@dsh-sup/dsh-core-linux-x64 0.1.6-BETA.13 → 0.1.6-BETA.15

package/core.cjs

@@ -833,7 +833,11 @@ var require_config = __commonJS({
       // 不配置 = LAN 受 RFC1918 白名单约束，FRP 暴露仍强制 remoteToken。
       apiAccessKey: null,
       // 关闭窗口行为（系统级）：'hide' = 隐藏至托盘、服务常驻（默认）；'exit' = 退出管家并停全部服务链。
-      closeAction: "hide"
+      closeAction: "hide",
+      // 外部打开的浏览器偏好（系统级，本机配置）：存环境表单候选清单里的 id，null = 未选。
+      // 与「系统默认浏览器」分两个字段是刻意的：前者是用户在本产品里的选择，后者是操作系统的事实；
+      // 系统说不出默认时按候选次序分发并如实标注，用户可在这里定一次覆盖它（见 platform/os/environment.js）。
+      externalBrowser: null
     };
     function buildDefaults2(ext) {
       const pending = normalizeExtension(ext).defaults.slice();
@@ -947,7 +951,7 @@ var require_version = __commonJS({
     var fs2 = require("node:fs");
     var path2 = require("node:path");
     function guardVersion() {
-      if (true) return String("0.1.6-BETA.13");
+      if (true) return String("0.1.6-BETA.15");
       try {
         return JSON.parse(fs2.readFileSync(path2.join(__dirname, "..", "..", "package.json"), "utf8")).version || "unknown";
       } catch {
@@ -1080,6 +1084,7 @@ var require_fs = __commonJS({
   "src/platform/util/fs.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
+    var os2 = require("node:os");
     var path2 = require("node:path");
     function dirSizeBytes(root) {
       let total = 0;
@@ -1140,7 +1145,26 @@ var require_fs = __commonJS({
         throw e;
       }
     }
-    module2.exports = { dirSizeBytes, writeAtomic };
+    function removeTreeDeferred(dir, ms) {
+      if (!dir) return null;
+      const t = setTimeout(() => {
+        try {
+          fs2.rmSync(dir, { recursive: true, force: true });
+        } catch {
+        }
+      }, ms === void 0 ? 6e4 : ms);
+      if (t.unref) t.unref();
+      return t;
+    }
+    function allocTempDir(prefix) {
+      const dir = fs2.mkdtempSync(path2.join(os2.tmpdir(), prefix || "dsh-"));
+      try {
+        fs2.chmodSync(dir, 448);
+      } catch {
+      }
+      return dir;
+    }
+    module2.exports = { dirSizeBytes, writeAtomic, removeTreeDeferred, allocTempDir };
   }
 });
 
@@ -4831,1218 +4855,2020 @@ var require_capability_profile = __commonJS({
   }
 });
 
-// src/platform/os/process.js
-var require_process = __commonJS({
-  "src/platform/os/process.js"(exports2, module2) {
+// src/platform/util/redact.js
+var require_redact = __commonJS({
+  "src/platform/util/redact.js"(exports2, module2) {
     "use strict";
-    var ex2 = require_exec();
-    var isWindows = process.platform === "win32";
-    function signalProcess(pid, sig) {
-      if (!Number.isInteger(pid) || pid <= 0) return;
-      if (isWindows) {
-        try {
-          process.kill(pid, sig);
-        } catch {
-        }
-        return;
+    function maskProxyServer(server) {
+      return server ? String(server).replace(/(\/\/)?([^\s/@:]+):([^\s/@]*)@/, "$1$2:***@") : null;
+    }
+    function maskProxySecrets(text) {
+      return String(text == null ? "" : text).replace(/(\/\/)?([^\s/@:]+):([^\s/@]*)@/g, "$1$2:***@");
+    }
+    module2.exports = { maskProxyServer, maskProxySecrets };
+  }
+});
+
+// src/platform/os/registry.js
+var require_registry = __commonJS({
+  "src/platform/os/registry.js"(exports2, module2) {
+    "use strict";
+    function regValueOf(out) {
+      const m = String(out || "").match(/REG_(?:EXPAND_SZ|SZ)\s+(.*)/);
+      if (!m) return null;
+      return m[1].trim() || null;
+    }
+    function regDwordOf(out) {
+      const m = String(out || "").match(/REG_DWORD\s+(0x[0-9a-fA-F]+|\d+)\b/);
+      if (!m) return null;
+      const n = Number.parseInt(m[1], m[1].startsWith("0x") ? 16 : 10);
+      return Number.isNaN(n) ? null : n;
+    }
+    function expandEnvVars(value, env) {
+      const e = env || process.env;
+      return String(value).replace(/%([^%]+)%/g, (all, name) => e[name] === void 0 ? all : e[name]);
+    }
+    function safeRegKeyPart(s) {
+      return typeof s === "string" && s.length > 0 && s.length <= 200 && /^[\x20-\x7e]+$/.test(s) && !/[;|&`$()<>^"'\r\n]/.test(s);
+    }
+    var REG_HIVE_ALIAS = { HKLM: "HKEY_LOCAL_MACHINE", HKCU: "HKEY_CURRENT_USER", HKCR: "HKEY_CLASSES_ROOT", HKU: "HKEY_USERS", HKCC: "HKEY_CURRENT_CONFIG" };
+    function regKeyFull(key) {
+      const s = String(key || "");
+      const i = s.indexOf("\\");
+      const root = i < 0 ? s : s.slice(0, i);
+      return (REG_HIVE_ALIAS[root.toUpperCase()] || root) + (i < 0 ? "" : s.slice(i));
+    }
+    function regValue(runner, note, key, name) {
+      const args = name ? ["query", key, "/v", name] : ["query", key, "/ve"];
+      const out = runner("reg.exe", args);
+      const v = regValueOf(out);
+      note(name ? key + " /v " + name : key, v ? "ok" : "empty");
+      return v;
+    }
+    function regSubkeys(runner, note, key) {
+      const out = runner("reg.exe", ["query", key]);
+      if (!out) {
+        note(key, "unreadable");
+        return [];
       }
-      try {
-        process.kill(-pid, sig);
-      } catch {
-        try {
-          process.kill(pid, sig);
-        } catch {
-        }
+      const prefix = regKeyFull(key) + "\\";
+      const names = [];
+      for (const line of String(out).split(/\r?\n/)) {
+        const l = line.trim();
+        if (!/^HKEY_/i.test(l) || l.length <= prefix.length) continue;
+        if (l.slice(0, prefix.length).toUpperCase() !== prefix.toUpperCase()) continue;
+        const rest = l.slice(prefix.length);
+        if (rest && !rest.includes("\\") && safeRegKeyPart(rest)) names.push(rest);
       }
+      note(key, names.length ? names.length + " \u9879" : "\u65E0\u5B50\u952E");
+      return names;
     }
-    function killTree(pid, sig, cb, opts) {
-      if (!Number.isInteger(pid) || pid <= 0) {
-        if (cb) cb(new Error("invalid pid"));
-        return;
-      }
-      if (isWindows) {
-        ex2.runAsync("taskkill", ["/PID", String(pid), "/T", "/F"], { timeoutMs: 1e4 }).then((r) => {
-          if (cb) cb(r.ok ? null : new Error(r.error || "taskkill failed"));
-        });
-        return;
+    function regValueTargets(runner, note, key) {
+      const out = runner("reg.exe", ["query", key]);
+      if (!out) {
+        note(key, "unreadable");
+        return [];
       }
-      if (opts && opts.ownGroup === true) {
-        signalProcess(pid, sig || "SIGTERM");
-      } else {
-        try {
-          process.kill(pid, sig || "SIGTERM");
-        } catch {
-        }
+      const paths = [];
+      for (const line of String(out).split(/\r?\n/)) {
+        const m = line.trim().match(/REG_SZ\s+(.*)/);
+        if (!m) continue;
+        const rel = m[1].trim();
+        if (!safeRegKeyPart(rel)) continue;
+        const root = key.slice(0, key.indexOf("\\"));
+        paths.push(root + "\\" + rel);
       }
-      if (cb) process.nextTick(cb, null);
+      note(key, paths.length ? paths.length + " \u4E2A\u80FD\u529B\u8DEF\u5F84" : "\u65E0\u503C");
+      return paths;
     }
-    module2.exports = { signalProcess, killTree };
+    module2.exports = {
+      regValueOf,
+      regDwordOf,
+      expandEnvVars,
+      safeRegKeyPart,
+      REG_HIVE_ALIAS,
+      regKeyFull,
+      regValue,
+      regSubkeys,
+      regValueTargets
+    };
   }
 });
 
-// src/platform/os/file-protect.js
-var require_file_protect = __commonJS({
-  "src/platform/os/file-protect.js"(exports2, module2) {
+// src/platform/os/browser-inventory.js
+var require_browser_inventory = __commonJS({
+  "src/platform/os/browser-inventory.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
-    var os2 = require("node:os");
     var path2 = require("node:path");
-    var ex2 = require_exec();
-    var IS_WINDOWS2 = process.platform === "win32";
-    var _icacls = null;
-    function hasIcacls(platform) {
-      if ((platform || process.platform) !== "win32") return false;
-      if (_icacls !== null) return _icacls;
-      _icacls = ex2.runOut("icacls", ["/?"], { timeoutMs: 3e3 }) !== null;
-      return _icacls;
+    var os2 = require("node:os");
+    var exec = require_exec();
+    var { isExecutableFile } = require_exec_path();
+    var registry = require_registry();
+    var { expandEnvVars, safeRegKeyPart, regValue, regSubkeys, regValueTargets } = registry;
+    var PROBE_TIMEOUT_MS = 1500;
+    function engineOf(bin) {
+      const base = String(bin || "").toLowerCase().split(/[\\/]/).pop();
+      if (/(chrome|chromium|msedge|edge|brave|vivaldi|opera|thorium)/.test(base)) return "chromium";
+      if (/(firefox|librewolf|waterfox)/.test(base)) return "firefox";
+      return "other";
     }
-    function currentUser() {
-      return process.env.USERNAME || process.env.USER || (() => {
-        try {
-          return os2.userInfo().username;
-        } catch {
-          return null;
+    function tokenizeExec(line) {
+      const toks = [];
+      let cur = "";
+      let q = null;
+      let esc = false;
+      let has = false;
+      for (const ch of String(line)) {
+        if (esc) {
+          cur += ch;
+          esc = false;
+          continue;
         }
-      })();
-    }
-    function protectFile(file) {
-      if (!IS_WINDOWS2) {
-        try {
-          fs2.chmodSync(file, 384);
-          return { ok: true, mode: "posix-0600" };
-        } catch (e) {
-          return { ok: false, mode: "posix-0600", reason: e.message };
+        if (ch === "\\") {
+          esc = true;
+          has = true;
+          continue;
         }
-      }
-      if (!hasIcacls()) return { ok: false, mode: "none", reason: "icacls \u4E0D\u53EF\u7528" };
-      const user = currentUser();
-      if (!user) return { ok: false, mode: "icacls", reason: "\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u7528\u6237" };
-      const r = ex2.runDetail("icacls", [file, "/inheritance:r", "/grant:r", user + ":F"], { stdio: "ignore", timeoutMs: 5e3 });
-      return r.ok ? { ok: true, mode: "icacls-file" } : { ok: false, mode: "icacls-file", reason: r.error || "\u9000\u51FA\u7801 " + r.code };
-    }
-    function protectDir(dir) {
-      if (!IS_WINDOWS2) {
-        try {
-          fs2.chmodSync(dir, 448);
-          return { ok: true, mode: "posix-0700" };
-        } catch (e) {
-          return { ok: false, mode: "posix-0700", reason: e.message };
+        if (q) {
+          if (ch === q) q = null;
+          else cur += ch;
+          continue;
         }
-      }
-      if (!hasIcacls()) return { ok: false, mode: "none", reason: "icacls \u4E0D\u53EF\u7528" };
-      const user = currentUser();
-      if (!user) return { ok: false, mode: "icacls", reason: "\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u7528\u6237" };
-      const r = ex2.runDetail("icacls", [dir, "/inheritance:r", "/grant:r", user + ":(OI)(CI)F"], { stdio: "ignore", timeoutMs: 1e4 });
-      return r.ok ? { ok: true, mode: "icacls-dir" } : { ok: false, mode: "icacls-dir", reason: r.error || "\u9000\u51FA\u7801 " + r.code };
-    }
-    function ensurePrivateDir(dir) {
-      try {
-        fs2.mkdirSync(dir, { recursive: true });
-      } catch (e) {
-        return { ok: false, mode: "mkdir", reason: e.message };
-      }
-      return protectDir(dir);
-    }
-    function writePrivate(file, data) {
-      try {
-        const dir = path2.dirname(file);
-        try {
-          fs2.mkdirSync(dir, { recursive: true });
-        } catch {
+        if (ch === "'" || ch === '"') {
+          q = ch;
+          has = true;
+          continue;
         }
-        const tmp = file + ".tmp" + process.pid;
-        fs2.writeFileSync(tmp, data, { mode: 384 });
-        const p1 = protectFile(tmp);
-        if (p1 && p1.ok === false) {
-          try {
-            fs2.rmSync(tmp, { force: true });
-          } catch {
+        if (/\s/.test(ch)) {
+          if (has) {
+            toks.push(cur);
+            cur = "";
+            has = false;
           }
-          return { ok: false, reason: "protect(tmp): " + (p1.reason || p1.mode), mode: p1.mode };
+          continue;
         }
-        fs2.renameSync(tmp, file);
-        const p2 = protectFile(file);
-        if (p2 && p2.ok === false) return { ok: false, reason: "protect(file): " + (p2.reason || p2.mode), mode: p2.mode };
-        return { ok: true };
-      } catch (e) {
-        return { ok: false, reason: e.message };
+        cur += ch;
+        has = true;
       }
+      if (has) toks.push(cur);
+      return toks;
     }
-    module2.exports = { protectFile, protectDir, ensurePrivateDir, writePrivate, hasIcacls, currentUser, IS_WINDOWS: IS_WINDOWS2 };
-  }
-});
-
-// src/platform/util/input.js
-var require_input = __commonJS({
-  "src/platform/util/input.js"(exports2, module2) {
-    "use strict";
-    var PKG_NAME_RE = /^(@[a-zA-Z0-9._-]+\/)?[a-zA-Z0-9._-]+$/;
-    var ARGV_UNSAFE_RE = /[\s;|&<>`'"$(){}\\*?~#]/;
-    var WIN_ABS_PATH_RE = /^[A-Za-z]:\\[^;|&<>`'"$*?~#\s]*$/;
-    var UNIT_NAME_RE = /^[A-Za-z0-9:@._-]{1,128}$/;
-    var UNSAFE_LEDGER_KEYS = ["__proto__", "prototype", "constructor"];
-    var LEDGER_UNSAFE_RE = /[\s\u0000-\u001f\u007f]/;
-    function argvViolation(arg) {
-      const s = String(arg == null ? "" : arg);
-      if (!s) return "\u7A7A\u7684 argv \u9879";
-      if (ARGV_UNSAFE_RE.test(s) && !WIN_ABS_PATH_RE.test(s)) return "argv \u9879\u542B\u7981\u7528\u5B57\u7B26\uFF08\u7A7A\u767D/shell \u5143\u5B57\u7B26\uFF09: " + s.slice(0, 80);
-      return null;
-    }
-    var CONTROL_RE = /[\u0000-\u001f\u007f]/;
-    function isAbsoluteForm(p) {
-      const s = String(p == null ? "" : p);
-      return s.charCodeAt(0) === 47 || /^[A-Za-z]:[\\/]/.test(s) || s.charCodeAt(0) === 92 && s.charCodeAt(1) === 92;
-    }
-    function prefixViolation(prefix) {
-      const s = String(prefix == null ? "" : prefix);
-      if (!s.trim()) return "\u7A7A\u7684\u5B89\u88C5\u524D\u7F00";
-      if (CONTROL_RE.test(s)) return "\u5B89\u88C5\u524D\u7F00\u542B\u63A7\u5236\u7B26: " + s.slice(0, 80);
-      if (s.length > 4096) return "\u5B89\u88C5\u524D\u7F00\u8D85\u957F: " + s.slice(0, 60) + "...";
-      if (s[0] === "-") return "\u5B89\u88C5\u524D\u7F00\u4EE5 - \u5F00\u5934\uFF08\u4F1A\u88AB\u5F53\u4F5C npm \u9009\u9879\uFF09: " + s.slice(0, 80);
-      if (!isAbsoluteForm(s)) return "\u5B89\u88C5\u524D\u7F00\u987B\u4E3A\u7EDD\u5BF9\u8DEF\u5F84\uFF08/ \u5F00\u5934\u3001win \u76D8\u7B26\u6216 UNC\uFF09: " + s.slice(0, 80);
-      return null;
-    }
-    function pkgNameViolation(pkg) {
-      const s = String(pkg == null ? "" : pkg);
-      return PKG_NAME_RE.test(s) ? null : "\u975E\u6CD5\u5305\u540D\uFF08\u5B57\u7B26\u96C6\u767D\u540D\u5355\u4E0D\u901A\u8FC7\uFF09: " + s.slice(0, 80);
-    }
-    function unitNameViolation(unit) {
-      const s = String(unit == null ? "" : unit);
-      if (!UNIT_NAME_RE.test(s)) return "\u975E\u6CD5\u5355\u5143\u540D\uFF08\u5B57\u7B26\u96C6/\u957F\u5EA6\u767D\u540D\u5355\u4E0D\u901A\u8FC7\uFF09: " + s.slice(0, 80);
-      const dot = s.indexOf(".");
-      if (dot >= 0 && !/\.service$/.test(s)) return "\u5355\u5143\u540D\u540E\u7F00\u4E0D\u53D7\u652F\u6301\uFF08\u4EC5\u5141\u8BB8 .service \u6216\u65E0\u540E\u7F00\uFF09: " + s.slice(0, 80);
-      return null;
-    }
-    function ledgerKey(raw, opts) {
-      const o = opts || {};
-      const max = typeof o.max === "number" ? o.max : 128;
-      const empty = o.empty == null ? "unknown" : o.empty;
-      const unsafe = o.unsafe == null ? "(other)" : o.unsafe;
-      if (typeof raw !== "string" || !raw) return empty;
-      const s = raw.length > max ? raw.slice(0, max) : raw;
-      if (UNSAFE_LEDGER_KEYS.indexOf(s) >= 0 || LEDGER_UNSAFE_RE.test(s)) return unsafe;
-      return s;
-    }
-    module2.exports = {
-      PKG_NAME_RE,
-      ARGV_UNSAFE_RE,
-      WIN_ABS_PATH_RE,
-      UNIT_NAME_RE,
-      UNSAFE_LEDGER_KEYS,
-      LEDGER_UNSAFE_KEYS_RE: LEDGER_UNSAFE_RE,
-      argvViolation,
-      pkgNameViolation,
-      unitNameViolation,
-      ledgerKey,
-      CONTROL_RE,
-      isAbsoluteForm,
-      prefixViolation
-    };
-  }
-});
-
-// src/platform/os/spawn.js
-var require_spawn = __commonJS({
-  "src/platform/os/spawn.js"(exports2, module2) {
-    "use strict";
-    var { spawn } = require("node:child_process");
-    function detached(cmd2, args, opts) {
-      const o = opts || {};
-      return spawn(cmd2, args, Object.assign({}, o, {
-        detached: true,
-        windowsHide: true,
-        // 默认 ignore；显式 undefined 也回落 ignore，避免 stdio:undefined 的歧义。
-        stdio: o.stdio === void 0 ? "ignore" : o.stdio
-      }));
-    }
-    function piped(cmd2, args, opts) {
-      const o = opts || {};
-      return spawn(cmd2, args, Object.assign({}, o, {
-        stdio: ["ignore", "pipe", "pipe"],
-        windowsHide: true,
-        detached: o.detached === true
-      }));
-    }
-    function detachedIgnored(cmd2, args, opts) {
-      const o = opts || {};
-      return spawn(cmd2, args, Object.assign({}, o, {
-        detached: true,
-        windowsHide: true,
-        stdio: "ignore"
-      }));
-    }
-    module2.exports = { detached, piped, detachedIgnored };
-  }
-});
-
-// src/platform/os/portable.js
-var require_portable = __commonJS({
-  "src/platform/os/portable.js"(exports2, module2) {
-    "use strict";
-    var fs2 = require("node:fs");
-    var pidlookup = require_pidlookup();
-    var spawner = require_spawn();
-    var procOS = require_process();
-    var STOP_WAIT_CAP_MS = 3e3;
-    var NAP_MS = 150;
-    function nap(ms) {
-      try {
-        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
-      } catch {
-      }
-    }
-    function readPidFile(pidFile) {
-      if (!pidFile) return null;
-      try {
-        const n = parseInt(String(fs2.readFileSync(pidFile, "utf8")).trim(), 10);
-        return Number.isInteger(n) && n > 0 ? n : null;
-      } catch {
-        return null;
+    function parseExecLine(line) {
+      let toks = tokenizeExec(line).filter((t) => t !== "%%" && !/^%[a-zA-Z]$/.test(t));
+      if (toks[0] === "env") {
+        let i = 1;
+        while (i < toks.length && /=/.test(toks[i])) i++;
+        toks = toks.slice(i);
       }
+      if (!toks.length) return null;
+      return { bin: toks[0], baseArgs: toks.slice(1) };
     }
-    function matchesAnchors(pid, anchors) {
-      if (!pid || !Array.isArray(anchors) || !anchors.length) return false;
-      const cmd2 = pidlookup.readCmdline(pid);
-      if (!cmd2) return false;
-      return anchors.some((a) => a && cmd2.indexOf(String(a)) !== -1);
+    function exeFromCmdLine(cmdLine) {
+      const s = String(cmdLine || "");
+      let m = s.match(/^\s*"([^"]+\.exe)"/i);
+      if (m) return m[1];
+      m = s.match(/^\s*(.*?\.exe)/i);
+      return m ? m[1] : null;
     }
-    var portOf = (o) => {
-      const p = Number(o && o.port);
-      return Number.isInteger(p) && p > 0 ? p : 0;
-    };
-    var pidFileOf = (o) => o && o.pidFile || null;
-    var anchorsOf = (o) => Array.isArray(o && o.anchors) ? o.anchors : [];
-    function findOurs(o) {
-      const anchors = anchorsOf(o);
-      const fp = readPidFile(pidFileOf(o));
-      if (fp !== null && pidlookup.isAlive(fp) && matchesAnchors(fp, anchors)) return { pid: fp, ownGroup: true };
-      const port = portOf(o);
-      if (port) {
-        const q = pidlookup.findListeningPid(port);
-        if (q !== null && q !== fp && matchesAnchors(q, anchors)) return { pid: q, ownGroup: false };
+    var WIN_APP_PATHS = ["msedge.exe", "chrome.exe", "firefox.exe", "brave.exe", "opera.exe", "vivaldi.exe", "chromium.exe", "thorium.exe", "librewolf.exe"];
+    function winExeOfProgId(runner, note, progId, env) {
+      if (!safeRegKeyPart(progId)) return null;
+      for (const root of ["HKCU\\Software\\Classes", "HKLM\\Software\\Classes"]) {
+        const cmd2 = regValue(runner, note, root + "\\" + progId + "\\shell\\open\\command");
+        const exe = cmd2 ? exeFromCmdLine(expandEnvVars(cmd2, env)) : null;
+        if (exe) return exe;
       }
       return null;
     }
-    function removePidFile(o) {
-      const f = pidFileOf(o);
-      if (f) {
-        try {
-          fs2.unlinkSync(f);
-        } catch {
+    function probeWin(d) {
+      const { runOut, env, canExec } = d;
+      const notes = [];
+      const note = (source, detail) => {
+        notes.push({ source, detail });
+      };
+      const found = /* @__PURE__ */ new Map();
+      const keyOf = (exe) => String(exe || "").toLowerCase().replace(/[\\/]/g, "\\");
+      const push = (exe, how) => {
+        const full = expandEnvVars(exe, env).trim();
+        if (!/\.exe$/i.test(full)) {
+          note(how, "\u6765\u6E90\u7ED9\u51FA\u7684\u4E0D\u662F exe \u8DEF\u5F84: " + full);
+          return null;
         }
-      }
-    }
-    var portable = {
-      kind: "portable",
-      supportsUnits: false,
-      supportsTransient: true,
-      // 无操作 = 成功（与 systemd 的动词返回形态一致，调用方无需按 provider 分支）。
-      daemonReload() {
-        return true;
-      },
-      resetFailed() {
-        return true;
-      },
-      /** 拉起：spawn(detached)——POSIX 自成进程组（kill(-pid) 语义的前提）、win32 windowsHide +
-       *  CREATE_NEW_PROCESS_GROUP（NO-CONSOLE-WINDOW 纪律收口在 platform/os/spawn.js）。
-       *  调用方传来的 props（cgroup 语义）在此如实忽略：本档无内核强制可施加。
-       *  @param {{cmd:string[], env?:object, workingDir?:string, pidFile?:string, port?:number, anchors?:string[]}} o */
-      startTransient(o) {
-        const opts = o || {};
-        const cmd2 = opts.cmd || [];
-        if (!cmd2.length) throw new Error("portable \u62C9\u8D77\u62D2\u7EDD\uFF1A\u7A7A\u547D\u4EE4");
-        const child = spawner.detached(cmd2[0], cmd2.slice(1), {
-          cwd: opts.workingDir || void 0,
-          env: Object.assign({}, process.env, opts.env || {})
-        });
-        child.on("error", () => {
-        });
-        if (!child.pid) {
-          try {
-            child.kill();
-          } catch {
-          }
-          throw new Error("portable \u62C9\u8D77\u5931\u8D25\uFF1Aspawn \u672A\u4EA7\u751F\u8FDB\u7A0B");
+        const k = keyOf(full);
+        const hit = found.get(k);
+        if (hit) {
+          if (!hit.sources.includes(how)) hit.sources.push(how);
+          return hit;
         }
-        try {
-          child.unref();
-        } catch {
+        if (!canExec(full)) {
+          note(how, "\u6307\u5411\u7684\u6587\u4EF6\u4E0D\u53EF\u6267\u884C: " + full);
+          return null;
         }
-        if (opts.pidFile) {
-          try {
-            fs2.writeFileSync(opts.pidFile, String(child.pid));
-          } catch {
-          }
+        const item = { id: k, name: path2.basename(full).replace(/\.exe$/i, ""), engine: engineOf(full), bin: full, source: how, sources: [how] };
+        found.set(k, item);
+        note(how, item.name);
+        return item;
+      };
+      const progIds = /* @__PURE__ */ new Map();
+      const addProgId = (pid, how) => {
+        const s = String(pid || "").trim();
+        if (!safeRegKeyPart(s)) return;
+        if (progIds.get(s) === "userchoice") return;
+        progIds.set(s, how);
+      };
+      let defaultId = null;
+      let defaultSource = null;
+      const DEF_RANK = { userchoice: 1, "scheme-association": 2, "only-installed": 9 };
