@dsh-sup/dsh-core-win-x64 0.1.6-BETA.2 → 0.1.6-BETA.3

package/core.cjs

@@ -107,1503 +107,1503 @@ var require_exec = __commonJS({
   }
 });
 
-// src/platform/service/state-root.js
-var require_state_root = __commonJS({
-  "src/platform/service/state-root.js"(exports2, module2) {
+// src/platform/os/pidlookup/norm.js
+var require_norm = __commonJS({
+  "src/platform/os/pidlookup/norm.js"(exports2, module2) {
     "use strict";
-    var fs2 = require("node:fs");
-    var os2 = require("node:os");
-    var path2 = require("node:path");
-    var SCHEMA = 1;
-    function root() {
-      const override = process.env.DSH_SUPERVISOR_HOME;
-      if (override && String(override).trim()) return path2.resolve(String(override).trim());
-      if (process.platform === "win32") {
-        const local = process.env.LOCALAPPDATA || path2.join(os2.homedir(), "AppData", "Local");
-        return path2.join(local, "dsh-supervisor");
+    function parseProcNetTcpInodes(txt, port) {
+      const inodes = /* @__PURE__ */ new Set();
+      for (const lineRaw of String(txt || "").split("\n")) {
+        const cols = lineRaw.trim().split(/\s+/);
+        if (cols.length < 10) continue;
+        const local = cols[1];
+        const st = cols[3];
+        const inode = cols[9];
+        if (!local || !inode) continue;
+        const p = local.split(":")[1];
+        if (st === "0A" && p && parseInt(p, 16) === port) inodes.add("socket:[" + inode + "]");
       }
-      if (process.platform === "darwin") {
-        return path2.join(os2.homedir(), "Library", "Application Support", "dsh-supervisor");
+      return inodes;
+    }
+    function parseLsofPid(out) {
+      for (const line of String(out || "").split("\n")) {
+        const m = line.trim().split(/\s+/);
+        if (m.length >= 2 && /^\d+$/.test(m[1])) return Number(m[1]);
       }
-      const xdg = process.env.XDG_STATE_HOME;
-      return xdg && String(xdg).trim() ? path2.join(String(xdg).trim(), "dsh-supervisor") : path2.join(os2.homedir(), ".local", "state", "dsh-supervisor");
+      return null;
     }
-    function supervisorDir() {
-      return path2.join(root(), "supervisor");
+    function parseNetstatPid(out, port) {
+      const want = String(port);
+      for (const line of String(out || "").split("\n")) {
+        const parts = line.trim().split(/\s+/);
+        if (parts.length >= 5 && (parts[0] === "TCP" || parts[0] === "TCPv6") && parts[3] === "LISTENING") {
+          const lp = parts[1];
+          const p = lp.slice(lp.lastIndexOf(":") + 1);
+          if (p === want) {
+            const pid = Number(parts[4]);
+            if (Number.isInteger(pid) && pid > 0) return pid;
+          }
+        }
+      }
+      return null;
     }
-    function shellDir() {
-      return path2.join(root(), "shell");
+    function parseSsPid(out) {
+      const m = out && /pid=(\d+)/.exec(String(out));
+      return m ? Number(m[1]) : null;
     }
-    function legacySupervisorDir() {
-      return path2.join(os2.homedir(), ".dsh", "supervisor");
+    function parseWmicCommandLine(out) {
+      if (!out) return null;
+      const m = /CommandLine=([\s\S]*)/.exec(String(out));
+      const v = m ? m[1].trim() : "";
+      return v || null;
     }
-    function legacyShellDir() {
-      return path2.join(os2.homedir(), ".dsh", "shell");
+    function parsePowerShellCommandLine(out) {
+      const v = out ? String(out).trim() : "";
+      return v || null;
     }
-    function migrateLegacy() {
-      const moved = [];
-      for (const [from, to] of [
-        [legacySupervisorDir(), supervisorDir()],
-        [legacyShellDir(), shellDir()]
-      ]) {
-        try {
-          if (!fs2.existsSync(from)) continue;
-          fs2.mkdirSync(to, { recursive: true });
-          for (const name of fs2.readdirSync(from)) {
-            const src = path2.join(from, name);
-            const dst = path2.join(to, name);
-            if (fs2.existsSync(dst)) continue;
-            try {
-              fs2.renameSync(src, dst);
-              moved.push(src + " -> " + dst);
-            } catch {
-            }
-          }
-          try {
-            if (fs2.readdirSync(from).length === 0) fs2.rmdirSync(from);
-          } catch {
-          }
-        } catch {
-        }
-      }
-      return moved;
+    function normCmdline(s) {
+      return String(s || "").replace(/\\/g, "/");
     }
-    module2.exports = { SCHEMA, root, supervisorDir, shellDir, migrateLegacy };
+    module2.exports = {
+      parseProcNetTcpInodes,
+      parseLsofPid,
+      parseNetstatPid,
+      parseSsPid,
+      parseWmicCommandLine,
+      parsePowerShellCommandLine,
+      normCmdline
+    };
   }
 });
 
-// src/platform/service/config.js
-var require_config = __commonJS({
-  "src/platform/service/config.js"(exports2, module2) {
+// src/platform/os/exec-path.js
+var require_exec_path = __commonJS({
+  "src/platform/os/exec-path.js"(exports2, module2) {
     "use strict";
-    var os2 = require("node:os");
+    var fs2 = require("node:fs");
     var path2 = require("node:path");
-    function expandHome(p) {
-      if (typeof p !== "string") return p;
-      if (p === "~") return os2.homedir();
-      if (p.startsWith("~/")) return path2.join(os2.homedir(), p.slice(2));
-      return p;
-    }
-    var SUP = require_state_root().supervisorDir();
-    var NO_EXTENSION = Object.freeze({ defaults: [], aliases: [] });
-    function normalizeExtension(ext) {
-      if (!ext || typeof ext !== "object") return NO_EXTENSION;
-      return {
-        defaults: Array.isArray(ext.defaults) ? ext.defaults : [],
-        aliases: Array.isArray(ext.aliases) ? ext.aliases : []
-      };
-    }
-    var BASE_DEFAULTS = {
-      probeIntervalMs: 5e3,
-      // 健康探测三层：L0 进程存活 + L1 端口监听 + L2 HTTP GET healthUrl。probeTimeoutMs = 单次探测超时；
-      // failThreshold = 连续失败判故障（防抖动）；httpProbeEnabled=false 退化为端口在线即健康。
-      probeTimeoutMs: 3e3,
-      failThreshold: 2,
-      httpProbeEnabled: true,
-      startTimeoutMs: 3e4,
-      stopGraceMs: 1e4,
-      portReleaseWaitMs: 1e4,
-      crashWindowMs: 6e5,
-      crashBurst: 5,
-      backoff: [3e4, 6e4, 12e4, 3e5, 6e5],
-      apiHost: "127.0.0.1",
-      // API 端口：高位不常用段起始（常用端口段易冲突）；守卫启动被占则自动顺延并持久化。
-      apiPort: 36360,
-      // 注意：daemon 控制通道端口属业务域知识，经注入声明提供（同上），原键名与值逐字保留。
-      // 动态端口池（范围是配置项，非编译期常量）：null = 内置默认池，默认避开 OS 动态端口范围
-      // （Linux ip_local_port_range=32768-60999），落在 IANA User 段低位。额外池由域装配期申报（DS-G4）。
-      portPools: null,
-      stateFile: path2.join(SUP, "state.json"),
-      // 日志目录布局：事件在 events/guard.events.log，分级日志在 log/；显式配置的路径尊重用户给定值，不强改。
-      logFile: path2.join(SUP, "events", "guard.events.log"),
-      eventsMaxBytes: 5 * 1024 * 1024,
-      supervisorLogFile: path2.join(SUP, "log", "guard.log"),
-      dshLogFile: path2.join(SUP, "log", "dsh.log"),
-      upgradeLogFile: path2.join(SUP, "log", "upgrade.log"),
-      logLevel: "info",
-      logMaxBytes: 5 * 1024 * 1024,
-      notifyEnabled: true,
-      // 内核更新单写入者 = 桌面壳：corePackageName 仅为内核自身 npm 子包名，守卫只读它查版本状态，
-      // 安装/升级由壳执行。不得再引入 manifest 更新通道（残留键已删，config.json 中未知键加载时忽略）。
-      corePackageName: null,
-      pluginsProfileName: "web",
-      packageName: "@deepseek-ai/dsh",
-      // 灰度名单（RELEASE-CHANNEL-CONTRACT）：本机 canary:true 即灰度机，仅对内核包生效，对第三方包
-      // （packageName）无效；未置真即非灰度。
-      canary: false,
-      // 最小兜底镜像源（不变量 C2）：完整目录归壳管理，经 <产品状态根>/supervisor/registry.json 投放，
-      // 内核由 platform/distribution 读取（契约见 platform/contract/registry.js）；
-      // 此处官方源 + npmmirror 两条兜底，保证契约不可用时仍可安装。
-      registries: [
-        "https://registry.npmjs.org",
-        "https://registry.npmmirror.com"
-      ],
-      updateCheckEnabled: true,
-      updateCheckIntervalMs: 36e5,
-      initialCheckDelayMs: 2e4,
-      upgradeTimeoutMs: 6e5,
-      installCommandTemplate: ["npm", "install", "-g", "{pkg}@{version}"],
-      // apiAccessKey（可选）出回环访问密钥：配置后，0.0.0.0（局域网）与 FRP 公网通道的 API 请求必须携带
-      // Authorization: Bearer <key> 或 ?access_key=<key>，否则 401；回环豁免。
-      // 不配置 = LAN 受 RFC1918 白名单约束，FRP 暴露仍强制 remoteToken。
-      apiAccessKey: null,
-      // 关闭窗口行为（系统级）：'hide' = 隐藏至托盘、服务常驻（默认）；'exit' = 退出管家并停全部服务链。
-      closeAction: "hide"
-    };
-    function buildDefaults2(ext) {
-      const pending = normalizeExtension(ext).defaults.slice();
-      const out = {};
-      for (const key of Object.keys(BASE_DEFAULTS)) {
-        for (let i = pending.length - 1; i >= 0; i--) {
-          const g = pending[i];
-          if (g && g.at === key) {
-            if (g.values && typeof g.values === "object") Object.assign(out, g.values);
-            pending.splice(i, 1);
-          }
-        }
-        out[key] = BASE_DEFAULTS[key];
-      }
-      for (const g of pending) {
-        if (g && g.values && typeof g.values === "object") Object.assign(out, g.values);
+    var os2 = require("node:os");
+    function candidateNames(base, platform) {
+      const win = (platform || process.platform) === "win32";
+      if (!win) return [base];
+      const exts = String(process.env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean);
+      const names = [base + ".exe", base + ".cmd", base + ".bat"];
+      for (const e of exts) {
+        const n = base + e.toLowerCase();
+        if (!names.some((x) => x.toLowerCase() === n)) names.push(n);
       }
-      return out;
+      names.push(base);
+      return [...new Set(names)];
     }
-    var DEFAULTS = buildDefaults2(null);
-    function normalize(raw, ext) {
-      const extension = normalizeExtension(ext);
-      const provided = raw || {};
-      const cfg = Object.assign(buildDefaults2(extension), provided);
-      cfg.stateFile = expandHome(cfg.stateFile);
-      cfg.logFile = expandHome(cfg.logFile);
-      cfg.supervisorLogFile = expandHome(cfg.supervisorLogFile);
-      cfg.dshLogFile = expandHome(cfg.dshLogFile);
-      cfg.upgradeLogFile = expandHome(cfg.upgradeLogFile);
-      let u;
+    function isExecutableFile(p, platform) {
       try {
-        u = new URL(cfg.healthUrl);
+        if (!fs2.statSync(p).isFile()) return false;
+        if ((platform || process.platform) === "win32") return true;
+        fs2.accessSync(p, fs2.constants.X_OK);
+        return true;
       } catch {
-        throw new Error("config.healthUrl \u65E0\u6548: " + JSON.stringify(cfg.healthUrl));
-      }
-      cfg.targetHost = u.hostname;
-      cfg.targetPort = Number(u.port || (u.protocol === "https:" ? 443 : 80));
-      for (const [from, to] of extension.aliases) {
-        if (provided[to] === void 0 && provided[from] !== void 0) cfg[to] = provided[from] === true;
-      }
-      const cmdPort = extractPortFromCommand(cfg.command);
-      if (cmdPort !== null) cfg.targetPort = cmdPort;
-      cfg.probeTimeoutMs = Number.isFinite(Number(cfg.probeTimeoutMs)) && Number(cfg.probeTimeoutMs) > 0 ? Number(cfg.probeTimeoutMs) : 3e3;
-      cfg.failThreshold = Number.isInteger(Number(cfg.failThreshold)) && Number(cfg.failThreshold) >= 1 ? Number(cfg.failThreshold) : 2;
-      cfg.httpProbeEnabled = cfg.httpProbeEnabled !== false;
-      if (!Array.isArray(cfg.command) || cfg.command.length === 0) {
-        throw new Error("config.command \u7F3A\u5931\uFF1A\u9700\u8981\u4E00\u4E2A\u547D\u4EE4\u6570\u7EC4");
+        return false;
       }
-      return cfg;
     }
-    function extractPortFromCommand(command) {
-      if (!Array.isArray(command)) return null;
-      for (let i = 0; i < command.length; i++) {
-        const a = String(command[i]);
-        if ((a === "--port" || a === "-p") && i + 1 < command.length) {
-          const n = Number(command[i + 1]);
-          if (Number.isInteger(n) && n > 0 && n <= 65535) return n;
-        }
-        const m = /^--port=(\d+)$/.exec(a);
-        if (m) {
-          const n = Number(m[1]);
-          if (Number.isInteger(n) && n > 0 && n <= 65535) return n;
+    function firstExecutable(dir, base, platform) {
+      if (!dir) return null;
+      for (const name of candidateNames(base, platform)) {
+        const p = path2.join(dir, name);
+        try {
+          if (isExecutableFile(p, platform)) return p;
+        } catch {
         }
       }
       return null;
     }
-    module2.exports = { DEFAULTS, BASE_DEFAULTS, buildDefaults: buildDefaults2, normalize, extractPortFromCommand };
-  }
-});
-
-// src/app/settings/domain-config.js
-var require_domain_config = __commonJS({
-  "src/app/settings/domain-config.js"(exports2, module2) {
-    "use strict";
-    var defaults = [
-      {
-        at: "portPools",
-        // daemon 控制通道端口：集中定义，杜绝散落硬编码。
-        // 这两个值同时是 app/ctl/client.js 与两个 daemon 的兜底端口，不得单独改动
-        //   （改动即需同步 8 处 43107/43108 兜底常量）。
-        values: {
-          routerCtlPort: 43107,
-          lanCtlPort: 43108
-        }
-      },
-      {
-        at: "corePackageName",
-        // 智能路由启动开关。
-        values: {
-          routerAutostart: false
+    function standardDirs(platform, home, env) {
+      const pl = platform || process.platform;
+      const h = home || os2.homedir();
+      const e = env || process.env;
+      const dirs = [];
+      if (pl === "win32") {
+        if (e.APPDATA) dirs.push(path2.join(e.APPDATA, "npm"));
+        if (e.LOCALAPPDATA) dirs.push(path2.join(e.LOCALAPPDATA, "Programs", "dsh-supervisor"));
+        dirs.push(path2.join(h, ".local", "bin"));
+      } else {
+        dirs.push(path2.join(h, ".local", "bin"));
+        dirs.push(path2.join(h, ".npm-global", "bin"));
+        if (pl === "darwin") {
+          dirs.push("/opt/homebrew/bin");
+          dirs.push("/usr/local/bin");
         }
