup.findListeningPid(port);
+        if (q !== null && q !== fp && matchesAnchors(q, anchors)) return { pid: q, ownGroup: false };
       }
       return null;
     }
-    function probeLinux(d) {
-      const { runOut, readFile, exists, listDir, canExec, env, home } = d;
-      const notes = [];
-      const note = (source, detail) => {
-        notes.push({ source, detail });
-      };
-      const found = /* @__PURE__ */ new Map();
-      const usable = (item) => {
-        const resolved = resolveLinuxBin(item.bin, canExec, env);
-        if (!resolved) {
-          note(item.source, "\u4E0D\u53EF\u6267\u884C: " + item.bin);
-          return null;
-        }
-        const k = resolved.toLowerCase();
-        const hit = found.get(k);
-        if (hit) {
-          if (!hit.sources.includes(item.source)) hit.sources.push(item.source);
-          return hit;
-        }
-        const v = Object.assign({}, item, { id: k, bin: resolved, sources: [item.source] });
-        found.set(k, v);
-        return v;
-      };
-      for (const { dir, kind } of desktopDirs(env, home)) {
-        let names = [];
+    function removePidFile(o) {
+      const f = pidFileOf(o);
+      if (f) {
         try {
-          names = listDir(dir).filter((f) => f.endsWith(".desktop"));
+          fs2.unlinkSync(f);
         } catch {
-          continue;
         }
-        for (const f of names) {
-          let text = null;
+      }
+    }
+    var portable = {
+      kind: "portable",
+      supportsUnits: false,
+      supportsTransient: true,
+      // 无操作 = 成功（与 systemd 的动词返回形态一致，调用方无需按 provider 分支）。
+      daemonReload() {
+        return true;
+      },
+      resetFailed() {
+        return true;
+      },
+      /** 拉起：spawn(detached)——POSIX 自成进程组（kill(-pid) 语义的前提）、win32 windowsHide +
+       *  CREATE_NEW_PROCESS_GROUP（NO-CONSOLE-WINDOW 纪律收口在 platform/os/spawn.js）。
+       *  调用方传来的 props（cgroup 语义）在此如实忽略：本档无内核强制可施加。
+       *  @param {{cmd:string[], env?:object, workingDir?:string, pidFile?:string, port?:number, anchors?:string[]}} o */
+      startTransient(o) {
+        const opts = o || {};
+        const cmd2 = opts.cmd || [];
+        if (!cmd2.length) throw new Error("portable \u62C9\u8D77\u62D2\u7EDD\uFF1A\u7A7A\u547D\u4EE4");
+        const child = spawner.detached(cmd2[0], cmd2.slice(1), {
+          cwd: opts.workingDir || void 0,
+          env: Object.assign({}, process.env, opts.env || {})
+        });
+        child.on("error", () => {
+        });
+        if (!child.pid) {
           try {
-            text = readFile(PJ(dir, f));
+            child.kill();
           } catch {
-            continue;
           }
-          const item = browserFromDesktop(text, kind, f);
-          if (item) usable(item);
+          throw new Error("portable \u62C9\u8D77\u5931\u8D25\uFF1Aspawn \u672A\u4EA7\u751F\u8FDB\u7A0B");
         }
-      }
-      let defaultId = null;
-      let defaultSource = null;
-      const fromMime = linuxDefaultFromMimeApps(readFile, exists, env, home, note);
-      if (fromMime) {
-        const item = usable(fromMime);
-        if (item) {
-          defaultId = item.id;
-          defaultSource = "mimeapps";
+        try {
+          child.unref();
+        } catch {
         }
-      }
-      const id = runOut("xdg-settings", ["get", "default-web-browser"]);
-      const desktopId = id && String(id).trim();
-      if (!defaultId && desktopId && /^[A-Za-z0-9._-]+\.desktop$/.test(desktopId)) {
-        for (const { dir } of desktopDirs(env, home)) {
-          const p = PJ(dir, desktopId);
-          let text = null;
+        if (opts.pidFile) {
           try {
-            if (exists(p)) text = readFile(p);
+            fs2.writeFileSync(opts.pidFile, String(child.pid));
           } catch {
-            continue;
           }
-          if (text === null) continue;
-          const item = browserFromDesktop(text, "xdg-settings", desktopId);
-          const used = item && usable(item);
-          if (used) {
-            defaultId = used.id;
-            defaultSource = "xdg-settings";
-            break;
+        }
+        return true;
+      },
+      /** 停止（有界同步复核）：终止我们的进程树，确认「端口锚点与 run.pid 锚点双双消失」才 true。
+       *  无可杀对象（含 run.pid 为陈旧/被 PID 复用）-> 清文件后如实 true（幂等）。 */
+      stopUnit(unit, o) {
+        const opts = o || {};
+        const ours = findOurs(opts);
+        if (!ours) {
+          removePidFile(opts);
+          return true;
+        }
+        try {
+          procOS.killTree(ours.pid, "SIGTERM", void 0, { ownGroup: ours.ownGroup });
+        } catch {
+        }
+        const budget = Math.max(0, Math.min(typeof opts.timeoutMs === "number" ? opts.timeoutMs : STOP_WAIT_CAP_MS, STOP_WAIT_CAP_MS));
+        const t0 = Date.now();
+        for (; ; ) {
+          if (!findOurs(opts)) {
+            removePidFile(opts);
+            return true;
+          }
+          if (Date.now() - t0 >= budget) break;
+          nap(NAP_MS);
+        }
+        try {
+          procOS.killTree(ours.pid, "SIGKILL", void 0, { ownGroup: ours.ownGroup });
+        } catch {
+        }
+        nap(NAP_MS);
+        if (!findOurs(opts)) {
+          removePidFile(opts);
+          return true;
+        }
+        return false;
+      },
+      /** 活跃判定（三态）：port 与 pidFile 都缺 = 无从查询 -> null，删除保护路径不得把它当「已停止」。
+       *  anchors 为空时降级为「端口有监听即活跃」（monitor.probeInstance 同口径，该调用方本就以此判在线）；
+       *  杀进程（stopUnit）仍要求锚点命中 —— 判定可宽，动手必严。
+       *  存活 pid 的 cmdline 读不到 = 分不清「他人复用」与「查询失败」-> null。 */
+      isUnitActive(unit, o) {
+        const opts = o || {};
+        if (findOurs(opts)) return true;
+        const port = portOf(opts);
+        const pidFile = pidFileOf(opts);
+        const anchors = anchorsOf(opts);
+        if (!port && !pidFile) return null;
+        if (!anchors.length) {
+          const fp2 = readPidFile(pidFile);
+          if (fp2 !== null && pidlookup.isAlive(fp2)) return true;
+          if (port) {
+            const q = pidlookup.findListeningPid(port);
+            if (q !== null) return true;
+            if (fp2 !== null) return false;
+            return null;
           }
+          return fp2 !== null ? false : null;
+        }
+        const fp = readPidFile(pidFile);
+        if (fp !== null && pidlookup.isAlive(fp) && !pidlookup.readCmdline(fp)) return null;
+        return false;
+      },
+      // portable 无 systemd transient 单元文件；run.pid 的清理归 cleanTransient。
+      transientUnitFile() {
+        return null;
+      },
+      /** 清理同名残留：先停掉仍活着的旧进程（重启自愈路径：旧进程未监听端口时端口探测拦不住），再清 run.pid。 */
+      cleanTransient(unit, o) {
+        const opts = o || {};
+        const errors = [];
+        if (this.stopUnit(unit, Object.assign({}, opts, { timeoutMs: 1500 })) === false) errors.push("stop-unconfirmed");
+        removePidFile(opts);
+        return { ok: errors.length === 0, errors };
+      },
+      /** 返回值只表示「是否改动了内核强制」；governor 不因 false 走降级分支 —— 违规处置链本就平台无关。 */
+      setLimits() {
+        return false;
+      }
+    };
+    module2.exports = { portable, findOurs, matchesAnchors, _test: { readPidFile, matchesAnchors, findOurs } };
+  }
+});
+
+// src/platform/os/service.js
+var require_service = __commonJS({
+  "src/platform/os/service.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var exec = require_exec();
+    var input = require_input();
+    var execPath = require_exec_path();