+      let defRank = 99;
+      const setDefault = (item, how) => {
+        const r = DEF_RANK[how] === void 0 ? 99 : DEF_RANK[how];
+        if (item && r < defRank) {
+          defRank = r;
+          defaultId = item.id;
+          defaultSource = how;
         }
-        return true;
-      },
-      /** 停止（有界同步复核）：终止我们的进程树，确认「端口锚点与 run.pid 锚点双双消失」才 true。
-       *  无可杀对象（含 run.pid 为陈旧/被 PID 复用）-> 清文件后如实 true（幂等）。 */
-      stopUnit(unit, o) {
-        const opts = o || {};
-        const ours = findOurs(opts);
-        if (!ours) {
-          removePidFile(opts);
-          return true;
-        }
-        try {
-          procOS.killTree(ours.pid, "SIGTERM", void 0, { ownGroup: ours.ownGroup });
-        } catch {
-        }
-        const budget = Math.max(0, Math.min(typeof opts.timeoutMs === "number" ? opts.timeoutMs : STOP_WAIT_CAP_MS, STOP_WAIT_CAP_MS));
-        const t0 = Date.now();
-        for (; ; ) {
-          if (!findOurs(opts)) {
-            removePidFile(opts);
-            return true;
-          }
-          if (Date.now() - t0 >= budget) break;
-          nap(NAP_MS);
+      };
+      const cmdToExe = (raw) => raw ? exeFromCmdLine(expandEnvVars(raw, env)) : null;
+      const uc = regValue(runOut, note, "HKCU\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice", "ProgId");
+      if (uc) addProgId(uc, "userchoice");
+      for (const root of ["HKCU\\Software\\Classes", "HKLM\\Software\\Classes"]) {
+        const pid = regValue(runOut, note, root + "\\https");
+        if (pid) addProgId(pid, "scheme-association");
+        const exe = cmdToExe(regValue(runOut, note, root + "\\https\\shell\\open\\command"));
+        if (exe) setDefault(push(exe, "scheme-association"), "scheme-association");
+      }
+      for (const name of regSubkeys(runOut, note, "HKLM\\SOFTWARE\\Clients\\StartMenuInternet")) {
+        addProgId(name, "startmenu-catalog");
+        const exe = cmdToExe(regValue(runOut, note, "HKLM\\SOFTWARE\\Clients\\StartMenuInternet\\" + name + "\\shell\\open\\command")) || winExeOfProgId(runOut, note, name, env);
+        if (exe) push(exe, "startmenu-catalog");
+      }
+      for (const root of ["HKLM\\SOFTWARE", "HKCU\\SOFTWARE"]) {
+        for (const capPath of regValueTargets(runOut, note, root + "\\RegisteredApplications")) {
+          const https = regValue(runOut, note, capPath + "\\UrlAssociations\\https");
+          const sid = regValue(runOut, note, capPath, "StartMenuInternet");
+          const pid = https || sid;
+          if (pid) addProgId(pid, "registered-apps");
         }
-        try {
-          procOS.killTree(ours.pid, "SIGKILL", void 0, { ownGroup: ours.ownGroup });
-        } catch {
+      }
+      for (const exe of WIN_APP_PATHS) {
+        for (const root of ["HKCU", "HKLM"]) {
+          const v = regValue(runOut, note, root + "\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\" + exe);
+          if (v && push(v, "app-paths")) break;
         }
-        nap(NAP_MS);
-        if (!findOurs(opts)) {
-          removePidFile(opts);
-          return true;
+      }
+      for (const [pid, how] of progIds) {
+        const exe = winExeOfProgId(runOut, note, pid, env);
+        if (!exe) continue;
+        const item = push(exe, how);
+        if (how === "userchoice") setDefault(item, "userchoice");
+      }
+      if (found.size === 1) setDefault([...found.values()][0], "only-installed");
+      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
+    }
+    var MAC_JXA_LIST = [
+      "ObjC.import('Foundation');",
+      "var ws=$.NSWorkspace.sharedWorkspace;",
+      "var u=$.NSURL.URLWithString('https://dsh.local/probe');",
+      "var out=[];var def='';",
+      "try{var d=ws.URLForApplicationToOpenURL(u); if(!d.isNil()) def=ObjC.unwrap(d.path)||'';}catch(e){}",
+      "var list=null;",
+      "try{list=ws.urlsForApplicationsToOpenURL(u);}catch(e){}",
+      "if(list===null||typeof list.count!=='number'){if(def){out.push(def+'\\t\\t1');}}else{",
+      "var n=Number(list.count);",
+      "for(var i=0;i<n;i++){",
+      "var p=ObjC.unwrap(list.objectAtIndex(i).path)||''; if(!p) continue;",
+      "var exe='';var bid='';",
+      "var b=$.NSBundle.bundleWithPath(p);",
+      "if(!b.isNil()){exe=ObjC.unwrap(b.executablePath)||'';bid=ObjC.unwrap(b.bundleIdentifier)||'';}",
+      "out.push((exe||p)+'\\t'+bid+'\\t'+(p&&def&&p===def?1:0));}",
+      "}",
+      // 末句必须是裸表达式：osascript 取的是最后一条**语句**的值，if/else 语句不产结果，
+      //   写在分支里会让整段查询输出空字符串（表现为「系统未报任何可用应用」）。
+      "out.join('\\n');"
+    ].join("");
+    function probeMac(d) {
+      const { runOut, canExec } = d;
+      const notes = [];
+      const note = (source, detail) => {
+        notes.push({ source, detail });
+      };
+      const out = runOut("osascript", ["-l", "JavaScript", "-e", MAC_JXA_LIST]);
+      if (!out || !out.trim()) {
+        note("launchservices", "\u67E5\u8BE2\u65E0\u8F93\u51FA\uFF08\u65E7\u7CFB\u7EDF\u6216\u88AB\u6743\u9650\u62E6\u622A\uFF09");
+        return { browsers: [], defaultId: null, defaultSource: null, probed: notes };
+      }
+      const keyOf = (exe) => String(exe || "").toLowerCase();
+      const found = /* @__PURE__ */ new Map();
+      let defaultId = null;
+      let defaultSource = null;
+      for (const line of out.trim().split("\n")) {
+        const parts = line.split("	");
+        const bin = (parts[0] || "").trim();
+        if (!bin) continue;
+        if (!canExec(bin)) {
+          note("launchservices", "\u4E0D\u53EF\u6267\u884C: " + bin);
+          continue;
         }
-        return false;
-      },
-      /** 活跃判定（三态）：port 与 pidFile 都缺 = 无从查询 -> null，删除保护路径不得把它当「已停止」。
-       *  anchors 为空时降级为「端口有监听即活跃」（monitor.probeInstance 同口径，该调用方本就以此判在线）；
-       *  杀进程（stopUnit）仍要求锚点命中 —— 判定可宽，动手必严。
-       *  存活 pid 的 cmdline 读不到 = 分不清「他人复用」与「查询失败」-> null。 */
-      isUnitActive(unit, o) {
-        const opts = o || {};
-        if (findOurs(opts)) return true;
-        const port = portOf(opts);
-        const pidFile = pidFileOf(opts);
-        const anchors = anchorsOf(opts);
-        if (!port && !pidFile) return null;
-        if (!anchors.length) {
-          const fp2 = readPidFile(pidFile);
-          if (fp2 !== null && pidlookup.isAlive(fp2)) return true;
-          if (port) {
-            const q = pidlookup.findListeningPid(port);
-            if (q !== null) return true;
-            if (fp2 !== null) return false;
-            return null;
+        const k = keyOf(bin);
+        if (!found.has(k)) found.set(k, { id: k, name: path2.basename(bin), engine: engineOf(bin), bin, source: "launchservices", sources: ["launchservices"], isDefault: false });
+        if (parts[2] === "1") {
+          found.get(k).isDefault = true;
+          if (!defaultId) {
+            defaultId = k;
+            defaultSource = "launchservices";
           }
-          return fp2 !== null ? false : null;
         }
-        const fp = readPidFile(pidFile);
-        if (fp !== null && pidlookup.isAlive(fp) && !pidlookup.readCmdline(fp)) return null;
-        return false;
-      },
-      // portable 无 systemd transient 单元文件；run.pid 的清理归 cleanTransient。
-      transientUnitFile() {
-        return null;
-      },
-      /** 清理同名残留：先停掉仍活着的旧进程（重启自愈路径：旧进程未监听端口时端口探测拦不住），再清 run.pid。 */
-      cleanTransient(unit, o) {
-        const opts = o || {};
-        const errors = [];
-        if (this.stopUnit(unit, Object.assign({}, opts, { timeoutMs: 1500 })) === false) errors.push("stop-unconfirmed");
-        removePidFile(opts);
-        return { ok: errors.length === 0, errors };
-      },
-      /** 返回值只表示「是否改动了内核强制」；governor 不因 false 走降级分支 —— 违规处置链本就平台无关。 */
-      setLimits() {
-        return false;
       }
-    };
-    module2.exports = { portable, findOurs, matchesAnchors, _test: { readPidFile, matchesAnchors, findOurs } };
-  }
-});
-
-// src/platform/os/service.js
-var require_service = __commonJS({
-  "src/platform/os/service.js"(exports2, module2) {
-    "use strict";
-    var fs2 = require("node:fs");
-    var os2 = require("node:os");
-    var path2 = require("node:path");
-    var exec = require_exec();
-    var input = require_input();
-    var execPath = require_exec_path();
-    var { portable } = require_portable();
-    var CapabilityError = class extends Error {
-      constructor(msg) {
-        super(msg);
-        this.name = "CapabilityError";
-        this.code = "CAPABILITY_UNSUPPORTED";
+      note("launchservices", found.size ? found.size + " \u4E2A\u53EF\u6253\u5F00 https \u7684\u5E94\u7528" : "\u7CFB\u7EDF\u672A\u62A5\u4EFB\u4F55\u53EF\u7528\u5E94\u7528");
+      if (!defaultId && found.size === 1) {
+        defaultId = [...found.keys()][0];
+        defaultSource = "only-installed";
       }
-    };
-    var PLATFORM = process.platform;
-    function run(cmd2, args, opts) {
-      return exec.run(cmd2, args, opts || {});
+      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
     }
-    var UNIT_NAME_RE = input.UNIT_NAME_RE;
-    function unitNameViolation(unit) {
-      return input.unitNameViolation(unit);
+    var PJ = path2.posix.join;
+    function desktopDirs(env, home) {
+      const dataHome = env.XDG_DATA_HOME || PJ(home, ".local", "share");
+      const dataDirs = String(env.XDG_DATA_DIRS || "/usr/local/share:/usr/share").split(":").filter(Boolean);
+      const dirs = [[dataHome, "xdg"], ...dataDirs.map((p) => [p, "xdg"])];
+      dirs.push([PJ(home, ".local", "share"), "xdg"]);
+      dirs.push(["/var/lib/flatpak/exports/share", "flatpak"]);
+      dirs.push([PJ(home, ".local", "share", "flatpak", "exports", "share"), "flatpak"]);
+      dirs.push(["/var/lib/snapd/desktop", "snap"]);
+      const seen = [];
+      return dirs.map(([root, kind]) => ({ dir: PJ(root, "applications"), kind })).filter((x) => {
+        if (seen.includes(x.dir)) return false;
+        seen.push(x.dir);
+        return true;
+      });
     }
-    var systemd = {
-      kind: "systemd",
-      supportsUnits: true,
-      supportsTransient: true,
-      daemonReload() {
-        try {
-          return run("systemctl", ["--user", "daemon-reload"], { timeoutMs: 15e3 }) !== null;
-        } catch {
-          return false;
-        }
-      },
-      stopUnit(unit, opts) {
-        if (unitNameViolation(unit)) return false;
-        const o = opts || {};
-        try {
-          return run("systemctl", ["--user", "stop", unit], { timeoutMs: o.timeoutMs || 15e3 }) !== null;
-        } catch {
-          return false;
-        }
-      },
-      // run() 失败返回 null 而不抛，try/catch 包裹会恒返回 true；如实回传成败。
-      resetFailed(unit) {
-        if (unitNameViolation(unit)) return false;
-        return run("systemctl", ["--user", "reset-failed", unit], { timeoutMs: 1e4 }) !== null;
-      },
-      /** 单元活跃判定（三态）：确认 active -> true；确认不活跃 -> false；查询未完成 -> null（未知）。
-       *  run() 失败只返回 null，「查询未完成」不可折成 false：instance/ops.js 删除数据目录前
-       *  按「!== false 才放行删除」消费本函数，折假即超时窗口内误删沙箱数据。 */
-      isUnitActive(unit) {
-        if (!unit) return true;
-        if (unitNameViolation(unit)) return false;
-        try {
-          const r = exec.runDetail("systemctl", ["--user", "is-active", unit], { timeoutMs: 8e3 });
-          if (r.timedOut) return null;
-          const state = String(r.stdout || "").trim();
-          if (state === "active") return true;
-          if (state || r.code !== null) return false;
-          return null;
-        } catch {
-          return null;
-        }
-      },
-      transientUnitFile(unit) {
-        if (unitNameViolation(unit)) return null;
-        let uid = 0;
-        try {
-          uid = os2.userInfo().uid;
-        } catch {
+    function browserFromDesktop(text, kind, file) {
+      let inMain = false;
+      const got = {};
+      for (const line of String(text).split(/\r?\n/)) {
+        if (/^\[Desktop Entry\]\s*$/.test(line)) {
+          inMain = true;
+          continue;
         }
-        const rt = process.env.XDG_RUNTIME_DIR || "/run/user/" + uid;
-        return path2.join(rt, "systemd", "transient", unit + ".service");
-      },
-      /** 清理 stale transient 单元：stop/reset-failed/删单元文件/daemon-reload。
-       *  必须 reload：删除文件后 systemd 仍缓存该单元为 loaded，否则 systemd-run 拒绝重建同名单元。
-       *  返回 {ok, errors}：stop/reset-failed 对「从未加载的单元」非零退出属正常，不计入 ok；
-       *  硬失败只有删单元文件与 daemon-reload（run() 失败返回 null 不抛，成败须如实回传）。 */
-      cleanTransient(unit) {
-        const errors = [];
-        const bad = unitNameViolation(unit);
-        if (bad) return { ok: false, errors: [bad] };
-        exec.runDetail("systemctl", ["--user", "stop", unit + ".service"], { timeoutMs: 1e4 });
-        exec.runDetail("systemctl", ["--user", "reset-failed", unit + ".service"], { timeoutMs: 1e4 });
-        let unlinkOk = true;
-        try {
-          const f = this.transientUnitFile(unit);
-          if (f) fs2.unlinkSync(f);
-        } catch {
-          unlinkOk = false;
-          errors.push("unlink " + unit + ".service");
-        }
-        if (!exec.runDetail("systemctl", ["--user", "daemon-reload"], { timeoutMs: 15e3 }).ok) errors.push("daemon-reload");
-        return { ok: unlinkOk && errors.length === 0, errors };
-      },
-      /** 以 transient 单元启动（独立 cgroup；每实例隔离）。
-       *  @param {{unit:string, cmd:string[], env?:object, props?:string[], workingDir?:string, description?:string, timeoutMs?:number}} o
-       *    props 为 systemd 属性（如 KillMode=process、MemoryMax=8G），平台层只拼装成 --property，不解释语义。 */
-      startTransient(o) {
-        const opts = o || {};
-        const bad = unitNameViolation(opts.unit);
-        if (bad) throw new Error("systemd-run \u62D2\u7EDD: " + bad);
-        const args = ["--user", "--unit=" + opts.unit];
-        if (opts.description) args.push("--description=" + opts.description);
-        for (const p of opts.props || []) args.push("--property=" + p);
-        for (const [k, v] of Object.entries(opts.env || {})) args.push("--setenv=" + k + "=" + v);
-        if (opts.workingDir) args.push("--working-directory=" + opts.workingDir);
-        args.push("--", ...opts.cmd || []);
-        const r = exec.runDetail("systemd-run", args, { timeoutMs: opts.timeoutMs || 2e4 });
-        if (!r.ok) throw new Error("systemd-run \u5931\u8D25: " + (r.error || "unknown") + (r.stderr ? " | " + String(r.stderr).trim() : ""));
-        return true;
-      },
-      /** 运行期改限额（W3 动态化）：systemctl --user set-property 立即生效，无需重启单元。
-       *  必带 --runtime：transient 单元本不落盘，不带它会把 drop-in 写进用户配置目录，陈旧下限永久黏住。
-       *  值只来自 sandbox.unitProps 同源的 alloc（平台层翻译语义、不决定数额）。 */
-      setLimits(unit, alloc) {
-        if (unitNameViolation(unit)) return false;
-        const a = alloc || {};
-        const props = [];
-        if (a.memoryMax) props.push("MemoryMax=" + a.memoryMax);
-        if (a.memoryHigh) props.push("MemoryHigh=" + a.memoryHigh);
-        if (a.cpuQuota) props.push("CPUQuota=" + a.cpuQuota);
-        if (!props.length) return false;
-        return exec.runDetail(
-          "systemctl",
-          ["--user", "set-property", "--runtime", unit].concat(props),
-          { timeoutMs: 1e4 }
-        ).ok;
+        if (/^\[/.test(line)) break;
+        if (!inMain) continue;
+        const m = line.match(/^(Exec|Name|TryExec|Categories)=(.*)$/);
+        if (!m) continue;
+        if (m[1] === "Name" && got.Name) continue;
+        got[m[1]] = m[2].trim();
       }
-    };
-    function makeUnsupported(kind, label) {
+      if (!got.Exec) return null;
+      const categories = String(got.Categories || "");
+      const parsed = parseExecLine(got.Exec);
+      if (!parsed) return null;
+      const engine = engineOf(parsed.bin);
+      const claimsBrowser = /(^|;)WebBrowser(;|$)/.test(categories);
+      if (!claimsBrowser && engine === "other") return null;
+      if (engine === "other") return null;
       return {
-        kind,
-        supportsUnits: false,
-        supportsTransient: false,
-        daemonReload() {
-          return false;
-        },
-        stopUnit() {
-          throw new CapabilityError(label + "\uFF1A\u4E0D\u652F\u6301\u4EE5\u7528\u6237\u5355\u5143\u65B9\u5F0F\u7BA1\u7406\u88AB\u7BA1\u5B9E\u4F8B");
-        },
-        resetFailed() {
-          return false;
-        },
-        isUnitActive(unit) {
-          return unit ? false : true;
-        },
-        transientUnitFile() {
-          return null;
-        },
-        // 无 transient 单元可清 = 成功；返回形态与 systemd 一致，调用方无需分支。
-        cleanTransient() {
-          return { ok: true, errors: [] };
-        },
-        startTransient() {
-          throw new CapabilityError(label + "\uFF1A\u4E0D\u652F\u6301\u62C9\u8D77\u5B9E\u4F8B\u8231\uFF08portable \u6863\u672A\u542F\u7528\uFF09");
-        },
-        setLimits() {
-          return false;
-        }
+        // id 恒为归一后的可执行文件路径：defaultId 靠它在清单里定位条目，三平台同一契约
+        id: parsed.bin.toLowerCase(),
+        name: got.Name || path2.basename(file, ".desktop"),
+        engine,
+        bin: parsed.bin,
+        baseArgs: parsed.baseArgs,
+        source: kind,
+        desktopFile: file
       };
     }
-    var NONE = makeUnsupported("none", "\u5F53\u524D\u5E73\u53F0\u65E0\u670D\u52A1\u7BA1\u7406\u5668");
-    var _systemdRun = null;
-    function hasSystemdRun() {
-      if (_systemdRun === null) {
-        _systemdRun = !!execPath.resolveExecutable("systemd-run") || exec.runOut("systemd-run", ["--version"], { timeoutMs: 3e3 }) !== null;
-      }
-      return _systemdRun;
-    }
-    function current() {
-      if (PLATFORM === "linux") return hasSystemdRun() ? systemd : portable;
-      if (PLATFORM === "darwin" || PLATFORM === "win32") return portable;
-      return NONE;
-    }
-    module2.exports = { current, CapabilityError, kind: () => current().kind, PLATFORM, UNIT_NAME_RE, unitNameViolation, _testProviders: { systemd, portable, NONE } };
-  }
-});
-
-// src/platform/os/notify.js
-var require_notify = __commonJS({
-  "src/platform/os/notify.js"(exports2, module2) {
-    "use strict";
-    var spawnOS = require_spawn();
-    function appleScriptString(s) {
-      return JSON.stringify(String(s));
-    }
-    function powerShellString(s) {
-      return "'" + String(s).replace(/'/g, "''") + "'";
-    }
-    function notifyCommand(platform, title, body) {
-      const pl = platform || process.platform;
-      const t = String(title == null ? "" : title);
-      const b = String(body == null ? "" : body);
-      if (pl === "linux") {
-        return { cmd: "notify-send", args: ["-a", "dsh-supervisor", t, b] };
-      }
-      if (pl === "darwin") {
-        const script = "display notification " + appleScriptString(b) + " with title " + appleScriptString(t);
-        return { cmd: "osascript", args: ["-e", script] };
-      }
-      if (pl === "win32") {
-        const ps = [
-          '[reflection.assembly]::loadwithpartialname("System.Windows.Forms") | Out-Null',
-          '[reflection.assembly]::loadwithpartialname("System.Drawing") | Out-Null',
-          "$n = New-Object System.Windows.Forms.NotifyIcon",
-          "$n.Icon = [System.Drawing.SystemIcons]::Information",
-          "$n.Visible = $true",
-          "$n.ShowBalloonTip(4000, " + powerShellString(t) + ", " + powerShellString(b) + ", [System.Windows.Forms.ToolTipIcon]::None)",
-          "Start-Sleep -Milliseconds 4200",
-          "$n.Dispose(); $n.Visible = $false"
-        ].join("; ");
-        return { cmd: "powershell", args: ["-NoProfile", "-NonInteractive", "-Command", ps] };
+    function resolveLinuxBin(bin, canExec, env) {
+      const b = String(bin || "").trim();
+      if (!b) return null;
+      if (b.startsWith("/")) return canExec(b) ? b : null;
+      if (b.includes("/")) return null;
+      for (const dir of String(env.PATH || "").split(":")) {
+        if (!dir) continue;
+        const p = PJ(dir.replace(/\/+$/, ""), b);
+        if (canExec(p)) return p;
       }
       return null;
     }
-    function notify(title, body, onError) {
-      try {
-        const plan = notifyCommand(process.platform, title, body);
-        if (!plan) return false;
-        const c = spawnOS.detachedIgnored(plan.cmd, plan.args);
-        c.on("error", () => {
-          if (onError) onError();
-        });
-        c.unref();
-        return true;
-      } catch {
-        if (onError) onError();
-        return false;
-      }
-    }
-    module2.exports = { notify, notifyCommand, appleScriptString, powerShellString };
-  }
-});
-
-// src/platform/os/browser-inventory.js
-var require_browser_inventory = __commonJS({
-  "src/platform/os/browser-inventory.js"(exports2, module2) {
-    "use strict";
-    var fs2 = require("node:fs");
-    var path2 = require("node:path");
-    var os2 = require("node:os");
-    var exec = require_exec();
-    var { isExecutableFile } = require_exec_path();
-    var PROBE_TIMEOUT_MS = 1500;
-    function engineOf(bin) {
-      const base = String(bin || "").toLowerCase().split(/[\\/]/).pop();
-      if (/(chrome|chromium|msedge|edge|brave|vivaldi|opera|thorium)/.test(base)) return "chromium";
-      if (/(firefox|librewolf|waterfox)/.test(base)) return "firefox";
-      return "other";
-    }
-    function tokenizeExec(line) {
-      const toks = [];
-      let cur = "";
-      let q = null;
-      let esc = false;
-      let has = false;
-      for (const ch of String(line)) {
-        if (esc) {
-          cur += ch;
-          esc = false;
-          continue;
-        }
-        if (ch === "\\") {
-          esc = true;
-          has = true;
-          continue;
+    function probeLinux(d) {
+      const { runOut, readFile, exists, listDir, canExec, env, home } = d;
+      const notes = [];
+      const note = (source, detail) => {
+        notes.push({ source, detail });
+      };
+      const found = /* @__PURE__ */ new Map();
+      const usable = (item) => {
+        const resolved = resolveLinuxBin(item.bin, canExec, env);
+        if (!resolved) {
+          note(item.source, "\u4E0D\u53EF\u6267\u884C: " + item.bin);
+          return null;
         }
-        if (q) {
-          if (ch === q) q = null;
-          else cur += ch;
-          continue;
+        const k = resolved.toLowerCase();
+        const hit = found.get(k);
+        if (hit) {
+          if (!hit.sources.includes(item.source)) hit.sources.push(item.source);
+          return hit;
         }
-        if (ch === "'" || ch === '"') {
-          q = ch;
-          has = true;
+        const v = Object.assign({}, item, { id: k, bin: resolved, sources: [item.source] });
+        found.set(k, v);
+        return v;
+      };
+      for (const { dir, kind } of desktopDirs(env, home)) {
+        let names = [];
+        try {
+          names = listDir(dir).filter((f) => f.endsWith(".desktop"));
+        } catch {
           continue;
         }
-        if (/\s/.test(ch)) {
-          if (has) {
-            toks.push(cur);
-            cur = "";
-            has = false;
-          }
-          continue;
+        for (const f of names) {
+          let text = null;
+          try {
+            text = readFile(PJ(dir, f));
+          } catch {
+            continue;
+          }
+          const item = browserFromDesktop(text, kind, f);