       }
-    ];
-    var aliases = [
-      ["switcherAutoStart", "routerAutostart"]
-    ];
-    function extension() {
-      return {
-        defaults: defaults.map((g) => ({ at: g.at, values: Object.assign({}, g.values) })),
-        aliases: aliases.map((a) => a.slice())
-      };
+      return dirs;
     }
-    module2.exports = { extension, defaults, aliases };
-  }
-});
-
-// src/platform/service/version.js
-var require_version = __commonJS({
-  "src/platform/service/version.js"(exports2, module2) {
-    "use strict";
-    var fs2 = require("node:fs");
-    var path2 = require("node:path");
-    function guardVersion() {
-      if (true) return String("0.1.6-BETA.2");
-      try {
-        return JSON.parse(fs2.readFileSync(path2.join(__dirname, "..", "..", "package.json"), "utf8")).version || "unknown";
-      } catch {
-        return "unknown";
+    function inPath(base, platform, env) {
+      const e = env || process.env;
+      const raw = e.PATH || e.Path || "";
+      for (const d of raw.split(path2.delimiter)) {
+        if (!d) continue;
+        const hit = firstExecutable(d, base, platform);
+        if (hit) return hit;
       }
+      return null;
     }
-    module2.exports = { guardVersion };
-  }
-});
-
-// src/app/state/main-record.js
-var require_main_record = __commonJS({
-  "src/app/state/main-record.js"(exports2, module2) {
-    "use strict";
-    function createMainRecord(deps) {
-      const g = deps || {};
-      const reg = () => typeof g.getManagedObjects === "function" ? g.getManagedObjects() : null;
-      const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
-      let fallback = null;
-      function entryOf() {
-        const m = reg();
-        if (!m || typeof m.get !== "function") return null;
+    function resolveExecutable(base, opts) {
+      const o = opts || {};
+      const pl = o.platform;
+      const env = o.env;
+      const E = env || process.env;
+      if (o.envVar && E[o.envVar]) {
+        const v = E[o.envVar];
+        if (isExecutableFile(v, pl)) return v;
+      }
+      const inPathHit = inPath(base, pl, env);
+      if (inPathHit) return inPathHit;
+      for (const d of [...o.extraDirs || [], ...standardDirs(pl, void 0, env)]) {
+        const hit = firstExecutable(d, base, pl);
+        if (hit) return hit;
+      }
+      return null;
+    }
+    function npxBin(opts) {
+      const o = opts || {};
+      const pl = o.platform || process.platform;
+      const env = o.env || process.env;
+      if (pl !== "win32") return "npx";
+      const resolved = resolveExecutable("npx", { platform: pl, env, extraDirs: [
+        env.APPDATA ? path2.join(env.APPDATA, "npm") : null
+      ].filter(Boolean) });
+      if (resolved) return resolved;
+      return "npx.cmd";
+    }
+    function npmBin(opts) {
+      const o = opts || {};
+      const pl = o.platform || process.platform;
+      const env = o.env || process.env;
+      if (pl !== "win32") return "npm";
+      const resolved = resolveExecutable("npm", { platform: pl, env, extraDirs: [
+        env.APPDATA ? path2.join(env.APPDATA, "npm") : null
+      ].filter(Boolean) });
+      if (resolved) return resolved;
+      return "npm.cmd";
+    }
+    var DSH_PKG = ["@deepseek-ai", "dsh"];
+    function dshJsIn(prefix) {
+      return path2.join(prefix, "node_modules", ...DSH_PKG, "lib", "bin.js");
+    }
+    function resolveDsh(opts) {
+      const o = opts || {};
+      const pl = o.platform || process.platform;
+      const env = o.env || process.env;
+      const isFile = (p) => {
         try {
-          return m.get("main") || null;
+          return fs2.statSync(p).isFile();
         } catch {
-          return null;
+          return false;
         }
-      }
-      function fallbackEntryOf() {
-        if (!fallback) {
-          fallback = {
-            kind: "dsh",
-            id: "main",
-            name: "\u4E3B\u5B9E\u4F8B",
-            desired: "running",
-            guardian: true,
-            ownership: { ports: [], rootPath: null, unit: null, daemonScript: null, processMode: "spawn", meta: null },
-            phase: "stopped",
-            lastObserved: null,
-            backoffLevel: 0,
-            backoffUntil: null,
-            crashWindowStart: null,
-            crashWindowRestarts: 0,
-            restartCount: 0,
-            startedAt: null,
-            lastTransitionAt: null,
-            createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-            updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-            process: null
-          };
+      };
+      const asJs = (bin, launcher) => ({ runtime: process.execPath, bin, isJs: true, launcher: launcher || null });
+      if (env.DSH_BIN) {
+        try {
+          const r = fs2.realpathSync(env.DSH_BIN);
+          if (isFile(r)) return asJs(r, env.DSH_BIN);
+        } catch {
         }
-        return fallback;
       }
-      function persistCrashField() {
-        const m = reg();
+      const hit = resolveExecutable("dsh", { platform: pl, env });
+      if (hit) {
         try {
-          if (m && typeof m.persistCrashState === "function") m.persistCrashState();
-          else if (m && typeof m._save === "function") m._save();
-        } catch (e) {
-          const l = logger();
-          if (l && l.warn) l.warn("persistCrashField: " + (e && e.message || e));
+          const real = fs2.realpathSync(hit);
+          if (isFile(real) && /\.(js|cjs|mjs)$/i.test(real)) return asJs(real, hit);
+        } catch {
         }
+        const js = dshJsIn(path2.dirname(hit));
+        if (isFile(js)) return asJs(js, hit);
+        if (isFile(hit) && !/\.(cmd|bat|exe)$/i.test(hit)) return asJs(hit, hit);
+        return { runtime: null, bin: hit, isJs: false, launcher: hit };
       }
-      function storeOf() {
-        return entryOf() || fallbackEntryOf();
+      if (o.npmRoot) {
+        const js = dshJsIn(o.npmRoot);
+        if (isFile(js)) return asJs(js, null);
       }
-      function fieldOf(name, v, write) {
-        const e = storeOf();
-        if (write) {
-          if (e[name] !== v) {
-            e[name] = v;
-            persistCrashField();
-          }
-          return e;
+      return null;
+    }
+    function knownDshEntries(opts) {
+      const o = opts || {};
+      const out = [];
+      try {
+        const r = resolveDsh(o);
+        if (r) {
+          if (typeof r.bin === "string" && r.bin) out.push(r.bin);
+          if (typeof r.launcher === "string" && r.launcher) out.push(r.launcher);
         }
-        return e[name];
+      } catch {
       }
-      function procFieldOf(name, v, write) {
-        const e = storeOf();
-        let p = e.process;
-        if (!p) {
-          p = e.process = {
-            child: null,
-            adoptedPid: null,
-            adopted: false,
-            observedOnly: false,
-            startDeadline: null,
-            restartAt: null,
-            spawnBlockedUntil: null,
-            missingNotified: false,
-            failStreak: 0,
-            lastProbeAt: null,
-            lastProbeOk: null,
-            lastProbeHttpOk: null,
-            lastFailure: null,
-            lastRestartAt: null
-          };
-        }
-        if (write) {
-          if (p[name] !== v) p[name] = v;
-          return p;
+      if (o.npmRoot) {
+        try {
+          out.push(dshJsIn(o.npmRoot));
+        } catch {
         }
-        return p[name];
       }
-      return { entryOf, fallbackEntryOf, persistCrashField, storeOf, fieldOf, procFieldOf };
-    }
-    module2.exports = { createMainRecord };
+      if (typeof o.dshBin === "string" && /^(?:[A-Za-z]:[\\/]|[\\/])/.test(o.dshBin)) out.push(o.dshBin);
+      return [...new Set(out.filter((x) => typeof x === "string" && x))];
+    }
+    function commandEntryViolation(cmdArr, opts) {
+      const o = opts || {};
+      const rp = o.realpath || ((p) => fs2.realpathSync(p));
+      if (!Array.isArray(cmdArr) || !cmdArr.length) return null;
+      const head = String(cmdArr[0] || "");
+      const NODE_HEAD = /* @__PURE__ */ new Set(["node", "node.exe"]);
+      const baseOf = (p) => String(p).split(/[\\/]/).pop().toLowerCase();
+      let entry = head;
+      const nodeHead = NODE_HEAD.has(baseOf(head));
+      if (nodeHead) {
+        if (cmdArr.length < 2) return "\u542F\u52A8\u547D\u4EE4\u4EE5 node \u6253\u5934\u4F46\u7F3A\u5C11 DSH \u5165\u53E3\u53C2\u6570";
+        entry = String(cmdArr[1] || "");
+      }
+      if (!entry) return "\u542F\u52A8\u547D\u4EE4\u7F3A\u5C11 DSH \u5165\u53E3";
+      const isAbsolute = (p) => /^(?:[A-Za-z]:[\\/]|[\\/])/.test(String(p));
+      const hasSep = (p) => /[\\/]/.test(String(p));
+      if (!hasSep(entry)) {
+        if (nodeHead && o.requireAbsoluteEntry) {
+          return "command[0] \u4E3A node \u65F6 command[1] \u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84\u7684 DSH \u5165\u53E3\uFF08\u76F8\u5BF9/\u88F8\u540D\u4F1A\u6309\u5DE5\u4F5C\u76EE\u5F55\u6216 PATH \u89E3\u6790\uFF09";
+        }
+        return null;
+      }
+      if (!isAbsolute(entry)) {
+        return "DSH \u5165\u53E3\u4E0D\u63A5\u53D7\u76F8\u5BF9\u8DEF\u5F84\uFF08\u4F1A\u6309\u8C03\u7528\u65B9\u5DE5\u4F5C\u76EE\u5F55\u89E3\u6790\uFF1B\u6C99\u7BB1\u5B9E\u4F8B\u7684\u8BE5\u76EE\u5F55\u6C99\u7BB1\u5185\u53EF\u5199\uFF09";
+      }
+      let real = null;
+      try {
+        real = rp(entry);
+      } catch {
+      }
+      if (typeof o.allowEntry === "function") {
+        try {
+          if (o.allowEntry(entry, real)) return null;
+        } catch {
+        }
+      }
+      if (real === null) return "DSH \u5165\u53E3\u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u89E3\u6790\uFF08fail-closed\uFF09\uFF1A" + entry;
+      for (const f of Array.isArray(o.files) ? o.files : []) {
+        try {
+          if (rp(f) === real) return null;
+        } catch {
+        }
+      }
+      for (const r of Array.isArray(o.roots) ? o.roots : []) {
+        let rr;
+        try {
+          rr = rp(r);
+        } catch {
+          continue;
+        }
+        const base = String(rr).replace(/[\\/]+$/, "");
+        if (real === base || real.indexOf(base + path2.sep) === 0) return null;
+      }
+      return "DSH \u5165\u53E3\u4E0D\u5728\u5141\u8BB8\u4F4D\u7F6E\uFF08\u987B\u4E3A\u8BE5\u5B9E\u4F8B\u5B89\u88C5\u6839\u4E4B\u4E0B\u7684\u5165\u53E3\uFF0C\u6216\u5185\u6838\u89E3\u6790\u51FA\u7684\u5DF2\u77E5 DSH \u5165\u53E3\uFF09\uFF1A" + entry;
+    }
+    module2.exports = {
+      resolveExecutable,
+      candidateNames,
+      standardDirs,
+      npmBin,
+      npxBin,
+      resolveDsh,
+      dshJsIn,
+      knownDshEntries,
+      commandEntryViolation,
+      isExecutableFile
+    };
   }
 });
 
-// src/platform/util/fs.js
-var require_fs = __commonJS({
-  "src/platform/util/fs.js"(exports2, module2) {
+// src/platform/os/pidlookup/probe.js
+var require_probe = __commonJS({
+  "src/platform/os/pidlookup/probe.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
-    var path2 = require("node:path");
-    function dirSizeBytes(root) {
-      let total = 0;
-      let seen = 0;
-      const MAX = 2e5;
-      const walk = (dir) => {
-        if (seen > MAX) return;
-        let entries;
+    var ex2 = require_exec();
+    var { isExecutableFile } = require_exec_path();
+    var {
+      parseProcNetTcpInodes,
+      parseLsofPid,
+      parseNetstatPid,
+      parseSsPid,
+      parseWmicCommandLine,
+      parsePowerShellCommandLine
+    } = require_norm();
+    var isLinux = process.platform === "linux";
+    var isMac = process.platform === "darwin";
+    var isWindows = process.platform === "win32";
+    function linuxListeningInodes(port) {
+      const inodes = /* @__PURE__ */ new Set();
+      for (const f of ["/proc/net/tcp", "/proc/net/tcp6"]) {
+        let txt = "";
         try {
-          entries = fs2.readdirSync(dir, { withFileTypes: true });
+          txt = fs2.readFileSync(f, "utf8");
         } catch {
-          return;
+          continue;
         }
-        for (const en of entries) {
-          if (seen > MAX) return;
-          const full = path2.join(dir, en.name);
-          if (en.isSymbolicLink()) continue;
-          if (en.isDirectory()) walk(full);
-          else if (en.isFile()) {
+        for (const x of parseProcNetTcpInodes(txt, port)) inodes.add(x);
+      }
+      return inodes;
+    }
+    function linuxFind(port) {
+      try {
+        const inodes = linuxListeningInodes(port);
+        if (!inodes.size) return null;
+        const entries = fs2.readdirSync("/proc").filter((e) => /^\d+$/.test(e));
+        for (const pid of entries) {
+          let fds;
+          try {
+            fds = fs2.readdirSync("/proc/" + pid + "/fd");
+          } catch {
+            continue;
+          }
+          for (const fd of fds) {
+            let link;
             try {
-              const st = fs2.statSync(full);
-              total += st.size;
+              link = fs2.readlinkSync("/proc/" + pid + "/fd/" + fd);
             } catch {
+              continue;
             }
+            if (inodes.has(link)) return Number(pid);
           }
-          seen++;
         }
-      };
+      } catch {
+      }
+      return null;
+    }
+    function macFind(port) {
       try {
-        walk(root);
+        const out = ex2.runOut("lsof", ["-nP", "-iTCP:" + port, "-sTCP:LISTEN"], { timeoutMs: 3e3 });
+        if (!out) return null;
+        return parseLsofPid(out);
       } catch {
       }
-      return total;
+      return null;
     }
-    function writeAtomic(file, data, opts) {