+    var { portable } = require_portable();
+    var CapabilityError = class extends Error {
+      constructor(msg) {
+        super(msg);
+        this.name = "CapabilityError";
+        this.code = "CAPABILITY_UNSUPPORTED";
+      }
+    };
+    var PLATFORM = process.platform;
+    function run(cmd2, args, opts) {
+      return exec.run(cmd2, args, opts || {});
+    }
+    var UNIT_NAME_RE = input.UNIT_NAME_RE;
+    function unitNameViolation(unit) {
+      return input.unitNameViolation(unit);
+    }
+    var systemd = {
+      kind: "systemd",
+      supportsUnits: true,
+      supportsTransient: true,
+      daemonReload() {
+        try {
+          return run("systemctl", ["--user", "daemon-reload"], { timeoutMs: 15e3 }) !== null;
+        } catch {
+          return false;
+        }
+      },
+      stopUnit(unit, opts) {
+        if (unitNameViolation(unit)) return false;
+        const o = opts || {};
+        try {
+          return run("systemctl", ["--user", "stop", unit], { timeoutMs: o.timeoutMs || 15e3 }) !== null;
+        } catch {
+          return false;
+        }
+      },
+      // run() 失败返回 null 而不抛，try/catch 包裹会恒返回 true；如实回传成败。
+      resetFailed(unit) {
+        if (unitNameViolation(unit)) return false;
+        return run("systemctl", ["--user", "reset-failed", unit], { timeoutMs: 1e4 }) !== null;
+      },
+      /** 单元活跃判定（三态）：确认 active -> true；确认不活跃 -> false；查询未完成 -> null（未知）。
+       *  run() 失败只返回 null，「查询未完成」不可折成 false：instance/ops.js 删除数据目录前
+       *  按「!== false 才放行删除」消费本函数，折假即超时窗口内误删沙箱数据。 */
+      isUnitActive(unit) {
+        if (!unit) return true;
+        if (unitNameViolation(unit)) return false;
+        try {
+          const r = exec.runDetail("systemctl", ["--user", "is-active", unit], { timeoutMs: 8e3 });
+          if (r.timedOut) return null;
+          const state = String(r.stdout || "").trim();
+          if (state === "active") return true;
+          if (state || r.code !== null) return false;
+          return null;
+        } catch {
+          return null;
         }
-      }
-      if (!desktopId) note("xdg-settings", "\u65E0\u8F93\u51FA");
-      else if (defaultSource === "xdg-settings") note("xdg-settings", "\u9ED8\u8BA4=" + defaultId);
-      else note("xdg-settings", "\u62A5\u51FA " + desktopId + (defaultId ? "\uFF08\u9ED8\u8BA4\u5DF2\u7531 " + defaultSource + " \u5B9A\u51FA\uFF09" : " \u4F46\u4E0D\u53EF\u7528"));
-      if (!defaultId && found.size === 1) {
-        defaultId = [...found.keys()][0];
-        defaultSource = "only-installed";
-      }
-      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
-    }
-    function linuxDefaultFromMimeApps(readFile, exists, env, home, note) {
-      const cfgHome = env.XDG_CONFIG_HOME || PJ(home, ".config");
-      const cfgDirs = String(env.XDG_CONFIG_DIRS || "/etc/xdg").split(":").filter(Boolean);
-      const dataDirs = String(env.XDG_DATA_DIRS || "/usr/local/share:/usr/share").split(":").filter(Boolean);
-      const files = [
-        PJ(cfgHome, "mimeapps.list"),
-        ...cfgDirs.map((d) => PJ(d, "mimeapps.list")),
-        ...dataDirs.map((d) => PJ(d, "applications", "mimeapps.list"))
-      ];
-      for (const f of files) {
-        if (!exists(f)) continue;
-        let text = null;
+      },
+      transientUnitFile(unit) {
+        if (unitNameViolation(unit)) return null;
+        let uid = 0;
         try {
-          text = readFile(f);
+          uid = os2.userInfo().uid;
         } catch {
-          continue;
         }
-        const id = mimeAppsDefault(text);
-        if (!id) continue;
-        note("mimeapps", path2.basename(f) + " -> " + id);
-        for (const { dir, kind } of desktopDirs(env, home)) {
-          const p = PJ(dir, id);
-          if (!exists(p)) continue;
-          let dt = null;
-          try {
-            dt = readFile(p);
-          } catch {
-            continue;
-          }
-          const item = browserFromDesktop(dt, kind, id);
-          if (item) return item;
+        const rt = process.env.XDG_RUNTIME_DIR || "/run/user/" + uid;
+        return path2.join(rt, "systemd", "transient", unit + ".service");
+      },
+      /** 清理 stale transient 单元：stop/reset-failed/删单元文件/daemon-reload。
+       *  必须 reload：删除文件后 systemd 仍缓存该单元为 loaded，否则 systemd-run 拒绝重建同名单元。
+       *  返回 {ok, errors}：stop/reset-failed 对「从未加载的单元」非零退出属正常，不计入 ok；
+       *  硬失败只有删单元文件与 daemon-reload（run() 失败返回 null 不抛，成败须如实回传）。 */
+      cleanTransient(unit) {
+        const errors = [];
+        const bad = unitNameViolation(unit);
+        if (bad) return { ok: false, errors: [bad] };
+        exec.runDetail("systemctl", ["--user", "stop", unit + ".service"], { timeoutMs: 1e4 });
+        exec.runDetail("systemctl", ["--user", "reset-failed", unit + ".service"], { timeoutMs: 1e4 });
+        let unlinkOk = true;
+        try {
+          const f = this.transientUnitFile(unit);
+          if (f) fs2.unlinkSync(f);
+        } catch {
+          unlinkOk = false;
+          errors.push("unlink " + unit + ".service");
         }
-        return null;
+        if (!exec.runDetail("systemctl", ["--user", "daemon-reload"], { timeoutMs: 15e3 }).ok) errors.push("daemon-reload");
+        return { ok: unlinkOk && errors.length === 0, errors };
+      },
+      /** 以 transient 单元启动（独立 cgroup；每实例隔离）。
+       *  @param {{unit:string, cmd:string[], env?:object, props?:string[], workingDir?:string, description?:string, timeoutMs?:number}} o
+       *    props 为 systemd 属性（如 KillMode=process、MemoryMax=8G），平台层只拼装成 --property，不解释语义。 */
+      startTransient(o) {
+        const opts = o || {};
+        const bad = unitNameViolation(opts.unit);
+        if (bad) throw new Error("systemd-run \u62D2\u7EDD: " + bad);
+        const args = ["--user", "--unit=" + opts.unit];
+        if (opts.description) args.push("--description=" + opts.description);
+        for (const p of opts.props || []) args.push("--property=" + p);
+        for (const [k, v] of Object.entries(opts.env || {})) args.push("--setenv=" + k + "=" + v);
+        if (opts.workingDir) args.push("--working-directory=" + opts.workingDir);
+        args.push("--", ...opts.cmd || []);
+        const r = exec.runDetail("systemd-run", args, { timeoutMs: opts.timeoutMs || 2e4 });
+        if (!r.ok) throw new Error("systemd-run \u5931\u8D25: " + (r.error || "unknown") + (r.stderr ? " | " + String(r.stderr).trim() : ""));
+        return true;
+      },
+      /** 运行期改限额（W3 动态化）：systemctl --user set-property 立即生效，无需重启单元。
+       *  必带 --runtime：transient 单元本不落盘，不带它会把 drop-in 写进用户配置目录，陈旧下限永久黏住。
+       *  值只来自 sandbox.unitProps 同源的 alloc（平台层翻译语义、不决定数额）。 */
+      setLimits(unit, alloc) {
+        if (unitNameViolation(unit)) return false;
+        const a = alloc || {};
+        const props = [];
+        if (a.memoryMax) props.push("MemoryMax=" + a.memoryMax);
+        if (a.memoryHigh) props.push("MemoryHigh=" + a.memoryHigh);
+        if (a.cpuQuota) props.push("CPUQuota=" + a.cpuQuota);
+        if (!props.length) return false;
+        return exec.runDetail(
+          "systemctl",
+          ["--user", "set-property", "--runtime", unit].concat(props),
+          { timeoutMs: 1e4 }
+        ).ok;
       }
-      note("mimeapps", "\u65E0\u9ED8\u8BA4\u9879");
-      return null;
-    }
-    function mimeAppsDefault(text) {
-      let inDefault = false;