+          if (item) usable(item);
         }
-        cur += ch;
-        has = true;
       }
-      if (has) toks.push(cur);
-      return toks;
+      let defaultId = null;
+      let defaultSource = null;
+      const fromMime = linuxDefaultFromMimeApps(readFile, exists, env, home, note);
+      if (fromMime) {
+        const item = usable(fromMime);
+        if (item) {
+          defaultId = item.id;
+          defaultSource = "mimeapps";
+        }
+      }
+      const id = runOut("xdg-settings", ["get", "default-web-browser"]);
+      const desktopId = id && String(id).trim();
+      if (!defaultId && desktopId && /^[A-Za-z0-9._-]+\.desktop$/.test(desktopId)) {
+        for (const { dir } of desktopDirs(env, home)) {
+          const p = PJ(dir, desktopId);
+          let text = null;
+          try {
+            if (exists(p)) text = readFile(p);
+          } catch {
+            continue;
+          }
+          if (text === null) continue;
+          const item = browserFromDesktop(text, "xdg-settings", desktopId);
+          const used = item && usable(item);
+          if (used) {
+            defaultId = used.id;
+            defaultSource = "xdg-settings";
+            break;
+          }
+        }
+      }
+      if (!desktopId) note("xdg-settings", "\u65E0\u8F93\u51FA");
+      else if (defaultSource === "xdg-settings") note("xdg-settings", "\u9ED8\u8BA4=" + defaultId);
+      else note("xdg-settings", "\u62A5\u51FA " + desktopId + (defaultId ? "\uFF08\u9ED8\u8BA4\u5DF2\u7531 " + defaultSource + " \u5B9A\u51FA\uFF09" : " \u4F46\u4E0D\u53EF\u7528"));
+      if (!defaultId && found.size === 1) {
+        defaultId = [...found.keys()][0];
+        defaultSource = "only-installed";
+      }
+      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
     }
-    function parseExecLine(line) {
-      let toks = tokenizeExec(line).filter((t) => t !== "%%" && !/^%[a-zA-Z]$/.test(t));
-      if (toks[0] === "env") {
-        let i = 1;
-        while (i < toks.length && /=/.test(toks[i])) i++;
-        toks = toks.slice(i);
+    function linuxDefaultFromMimeApps(readFile, exists, env, home, note) {
+      const cfgHome = env.XDG_CONFIG_HOME || PJ(home, ".config");
+      const cfgDirs = String(env.XDG_CONFIG_DIRS || "/etc/xdg").split(":").filter(Boolean);
+      const dataDirs = String(env.XDG_DATA_DIRS || "/usr/local/share:/usr/share").split(":").filter(Boolean);
+      const files = [
+        PJ(cfgHome, "mimeapps.list"),
+        ...cfgDirs.map((d) => PJ(d, "mimeapps.list")),
+        ...dataDirs.map((d) => PJ(d, "applications", "mimeapps.list"))
+      ];
+      for (const f of files) {
+        if (!exists(f)) continue;
+        let text = null;
+        try {
+          text = readFile(f);
+        } catch {
+          continue;
+        }
+        const id = mimeAppsDefault(text);
+        if (!id) continue;
+        note("mimeapps", path2.basename(f) + " -> " + id);
+        for (const { dir, kind } of desktopDirs(env, home)) {
+          const p = PJ(dir, id);
+          if (!exists(p)) continue;
+          let dt = null;
+          try {
+            dt = readFile(p);
+          } catch {
+            continue;
+          }
+          const item = browserFromDesktop(dt, kind, id);
+          if (item) return item;
+        }
+        return null;
       }
-      if (!toks.length) return null;
-      return { bin: toks[0], baseArgs: toks.slice(1) };
+      note("mimeapps", "\u65E0\u9ED8\u8BA4\u9879");
+      return null;
     }
-    function regValueOf(out) {
-      const m = String(out || "").match(/REG_(?:EXPAND_SZ|SZ)\s+(.*)/);
-      if (!m) return null;
-      return m[1].trim() || null;
+    function mimeAppsDefault(text) {
+      let inDefault = false;
+      for (const line of String(text || "").split(/\r?\n/)) {
+        if (/^\s*\[/.test(line)) {
+          inDefault = /^\s*\[Default Applications\]\s*$/.test(line);
+          continue;
+        }
+        if (!inDefault) continue;
+        const m = line.match(/^\s*x-scheme-handler\/https?\s*=\s*(.*)$/i);
+        if (!m) continue;
+        const ids = m[1].split(";").map((s) => s.trim()).filter((s) => /^[A-Za-z0-9._-]+\.desktop$/.test(s));
+        if (ids.length) return ids[0];
+      }
+      return null;
     }
-    function expandEnvVars(value, env) {
-      const e = env || process.env;
-      return String(value).replace(/%([^%]+)%/g, (all, name) => e[name] === void 0 ? all : e[name]);
+    function probe(platform, d) {
+      const pl = platform || process.platform;
+      const dd = Object.assign({}, d, { canExec: d.canExec || ((p) => isExecutableFile(p, pl)) });
+      if (pl === "win32") return probeWin(dd);
+      if (pl === "darwin") return probeMac(dd);
+      return probeLinux(dd);
     }
-    function exeFromCmdLine(cmdLine) {
-      const s = String(cmdLine || "");
-      let m = s.match(/^\s*"([^"]+\.exe)"/i);
-      if (m) return m[1];
-      m = s.match(/^\s*(.*?\.exe)/i);
-      return m ? m[1] : null;
+    var CACHE = /* @__PURE__ */ Object.create(null);
+    function inventory(platform, o) {
+      const ov = o || {};
+      const pl = platform || process.platform;
+      const now = ov.now || (() => Date.now());
+      const ttl = ov.ttlMs === void 0 ? 6e4 : ov.ttlMs;
+      const cached = CACHE[pl];
+      if (!ov.force && cached && now() - cached.at < ttl) return Object.assign({ cached: true }, cached.value);
+      const runOut = ov.runOut || ((bin, args) => exec.runOut(bin, args, { timeoutMs: PROBE_TIMEOUT_MS }));
+      const readFile = ov.readFile || ((p) => fs2.readFileSync(p, "utf8"));
+      const exists = ov.exists || ((p) => fs2.existsSync(p));
+      const listDir = ov.listDir || ((p) => fs2.readdirSync(p));
+      let value;
+      try {
+        value = probe(pl, { runOut, readFile, exists, listDir, canExec: ov.canExec, env: ov.env || process.env, home: ov.home || os2.homedir() });
+      } catch (e) {
+        value = { browsers: [], defaultId: null, defaultSource: null, probed: [{ source: "probe-error", detail: String(e && e.message || e) }] };
+      }
+      value.at = now();
+      value.platform = pl;
+      value.browsers.sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+      CACHE[pl] = { at: now(), value };
+      return Object.assign({ cached: false }, value);
     }
-    function safeRegKeyPart(s) {
-      return typeof s === "string" && s.length > 0 && s.length <= 200 && /^[\x20-\x7e]+$/.test(s) && !/[;|&`$()<>^"'\r\n]/.test(s);
+    function invalidate(platform) {
+      if (platform) delete CACHE[platform];
+      else for (const k of Object.keys(CACHE)) delete CACHE[k];
     }
-    function regValue(runner, note, key, name) {
-      const args = name ? ["query", key, "/v", name] : ["query", key, "/ve"];
-      const out = runner("reg.exe", args);
-      const v = regValueOf(out);
-      note(name ? key + " /v " + name : key, v ? "ok" : "empty");
-      return v;
+    module2.exports = {
+      inventory,
+      invalidate,
+      probe,
+      probeWin,
+      probeMac,
+      probeLinux,
+      engineOf,
+      tokenizeExec,
+      parseExecLine,
+      exeFromCmdLine,
+      // 注册表原语住在 ./registry.js（单一实现），此处原样转出：既有门禁与消费方的取用口不变。
+      regValueOf: registry.regValueOf,
+      expandEnvVars,
+      safeRegKeyPart,
+      regKeyFull: registry.regKeyFull,
+      regValue,
+      regSubkeys,
+      regValueTargets,
+      browserFromDesktop,
+      desktopDirs,
+      resolveLinuxBin,
+      mimeAppsDefault,
+      linuxDefaultFromMimeApps,
+      WIN_APP_PATHS,
+      PROBE_TIMEOUT_MS
+    };
+  }
+});
+
+// src/platform/os/egress.js
+var require_egress = __commonJS({
+  "src/platform/os/egress.js"(exports2, module2) {
+    "use strict";
+    var tls = require("node:tls");
+    var dns = require("node:dns");
+    var exec = require_exec();
+    var registry = require_registry();
+    var PROBE_TIMEOUT_MS = 2500;
+    var READ_TTL_MS = 6e4;
+    function hostOf(url) {
+      try {
+        return new URL(String(url)).hostname.toLowerCase() || null;
+      } catch {
+        return null;
+      }
     }
-    var REG_HIVE_ALIAS = { HKLM: "HKEY_LOCAL_MACHINE", HKCU: "HKEY_CURRENT_USER", HKCR: "HKEY_CLASSES_ROOT", HKU: "HKEY_USERS", HKCC: "HKEY_CURRENT_CONFIG" };
-    function regKeyFull(key) {
-      const s = String(key || "");
-      const i = s.indexOf("\\");
-      const root = i < 0 ? s : s.slice(0, i);
-      return (REG_HIVE_ALIAS[root.toUpperCase()] || root) + (i < 0 ? "" : s.slice(i));
+    function proxyWin(runner, note) {
+      const KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings";
+      const read = (args) => Promise.resolve(runner("reg.exe", args));
+      return Promise.all([
+        read(["query", KEY, "/v", "ProxyEnable"]),
+        read(["query", KEY, "/v", "ProxyServer"]),
+        read(["query", KEY, "/v", "AutoConfigURL"])
+      ]).then(([en, sv, pc]) => {
+        const on = registry.regDwordOf(en);
+        const server = registry.regValueOf(sv);
+        const pac = registry.regValueOf(pc);
+        const state = on === 1 ? "on" : on === 0 ? pac ? "on" : "off" : "unknown";
+        note("registry:Internet Settings", "ProxyEnable=" + (on === null ? "unreadable" : on) + " server=" + (server || "-") + " pac=" + (pac ? "set" : "-"));
+        return { state, server: server || null, pac: pac || null, source: "registry:Internet Settings" };
+      });
     }
-    function regSubkeys(runner, note, key) {
-      const out = runner("reg.exe", ["query", key]);
-      if (!out) {
-        note(key, "unreadable");
-        return [];
-      }
-      const prefix = regKeyFull(key) + "\\";
-      const names = [];
-      for (const line of String(out).split(/\r?\n/)) {
-        const l = line.trim();
-        if (!/^HKEY_/i.test(l) || l.length <= prefix.length) continue;
-        if (l.slice(0, prefix.length).toUpperCase() !== prefix.toUpperCase()) continue;
-        const rest = l.slice(prefix.length);
-        if (rest && !rest.includes("\\") && safeRegKeyPart(rest)) names.push(rest);
-      }
-      note(key, names.length ? names.length + " \u9879" : "\u65E0\u5B50\u952E");
-      return names;
+    function proxyMac(runOut, note) {
+      return Promise.resolve(runOut("scutil", ["--proxy"])).then((out) => {
+        if (!out) {
+          note("scutil --proxy", "unreadable");
+          return { state: "unknown", server: null, pac: null, source: "scutil" };
+        }
+        const kv = {};
+        for (const line of String(out).split(/\r?\n/)) {
+          const m = line.match(/^\s*([A-Za-z]+)\s*:\s*(.+?)\s*$/);
+          if (m) kv[m[1]] = m[2];
+        }
+        const flagOn = (k) => kv[k] === "1";
+        const anyManual = kv.HTTPEnable !== void 0 || kv.HTTPSEnable !== void 0 || kv.SOCKSEnable !== void 0 || kv.ProxyAutoConfigEnable !== void 0;
+        const state = flagOn("HTTPEnable") || flagOn("HTTPSEnable") || flagOn("SOCKSEnable") || flagOn("ProxyAutoConfigEnable") ? "on" : anyManual ? "off" : "unknown";
+        note("scutil --proxy", "state=" + state);
+        return {
+          state,
+          server: kv.HTTPProxy || kv.HTTPSProxy || kv.SOCKSProxy || null,
+          pac: kv.ProxyAutoConfigURLString || kv.ProxyAutoConfigURL || null,
+          source: "scutil"
+        };
+      });
     }
-    var WIN_APP_PATHS = ["msedge.exe", "chrome.exe", "firefox.exe", "brave.exe", "opera.exe", "vivaldi.exe", "chromium.exe", "thorium.exe", "librewolf.exe"];
-    function winExeOfProgId(runner, note, progId, env) {
-      if (!safeRegKeyPart(progId)) return null;
-      for (const root of ["HKCU\\Software\\Classes", "HKLM\\Software\\Classes"]) {
-        const cmd2 = regValue(runner, note, root + "\\" + progId + "\\shell\\open\\command");
-        const exe = cmd2 ? exeFromCmdLine(expandEnvVars(cmd2, env)) : null;
-        if (exe) return exe;
-      }
-      return null;
+    function proxyLinux(env, note) {
+      const pick = (k) => typeof env[k] === "string" && env[k].trim() ? env[k].trim() : null;
+      const server = pick("https_proxy") || pick("HTTPS_PROXY") || pick("http_proxy") || pick("HTTP_PROXY") || pick("ALL_PROXY") || pick("all_proxy");
+      const noProxy = pick("no_proxy") || pick("NO_PROXY");
+      const state = server ? "on" : "unknown";
+      note("env proxy", "state=" + state);
+      return { state, server, pac: pick("PAC_FILE") || null, noProxy, source: "env" };
     }
-    function probeWin(d) {
-      const { runOut, env, canExec } = d;
+    function proxyUnknown(reason) {
+      return { state: "unknown", server: null, pac: null, source: reason };
+    }
+    var _proxyCache = /* @__PURE__ */ new Map();
+    function proxy(o) {
+      const ov = o || {};
+      const pl = ov.platform || process.platform;
+      const now = typeof ov.now === "function" ? ov.now : Date.now;
+      const ttl = ov.ttlMs === void 0 ? READ_TTL_MS : ov.ttlMs;
+      const hit = _proxyCache.get(pl);
+      if (!ov.force && ttl > 0 && hit && now() - hit.value.at < ttl) {
+        return Promise.resolve(Object.assign({}, hit.value, { cached: true }));
+      }
       const notes = [];
       const note = (source, detail) => {
         notes.push({ source, detail });
       };
-      const found = /* @__PURE__ */ new Map();
-      const keyOf = (exe) => String(exe || "").toLowerCase().replace(/[\\/]/g, "\\");
-      const push = (exe, how) => {
-        const full = expandEnvVars(exe, env).trim();
-        if (!/\.exe$/i.test(full)) {
-          note(how, "\u6765\u6E90\u7ED9\u51FA\u7684\u4E0D\u662F exe \u8DEF\u5F84: " + full);
-          return null;
-        }
-        const k = keyOf(full);
-        const hit = found.get(k);
-        if (hit) {
-          if (!hit.sources.includes(how)) hit.sources.push(how);
-          return hit;
-        }
-        if (!canExec(full)) {
-          note(how, "\u6307\u5411\u7684\u6587\u4EF6\u4E0D\u53EF\u6267\u884C: " + full);
-          return null;
-        }
-        const item = { id: k, name: path2.basename(full).replace(/\.exe$/i, ""), engine: engineOf(full), bin: full, source: how, sources: [how] };
-        found.set(k, item);
-        note(how, item.name);
-        return item;
+      const runOut = ov.runOut || ((bin, args) => exec.runOutAsync(bin, args, { timeoutMs: PROBE_TIMEOUT_MS }));
+      const out = Promise.resolve().then(() => {
+        if (pl === "win32") return proxyWin(runOut, note);
+        if (pl === "darwin") return proxyMac(runOut, note);
+        if (pl === "linux") return proxyLinux(ov.env || process.env, note);
+        return proxyUnknown("unsupported-platform");
+      }).catch((e) => {
+        note(pl + " proxy probe", "error: " + String(e && (e.code || e.message) || e));
+        return proxyUnknown("probe-failed");
+      }).then((v) => {
+        const value = Object.assign({ platform: pl, at: now(), probed: notes }, v);
+        _proxyCache.set(pl, { value });
+        return value;
+      });
+      return out;
+    }
+    function proxyRead() {
+      const hit = _proxyCache.get(process.platform);
+      return hit ? hit.value : null;
+    }
+    function reachWith(deps, host2, port, timeoutMs) {
+      const d = deps || {};
+      const ms = timeoutMs || PROBE_TIMEOUT_MS;
+      const lookup = d.lookup || ((h) => new Promise((resolve, reject) => dns.lookup(h, (err, addr) => err ? reject(err) : resolve(addr))));
+      const connect = d.connect || ((opts) => new Promise((resolve, reject) => {
+        let settled = false;
+        const sock = tls.connect(opts);
+        const fail = (e) => {
+          if (settled) return;
+          settled = true;
+          try {
+            sock.destroy();
+          } catch {
+          }
+          reject(e);
+        };
+        sock.once("secureConnect", () => {
+          if (settled) return;
+          settled = true;
+          try {
+            sock.destroy();
+          } catch {
+          }
+          resolve(true);
+        });
+        sock.once("error", fail);
+        sock.setTimeout(ms, () => fail(Object.assign(new Error("tls-timeout"), { code: "ETIMEDOUT" })));
+      }));
+      const started = Date.now();
+      const verdict = (ok, stage, detail) => ({ ok, stage, host: host2, port, detail, at: started });
+      return lookup(host2).then((addr) => connect({ host: addr, port, servername: host2, timeout: ms })).then(() => verdict(true, "tls", "TLS \u63E1\u624B\u5B8C\u6210")).catch((e) => {
+        const code = String(e && (e.code || e.message) || e);
+        if (/ENOTFOUND/i.test(code)) return verdict(false, "dns", code);
+        if (/ECONNREFUSED/i.test(code)) return verdict(false, "tcp", code);
+        if (/EPROTO|handshake|ALPR|CERT|UNEXPECTED/i.test(code)) return verdict(false, "tls", code);
+        if (/EAI_AGAIN|getaddrinfo|ESERVFAIL|ENODATA/i.test(code)) return verdict(null, "dns", code);
+        if (/ETIMEDOUT|ECONNRESET|EHOSTUNREACH|ENETUNREACH|timeout/i.test(code)) return verdict(null, "tcp", code);
+        return verdict(null, "tcp", code);
+      });
+    }
+    var _reachCache = /* @__PURE__ */ new Map();
+    function reach(host2, o) {
+      const ov = o || {};
+      const h = String(host2 || "").toLowerCase();
+      if (!h) return Promise.resolve({ ok: null, stage: "not-attempted", host: host2 || null, port: null, detail: "\u6CA1\u6709\u53EF\u5224\u5B9A\u7684\u4E3B\u673A", at: Date.now() });
+      const ttl = ov.ttlMs === void 0 ? READ_TTL_MS : ov.ttlMs;
+      const hit = _reachCache.get(h);
+      if (!ov.force && ttl > 0 && hit && Date.now() - hit.value.at < ttl) {
+        return Promise.resolve(Object.assign({}, hit.value, { cached: true }));
+      }
+      const port = ov.port || 443;
+      return reachWith(ov, h, port, ov.timeoutMs).then((v) => {
+        _reachCache.set(h, { value: v });
+        return v;
+      });
+    }
+    function reachRead(host2) {
+      const h = String(host2 || "").toLowerCase();
+      const hit = _reachCache.get(h);
+      return hit ? hit.value : null;
+    }
+    function hosts() {
+      return [..._reachCache.keys()];
+    }
+    function invalidate(host2) {
+      if (host2 === void 0 || host2 === null) {
+        const n = _reachCache.size + _proxyCache.size;
+        _reachCache.clear();
+        _proxyCache.clear();
+        return n;
+      }
+      return _reachCache.delete(String(host2).toLowerCase()) ? 1 : 0;
+    }
+    module2.exports = {
+      PROBE_TIMEOUT_MS,
+      READ_TTL_MS,
+      hostOf,
+      proxy,
+      proxyRead,
+      proxyWin,
+      proxyMac,
+      proxyLinux,
+      reach,
+      reachRead,
+      reachWith,
+      hosts,
+      invalidate
+    };
+  }
+});
+
+// src/platform/contract/shell-report.js
+var require_shell_report = __commonJS({
+  "src/platform/contract/shell-report.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var path2 = require("node:path");
+    var stateRoot2 = require_state_root();
+    var { maskProxyServer, maskProxySecrets } = require_redact();
+    var SUPPORTED_SCHEMA = 1;
+    var FILE_NAME = "shell-report.json";
+    var MAX_BYTES = 256 * 1024;
+    var MAX_ROWS = 64;
+    function file() {
+      return path2.join(stateRoot2.supervisorDir(), FILE_NAME);
+    }
+    var str = (v) => typeof v === "string" && v.trim() ? maskProxySecrets(v.trim()) : null;
+    var raw = (v) => typeof v === "string" && v.trim() ? v.trim() : null;
+    var num = (v) => typeof v === "number" && Number.isFinite(v) ? v : null;
+    var tri = (v) => v === true || v === false ? v : null;
+    var list = (v) => Array.isArray(v) ? v : [];
+    function nodeView(n) {
+      const o = n && typeof n === "object" ? n : null;
+      if (!o) return null;
+      return { path: str(o.path), binDir: str(o.binDir), version: raw(o.version), min: raw(o.min), ok: tri(o.ok) };
+    }
+    function npmView(n) {
+      const o = n && typeof n === "object" ? n : null;
+      if (!o) return null;
+      return { path: str(o.path), args: list(o.args).map(String), version: raw(o.version), ok: tri(o.ok) };
+    }
+    function prefixView(n) {
+      const o = n && typeof n === "object" ? n : null;
+      if (!o) return null;
+      return { dir: str(o.dir), writable: tri(o.writable), why: str(o.why) };
+    }
+    function registryView(n) {
+      const o = n && typeof n === "object" ? n : null;
+      if (!o) return null;
+      const rows = list(o.probes).slice(0, MAX_ROWS).map((p) => ({
+        url: p && typeof p === "object" ? maskProxyServer(raw(p.url)) : null,
+        ok: p && typeof p === "object" ? tri(p.ok) : null,
+        latencyMs: p && typeof p === "object" ? num(p.latencyMs) : null
+      }));
+      return { best: maskProxyServer(raw(o.best)), latencyMs: num(o.latencyMs), probes: rows, probesTotal: list(o.probes).length };
+    }
+    function recordsView(recs) {
+      const all = list(recs);
+      const rows = all.slice(0, MAX_ROWS).map((r) => {
+        const o = r && typeof r === "object" ? r : {};
+        return {
+          probe: raw(o.probe) || "unknown",
+          source: str(o.source) || "",
+          target: str(o.target) || "",
+          ms: num(o.ms),
+          ok: tri(o.ok),
+          note: str(o.note) || ""
+        };
+      });
+      return { rows, truncated: all.length > MAX_ROWS ? all.length - MAX_ROWS : 0 };
+    }
+    function bodyOf(j) {
+      const recs = recordsView(j.records);
+      const body = {
+        writtenBy: raw(j.writtenBy),
+        schema: num(j.schema),
+        node: nodeView(j.node),
+        npm: npmView(j.npm),
+        prefix: prefixView(j.prefix),
+        registry: registryView(j.registry),
+        records: recs.rows,
+        droppedRecords: recs.truncated
       };
-      const progIds = /* @__PURE__ */ new Map();
-      const addProgId = (pid, how) => {
-        const s = String(pid || "").trim();
-        if (!safeRegKeyPart(s)) return;
-        if (progIds.get(s) === "userchoice") return;
-        progIds.set(s, how);
+      const seen = [body.node, body.npm, body.prefix, body.registry].some((x) => !!x) || body.records.length > 0;
+      return seen ? body : null;
+    }
+    function envelope(p, at, ageMs, reason, body) {
+      return Object.assign({ available: reason === "ok", path: p, at, ageMs, reason }, body || {
+        writtenBy: null,
+        schema: null,
+        node: null,
+        npm: null,
+        prefix: null,
+        registry: null,
+        records: [],
+        droppedRecords: 0
+      });
+    }
+    function read(o) {
+      const now = o && typeof o.now === "function" ? o.now : Date.now;
+      const p = file();
+      let text;
+      try {
+        const st = fs2.statSync(p);
+        if (st.size > MAX_BYTES) return envelope(p, null, null, "unreadable-or-schema-mismatch", null);
+        text = fs2.readFileSync(p, "utf8");
+      } catch (e) {
+        if (e && e.code === "ENOENT") return envelope(p, null, null, "never-written", null);
+        return envelope(p, null, null, "unreadable-or-schema-mismatch", null);
+      }
+      let j;
+      try {
+        j = JSON.parse(text);
+      } catch {
+        return envelope(p, null, null, "unreadable-or-schema-mismatch", null);
+      }
+      if (!j || typeof j !== "object" || Array.isArray(j) || num(j.schema) !== SUPPORTED_SCHEMA) {