-      const mode = opts && typeof opts.mode === "number" ? opts.mode : 384;
-      const fp = path2.resolve(file);
-      const dir = path2.dirname(fp);
-      const tmp = fp + ".tmp." + process.pid + "." + Date.now();
+    function winFind(port) {
       try {
-        if (!fs2.existsSync(dir)) fs2.mkdirSync(dir, { recursive: true });
-        fs2.writeFileSync(tmp, data, { mode });
-        try {
-          fs2.chmodSync(tmp, mode);
-        } catch {
-        }
-        fs2.renameSync(tmp, fp);
+        const out = ex2.runOut("netstat", ["-ano"], { timeoutMs: 3e3 });
+        if (!out) return null;
+        return parseNetstatPid(out, port);
+      } catch {
+      }
+      return null;
+    }
+    function linuxFindSs(port) {
+      const candidates = ["ss", "/usr/sbin/ss", "/usr/bin/ss", "/bin/ss"];
+      for (const ssBin of candidates) {
+        if (ssBin.includes("/") && !isExecutableFile(ssBin)) continue;
         try {
-          fs2.chmodSync(fp, mode);
+          const out = ex2.runOut(ssBin, ["-tlnHp", "sport = :" + port], { timeoutMs: 3e3 });
+          const pid = parseSsPid(out);
+          if (pid !== null) return pid;
         } catch {
         }
-        return fp;
+      }
+      return null;
+    }
+    function isAlive(pid) {
+      if (!Number.isInteger(pid) || pid <= 0) return false;
+      try {
+        process.kill(pid, 0);
+        return true;
       } catch (e) {
+        return !!e && e.code === "EPERM";
+      }
+    }
+    function isZombie(pid) {
+      if (!Number.isInteger(pid) || pid <= 0 || isWindows) return false;
+      if (isLinux) {
         try {
-          if (fs2.existsSync(tmp)) fs2.truncateSync(tmp, 0);
+          const st = fs2.readFileSync("/proc/" + pid + "/stat", "utf8");
+          const idx = st.lastIndexOf(") ");
+          return idx >= 0 && st[idx + 2] === "Z";
         } catch {
+          return false;
         }
-        throw e;
+      }
+      try {
+        const o = ex2.runOut("ps", ["-o", "state=", "-p", String(pid)], { timeoutMs: 3e3 });
+        return !!o && /^Z/.test(o.trim());
+      } catch {
+        return false;
       }
     }
-    module2.exports = { dirSizeBytes, writeAtomic };
-  }
-});
-
-// src/app/state/main-store.js
-var require_main_store = __commonJS({
-  "src/app/state/main-store.js"(exports2, module2) {
-    "use strict";
-    var fs2 = require("node:fs");
-    var path2 = require("node:path");
-    var { writeAtomic } = require_fs();
-    function createMainStore(deps) {
-      const g = deps || {};
-      const config = () => typeof g.getConfig === "function" ? g.getConfig() || {} : {};
-      const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
-      let live = null;
-      let corrupt = false;
-      function dshMainFile() {
+    function readCmdline2(pid) {
+      if (isLinux) {
         try {
-          return path2.join(path2.dirname(config().stateFile), "dsh-main.json");
+          const buf = fs2.readFileSync("/proc/" + pid + "/cmdline");
+          return buf.toString("utf8").replace(/\0/g, " ").trim();
         } catch {
           return null;
         }
       }
-      function registryFileName() {
+      if (isMac) {
         try {
-          const b = path2.basename(config().stateFile || "state.json", ".json");
-          return b === "state" ? "managed-objects.json" : b + ".managed-objects.json";
+          const o = ex2.runOut("ps", ["-o", "command=", "-p", String(pid)], { timeoutMs: 3e3 });
+          return o ? o.trim() || null : null;
         } catch {
-          return "managed-objects.json";
-        }
-      }
-      function readDshMainFile() {
-        try {
-          const f = dshMainFile();
-          if (f && fs2.existsSync(f)) {
-            const j = JSON.parse(fs2.readFileSync(f, "utf8"));
-            corrupt = false;
-            return {
-              guardian: j.guardian === true,
-              remoteMode: legacyRemoteMode(j),
-              remoteToken: String(j.remoteToken || "")
-            };
-          }
-        } catch (e) {
-          corrupt = true;
-          const l = logger();
-          if (l && l.warn) l.warn("dsh-main.json \u8BFB/\u89E3\u6790\u5931\u8D25\uFF0C\u5199\u56DE\u5C06\u88AB\u62D2\u7EDD\u76F4\u81F3\u663E\u5F0F\u91CD\u8BBE remoteToken: " + (e && e.message || e));
+          return null;
         }
-        return { guardian: false, remoteMode: "off", remoteToken: "" };
       }
-      function legacyRemoteMode(j) {
-        if (j.remoteMode === "lan" || j.remoteMode === "wan") return j.remoteMode;
-        if (j.remoteEnabled === true && j.frpEnabled === true) return "wan";
-        if (j.remoteEnabled === true) return "lan";
-        return "off";
-      }
-      function readDshMain() {
-        if (live) return live;
-        live = readDshMainFile();
-        return live;
+      if (isWindows) {
+        const out = ex2.runOut("wmic", ["process", "where", "ProcessId=" + pid, "get", "CommandLine", "/value"], { timeoutMs: 5e3 });
+        const viaWmic = parseWmicCommandLine(out);
+        if (viaWmic) return viaWmic;
+        {
+          const ps = "(Get-CimInstance Win32_Process -Filter 'ProcessId=" + pid + "').CommandLine";
+          const o = ex2.runOut("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { timeoutMs: 5e3 });
+          return parsePowerShellCommandLine(o);
+        }
       }
-      function writeDshMain(meta) {
-        const m = meta || {};
-        if (!live) live = readDshMainFile();
-        if (corrupt && !(typeof m.remoteToken === "string" && m.remoteToken)) {
-          const l = logger();
-          if (l && l.warn) l.warn("_writeDshMain: \u6587\u4EF6\u635F\u574F\u6001\uFF0C\u62D2\u7EDD\u4EE5\u9ED8\u8BA4\u503C\u8986\u76D6\u5199\u56DE");
-          return;
+      return null;
+    }
+    function pgrepList(pattern) {
+      const out = [];
+      const readCmd = (pid) => readCmdline2(pid) || "";
+      try {
+        if (isMac) {
+          const pids = (ex2.runOut("pgrep", ["-f", String(pattern)], { timeoutMs: 3e3 }) || "").split(/\r?\n/);
+          for (const line of pids) {
+            const pid = parseInt(line.trim(), 10);
+            if (!Number.isInteger(pid) || pid <= 0) continue;
+            const cmd2 = readCmd(pid);
+            if (!cmd2) continue;
+            out.push({ pid, cmdline: cmd2 });
+          }
+          return out;
         }
-        corrupt = false;
-        Object.assign(live, m);
-        const f = dshMainFile();
-        if (!f) return;
-        try {
-          const cur = readDshMain();
-          const merged = Object.assign({}, cur, m);
-          const dir = path2.dirname(f);
-          fs2.mkdirSync(dir, { recursive: true });
-          const body = JSON.stringify({
-            guardian: merged.guardian === true,
-            remoteMode: merged.remoteMode === "lan" || merged.remoteMode === "wan" ? merged.remoteMode : "off",
-            remoteToken: String(merged.remoteToken || "")
-          }, null, 2);
-          writeAtomic(f, body, { mode: 384 });
-        } catch (e) {
-          const l = logger();
-          if (l && l.warn) l.warn("_writeDshMain: " + (e && e.message || e));
+        if (isWindows) {
+          const ps = "Get-CimInstance Win32_Process | Select-Object ProcessId,CommandLine | ConvertTo-Json -Compress";
+          const j = ex2.runOut("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { timeoutMs: 8e3 }) || "";
+          let arr = [];
+          try {
+            arr = JSON.parse(j);
+            if (!Array.isArray(arr)) arr = [arr];
+          } catch {
+          }
+          for (const it of arr) {
+            if (!it || !it.ProcessId) continue;
+            const pid = Number(it.ProcessId);
+            if (!Number.isInteger(pid) || pid <= 0) continue;
+            const cmd2 = String(it.CommandLine || "");
+            if (!cmd2.includes(pattern)) continue;
+            out.push({ pid, cmdline: cmd2 });
+          }
+          return out;
+        }
+        const res = ex2.runOut("pgrep", ["-af", String(pattern)], { timeoutMs: 3e3 }) || "";
+        for (const line of res.split(/\r?\n/)) {
+          const m = /^(\d+)\s+([\s\S]*)$/.exec(line.trim());
+          if (m) out.push({ pid: Number(m[1]), cmdline: m[2] });
         }
+      } catch {
       }
-      return { dshMainFile, registryFileName, readDshMain, readDshMainFile, writeDshMain };
+      return out;
     }
-    module2.exports = { createMainStore };
+    module2.exports = {
+      linuxListeningInodes,
+      linuxFind,
+      macFind,
+      winFind,
+      linuxFindSs,
+      readCmdline: readCmdline2,
+      pgrepList,
+      isAlive,
+      isZombie
+    };
   }
 });
 
-// src/app/state/field-tables.js
-var require_field_tables = __commonJS({
-  "src/app/state/field-tables.js"(exports2, module2) {
+// src/platform/os/pidlookup/index.js
+var require_pidlookup = __commonJS({
+  "src/platform/os/pidlookup/index.js"(exports2, module2) {
     "use strict";
-    var ENTRY_FIELDS = [
-      // [读写 helper 后缀, entry 字段]
-      ["CrashWindowStart", "crashWindowStart"],
-      ["CrashWindowRestarts", "crashWindowRestarts"],
-      ["BackoffLevel", "backoffLevel"],
-      ["BackoffUntil", "backoffUntil"],
-      ["RestartCount", "restartCount"]
-    ];
-    var PROC_FIELDS = [
-      // [读写 helper 后缀, process 字段, 是否布尔]
-      ["Child", "child", false],
-      ["AdoptPid", "adoptedPid", false],
-      ["Adopted", "adopted", true],
-      ["ObservedOnly", "observedOnly", true],
-      ["FailStreak", "failStreak", false],
-      ["RestartAt", "restartAt", false],
-      ["StartDeadline", "startDeadline", false],
-      ["SpawnBlockedUntil", "spawnBlockedUntil", false],
-      ["MissingNotified", "missingNotified", true],
-      ["LastProbeAt", "lastProbeAt", false],
-      ["LastProbeOk", "lastProbeOk", false],
-      ["LastProbeHttpOk", "lastProbeHttpOk", false],
-      ["LastFailure", "lastFailure", false],
-      ["LastRestartAt", "lastRestartAt", false]
-    ];
-    module2.exports = { ENTRY_FIELDS, PROC_FIELDS };
+    var {
+      parseProcNetTcpInodes,
+      parseLsofPid,
+      parseNetstatPid,
+      parseSsPid,
+      parseWmicCommandLine,
+      parsePowerShellCommandLine,
+      normCmdline
+    } = require_norm();
+    var {
+      linuxFind,
+      linuxFindSs,
+      macFind,
+      winFind,
+      readCmdline: readCmdline2,
+      pgrepList,
+      isAlive,
+      isZombie
+    } = require_probe();
+    var isLinux = process.platform === "linux";
+    var isMac = process.platform === "darwin";
+    function findListeningPid(port) {
+      if (!Number.isInteger(port) || port <= 0) return null;
+      if (isLinux) {
+        const a = linuxFind(port);
+        if (a !== null && a !== void 0) return a;
+        return linuxFindSs(port);
+      }
+      if (isMac) return macFind(port);
+      return winFind(port);
+    }
+    function isDshCmdline(pid) {
+      const cmd2 = readCmdline2(pid);
+      if (!cmd2) return false;
+      return /(^|\s)(node|.*dsh.*)(\s|$)/i.test(cmd2) && /dsh/i.test(cmd2);
+    }
+    module2.exports = {
+      findListeningPid,
+      isAlive,
+      isZombie,
+      readCmdline: readCmdline2,
+      normCmdline,
+      isDshCmdline,
+      pgrepList,
+      parseProcNetTcpInodes,
+      parseLsofPid,
+      parseNetstatPid,
+      parseSsPid,
+      parseWmicCommandLine,
+      parsePowerShellCommandLine
+    };
   }
 });
 
-// src/app/state/phase.js
-var require_phase = __commonJS({
-  "src/app/state/phase.js"(exports2, module2) {
+// src/platform/service/state-root.js
+var require_state_root = __commonJS({
+  "src/platform/service/state-root.js"(exports2, module2) {
     "use strict";
-    function legacyToEntryPhase(ph) {
-      return { STOPPED: "stopped", STARTING: "starting", RUNNING: "running", RESTARTING: "restarting", BACKOFF: "backoff", OBSERVED: "stopped" }[ph] || "stopped";
+    var fs2 = require("node:fs");
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    var SCHEMA = 1;
+    function root() {
+      const override = process.env.DSH_SUPERVISOR_HOME;
+      if (override && String(override).trim()) return path2.resolve(String(override).trim());
+      if (process.platform === "win32") {
+        const local = process.env.LOCALAPPDATA || path2.join(os2.homedir(), "AppData", "Local");
+        return path2.join(local, "dsh-supervisor");
+      }
+      if (process.platform === "darwin") {
+        return path2.join(os2.homedir(), "Library", "Application Support", "dsh-supervisor");
+      }
+      const xdg = process.env.XDG_STATE_HOME;
+      return xdg && String(xdg).trim() ? path2.join(String(xdg).trim(), "dsh-supervisor") : path2.join(os2.homedir(), ".local", "state", "dsh-supervisor");
     }
-    function entryToLegacyPhase(ph) {
-      return { stopped: "STOPPED", starting: "STARTING", running: "RUNNING", restarting: "RESTARTING", backoff: "BACKOFF" }[ph] || "STOPPED";
+    function supervisorDir() {
+      return path2.join(root(), "supervisor");
     }
-    module2.exports = { legacyToEntryPhase, entryToLegacyPhase };
+    function shellDir() {
+      return path2.join(root(), "shell");
+    }
+    function legacySupervisorDir() {
+      return path2.join(os2.homedir(), ".dsh", "supervisor");
+    }
+    function legacyShellDir() {
+      return path2.join(os2.homedir(), ".dsh", "shell");
+    }
+    function migrateLegacy() {
+      const moved = [];
+      for (const [from, to] of [
+        [legacySupervisorDir(), supervisorDir()],
+        [legacyShellDir(), shellDir()]
+      ]) {
+        try {
+          if (!fs2.existsSync(from)) continue;