-      for (const line of String(text || "").split(/\r?\n/)) {
-        if (/^\s*\[/.test(line)) {
-          inDefault = /^\s*\[Default Applications\]\s*$/.test(line);
-          continue;
+    };
+    function makeUnsupported(kind, label) {
+      return {
+        kind,
+        supportsUnits: false,
+        supportsTransient: false,
+        daemonReload() {
+          return false;
+        },
+        stopUnit() {
+          throw new CapabilityError(label + "\uFF1A\u4E0D\u652F\u6301\u4EE5\u7528\u6237\u5355\u5143\u65B9\u5F0F\u7BA1\u7406\u88AB\u7BA1\u5B9E\u4F8B");
+        },
+        resetFailed() {
+          return false;
+        },
+        isUnitActive(unit) {
+          return unit ? false : true;
+        },
+        transientUnitFile() {
+          return null;
+        },
+        // 无 transient 单元可清 = 成功；返回形态与 systemd 一致，调用方无需分支。
+        cleanTransient() {
+          return { ok: true, errors: [] };
+        },
+        startTransient() {
+          throw new CapabilityError(label + "\uFF1A\u4E0D\u652F\u6301\u62C9\u8D77\u5B9E\u4F8B\u8231\uFF08portable \u6863\u672A\u542F\u7528\uFF09");
+        },
+        setLimits() {
+          return false;
         }
-        if (!inDefault) continue;
-        const m = line.match(/^\s*x-scheme-handler\/https?\s*=\s*(.*)$/i);
-        if (!m) continue;
-        const ids = m[1].split(";").map((s) => s.trim()).filter((s) => /^[A-Za-z0-9._-]+\.desktop$/.test(s));
-        if (ids.length) return ids[0];
+      };
+    }
+    var NONE = makeUnsupported("none", "\u5F53\u524D\u5E73\u53F0\u65E0\u670D\u52A1\u7BA1\u7406\u5668");
+    var _systemdRun = null;
+    function hasSystemdRun() {
+      if (_systemdRun === null) {
+        _systemdRun = !!execPath.resolveExecutable("systemd-run") || exec.runOut("systemd-run", ["--version"], { timeoutMs: 3e3 }) !== null;
       }
-      return null;
+      return _systemdRun;
     }
-    function probe(platform, d) {
-      const pl = platform || process.platform;
-      const dd = Object.assign({}, d, { canExec: d.canExec || ((p) => isExecutableFile(p, pl)) });
-      if (pl === "win32") return probeWin(dd);
-      if (pl === "darwin") return probeMac(dd);
-      return probeLinux(dd);
+    function current() {
+      if (PLATFORM === "linux") return hasSystemdRun() ? systemd : portable;
+      if (PLATFORM === "darwin" || PLATFORM === "win32") return portable;
+      return NONE;
     }
-    var CACHE = /* @__PURE__ */ Object.create(null);
-    function inventory(platform, o) {
-      const ov = o || {};
+    module2.exports = { current, CapabilityError, kind: () => current().kind, PLATFORM, UNIT_NAME_RE, unitNameViolation, _testProviders: { systemd, portable, NONE } };
+  }
+});
+
+// src/platform/os/notify.js
+var require_notify = __commonJS({
+  "src/platform/os/notify.js"(exports2, module2) {
+    "use strict";
+    var spawnOS = require_spawn();
+    function appleScriptString(s) {
+      return JSON.stringify(String(s));
+    }
+    function powerShellString(s) {
+      return "'" + String(s).replace(/'/g, "''") + "'";
+    }
+    function notifyCommand(platform, title, body) {
       const pl = platform || process.platform;
-      const now = ov.now || (() => Date.now());
-      const ttl = ov.ttlMs === void 0 ? 6e4 : ov.ttlMs;
-      const cached = CACHE[pl];
-      if (!ov.force && cached && now() - cached.at < ttl) return Object.assign({ cached: true }, cached.value);
-      const runOut = ov.runOut || ((bin, args) => exec.runOut(bin, args, { timeoutMs: PROBE_TIMEOUT_MS }));
-      const readFile = ov.readFile || ((p) => fs2.readFileSync(p, "utf8"));
-      const exists = ov.exists || ((p) => fs2.existsSync(p));
-      const listDir = ov.listDir || ((p) => fs2.readdirSync(p));
-      let value;
-      try {
-        value = probe(pl, { runOut, readFile, exists, listDir, canExec: ov.canExec, env: ov.env || process.env, home: ov.home || os2.homedir() });
-      } catch (e) {
-        value = { browsers: [], defaultId: null, defaultSource: null, probed: [{ source: "probe-error", detail: String(e && e.message || e) }] };
+      const t = String(title == null ? "" : title);
+      const b = String(body == null ? "" : body);
+      if (pl === "linux") {
+        return { cmd: "notify-send", args: ["-a", "dsh-supervisor", t, b] };
       }
-      value.at = now();
-      value.platform = pl;
-      value.browsers.sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
-      CACHE[pl] = { at: now(), value };
-      return Object.assign({ cached: false }, value);
+      if (pl === "darwin") {
+        const script = "display notification " + appleScriptString(b) + " with title " + appleScriptString(t);
+        return { cmd: "osascript", args: ["-e", script] };
+      }
+      if (pl === "win32") {
+        const ps = [
+          '[reflection.assembly]::loadwithpartialname("System.Windows.Forms") | Out-Null',
+          '[reflection.assembly]::loadwithpartialname("System.Drawing") | Out-Null',
+          "$n = New-Object System.Windows.Forms.NotifyIcon",
+          "$n.Icon = [System.Drawing.SystemIcons]::Information",
+          "$n.Visible = $true",
+          "$n.ShowBalloonTip(4000, " + powerShellString(t) + ", " + powerShellString(b) + ", [System.Windows.Forms.ToolTipIcon]::None)",
+          "Start-Sleep -Milliseconds 4200",
+          "$n.Dispose(); $n.Visible = $false"
+        ].join("; ");
+        return { cmd: "powershell", args: ["-NoProfile", "-NonInteractive", "-Command", ps] };
+      }
+      return null;
     }
-    function invalidate(platform) {
-      if (platform) delete CACHE[platform];
-      else for (const k of Object.keys(CACHE)) delete CACHE[k];
+    function notify(title, body, onError) {
+      try {
+        const plan = notifyCommand(process.platform, title, body);
+        if (!plan) return false;
+        const c = spawnOS.detachedIgnored(plan.cmd, plan.args);
+        c.on("error", () => {
+          if (onError) onError();
+        });
+        c.unref();
+        return true;
+      } catch {
+        if (onError) onError();
+        return false;
+      }
     }
-    module2.exports = {
-      inventory,
-      invalidate,
-      probe,
-      probeWin,
-      probeMac,
-      probeLinux,
-      engineOf,
-      tokenizeExec,
-      parseExecLine,
-      regValueOf,
-      expandEnvVars,
-      exeFromCmdLine,
-      regSubkeys,
-      regKeyFull,
-      regValueTargets,
-      safeRegKeyPart,
-      browserFromDesktop,
-      desktopDirs,
-      resolveLinuxBin,
-      mimeAppsDefault,
-      linuxDefaultFromMimeApps,
-      WIN_APP_PATHS,
-      PROBE_TIMEOUT_MS
-    };
+    module2.exports = { notify, notifyCommand, appleScriptString, powerShellString };
   }
 });
 
@@ -6055,8 +6307,10 @@ var require_browser = __commonJS({
     var desktop = require_desktop();
     var CAPABILITY_PROFILES = require_capability_profile();
     var { resolveExecutable, isExecutableFile } = require_exec_path();
+    var environment = require_environment();
     var detector = require_browser_inventory();
     var { engineOf } = detector;
+    var { allocTempDir, removeTreeDeferred } = require_fs();
     function isSafeHttpUrl(url) {
       try {
         const u = new URL(String(url));
@@ -6092,7 +6346,7 @@ var require_browser = __commonJS({
     var HANDEDOFF_TEXT = "\u5DF2\u628A\u5730\u5740\u4EA4\u7ED9\u7CFB\u7EDF\uFF0C\u4F46\u8FD9\u6B21\u542F\u52A8\u62FF\u4E0D\u5230\u7A97\u53E3\u662F\u5426\u51FA\u73B0\u7684\u8BC1\u636E";