+        return envelope(p, null, null, "unreadable-or-schema-mismatch", null);
+      }
+      const at = num(j.at);
+      if (at === null) return envelope(p, null, null, "unreadable-or-schema-mismatch", null);
+      const ageMs = Math.max(0, now() - at);
+      const body = bodyOf(j);
+      if (!body) return envelope(p, at, null, "unreadable-or-schema-mismatch", null);
+      return envelope(p, at, ageMs, "ok", body);
+    }
+    module2.exports = { SUPPORTED_SCHEMA, FILE_NAME, MAX_BYTES, MAX_ROWS, file, read };
+  }
+});
+
+// src/platform/os/environment.js
+var require_environment = __commonJS({
+  "src/platform/os/environment.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var stateRoot2 = require_state_root();
+    var { writeAtomic } = require_fs();
+    var { maskProxyServer, maskProxySecrets } = require_redact();
+    var desktop = require_desktop();
+    var detector = require_browser_inventory();
+    var egress = require_egress();
+    var shellReport = require_shell_report();
+    var { engineOf } = detector;
+    var SCHEMA = 2;
+    var FILE_NAME = "environment.json";
+    var FORM_TTL_MS = 6e4;
+    var SECTION_TTL_MS = 6e4;
+    var SHELL_REPORT_TTL_MS = 1e4;
+    var _sources = {};
+    function bind(sources) {
+      _sources = Object.assign({}, _sources, sources || {});
+      return _sources;
+    }
+    function preferenceId() {
+      const f = _sources.preference;
+      if (typeof f !== "function") return null;
+      const v = f();
+      return typeof v === "string" && v.trim() ? v.trim() : null;
+    }
+    function capabilities() {
+      const f = _sources.capabilities;
+      if (typeof f !== "function") return null;
+      return f() || null;
+    }
+    function identity() {
+      let user = null;
+      try {
+        user = os2.userInfo().username;
+      } catch {
+        user = process.env.USER || process.env.USERNAME || null;
+      }
+      return {
+        platform: process.platform,
+        arch: process.arch,
+        hostname: os2.hostname(),
+        user: user || null,
+        home: os2.homedir(),
+        node: process.version
       };
-      let defaultId = null;
-      let defaultSource = null;
-      const DEF_RANK = { userchoice: 1, "scheme-association": 2, "only-installed": 9 };
-      let defRank = 99;
-      const setDefault = (item, how) => {
-        const r = DEF_RANK[how] === void 0 ? 99 : DEF_RANK[how];
-        if (item && r < defRank) {
-          defRank = r;
-          defaultId = item.id;
-          defaultSource = how;
-        }
+    }
+    function paths() {
+      return { root: stateRoot2.root(), supervisor: stateRoot2.supervisorDir(), shell: stateRoot2.shellDir() };
+    }
+    function normalizeInventory(inv, platform) {
+      const list = inv && Array.isArray(inv.browsers) ? inv.browsers : [];
+      const defaultId = inv && inv.defaultId ? inv.defaultId : null;
+      return {
+        platform: inv && inv.platform || platform || process.platform,
+        cached: !!(inv && inv.cached),
+        at: inv && inv.at !== void 0 ? inv.at : null,
+        defaultId,
+        defaultSource: inv && inv.defaultSource || null,
+        browsers: list.map((b) => ({
+          id: b.id,
+          name: b.name,
+          bin: b.bin,
+          engine: b.engine || engineOf(b.bin),
+          baseArgs: b.baseArgs || [],
+          sources: b.sources && b.sources.length ? b.sources : [b.source || "unknown"],
+          isDefault: !!defaultId && b.id === defaultId
+        })),
+        probed: inv && inv.probed || []
       };
-      const cmdToExe = (raw) => raw ? exeFromCmdLine(expandEnvVars(raw, env)) : null;
-      const uc = regValue(runOut, note, "HKCU\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice", "ProgId");
-      if (uc) addProgId(uc, "userchoice");
-      for (const root of ["HKCU\\Software\\Classes", "HKLM\\Software\\Classes"]) {
-        const pid = regValue(runOut, note, root + "\\https");
-        if (pid) addProgId(pid, "scheme-association");
-        const exe = cmdToExe(regValue(runOut, note, root + "\\https\\shell\\open\\command"));
-        if (exe) setDefault(push(exe, "scheme-association"), "scheme-association");
+    }
+    function browsers(o) {
+      const ov = o || {};
+      const pl = ov.platform || process.platform;
+      if (ov.inventory) return normalizeInventory(ov.inventory, pl);
+      const resolve = typeof ov.resolveInventory === "function" ? ov.resolveInventory : ((platform, deps) => detector.inventory(platform, deps));
+      return normalizeInventory(resolve(pl, ov.resolveDeps || {}), pl);
+    }
+    var ENGINE_RANK = { chromium: 0, firefox: 1, other: 2 };
+    function rankCandidates(list) {
+      const rankOf = (b) => {
+        const r = ENGINE_RANK[b && b.engine];
+        return r === void 0 ? ENGINE_RANK.other : r;
+      };
+      return (Array.isArray(list) ? list : []).slice().sort((a, b) => {
+        if (rankOf(a) !== rankOf(b)) return rankOf(a) - rankOf(b);
+        const ia = String(a && a.id || "");
+        const ib = String(b && b.id || "");
+        return ia < ib ? -1 : ia > ib ? 1 : 0;
+      });
+    }
+    function pickLauncher(platform, inv, preference) {
+      const list = inv && Array.isArray(inv.browsers) ? inv.browsers : [];
+      const byId = /* @__PURE__ */ new Map();
+      for (const b of list) byId.set(b.id, b);
+      const wanted = preference === void 0 ? preferenceId() : typeof preference === "string" && preference ? preference : null;
+      const stale = wanted !== null && !byId.has(wanted);
+      const out = (browser, how) => ({ browser, how, wanted, stale });
+      if (wanted !== null && byId.has(wanted)) return out(byId.get(wanted), "user-preference");
+      const sys = inv && inv.defaultId ? byId.get(inv.defaultId) : null;
+      if (sys) return out(sys, inv.defaultSource || "default");
+      if (list.length === 1) return out(list[0], "only-installed");
+      if (list.length > 1) return out(rankCandidates(list)[0], "candidate-rank");
+      return out(null, "none-found");
+    }
+    var _sections = /* @__PURE__ */ new Map();
+    var _reads = /* @__PURE__ */ new Map();
+    var SECTION_ORDER = ["runtime", "shell", "dsh", "browsers", "session", "egress", "capabilities", "preference", "pick", "startup"];
+    var SYNC_DIMS = ["browsers", "session", "capabilities", "preference", "pick"];
+    function registerSection(id, def) {
+      if (!id || !def || typeof def.probe !== "function") throw new Error("registerSection(" + id + ") \u9700\u8981 probe \u51FD\u6570");
+      if (SYNC_DIMS.includes(id)) throw new Error("\u7EF4\u5EA6 " + id + " \u7531\u8868\u5355\u6BCF\u62CD\u81EA\u88C5\uFF0C\u4E0D\u63A5\u6CE8\u518C");
+      const d = { id, label: def.label || id, probe: def.probe, ttlMs: def.ttlMs === void 0 ? SECTION_TTL_MS : def.ttlMs, source: def.source || "registered" };
+      _sections.set(id, d);
+      _reads.delete(id);
+      return d;
+    }
+    function unregisterSection(id) {
+      _sections.delete(id);
+      _reads.delete(id);
+    }
+    function section(id) {
+      return _reads.get(id) || null;
+    }
+    function sectionData(id) {
+      const r = _reads.get(id);
+      return r ? r.data || null : null;
+    }
+    function proxyDataOf(p) {
+      return p ? { state: p.state, server: maskProxyServer(p.server), pac: p.pac || null, source: p.source, cached: p.cached === true } : null;
+    }
+    function egressData(proxyReading) {
+      const targets = {};
+      for (const h of egress.hosts()) {
+        const r = egress.reachRead(h);
+        if (r) targets[h] = { ok: r.ok === null ? null : r.ok === true, stage: r.stage, detail: r.detail, at: r.at };
+      }
+      const p = proxyReading || egress.proxyRead();
+      const probed = [];
+      if (p) {
+        for (const row of p.probed || []) probed.push({ source: row.source, detail: maskProxySecrets(String(row.detail || "")) });
+        probed.push({ source: p.source, detail: "proxy=" + p.state + (p.server ? " (" + maskProxyServer(p.server) + ")" : "") + (p.cached ? " \u590D\u7528" : "") });
+      } else {
+        probed.push({ source: "egress", detail: "\u7CFB\u7EDF\u4EE3\u7406\u672A\u8BFB\uFF08\u672C\u7EF4\u5EA6\u5C1A\u672A\u5237\u65B0\uFF09" });
       }
-      for (const name of regSubkeys(runOut, note, "HKLM\\SOFTWARE\\Clients\\StartMenuInternet")) {
-        addProgId(name, "startmenu-catalog");
-        const exe = cmdToExe(regValue(runOut, note, "HKLM\\SOFTWARE\\Clients\\StartMenuInternet\\" + name + "\\shell\\open\\command")) || winExeOfProgId(runOut, note, name, env);
-        if (exe) push(exe, "startmenu-catalog");
+      for (const h of Object.keys(targets)) {
+        const t = targets[h];
+        probed.push({ source: "reach:" + h, detail: (t.ok === null ? "unknown" : t.ok ? "ok" : "no-route") + "@" + t.stage + " " + t.detail });
       }
-      for (const root of ["HKLM\\SOFTWARE", "HKCU\\SOFTWARE"]) {
-        for (const capPath of regValueTargets(runOut, note, root + "\\RegisteredApplications")) {
-          const https = regValue(runOut, note, capPath + "\\UrlAssociations\\https");
-          const sid = regValue(runOut, note, capPath, "StartMenuInternet");
-          const pid = https || sid;
-          if (pid) addProgId(pid, "registered-apps");
-        }
+      return {
+        at: p ? p.at : null,
+        proxy: proxyDataOf(p),
+        targets,
+        probed
+      };
+    }
+    registerSection("egress", {
+      label: "\u51FA\u7F51\u6761\u4EF6",
+      source: "self",
+      probe: (o) => {
+        const ov = o || {};
+        const force = ov.force === true;
+        const hosts = Array.isArray(ov.hosts) ? ov.hosts : egress.hosts();
+        const reachOpts = { force, timeoutMs: ov.timeoutMs, lookup: ov.lookup, connect: ov.connect, ttlMs: ov.ttlMs };
+        return Promise.all([egress.proxy(Object.assign({}, ov, { force }))].concat(hosts.map((h) => egress.reach(h, reachOpts)))).then(([p]) => egressData(p));
       }
-      for (const exe of WIN_APP_PATHS) {
-        for (const root of ["HKCU", "HKLM"]) {
-          const v = regValue(runOut, note, root + "\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\" + exe);
-          if (v && push(v, "app-paths")) break;
+    });
+    registerSection("shell", {
+      label: "\u684C\u9762\u58F3\u6240\u89C1\uFF08Node/npm/\u955C\u50CF\u6E90/\u5168\u5C40\u524D\u7F00\uFF09",
+      source: "shell",
+      ttlMs: SHELL_REPORT_TTL_MS,
+      probe: () => shellReport.read()
+    });
+    async function probeSection(id, o) {
+      const def = _sections.get(id);
+      if (!def) return null;
+      const ov = o || {};
+      const now = typeof ov.now === "function" ? ov.now : Date.now;
+      try {
+        const data = await def.probe(ov);
+        _reads.set(id, { at: now(), source: def.source, label: def.label, state: data ? "ok" : "empty", data: data || null, error: null });
+      } catch (e) {
+        _reads.set(id, { at: now(), source: def.source, label: def.label, state: "error", data: null, error: String(e && (e.code || e.message) || e) });
+      }
+      return _reads.get(id);
+    }
+    function staleOf(id, now, force) {
+      if (force) return true;
+      const def = _sections.get(id);
+      const read = _reads.get(id);
+      if (!def || !read) return true;
+      return now - read.at >= def.ttlMs;
+    }
+    async function refresh(o) {
+      const ov = o || {};
+      const now = typeof ov.now === "function" ? ov.now : Date.now;
+      const ids = Array.isArray(ov.only) && ov.only.length ? ov.only : [..._sections.keys()];
+      await Promise.all(ids.filter((id) => _sections.has(id) && staleOf(id, now(), ov.force)).map((id) => probeSection(id, ov)));
+      return form(Object.assign({}, ov, { force: true }));
+    }
+    async function checkEgress(url, o) {
+      const ov = o || {};
+      const host2 = egress.hostOf(url);
+      let data = ov.egress === void 0 ? null : ov.egress;
+      if (!data) {
+        try {
+          const hosts = new Set(egress.hosts());
+          if (host2) {
+            await egress.reach(host2, ov);
+            hosts.add(host2);
+          }
+          const read = await probeSection("egress", Object.assign({}, ov, { hosts: [...hosts] }));
+          data = read && read.data || sectionData("egress");
+        } catch {
+          data = sectionData("egress");
         }
       }
-      for (const [pid, how] of progIds) {
-        const exe = winExeOfProgId(runOut, note, pid, env);
-        if (!exe) continue;
-        const item = push(exe, how);
-        if (how === "userchoice") setDefault(item, "userchoice");
+      const v = coldProfileViable(data, host2);
+      return Object.assign({}, v, {
+        host: host2,
+        proxy: data && data.proxy ? data.proxy.state : "unknown",
+        at: data ? data.at || null : null
+      });
+    }
+    function coldProfileViable(eg, host2) {
+      if (!eg) return { viable: null, basis: "egress-unprobed", detail: "\u51FA\u7F51\u6761\u4EF6\u5C1A\u672A\u63A2\u6D4B\uFF0C\u9694\u79BB\u7A97\u53E3\u6309\u539F\u6863\u6253\u5F00" };
+      const t = host2 && eg.targets ? eg.targets[host2] : null;
+      const reached = t ? t.ok : null;
+      const proxyState = eg.proxy ? eg.proxy.state : "unknown";
+      if (reached === true) {
+        return { viable: true, basis: "target-reachable", detail: host2 + " \u76F4\u8FDE\u53EF\u8FBE\uFF08" + t.stage + "\uFF09" };
       }
-      if (found.size === 1) setDefault([...found.values()][0], "only-installed");
-      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
+      if (reached === null) {
+        return { viable: null, basis: "egress-undetermined", detail: host2 + " \u7684\u901A\u8DEF\u5224\u5B9A\u6CA1\u6709\u7ED9\u51FA\u7B54\u6848\uFF08" + (t ? t.stage + " " + t.detail : "\u65E0\u8BFB\u6570") + "\uFF09" };
+      }
+      if (proxyState === "on") {
+        return { viable: true, basis: "cold-profile-inherits-proxy", detail: host2 + " \u76F4\u8FDE\u4E0D\u901A\uFF08" + t.stage + "\uFF09\uFF0C\u7CFB\u7EDF\u7EA7\u4EE3\u7406\u5728\u7528\uFF0C\u51B7\u6863\u6848\u540C\u4E00\u6761\u8DEF" };
+      }
+      if (proxyState === "unknown") {
+        return { viable: null, basis: "proxy-unreadable", detail: host2 + " \u76F4\u8FDE\u4E0D\u901A\uFF08" + t.stage + "\uFF09\uFF0C\u4F46\u4EE3\u7406\u8BFB\u6570\u53D6\u4E0D\u5230\uFF0C\u6309\u5224\u4E0D\u51FA\u5904\u7406" };
+      }
+      return {
+        viable: false,
+        basis: "cold-profile-blocked",
+        detail: host2 + " \u76F4\u8FDE\u4E0D\u901A\uFF08" + t.stage + " " + t.detail + "\uFF09\u4E14\u7CFB\u7EDF\u6CA1\u6709\u5728\u7528\u4EE3\u7406\uFF0C\u51B7\u6863\u6848\u7A97\u53E3\u5FC5\u7136\u7A7A\u767D"
+      };
     }
-    function regValueTargets(runOut, note, key) {
-      const out = runOut("reg.exe", ["query", key]);
-      if (!out) {
-        note(key, "unreadable");
-        return [];
+    function snapshotPath() {
+      return path2.join(stateRoot2.supervisorDir(), FILE_NAME);
+    }
+    function readSnapshot() {
+      try {
+        const doc = JSON.parse(fs2.readFileSync(snapshotPath(), "utf8"));
+        return doc && doc.schema === SCHEMA ? doc : null;
+      } catch {
+        return null;
       }
-      const paths = [];
-      for (const line of String(out).split(/\r?\n/)) {
-        const m = line.trim().match(/REG_SZ\s+(.*)/);
-        if (!m) continue;
-        const rel = m[1].trim();
-        if (!safeRegKeyPart(rel)) continue;
-        const root = key.slice(0, key.indexOf("\\"));
-        paths.push(root + "\\" + rel);
+    }
+    function lastSnapshot(o) {
+      const now = o && typeof o.now === "function" ? o.now : Date.now;
+      const p = snapshotPath();
+      const doc = readSnapshot();
+      if (doc) {
+        const at = typeof doc.at === "number" ? doc.at : null;
+        return { available: true, path: p, at, ageMs: at === null ? null : Math.max(0, now() - at), reason: "ok", data: doc };
       }
-      note(key, paths.length ? paths.length + " \u4E2A\u80FD\u529B\u8DEF\u5F84" : "\u65E0\u503C");
-      return paths;
+      return {
+        available: false,
+        path: p,
+        at: null,
+        ageMs: null,
+        reason: fs2.existsSync(p) ? "unreadable-or-schema-mismatch" : "never-written",
+        data: null
+      };
     }
-    var MAC_JXA_LIST = [
-      "ObjC.import('Foundation');",
-      "var ws=$.NSWorkspace.sharedWorkspace;",
-      "var u=$.NSURL.URLWithString('https://dsh.local/probe');",
-      "var out=[];var def='';",
-      "try{var d=ws.URLForApplicationToOpenURL(u); if(!d.isNil()) def=ObjC.unwrap(d.path)||'';}catch(e){}",
-      "var list=null;",
-      "try{list=ws.urlsForApplicationsToOpenURL(u);}catch(e){}",
-      "if(list===null||typeof list.count!=='number'){if(def){out.push(def+'\\t\\t1');}}else{",
-      "var n=Number(list.count);",
-      "for(var i=0;i<n;i++){",
-      "var p=ObjC.unwrap(list.objectAtIndex(i).path)||''; if(!p) continue;",
-      "var exe='';var bid='';",
-      "var b=$.NSBundle.bundleWithPath(p);",
-      "if(!b.isNil()){exe=ObjC.unwrap(b.executablePath)||'';bid=ObjC.unwrap(b.bundleIdentifier)||'';}",
-      "out.push((exe||p)+'\\t'+bid+'\\t'+(p&&def&&p===def?1:0));}",
-      "}",
-      // 末句必须是裸表达式：osascript 取的是最后一条**语句**的值，if/else 语句不产结果，
-      //   写在分支里会让整段查询输出空字符串（表现为「系统未报任何可用应用」）。
-      "out.join('\\n');"
-    ].join("");
-    function probeMac(d) {
-      const { runOut, canExec } = d;
-      const notes = [];
-      const note = (source, detail) => {
-        notes.push({ source, detail });
+    var _formCache = null;
+    function form(o) {
+      const ov = o || {};
+      const now = typeof ov.now === "function" ? ov.now : (() => Date.now());
+      const stamp = now();
+      const ttl = ov.ttlMs === void 0 ? FORM_TTL_MS : ov.ttlMs;
+      if (!ov.force && _formCache && stamp - _formCache.at < ttl) {
+        return Object.assign({}, _formCache.value, { cached: true });
+      }
+      const inv = browsers(ov);
+      const caps = capabilities();
+      const session = desktop.describe();
+      const prefId = preferenceId();
+      const prefEntry = prefId ? inv.browsers.find((b) => b.id === prefId) || null : null;
+      const preference = {
+        id: prefId,
+        configured: !!prefId,
+        matched: !!prefEntry,
+        browser: prefEntry ? { id: prefEntry.id, name: prefEntry.name, engine: prefEntry.engine } : null,
+        reason: !prefId ? "not-set" : prefEntry ? "matched" : "stale"
       };
-      const out = runOut("osascript", ["-l", "JavaScript", "-e", MAC_JXA_LIST]);
-      if (!out || !out.trim()) {
-        note("launchservices", "\u67E5\u8BE2\u65E0\u8F93\u51FA\uFF08\u65E7\u7CFB\u7EDF\u6216\u88AB\u6743\u9650\u62E6\u622A\uFF09");
-        return { browsers: [], defaultId: null, defaultSource: null, probed: notes };
+      const pick = pickLauncher(inv.platform, inv, prefId);
+      const probed = inv.probed.map((p) => ({ section: "browsers", source: p.source, detail: p.detail }));
+      probed.push({ section: "session", source: "desktop", detail: session.reason + (session.available ? "\uFF08\u53EF\u7528\uFF09" : "\uFF08\u4E0D\u53EF\u7528\uFF09") });
+      probed.push({
+        section: "capabilities",
+        source: "profile",
+        detail: caps ? "openBrowser=" + (caps.openBrowser === true) : "\u672A\u7ED1\u5B9A\u80FD\u529B\u77E9\u9635\uFF08\u7531 platform/os/index.js \u88C5\u914D\u671F\u6CE8\u5165\uFF09"
+      });
+      probed.push({
+        section: "preference",
+        source: "config",
+        detail: preference.reason === "not-set" ? "\u672A\u8BBE\u7F6E\uFF0C\u6309\u7CFB\u7EDF\u9ED8\u8BA4\u6216\u5019\u9009\u6B21\u5E8F\u5206\u53D1" : preference.reason === "matched" ? "\u5DF2\u9009 " + preference.browser.name : "\u504F\u597D\u6240\u6307\u5DF2\u4E0D\u5728\u5019\u9009\u6E05\u5355: " + prefId
+      });
+      probed.push({
+        section: "pick",
+        source: "form",
+        detail: pick.how + (pick.browser ? "\uFF08" + pick.browser.name + "\uFF09" : "\uFF08\u65E0\u5019\u9009\uFF09") + (pick.stale ? "\uFF0C\u504F\u597D\u5DF2\u5931\u6548\u9700\u91CD\u9009" : "")
+      });
+      const sections = {};
+      const syncDims = {
+        browsers: { at: stamp, state: inv.browsers.length ? "ok" : "empty", count: inv.browsers.length, defaultSource: inv.defaultSource },
+        session: { at: stamp, state: session.available ? "ok" : "missing", reason: session.reason },
+        capabilities: { at: stamp, state: caps ? "ok" : "unbound", openBrowser: caps ? caps.openBrowser === true : null },
+        preference: { at: stamp, state: preference.reason === "matched" ? "ok" : preference.configured ? "stale" : "unset", id: preference.id },
+        pick: { at: stamp, state: pick.browser ? "ok" : "empty", how: pick.how, id: pick.browser ? pick.browser.id : null }
+      };
+      const dimOf = (id) => {
+        const def = _sections.get(id);
+        const read = _reads.get(id);
+        if (read && !syncDims[id]) {
+          return { label: def ? def.label : id, at: read.at, source: read.source, state: read.state, data: read.data, error: read.error || null };
+        }
+        const s = syncDims[id];
+        if (s) return Object.assign({ label: id, source: "self" }, s);
+        return { label: def ? def.label : id, at: null, source: def ? def.source : "registered", state: "pending", data: null, error: null };
+      };
+      const ids = SECTION_ORDER.concat([..._sections.keys()].filter((id) => !SECTION_ORDER.includes(id)));
+      for (const id of ids) {
+        if (sections[id]) continue;
+        const entry = dimOf(id);
+        sections[id] = entry;
+        if (entry.state === "pending") {
+          probed.push({ section: id, source: "form", detail: "\u672A\u5237\u65B0\uFF08\u7B49\u542F\u52A8\u88C5\u914D\u6216\u9762\u677F force \u5237\u65B0\u8865\u62CD\uFF09" });
+        } else if (entry.state === "error") {
+          probed.push({ section: id, source: "probe", detail: id + " \u63A2\u6D4B\u5931\u8D25: " + entry.error });
+        }
+      }
+      const egressRows = ((sections.egress || {}).data || {}).probed || [];
+      for (const row of egressRows) probed.push({ section: "egress", source: row.source, detail: row.detail });
+      const sh = (sections.shell || {}).data;
+      if (sh) {
+        probed.push({
+          section: "shell",
+          source: "shell-report:" + (sh.reason || "?"),
+          detail: sh.available === true ? "\u58F3\u5DF2\u4E0A\u62A5\uFF08\u5199\u5165\u8005 " + (sh.writtenBy || "\u672A\u7F72\u540D") + "\uFF0Cschema " + sh.schema + "\uFF0C\u8DDD\u4ECA " + (sh.ageMs === null ? "\u672A\u8BFB\u51FA" : sh.ageMs) + " \u6BEB\u79D2\uFF0C\u660E\u7EC6 " + (sh.records || []).length + " \u6761" + (sh.droppedRecords ? "\uFF0C\u622A\u65AD " + sh.droppedRecords + " \u6761" : "") + "\uFF09" : sh.reason === "never-written" ? "\u8FD9\u53F0\u673A\u5668\u7684\u58F3\u8FD8\u6CA1\u62A5\u8FC7\uFF08\u5185\u6838\u72EC\u7ACB\u8DD1\u6216\u8001\u7248\u672C\u58F3\u65F6\u662F\u5E38\u6001\uFF0C\u4E0D\u662F\u6545\u969C\uFF09" : "\u58F3\u62A5\u7684\u6587\u4EF6\u8BFB\u4E0D\u51FA\u6216\u7248\u672C\u4E0D\u7B26\uFF0C\u5F97\u67E5\uFF1A" + (sh.path || "?")