+          fs2.mkdirSync(to, { recursive: true });
+          for (const name of fs2.readdirSync(from)) {
+            const src = path2.join(from, name);
+            const dst = path2.join(to, name);
+            if (fs2.existsSync(dst)) continue;
+            try {
+              fs2.renameSync(src, dst);
+              moved.push(src + " -> " + dst);
+            } catch {
+            }
+          }
+          try {
+            if (fs2.readdirSync(from).length === 0) fs2.rmdirSync(from);
+          } catch {
+          }
+        } catch {
+        }
+      }
+      return moved;
+    }
+    module2.exports = { SCHEMA, root, supervisorDir, shellDir, migrateLegacy };
   }
 });
 
-// src/app/state/fields.js
-var require_fields = __commonJS({
-  "src/app/state/fields.js"(exports2, module2) {
+// src/platform/service/config.js
+var require_config = __commonJS({
+  "src/platform/service/config.js"(exports2, module2) {
     "use strict";
-    var { ENTRY_FIELDS, PROC_FIELDS } = require_field_tables();
-    var { legacyToEntryPhase, entryToLegacyPhase } = require_phase();
-    function createFields(deps) {
-      const g = deps || {};
-      const record = g.record;
-      const mainStore = g.mainStore;
-      const reg = () => typeof g.getManagedObjects === "function" ? g.getManagedObjects() : null;
-      const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
-      function toEntry(ph) {
-        return legacyToEntryPhase(ph);
-      }
-      function toLegacy(ph) {
-        return entryToLegacyPhase(ph);
-      }
-      function phase() {
-        const e = record.storeOf();
-        const p = e.process || null;
-        const upper = entryToLegacyPhase(e.phase || "stopped");
-        if (upper === "STOPPED" && p && p.observedOnly && p.adopted) return "OBSERVED";
-        return upper;
-      }
-      function setPhase(upper) {
-        const e = record.storeOf();
-        const ph = legacyToEntryPhase(upper);
-        const m = reg();
-        try {
-          if (m && typeof m.setPhase === "function" && record.entryOf() === e) {
-            if (e.phase !== ph) m.setPhase("main", ph);
-          } else if (e.phase !== ph) {
-            e.phase = ph;
+    var os2 = require("node:os");
+    var path2 = require("node:path");
+    function expandHome(p) {
+      if (typeof p !== "string") return p;
+      if (p === "~") return os2.homedir();
+      if (p.startsWith("~/")) return path2.join(os2.homedir(), p.slice(2));
+      return p;
+    }
+    var SUP = require_state_root().supervisorDir();
+    var NO_EXTENSION = Object.freeze({ defaults: [], aliases: [] });
+    function normalizeExtension(ext) {
+      if (!ext || typeof ext !== "object") return NO_EXTENSION;
+      return {
+        defaults: Array.isArray(ext.defaults) ? ext.defaults : [],
+        aliases: Array.isArray(ext.aliases) ? ext.aliases : []
+      };
+    }
+    var BASE_DEFAULTS = {
+      probeIntervalMs: 5e3,
+      // 健康探测三层：L0 进程存活 + L1 端口监听 + L2 HTTP GET healthUrl。probeTimeoutMs = 单次探测超时；
+      // failThreshold = 连续失败判故障（防抖动）；httpProbeEnabled=false 退化为端口在线即健康。
+      probeTimeoutMs: 3e3,
+      failThreshold: 2,
+      httpProbeEnabled: true,
+      startTimeoutMs: 3e4,
+      stopGraceMs: 1e4,
+      portReleaseWaitMs: 1e4,
+      crashWindowMs: 6e5,
+      crashBurst: 5,
+      backoff: [3e4, 6e4, 12e4, 3e5, 6e5],
+      apiHost: "127.0.0.1",
+      // API 端口：高位不常用段起始（常用端口段易冲突）；守卫启动被占则自动顺延并持久化。
+      apiPort: 36360,
+      // 注意：daemon 控制通道端口属业务域知识，经注入声明提供（同上），原键名与值逐字保留。
+      // 动态端口池（范围是配置项，非编译期常量）：null = 内置默认池，默认避开 OS 动态端口范围
+      // （Linux ip_local_port_range=32768-60999），落在 IANA User 段低位。额外池由域装配期申报（DS-G4）。
+      portPools: null,
+      stateFile: path2.join(SUP, "state.json"),
+      // 日志目录布局：事件在 events/guard.events.log，分级日志在 log/；显式配置的路径尊重用户给定值，不强改。
+      logFile: path2.join(SUP, "events", "guard.events.log"),
+      eventsMaxBytes: 5 * 1024 * 1024,
+      supervisorLogFile: path2.join(SUP, "log", "guard.log"),
+      dshLogFile: path2.join(SUP, "log", "dsh.log"),
+      upgradeLogFile: path2.join(SUP, "log", "upgrade.log"),
+      logLevel: "info",
+      logMaxBytes: 5 * 1024 * 1024,
+      notifyEnabled: true,
+      // 内核更新单写入者 = 桌面壳：corePackageName 仅为内核自身 npm 子包名，守卫只读它查版本状态，
+      // 安装/升级由壳执行。不得再引入 manifest 更新通道（残留键已删，config.json 中未知键加载时忽略）。
+      corePackageName: null,
+      pluginsProfileName: "web",
+      packageName: "@deepseek-ai/dsh",
+      // 灰度名单（RELEASE-CHANNEL-CONTRACT）：本机 canary:true 即灰度机，仅对内核包生效，对第三方包
+      // （packageName）无效；未置真即非灰度。
+      canary: false,
+      // 最小兜底镜像源（不变量 C2）：完整目录归壳管理，经 <产品状态根>/supervisor/registry.json 投放，
+      // 内核由 platform/distribution 读取（契约见 platform/contract/registry.js）；
+      // 此处官方源 + npmmirror 两条兜底，保证契约不可用时仍可安装。
+      registries: [
+        "https://registry.npmjs.org",
+        "https://registry.npmmirror.com"
+      ],
+      updateCheckEnabled: true,
+      updateCheckIntervalMs: 36e5,
+      initialCheckDelayMs: 2e4,
+      upgradeTimeoutMs: 6e5,
+      installCommandTemplate: ["npm", "install", "-g", "{pkg}@{version}"],
+      // apiAccessKey（可选）出回环访问密钥：配置后，0.0.0.0（局域网）与 FRP 公网通道的 API 请求必须携带
+      // Authorization: Bearer <key> 或 ?access_key=<key>，否则 401；回环豁免。
+      // 不配置 = LAN 受 RFC1918 白名单约束，FRP 暴露仍强制 remoteToken。
+      apiAccessKey: null,
+      // 关闭窗口行为（系统级）：'hide' = 隐藏至托盘、服务常驻（默认）；'exit' = 退出管家并停全部服务链。
+      closeAction: "hide"
+    };
+    function buildDefaults2(ext) {
+      const pending = normalizeExtension(ext).defaults.slice();
+      const out = {};
+      for (const key of Object.keys(BASE_DEFAULTS)) {
+        for (let i = pending.length - 1; i >= 0; i--) {
+          const g = pending[i];
+          if (g && g.at === key) {
+            if (g.values && typeof g.values === "object") Object.assign(out, g.values);
+            pending.splice(i, 1);
           }
-        } catch (e2) {
-          const l = logger();
-          if (l && l.warn) l.warn("_mSetPhase: " + (e2 && e2.message || e2));
         }
+        out[key] = BASE_DEFAULTS[key];
       }
-      function guardian() {
-        try {
-          return mainStore.readDshMain().guardian === true;
-        } catch {
-          return false;
-        }
+      for (const g of pending) {
+        if (g && g.values && typeof g.values === "object") Object.assign(out, g.values);
       }
-      function mainGuardian() {
-        return guardian();
+      return out;
+    }
+    var DEFAULTS = buildDefaults2(null);
+    function normalize(raw, ext) {
+      const extension = normalizeExtension(ext);
+      const provided = raw || {};
+      const cfg = Object.assign(buildDefaults2(extension), provided);
+      cfg.stateFile = expandHome(cfg.stateFile);
+      cfg.logFile = expandHome(cfg.logFile);
+      cfg.supervisorLogFile = expandHome(cfg.supervisorLogFile);
+      cfg.dshLogFile = expandHome(cfg.dshLogFile);
+      cfg.upgradeLogFile = expandHome(cfg.upgradeLogFile);
+      let u;
+      try {
+        u = new URL(cfg.healthUrl);
+      } catch {
+        throw new Error("config.healthUrl \u65E0\u6548: " + JSON.stringify(cfg.healthUrl));
       }
-      function desired() {
-        return record.storeOf().desired === "stopped" ? "stopped" : "running";
+      cfg.targetHost = u.hostname;
+      cfg.targetPort = Number(u.port || (u.protocol === "https:" ? 443 : 80));
+      for (const [from, to] of extension.aliases) {
+        if (provided[to] === void 0 && provided[from] !== void 0) cfg[to] = provided[from] === true;
       }
-      function setDesired(v) {
-        const want = v === "stopped" ? "stopped" : "running";
-        const e = record.storeOf();
-        const m = reg();
-        try {
-          if (m && typeof m.update === "function" && record.entryOf() === e) {
-            if (e.desired !== want) m.update("main", { desired: want });
-          } else if (e.desired !== want) {
-            e.desired = want;
-          }
-        } catch (e2) {
-          const l = logger();
-          if (l && l.warn) l.warn("_mSetDesired: " + (e2 && e2.message || e2));
-        }
+      const cmdPort = extractPortFromCommand(cfg.command);
+      if (cmdPort !== null) cfg.targetPort = cmdPort;
+      cfg.probeTimeoutMs = Number.isFinite(Number(cfg.probeTimeoutMs)) && Number(cfg.probeTimeoutMs) > 0 ? Number(cfg.probeTimeoutMs) : 3e3;
+      cfg.failThreshold = Number.isInteger(Number(cfg.failThreshold)) && Number(cfg.failThreshold) >= 1 ? Number(cfg.failThreshold) : 2;
+      cfg.httpProbeEnabled = cfg.httpProbeEnabled !== false;
+      if (!Array.isArray(cfg.command) || cfg.command.length === 0) {
+        throw new Error("config.command \u7F3A\u5931\uFF1A\u9700\u8981\u4E00\u4E2A\u547D\u4EE4\u6570\u7EC4");
       }
-      function field(name, v) {
-        return arguments.length >= 2 ? record.fieldOf(name, v, true) : record.fieldOf(name, void 0, false);
+      return cfg;
+    }
+    function extractPortFromCommand(command) {
+      if (!Array.isArray(command)) return null;
+      for (let i = 0; i < command.length; i++) {
+        const a = String(command[i]);
+        if ((a === "--port" || a === "-p") && i + 1 < command.length) {
+          const n = Number(command[i + 1]);
+          if (Number.isInteger(n) && n > 0 && n <= 65535) return n;
+        }
+        const m = /^--port=(\d+)$/.exec(a);
+        if (m) {
+          const n = Number(m[1]);
+          if (Number.isInteger(n) && n > 0 && n <= 65535) return n;
+        }
       }
-      function procField(name, v) {
-        return arguments.length >= 2 ? record.procFieldOf(name, v, true) : record.procFieldOf(name, void 0, false);
+      return null;
+    }
+    module2.exports = { DEFAULTS, BASE_DEFAULTS, buildDefaults: buildDefaults2, normalize, extractPortFromCommand };
+  }
+});
+
+// src/app/settings/domain-config.js
+var require_domain_config = __commonJS({
+  "src/app/settings/domain-config.js"(exports2, module2) {
+    "use strict";
+    var defaults = [
+      {
+        at: "portPools",
+        // daemon 控制通道端口：集中定义，杜绝散落硬编码。
+        // 这两个值同时是 app/ctl/client.js 与两个 daemon 的兜底端口，不得单独改动
+        //   （改动即需同步 8 处 43107/43108 兜底常量）。
+        values: {
+          routerCtlPort: 43107,
+          lanCtlPort: 43108
+        }
+      },
+      {
+        at: "corePackageName",
+        // 智能路由启动开关。
+        values: {
+          routerAutostart: false
+        }
       }
-      const getProc = (n) => record.procFieldOf(n);
-      const setProc = (n, v) => {
-        record.procFieldOf(n, v, true);
-      };
-      const getEntry = (n) => record.fieldOf(n);
-      const setEntry = (n, v) => {
-        record.fieldOf(n, v, true);
-      };
-      const accessors = {
-        phase: { get: () => phase(), set: (v) => {
-          setPhase(v);
-        } },
-        desired: { get: () => desired(), set: (v) => {
-          setDesired(v);
-        } },
-        child: { get: () => getProc("child"), set: (c) => {
-          setProc("child", c);
-        } },
-        adoptedPid: { get: () => getProc("adoptedPid"), set: (v) => {
-          setProc("adoptedPid", v);
-        } },
-        adopted: { get: () => getProc("adopted") === true, set: (v) => {
-          setProc("adopted", v === true);
-        } },
-        observedOnly: { get: () => getProc("observedOnly") === true, set: (v) => {
-          setProc("observedOnly", v === true);
-        } },
-        restartCount: { get: () => {
-          const v = getEntry("restartCount");
-          return typeof v === "number" ? v : 0;
-        }, set: (v) => {
-          setEntry("restartCount", v);
-        } },
-        spawnBlockedUntil: { get: () => {
-          const v = getProc("spawnBlockedUntil");
-          return v === void 0 ? null : v;
-        }, set: (v) => {
-          setProc("spawnBlockedUntil", v);
-        } },
-        missingNotified: { get: () => getProc("missingNotified") === true, set: (v) => {
-          setProc("missingNotified", v === true);
-        } }
-      };
+    ];
+    var aliases = [
+      ["switcherAutoStart", "routerAutostart"]
+    ];
+    function extension() {
       return {
-        phase,
-        setPhase,
-        guardian,
-        mainGuardian,
-        desired,
-        setDesired,
-        field,
-        procField,
-        accessors,
-        legacyToEntryPhase: toEntry,
-        entryToLegacyPhase: toLegacy,
-        child: () => getProc("child"),
-        adoptPid: () => getProc("adoptedPid"),
-        observedOnly: () => getProc("observedOnly") === true,
-        setObservedOnly: (v) => {
-          setProc("observedOnly", v === true);
-        },
-        ENTRY_FIELDS,
-        PROC_FIELDS
+        defaults: defaults.map((g) => ({ at: g.at, values: Object.assign({}, g.values) })),
+        aliases: aliases.map((a) => a.slice())
       };
     }
-    module2.exports = { createFields };
+    module2.exports = { extension, defaults, aliases };
   }
 });
 
-// src/app/state/store.js
-var require_store = __commonJS({
-  "src/app/state/store.js"(exports2, module2) {
+// src/platform/service/version.js
+var require_version = __commonJS({
+  "src/platform/service/version.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var { writeAtomic } = require_fs();
-    function createStore(deps) {
-      const g = deps || {};
-      const record = g.record;
-      const fields = g.fields;
-      const mainStore = g.mainStore;
-      const upgradeHold = g.upgradeHold;
-      const config = () => typeof g.getConfig === "function" ? g.getConfig() || {} : {};
-      const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
-      const events = () => typeof g.getEvents === "function" ? g.getEvents() : null;