     var FAILURE_TEXT = {
       "unsafe-url": "\u5730\u5740\u4E0D\u662F http(s) \u7EDD\u5BF9 URL\uFF0C\u5DF2\u62D2\u7EDD\u4EA4\u7ED9\u6D4F\u89C8\u5668",
-      "no-launcher": "\u672A\u80FD\u786E\u5B9A\u8BE5\u7528\u54EA\u4E2A\u6D4F\u89C8\u5668\u6253\u5F00\uFF08\u7CFB\u7EDF\u91CC\u8BFB\u4E0D\u5230\u9ED8\u8BA4\u6D4F\u89C8\u5668\u8BBE\u7F6E\uFF09\uFF0C\u8BF7\u5728\u7CFB\u7EDF\u8BBE\u7F6E\u91CC\u6307\u5B9A\u9ED8\u8BA4\u6D4F\u89C8\u5668\u6216\u624B\u52A8\u6253\u5F00\u8BE5\u5730\u5740",
+      "no-launcher": "\u672C\u673A\u672A\u63A2\u5230\u53EF\u542F\u52A8\u7684\u6D4F\u89C8\u5668\uFF08\u6216\u6240\u9009\u6D4F\u89C8\u5668\u5DF2\u4E0D\u53EF\u6267\u884C\uFF09\uFF0C\u8BF7\u5728\u9762\u677F\u7684\u73AF\u5883\u8868\u5355\u91CC\u786E\u8BA4\uFF0C\u6216\u624B\u52A8\u6253\u5F00\u8BE5\u5730\u5740",
       "spawn-failed": "\u6D4F\u89C8\u5668\u542F\u52A8\u5931\u8D25\uFF08\u7CFB\u7EDF\u62D2\u7EDD\u4E86\u8BE5\u547D\u4EE4\uFF09",
       "exit-nonzero": "\u7CFB\u7EDF\u62D2\u7EDD\u4E86\u8FD9\u4E2A\u5730\u5740\uFF08\u542F\u52A8\u547D\u4EE4\u975E 0 \u9000\u51FA\uFF09\uFF0C\u7A97\u53E3\u672A\u51FA\u73B0",
       "killed-by-signal": "\u6D4F\u89C8\u5668\u542F\u52A8\u547D\u4EE4\u88AB\u7CFB\u7EDF\u7EC8\u6B62\uFF0C\u7A97\u53E3\u672A\u51FA\u73B0",
@@ -6100,17 +6354,10 @@ var require_browser = __commonJS({
       "unsupported-platform": "\u5F53\u524D\u5E73\u53F0\u4E0D\u5728\u4EA7\u54C1\u652F\u6301\u7684\u684C\u9762\u5E73\u53F0\u5185\uFF0C\u8BF7\u624B\u52A8\u6253\u5F00\u8BE5\u5730\u5740"
     };
     function ownsItsWindow(via, platform) {
+      if (via === "isolated") return true;
       if (via !== "dispatcher") return false;
       return platform !== "win32";
     }
-    function pickLauncher(platform, inv) {
-      const list = inv && Array.isArray(inv.browsers) ? inv.browsers : [];
-      const id = inv && inv.defaultId;
-      const hit = id ? list.find((b) => b.id === id) : null;
-      if (hit) return { browser: hit, how: inv && inv.defaultSource || "default" };
-      if (list.length === 1) return { browser: list[0], how: "only-installed" };
-      return { browser: null, how: list.length ? "no-default" : "none-found" };
-    }
     function formOfBin(pl, b) {
       const engine = b && b.bin ? engineOf(b.bin) : "other";
       return { engine, direct: !!b && (engine !== "other" || pl === "win32") };
@@ -6118,30 +6365,118 @@ var require_browser = __commonJS({
     function openPlan(platform, url, opts) {
       const o = opts || {};
       const pl = platform || process.platform;
-      const picked = o.pick || pickLauncher(pl, o.inventory);
+      const picked = o.pick || environment.pickLauncher(pl, o.inventory, o.preference);
       const b = picked.browser;
       const form = formOfBin(pl, b);
       if (form.direct) {
         return {
           bin: b.bin,
+          args: (b.baseArgs || []).concat([url]),
           engine: form.engine,
           via: "browser",
+          isolated: false,
+          watch: false,
+          envKind: "sys",
           pick: picked.how,
-          baseArgs: (b.baseArgs || []).concat([url]),
+          stale: picked.stale === true,
           exitIsEvidence: ownsItsWindow("browser", pl)
         };
       }
       const c = openCommand(pl, url);
-      if (!c) return { bin: null, engine: form.engine, via: "none", pick: picked.how, baseArgs: [], exitIsEvidence: false };
+      if (!c) return {
+        bin: null,
+        args: [url],
+        engine: form.engine,
+        via: "none",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
+        pick: picked.how,
+        stale: picked.stale === true,
+        exitIsEvidence: false
+      };
       return {
         bin: c.cmd,
+        args: c.args,
         engine: "other",
         via: "dispatcher",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
         pick: picked.how,
-        baseArgs: c.args,
+        stale: picked.stale === true,
         exitIsEvidence: ownsItsWindow("dispatcher", pl)
       };
     }
+    function isolatedPlan(platform, url, opts) {
+      const o = opts || {};
+      const pl = platform || process.platform;
+      const picked = o.pick || environment.pickLauncher(pl, o.inventory, o.preference);
+      const b = picked.browser;
+      const form = formOfBin(pl, b);
+      const baseArgs = b && b.baseArgs || [];
+      const common = { pick: picked.how, stale: picked.stale === true, engine: form.engine };
+      const plain = (bin, label) => Object.assign(common, {
+        bin,
+        args: baseArgs.concat([url]),
+        via: "browser",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
+        label,
+        exitIsEvidence: ownsItsWindow("browser", pl)
+      });
+      if (form.direct && form.engine === "chromium" && o.profileDir) {
+        const args = ["--incognito", "--user-data-dir=" + o.profileDir];
+        if (Array.isArray(o.size) && o.size.length === 2) args.push("--window-size=" + o.size[0] + "," + o.size[1]);
+        if (o.lang) args.push("--lang=" + o.lang);
+        args.push("--no-first-run", "--no-default-browser-check", "--disable-session-crashed-bubble");
+        return Object.assign(common, {
+          bin: b.bin,
+          args: [...baseArgs, ...args, url],
+          via: "isolated",
+          isolated: true,
+          watch: true,
+          envKind: "anti",
+          label: "chromium",
+          exitIsEvidence: ownsItsWindow("isolated", pl)
+        });
+      }
+      if (form.direct && form.engine === "firefox" && o.profileDir) {
+        return Object.assign(common, {
+          bin: b.bin,
+          args: [...baseArgs, "--no-remote", "--profile", o.profileDir, "-private-window", url],
+          via: "isolated",
+          isolated: true,
+          watch: true,
+          envKind: "anti",
+          label: "firefox",
+          exitIsEvidence: ownsItsWindow("isolated", pl)
+        });
+      }
+      if (form.direct) return plain(b.bin, path2.basename(b.bin));
+      const c = openCommand(pl, url);
+      if (!c) return Object.assign(common, {
+        bin: null,
+        args: [url],
+        via: "none",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
+        label: null,
+        exitIsEvidence: false
+      });
+      return Object.assign(common, {
+        bin: c.cmd,
+        args: c.args,
+        via: "dispatcher",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
+        label: c.cmd,
+        exitIsEvidence: ownsItsWindow("dispatcher", pl)
+      });
+    }
     function observeSpawn(child, windowMs, setTimeoutFn) {
       return new Promise((resolve) => {
         let settled = false;
@@ -6159,24 +6494,72 @@ var require_browser = __commonJS({
       });
     }
     var OPEN_OBSERVE_MS = 1500;
-    function launchDiagnostics(inv, plan, how) {
+    var LOGIN_TZ_POOL = ["Asia/Shanghai", "Asia/Seoul", "Asia/Tokyo", "Asia/Singapore", "Europe/Berlin", "Europe/London", "Europe/Paris", "America/New_York", "America/Los_Angeles", "Australia/Sydney"];
+    var LOGIN_LANG_POOL = ["zh-CN", "en-US", "en-GB", "ja-JP", "ko-KR", "de-DE", "fr-FR", "zh-TW"];
+    var LOGIN_SIZE_POOL = [[1280, 800], [1366, 768], [1440, 900], [1536, 864], [1600, 900], [1680, 1050], [1920, 1080], [1024, 768], [1152, 864], [1280, 720]];
+    function loginEnv(rand) {
+      const pick = (arr) => arr[Math.floor((typeof rand === "function" ? rand() : Math.random()) * arr.length)];