+        });
       }
-      const keyOf = (exe) => String(exe || "").toLowerCase();
-      const found = /* @__PURE__ */ new Map();
-      let defaultId = null;
-      let defaultSource = null;
-      for (const line of out.trim().split("\n")) {
-        const parts = line.split("	");
-        const bin = (parts[0] || "").trim();
-        if (!bin) continue;
-        if (!canExec(bin)) {
-          note("launchservices", "\u4E0D\u53EF\u6267\u884C: " + bin);
-          continue;
-        }
-        const k = keyOf(bin);
-        if (!found.has(k)) found.set(k, { id: k, name: path2.basename(bin), engine: engineOf(bin), bin, source: "launchservices", sources: ["launchservices"], isDefault: false });
-        if (parts[2] === "1") {
-          found.get(k).isDefault = true;
-          if (!defaultId) {
-            defaultId = k;
-            defaultSource = "launchservices";
-          }
+      const value = {
+        schema: SCHEMA,
+        at: stamp,
+        platform: inv.platform,
+        identity: identity(),
+        paths: paths(),
+        session,
+        capabilities: caps,
+        preference,
+        default: inv.defaultId ? { id: inv.defaultId, source: inv.defaultSource } : null,
+        browsers: inv.browsers,
+        pick: { how: pick.how, id: pick.browser ? pick.browser.id : null, name: pick.browser ? pick.browser.name : null, wanted: pick.wanted, stale: pick.stale },
+        sections,
+        probed
+      };
+      const snapshot = { path: snapshotPath(), written: false, error: null };
+      if (ov.persist === true) {
+        try {
+          writeAtomic(snapshot.path, JSON.stringify(value, null, 2) + "\n", { mode: 384 });
+          snapshot.written = true;
+        } catch (e) {
+          snapshot.error = String(e && e.message || e);
         }
+        probed.push({
+          section: "snapshot",
+          source: FILE_NAME,
+          detail: snapshot.written ? "\u5DF2\u843D\u76D8 " + snapshot.path : "\u843D\u76D8\u5931\u8D25: " + snapshot.error
+        });
       }
-      note("launchservices", found.size ? found.size + " \u4E2A\u53EF\u6253\u5F00 https \u7684\u5E94\u7528" : "\u7CFB\u7EDF\u672A\u62A5\u4EFB\u4F55\u53EF\u7528\u5E94\u7528");
-      if (!defaultId && found.size === 1) {
-        defaultId = [...found.keys()][0];
-        defaultSource = "only-installed";
+      value.snapshot = snapshot;
+      _formCache = { at: stamp, value };
+      return Object.assign({ cached: false }, value);
+    }
+    function invalidate(platform, only) {
+      _formCache = null;
+      const list = only === void 0 ? null : Array.isArray(only) ? only : [only];
+      if (!list || list.includes("egress")) egress.invalidate();
+      for (const id of list || [..._reads.keys()]) {
+        const r = _reads.get(id);
+        if (r) r.at = 0;
       }
-      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
+      return detector.invalidate(platform);
     }
-    var PJ = path2.posix.join;
-    function desktopDirs(env, home) {
-      const dataHome = env.XDG_DATA_HOME || PJ(home, ".local", "share");
-      const dataDirs = String(env.XDG_DATA_DIRS || "/usr/local/share:/usr/share").split(":").filter(Boolean);
-      const dirs = [[dataHome, "xdg"], ...dataDirs.map((p) => [p, "xdg"])];
-      dirs.push([PJ(home, ".local", "share"), "xdg"]);
-      dirs.push(["/var/lib/flatpak/exports/share", "flatpak"]);
-      dirs.push([PJ(home, ".local", "share", "flatpak", "exports", "share"), "flatpak"]);
-      dirs.push(["/var/lib/snapd/desktop", "snap"]);
-      const seen = [];
-      return dirs.map(([root, kind]) => ({ dir: PJ(root, "applications"), kind })).filter((x) => {
-        if (seen.includes(x.dir)) return false;
-        seen.push(x.dir);
-        return true;
-      });
+    function checkPreference(value, form2) {
+      const candidates = (form2 && form2.browsers || []).map((b) => ({
+        id: b.id,
+        name: b.name,
+        engine: b.engine,
+        isDefault: b.isDefault === true
+      }));
+      const id = typeof value === "string" ? value.trim() : "";
+      if (!id) return { ok: true, id: null, browser: null, candidates };
+      const hit = candidates.find((c) => c.id === id);
+      if (!hit) {
+        return { ok: false, id: null, browser: null, candidates, error: "\u8BE5\u6D4F\u89C8\u5668\u4E0D\u5728\u672C\u673A\u5019\u9009\u6E05\u5355\u91CC\uFF08\u53EF\u80FD\u5DF2\u5378\u8F7D\u6216\u8DEF\u5F84\u5931\u6548\uFF09\uFF0C\u8BF7\u5148\u5237\u65B0\u73AF\u5883\u8868\u5355" };
+      }
+      return { ok: true, id: hit.id, browser: hit, candidates };
     }
-    function browserFromDesktop(text, kind, file) {
-      let inMain = false;
-      const got = {};
-      for (const line of String(text).split(/\r?\n/)) {
-        if (/^\[Desktop Entry\]\s*$/.test(line)) {
-          inMain = true;
-          continue;
+    module2.exports = {
+      SCHEMA,
+      FILE_NAME,
+      FORM_TTL_MS,
+      SECTION_TTL_MS,
+      SECTION_ORDER,
+      SYNC_DIMS,
+      bind,
+      preferenceId,
+      capabilities,
+      identity,
+      paths,
+      browsers,
+      normalizeInventory,
+      rankCandidates,
+      pickLauncher,
+      checkPreference,
+      registerSection,
+      unregisterSection,
+      section,
+      sectionData,
+      refresh,
+      coldProfileViable,
+      checkEgress,
+      form,
+      snapshotPath,
+      readSnapshot,
+      lastSnapshot,
+      invalidate
+    };
+  }
+});
+
+// src/platform/os/process.js
+var require_process = __commonJS({
+  "src/platform/os/process.js"(exports2, module2) {
+    "use strict";
+    var ex2 = require_exec();
+    var isWindows = process.platform === "win32";
+    function signalProcess(pid, sig) {
+      if (!Number.isInteger(pid) || pid <= 0) return;
+      if (isWindows) {
+        try {
+          process.kill(pid, sig);
+        } catch {
+        }
+        return;
+      }
+      try {
+        process.kill(-pid, sig);
+      } catch {
+        try {
+          process.kill(pid, sig);
+        } catch {
         }
-        if (/^\[/.test(line)) break;
-        if (!inMain) continue;
-        const m = line.match(/^(Exec|Name|TryExec|Categories)=(.*)$/);
-        if (!m) continue;
-        if (m[1] === "Name" && got.Name) continue;
-        got[m[1]] = m[2].trim();
       }
-      if (!got.Exec) return null;
-      const categories = String(got.Categories || "");
-      const parsed = parseExecLine(got.Exec);
-      if (!parsed) return null;
-      const engine = engineOf(parsed.bin);
-      const claimsBrowser = /(^|;)WebBrowser(;|$)/.test(categories);
-      if (!claimsBrowser && engine === "other") return null;
-      if (engine === "other") return null;
-      return {
-        // id 恒为归一后的可执行文件路径：defaultId 靠它在清单里定位条目，三平台同一契约
-        id: parsed.bin.toLowerCase(),
-        name: got.Name || path2.basename(file, ".desktop"),
-        engine,
-        bin: parsed.bin,
-        baseArgs: parsed.baseArgs,
-        source: kind,
-        desktopFile: file
-      };
     }
-    function resolveLinuxBin(bin, canExec, env) {
-      const b = String(bin || "").trim();
-      if (!b) return null;
-      if (b.startsWith("/")) return canExec(b) ? b : null;
-      if (b.includes("/")) return null;
-      for (const dir of String(env.PATH || "").split(":")) {
-        if (!dir) continue;
-        const p = PJ(dir.replace(/\/+$/, ""), b);
-        if (canExec(p)) return p;
+    function killTree(pid, sig, cb, opts) {
+      if (!Number.isInteger(pid) || pid <= 0) {
+        if (cb) cb(new Error("invalid pid"));
+        return;
       }
-      return null;
+      if (isWindows) {
+        ex2.runAsync("taskkill", ["/PID", String(pid), "/T", "/F"], { timeoutMs: 1e4 }).then((r) => {
+          if (cb) cb(r.ok ? null : new Error(r.error || "taskkill failed"));
+        });
+        return;
+      }
+      if (opts && opts.ownGroup === true) {
+        signalProcess(pid, sig || "SIGTERM");
+      } else {
+        try {
+          process.kill(pid, sig || "SIGTERM");
+        } catch {
+        }
+      }
+      if (cb) process.nextTick(cb, null);
     }
-    function probeLinux(d) {
-      const { runOut, readFile, exists, listDir, canExec, env, home } = d;
-      const notes = [];
-      const note = (source, detail) => {
-        notes.push({ source, detail });
-      };
-      const found = /* @__PURE__ */ new Map();
-      const usable = (item) => {
-        const resolved = resolveLinuxBin(item.bin, canExec, env);
-        if (!resolved) {
-          note(item.source, "\u4E0D\u53EF\u6267\u884C: " + item.bin);
+    module2.exports = { signalProcess, killTree };
+  }
+});
+
+// src/platform/os/file-protect.js
+var require_file_protect = __commonJS({
+  "src/platform/os/file-protect.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var ex2 = require_exec();
+    var IS_WINDOWS2 = process.platform === "win32";
+    var _icacls = null;
+    function hasIcacls(platform) {
+      if ((platform || process.platform) !== "win32") return false;
+      if (_icacls !== null) return _icacls;
+      _icacls = ex2.runOut("icacls", ["/?"], { timeoutMs: 3e3 }) !== null;
+      return _icacls;
+    }
+    function currentUser() {
+      return process.env.USERNAME || process.env.USER || (() => {
+        try {
+          return os2.userInfo().username;
+        } catch {
           return null;
         }
-        const k = resolved.toLowerCase();
-        const hit = found.get(k);
-        if (hit) {
-          if (!hit.sources.includes(item.source)) hit.sources.push(item.source);
-          return hit;
+      })();
+    }
+    function protectFile(file) {
+      if (!IS_WINDOWS2) {
+        try {
+          fs2.chmodSync(file, 384);
+          return { ok: true, mode: "posix-0600" };
+        } catch (e) {
+          return { ok: false, mode: "posix-0600", reason: e.message };
         }
-        const v = Object.assign({}, item, { id: k, bin: resolved, sources: [item.source] });
-        found.set(k, v);
-        return v;
-      };
-      for (const { dir, kind } of desktopDirs(env, home)) {
-        let names = [];
+      }
+      if (!hasIcacls()) return { ok: false, mode: "none", reason: "icacls \u4E0D\u53EF\u7528" };
+      const user = currentUser();
+      if (!user) return { ok: false, mode: "icacls", reason: "\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u7528\u6237" };
+      const r = ex2.runDetail("icacls", [file, "/inheritance:r", "/grant:r", user + ":F"], { stdio: "ignore", timeoutMs: 5e3 });
+      return r.ok ? { ok: true, mode: "icacls-file" } : { ok: false, mode: "icacls-file", reason: r.error || "\u9000\u51FA\u7801 " + r.code };
+    }
+    function protectDir(dir) {
+      if (!IS_WINDOWS2) {
+        try {
+          fs2.chmodSync(dir, 448);
+          return { ok: true, mode: "posix-0700" };
+        } catch (e) {
+          return { ok: false, mode: "posix-0700", reason: e.message };
+        }
+      }
+      if (!hasIcacls()) return { ok: false, mode: "none", reason: "icacls \u4E0D\u53EF\u7528" };
+      const user = currentUser();
+      if (!user) return { ok: false, mode: "icacls", reason: "\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u7528\u6237" };
+      const r = ex2.runDetail("icacls", [dir, "/inheritance:r", "/grant:r", user + ":(OI)(CI)F"], { stdio: "ignore", timeoutMs: 1e4 });
+      return r.ok ? { ok: true, mode: "icacls-dir" } : { ok: false, mode: "icacls-dir", reason: r.error || "\u9000\u51FA\u7801 " + r.code };
+    }
+    function ensurePrivateDir(dir) {
+      try {
+        fs2.mkdirSync(dir, { recursive: true });
+      } catch (e) {
+        return { ok: false, mode: "mkdir", reason: e.message };
+      }
+      return protectDir(dir);
+    }
+    function writePrivate(file, data) {
+      try {
+        const dir = path2.dirname(file);
+        try {
+          fs2.mkdirSync(dir, { recursive: true });
+        } catch {
+        }
+        const tmp = file + ".tmp" + process.pid;
+        fs2.writeFileSync(tmp, data, { mode: 384 });
+        const p1 = protectFile(tmp);
+        if (p1 && p1.ok === false) {
+          try {
+            fs2.rmSync(tmp, { force: true });
+          } catch {
+          }
+          return { ok: false, reason: "protect(tmp): " + (p1.reason || p1.mode), mode: p1.mode };
+        }
+        fs2.renameSync(tmp, file);
+        const p2 = protectFile(file);
+        if (p2 && p2.ok === false) return { ok: false, reason: "protect(file): " + (p2.reason || p2.mode), mode: p2.mode };
+        return { ok: true };
+      } catch (e) {
+        return { ok: false, reason: e.message };
+      }
+    }
+    module2.exports = { protectFile, protectDir, ensurePrivateDir, writePrivate, hasIcacls, currentUser, IS_WINDOWS: IS_WINDOWS2 };
+  }
+});
+
+// src/platform/util/input.js
+var require_input = __commonJS({
+  "src/platform/util/input.js"(exports2, module2) {
+    "use strict";
+    var PKG_NAME_RE = /^(@[a-zA-Z0-9._-]+\/)?[a-zA-Z0-9._-]+$/;
+    var ARGV_UNSAFE_RE = /[\s;|&<>`'"$(){}\\*?~#]/;
+    var WIN_ABS_PATH_RE = /^[A-Za-z]:\\[^;|&<>`'"$*?~#\s]*$/;
+    var UNIT_NAME_RE = /^[A-Za-z0-9:@._-]{1,128}$/;
+    var UNSAFE_LEDGER_KEYS = ["__proto__", "prototype", "constructor"];
+    var LEDGER_UNSAFE_RE = /[\s\u0000-\u001f\u007f]/;
+    function argvViolation(arg) {
+      const s = String(arg == null ? "" : arg);
+      if (!s) return "\u7A7A\u7684 argv \u9879";
+      if (ARGV_UNSAFE_RE.test(s) && !WIN_ABS_PATH_RE.test(s)) return "argv \u9879\u542B\u7981\u7528\u5B57\u7B26\uFF08\u7A7A\u767D/shell \u5143\u5B57\u7B26\uFF09: " + s.slice(0, 80);
+      return null;
+    }
+    var CONTROL_RE = /[\u0000-\u001f\u007f]/;
+    function isAbsoluteForm(p) {
+      const s = String(p == null ? "" : p);
+      return s.charCodeAt(0) === 47 || /^[A-Za-z]:[\\/]/.test(s) || s.charCodeAt(0) === 92 && s.charCodeAt(1) === 92;
+    }
+    function prefixViolation(prefix) {
+      const s = String(prefix == null ? "" : prefix);
+      if (!s.trim()) return "\u7A7A\u7684\u5B89\u88C5\u524D\u7F00";
+      if (CONTROL_RE.test(s)) return "\u5B89\u88C5\u524D\u7F00\u542B\u63A7\u5236\u7B26: " + s.slice(0, 80);
+      if (s.length > 4096) return "\u5B89\u88C5\u524D\u7F00\u8D85\u957F: " + s.slice(0, 60) + "...";
+      if (s[0] === "-") return "\u5B89\u88C5\u524D\u7F00\u4EE5 - \u5F00\u5934\uFF08\u4F1A\u88AB\u5F53\u4F5C npm \u9009\u9879\uFF09: " + s.slice(0, 80);
+      if (!isAbsoluteForm(s)) return "\u5B89\u88C5\u524D\u7F00\u987B\u4E3A\u7EDD\u5BF9\u8DEF\u5F84\uFF08/ \u5F00\u5934\u3001win \u76D8\u7B26\u6216 UNC\uFF09: " + s.slice(0, 80);
+      return null;
+    }
+    function pkgNameViolation(pkg) {
+      const s = String(pkg == null ? "" : pkg);
+      return PKG_NAME_RE.test(s) ? null : "\u975E\u6CD5\u5305\u540D\uFF08\u5B57\u7B26\u96C6\u767D\u540D\u5355\u4E0D\u901A\u8FC7\uFF09: " + s.slice(0, 80);
+    }
+    function unitNameViolation(unit) {
+      const s = String(unit == null ? "" : unit);
+      if (!UNIT_NAME_RE.test(s)) return "\u975E\u6CD5\u5355\u5143\u540D\uFF08\u5B57\u7B26\u96C6/\u957F\u5EA6\u767D\u540D\u5355\u4E0D\u901A\u8FC7\uFF09: " + s.slice(0, 80);
+      const dot = s.indexOf(".");
+      if (dot >= 0 && !/\.service$/.test(s)) return "\u5355\u5143\u540D\u540E\u7F00\u4E0D\u53D7\u652F\u6301\uFF08\u4EC5\u5141\u8BB8 .service \u6216\u65E0\u540E\u7F00\uFF09: " + s.slice(0, 80);
+      return null;
+    }
+    function ledgerKey(raw, opts) {
+      const o = opts || {};
+      const max = typeof o.max === "number" ? o.max : 128;
+      const empty = o.empty == null ? "unknown" : o.empty;
+      const unsafe = o.unsafe == null ? "(other)" : o.unsafe;
+      if (typeof raw !== "string" || !raw) return empty;
+      const s = raw.length > max ? raw.slice(0, max) : raw;
+      if (UNSAFE_LEDGER_KEYS.indexOf(s) >= 0 || LEDGER_UNSAFE_RE.test(s)) return unsafe;
+      return s;
+    }
+    module2.exports = {
+      PKG_NAME_RE,
+      ARGV_UNSAFE_RE,
+      WIN_ABS_PATH_RE,
+      UNIT_NAME_RE,
+      UNSAFE_LEDGER_KEYS,
+      LEDGER_UNSAFE_KEYS_RE: LEDGER_UNSAFE_RE,
+      argvViolation,
+      pkgNameViolation,
+      unitNameViolation,
+      ledgerKey,
+      CONTROL_RE,
+      isAbsoluteForm,
+      prefixViolation
+    };
+  }
+});
+
+// src/platform/os/spawn.js
+var require_spawn = __commonJS({
+  "src/platform/os/spawn.js"(exports2, module2) {
+    "use strict";
+    var { spawn } = require("node:child_process");
+    function detached(cmd2, args, opts) {
+      const o = opts || {};
+      return spawn(cmd2, args, Object.assign({}, o, {
+        detached: true,
+        windowsHide: true,
+        // 默认 ignore；显式 undefined 也回落 ignore，避免 stdio:undefined 的歧义。
+        stdio: o.stdio === void 0 ? "ignore" : o.stdio
+      }));
+    }
+    function piped(cmd2, args, opts) {
+      const o = opts || {};
+      return spawn(cmd2, args, Object.assign({}, o, {
+        stdio: ["ignore", "pipe", "pipe"],
+        windowsHide: true,
+        detached: o.detached === true
+      }));
+    }
+    function detachedIgnored(cmd2, args, opts) {
+      const o = opts || {};
+      return spawn(cmd2, args, Object.assign({}, o, {
+        detached: true,
+        windowsHide: true,
+        stdio: "ignore"
+      }));
+    }
+    module2.exports = { detached, piped, detachedIgnored };
+  }
+});
+
+// src/platform/os/portable.js
+var require_portable = __commonJS({
+  "src/platform/os/portable.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var pidlookup = require_pidlookup();
+    var spawner = require_spawn();
+    var procOS = require_process();
+    var STOP_WAIT_CAP_MS = 3e3;
+    var NAP_MS = 150;
+    function nap(ms) {
+      try {
+        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+      } catch {
+      }
+    }
+    function readPidFile(pidFile) {
+      if (!pidFile) return null;
+      try {
+        const n = parseInt(String(fs2.readFileSync(pidFile, "utf8")).trim(), 10);
+        return Number.isInteger(n) && n > 0 ? n : null;
+      } catch {
+        return null;
+      }
+    }
+    function matchesAnchors(pid, anchors) {
+      if (!pid || !Array.isArray(anchors) || !anchors.length) return false;
+      const cmd2 = pidlookup.readCmdline(pid);
+      if (!cmd2) return false;
+      return anchors.some((a) => a && cmd2.indexOf(String(a)) !== -1);
+    }
+    var portOf = (o) => {
+      const p = Number(o && o.port);
+      return Number.isInteger(p) && p > 0 ? p : 0;
+    };
+    var pidFileOf = (o) => o && o.pidFile || null;
+    var anchorsOf = (o) => Array.isArray(o && o.anchors) ? o.anchors : [];
+    function findOurs(o) {
+      const anchors = anchorsOf(o);
+      const fp = readPidFile(pidFileOf(o));
+      if (fp !== null && pidlookup.isAlive(fp) && matchesAnchors(fp, anchors)) return { pid: fp, ownGroup: true };
+      const port = portOf(o);
+      if (port) {
+        const q = pidlookup.findListeningPid(port);
+        if (q !== null && q !== fp && matchesAnchors(q, anchors)) return { pid: q, ownGroup: false };
+      }
+      return null;
+    }
+    function removePidFile(o) {
+      const f = pidFileOf(o);
+      if (f) {
+        try {
+          fs2.unlinkSync(f);
+        } catch {
+        }
+      }
+    }
+    var portable = {
+      kind: "portable",
+      supportsUnits: false,
+      supportsTransient: true,
+      // 无操作 = 成功（与 systemd 的动词返回形态一致，调用方无需按 provider 分支）。
+      daemonReload() {
+        return true;
+      },
+      resetFailed() {
+        return true;
+      },
+      /** 拉起：spawn(detached)——POSIX 自成进程组（kill(-pid) 语义的前提）、win32 windowsHide +
+       *  CREATE_NEW_PROCESS_GROUP（NO-CONSOLE-WINDOW 纪律收口在 platform/os/spawn.js）。
+       *  调用方传来的 props（cgroup 语义）在此如实忽略：本档无内核强制可施加。
+       *  @param {{cmd:string[], env?:object, workingDir?:string, pidFile?:string, port?:number, anchors?:string[]}} o */
+      startTransient(o) {
+        const opts = o || {};
+        const cmd2 = opts.cmd || [];
+        if (!cmd2.length) throw new Error("portable \u62C9\u8D77\u62D2\u7EDD\uFF1A\u7A7A\u547D\u4EE4");
+        const child = spawner.detached(cmd2[0], cmd2.slice(1), {
+          cwd: opts.workingDir || void 0,
+          env: Object.assign({}, process.env, opts.env || {})
+        });
+        child.on("error", () => {
+        });
+        if (!child.pid) {
+          try {
+            child.kill();
+          } catch {
+          }
+          throw new Error("portable \u62C9\u8D77\u5931\u8D25\uFF1Aspawn \u672A\u4EA7\u751F\u8FDB\u7A0B");
+        }
+        try {
+          child.unref();
+        } catch {
+        }
+        if (opts.pidFile) {
+          try {
+            fs2.writeFileSync(opts.pidFile, String(child.pid));
+          } catch {
+          }
+        }
+        return true;
+      },
+      /** 停止（有界同步复核）：终止我们的进程树，确认「端口锚点与 run.pid 锚点双双消失」才 true。
+       *  无可杀对象（含 run.pid 为陈旧/被 PID 复用）-> 清文件后如实 true（幂等）。 */
+      stopUnit(unit, o) {
+        const opts = o || {};
+        const ours = findOurs(opts);
+        if (!ours) {
+          removePidFile(opts);
+          return true;
+        }
+        try {
+          procOS.killTree(ours.pid, "SIGTERM", void 0, { ownGroup: ours.ownGroup });
+        } catch {
+        }
+        const budget = Math.max(0, Math.min(typeof opts.timeoutMs === "number" ? opts.timeoutMs : STOP_WAIT_CAP_MS, STOP_WAIT_CAP_MS));
+        const t0 = Date.now();
+        for (; ; ) {
+          if (!findOurs(opts)) {
+            removePidFile(opts);
+            return true;
+          }
+          if (Date.now() - t0 >= budget) break;
+          nap(NAP_MS);
+        }
+        try {
+          procOS.killTree(ours.pid, "SIGKILL", void 0, { ownGroup: ours.ownGroup });
+        } catch {
+        }
+        nap(NAP_MS);
+        if (!findOurs(opts)) {
+          removePidFile(opts);
+          return true;
+        }
+        return false;
+      },
+      /** 活跃判定（三态）：port 与 pidFile 都缺 = 无从查询 -> null，删除保护路径不得把它当「已停止」。
+       *  anchors 为空时降级为「端口有监听即活跃」（monitor.probeInstance 同口径，该调用方本就以此判在线）；
+       *  杀进程（stopUnit）仍要求锚点命中 —— 判定可宽，动手必严。
+       *  存活 pid 的 cmdline 读不到 = 分不清「他人复用」与「查询失败」-> null。 */
+      isUnitActive(unit, o) {
+        const opts = o || {};
+        if (findOurs(opts)) return true;
+        const port = portOf(opts);
+        const pidFile = pidFileOf(opts);
+        const anchors = anchorsOf(opts);
+        if (!port && !pidFile) return null;
+        if (!anchors.length) {
+          const fp2 = readPidFile(pidFile);
+          if (fp2 !== null && pidlookup.isAlive(fp2)) return true;
+          if (port) {
+            const q = pidlookup.findListeningPid(port);
+            if (q !== null) return true;
+            if (fp2 !== null) return false;
+            return null;
+          }
+          return fp2 !== null ? false : null;
+        }
+        const fp = readPidFile(pidFile);
+        if (fp !== null && pidlookup.isAlive(fp) && !pidlookup.readCmdline(fp)) return null;
+        return false;
+      },
+      // portable 无 systemd transient 单元文件；run.pid 的清理归 cleanTransient。
+      transientUnitFile() {
+        return null;
+      },
+      /** 清理同名残留：先停掉仍活着的旧进程（重启自愈路径：旧进程未监听端口时端口探测拦不住），再清 run.pid。 */
+      cleanTransient(unit, o) {
+        const opts = o || {};
+        const errors = [];
+        if (this.stopUnit(unit, Object.assign({}, opts, { timeoutMs: 1500 })) === false) errors.push("stop-unconfirmed");
+        removePidFile(opts);
+        return { ok: errors.length === 0, errors };
+      },
+      /** 返回值只表示「是否改动了内核强制」；governor 不因 false 走降级分支 —— 违规处置链本就平台无关。 */
+      setLimits() {
+        return false;
+      }
+    };
+    module2.exports = { portable, findOurs, matchesAnchors, _test: { readPidFile, matchesAnchors, findOurs } };
+  }
+});
+
+// src/platform/os/service.js
+var require_service = __commonJS({
+  "src/platform/os/service.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var exec = require_exec();
+    var input = require_input();
+    var execPath = require_exec_path();
+    var { portable } = require_portable();
+    var CapabilityError = class extends Error {
+      constructor(msg) {
+        super(msg);
+        this.name = "CapabilityError";
+        this.code = "CAPABILITY_UNSUPPORTED";
+      }
+    };
+    var PLATFORM = process.platform;
+    function run(cmd2, args, opts) {
+      return exec.run(cmd2, args, opts || {});
+    }
+    var UNIT_NAME_RE = input.UNIT_NAME_RE;
+    function unitNameViolation(unit) {
+      return input.unitNameViolation(unit);
+    }
+    var systemd = {
+      kind: "systemd",
+      supportsUnits: true,
+      supportsTransient: true,
+      daemonReload() {
         try {
-          names = listDir(dir).filter((f) => f.endsWith(".desktop"));