-      const instances = () => typeof g.getInstances === "function" ? g.getInstances() : null;
-      const views = () => typeof g.getViews === "function" ? g.getViews() : null;
-      const reg = () => typeof g.getManagedObjects === "function" ? g.getManagedObjects() : null;
-      let lastStateBody = null;
-      function writeState(force) {
-        try {
-          const snap = views().status();
-          const updatedAt = snap.updatedAt;
-          snap.updatedAt = null;
-          const body = JSON.stringify(snap, null, 2);
-          if (!force && body === lastStateBody) return;
-          lastStateBody = body;
-          snap.updatedAt = updatedAt;
-          const dir = path2.dirname(config().stateFile);
-          fs2.mkdirSync(dir, { recursive: true });
-          writeAtomic(config().stateFile, JSON.stringify(snap, null, 2), { mode: 384 });
-        } catch (e) {
-          const l = logger();
-          if (l && l.error) l.error("state write failed: " + e.message);
-        }
-      }
-      function loadState() {
-        let raw = null;
-        try {
-          raw = JSON.parse(fs2.readFileSync(config().stateFile, "utf8"));
-        } catch (e) {
-          if (!e || e.code !== "ENOENT") {
-            const l = logger();
-            if (l && l.warn) l.warn("state load failed\uFF08\u6309\u7A7A\u72B6\u6001\u7EE7\u7EED\uFF09: " + (e && e.message || e));
-          }
-        }
-        if (raw && typeof raw === "object") try {
-          if (raw.desired === "stopped" || raw.desired === "running") {
-            const m = reg();
-            const registryHasSource = !!(m && m._loadedFromDisk);
-            if (!registryHasSource) fields.setDesired(raw.desired);
-          }
-          if (typeof raw.restartCount === "number") record.fieldOf("restartCount", raw.restartCount, true);
-          if (typeof raw.backoffLevel === "number") record.fieldOf("backoffLevel", raw.backoffLevel, true);
-          if (typeof raw.crashWindowStart === "number" || raw.crashWindowStart === null) record.fieldOf("crashWindowStart", raw.crashWindowStart, true);
-          if (typeof raw.crashWindowRestarts === "number") record.fieldOf("crashWindowRestarts", raw.crashWindowRestarts, true);
-          if (typeof raw.lastFailure === "string" || raw.lastFailure === null) record.procFieldOf("lastFailure", raw.lastFailure, true);
-          if (typeof raw.lastRestartAt === "string" || raw.lastRestartAt === null) record.procFieldOf("lastRestartAt", raw.lastRestartAt, true);
-          if (raw.upgradeHold === true) upgradeHold.enter();
-          if (raw.shellHalted === true && typeof g.setShellHalted === "function") g.setShellHalted(true);
-        } catch (e) {
-          const l = logger();
-          if (l && l.warn) l.warn("state restore partial\uFF08\u5B57\u6BB5\u7EA7\u8DF3\u8FC7\uFF0Cboot \u4ECD\u7EE7\u7EED\uFF09: " + (e && e.message || e));
-        }
-        try {
-          fields.setPhase("STOPPED");
-        } catch {
-        }
-      }
-      function migrateMainRecord() {
-        try {
-          const im = instances();
-          if (!im || !Array.isArray(im.instances)) return;
-          const idx = im.instances.findIndex((i) => i.id === "main");
-          if (idx < 0) return;
-          const main = im.instances[idx];
-          const f = mainStore.dshMainFile();
-          if (f && !fs2.existsSync(f)) {
-            mainStore.writeDshMain({
-              guardian: main.guardian === true,
-              remoteMode: main.remoteEnabled === true ? main.frpEnabled === true ? "wan" : "lan" : "off",
-              remoteToken: String(main.remoteToken || "")
-            });
-          }
-          im.instances.splice(idx, 1);
-          if (im.save) {
-            try {
-              im.save();
-            } catch {
-            }
-          }
-          const l = logger();
-          if (l && l.info) l.info("[main] \u6982\u5FF5\u6E05\u5206\uFF1Amain \u8BB0\u5F55\u5DF2\u8FC1\u51FA instances.json \u2192 dsh-main.json");
-          const ev = events();
-          if (ev) ev.append("main_meta_migrated", {});
-        } catch (e) {
-          const l = logger();
-          if (l && l.warn) l.warn("_migrateMainRecord: " + (e && e.message));
-        }
+    function guardVersion() {
+      if (true) return String("0.1.6-BETA.3");
+      try {
+        return JSON.parse(fs2.readFileSync(path2.join(__dirname, "..", "..", "package.json"), "utf8")).version || "unknown";
+      } catch {
+        return "unknown";
       }
-      return { writeState, loadState, migrateMainRecord };
     }
-    module2.exports = { createStore };
+    module2.exports = { guardVersion };
   }
 });
 
-// src/app/state/desired.js
-var require_desired = __commonJS({
-  "src/app/state/desired.js"(exports2, module2) {
+// src/app/state/main-record.js
+var require_main_record = __commonJS({
+  "src/app/state/main-record.js"(exports2, module2) {
     "use strict";
-    var fs2 = require("node:fs");
-    var { writeAtomic } = require_fs();
-    function createDesired(deps) {
+    function createMainRecord(deps) {
       const g = deps || {};
-      const fields = g.fields;
-      const store = g.store;
-      const intents = () => typeof g.getIntents === "function" ? g.getIntents() : null;
-      const events = () => typeof g.getEvents === "function" ? g.getEvents() : null;
-      const configPath = () => typeof g.getConfigPath === "function" ? g.getConfigPath() : null;
+      const reg = () => typeof g.getManagedObjects === "function" ? g.getManagedObjects() : null;
       const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
-      const setCrashHalted = typeof g.setCrashHalted === "function" ? g.setCrashHalted : () => {
-      };
-      const setManualRestart = typeof g.setManualRestart === "function" ? g.setManualRestart : () => {
-      };
-      const tick = () => {
-        if (typeof g.tick === "function") g.tick();
-      };
-      const stopProcess = (why) => {
-        if (typeof g.stopProcess === "function") g.stopProcess(why);
-      };
-      function setDesired(v) {
-        if (v !== "running" && v !== "stopped") return { error: "invalid desired" };
-        if (v === "running") {
-          const it = intents();
-          if (it) it.register("start");
-          setCrashHalted(false);
-        }
-        if (v === "running" && fields.phase() === "OBSERVED") {
-          fields.setObservedOnly(false);
-          fields.setPhase("STOPPED");
-        }
-        if (v === "stopped" && fields.phase() === "OBSERVED" && fields.observedOnly()) {
-          stopProcess("desired_stopped");
-        }
-        if (fields.desired() !== v) {
-          fields.setDesired(v);
-          const ev = events();
-          if (ev) ev.append("desired_changed", { desired: v });
-          store.writeState();
-        }
-        tick();
-        return { ok: true, desired: fields.desired() };
-      }
-      function requestRestart() {
-        if (fields.desired() === "stopped") {
-          const ev2 = events();
-          if (ev2) ev2.append("manual_restart_requested", { ignored: "desired=stopped" });
-          return { ok: false, error: "desired=stopped\uFF0C\u8BF7\u5148 /start" };
-        }
-        setManualRestart(true);
-        setCrashHalted(false);
-        const it = intents();
-        if (it) it.register("restart");
-        const ev = events();
-        if (ev) ev.append("manual_restart_requested", {});
-        tick();
-        return { ok: true };
-      }
-      function persistConfigPatch(patch) {
-        const p = configPath();
-        if (!p) return false;
-        const abort = (m) => {
-          const l = logger();
-          if (l && l.warn) l.warn("config persist aborted (fail-closed): " + m);
-          const ev = events();
-          if (ev) {
-            try {
-              ev.append("config_persist_aborted", { reason: m });
-            } catch {
-            }
-          }
-          return false;
-        };
+      let fallback = null;
+      function entryOf() {
+        const m = reg();
+        if (!m || typeof m.get !== "function") return null;
         try {
-          let cur = {};
-          let raw = null;
-          try {
-            raw = fs2.readFileSync(p, "utf8");
-          } catch (e) {
-            if (!e || e.code !== "ENOENT") return abort("read failed: " + (e && e.message || e));
-          }
-          if (raw !== null) {
-            try {
-              cur = JSON.parse(raw);
-              if (!cur || typeof cur !== "object" || Array.isArray(cur)) throw new Error("root is not an object");
-            } catch (e) {
-              return abort("parse failed, original bytes preserved: " + (e && e.message || e));
-            }
-          }
-          Object.assign(cur, patch);
-          delete cur.switcherAutoStart;
-          writeAtomic(p, JSON.stringify(cur, null, 2), { mode: 384 });
-          return true;
-        } catch (e) {
-          const l = logger();
-          if (l && l.warn) l.warn("config persist failed: " + e.message);
-          return false;
+          return m.get("main") || null;
+        } catch {
+          return null;
         }
       }
-      return { setDesired, requestRestart, persistConfigPatch };
-    }
-    module2.exports = { createDesired };
-  }
-});
-
-// src/platform/os/pidlookup/norm.js
-var require_norm = __commonJS({
-  "src/platform/os/pidlookup/norm.js"(exports2, module2) {
-    "use strict";
-    function parseProcNetTcpInodes(txt, port) {
-      const inodes = /* @__PURE__ */ new Set();
-      for (const lineRaw of String(txt || "").split("\n")) {
-        const cols = lineRaw.trim().split(/\s+/);
-        if (cols.length < 10) continue;
-        const local = cols[1];
-        const st = cols[3];
-        const inode = cols[9];
-        if (!local || !inode) continue;
-        const p = local.split(":")[1];
-        if (st === "0A" && p && parseInt(p, 16) === port) inodes.add("socket:[" + inode + "]");
+      function fallbackEntryOf() {
+        if (!fallback) {
+          fallback = {
+            kind: "dsh",
+            id: "main",
+            name: "\u4E3B\u5B9E\u4F8B",
+            desired: "running",
+            guardian: true,
+            ownership: { ports: [], rootPath: null, unit: null, daemonScript: null, processMode: "spawn", meta: null },
+            phase: "stopped",
+            lastObserved: null,
+            backoffLevel: 0,
+            backoffUntil: null,
+            crashWindowStart: null,
+            crashWindowRestarts: 0,
+            restartCount: 0,
+            startedAt: null,
+            lastTransitionAt: null,
+            createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+            updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            process: null
+          };
+        }
+        return fallback;
       }
-      return inodes;
-    }
-    function parseLsofPid(out) {
-      for (const line of String(out || "").split("\n")) {
-        const m = line.trim().split(/\s+/);
-        if (m.length >= 2 && /^\d+$/.test(m[1])) return Number(m[1]);
+      function persistCrashField() {
+        const m = reg();
+        try {
+          if (m && typeof m.persistCrashState === "function") m.persistCrashState();
+          else if (m && typeof m._save === "function") m._save();
+        } catch (e) {
+          const l = logger();
+          if (l && l.warn) l.warn("persistCrashField: " + (e && e.message || e));
+        }
       }
-      return null;
-    }
-    function parseNetstatPid(out, port) {
-      const want = String(port);
-      for (const line of String(out || "").split("\n")) {
-        const parts = line.trim().split(/\s+/);
-        if (parts.length >= 5 && (parts[0] === "TCP" || parts[0] === "TCPv6") && parts[3] === "LISTENING") {
-          const lp = parts[1];
-          const p = lp.slice(lp.lastIndexOf(":") + 1);
-          if (p === want) {
-            const pid = Number(parts[4]);
-            if (Number.isInteger(pid) && pid > 0) return pid;
+      function storeOf() {
+        return entryOf() || fallbackEntryOf();
+      }
+      function fieldOf(name, v, write) {
+        const e = storeOf();
+        if (write) {
+          if (e[name] !== v) {
+            e[name] = v;
+            persistCrashField();
           }
+          return e;
         }
+        return e[name];
       }
-      return null;
-    }
-    function parseSsPid(out) {
-      const m = out && /pid=(\d+)/.exec(String(out));
-      return m ? Number(m[1]) : null;
-    }
-    function parseWmicCommandLine(out) {
-      if (!out) return null;
-      const m = /CommandLine=([\s\S]*)/.exec(String(out));
-      const v = m ? m[1].trim() : "";
-      return v || null;
-    }
-    function parsePowerShellCommandLine(out) {
-      const v = out ? String(out).trim() : "";
-      return v || null;
-    }
-    function normCmdline(s) {
-      return String(s || "").replace(/\\/g, "/");
+      function procFieldOf(name, v, write) {
+        const e = storeOf();
+        let p = e.process;
+        if (!p) {
+          p = e.process = {
+            child: null,
+            adoptedPid: null,
+            adopted: false,
+            observedOnly: false,
+            startDeadline: null,
+            restartAt: null,
+            spawnBlockedUntil: null,
+            missingNotified: false,
+            failStreak: 0,
+            lastProbeAt: null,
+            lastProbeOk: null,
+            lastProbeHttpOk: null,
+            lastFailure: null,
+            lastRestartAt: null
+          };
+        }
+        if (write) {