+      const size = pick(LOGIN_SIZE_POOL);
+      const lang = pick(LOGIN_LANG_POOL);
+      const tz = pick(LOGIN_TZ_POOL);
+      const sysEnv = Object.assign({}, process.env, desktop.sessionEnv());
+      return { size, lang, sysEnv, antiEnv: Object.assign({}, sysEnv, { TZ: tz, LANG: lang }) };
+    }
+    function launchDiagnostics(inv, plan, picked) {
       const found = (inv && inv.browsers || []).map((b) => ({
         name: b.name,
         engine: b.engine || engineOf(b.bin),
         via: (b.sources && b.sources.length ? b.sources : [b.source || "unknown"]).join("+")
       }));
+      const pk = picked || {};
       return {
         platform: inv && inv.platform || null,
-        pick: how || plan && plan.pick || "none",
+        pick: pk.how || plan && plan.pick || "none",
         bin: plan && plan.bin || null,
         default: inv && inv.defaultId ? { id: inv.defaultId, source: inv.defaultSource || null } : null,
+        preference: pk.wanted ? { id: pk.wanted, matched: pk.stale !== true } : null,
         found,
         probed: inv && inv.probed || []
       };
     }
+    function _spawnDetachedIgnored(bin, args) {
+      try {
+        const p = spawnOS.detachedIgnored(bin, args);
+        p.on("error", () => {
+        });
+        p.unref();
+        return p;
+      } catch {
+        return null;
+      }
+    }
+    function _spawnDetached(bin, args, env, onExit) {
+      let child;
+      try {
+        child = spawnOS.detachedIgnored(bin, args, { env: env || process.env });
+      } catch {
+        return null;
+      }
+      child.on("error", () => {
+      });
+      if (typeof onExit === "function") child.on("exit", () => {
+        try {
+          onExit();
+        } catch {
+        }
+      });
+      child.unref();
+      return child;
+    }
+    function binAvailable(bin) {
+      if (!bin) return false;
+      if (bin.includes("/") || bin.includes("\\") || /^[A-Za-z]:[\\/]/.test(bin)) return isExecutableFile(bin);
+      return resolveExecutable(bin) !== null;
+    }
     async function openBrowser(url, o) {
       const opts = o || {};
       const pl = opts.platform || process.platform;
+      const intent = opts.intent === "isolated-login" ? "isolated-login" : "plain";
       if (!isSafeHttpUrl(url)) {
         return outcome({ ok: false, reason: "unsafe-url", url: String(url || ""), evidence: null });
       }
@@ -6184,41 +6567,64 @@ var require_browser = __commonJS({
         return outcome({ ok: false, reason: "unsupported-platform", url, evidence: { platform: pl } });
       }
       const observeMs = opts.observeMs === void 0 ? OPEN_OBSERVE_MS : opts.observeMs;
-      const spawnWith = typeof opts.spawn === "function" ? opts.spawn : _spawnDetachedIgnored;
+      const spawnWith = typeof opts.spawn === "function" ? opts.spawn : intent === "isolated-login" ? _spawnDetached : _spawnDetachedIgnored;
       const avail = typeof opts.binAvailable === "function" ? opts.binAvailable : binAvailable;
       const observe = typeof opts.observe === "function" ? opts.observe : observeSpawn;
-      const resolveInv = typeof opts.resolveInventory === "function" ? opts.resolveInventory : ((platform, deps) => detector.inventory(platform, deps));
+      const resolveInv = typeof opts.resolveInventory === "function" ? opts.resolveInventory : ((platform, deps) => environment.browsers(Object.assign({ platform }, deps)));
       const inv = "inventory" in opts ? opts.inventory : resolveInv(pl, opts.resolveDeps || {});
-      const plan = openPlan(pl, url, { inventory: inv, pick: opts.pick });
-      const diagnostics = launchDiagnostics(inv, plan, plan.pick);
+      const pref = "preference" in opts ? opts.preference : void 0;
+      const login = intent === "isolated-login" ? loginEnv(opts.rand) : null;
+      const picked = opts.pick || environment.pickLauncher(pl, inv, pref);
+      const form = formOfBin(pl, picked.browser);
+      const canIsolate = intent === "isolated-login" && form.direct && (form.engine === "chromium" || form.engine === "firefox");
+      let profile = null;
+      if (canIsolate) {
+        const alloc = typeof opts.allocProfile === "function" ? opts.allocProfile : (() => allocTempDir("dsh-login-"));
+        try {
+          profile = opts.profileDir || alloc();
+        } catch {
+          profile = null;
+        }
+      }
+      const plan = intent === "isolated-login" ? isolatedPlan(pl, url, { inventory: inv, pick: picked, profileDir: profile, size: login.size, lang: login.lang }) : openPlan(pl, url, { inventory: inv, pick: picked });
+      const diagnostics = launchDiagnostics(inv, plan, picked);
       const evidence = {
         bin: plan.bin,
         engine: plan.engine,
         via: plan.via,
         ownsWindow: plan.exitIsEvidence === true,
+        isolated: plan.isolated === true,
+        profile: plan.isolated ? profile : null,
+        watch: plan.watch === true,
         exitCode: null,
         exitSignal: null,
         error: null,
         diagnostics
       };
+      const deferredRemove = typeof opts.rmTree === "function" ? opts.rmTree : removeTreeDeferred;
+      const fail = (reason, patch) => {
+        if (profile) deferredRemove(profile, 0);
+        return outcome(Object.assign({ ok: false, reason, url, evidence }, patch));
+      };
       const desktopAvailable = typeof opts.desktopAvailable === "function" ? opts.desktopAvailable : desktop.sessionAvailable;
       if (pl === "linux" && !desktopAvailable()) {
-        return outcome({ ok: false, reason: "no-desktop-session", url, evidence });
+        return fail("no-desktop-session");
       }
-      if (!plan.bin) {
-        return outcome({ ok: false, reason: "no-launcher", url, evidence });
-      }
-      if (!avail(plan.bin)) {
-        return outcome({ ok: false, reason: "no-launcher", url, evidence });
+      if (!plan.bin) return fail("no-launcher");
+      if (!avail(plan.bin)) return fail("no-launcher");
+      if (canIsolate && !profile) {
+        evidence.error = "\u4E34\u65F6 profile \u76EE\u5F55\u5206\u914D\u5931\u8D25";
+        return fail("spawn-failed");
       }
       let child;
       try {
-        child = spawnWith(plan.bin, plan.baseArgs);
+        child = intent === "isolated-login" ? spawnWith(plan.bin, plan.args, plan.envKind === "anti" ? login.antiEnv : login.sysEnv, plan.watch ? opts.onExit : void 0) : spawnWith(plan.bin, plan.args);
       } catch (e) {
         evidence.error = e && e.code || String(e);
-        return outcome({ ok: false, reason: "spawn-failed", url, evidence });
+        return fail("spawn-failed");
       }
-      if (!child) return outcome({ ok: false, reason: "spawn-failed", url, evidence });
+      if (!child) return fail("spawn-failed");
+      if (evidence.profile) deferredRemove(evidence.profile, opts.profileMs === void 0 ? 30 * 60 * 1e3 : opts.profileMs);
       const seen = await observe(child, observeMs, opts.setTimeout);
       evidence.error = seen.stage === "error" ? String(seen.code) : null;
       evidence.exitCode = seen.code === void 0 ? null : seen.code;
@@ -6236,137 +6642,17 @@ var require_browser = __commonJS({
       }
       return outcome({ ok: true, confirmed: exitDecides, handedOff: !exitDecides, url, evidence });
     }
-    function listBrowsers(o) {
-      const ov = o || {};