+          return run("systemctl", ["--user", "daemon-reload"], { timeoutMs: 15e3 }) !== null;
         } catch {
-          continue;
-        }
-        for (const f of names) {
-          let text = null;
-          try {
-            text = readFile(PJ(dir, f));
-          } catch {
-            continue;
-          }
-          const item = browserFromDesktop(text, kind, f);
-          if (item) usable(item);
+          return false;
         }
-      }
-      let defaultId = null;
-      let defaultSource = null;
-      const fromMime = linuxDefaultFromMimeApps(readFile, exists, env, home, note);
-      if (fromMime) {
-        const item = usable(fromMime);
-        if (item) {
-          defaultId = item.id;
-          defaultSource = "mimeapps";
+      },
+      stopUnit(unit, opts) {
+        if (unitNameViolation(unit)) return false;
+        const o = opts || {};
+        try {
+          return run("systemctl", ["--user", "stop", unit], { timeoutMs: o.timeoutMs || 15e3 }) !== null;
+        } catch {
+          return false;
         }
-      }
-      const id = runOut("xdg-settings", ["get", "default-web-browser"]);
-      const desktopId = id && String(id).trim();
-      if (!defaultId && desktopId && /^[A-Za-z0-9._-]+\.desktop$/.test(desktopId)) {
-        for (const { dir } of desktopDirs(env, home)) {
-          const p = PJ(dir, desktopId);
-          let text = null;
-          try {
-            if (exists(p)) text = readFile(p);
-          } catch {
-            continue;
-          }
-          if (text === null) continue;
-          const item = browserFromDesktop(text, "xdg-settings", desktopId);
-          const used = item && usable(item);
-          if (used) {
-            defaultId = used.id;
-            defaultSource = "xdg-settings";
-            break;
-          }
+      },
+      // run() 失败返回 null 而不抛，try/catch 包裹会恒返回 true；如实回传成败。
+      resetFailed(unit) {
+        if (unitNameViolation(unit)) return false;
+        return run("systemctl", ["--user", "reset-failed", unit], { timeoutMs: 1e4 }) !== null;
+      },
+      /** 单元活跃判定（三态）：确认 active -> true；确认不活跃 -> false；查询未完成 -> null（未知）。
+       *  run() 失败只返回 null，「查询未完成」不可折成 false：instance/ops.js 删除数据目录前
+       *  按「!== false 才放行删除」消费本函数，折假即超时窗口内误删沙箱数据。 */
+      isUnitActive(unit) {
+        if (!unit) return true;
+        if (unitNameViolation(unit)) return false;
+        try {
+          const r = exec.runDetail("systemctl", ["--user", "is-active", unit], { timeoutMs: 8e3 });
+          if (r.timedOut) return null;
+          const state = String(r.stdout || "").trim();
+          if (state === "active") return true;
+          if (state || r.code !== null) return false;
+          return null;
+        } catch {
+          return null;
         }
-      }
-      if (!desktopId) note("xdg-settings", "\u65E0\u8F93\u51FA");
-      else if (defaultSource === "xdg-settings") note("xdg-settings", "\u9ED8\u8BA4=" + defaultId);
-      else note("xdg-settings", "\u62A5\u51FA " + desktopId + (defaultId ? "\uFF08\u9ED8\u8BA4\u5DF2\u7531 " + defaultSource + " \u5B9A\u51FA\uFF09" : " \u4F46\u4E0D\u53EF\u7528"));
-      if (!defaultId && found.size === 1) {
-        defaultId = [...found.keys()][0];
-        defaultSource = "only-installed";
-      }
-      return { browsers: [...found.values()], defaultId, defaultSource, probed: notes };
-    }
-    function linuxDefaultFromMimeApps(readFile, exists, env, home, note) {
-      const cfgHome = env.XDG_CONFIG_HOME || PJ(home, ".config");
-      const cfgDirs = String(env.XDG_CONFIG_DIRS || "/etc/xdg").split(":").filter(Boolean);
-      const dataDirs = String(env.XDG_DATA_DIRS || "/usr/local/share:/usr/share").split(":").filter(Boolean);
-      const files = [
-        PJ(cfgHome, "mimeapps.list"),
-        ...cfgDirs.map((d) => PJ(d, "mimeapps.list")),
-        ...dataDirs.map((d) => PJ(d, "applications", "mimeapps.list"))
-      ];
-      for (const f of files) {
-        if (!exists(f)) continue;
-        let text = null;
+      },
+      transientUnitFile(unit) {
+        if (unitNameViolation(unit)) return null;
+        let uid = 0;
         try {
-          text = readFile(f);
+          uid = os2.userInfo().uid;
         } catch {
-          continue;
         }
-        const id = mimeAppsDefault(text);
-        if (!id) continue;
-        note("mimeapps", path2.basename(f) + " -> " + id);
-        for (const { dir, kind } of desktopDirs(env, home)) {
-          const p = PJ(dir, id);
-          if (!exists(p)) continue;
-          let dt = null;
-          try {
-            dt = readFile(p);
-          } catch {
-            continue;
-          }
-          const item = browserFromDesktop(dt, kind, id);
-          if (item) return item;
+        const rt = process.env.XDG_RUNTIME_DIR || "/run/user/" + uid;
+        return path2.join(rt, "systemd", "transient", unit + ".service");
+      },
+      /** 清理 stale transient 单元：stop/reset-failed/删单元文件/daemon-reload。
+       *  必须 reload：删除文件后 systemd 仍缓存该单元为 loaded，否则 systemd-run 拒绝重建同名单元。
+       *  返回 {ok, errors}：stop/reset-failed 对「从未加载的单元」非零退出属正常，不计入 ok；
+       *  硬失败只有删单元文件与 daemon-reload（run() 失败返回 null 不抛，成败须如实回传）。 */
+      cleanTransient(unit) {
+        const errors = [];
+        const bad = unitNameViolation(unit);
+        if (bad) return { ok: false, errors: [bad] };
+        exec.runDetail("systemctl", ["--user", "stop", unit + ".service"], { timeoutMs: 1e4 });
+        exec.runDetail("systemctl", ["--user", "reset-failed", unit + ".service"], { timeoutMs: 1e4 });
+        let unlinkOk = true;
+        try {
+          const f = this.transientUnitFile(unit);
+          if (f) fs2.unlinkSync(f);
+        } catch {
+          unlinkOk = false;
+          errors.push("unlink " + unit + ".service");
         }
-        return null;
+        if (!exec.runDetail("systemctl", ["--user", "daemon-reload"], { timeoutMs: 15e3 }).ok) errors.push("daemon-reload");
+        return { ok: unlinkOk && errors.length === 0, errors };
+      },
+      /** 以 transient 单元启动（独立 cgroup；每实例隔离）。
+       *  @param {{unit:string, cmd:string[], env?:object, props?:string[], workingDir?:string, description?:string, timeoutMs?:number}} o
+       *    props 为 systemd 属性（如 KillMode=process、MemoryMax=8G），平台层只拼装成 --property，不解释语义。 */
+      startTransient(o) {
+        const opts = o || {};
+        const bad = unitNameViolation(opts.unit);
+        if (bad) throw new Error("systemd-run \u62D2\u7EDD: " + bad);
+        const args = ["--user", "--unit=" + opts.unit];
+        if (opts.description) args.push("--description=" + opts.description);
+        for (const p of opts.props || []) args.push("--property=" + p);
+        for (const [k, v] of Object.entries(opts.env || {})) args.push("--setenv=" + k + "=" + v);
+        if (opts.workingDir) args.push("--working-directory=" + opts.workingDir);
+        args.push("--", ...opts.cmd || []);
+        const r = exec.runDetail("systemd-run", args, { timeoutMs: opts.timeoutMs || 2e4 });
+        if (!r.ok) throw new Error("systemd-run \u5931\u8D25: " + (r.error || "unknown") + (r.stderr ? " | " + String(r.stderr).trim() : ""));
+        return true;
+      },
+      /** 运行期改限额（W3 动态化）：systemctl --user set-property 立即生效，无需重启单元。
+       *  必带 --runtime：transient 单元本不落盘，不带它会把 drop-in 写进用户配置目录，陈旧下限永久黏住。
+       *  值只来自 sandbox.unitProps 同源的 alloc（平台层翻译语义、不决定数额）。 */
+      setLimits(unit, alloc) {
+        if (unitNameViolation(unit)) return false;
+        const a = alloc || {};
+        const props = [];
+        if (a.memoryMax) props.push("MemoryMax=" + a.memoryMax);
+        if (a.memoryHigh) props.push("MemoryHigh=" + a.memoryHigh);
+        if (a.cpuQuota) props.push("CPUQuota=" + a.cpuQuota);
+        if (!props.length) return false;
+        return exec.runDetail(
+          "systemctl",
+          ["--user", "set-property", "--runtime", unit].concat(props),
+          { timeoutMs: 1e4 }
+        ).ok;
       }
-      note("mimeapps", "\u65E0\u9ED8\u8BA4\u9879");
-      return null;
-    }
-    function mimeAppsDefault(text) {
-      let inDefault = false;
-      for (const line of String(text || "").split(/\r?\n/)) {
-        if (/^\s*\[/.test(line)) {
-          inDefault = /^\s*\[Default Applications\]\s*$/.test(line);
-          continue;
+    };
+    function makeUnsupported(kind, label) {
+      return {
+        kind,
+        supportsUnits: false,
+        supportsTransient: false,
+        daemonReload() {
+          return false;
+        },
+        stopUnit() {
+          throw new CapabilityError(label + "\uFF1A\u4E0D\u652F\u6301\u4EE5\u7528\u6237\u5355\u5143\u65B9\u5F0F\u7BA1\u7406\u88AB\u7BA1\u5B9E\u4F8B");
+        },
+        resetFailed() {
+          return false;
+        },
+        isUnitActive(unit) {
+          return unit ? false : true;
+        },
+        transientUnitFile() {
+          return null;
+        },
+        // 无 transient 单元可清 = 成功；返回形态与 systemd 一致，调用方无需分支。
+        cleanTransient() {
+          return { ok: true, errors: [] };
+        },
+        startTransient() {
+          throw new CapabilityError(label + "\uFF1A\u4E0D\u652F\u6301\u62C9\u8D77\u5B9E\u4F8B\u8231\uFF08portable \u6863\u672A\u542F\u7528\uFF09");
+        },
+        setLimits() {
+          return false;
         }
-        if (!inDefault) continue;
-        const m = line.match(/^\s*x-scheme-handler\/https?\s*=\s*(.*)$/i);
-        if (!m) continue;
-        const ids = m[1].split(";").map((s) => s.trim()).filter((s) => /^[A-Za-z0-9._-]+\.desktop$/.test(s));
-        if (ids.length) return ids[0];
+      };
+    }
+    var NONE = makeUnsupported("none", "\u5F53\u524D\u5E73\u53F0\u65E0\u670D\u52A1\u7BA1\u7406\u5668");
+    var _systemdRun = null;
+    function hasSystemdRun() {
+      if (_systemdRun === null) {
+        _systemdRun = !!execPath.resolveExecutable("systemd-run") || exec.runOut("systemd-run", ["--version"], { timeoutMs: 3e3 }) !== null;
       }
-      return null;
+      return _systemdRun;
+    }
+    function current() {
+      if (PLATFORM === "linux") return hasSystemdRun() ? systemd : portable;
+      if (PLATFORM === "darwin" || PLATFORM === "win32") return portable;
+      return NONE;
+    }
+    module2.exports = { current, CapabilityError, kind: () => current().kind, PLATFORM, UNIT_NAME_RE, unitNameViolation, _testProviders: { systemd, portable, NONE } };
+  }
+});
+
+// src/platform/os/notify.js
+var require_notify = __commonJS({
+  "src/platform/os/notify.js"(exports2, module2) {
+    "use strict";
+    var spawnOS = require_spawn();
+    function appleScriptString(s) {
+      return JSON.stringify(String(s));
+    }
+    function powerShellString(s) {
+      return "'" + String(s).replace(/'/g, "''") + "'";
     }
-    function probe(platform, d) {
+    function notifyCommand(platform, title, body) {
       const pl = platform || process.platform;
-      const dd = Object.assign({}, d, { canExec: d.canExec || ((p) => isExecutableFile(p, pl)) });
-      if (pl === "win32") return probeWin(dd);
-      if (pl === "darwin") return probeMac(dd);
-      return probeLinux(dd);
+      const t = String(title == null ? "" : title);
+      const b = String(body == null ? "" : body);
+      if (pl === "linux") {
+        return { cmd: "notify-send", args: ["-a", "dsh-supervisor", t, b] };
+      }
+      if (pl === "darwin") {
+        const script = "display notification " + appleScriptString(b) + " with title " + appleScriptString(t);
+        return { cmd: "osascript", args: ["-e", script] };
+      }
+      if (pl === "win32") {
+        const ps = [
+          '[reflection.assembly]::loadwithpartialname("System.Windows.Forms") | Out-Null',
+          '[reflection.assembly]::loadwithpartialname("System.Drawing") | Out-Null',
+          "$n = New-Object System.Windows.Forms.NotifyIcon",
+          "$n.Icon = [System.Drawing.SystemIcons]::Information",
+          "$n.Visible = $true",
+          "$n.ShowBalloonTip(4000, " + powerShellString(t) + ", " + powerShellString(b) + ", [System.Windows.Forms.ToolTipIcon]::None)",
+          "Start-Sleep -Milliseconds 4200",
+          "$n.Dispose(); $n.Visible = $false"
+        ].join("; ");
+        return { cmd: "powershell", args: ["-NoProfile", "-NonInteractive", "-Command", ps] };
+      }
+      return null;
     }
-    var CACHE = /* @__PURE__ */ Object.create(null);
-    function inventory(platform, o) {
-      const ov = o || {};
-      const pl = platform || process.platform;
-      const now = ov.now || (() => Date.now());
-      const ttl = ov.ttlMs === void 0 ? 6e4 : ov.ttlMs;
-      const cached = CACHE[pl];
-      if (!ov.force && cached && now() - cached.at < ttl) return Object.assign({ cached: true }, cached.value);
-      const runOut = ov.runOut || ((bin, args) => exec.runOut(bin, args, { timeoutMs: PROBE_TIMEOUT_MS }));
-      const readFile = ov.readFile || ((p) => fs2.readFileSync(p, "utf8"));
-      const exists = ov.exists || ((p) => fs2.existsSync(p));
-      const listDir = ov.listDir || ((p) => fs2.readdirSync(p));
-      let value;
+    function notify(title, body, onError) {
       try {
-        value = probe(pl, { runOut, readFile, exists, listDir, canExec: ov.canExec, env: ov.env || process.env, home: ov.home || os2.homedir() });
-      } catch (e) {
-        value = { browsers: [], defaultId: null, defaultSource: null, probed: [{ source: "probe-error", detail: String(e && e.message || e) }] };
+        const plan = notifyCommand(process.platform, title, body);
+        if (!plan) return false;
+        const c = spawnOS.detachedIgnored(plan.cmd, plan.args);
+        c.on("error", () => {
+          if (onError) onError();
+        });
+        c.unref();
+        return true;
+      } catch {
+        if (onError) onError();
+        return false;
       }
-      value.at = now();
-      value.platform = pl;
-      value.browsers.sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
-      CACHE[pl] = { at: now(), value };
-      return Object.assign({ cached: false }, value);
-    }
-    function invalidate(platform) {
-      if (platform) delete CACHE[platform];
-      else for (const k of Object.keys(CACHE)) delete CACHE[k];
     }
-    module2.exports = {
-      inventory,
-      invalidate,
-      probe,
-      probeWin,
-      probeMac,
-      probeLinux,
-      engineOf,
-      tokenizeExec,
-      parseExecLine,
-      regValueOf,
-      expandEnvVars,
-      exeFromCmdLine,
-      regSubkeys,
-      regKeyFull,
-      regValueTargets,
-      safeRegKeyPart,
-      browserFromDesktop,
-      desktopDirs,
-      resolveLinuxBin,
-      mimeAppsDefault,
-      linuxDefaultFromMimeApps,
-      WIN_APP_PATHS,
-      PROBE_TIMEOUT_MS
-    };
+    module2.exports = { notify, notifyCommand, appleScriptString, powerShellString };
   }
 });
 
@@ -6055,8 +6881,10 @@ var require_browser = __commonJS({
     var desktop = require_desktop();
     var CAPABILITY_PROFILES = require_capability_profile();
     var { resolveExecutable, isExecutableFile } = require_exec_path();
+    var environment = require_environment();
     var detector = require_browser_inventory();
     var { engineOf } = detector;
+    var { allocTempDir, removeTreeDeferred } = require_fs();
     function isSafeHttpUrl(url) {
       try {
         const u = new URL(String(url));
@@ -6092,7 +6920,7 @@ var require_browser = __commonJS({
     var HANDEDOFF_TEXT = "\u5DF2\u628A\u5730\u5740\u4EA4\u7ED9\u7CFB\u7EDF\uFF0C\u4F46\u8FD9\u6B21\u542F\u52A8\u62FF\u4E0D\u5230\u7A97\u53E3\u662F\u5426\u51FA\u73B0\u7684\u8BC1\u636E";
     var FAILURE_TEXT = {
       "unsafe-url": "\u5730\u5740\u4E0D\u662F http(s) \u7EDD\u5BF9 URL\uFF0C\u5DF2\u62D2\u7EDD\u4EA4\u7ED9\u6D4F\u89C8\u5668",
-      "no-launcher": "\u672A\u80FD\u786E\u5B9A\u8BE5\u7528\u54EA\u4E2A\u6D4F\u89C8\u5668\u6253\u5F00\uFF08\u7CFB\u7EDF\u91CC\u8BFB\u4E0D\u5230\u9ED8\u8BA4\u6D4F\u89C8\u5668\u8BBE\u7F6E\uFF09\uFF0C\u8BF7\u5728\u7CFB\u7EDF\u8BBE\u7F6E\u91CC\u6307\u5B9A\u9ED8\u8BA4\u6D4F\u89C8\u5668\u6216\u624B\u52A8\u6253\u5F00\u8BE5\u5730\u5740",
+      "no-launcher": "\u672C\u673A\u672A\u63A2\u5230\u53EF\u542F\u52A8\u7684\u6D4F\u89C8\u5668\uFF08\u6216\u6240\u9009\u6D4F\u89C8\u5668\u5DF2\u4E0D\u53EF\u6267\u884C\uFF09\uFF0C\u8BF7\u5728\u9762\u677F\u7684\u73AF\u5883\u8868\u5355\u91CC\u786E\u8BA4\uFF0C\u6216\u624B\u52A8\u6253\u5F00\u8BE5\u5730\u5740",
       "spawn-failed": "\u6D4F\u89C8\u5668\u542F\u52A8\u5931\u8D25\uFF08\u7CFB\u7EDF\u62D2\u7EDD\u4E86\u8BE5\u547D\u4EE4\uFF09",
       "exit-nonzero": "\u7CFB\u7EDF\u62D2\u7EDD\u4E86\u8FD9\u4E2A\u5730\u5740\uFF08\u542F\u52A8\u547D\u4EE4\u975E 0 \u9000\u51FA\uFF09\uFF0C\u7A97\u53E3\u672A\u51FA\u73B0",
       "killed-by-signal": "\u6D4F\u89C8\u5668\u542F\u52A8\u547D\u4EE4\u88AB\u7CFB\u7EDF\u7EC8\u6B62\uFF0C\u7A97\u53E3\u672A\u51FA\u73B0",
@@ -6100,17 +6928,10 @@ var require_browser = __commonJS({
       "unsupported-platform": "\u5F53\u524D\u5E73\u53F0\u4E0D\u5728\u4EA7\u54C1\u652F\u6301\u7684\u684C\u9762\u5E73\u53F0\u5185\uFF0C\u8BF7\u624B\u52A8\u6253\u5F00\u8BE5\u5730\u5740"
     };
     function ownsItsWindow(via, platform) {
+      if (via === "isolated") return true;
       if (via !== "dispatcher") return false;
       return platform !== "win32";
     }
-    function pickLauncher(platform, inv) {
-      const list = inv && Array.isArray(inv.browsers) ? inv.browsers : [];
-      const id = inv && inv.defaultId;
-      const hit = id ? list.find((b) => b.id === id) : null;
-      if (hit) return { browser: hit, how: inv && inv.defaultSource || "default" };
-      if (list.length === 1) return { browser: list[0], how: "only-installed" };
-      return { browser: null, how: list.length ? "no-default" : "none-found" };
-    }
     function formOfBin(pl, b) {
       const engine = b && b.bin ? engineOf(b.bin) : "other";
       return { engine, direct: !!b && (engine !== "other" || pl === "win32") };
@@ -6118,30 +6939,118 @@ var require_browser = __commonJS({
     function openPlan(platform, url, opts) {
       const o = opts || {};
       const pl = platform || process.platform;
-      const picked = o.pick || pickLauncher(pl, o.inventory);
+      const picked = o.pick || environment.pickLauncher(pl, o.inventory, o.preference);
       const b = picked.browser;
       const form = formOfBin(pl, b);
       if (form.direct) {
         return {
           bin: b.bin,
+          args: (b.baseArgs || []).concat([url]),
           engine: form.engine,
           via: "browser",
+          isolated: false,
+          watch: false,
+          envKind: "sys",
           pick: picked.how,
-          baseArgs: (b.baseArgs || []).concat([url]),
+          stale: picked.stale === true,
           exitIsEvidence: ownsItsWindow("browser", pl)
         };
       }
       const c = openCommand(pl, url);
-      if (!c) return { bin: null, engine: form.engine, via: "none", pick: picked.how, baseArgs: [], exitIsEvidence: false };
+      if (!c) return {
+        bin: null,
+        args: [url],
+        engine: form.engine,
+        via: "none",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
+        pick: picked.how,
+        stale: picked.stale === true,
+        exitIsEvidence: false
+      };
       return {
         bin: c.cmd,
+        args: c.args,
         engine: "other",
         via: "dispatcher",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
         pick: picked.how,
-        baseArgs: c.args,
+        stale: picked.stale === true,
         exitIsEvidence: ownsItsWindow("dispatcher", pl)
       };
     }
+    function isolatedPlan(platform, url, opts) {
+      const o = opts || {};
+      const pl = platform || process.platform;
+      const picked = o.pick || environment.pickLauncher(pl, o.inventory, o.preference);
+      const b = picked.browser;
+      const form = formOfBin(pl, b);
+      const baseArgs = b && b.baseArgs || [];
+      const common = { pick: picked.how, stale: picked.stale === true, engine: form.engine };
+      const plain = (bin, label) => Object.assign(common, {
+        bin,
+        args: baseArgs.concat([url]),
+        via: "browser",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
+        label,
+        exitIsEvidence: ownsItsWindow("browser", pl)
+      });
+      if (form.direct && form.engine === "chromium" && o.profileDir) {
+        const args = ["--incognito", "--user-data-dir=" + o.profileDir];
+        if (Array.isArray(o.size) && o.size.length === 2) args.push("--window-size=" + o.size[0] + "," + o.size[1]);
+        if (o.lang) args.push("--lang=" + o.lang);
+        args.push("--no-first-run", "--no-default-browser-check", "--disable-session-crashed-bubble");
+        return Object.assign(common, {
+          bin: b.bin,
+          args: [...baseArgs, ...args, url],
+          via: "isolated",
+          isolated: true,
+          watch: true,
+          envKind: "anti",
+          label: "chromium",
+          exitIsEvidence: ownsItsWindow("isolated", pl)
+        });
+      }
+      if (form.direct && form.engine === "firefox" && o.profileDir) {
+        return Object.assign(common, {
+          bin: b.bin,
+          args: [...baseArgs, "--no-remote", "--profile", o.profileDir, "-private-window", url],
+          via: "isolated",
+          isolated: true,
+          watch: true,
+          envKind: "anti",
+          label: "firefox",
+          exitIsEvidence: ownsItsWindow("isolated", pl)
+        });
+      }
+      if (form.direct) return plain(b.bin, path2.basename(b.bin));
+      const c = openCommand(pl, url);
+      if (!c) return Object.assign(common, {
+        bin: null,
+        args: [url],
+        via: "none",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
+        label: null,
+        exitIsEvidence: false
+      });
+      return Object.assign(common, {
+        bin: c.cmd,
+        args: c.args,
+        via: "dispatcher",
+        isolated: false,
+        watch: false,
+        envKind: "sys",
+        label: c.cmd,
+        exitIsEvidence: ownsItsWindow("dispatcher", pl)
+      });
+    }
     function observeSpawn(child, windowMs, setTimeoutFn) {
       return new Promise((resolve) => {
         let settled = false;
@@ -6159,105 +7068,32 @@ var require_browser = __commonJS({
       });
     }
     var OPEN_OBSERVE_MS = 1500;
-    function launchDiagnostics(inv, plan, how) {
+    var LOGIN_TZ_POOL = ["Asia/Shanghai", "Asia/Seoul", "Asia/Tokyo", "Asia/Singapore", "Europe/Berlin", "Europe/London", "Europe/Paris", "America/New_York", "America/Los_Angeles", "Australia/Sydney"];
+    var LOGIN_LANG_POOL = ["zh-CN", "en-US", "en-GB", "ja-JP", "ko-KR", "de-DE", "fr-FR", "zh-TW"];
+    var LOGIN_SIZE_POOL = [[1280, 800], [1366, 768], [1440, 900], [1536, 864], [1600, 900], [1680, 1050], [1920, 1080], [1024, 768], [1152, 864], [1280, 720]];
+    function loginEnv(rand) {
+      const pick = (arr) => arr[Math.floor((typeof rand === "function" ? rand() : Math.random()) * arr.length)];
+      const size = pick(LOGIN_SIZE_POOL);
+      const lang = pick(LOGIN_LANG_POOL);
+      const tz = pick(LOGIN_TZ_POOL);
+      const sysEnv = Object.assign({}, process.env, desktop.sessionEnv());
+      return { size, lang, sysEnv, antiEnv: Object.assign({}, sysEnv, { TZ: tz, LANG: lang }) };
+    }
+    function launchDiagnostics(inv, plan, picked) {
       const found = (inv && inv.browsers || []).map((b) => ({
         name: b.name,
         engine: b.engine || engineOf(b.bin),
         via: (b.sources && b.sources.length ? b.sources : [b.source || "unknown"]).join("+")
       }));
+      const pk = picked || {};
       return {
-        platform: inv && inv.platform || null,
-        pick: how || plan && plan.pick || "none",
-        bin: plan && plan.bin || null,
+        pick: pk.how || plan && plan.pick || "none",
         default: inv && inv.defaultId ? { id: inv.defaultId, source: inv.defaultSource || null } : null,
+        preference: pk.wanted ? { id: pk.wanted, matched: pk.stale !== true } : null,
         found,
         probed: inv && inv.probed || []
       };
     }
-    async function openBrowser(url, o) {
-      const opts = o || {};
-      const pl = opts.platform || process.platform;
-      if (!isSafeHttpUrl(url)) {
-        return outcome({ ok: false, reason: "unsafe-url", url: String(url || ""), evidence: null });
-      }
-      if (!SUPPORTED_OPEN_PLATFORMS.includes(pl)) {
-        return outcome({ ok: false, reason: "unsupported-platform", url, evidence: { platform: pl } });
-      }
-      const observeMs = opts.observeMs === void 0 ? OPEN_OBSERVE_MS : opts.observeMs;
-      const spawnWith = typeof opts.spawn === "function" ? opts.spawn : _spawnDetachedIgnored;