+          if (p[name] !== v) p[name] = v;
+          return p;
+        }
+        return p[name];
+      }
+      return { entryOf, fallbackEntryOf, persistCrashField, storeOf, fieldOf, procFieldOf };
     }
-    module2.exports = {
-      parseProcNetTcpInodes,
-      parseLsofPid,
-      parseNetstatPid,
-      parseSsPid,
-      parseWmicCommandLine,
-      parsePowerShellCommandLine,
-      normCmdline
-    };
+    module2.exports = { createMainRecord };
   }
 });
 
-// src/platform/os/exec-path.js
-var require_exec_path = __commonJS({
-  "src/platform/os/exec-path.js"(exports2, module2) {
+// src/platform/util/fs.js
+var require_fs = __commonJS({
+  "src/platform/util/fs.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
     var path2 = require("node:path");
-    var os2 = require("node:os");
-    function candidateNames(base, platform) {
-      const win = (platform || process.platform) === "win32";
-      if (!win) return [base];
-      const exts = String(process.env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean);
-      const names = [base + ".exe", base + ".cmd", base + ".bat"];
-      for (const e of exts) {
-        const n = base + e.toLowerCase();
-        if (!names.some((x) => x.toLowerCase() === n)) names.push(n);
-      }
-      names.push(base);
-      return [...new Set(names)];
-    }
-    function isExecutableFile(p, platform) {
+    function dirSizeBytes(root) {
+      let total = 0;
+      let seen = 0;
+      const MAX = 2e5;
+      const walk = (dir) => {
+        if (seen > MAX) return;
+        let entries;
+        try {
+          entries = fs2.readdirSync(dir, { withFileTypes: true });
+        } catch {
+          return;
+        }
+        for (const en of entries) {
+          if (seen > MAX) return;
+          const full = path2.join(dir, en.name);
+          if (en.isSymbolicLink()) continue;
+          if (en.isDirectory()) walk(full);
+          else if (en.isFile()) {
+            try {
+              const st = fs2.statSync(full);
+              total += st.size;
+            } catch {
+            }
+          }
+          seen++;
+        }
+      };
       try {
-        if (!fs2.statSync(p).isFile()) return false;
-        if ((platform || process.platform) === "win32") return true;
-        fs2.accessSync(p, fs2.constants.X_OK);
-        return true;
+        walk(root);
       } catch {
-        return false;
       }
+      return total;
     }
-    function firstExecutable(dir, base, platform) {
-      if (!dir) return null;
-      for (const name of candidateNames(base, platform)) {
-        const p = path2.join(dir, name);
+    function writeAtomic(file, data, opts) {
+      const mode = opts && typeof opts.mode === "number" ? opts.mode : 384;
+      const fp = path2.resolve(file);
+      const dir = path2.dirname(fp);
+      const tmp = fp + ".tmp." + process.pid + "." + Date.now();
+      try {
+        if (!fs2.existsSync(dir)) fs2.mkdirSync(dir, { recursive: true });
+        fs2.writeFileSync(tmp, data, { mode });
         try {
-          if (isExecutableFile(p, platform)) return p;
+          fs2.chmodSync(tmp, mode);
         } catch {
         }
-      }
-      return null;
-    }
-    function standardDirs(platform, home, env) {
-      const pl = platform || process.platform;
-      const h = home || os2.homedir();
-      const e = env || process.env;
-      const dirs = [];
-      if (pl === "win32") {
-        if (e.APPDATA) dirs.push(path2.join(e.APPDATA, "npm"));
-        if (e.LOCALAPPDATA) dirs.push(path2.join(e.LOCALAPPDATA, "Programs", "dsh-supervisor"));
-        dirs.push(path2.join(h, ".local", "bin"));
-      } else {
-        dirs.push(path2.join(h, ".local", "bin"));
-        dirs.push(path2.join(h, ".npm-global", "bin"));
-        if (pl === "darwin") {
-          dirs.push("/opt/homebrew/bin");
-          dirs.push("/usr/local/bin");
+        fs2.renameSync(tmp, fp);
+        try {
+          fs2.chmodSync(fp, mode);
+        } catch {
         }
-      }
-      return dirs;
-    }
-    function inPath(base, platform, env) {
-      const e = env || process.env;
-      const raw = e.PATH || e.Path || "";
-      for (const d of raw.split(path2.delimiter)) {
-        if (!d) continue;
-        const hit = firstExecutable(d, base, platform);
-        if (hit) return hit;
-      }
-      return null;
-    }
-    function resolveExecutable(base, opts) {
-      const o = opts || {};
-      const pl = o.platform;
-      const env = o.env;
-      const E = env || process.env;
-      if (o.envVar && E[o.envVar]) {
-        const v = E[o.envVar];
-        if (isExecutableFile(v, pl)) return v;
-      }
-      const inPathHit = inPath(base, pl, env);
-      if (inPathHit) return inPathHit;
-      for (const d of [...o.extraDirs || [], ...standardDirs(pl, void 0, env)]) {
-        const hit = firstExecutable(d, base, pl);
-        if (hit) return hit;
-      }
-      return null;
-    }
-    function npxBin(opts) {
-      const o = opts || {};
-      const pl = o.platform || process.platform;
-      const env = o.env || process.env;
-      if (pl !== "win32") return "npx";
-      const resolved = resolveExecutable("npx", { platform: pl, env, extraDirs: [
-        env.APPDATA ? path2.join(env.APPDATA, "npm") : null
-      ].filter(Boolean) });
-      if (resolved) return resolved;
-      return "npx.cmd";
-    }
-    function npmBin(opts) {
-      const o = opts || {};
-      const pl = o.platform || process.platform;
-      const env = o.env || process.env;
-      if (pl !== "win32") return "npm";
-      const resolved = resolveExecutable("npm", { platform: pl, env, extraDirs: [
-        env.APPDATA ? path2.join(env.APPDATA, "npm") : null
-      ].filter(Boolean) });
-      if (resolved) return resolved;
-      return "npm.cmd";
-    }
-    var DSH_PKG = ["@deepseek-ai", "dsh"];
-    function dshJsIn(prefix) {
-      return path2.join(prefix, "node_modules", ...DSH_PKG, "lib", "bin.js");
-    }
-    function resolveDsh(opts) {
-      const o = opts || {};
-      const pl = o.platform || process.platform;
-      const env = o.env || process.env;
-      const isFile = (p) => {
+        return fp;
+      } catch (e) {
         try {
-          return fs2.statSync(p).isFile();
+          if (fs2.existsSync(tmp)) fs2.truncateSync(tmp, 0);
         } catch {
-          return false;
         }
-      };
-      const asJs = (bin, launcher) => ({ runtime: process.execPath, bin, isJs: true, launcher: launcher || null });
-      if (env.DSH_BIN) {
+        throw e;
+      }
+    }
+    module2.exports = { dirSizeBytes, writeAtomic };
+  }
+});
+
+// src/app/state/main-store.js
+var require_main_store = __commonJS({
+  "src/app/state/main-store.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var path2 = require("node:path");
+    var { writeAtomic } = require_fs();
+    function createMainStore(deps) {
+      const g = deps || {};
+      const config = () => typeof g.getConfig === "function" ? g.getConfig() || {} : {};
+      const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
+      let live = null;
+      let corrupt = false;
+      function dshMainFile() {
         try {
-          const r = fs2.realpathSync(env.DSH_BIN);
-          if (isFile(r)) return asJs(r, env.DSH_BIN);
+          return path2.join(path2.dirname(config().stateFile), "dsh-main.json");
         } catch {
+          return null;
         }
       }
-      const hit = resolveExecutable("dsh", { platform: pl, env });
-      if (hit) {
+      function registryFileName() {
         try {
-          const real = fs2.realpathSync(hit);
-          if (isFile(real) && /\.(js|cjs|mjs)$/i.test(real)) return asJs(real, hit);
+          const b = path2.basename(config().stateFile || "state.json", ".json");
+          return b === "state" ? "managed-objects.json" : b + ".managed-objects.json";
         } catch {
+          return "managed-objects.json";
         }
-        const js = dshJsIn(path2.dirname(hit));
-        if (isFile(js)) return asJs(js, hit);
-        if (isFile(hit) && !/\.(cmd|bat|exe)$/i.test(hit)) return asJs(hit, hit);
-        return { runtime: null, bin: hit, isJs: false, launcher: hit };
-      }
-      if (o.npmRoot) {
-        const js = dshJsIn(o.npmRoot);
-        if (isFile(js)) return asJs(js, null);
       }
-      return null;
-    }
-    function knownDshEntries(opts) {
-      const o = opts || {};
-      const out = [];
-      try {
-        const r = resolveDsh(o);
-        if (r) {
-          if (typeof r.bin === "string" && r.bin) out.push(r.bin);
-          if (typeof r.launcher === "string" && r.launcher) out.push(r.launcher);
+      function readDshMainFile() {
+        try {
+          const f = dshMainFile();
+          if (f && fs2.existsSync(f)) {
+            const j = JSON.parse(fs2.readFileSync(f, "utf8"));
+            corrupt = false;
+            return {
+              guardian: j.guardian === true,
+              remoteMode: legacyRemoteMode(j),
+              remoteToken: String(j.remoteToken || "")
+            };
+          }
+        } catch (e) {
+          corrupt = true;
+          const l = logger();
+          if (l && l.warn) l.warn("dsh-main.json \u8BFB/\u89E3\u6790\u5931\u8D25\uFF0C\u5199\u56DE\u5C06\u88AB\u62D2\u7EDD\u76F4\u81F3\u663E\u5F0F\u91CD\u8BBE remoteToken: " + (e && e.message || e));
         }
-      } catch {
+        return { guardian: false, remoteMode: "off", remoteToken: "" };
       }
-      if (o.npmRoot) {
+      function legacyRemoteMode(j) {
+        if (j.remoteMode === "lan" || j.remoteMode === "wan") return j.remoteMode;
+        if (j.remoteEnabled === true && j.frpEnabled === true) return "wan";
+        if (j.remoteEnabled === true) return "lan";
+        return "off";
+      }
+      function readDshMain() {
+        if (live) return live;
+        live = readDshMainFile();
+        return live;
+      }
+      function writeDshMain(meta) {
+        const m = meta || {};
+        if (!live) live = readDshMainFile();
+        if (corrupt && !(typeof m.remoteToken === "string" && m.remoteToken)) {
+          const l = logger();
+          if (l && l.warn) l.warn("_writeDshMain: \u6587\u4EF6\u635F\u574F\u6001\uFF0C\u62D2\u7EDD\u4EE5\u9ED8\u8BA4\u503C\u8986\u76D6\u5199\u56DE");
+          return;
+        }
+        corrupt = false;
+        Object.assign(live, m);
+        const f = dshMainFile();
+        if (!f) return;
         try {
-          out.push(dshJsIn(o.npmRoot));
-        } catch {
+          const cur = readDshMain();
+          const merged = Object.assign({}, cur, m);
+          const dir = path2.dirname(f);
+          fs2.mkdirSync(dir, { recursive: true });
+          const body = JSON.stringify({
+            guardian: merged.guardian === true,
+            remoteMode: merged.remoteMode === "lan" || merged.remoteMode === "wan" ? merged.remoteMode : "off",
+            remoteToken: String(merged.remoteToken || "")
+          }, null, 2);
+          writeAtomic(f, body, { mode: 384 });
+        } catch (e) {
+          const l = logger();
+          if (l && l.warn) l.warn("_writeDshMain: " + (e && e.message || e));
         }
       }
-      if (typeof o.dshBin === "string" && /^(?:[A-Za-z]:[\\/]|[\\/])/.test(o.dshBin)) out.push(o.dshBin);
-      return [...new Set(out.filter((x) => typeof x === "string" && x))];
+      return { dshMainFile, registryFileName, readDshMain, readDshMainFile, writeDshMain };
     }
-    function commandEntryViolation(cmdArr, opts) {
-      const o = opts || {};
-      const rp = o.realpath || ((p) => fs2.realpathSync(p));
-      if (!Array.isArray(cmdArr) || !cmdArr.length) return null;
-      const head = String(cmdArr[0] || "");
-      const NODE_HEAD = /* @__PURE__ */ new Set(["node", "node.exe"]);
-      const baseOf = (p) => String(p).split(/[\\/]/).pop().toLowerCase();
-      let entry = head;
-      const nodeHead = NODE_HEAD.has(baseOf(head));
-      if (nodeHead) {
-        if (cmdArr.length < 2) return "\u542F\u52A8\u547D\u4EE4\u4EE5 node \u6253\u5934\u4F46\u7F3A\u5C11 DSH \u5165\u53E3\u53C2\u6570";
-        entry = String(cmdArr[1] || "");
+    module2.exports = { createMainStore };
+  }
+});
+
+// src/app/state/field-tables.js
+var require_field_tables = __commonJS({
+  "src/app/state/field-tables.js"(exports2, module2) {
+    "use strict";
+    var ENTRY_FIELDS = [
+      // [读写 helper 后缀, entry 字段]
+      ["CrashWindowStart", "crashWindowStart"],
+      ["CrashWindowRestarts", "crashWindowRestarts"],
+      ["BackoffLevel", "backoffLevel"],
+      ["BackoffUntil", "backoffUntil"],
+      ["RestartCount", "restartCount"]
+    ];
+    var PROC_FIELDS = [
+      // [读写 helper 后缀, process 字段, 是否布尔]
+      ["Child", "child", false],
+      ["AdoptPid", "adoptedPid", false],
+      ["Adopted", "adopted", true],
+      ["ObservedOnly", "observedOnly", true],
+      ["FailStreak", "failStreak", false],
+      ["RestartAt", "restartAt", false],
+      ["StartDeadline", "startDeadline", false],
+      ["SpawnBlockedUntil", "spawnBlockedUntil", false],
+      ["MissingNotified", "missingNotified", true],
+      ["LastProbeAt", "lastProbeAt", false],
+      ["LastProbeOk", "lastProbeOk", false],
+      ["LastProbeHttpOk", "lastProbeHttpOk", false],
+      ["LastFailure", "lastFailure", false],
+      ["LastRestartAt", "lastRestartAt", false]
+    ];
+    module2.exports = { ENTRY_FIELDS, PROC_FIELDS };
+  }
+});
+
+// src/app/state/phase.js
+var require_phase = __commonJS({
+  "src/app/state/phase.js"(exports2, module2) {
+    "use strict";
+    function legacyToEntryPhase(ph) {