-      const inv = detector.inventory(ov.platform, { force: ov.force === true });
-      return {
-        ok: true,
-        platform: inv.platform,
-        cached: inv.cached === true,
-        default: inv.defaultId ? { id: inv.defaultId, source: inv.defaultSource || null } : null,
-        browsers: (inv.browsers || []).map((b) => ({
-          id: b.id,
-          name: b.name,
-          engine: b.engine || engineOf(b.bin),
-          bin: b.bin,
-          sources: b.sources && b.sources.length ? b.sources : [b.source],
-          isDefault: b.id === inv.defaultId
-        })),
-        probed: inv.probed || []
-      };
-    }
-    function invalidateBrowsers(platform) {
-      return detector.invalidate(platform);
-    }
-    function _spawnDetachedIgnored(bin, args) {
-      try {
-        const p = spawnOS.detachedIgnored(bin, args);
-        p.on("error", () => {
-        });
-        p.unref();
-        return p;
-      } catch {
-        return null;
-      }
-    }
-    function _spawnDetached(bin, args, env, onExit) {
-      let child;
-      try {
-        child = spawnOS.detachedIgnored(bin, args, { env: env || process.env });
-      } catch {
-        return null;
-      }
-      child.on("error", () => {
-      });
-      if (typeof onExit === "function") child.on("exit", () => {
-        try {
-          onExit();
-        } catch {
-        }
-      });
-      child.unref();
-      return child;
-    }
-    function isolatedPlan(platform, url, opts) {
-      const o = opts || {};
-      const pl = platform || process.platform;
-      const picked = o.pick || pickLauncher(pl, o.inventory);
-      const b = picked.browser;
-      const form = formOfBin(pl, b);
-      const baseArgs = b && b.baseArgs || [];
-      if (form.direct && form.engine === "chromium" && o.profileDir) {
-        const args = ["--incognito", "--user-data-dir=" + o.profileDir];
-        if (Array.isArray(o.size) && o.size.length === 2) args.push("--window-size=" + o.size[0] + "," + o.size[1]);
-        if (o.lang) args.push("--lang=" + o.lang);
-        args.push("--no-first-run", "--no-default-browser-check", "--disable-session-crashed-bubble");
-        return { bin: b.bin, args: [...baseArgs, ...args, url], isolated: true, watch: true, envKind: "anti", label: "chromium", pick: picked.how };
-      }
-      if (form.direct && form.engine === "firefox" && o.profileDir) {
-        return {
-          bin: b.bin,
-          args: [...baseArgs, "--no-remote", "--profile", o.profileDir, "-private-window", url],
-          isolated: true,
-          watch: true,
-          envKind: "anti",
-          label: "firefox",
-          pick: picked.how
-        };
-      }
-      if (form.direct) {
-        return { bin: b.bin, args: baseArgs.concat([url]), isolated: false, watch: false, envKind: "sys", label: path2.basename(b.bin), pick: picked.how };
-      }
-      const c = openCommand(pl, url);
-      if (!c) return { bin: null, args: [url], isolated: false, watch: false, envKind: "sys", label: null, pick: picked.how };
-      return { bin: c.cmd, args: c.args, isolated: false, watch: false, envKind: "sys", label: c.cmd, pick: picked.how };
-    }
-    function binAvailable(bin) {
-      if (!bin) return false;
-      if (bin.includes("/") || bin.includes("\\") || /^[A-Za-z]:[\\/]/.test(bin)) return isExecutableFile(bin);
-      return resolveExecutable(bin) !== null;
-    }
-    function launchIsolated(url, o) {
-      const opts = o || {};
-      if (!isSafeHttpUrl(url)) return Object.assign(outcome({ ok: false, reason: "unsafe-url", url: String(url || "") }), { bin: null, isolated: false });
-      const antiEnv = opts.antiEnv || opts.sysEnv || process.env;
-      const sysEnv = opts.sysEnv || process.env;
-      const onExit = opts.onExit;
-      const avail = typeof opts.binAvailable === "function" ? opts.binAvailable : binAvailable;
-      const spawnWith = typeof opts.spawn === "function" ? opts.spawn : _spawnDetached;
-      const fail = (reason, extra) => Object.assign(outcome(Object.assign({ ok: false, reason, url }, extra)), { bin: null, isolated: false });
-      try {
-        const resolveInv = typeof opts.resolveInventory === "function" ? opts.resolveInventory : ((platform, deps) => detector.inventory(platform, deps));
-        const inv = "inventory" in opts ? opts.inventory : resolveInv(process.platform, opts.resolveDeps || {});
-        const plan = isolatedPlan(process.platform, url, {
-          inventory: inv,
-          pick: opts.pick,
-          profileDir: opts.profileDir,
-          size: opts.size,
-          lang: opts.lang
-        });
-        const evidence = { bin: plan.bin, engine: plan.label, via: plan.isolated ? "browser" : "dispatcher", diagnostics: launchDiagnostics(inv, plan, plan.pick) };
-        if (!avail(plan.bin)) return fail("no-launcher", { evidence });
-        const env = plan.envKind === "anti" ? antiEnv : sysEnv;
-        const p = spawnWith(plan.bin, plan.args, env, plan.watch ? onExit : void 0);
-        if (!p) return fail("spawn-failed", { evidence });
-        return Object.assign(outcome({ ok: true, confirmed: false, handedOff: true, url, evidence }), { bin: plan.label, isolated: plan.isolated });
-      } catch (e) {
-        return fail("spawn-failed", { error: FAILURE_TEXT["spawn-failed"] + "\uFF08" + (e && e.code || e) + "\uFF09" });
-      }
-    }
     module2.exports = {
       openBrowser,
-      launchIsolated,
       openCommand,
       openPlan,
       isolatedPlan,
-      pickLauncher,
       ownsItsWindow,
       observeSpawn,
       isSafeHttpUrl,
       binAvailable,
-      listBrowsers,
-      invalidateBrowsers,
       launchDiagnostics,
+      loginEnv,
       // 探测层的解析原语经此转出（唯一实现处在 ./browser-inventory.js）：门禁与消费方按同一出口取用，
       //   不在别处再写第二份平台解析。
       engineOf,
@@ -6723,6 +7009,7 @@ var require_os = __commonJS({
     var execPath = require_exec_path();
     var desktop = require_desktop();
     var CAPABILITY_PROFILES = require_capability_profile();
+    var environment = require_environment();
     var PLATFORM = process.platform;
     var ARCH = process.arch;
     var isLinux = PLATFORM === "linux";
@@ -6777,6 +7064,7 @@ var require_os = __commonJS({
       }
       return p;
     }
+    environment.bind({ capabilities });
     module2.exports = {
       PLATFORM,
       ARCH,
@@ -6800,6 +7088,8 @@ var require_os = __commonJS({
       // 导出模块对象会抛 platform.notify is not a function，把升级终态误判成失败。
       notify: require_notify().notify,
       browser: require_browser(),
+      environment,
+      // 环境表单（外部打开链路的事实底座 + 选路依据）
       desktop,
       // 图形会话可用性（Linux 需实测 socket）
       autostart: require_autostart()
@@ -12918,6 +13208,60 @@ var require_access = __commonJS({
   }
 });
 
+// src/app/settings/browser.js
+var require_browser2 = __commonJS({
+  "src/app/settings/browser.js"(exports2, module2) {
+    "use strict";
+    var platform = require_os();
+    var { verifyPersisted } = require_access();
+    module2.exports = {
+      methods: {
+        /** 当前偏好 + 候选清单 + 这一拍的分发依据（面板据此渲染选择器并说明「现在实际会用谁」）。 */
+        externalBrowserStatus() {
+          try {
+            const form = platform.environment.form();
+            const v = platform.environment.checkPreference(platform.environment.preferenceId(), form);
+            return {
+              ok: true,