-      const avail = typeof opts.binAvailable === "function" ? opts.binAvailable : binAvailable;
-      const observe = typeof opts.observe === "function" ? opts.observe : observeSpawn;
-      const resolveInv = typeof opts.resolveInventory === "function" ? opts.resolveInventory : ((platform, deps) => detector.inventory(platform, deps));
-      const inv = "inventory" in opts ? opts.inventory : resolveInv(pl, opts.resolveDeps || {});
-      const plan = openPlan(pl, url, { inventory: inv, pick: opts.pick });
-      const diagnostics = launchDiagnostics(inv, plan, plan.pick);
-      const evidence = {
-        bin: plan.bin,
-        engine: plan.engine,
-        via: plan.via,
-        ownsWindow: plan.exitIsEvidence === true,
-        exitCode: null,
-        exitSignal: null,
-        error: null,
-        diagnostics
-      };
-      const desktopAvailable = typeof opts.desktopAvailable === "function" ? opts.desktopAvailable : desktop.sessionAvailable;
-      if (pl === "linux" && !desktopAvailable()) {
-        return outcome({ ok: false, reason: "no-desktop-session", url, evidence });
-      }
-      if (!plan.bin) {
-        return outcome({ ok: false, reason: "no-launcher", url, evidence });
-      }
-      if (!avail(plan.bin)) {
-        return outcome({ ok: false, reason: "no-launcher", url, evidence });
-      }
-      let child;
-      try {
-        child = spawnWith(plan.bin, plan.baseArgs);
-      } catch (e) {
-        evidence.error = e && e.code || String(e);
-        return outcome({ ok: false, reason: "spawn-failed", url, evidence });
-      }
-      if (!child) return outcome({ ok: false, reason: "spawn-failed", url, evidence });
-      const seen = await observe(child, observeMs, opts.setTimeout);
-      evidence.error = seen.stage === "error" ? String(seen.code) : null;
-      evidence.exitCode = seen.code === void 0 ? null : seen.code;
-      evidence.exitSignal = seen.signal === void 0 ? null : seen.signal;
-      if (seen.stage === "error") return outcome({ ok: false, reason: "spawn-failed", url, evidence });
-      const exitDecides = seen.stage === "exit" && plan.exitIsEvidence === true;
-      if (exitDecides && (seen.code !== 0 || seen.signal)) {
-        return outcome({
-          ok: false,
-          reason: seen.signal ? "killed-by-signal" : "exit-nonzero",
-          url,
-          evidence,
-          error: FAILURE_TEXT[seen.signal ? "killed-by-signal" : "exit-nonzero"] + "\uFF08" + (seen.signal || seen.code) + "\uFF09"
-        });
-      }
-      return outcome({ ok: true, confirmed: exitDecides, handedOff: !exitDecides, url, evidence });
-    }
-    function listBrowsers(o) {
-      const ov = o || {};
-      const inv = detector.inventory(ov.platform, { force: ov.force === true });
-      return {
-        ok: true,
-        platform: inv.platform,
-        cached: inv.cached === true,
-        default: inv.defaultId ? { id: inv.defaultId, source: inv.defaultSource || null } : null,
-        browsers: (inv.browsers || []).map((b) => ({
-          id: b.id,
-          name: b.name,
-          engine: b.engine || engineOf(b.bin),
-          bin: b.bin,
-          sources: b.sources && b.sources.length ? b.sources : [b.source],
-          isDefault: b.id === inv.defaultId
-        })),
-        probed: inv.probed || []
-      };
-    }
-    function invalidateBrowsers(platform) {
-      return detector.invalidate(platform);
-    }
     function _spawnDetachedIgnored(bin, args) {
       try {
         const p = spawnOS.detachedIgnored(bin, args);
@@ -6287,86 +7123,120 @@ var require_browser = __commonJS({
       child.unref();
       return child;
     }
-    function isolatedPlan(platform, url, opts) {
-      const o = opts || {};
-      const pl = platform || process.platform;
-      const picked = o.pick || pickLauncher(pl, o.inventory);
-      const b = picked.browser;
-      const form = formOfBin(pl, b);
-      const baseArgs = b && b.baseArgs || [];
-      if (form.direct && form.engine === "chromium" && o.profileDir) {
-        const args = ["--incognito", "--user-data-dir=" + o.profileDir];
-        if (Array.isArray(o.size) && o.size.length === 2) args.push("--window-size=" + o.size[0] + "," + o.size[1]);
-        if (o.lang) args.push("--lang=" + o.lang);
-        args.push("--no-first-run", "--no-default-browser-check", "--disable-session-crashed-bubble");
-        return { bin: b.bin, args: [...baseArgs, ...args, url], isolated: true, watch: true, envKind: "anti", label: "chromium", pick: picked.how };
-      }
-      if (form.direct && form.engine === "firefox" && o.profileDir) {
-        return {
-          bin: b.bin,
-          args: [...baseArgs, "--no-remote", "--profile", o.profileDir, "-private-window", url],
-          isolated: true,
-          watch: true,
-          envKind: "anti",
-          label: "firefox",
-          pick: picked.how
-        };
-      }
-      if (form.direct) {
-        return { bin: b.bin, args: baseArgs.concat([url]), isolated: false, watch: false, envKind: "sys", label: path2.basename(b.bin), pick: picked.how };
-      }
-      const c = openCommand(pl, url);
-      if (!c) return { bin: null, args: [url], isolated: false, watch: false, envKind: "sys", label: null, pick: picked.how };
-      return { bin: c.cmd, args: c.args, isolated: false, watch: false, envKind: "sys", label: c.cmd, pick: picked.how };
-    }
     function binAvailable(bin) {
       if (!bin) return false;
       if (bin.includes("/") || bin.includes("\\") || /^[A-Za-z]:[\\/]/.test(bin)) return isExecutableFile(bin);
       return resolveExecutable(bin) !== null;
     }
-    function launchIsolated(url, o) {
+    async function openBrowser(url, o) {
       const opts = o || {};
-      if (!isSafeHttpUrl(url)) return Object.assign(outcome({ ok: false, reason: "unsafe-url", url: String(url || "") }), { bin: null, isolated: false });
-      const antiEnv = opts.antiEnv || opts.sysEnv || process.env;
-      const sysEnv = opts.sysEnv || process.env;
-      const onExit = opts.onExit;
+      const pl = opts.platform || process.platform;
+      const intent = opts.intent === "isolated-login" ? "isolated-login" : "plain";
+      if (!isSafeHttpUrl(url)) {
+        return outcome({ ok: false, reason: "unsafe-url", url: String(url || ""), evidence: null });
+      }
+      if (!SUPPORTED_OPEN_PLATFORMS.includes(pl)) {
+        return outcome({ ok: false, reason: "unsupported-platform", url, evidence: { platform: pl } });
+      }
+      const observeMs = opts.observeMs === void 0 ? OPEN_OBSERVE_MS : opts.observeMs;
+      const spawnWith = typeof opts.spawn === "function" ? opts.spawn : intent === "isolated-login" ? _spawnDetached : _spawnDetachedIgnored;
       const avail = typeof opts.binAvailable === "function" ? opts.binAvailable : binAvailable;
-      const spawnWith = typeof opts.spawn === "function" ? opts.spawn : _spawnDetached;
-      const fail = (reason, extra) => Object.assign(outcome(Object.assign({ ok: false, reason, url }, extra)), { bin: null, isolated: false });
+      const observe = typeof opts.observe === "function" ? opts.observe : observeSpawn;
+      const resolveInv = typeof opts.resolveInventory === "function" ? opts.resolveInventory : ((platform, deps) => environment.browsers(Object.assign({ platform }, deps)));
+      const inv = "inventory" in opts ? opts.inventory : resolveInv(pl, opts.resolveDeps || {});
+      const pref = "preference" in opts ? opts.preference : void 0;
+      const login = intent === "isolated-login" ? loginEnv(opts.rand) : null;
+      const picked = opts.pick || environment.pickLauncher(pl, inv, pref);
+      const form = formOfBin(pl, picked.browser);
+      const canIsolate = intent === "isolated-login" && form.direct && (form.engine === "chromium" || form.engine === "firefox");
+      const cold = canIsolate ? await environment.checkEgress(url, opts) : null;
+      const isolate = canIsolate && (!cold || cold.viable !== false);
+      let profile = null;
+      if (isolate) {
+        const alloc = typeof opts.allocProfile === "function" ? opts.allocProfile : (() => allocTempDir("dsh-login-"));
+        try {
+          profile = opts.profileDir || alloc();
+        } catch {
+          profile = null;
+        }
+      }
+      const plan = intent === "isolated-login" ? isolatedPlan(pl, url, { inventory: inv, pick: picked, profileDir: profile, size: login.size, lang: login.lang }) : openPlan(pl, url, { inventory: inv, pick: picked });
+      const diagnostics = launchDiagnostics(inv, plan, picked);
+      const evidence = {
+        bin: plan.bin,
+        engine: plan.engine,
+        via: plan.via,
+        ownsWindow: plan.exitIsEvidence === true,
+        isolated: plan.isolated === true,
+        profile: plan.isolated ? profile : null,
+        watch: plan.watch === true,
+        exitCode: null,
+        exitSignal: null,
+        error: null,
+        diagnostics,
+        egress: cold
+      };
+      const downgraded = cold && cold.viable === false;
+      const downgradeText = downgraded ? "\u672C\u673A\u76F4\u8FDE " + cold.host + " \u4E0D\u901A\u4E14\u6CA1\u6709\u5728\u7528\u7CFB\u7EDF\u4EE3\u7406\uFF0C\u9694\u79BB\u7A97\u53E3\u4F1A\u662F\u7A7A\u767D\u9875\uFF1B\u5DF2\u5728\u73B0\u6709\u6D4F\u89C8\u5668\u7A97\u53E3\u6253\u5F00\u8BE5\u5730\u5740\uFF08\u767B\u5F55\u5B8C\u6210\u540E\u8BF7\u624B\u52A8\u6E05\u7406\u8D26\u53F7\uFF0C\u6216\u5148\u5728\u7CFB\u7EDF\u91CC\u914D\u597D\u4EE3\u7406\uFF09" : null;
+      const deferredRemove = typeof opts.rmTree === "function" ? opts.rmTree : removeTreeDeferred;
+      const fail = (reason, patch) => {
+        if (profile) deferredRemove(profile, 0);
+        return outcome(Object.assign({ ok: false, reason, url, evidence }, patch));
+      };
+      const desktopAvailable = typeof opts.desktopAvailable === "function" ? opts.desktopAvailable : desktop.sessionAvailable;
+      if (pl === "linux" && !desktopAvailable()) {
+        return fail("no-desktop-session");
+      }
+      if (!plan.bin) return fail("no-launcher");
+      if (!avail(plan.bin)) return fail("no-launcher");
+      if (isolate && !profile) {
+        evidence.error = "\u4E34\u65F6 profile \u76EE\u5F55\u5206\u914D\u5931\u8D25";
+        return fail("spawn-failed");
+      }
+      let child;
       try {
-        const resolveInv = typeof opts.resolveInventory === "function" ? opts.resolveInventory : ((platform, deps) => detector.inventory(platform, deps));
-        const inv = "inventory" in opts ? opts.inventory : resolveInv(process.platform, opts.resolveDeps || {});
-        const plan = isolatedPlan(process.platform, url, {
-          inventory: inv,
-          pick: opts.pick,
-          profileDir: opts.profileDir,
-          size: opts.size,
-          lang: opts.lang
+        child = intent === "isolated-login" ? spawnWith(plan.bin, plan.args, plan.envKind === "anti" ? login.antiEnv : login.sysEnv, plan.watch ? opts.onExit : void 0) : spawnWith(plan.bin, plan.args);
+      } catch (e) {
+        evidence.error = e && e.code || String(e);
+        return fail("spawn-failed");
+      }
+      if (!child) return fail("spawn-failed");
+      if (evidence.profile) deferredRemove(evidence.profile, opts.profileMs === void 0 ? 30 * 60 * 1e3 : opts.profileMs);
+      const seen = await observe(child, observeMs, opts.setTimeout);
+      evidence.error = seen.stage === "error" ? String(seen.code) : null;
+      evidence.exitCode = seen.code === void 0 ? null : seen.code;
+      evidence.exitSignal = seen.signal === void 0 ? null : seen.signal;
+      if (seen.stage === "error") return outcome({ ok: false, reason: "spawn-failed", url, evidence });
+      const exitDecides = seen.stage === "exit" && plan.exitIsEvidence === true;
+      if (exitDecides && (seen.code !== 0 || seen.signal)) {
+        return outcome({
+          ok: false,
+          reason: seen.signal ? "killed-by-signal" : "exit-nonzero",
+          url,
+          evidence,
+          error: FAILURE_TEXT[seen.signal ? "killed-by-signal" : "exit-nonzero"] + "\uFF08" + (seen.signal || seen.code) + "\uFF09"
         });
-        const evidence = { bin: plan.bin, engine: plan.label, via: plan.isolated ? "browser" : "dispatcher", diagnostics: launchDiagnostics(inv, plan, plan.pick) };
-        if (!avail(plan.bin)) return fail("no-launcher", { evidence });
-        const env = plan.envKind === "anti" ? antiEnv : sysEnv;
-        const p = spawnWith(plan.bin, plan.args, env, plan.watch ? onExit : void 0);
-        if (!p) return fail("spawn-failed", { evidence });
-        return Object.assign(outcome({ ok: true, confirmed: false, handedOff: true, url, evidence }), { bin: plan.label, isolated: plan.isolated });
-      } catch (e) {
-        return fail("spawn-failed", { error: FAILURE_TEXT["spawn-failed"] + "\uFF08" + (e && e.code || e) + "\uFF09" });
       }
+      return outcome({
+        ok: true,
+        confirmed: exitDecides,
+        handedOff: !exitDecides,
+        url,
+        evidence,
+        message: downgradeText || void 0
+      });
     }
     module2.exports = {
       openBrowser,
-      launchIsolated,
       openCommand,
       openPlan,
       isolatedPlan,
-      pickLauncher,
       ownsItsWindow,
       observeSpawn,
       isSafeHttpUrl,
       binAvailable,
-      listBrowsers,
-      invalidateBrowsers,
       launchDiagnostics,
+      loginEnv,
       // 探测层的解析原语经此转出（唯一实现处在 ./browser-inventory.js）：门禁与消费方按同一出口取用，
       //   不在别处再写第二份平台解析。
       engineOf,
@@ -6723,6 +7593,7 @@ var require_os = __commonJS({
     var execPath = require_exec_path();
     var desktop = require_desktop();
     var CAPABILITY_PROFILES = require_capability_profile();
+    var environment = require_environment();
     var PLATFORM = process.platform;
     var ARCH = process.arch;
     var isLinux = PLATFORM === "linux";
@@ -6777,6 +7648,7 @@ var require_os = __commonJS({
       }
       return p;
     }
+    environment.bind({ capabilities });
     module2.exports = {
       PLATFORM,
       ARCH,
@@ -6800,6 +7672,8 @@ var require_os = __commonJS({
       // 导出模块对象会抛 platform.notify is not a function，把升级终态误判成失败。
       notify: require_notify().notify,
       browser: require_browser(),
+      environment,
+      // 环境表单（外部打开链路的事实底座 + 选路依据）
       desktop,
       // 图形会话可用性（Linux 需实测 socket）
       autostart: require_autostart()
@@ -6818,6 +7692,7 @@ var require_bootstrap = __commonJS({
     var { createShellWatchdog } = require_watchdog();
     var pidlook = require_pidlookup();
     var platform = require_os();
+    var ENV_FORM_STARTUP_DELAY_MS = 3e3;
     function _bootstrap(host2) {
       try {
         host2.events.append("guard_started", {
@@ -6833,6 +7708,15 @@ var require_bootstrap = __commonJS({
       } catch {
       }
       host2.logger.info("guard started v" + host2.guardVersion + " pid=" + process.pid);
+      host2._startupFacts = {
+        bootAt: Date.now(),
+        envDelayMs: ENV_FORM_STARTUP_DELAY_MS,
+        routerAutostart: host2.config.routerAutostart === true,
+        routerMode: null,
+        updateCheck: null,
+        shellWatchdog: null,
+        lastRefresh: null
+      };
       host2.tick();
       host2._timer = host2.managedObjects ? null : setInterval(() => host2.tick(), host2.config.probeIntervalMs);
       host2._lastHeartbeatAt = Date.now();
@@ -6888,6 +7772,7 @@ var require_bootstrap = __commonJS({
         }
         if (host2._routerDaemonActive()) host2._writeRouterDaemonLock();
         const rt = host2._ensureRouterRuntime(true);
+        host2._startupFacts.routerMode = rt.mode;
         if (rt.mode === "daemon") {
           host2._disableRouterPersist();
           if (rt.spawned) {
@@ -6928,13 +7813,20 @@ var require_bootstrap = __commonJS({
           rlc._monitoring = false;
         }
       }
+      const checkDelayMs = host2.config.initialCheckDelayMs || 2e4;
+      const checkIntervalMs = host2.config.updateCheckIntervalMs || 36e5;
+      host2._startupFacts.updateCheck = {
+        enabled: host2.config.updateCheckEnabled !== false,
+        initialDelayMs: checkDelayMs,
+        intervalMs: checkIntervalMs
+      };
       if (host2.config.updateCheckEnabled !== false) {
         host2._initialCheckTimer = setTimeout(() => {
           host2.nativeManager.checkUpdate();
-        }, host2.config.initialCheckDelayMs || 2e4);
+        }, checkDelayMs);
         host2._upgradeTimer = setInterval(() => {
           host2.nativeManager.checkUpdate();
-        }, host2.config.updateCheckIntervalMs || 36e5);
+        }, checkIntervalMs);
       }
       try {
         host2._startShellWatchdog();
@@ -6943,6 +7835,50 @@ var require_bootstrap = __commonJS({
           host2.logger.warn("[shell-watchdog] \u542F\u52A8\u5F02\u5E38\uFF08\u4E0D\u5F71\u54CD\u5B88\u536B\u4E3B\u5FAA\u73AF\uFF09: " + (e && e.message || e));
         }
       }
+      host2._startupFacts.shellWatchdog = !!host2.shellWatchdog;
+      const envTimer = setTimeout(() => {
+        try {
+          host2._refreshEnvironmentForm();
+        } catch (e) {
+          host2.logger.warn && host2.logger.warn("[environment] \u542F\u52A8\u5237\u65B0\u5F02\u5E38\uFF08\u4E0D\u5F71\u54CD\u5B88\u536B\u4E3B\u5FAA\u73AF\uFF09: " + (e && e.message || e));
+        }
+      }, ENV_FORM_STARTUP_DELAY_MS);
+      if (envTimer && envTimer.unref) envTimer.unref();
+    }
+    function _refreshEnvironmentForm(host2) {
+      const startedAt = Date.now();
+      return platform.environment.refresh({ persist: true }).then((f) => {
+        const secs = f && f.sections || {};
+        const pending = Object.keys(secs).filter((id) => secs[id] && secs[id].state === "pending");
+        const failed = Object.keys(secs).filter((id) => secs[id] && secs[id].state === "error");
+        const snap = f && f.snapshot ? f.snapshot : {};
+        if (host2._startupFacts) {
+          const states = {};
+          for (const id of Object.keys(secs)) states[id] = secs[id] ? secs[id].state : "missing";
+          host2._startupFacts.lastRefresh = {
+            at: f && f.at || null,
+            tookMs: Date.now() - startedAt,
+            dims: states,
+            browsers: f && f.browsers && f.browsers.length || 0,
+            pick: f && f.pick && f.pick.how || null,
+            snapshotWritten: snap.written === true
+          };
+        }
+        if (snap.written === false && snap.error) {
+          host2.logger.warn && host2.logger.warn("[environment] \u5FEB\u7167\u672A\u843D\u76D8: " + snap.error);
+        }
+        if (failed.length) {
+          host2.logger.warn && host2.logger.warn("[environment] \u7EF4\u5EA6\u63A2\u6D4B\u5931\u8D25: " + failed.map((id) => id + "(" + secs[id].error + ")").join("; "));
+        }
+        if (pending.length) {
+          host2.logger.warn && host2.logger.warn("[environment] \u7EF4\u5EA6\u65E0\u63A2\u9488\uFF0C\u672C\u673A\u8BE5\u9879\u4E0D\u53EF\u5224: " + pending.join(","));
+        }
+        host2.logger.info && host2.logger.info("[environment] \u5DF2\u5237\u65B0\uFF1A" + Object.keys(secs).length + " \u4E2A\u7EF4\u5EA6\uFF0C\u6D4F\u89C8\u5668\u5019\u9009 " + (f && f.browsers && f.browsers.length || 0) + " \u4E2A\uFF0C\u5206\u53D1\u4F9D\u636E " + (f && f.pick && f.pick.how || "?"));
+        return f;
+      }).catch((e) => {
+        host2.logger.warn && host2.logger.warn("[environment] \u5237\u65B0\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u5B88\u536B\u4E3B\u5FAA\u73AF\uFF09: " + (e && e.message || e));
+        return null;
+      });
     }
     function _startShellWatchdog(host2) {
       if (host2.config.shellWatchdog === false) {
@@ -7012,7 +7948,7 @@ var require_bootstrap = __commonJS({
         }
       }
     }
-    module2.exports = { _bootstrap, _startShellWatchdog, _registerFixedPorts, _bindNativeDshCommand };
+    module2.exports = { _bootstrap, _startShellWatchdog, _registerFixedPorts, _bindNativeDshCommand, _refreshEnvironmentForm };
   }
 });
 
@@ -7542,7 +8478,7 @@ var require_release = __commonJS({
 });
 
 // src/platform/contract/registry.js
-var require_registry = __commonJS({
+var require_registry2 = __commonJS({
   "src/platform/contract/registry.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
@@ -7658,7 +8594,7 @@ var require_registry_config = __commonJS({
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var registryContract = require_registry();
+    var registryContract = require_registry2();
     var { writeAtomic } = require_fs();
     var policies = require_policies();
     var CONTRACT_TTL_MS = 60 * 1e3;
@@ -7816,7 +8752,7 @@ var require_matrix = __commonJS({
 });
 
 // src/platform/distribution/registry.js
-var require_registry2 = __commonJS({
+var require_registry3 = __commonJS({
   "src/platform/distribution/registry.js"(exports2, module2) {
     "use strict";
     var matrix = require_matrix();
@@ -8037,7 +8973,7 @@ var require_version_check = __commonJS({
     var { VERSION_RE } = require_version2();
     var input = require_input();
     var policies = require_policies();
-    var registry = require_registry2();
+    var registry = require_registry3();
     var ref = require_registry_ref();
     var release = require_release();
     var PKG_NAME_RE = input.PKG_NAME_RE;
@@ -8404,7 +9340,7 @@ var require_distribution = __commonJS({
     var policies = require_policies();
     var release = require_release();
     var registryConfig = require_registry_config();
-    var registry = require_registry2();
+    var registry = require_registry3();
     var versionCheck = require_version_check();
     var install = require_install();
     var { semverCompare, VERSION_RE } = require_version2();
@@ -12918,6 +13854,60 @@ var require_access = __commonJS({
   }
 });
 
+// src/app/settings/browser.js
+var require_browser2 = __commonJS({
+  "src/app/settings/browser.js"(exports2, module2) {
+    "use strict";
+    var platform = require_os();
+    var { verifyPersisted } = require_access();
+    module2.exports = {
+      methods: {
+        /** 当前偏好 + 候选清单 + 这一拍的分发依据（面板据此渲染选择器并说明「现在实际会用谁」）。 */
+        externalBrowserStatus() {
+          try {
+            const form = platform.environment.form();
+            const v = platform.environment.checkPreference(platform.environment.preferenceId(), form);
+            return {
+              ok: true,
+              configured: !!form.preference && form.preference.configured === true,
+              value: form.preference && form.preference.id || null,
+              // stale=true：偏好所指已不在候选清单（被卸载/路径失效），本次分发已回落，需用户重选。
+              stale: !!(form.pick && form.pick.stale),
+              browser: v.browser,
+              candidates: v.candidates,
+              pick: form.pick || null,
+              platform: form.platform
+            };
+          } catch (e) {
+            return { ok: false, error: e.message };
+          }
+        },
+        /** 设置/清除浏览器偏好（空串=清除，回到「按系统默认或候选次序分发」）。 */
+        setExternalBrowser(id) {
+          try {
+            const form = platform.environment.form();
+            const v = platform.environment.checkPreference(id, form);
+            if (!v.ok) return { ok: false, error: v.error };
+            const cfg = this.config || {};
+            cfg.externalBrowser = v.id;
+            const patch = { externalBrowser: v.id };
+            if (this.configPath) {
+              this.state.persistConfigPatch(patch);
+              const persistError = verifyPersisted(this.configPath, patch);
+              if (persistError) return { ok: false, error: persistError };
+            }
+            platform.environment.invalidate();
+            if (this.events) this.events.append("external_browser_changed", { id: v.id, name: v.browser ? v.browser.name : null });
+            return { ok: true, configured: !!v.id, value: v.id, browser: v.browser };
+          } catch (e) {
+            return { ok: false, error: e.message };
+          }
+        }
+      }
+    };
+  }
+});
+
 // src/platform/os/netinfo.js
 var require_netinfo = __commonJS({
   "src/platform/os/netinfo.js"(exports2, module2) {
@@ -13135,6 +14125,7 @@ var require_facets = __commonJS({
       { name: "settings/node-lts", mod: require_node_lts() },
       { name: "settings/versions", mod: require_versions() },
       { name: "settings/access", mod: require_access() },
+      { name: "settings/browser", mod: require_browser2() },
       { name: "settings/lan-panel", mod: require_lan_panel() }
     ];
     function installMethods(host2, methods) {
@@ -14016,6 +15007,77 @@ var require_token = __commonJS({
   }
 });
 
+// src/app/native/npm.js
+var require_npm = __commonJS({
+  "src/app/native/npm.js"(exports2, module2) {