+      return { STOPPED: "stopped", STARTING: "starting", RUNNING: "running", RESTARTING: "restarting", BACKOFF: "backoff", OBSERVED: "stopped" }[ph] || "stopped";
+    }
+    function entryToLegacyPhase(ph) {
+      return { stopped: "STOPPED", starting: "STARTING", running: "RUNNING", restarting: "RESTARTING", backoff: "BACKOFF" }[ph] || "STOPPED";
+    }
+    module2.exports = { legacyToEntryPhase, entryToLegacyPhase };
+  }
+});
+
+// src/app/state/fields.js
+var require_fields = __commonJS({
+  "src/app/state/fields.js"(exports2, module2) {
+    "use strict";
+    var { ENTRY_FIELDS, PROC_FIELDS } = require_field_tables();
+    var { legacyToEntryPhase, entryToLegacyPhase } = require_phase();
+    function createFields(deps) {
+      const g = deps || {};
+      const record = g.record;
+      const mainStore = g.mainStore;
+      const reg = () => typeof g.getManagedObjects === "function" ? g.getManagedObjects() : null;
+      const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
+      function toEntry(ph) {
+        return legacyToEntryPhase(ph);
       }
-      if (!entry) return "\u542F\u52A8\u547D\u4EE4\u7F3A\u5C11 DSH \u5165\u53E3";
-      const isAbsolute = (p) => /^(?:[A-Za-z]:[\\/]|[\\/])/.test(String(p));
-      const hasSep = (p) => /[\\/]/.test(String(p));
-      if (!hasSep(entry)) {
-        if (nodeHead && o.requireAbsoluteEntry) {
-          return "command[0] \u4E3A node \u65F6 command[1] \u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84\u7684 DSH \u5165\u53E3\uFF08\u76F8\u5BF9/\u88F8\u540D\u4F1A\u6309\u5DE5\u4F5C\u76EE\u5F55\u6216 PATH \u89E3\u6790\uFF09";
-        }
-        return null;
+      function toLegacy(ph) {
+        return entryToLegacyPhase(ph);
       }
-      if (!isAbsolute(entry)) {
-        return "DSH \u5165\u53E3\u4E0D\u63A5\u53D7\u76F8\u5BF9\u8DEF\u5F84\uFF08\u4F1A\u6309\u8C03\u7528\u65B9\u5DE5\u4F5C\u76EE\u5F55\u89E3\u6790\uFF1B\u6C99\u7BB1\u5B9E\u4F8B\u7684\u8BE5\u76EE\u5F55\u6C99\u7BB1\u5185\u53EF\u5199\uFF09";
+      function phase() {
+        const e = record.storeOf();
+        const p = e.process || null;
+        const upper = entryToLegacyPhase(e.phase || "stopped");
+        if (upper === "STOPPED" && p && p.observedOnly && p.adopted) return "OBSERVED";
+        return upper;
       }
-      let real = null;
-      try {
-        real = rp(entry);
-      } catch {
+      function setPhase(upper) {
+        const e = record.storeOf();
+        const ph = legacyToEntryPhase(upper);
+        const m = reg();
+        try {
+          if (m && typeof m.setPhase === "function" && record.entryOf() === e) {
+            if (e.phase !== ph) m.setPhase("main", ph);
+          } else if (e.phase !== ph) {
+            e.phase = ph;
+          }
+        } catch (e2) {
+          const l = logger();
+          if (l && l.warn) l.warn("_mSetPhase: " + (e2 && e2.message || e2));
+        }
       }
-      if (typeof o.allowEntry === "function") {
+      function guardian() {
         try {
-          if (o.allowEntry(entry, real)) return null;
+          return mainStore.readDshMain().guardian === true;
         } catch {
+          return false;
         }
       }
-      if (real === null) return "DSH \u5165\u53E3\u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u89E3\u6790\uFF08fail-closed\uFF09\uFF1A" + entry;
-      for (const f of Array.isArray(o.files) ? o.files : []) {
+      function mainGuardian() {
+        return guardian();
+      }
+      function desired() {
+        return record.storeOf().desired === "stopped" ? "stopped" : "running";
+      }
+      function setDesired(v) {
+        const want = v === "stopped" ? "stopped" : "running";
+        const e = record.storeOf();
+        const m = reg();
         try {
-          if (rp(f) === real) return null;
-        } catch {
+          if (m && typeof m.update === "function" && record.entryOf() === e) {
+            if (e.desired !== want) m.update("main", { desired: want });
+          } else if (e.desired !== want) {
+            e.desired = want;
+          }
+        } catch (e2) {
+          const l = logger();
+          if (l && l.warn) l.warn("_mSetDesired: " + (e2 && e2.message || e2));
         }
       }
-      for (const r of Array.isArray(o.roots) ? o.roots : []) {
-        let rr;
-        try {
-          rr = rp(r);
-        } catch {
-          continue;
-        }
-        const base = String(rr).replace(/[\\/]+$/, "");
-        if (real === base || real.indexOf(base + path2.sep) === 0) return null;
+      function field(name, v) {
+        return arguments.length >= 2 ? record.fieldOf(name, v, true) : record.fieldOf(name, void 0, false);
       }
-      return "DSH \u5165\u53E3\u4E0D\u5728\u5141\u8BB8\u4F4D\u7F6E\uFF08\u987B\u4E3A\u8BE5\u5B9E\u4F8B\u5B89\u88C5\u6839\u4E4B\u4E0B\u7684\u5165\u53E3\uFF0C\u6216\u5185\u6838\u89E3\u6790\u51FA\u7684\u5DF2\u77E5 DSH \u5165\u53E3\uFF09\uFF1A" + entry;
+      function procField(name, v) {
+        return arguments.length >= 2 ? record.procFieldOf(name, v, true) : record.procFieldOf(name, void 0, false);
+      }
+      const getProc = (n) => record.procFieldOf(n);
+      const setProc = (n, v) => {
+        record.procFieldOf(n, v, true);
+      };
+      const getEntry = (n) => record.fieldOf(n);
+      const setEntry = (n, v) => {
+        record.fieldOf(n, v, true);
+      };
+      const accessors = {
+        phase: { get: () => phase(), set: (v) => {
+          setPhase(v);
+        } },
+        desired: { get: () => desired(), set: (v) => {
+          setDesired(v);
+        } },
+        child: { get: () => getProc("child"), set: (c) => {
+          setProc("child", c);
+        } },
+        adoptedPid: { get: () => getProc("adoptedPid"), set: (v) => {
+          setProc("adoptedPid", v);
+        } },
+        adopted: { get: () => getProc("adopted") === true, set: (v) => {
+          setProc("adopted", v === true);
+        } },
+        observedOnly: { get: () => getProc("observedOnly") === true, set: (v) => {
+          setProc("observedOnly", v === true);
+        } },
+        restartCount: { get: () => {
+          const v = getEntry("restartCount");
+          return typeof v === "number" ? v : 0;
+        }, set: (v) => {
+          setEntry("restartCount", v);
+        } },
+        spawnBlockedUntil: { get: () => {
+          const v = getProc("spawnBlockedUntil");
+          return v === void 0 ? null : v;
+        }, set: (v) => {
+          setProc("spawnBlockedUntil", v);
+        } },
+        missingNotified: { get: () => getProc("missingNotified") === true, set: (v) => {
+          setProc("missingNotified", v === true);
+        } }
+      };
+      return {
+        phase,
+        setPhase,
+        guardian,
+        mainGuardian,
+        desired,
+        setDesired,
+        field,
+        procField,
+        accessors,
+        legacyToEntryPhase: toEntry,
+        entryToLegacyPhase: toLegacy,
+        child: () => getProc("child"),
+        adoptPid: () => getProc("adoptedPid"),
+        observedOnly: () => getProc("observedOnly") === true,
+        setObservedOnly: (v) => {
+          setProc("observedOnly", v === true);
+        },
+        ENTRY_FIELDS,
+        PROC_FIELDS
+      };
     }
-    module2.exports = {
-      resolveExecutable,
-      candidateNames,
-      standardDirs,
-      npmBin,
-      npxBin,
-      resolveDsh,
-      dshJsIn,
-      knownDshEntries,
-      commandEntryViolation,
-      isExecutableFile
-    };
+    module2.exports = { createFields };
   }
 });
 
-// src/platform/os/pidlookup/probe.js
-var require_probe = __commonJS({
-  "src/platform/os/pidlookup/probe.js"(exports2, module2) {
+// src/app/state/store.js
+var require_store = __commonJS({
+  "src/app/state/store.js"(exports2, module2) {
     "use strict";
     var fs2 = require("node:fs");
-    var ex2 = require_exec();
-    var { isExecutableFile } = require_exec_path();
-    var {
-      parseProcNetTcpInodes,
-      parseLsofPid,
-      parseNetstatPid,
-      parseSsPid,
-      parseWmicCommandLine,
-      parsePowerShellCommandLine
-    } = require_norm();
-    var isLinux = process.platform === "linux";
-    var isMac = process.platform === "darwin";
-    var isWindows = process.platform === "win32";
-    function linuxListeningInodes(port) {
-      const inodes = /* @__PURE__ */ new Set();
-      for (const f of ["/proc/net/tcp", "/proc/net/tcp6"]) {
-        let txt = "";
+    var path2 = require("node:path");
+    var { writeAtomic } = require_fs();
+    function createStore(deps) {
+      const g = deps || {};
+      const record = g.record;
+      const fields = g.fields;
+      const mainStore = g.mainStore;
+      const upgradeHold = g.upgradeHold;
+      const config = () => typeof g.getConfig === "function" ? g.getConfig() || {} : {};
+      const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
+      const events = () => typeof g.getEvents === "function" ? g.getEvents() : null;
+      const instances = () => typeof g.getInstances === "function" ? g.getInstances() : null;
+      const views = () => typeof g.getViews === "function" ? g.getViews() : null;
+      const reg = () => typeof g.getManagedObjects === "function" ? g.getManagedObjects() : null;
+      let lastStateBody = null;
+      function writeState(force) {
         try {
-          txt = fs2.readFileSync(f, "utf8");
-        } catch {
-          continue;
+          const snap = views().status();
+          const updatedAt = snap.updatedAt;
+          snap.updatedAt = null;
+          const body = JSON.stringify(snap, null, 2);
+          if (!force && body === lastStateBody) return;
+          lastStateBody = body;
+          snap.updatedAt = updatedAt;
+          const dir = path2.dirname(config().stateFile);
+          fs2.mkdirSync(dir, { recursive: true });
+          writeAtomic(config().stateFile, JSON.stringify(snap, null, 2), { mode: 384 });
+        } catch (e) {
+          const l = logger();
+          if (l && l.error) l.error("state write failed: " + e.message);
         }
-        for (const x of parseProcNetTcpInodes(txt, port)) inodes.add(x);
       }
-      return inodes;
-    }
-    function linuxFind(port) {
-      try {
-        const inodes = linuxListeningInodes(port);
-        if (!inodes.size) return null;
-        const entries = fs2.readdirSync("/proc").filter((e) => /^\d+$/.test(e));
-        for (const pid of entries) {
-          let fds;
-          try {
-            fds = fs2.readdirSync("/proc/" + pid + "/fd");
-          } catch {
-            continue;
+      function loadState() {
+        let raw = null;
+        try {
+          raw = JSON.parse(fs2.readFileSync(config().stateFile, "utf8"));
+        } catch (e) {
+          if (!e || e.code !== "ENOENT") {
+            const l = logger();
+            if (l && l.warn) l.warn("state load failed\uFF08\u6309\u7A7A\u72B6\u6001\u7EE7\u7EED\uFF09: " + (e && e.message || e));
           }
-          for (const fd of fds) {
-            let link;
-            try {
-              link = fs2.readlinkSync("/proc/" + pid + "/fd/" + fd);
-            } catch {
-              continue;
-            }
-            if (inodes.has(link)) return Number(pid);
+        }
+        if (raw && typeof raw === "object") try {
+          if (raw.desired === "stopped" || raw.desired === "running") {
+            const m = reg();
+            const registryHasSource = !!(m && m._loadedFromDisk);
+            if (!registryHasSource) fields.setDesired(raw.desired);
           }
+          if (typeof raw.restartCount === "number") record.fieldOf("restartCount", raw.restartCount, true);
+          if (typeof raw.backoffLevel === "number") record.fieldOf("backoffLevel", raw.backoffLevel, true);
+          if (typeof raw.crashWindowStart === "number" || raw.crashWindowStart === null) record.fieldOf("crashWindowStart", raw.crashWindowStart, true);
+          if (typeof raw.crashWindowRestarts === "number") record.fieldOf("crashWindowRestarts", raw.crashWindowRestarts, true);
+          if (typeof raw.lastFailure === "string" || raw.lastFailure === null) record.procFieldOf("lastFailure", raw.lastFailure, true);
+          if (typeof raw.lastRestartAt === "string" || raw.lastRestartAt === null) record.procFieldOf("lastRestartAt", raw.lastRestartAt, true);
+          if (raw.upgradeHold === true) upgradeHold.enter();
+          if (raw.shellHalted === true && typeof g.setShellHalted === "function") g.setShellHalted(true);
+        } catch (e) {
+          const l = logger();
+          if (l && l.warn) l.warn("state restore partial\uFF08\u5B57\u6BB5\u7EA7\u8DF3\u8FC7\uFF0Cboot \u4ECD\u7EE7\u7EED\uFF09: " + (e && e.message || e));
         }
-      } catch {
-      }
-      return null;
-    }
-    function macFind(port) {
-      try {
-        const out = ex2.runOut("lsof", ["-nP", "-iTCP:" + port, "-sTCP:LISTEN"], { timeoutMs: 3e3 });
-        if (!out) return null;
-        return parseLsofPid(out);
-      } catch {
-      }
-      return null;
-    }
-    function winFind(port) {
-      try {
-        const out = ex2.runOut("netstat", ["-ano"], { timeoutMs: 3e3 });
-        if (!out) return null;
-        return parseNetstatPid(out, port);
-      } catch {
-      }
-      return null;
-    }
-    function linuxFindSs(port) {
-      const candidates = ["ss", "/usr/sbin/ss", "/usr/bin/ss", "/bin/ss"];
-      for (const ssBin of candidates) {
-        if (ssBin.includes("/") && !isExecutableFile(ssBin)) continue;
         try {
-          const out = ex2.runOut(ssBin, ["-tlnHp", "sport = :" + port], { timeoutMs: 3e3 });