+              configured: !!form.preference && form.preference.configured === true,
+              value: form.preference && form.preference.id || null,
+              // stale=true：偏好所指已不在候选清单（被卸载/路径失效），本次分发已回落，需用户重选。
+              stale: !!(form.pick && form.pick.stale),
+              browser: v.browser,
+              candidates: v.candidates,
+              pick: form.pick || null,
+              platform: form.platform
+            };
+          } catch (e) {
+            return { ok: false, error: e.message };
+          }
+        },
+        /** 设置/清除浏览器偏好（空串=清除，回到「按系统默认或候选次序分发」）。 */
+        setExternalBrowser(id) {
+          try {
+            const form = platform.environment.form();
+            const v = platform.environment.checkPreference(id, form);
+            if (!v.ok) return { ok: false, error: v.error };
+            const cfg = this.config || {};
+            cfg.externalBrowser = v.id;
+            const patch = { externalBrowser: v.id };
+            if (this.configPath) {
+              this.state.persistConfigPatch(patch);
+              const persistError = verifyPersisted(this.configPath, patch);
+              if (persistError) return { ok: false, error: persistError };
+            }
+            platform.environment.invalidate();
+            if (this.events) this.events.append("external_browser_changed", { id: v.id, name: v.browser ? v.browser.name : null });
+            return { ok: true, configured: !!v.id, value: v.id, browser: v.browser };
+          } catch (e) {
+            return { ok: false, error: e.message };
+          }
+        }
+      }
+    };
+  }
+});
+
 // src/platform/os/netinfo.js
 var require_netinfo = __commonJS({
   "src/platform/os/netinfo.js"(exports2, module2) {
@@ -13135,6 +13479,7 @@ var require_facets = __commonJS({
       { name: "settings/node-lts", mod: require_node_lts() },
       { name: "settings/versions", mod: require_versions() },
       { name: "settings/access", mod: require_access() },
+      { name: "settings/browser", mod: require_browser2() },
       { name: "settings/lan-panel", mod: require_lan_panel() }
     ];
     function installMethods(host2, methods) {
@@ -14677,6 +15022,7 @@ var require_core5 = __commonJS({
     function composeCore(host2, rawConfig, configPath) {
       host2.config = normalize(rawConfig, domainConfigExtension2());
       host2.configPath = typeof configPath === "string" ? configPath : null;
+      platform.environment.bind({ preference: () => host2.config && host2.config.externalBrowser || null });
       host2._fileProtectStatus = null;
       try {
         const fp = platform.fileProtect;
@@ -18211,58 +18557,13 @@ var require_forward_core = __commonJS({
   }
 });
 
-// src/domains/router/ops/browser.js
-var require_browser2 = __commonJS({
-  "src/domains/router/ops/browser.js"(exports2, module2) {
-    "use strict";
-    var platform = require_os();
-    var desktop = require_desktop();
-    var fs2 = require("node:fs");
-    var os2 = require("node:os");
-    var path2 = require("node:path");
-    var crypto = require("node:crypto");
-    function graphicalEnv() {
-      return desktop.sessionEnv();
-    }
-    function openInBrowser(url, onExit) {
-      try {
-        const tmpProfile = path2.join(os2.tmpdir(), "dsh-oauth-" + crypto.randomBytes(8).toString("hex"));
-        const sysEnv = Object.assign({}, process.env, graphicalEnv());
-        const TZ_POOL = ["Asia/Shanghai", "Asia/Seoul", "Asia/Tokyo", "Asia/Singapore", "Europe/Berlin", "Europe/London", "Europe/Paris", "America/New_York", "America/Los_Angeles", "Australia/Sydney"];
-        const LANG_POOL = ["zh-CN", "en-US", "en-GB", "ja-JP", "ko-KR", "de-DE", "fr-FR", "zh-TW"];
-        const SIZE_POOL = [[1280, 800], [1366, 768], [1440, 900], [1536, 864], [1600, 900], [1680, 1050], [1920, 1080], [1024, 768], [1152, 864], [1280, 720]];
-        const pick = (arr) => arr[Math.floor(Math.random() * arr.length)];
-        const size = pick(SIZE_POOL);
-        const lang = pick(LANG_POOL);
-        const tz = pick(TZ_POOL);
-        const antiEnv = Object.assign({}, sysEnv, { TZ: tz, LANG: lang });
-        const r = platform.browser.launchIsolated(url, { profileDir: tmpProfile, size, lang, antiEnv, sysEnv, onExit });
-        if (!r || !r.ok) return { profile: null, result: r || { ok: false, reason: "spawn-failed" } };
-        if (r.isolated) {
-          const t30 = setTimeout(() => {
-            try {
-              fs2.rmSync(tmpProfile, { recursive: true, force: true });
-            } catch {
-            }
-          }, 30 * 60 * 1e3);
-          if (t30.unref) t30.unref();
-        }
-        return { profile: tmpProfile, result: r };
-      } catch (e) {
-        return { profile: null, result: { ok: false, reason: "spawn-failed", error: "\u6D4F\u89C8\u5668\u542F\u52A8\u5931\u8D25\uFF1A" + (e && e.message || e) } };
-      }
-    }
-    module2.exports = { graphicalEnv, openInBrowser };
-  }
-});
-
 // src/domains/router/ops/oauth.js
 var require_oauth = __commonJS({
   "src/domains/router/ops/oauth.js"(exports2, module2) {
     "use strict";
-    var fs2 = require("node:fs");
     var crypto = require("node:crypto");
     var { createServer } = require("node:http");
+    var { removeTreeDeferred } = require_fs();
     function createOAuthOps(deps) {
       const d = deps || {};
       const ports = d.ports;
@@ -18427,20 +18728,21 @@ var require_oauth = __commonJS({
         promise.catch(() => {
         });
         st._ccLoginPromise = promise;
-        const opened = openInBrowser(authUrl, () => {
+        const opened = await openInBrowser(authUrl, () => {
           if (st._ccLoginRound !== roundId) return;
           if (st._ccLoginReject) {
-            const r = st._ccLoginReject;
+            const r2 = st._ccLoginReject;
             st._ccLoginReject = null;
             st._ccLoginResolve = null;
             try {
-              r(new Error("\u6D4F\u89C8\u5668\u5DF2\u5173\u95ED\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88"));
+              r2(new Error("\u6D4F\u89C8\u5668\u5DF2\u5173\u95ED\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88"));
             } catch {
             }
           }
         });
-        const evidence = opened.result || {};
-        if (!opened.profile) {
+        const r = opened || { ok: false, reason: "spawn-failed" };
+        const ev = r.evidence || {};
+        if (!r.ok) {
           st._ccLoginPromise = null;
           st._ccLoginResolve = null;
           st._ccLoginReject = null;
@@ -18460,13 +18762,13 @@ var require_oauth = __commonJS({
             opened: false,
             confirmed: false,
             handedOff: false,
-            reason: evidence.reason || "no-launcher",
-            evidence: evidence.evidence || null,
-            error: (evidence.error || "\u65E0\u6CD5\u8C03\u8D77\u7CFB\u7EDF\u6D4F\u89C8\u5668") + "\uFF0C\u8BF7\u624B\u52A8\u6253\u5F00\u4E0B\u65B9\u5730\u5740\u5B8C\u6210\u6388\u6743"
+            reason: r.reason || "no-launcher",
+            evidence: r.evidence || null,
+            error: (r.error || "\u65E0\u6CD5\u8C03\u8D77\u7CFB\u7EDF\u6D4F\u89C8\u5668") + "\uFF0C\u8BF7\u624B\u52A8\u6253\u5F00\u4E0B\u65B9\u5730\u5740\u5B8C\u6210\u6388\u6743"
           };
         }
-        st._ccLogin = { state, port, server, tmpProfile: opened.profile };
-        return Object.assign({}, evidence, {