+    "use strict";
+    var ex2 = require_exec();
+    var runtimeContract = require_runtime();
+    function npmLaunch(host2) {
+      const h = host2 || {};
+      if (h._npmBin) {
+        return { program: h._npmBin, args: Array.isArray(h._npmBinArgs) ? h._npmBinArgs.slice() : [] };
+      }
+      const l = runtimeContract.npmLauncher();
+      return { program: l.program, args: l.args };
+    }
+    async function resolveNpmRoot(host2, opts) {
+      if (host2.npmRoot) return host2.npmRoot;
+      const l = npmLaunch(host2);
+      const r = await ex2.runOutAsync(l.program, l.args.concat(["root", "-g"]), opts || void 0);
+      return r ? r.trim() : null;
+    }
+    async function checkEnvironment(host2) {
+      const errors = [];
+      const l = npmLaunch(host2);
+      const [nv, npmv, npmRoot] = await Promise.all([
+        ex2.runOutAsync("node", ["--version"]),
+        ex2.runOutAsync(l.program, l.args.concat(["--version"])),
+        resolveNpmRoot(host2)
+      ]);
+      if (!nv || !nv.trim()) errors.push("node \u672A\u5B89\u88C5\u6216\u4E0D\u53EF\u6267\u884C");
+      if (!npmv || !npmv.trim()) errors.push("npm \u672A\u5B89\u88C5\u6216\u4E0D\u53EF\u6267\u884C");
+      return { ok: errors.length === 0, errors, npmRoot };
+    }
+    async function latestVersion(host2) {
+      if (!host2.dist || !host2.config.packageName) throw new Error("\u5206\u53D1\u670D\u52A1\u672A\u521D\u59CB\u5316\uFF0C\u65E0\u6CD5\u67E5\u8BE2\u6700\u65B0\u7248\u672C");
+      const channel = host2.config.releaseChannel || "npm";
+      return host2.dist.fetchVersionInfo(host2.config.packageName, channel);
+    }
+    async function selectRegistry(host2) {
+      if (!host2.dist) return null;
+      try {
+        return await host2.dist.registryOrigin(true);
+      } catch {
+        return null;
+      }
+    }
+    function runNpm(host2, opts) {
+      const a = opts && opts.action || "install";
+      const verb = a === "uninstall" ? "\u5378\u8F7D" : "\u5B89\u88C5";
+      if (!host2.dist) return Promise.resolve({ ok: false, error: "dist \u5206\u53D1\u670D\u52A1\u4E0D\u53EF\u7528\uFF0C\u65E0\u6CD5" + verb, output: [] });
+      const tpl = a === "install" ? host2.config.installCommandTemplate : null;
+      return host2.dist.runNpmInstall({
+        action: a,
+        pkg: host2.config.packageName || "@deepseek-ai/dsh",
+        version: opts && opts.version,
+        // 前缀单源：装与卸必须落在同一个全局前缀，否则「卸载成功」而包还在原地。
+        prefix: host2.npmRoot || null,
+        registry: opts && opts.registry,
+        // 只在显式注入过 npm 形态时接管启动形态；生产留空，由执行器按运行期契约解析一次。
+        launcher: host2._npmBin ? npmLaunch(host2) : null,
+        commandTemplate: Array.isArray(tpl) && tpl.length ? tpl : null,
+        timeoutMs: a === "uninstall" ? host2.config.uninstallTimeoutMs : host2.config.upgradeTimeoutMs,
+        onLine: (l) => {
+          host2._appendUpgradeLog(l);
+          if (host2.installing) host2._appendInstallLog(l);
+        }
+      });
+    }
+    module2.exports = { npmLaunch, resolveNpmRoot, checkEnvironment, latestVersion, selectRegistry, runNpm };
+  }
+});
+
 // src/domains/shell/journal.js
 var require_journal = __commonJS({
   "src/domains/shell/journal.js"(exports2, module2) {
@@ -14668,6 +15730,9 @@ var require_core5 = __commonJS({
     var { extension: domainConfigExtension2 } = require_domain_config();
     var logcore = require_logcore();
     var { DshTokenService } = require_token();
+    var { EnvCatalog } = require_env_catalog();
+    var npm = require_npm();
+    var FORM_NPM_ROOT_TIMEOUT_MS = 4e3;
     var { DistributionManager } = require_distribution();
     var shellDomain = require_shell();
     var { TaskRegistry } = require_tasks();
@@ -14677,6 +15742,69 @@ var require_core5 = __commonJS({
     function composeCore(host2, rawConfig, configPath) {
       host2.config = normalize(rawConfig, domainConfigExtension2());
       host2.configPath = typeof configPath === "string" ? configPath : null;
+      platform.environment.bind({ preference: () => host2.config && host2.config.externalBrowser || null });
+      platform.environment.registerSection("runtime", {
+        label: "\u8FD0\u884C\u65F6\uFF08Node/npm/git/\u955C\u50CF\u6E90/\u5168\u5C40\u524D\u7F00\uFF09",
+        probe: async () => {
+          const cat = await new EnvCatalog(host2.config).probeAsync();
+          const m = host2.nativeManager;
+          const [reg, prefix] = await Promise.all([
+            m && m.dist && typeof m.dist.registryInfo === "function" ? Promise.resolve(m.dist.registryInfo()).catch(() => null) : Promise.resolve(null),
+            // 前缀实测就是安装/卸载用的那同一个解析口，只把超时收到表单预算内（默认 15s 会吃掉面板刷新）。
+            m ? npm.resolveNpmRoot(m, { timeoutMs: FORM_NPM_ROOT_TIMEOUT_MS }).catch(() => null) : Promise.resolve(null)
+          ]);
+          return {
+            node: cat.node,
+            npm: cat.npm,
+            git: cat.git,
+            registry: reg ? {
+              origin: reg.origin || null,
+              mode: reg.mode || null,
+              source: reg.source || null,
+              manualOrigin: reg.manualOrigin || null,
+              candidates: (reg.registries || []).map((r) => ({
+                base: r.base,
+                reachable: r.reachable === void 0 ? null : r.reachable,
+                latencyMs: r.latencyMs === void 0 ? null : r.latencyMs,
+                error: r.error || null
+              }))
+            } : null,
+            // 全局前缀只来自 `npm root -g` 的实测，拿不到就是 null：装/卸落在哪个前缀是排障第一问，
+            //   猜一个只会指错地方（壳侧的同名读数在 E4 上报接通后进这一维）。
+            prefix: prefix || null
+          };
+        }
+      });
+      platform.environment.registerSection("dsh", {
+        label: "DSH \u672C\u4F53\u4E0E\u5185\u6838\u66F4\u65B0",
+        probe: async () => {
+          const cat = new EnvCatalog(host2.config);
+          const d = typeof host2.dshenvStatus === "function" ? host2.dshenvStatus() : null;
+          if (!d) return null;
+          return {
+            dsh: cat.dshEntry(d.binOk, d.installed, d.bin),
+            selfUpdate: cat.selfUpdateEntry(),
+            managed: d.managed === true,
+            phase: d.phase || null
+          };
+        }
+      });
+      platform.environment.registerSection("startup", {
+        label: "\u542F\u52A8\u65E2\u6210\u4E8B\u5B9E\uFF08\u5B88\u536B\u8FD9\u4E00\u62CD\u8DD1\u8FC7\u4EC0\u4E48\uFF09",
+        probe: () => {
+          const s = host2._startupFacts;
+          if (!s) return null;
+          return {
+            bootAt: s.bootAt,
+            envDelayMs: s.envDelayMs,
+            routerAutostart: s.routerAutostart,
+            routerMode: s.routerMode,
+            updateCheck: s.updateCheck,
+            shellWatchdog: s.shellWatchdog,
+            lastRefresh: s.lastRefresh
+          };
+        }
+      });
       host2._fileProtectStatus = null;
       try {
         const fp = platform.fileProtect;
@@ -18211,58 +19339,13 @@ var require_forward_core = __commonJS({
   }
 });
 
-// src/domains/router/ops/browser.js
-var require_browser2 = __commonJS({
-  "src/domains/router/ops/browser.js"(exports2, module2) {
-    "use strict";
-    var platform = require_os();
-    var desktop = require_desktop();
-    var fs2 = require("node:fs");
-    var os2 = require("node:os");
-    var path2 = require("node:path");
-    var crypto = require("node:crypto");
-    function graphicalEnv() {
-      return desktop.sessionEnv();
-    }
-    function openInBrowser(url, onExit) {
-      try {
-        const tmpProfile = path2.join(os2.tmpdir(), "dsh-oauth-" + crypto.randomBytes(8).toString("hex"));
-        const sysEnv = Object.assign({}, process.env, graphicalEnv());
-        const TZ_POOL = ["Asia/Shanghai", "Asia/Seoul", "Asia/Tokyo", "Asia/Singapore", "Europe/Berlin", "Europe/London", "Europe/Paris", "America/New_York", "America/Los_Angeles", "Australia/Sydney"];
-        const LANG_POOL = ["zh-CN", "en-US", "en-GB", "ja-JP", "ko-KR", "de-DE", "fr-FR", "zh-TW"];
-        const SIZE_POOL = [[1280, 800], [1366, 768], [1440, 900], [1536, 864], [1600, 900], [1680, 1050], [1920, 1080], [1024, 768], [1152, 864], [1280, 720]];
-        const pick = (arr) => arr[Math.floor(Math.random() * arr.length)];
-        const size = pick(SIZE_POOL);
-        const lang = pick(LANG_POOL);
-        const tz = pick(TZ_POOL);
-        const antiEnv = Object.assign({}, sysEnv, { TZ: tz, LANG: lang });
-        const r = platform.browser.launchIsolated(url, { profileDir: tmpProfile, size, lang, antiEnv, sysEnv, onExit });
-        if (!r || !r.ok) return { profile: null, result: r || { ok: false, reason: "spawn-failed" } };
-        if (r.isolated) {
-          const t30 = setTimeout(() => {
-            try {
-              fs2.rmSync(tmpProfile, { recursive: true, force: true });
-            } catch {
-            }
-          }, 30 * 60 * 1e3);
-          if (t30.unref) t30.unref();
-        }
-        return { profile: tmpProfile, result: r };
-      } catch (e) {
-        return { profile: null, result: { ok: false, reason: "spawn-failed", error: "\u6D4F\u89C8\u5668\u542F\u52A8\u5931\u8D25\uFF1A" + (e && e.message || e) } };
-      }
-    }
-    module2.exports = { graphicalEnv, openInBrowser };
-  }
-});
-
 // src/domains/router/ops/oauth.js
 var require_oauth = __commonJS({
   "src/domains/router/ops/oauth.js"(exports2, module2) {
     "use strict";
-    var fs2 = require("node:fs");
     var crypto = require("node:crypto");
     var { createServer } = require("node:http");
+    var { removeTreeDeferred } = require_fs();
     function createOAuthOps(deps) {
       const d = deps || {};
       const ports = d.ports;
@@ -18427,20 +19510,21 @@ var require_oauth = __commonJS({
         promise.catch(() => {
         });
         st._ccLoginPromise = promise;
-        const opened = openInBrowser(authUrl, () => {
+        const opened = await openInBrowser(authUrl, () => {
           if (st._ccLoginRound !== roundId) return;
           if (st._ccLoginReject) {
-            const r = st._ccLoginReject;
+            const r2 = st._ccLoginReject;
             st._ccLoginReject = null;
             st._ccLoginResolve = null;
             try {
-              r(new Error("\u6D4F\u89C8\u5668\u5DF2\u5173\u95ED\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88"));
+              r2(new Error("\u6D4F\u89C8\u5668\u5DF2\u5173\u95ED\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88"));
             } catch {
             }
           }
         });
-        const evidence = opened.result || {};
-        if (!opened.profile) {
+        const r = opened || { ok: false, reason: "spawn-failed" };
+        const ev = r.evidence || {};
+        if (!r.ok) {
           st._ccLoginPromise = null;
           st._ccLoginResolve = null;
           st._ccLoginReject = null;
@@ -18460,13 +19544,13 @@ var require_oauth = __commonJS({
             opened: false,
             confirmed: false,
             handedOff: false,
-            reason: evidence.reason || "no-launcher",
-            evidence: evidence.evidence || null,
-            error: (evidence.error || "\u65E0\u6CD5\u8C03\u8D77\u7CFB\u7EDF\u6D4F\u89C8\u5668") + "\uFF0C\u8BF7\u624B\u52A8\u6253\u5F00\u4E0B\u65B9\u5730\u5740\u5B8C\u6210\u6388\u6743"
+            reason: r.reason || "no-launcher",
+            evidence: r.evidence || null,
+            error: (r.error || "\u65E0\u6CD5\u8C03\u8D77\u7CFB\u7EDF\u6D4F\u89C8\u5668") + "\uFF0C\u8BF7\u624B\u52A8\u6253\u5F00\u4E0B\u65B9\u5730\u5740\u5B8C\u6210\u6388\u6743"
           };
         }
-        st._ccLogin = { state, port, server, tmpProfile: opened.profile };
-        return Object.assign({}, evidence, {
+        st._ccLogin = { state, port, server, tmpProfile: ev.profile || null };
+        return Object.assign({}, r, {
           ok: true,
           authUrl,
           url: authUrl,
@@ -18474,8 +19558,13 @@ var require_oauth = __commonJS({
           port,
           waitMs: 18e4,
           opened: true,
-          // 非隔离引擎（Safari/snap 包装器）由平台层降级：账号隔离不成立，换账号只能靠超时重发或手动窗口。
-          isolated: evidence.isolated === true
+          // 非隔离引擎（Safari/打包器包装）由平台层降级：账号隔离不成立，换账号只能靠超时重发或手动窗口。
+          isolated: ev.isolated === true,
+          // 为什么隔离成立/不成立必须一起交出：面板上一句「未隔离」既没说原因也没法处置。
+          //   basis 来自环境表单的出网条件维度（cold-profile-blocked 即冷档案注定空白），
+          //   与「引擎不支持隔离」是两种不同原因，分开才谈得上分开修（配代理 vs 换浏览器）。
+          isolatedBasis: ev.egress ? ev.egress.basis : ev.isolated === true ? "isolated" : "engine-not-isolatable",
+          isolatedDetail: ev.egress ? ev.egress.detail || null : null
         });
       }
       async function commandcodeLoginWait(timeoutMs) {
@@ -18521,15 +19610,7 @@ var require_oauth = __commonJS({
           st._ccLoginResolve = st._ccLoginReject = null;
           return { ok: false, error: e.message };
         } finally {
-          if (tmpProfile) {
-            const t60 = setTimeout(() => {
-              try {
-                fs2.rmSync(tmpProfile, { recursive: true, force: true });
-              } catch {
-              }
-            }, 60 * 1e3);
-            if (t60.unref) t60.unref();
-          }
+          if (tmpProfile) removeTreeDeferred(tmpProfile, 60 * 1e3);
         }
       }
       return { commandcodeLoginStart, commandcodeLoginWait };
@@ -18983,8 +20064,8 @@ var require_router_ops = __commonJS({
     "use strict";
     require_port_segments();
     var ports = require_ports().shared;
+    var platform = require_os();
     var { maskKey } = require_base();
-    var { openInBrowser } = require_browser2();
     var { createOAuthOps } = require_oauth();
     var { createAppsRegistryOps } = require_apps_registry();
     var { createQuotaSyncOps } = require_quotasync();
@@ -18992,6 +20073,7 @@ var require_router_ops = __commonJS({
     function createAuxCore(deps) {
       const d = deps || {};
       const getProviders = d.getProviders || (() => []);
+      const openInBrowser = (url, onExit) => platform.browser.openBrowser(url, { intent: "isolated-login", onExit });
       const oauth = createOAuthOps({ ports, openInBrowser });
       const apps = createAppsRegistryOps({
         getProviders,
@@ -23843,7 +24925,7 @@ var require_heartbeat = __commonJS({
 });
 
 // src/app/control/registry.js
-var require_registry3 = __commonJS({
+var require_registry4 = __commonJS({
   "src/app/control/registry.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
@@ -24414,77 +25496,6 @@ var require_manifest = __commonJS({
   }
 });
 
-// src/app/native/npm.js
-var require_npm = __commonJS({
-  "src/app/native/npm.js"(exports2, module2) {
-    "use strict";
-    var ex2 = require_exec();
-    var runtimeContract = require_runtime();
-    function npmLaunch(host2) {
-      const h = host2 || {};
-      if (h._npmBin) {
-        return { program: h._npmBin, args: Array.isArray(h._npmBinArgs) ? h._npmBinArgs.slice() : [] };
-      }
-      const l = runtimeContract.npmLauncher();
-      return { program: l.program, args: l.args };
-    }
-    async function resolveNpmRoot(host2) {
-      if (host2.npmRoot) return host2.npmRoot;
-      const l = npmLaunch(host2);
-      const r = await ex2.runOutAsync(l.program, l.args.concat(["root", "-g"]));
-      return r ? r.trim() : null;
-    }
-    async function checkEnvironment(host2) {
-      const errors = [];
-      const l = npmLaunch(host2);
-      const [nv, npmv, npmRoot] = await Promise.all([
-        ex2.runOutAsync("node", ["--version"]),
-        ex2.runOutAsync(l.program, l.args.concat(["--version"])),
-        resolveNpmRoot(host2)
-      ]);
-      if (!nv || !nv.trim()) errors.push("node \u672A\u5B89\u88C5\u6216\u4E0D\u53EF\u6267\u884C");
-      if (!npmv || !npmv.trim()) errors.push("npm \u672A\u5B89\u88C5\u6216\u4E0D\u53EF\u6267\u884C");
-      return { ok: errors.length === 0, errors, npmRoot };
-    }
-    async function latestVersion(host2) {
-      if (!host2.dist || !host2.config.packageName) throw new Error("\u5206\u53D1\u670D\u52A1\u672A\u521D\u59CB\u5316\uFF0C\u65E0\u6CD5\u67E5\u8BE2\u6700\u65B0\u7248\u672C");
-      const channel = host2.config.releaseChannel || "npm";
-      return host2.dist.fetchVersionInfo(host2.config.packageName, channel);
-    }
-    async function selectRegistry(host2) {
-      if (!host2.dist) return null;
-      try {
-        return await host2.dist.registryOrigin(true);
-      } catch {
-        return null;
-      }
-    }
-    function runNpm(host2, opts) {
-      const a = opts && opts.action || "install";
-      const verb = a === "uninstall" ? "\u5378\u8F7D" : "\u5B89\u88C5";
-      if (!host2.dist) return Promise.resolve({ ok: false, error: "dist \u5206\u53D1\u670D\u52A1\u4E0D\u53EF\u7528\uFF0C\u65E0\u6CD5" + verb, output: [] });
-      const tpl = a === "install" ? host2.config.installCommandTemplate : null;
-      return host2.dist.runNpmInstall({
-        action: a,
-        pkg: host2.config.packageName || "@deepseek-ai/dsh",
-        version: opts && opts.version,
-        // 前缀单源：装与卸必须落在同一个全局前缀，否则「卸载成功」而包还在原地。
-        prefix: host2.npmRoot || null,
-        registry: opts && opts.registry,
-        // 只在显式注入过 npm 形态时接管启动形态；生产留空，由执行器按运行期契约解析一次。
-        launcher: host2._npmBin ? npmLaunch(host2) : null,
-        commandTemplate: Array.isArray(tpl) && tpl.length ? tpl : null,
-        timeoutMs: a === "uninstall" ? host2.config.uninstallTimeoutMs : host2.config.upgradeTimeoutMs,
-        onLine: (l) => {
-          host2._appendUpgradeLog(l);
-          if (host2.installing) host2._appendInstallLog(l);
-        }
-      });
-    }
-    module2.exports = { npmLaunch, resolveNpmRoot, checkEnvironment, latestVersion, selectRegistry, runNpm };
-  }
-});
-
 // src/app/native/ops.js
 var require_ops4 = __commonJS({
   "src/app/native/ops.js"(exports2, module2) {
@@ -25129,7 +26140,7 @@ var require_installer = __commonJS({
 var require_entry = __commonJS({
   "src/app/control/entry.js"(exports2, module2) {
     "use strict";
-    var { PHASES } = require_registry3();
+    var { PHASES } = require_registry4();
     var ManagedLifecycle = class {
       constructor(opts) {
         this.id = opts.id || "lc-" + Math.random().toString(36).slice(2, 8);
@@ -25383,7 +26394,7 @@ var require_domains = __commonJS({
     var { InstanceManager } = require_instance();
     var { PluginMarket } = require_market();
     var { PluginManager } = require_plugin();
-    var { ManagedRegistry } = require_registry3();
+    var { ManagedRegistry } = require_registry4();
     var { guardVersion } = require_version();
     var { Lifecycle } = require_lifecycle2();
     var { Health } = require_health();
@@ -25510,7 +26521,7 @@ var require_adapters = __commonJS({
   "src/app/control/adapters.js"(exports2, module2) {
     "use strict";
     var { ManagedLifecycle } = require_entry();
-    var { kindMeta } = require_registry3();
+    var { kindMeta } = require_registry4();
     function capsOf(objectKind) {
       const m = kindMeta(objectKind);
       if (!m) return { startable: true, guardable: true };
@@ -26009,7 +27020,7 @@ var require_guard = __commonJS({
     var fs2 = require("node:fs");
     var path2 = require("node:path");
     function owns(pathname) {
-      return pathname === "/changelog" || pathname.startsWith("/guard/") || pathname === "/autostart" || pathname.startsWith("/settings/") || pathname.startsWith("/self-update/") || pathname === "/env/dsh" || pathname === "/env/status" || pathname === "/env/node-lts" || pathname === "/env/open-url" || pathname === "/env/browsers" || pathname === "/ports" || pathname === "/shutdown";
+      return pathname === "/changelog" || pathname.startsWith("/guard/") || pathname === "/autostart" || pathname.startsWith("/settings/") || pathname.startsWith("/self-update/") || pathname === "/env/dsh" || pathname === "/env/status" || pathname === "/env/node-lts" || pathname === "/env/open-url" || pathname === "/env/environment" || pathname === "/env/environment/last" || pathname === "/ports" || pathname === "/shutdown";
     }
     function fetchDshChangelog(res, sup) {
       const v = sup && sup.nativeManager ? sup.nativeManager.versionInfo() : {};
@@ -26021,7 +27032,7 @@ var require_guard = __commonJS({
       return res.end(md);
     }
     function handle(ctx) {
-      const { sup, req, res, pathname, identity, send, collectBody, originAllowed, browser } = ctx;
+      const { sup, req, res, pathname, identity, send, collectBody, originAllowed, browser, environment } = ctx;
       if (req.method === "GET" && pathname === "/changelog") {
         return fetchDshChangelog(res, sup);
       }
@@ -26127,6 +27138,31 @@ var require_guard = __commonJS({
         });
         return;
       }
+      if (req.method === "GET" && pathname === "/settings/external-browser") {
+        return send(200, sup.externalBrowserStatus());
+      }
+      if (req.method === "POST" && pathname === "/settings/external-browser") {
+        if (!originAllowed(req, sup.config.apiPort)) {
+          req.resume();
+          return send(403, {});
+        }
+        collectBody(req, res, 2048, (body) => {
+          let id = null;
+          let given = false;
+          try {
+            const j = body ? JSON.parse(body) : {};
+            if (typeof j.id === "string") {
+              id = j.id;
+              given = true;
+            }
+          } catch {
+          }
+          if (!given) return send(400, { ok: false, error: '\u9700\u8981 {"id":"<\u5019\u9009 id>"}\uFF08\u7A7A\u4E32\u6E05\u9664\u504F\u597D\uFF09' });
+          const r = sup.setExternalBrowser(id);
+          return send(r.ok ? 200 : 500, r);
+        });
+        return;
+      }
       if (req.method === "POST" && pathname === "/shutdown") {
         if (!originAllowed(req, sup.config.apiPort)) {
           req.resume();
@@ -26185,13 +27221,20 @@ var require_guard = __commonJS({
       if (req.method === "GET" && pathname === "/env/node-lts") {
         return sup.nodeLtsStatus().then((r) => send(200, r)).catch((e) => send(500, { ok: false, error: e.message }));
       }
-      if (req.method === "GET" && pathname === "/env/browsers") {
+      if (req.method === "GET" && pathname === "/env/environment") {
+        if (!originAllowed(req, sup.config.apiPort)) {
+          req.resume();
+          return send(403, { ok: false, error: "cross-origin request rejected" });
+        }
+        const force = /[?&]force=1/.test(String(req.url || ""));
+        return Promise.resolve(force ? environment.refresh({ persist: true, force: true }) : environment.form()).then((r) => send(200, r)).catch((e) => send(500, { ok: false, error: "\u73AF\u5883\u8868\u5355\u88C5\u914D\u5931\u8D25\uFF1A" + (e && e.message || e) }));
+      }
+      if (req.method === "GET" && pathname === "/env/environment/last") {
         if (!originAllowed(req, sup.config.apiPort)) {
           req.resume();
           return send(403, { ok: false, error: "cross-origin request rejected" });
         }
-        const force = /[?&]force=1/.test(req.url || "");
-        return Promise.resolve(browser.listBrowsers({ force })).then((r) => send(200, r)).catch((e) => send(500, { ok: false, error: "\u6D4F\u89C8\u5668\u63A2\u6D4B\u5931\u8D25\uFF1A" + (e && e.message || e) }));
+        return send(200, environment.lastSnapshot());
       }
       if (req.method === "POST" && pathname === "/env/open-url") {
         if (!identity.loopback) {
@@ -27328,6 +28371,7 @@ var require_server = __commonJS({
     var { identify } = require_identity3();
     var { originAllowed, requestHasAccessKey, isShellOrigin } = require_security();
     var browserExit = require_browser();
+    var environmentExit = require_environment();
     function safeFail(res, err, where) {
       try {
         const body = JSON.stringify({ ok: false, error: err && err.message || String(err) });
@@ -27347,6 +28391,7 @@ var require_server = __commonJS({
     }
     function createServer(sup, deps) {
       const browser = deps && deps.browser || browserExit;
+      const environment = deps && deps.environment || environmentExit;
       return http2.createServer((req, res) => {
         const shellOrigin = (() => {
           const o = req.headers.origin;
@@ -27414,7 +28459,7 @@ var require_server = __commonJS({
         } catch (e) {
           return send(400, { error: "bad request encoding" });
         }
-        const ctx = { sup, req, res, pathname: decodedPathname, identity, send, collectBody, originAllowed, tokOf, browser };
+        const ctx = { sup, req, res, pathname: decodedPathname, identity, send, collectBody, originAllowed, tokOf, browser, environment };
         for (const d of API_DOMAINS) {
           if (d.owns(pathname)) {
             try {