-          const pid = parseSsPid(out);
-          if (pid !== null) return pid;
+          fields.setPhase("STOPPED");
         } catch {
         }
       }
-      return null;
-    }
-    function isAlive(pid) {
-      if (!Number.isInteger(pid) || pid <= 0) return false;
-      try {
-        process.kill(pid, 0);
-        return true;
-      } catch (e) {
-        return !!e && e.code === "EPERM";
-      }
-    }
-    function isZombie(pid) {
-      if (!Number.isInteger(pid) || pid <= 0 || isWindows) return false;
-      if (isLinux) {
+      function migrateMainRecord() {
         try {
-          const st = fs2.readFileSync("/proc/" + pid + "/stat", "utf8");
-          const idx = st.lastIndexOf(") ");
-          return idx >= 0 && st[idx + 2] === "Z";
-        } catch {
-          return false;
+          const im = instances();
+          if (!im || !Array.isArray(im.instances)) return;
+          const idx = im.instances.findIndex((i) => i.id === "main");
+          if (idx < 0) return;
+          const main = im.instances[idx];
+          const f = mainStore.dshMainFile();
+          if (f && !fs2.existsSync(f)) {
+            mainStore.writeDshMain({
+              guardian: main.guardian === true,
+              remoteMode: main.remoteEnabled === true ? main.frpEnabled === true ? "wan" : "lan" : "off",
+              remoteToken: String(main.remoteToken || "")
+            });
+          }
+          im.instances.splice(idx, 1);
+          if (im.save) {
+            try {
+              im.save();
+            } catch {
+            }
+          }
+          const l = logger();
+          if (l && l.info) l.info("[main] \u6982\u5FF5\u6E05\u5206\uFF1Amain \u8BB0\u5F55\u5DF2\u8FC1\u51FA instances.json \u2192 dsh-main.json");
+          const ev = events();
+          if (ev) ev.append("main_meta_migrated", {});
+        } catch (e) {
+          const l = logger();
+          if (l && l.warn) l.warn("_migrateMainRecord: " + (e && e.message));
         }
       }
-      try {
-        const o = ex2.runOut("ps", ["-o", "state=", "-p", String(pid)], { timeoutMs: 3e3 });
-        return !!o && /^Z/.test(o.trim());
-      } catch {
-        return false;
-      }
+      return { writeState, loadState, migrateMainRecord };
     }
-    function readCmdline(pid) {
-      if (isLinux) {
-        try {
-          const buf = fs2.readFileSync("/proc/" + pid + "/cmdline");
-          return buf.toString("utf8").replace(/\0/g, " ").trim();
-        } catch {
-          return null;
+    module2.exports = { createStore };
+  }
+});
+
+// src/app/state/desired.js
+var require_desired = __commonJS({
+  "src/app/state/desired.js"(exports2, module2) {
+    "use strict";
+    var fs2 = require("node:fs");
+    var { writeAtomic } = require_fs();
+    function createDesired(deps) {
+      const g = deps || {};
+      const fields = g.fields;
+      const store = g.store;
+      const intents = () => typeof g.getIntents === "function" ? g.getIntents() : null;
+      const events = () => typeof g.getEvents === "function" ? g.getEvents() : null;
+      const configPath = () => typeof g.getConfigPath === "function" ? g.getConfigPath() : null;
+      const logger = () => typeof g.getLogger === "function" ? g.getLogger() : null;
+      const setCrashHalted = typeof g.setCrashHalted === "function" ? g.setCrashHalted : () => {
+      };
+      const setManualRestart = typeof g.setManualRestart === "function" ? g.setManualRestart : () => {
+      };
+      const tick = () => {
+        if (typeof g.tick === "function") g.tick();
+      };
+      const stopProcess = (why) => {
+        if (typeof g.stopProcess === "function") g.stopProcess(why);
+      };
+      function setDesired(v) {
+        if (v !== "running" && v !== "stopped") return { error: "invalid desired" };
+        if (v === "running") {
+          const it = intents();
+          if (it) it.register("start");
+          setCrashHalted(false);
         }
-      }
-      if (isMac) {
-        try {
-          const o = ex2.runOut("ps", ["-o", "command=", "-p", String(pid)], { timeoutMs: 3e3 });
-          return o ? o.trim() || null : null;
-        } catch {
-          return null;
+        if (v === "running" && fields.phase() === "OBSERVED") {
+          fields.setObservedOnly(false);
+          fields.setPhase("STOPPED");
+        }
+        if (v === "stopped" && fields.phase() === "OBSERVED" && fields.observedOnly()) {
+          stopProcess("desired_stopped");
+        }
+        if (fields.desired() !== v) {
+          fields.setDesired(v);
+          const ev = events();
+          if (ev) ev.append("desired_changed", { desired: v });
+          store.writeState();
         }
+        tick();
+        return { ok: true, desired: fields.desired() };
       }
-      if (isWindows) {
-        const out = ex2.runOut("wmic", ["process", "where", "ProcessId=" + pid, "get", "CommandLine", "/value"], { timeoutMs: 5e3 });
-        const viaWmic = parseWmicCommandLine(out);
-        if (viaWmic) return viaWmic;
-        {
-          const ps = "(Get-CimInstance Win32_Process -Filter 'ProcessId=" + pid + "').CommandLine";
-          const o = ex2.runOut("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { timeoutMs: 5e3 });
-          return parsePowerShellCommandLine(o);
+      function requestRestart() {
+        if (fields.desired() === "stopped") {
+          const ev2 = events();
+          if (ev2) ev2.append("manual_restart_requested", { ignored: "desired=stopped" });
+          return { ok: false, error: "desired=stopped\uFF0C\u8BF7\u5148 /start" };
         }
+        setManualRestart(true);
+        setCrashHalted(false);
+        const it = intents();
+        if (it) it.register("restart");
+        const ev = events();
+        if (ev) ev.append("manual_restart_requested", {});
+        tick();
+        return { ok: true };
       }
-      return null;
-    }
-    function pgrepList(pattern) {
-      const out = [];
-      const readCmd = (pid) => readCmdline(pid) || "";
-      try {
-        if (isMac) {
-          const pids = (ex2.runOut("pgrep", ["-f", String(pattern)], { timeoutMs: 3e3 }) || "").split(/\r?\n/);
-          for (const line of pids) {
-            const pid = parseInt(line.trim(), 10);
-            if (!Number.isInteger(pid) || pid <= 0) continue;
-            const cmd2 = readCmd(pid);
-            if (!cmd2) continue;
-            out.push({ pid, cmdline: cmd2 });
+      function persistConfigPatch(patch) {
+        const p = configPath();
+        if (!p) return false;
+        const abort = (m) => {
+          const l = logger();
+          if (l && l.warn) l.warn("config persist aborted (fail-closed): " + m);
+          const ev = events();
+          if (ev) {
+            try {
+              ev.append("config_persist_aborted", { reason: m });
+            } catch {
+            }
           }
-          return out;
-        }
-        if (isWindows) {
-          const ps = "Get-CimInstance Win32_Process | Select-Object ProcessId,CommandLine | ConvertTo-Json -Compress";
-          const j = ex2.runOut("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { timeoutMs: 8e3 }) || "";
-          let arr = [];
+          return false;
+        };
+        try {
+          let cur = {};
+          let raw = null;
           try {
-            arr = JSON.parse(j);
-            if (!Array.isArray(arr)) arr = [arr];
-          } catch {
+            raw = fs2.readFileSync(p, "utf8");
+          } catch (e) {
+            if (!e || e.code !== "ENOENT") return abort("read failed: " + (e && e.message || e));
           }
-          for (const it of arr) {
-            if (!it || !it.ProcessId) continue;
-            const pid = Number(it.ProcessId);
-            if (!Number.isInteger(pid) || pid <= 0) continue;
-            const cmd2 = String(it.CommandLine || "");
-            if (!cmd2.includes(pattern)) continue;
-            out.push({ pid, cmdline: cmd2 });
+          if (raw !== null) {
+            try {
+              cur = JSON.parse(raw);
+              if (!cur || typeof cur !== "object" || Array.isArray(cur)) throw new Error("root is not an object");
+            } catch (e) {
+              return abort("parse failed, original bytes preserved: " + (e && e.message || e));
+            }
           }
-          return out;
-        }
-        const res = ex2.runOut("pgrep", ["-af", String(pattern)], { timeoutMs: 3e3 }) || "";
-        for (const line of res.split(/\r?\n/)) {
-          const m = /^(\d+)\s+([\s\S]*)$/.exec(line.trim());
-          if (m) out.push({ pid: Number(m[1]), cmdline: m[2] });
+          Object.assign(cur, patch);
+          delete cur.switcherAutoStart;
+          writeAtomic(p, JSON.stringify(cur, null, 2), { mode: 384 });
+          return true;
+        } catch (e) {
+          const l = logger();
+          if (l && l.warn) l.warn("config persist failed: " + e.message);
+          return false;
         }
-      } catch {
-      }
-      return out;
-    }
-    module2.exports = {
-      linuxListeningInodes,
-      linuxFind,
-      macFind,
-      winFind,
-      linuxFindSs,
-      readCmdline,
-      pgrepList,
-      isAlive,
-      isZombie
-    };
-  }
-});
-
-// src/platform/os/pidlookup/index.js
-var require_pidlookup = __commonJS({
-  "src/platform/os/pidlookup/index.js"(exports2, module2) {
-    "use strict";
-    var {
-      parseProcNetTcpInodes,
-      parseLsofPid,
-      parseNetstatPid,
-      parseSsPid,
-      parseWmicCommandLine,
-      parsePowerShellCommandLine,
-      normCmdline
-    } = require_norm();
-    var {
-      linuxFind,
-      linuxFindSs,
-      macFind,
-      winFind,
-      readCmdline,
-      pgrepList,
-      isAlive,
-      isZombie
-    } = require_probe();
-    var isLinux = process.platform === "linux";
-    var isMac = process.platform === "darwin";
-    function findListeningPid(port) {
-      if (!Number.isInteger(port) || port <= 0) return null;
-      if (isLinux) {
-        const a = linuxFind(port);
-        if (a !== null && a !== void 0) return a;
-        return linuxFindSs(port);
       }
-      if (isMac) return macFind(port);
-      return winFind(port);
-    }
-    function isDshCmdline(pid) {
-      const cmd2 = readCmdline(pid);
-      if (!cmd2) return false;
-      return /(^|\s)(node|.*dsh.*)(\s|$)/i.test(cmd2) && /dsh/i.test(cmd2);
+      return { setDesired, requestRestart, persistConfigPatch };
     }
-    module2.exports = {
-      findListeningPid,
-      isAlive,
-      isZombie,
-      readCmdline,
-      normCmdline,
-      isDshCmdline,
-      pgrepList,
-      parseProcNetTcpInodes,
-      parseLsofPid,
-      parseNetstatPid,
-      parseSsPid,
-      parseWmicCommandLine,
-      parsePowerShellCommandLine
-    };
+    module2.exports = { createDesired };
   }
 });
 
@@ -27806,6 +27806,7 @@ var path = require("node:path");
 var os = require("node:os");
 var http = require("node:http");
 var ex = require_exec();
+var { readCmdline } = require_pidlookup();
 function findPackageRoot(start) {
   let d = start;
   for (let i = 0; i < 6; i += 1) {
@@ -27918,12 +27919,31 @@ function apiRequest(method, apiPath) {
   });
 }
 var LOCK_FILE = process.env.DSH_SUPERVISOR_LOCK_FILE || path.join(SUPERVISOR_DIR, "guard.lock");
+var LOCK_OWNER = { pid: process.pid, started: Date.now(), entry: process.argv[1] || "" };
+function readLock() {
+  let raw;
+  try {
+    raw = fs.readFileSync(LOCK_FILE, "utf8");
+  } catch {
+    return null;
+  }
+  try {
+    const j = JSON.parse(raw);
+    if (j && Number.isInteger(j.pid) && j.pid > 0) return j;
+  } catch {
+  }
+  const pid = parseInt(raw, 10);
+  return Number.isInteger(pid) && pid > 0 ? { pid } : null;
+}
+function isOwnGuardEntry(cmdline) {
+  return typeof cmdline === "string" && cmdline.includes("dsh-supervisor");
+}
 function acquireLock() {
   fs.mkdirSync(SUPERVISOR_DIR, { recursive: true });
   const tryCreate = () => {
     try {
       const fd = fs.openSync(LOCK_FILE, "wx");
-      fs.writeSync(fd, String(process.pid));
+      fs.writeSync(fd, JSON.stringify(LOCK_OWNER));
       fs.closeSync(fd);
       return true;
     } catch (e) {
@@ -27933,18 +27953,19 @@ function acquireLock() {
     }
   };
   if (tryCreate()) return true;
-  let holder = null;
-  try {
-    holder = parseInt(fs.readFileSync(LOCK_FILE, "utf8"), 10);
-  } catch {
-  }
-  if (Number.isInteger(holder) && holder > 0) {
+  const held = readLock();
+  if (held) {
+    let alive = false;
     try {
-      process.kill(holder, 0);
-      return false;
+      process.kill(held.pid, 0);
+      alive = true;
     } catch (err) {
-      if (err.code === "EPERM") return false;
+      alive = err.code === "EPERM";
     }
+    const cmdline = alive ? readCmdline(held.pid) : null;
+    if (alive && !cmdline) return false;
+    if (alive && isOwnGuardEntry(cmdline)) return false;
+    console.log("[supervisor] \u6E05\u7406\u9648\u65E7\u5B88\u536B\u9501\uFF08\u6301\u6709 pid " + held.pid + (alive ? " \u5B58\u6D3B\u4F46\u547D\u4EE4\u884C\u4E0D\u662F\u672C\u4EA7\u54C1\u7684\u5B88\u536B\u5165\u53E3\uFF1A" + cmdline : " \u5DF2\u9000\u51FA") + "\uFF09");
   }
   try {
     fs.unlinkSync(LOCK_FILE);
@@ -27954,10 +27975,8 @@ function acquireLock() {
 }
 function releaseLock() {
   try {
-    if (fs.existsSync(LOCK_FILE)) {
-      const holder = parseInt(fs.readFileSync(LOCK_FILE, "utf8"), 10);
-      if (holder === process.pid) fs.unlinkSync(LOCK_FILE);
-    }
+    const held = readLock();
+    if (held && held.pid === process.pid) fs.unlinkSync(LOCK_FILE);
   } catch {
   }
 }