+        st._ccLogin = { state, port, server, tmpProfile: ev.profile || null };
+        return Object.assign({}, r, {
           ok: true,
           authUrl,
           url: authUrl,
@@ -18474,8 +18776,8 @@ var require_oauth = __commonJS({
           port,
           waitMs: 18e4,
           opened: true,
-          // 非隔离引擎（Safari/snap 包装器）由平台层降级：账号隔离不成立，换账号只能靠超时重发或手动窗口。
-          isolated: evidence.isolated === true
+          // 非隔离引擎（Safari/打包器包装）由平台层降级：账号隔离不成立，换账号只能靠超时重发或手动窗口。
+          isolated: ev.isolated === true
         });
       }
       async function commandcodeLoginWait(timeoutMs) {
@@ -18521,15 +18823,7 @@ var require_oauth = __commonJS({
           st._ccLoginResolve = st._ccLoginReject = null;
           return { ok: false, error: e.message };
         } finally {
-          if (tmpProfile) {
-            const t60 = setTimeout(() => {
-              try {
-                fs2.rmSync(tmpProfile, { recursive: true, force: true });
-              } catch {
-              }
-            }, 60 * 1e3);
-            if (t60.unref) t60.unref();
-          }
+          if (tmpProfile) removeTreeDeferred(tmpProfile, 60 * 1e3);
         }
       }
       return { commandcodeLoginStart, commandcodeLoginWait };
@@ -18983,8 +19277,8 @@ var require_router_ops = __commonJS({
     "use strict";
     require_port_segments();
     var ports = require_ports().shared;
+    var platform = require_os();
     var { maskKey } = require_base();
-    var { openInBrowser } = require_browser2();
     var { createOAuthOps } = require_oauth();
     var { createAppsRegistryOps } = require_apps_registry();
     var { createQuotaSyncOps } = require_quotasync();
@@ -18992,6 +19286,7 @@ var require_router_ops = __commonJS({
     function createAuxCore(deps) {
       const d = deps || {};
       const getProviders = d.getProviders || (() => []);
+      const openInBrowser = (url, onExit) => platform.browser.openBrowser(url, { intent: "isolated-login", onExit });
       const oauth = createOAuthOps({ ports, openInBrowser });
       const apps = createAppsRegistryOps({
         getProviders,
@@ -26009,7 +26304,7 @@ var require_guard = __commonJS({
     var fs2 = require("node:fs");
     var path2 = require("node:path");
     function owns(pathname) {
-      return pathname === "/changelog" || pathname.startsWith("/guard/") || pathname === "/autostart" || pathname.startsWith("/settings/") || pathname.startsWith("/self-update/") || pathname === "/env/dsh" || pathname === "/env/status" || pathname === "/env/node-lts" || pathname === "/env/open-url" || pathname === "/env/browsers" || pathname === "/ports" || pathname === "/shutdown";
+      return pathname === "/changelog" || pathname.startsWith("/guard/") || pathname === "/autostart" || pathname.startsWith("/settings/") || pathname.startsWith("/self-update/") || pathname === "/env/dsh" || pathname === "/env/status" || pathname === "/env/node-lts" || pathname === "/env/open-url" || pathname === "/env/environment" || pathname === "/ports" || pathname === "/shutdown";
     }
     function fetchDshChangelog(res, sup) {
       const v = sup && sup.nativeManager ? sup.nativeManager.versionInfo() : {};
@@ -26021,7 +26316,7 @@ var require_guard = __commonJS({
       return res.end(md);
     }
     function handle(ctx) {
-      const { sup, req, res, pathname, identity, send, collectBody, originAllowed, browser } = ctx;
+      const { sup, req, res, pathname, identity, send, collectBody, originAllowed, browser, environment } = ctx;
       if (req.method === "GET" && pathname === "/changelog") {
         return fetchDshChangelog(res, sup);
       }
@@ -26127,6 +26422,31 @@ var require_guard = __commonJS({
         });
         return;
       }
+      if (req.method === "GET" && pathname === "/settings/external-browser") {
+        return send(200, sup.externalBrowserStatus());
+      }
+      if (req.method === "POST" && pathname === "/settings/external-browser") {
+        if (!originAllowed(req, sup.config.apiPort)) {
+          req.resume();
+          return send(403, {});
+        }
+        collectBody(req, res, 2048, (body) => {
+          let id = null;
+          let given = false;
+          try {
+            const j = body ? JSON.parse(body) : {};
+            if (typeof j.id === "string") {
+              id = j.id;
+              given = true;
+            }
+          } catch {
+          }
+          if (!given) return send(400, { ok: false, error: '\u9700\u8981 {"id":"<\u5019\u9009 id>"}\uFF08\u7A7A\u4E32\u6E05\u9664\u504F\u597D\uFF09' });
+          const r = sup.setExternalBrowser(id);
+          return send(r.ok ? 200 : 500, r);
+        });
+        return;
+      }
       if (req.method === "POST" && pathname === "/shutdown") {
         if (!originAllowed(req, sup.config.apiPort)) {
           req.resume();
@@ -26185,13 +26505,13 @@ var require_guard = __commonJS({
       if (req.method === "GET" && pathname === "/env/node-lts") {
         return sup.nodeLtsStatus().then((r) => send(200, r)).catch((e) => send(500, { ok: false, error: e.message }));
       }
-      if (req.method === "GET" && pathname === "/env/browsers") {
+      if (req.method === "GET" && pathname === "/env/environment") {
         if (!originAllowed(req, sup.config.apiPort)) {
           req.resume();
           return send(403, { ok: false, error: "cross-origin request rejected" });
         }
-        const force = /[?&]force=1/.test(req.url || "");
-        return Promise.resolve(browser.listBrowsers({ force })).then((r) => send(200, r)).catch((e) => send(500, { ok: false, error: "\u6D4F\u89C8\u5668\u63A2\u6D4B\u5931\u8D25\uFF1A" + (e && e.message || e) }));
+        const force = /[?&]force=1/.test(String(req.url || ""));
+        return Promise.resolve(environment.form({ force, persist: force })).then((r) => send(200, r)).catch((e) => send(500, { ok: false, error: "\u73AF\u5883\u8868\u5355\u88C5\u914D\u5931\u8D25\uFF1A" + (e && e.message || e) }));
       }
       if (req.method === "POST" && pathname === "/env/open-url") {
         if (!identity.loopback) {
@@ -27328,6 +27648,7 @@ var require_server = __commonJS({
     var { identify } = require_identity3();
     var { originAllowed, requestHasAccessKey, isShellOrigin } = require_security();
     var browserExit = require_browser();
+    var environmentExit = require_environment();
     function safeFail(res, err, where) {
       try {
         const body = JSON.stringify({ ok: false, error: err && err.message || String(err) });
@@ -27347,6 +27668,7 @@ var require_server = __commonJS({
     }
     function createServer(sup, deps) {
       const browser = deps && deps.browser || browserExit;
+      const environment = deps && deps.environment || environmentExit;
       return http2.createServer((req, res) => {
         const shellOrigin = (() => {
           const o = req.headers.origin;
@@ -27414,7 +27736,7 @@ var require_server = __commonJS({
         } catch (e) {
           return send(400, { error: "bad request encoding" });
         }
-        const ctx = { sup, req, res, pathname: decodedPathname, identity, send, collectBody, originAllowed, tokOf, browser };
+        const ctx = { sup, req, res, pathname: decodedPathname, identity, send, collectBody, originAllowed, tokOf, browser, environment };
         for (const d of API_DOMAINS) {
           if (d.owns(pathname)) {
             try {