@morlay/dsh-desktop-shell 0.2.5 → 0.2.7

package/dist/index.mjs

@@ -1,16 +1,42 @@
-import { r as loadAppConfig } from "./appconfig-BZ9wPROk.mjs";
-import { n as resolveDshHome } from "./dshhome-Dp89FOr-.mjs";
-import { t as DESKTOP_HOST_PACKAGE } from "./official-Cz9Mry1n.mjs";
-import { a as runtimeOverrides, i as installProfile, o as workspaceWithOverrides, r as PROFILE_WORKSPACE_NAME } from "./profile-project-BgQILDbu.mjs";
-import { i as ensureSeedProfile, r as SEED_RUNTIME_DIR_NAME } from "./seed-BF71UAuI.mjs";
-import { access, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { t as DESKTOP_HOST_PACKAGE } from "./official-BmgBsdhq.mjs";
+import { r as loadAppConfig, t as PROFILE_NAME } from "./appconfig-CSZh3JG7.mjs";
+import { n as resolveDshHome } from "./dshhome-DAJ9dkn2.mjs";
+import { a as ensureSeedProfile, i as SEED_RUNTIME_DIR_NAME } from "./seed-Bxr0BsCk.mjs";
+import { createRequire } from "node:module";
+import { access, appendFile, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { BrowserWindow, app, dialog, ipcMain, nativeTheme, protocol } from "electron";
+import { format } from "node:util";
+import "rolldown";
 import { spawn } from "node:child_process";
 import { once } from "node:events";
-import { Readable, Writable } from "node:stream";
 import { randomBytes } from "node:crypto";
+//#region src/electron.ts
+/**
+* `electron` 模块的**唯一入口**（壳自己的其它文件都从这里取）。
+*
+* 壳产物是 **ESM**（`.mjs`，Electron 28+ 支持 ESM 入口），而 `electron` 在 ESM 下**只有默认导出**：具名导入
+* 会抛 `SyntaxError: The requested module 'electron' does not provide an export named 'BrowserWindow'`，
+* 主进程在 `load` 阶段就没了。更麻烦的是**打包器会把"默认导入 + 解构 / 取属性"优化回具名导入**——那样又回到
+* 同一个错误。
+*
+* 所以这里**走运行期 `require`**：壳就是 Electron 主进程，`require("electron")` 正是它给这个模块的原生形态，
+* 打包器碰不到它。类型仍从 `electron` 取（类型导入会被擦除，不影响运行）。
+*/
+const electron = createRequire(import.meta.url)("electron");
+const app = electron.app;
+const BrowserWindow = electron.BrowserWindow;
+const dialog = electron.dialog;
+const ipcMain = electron.ipcMain;
+const nativeTheme = electron.nativeTheme;
+const protocol = electron.protocol;
+const Menu = electron.Menu;
+const MenuItem = electron.MenuItem;
+//#endregion
+//#region ../dsh-desktop-host/src/preload-source.ts
+/** 壳取 preload 的路径（`GET` 它得到可执行的 CJS 字节）。 */
+const PRELOAD_SOURCE_PATH = "/@dsh/preload.cjs";
+join("dist", "preload.cjs");
+//#endregion
 //#region src/ipc.ts
 const DESKTOP_IPC = {
 	directoryPick: "dsh-desktop:directory-pick",
@@ -61,6 +87,179 @@ function installDesktopDirectoryPicker(getWindow, scheme) {
 		return result;
 	});
 }
+//#endregion
+//#region ../dsh-desktop-host/src/paths.ts
+/** 应用 origin 下托管调试窗口前端产物的前缀。 */
+const DEVTOOLS_ASSETS_PREFIX = "/node-devtools";
+//#endregion
+//#region src/developer-endpoint.ts
+/** DevTools 前端在托管前缀下的入口路径（与上游底部面板用的是同一份产物）。 */
+const DEVTOOLS_ENTRY = "devtools_app.html";
+/**
+* 把 host 回报的调试端点拼成应用 origin 下的 DevTools 入口。
+* @param scheme - 应用自定义协议（壳派生自 app 名）。
+* @param endpoint - host 回报的 WebSocket 端点（`ws://127.0.0.1:<port>/<uuid>`）。
+* @returns 可在窗口里加载的入口 URL。
+* @throws 端点不是 WebSocket 端点，或它的值不能原样进查询串。
+*/
+function nodeInspectorDevtoolsUrl(scheme, endpoint) {
+	const target = new URL(endpoint);
+	if (target.protocol !== "ws:" && target.protocol !== "wss:") throw new Error(`dsh desktop: the inspector endpoint is not a WebSocket url: ${endpoint}`);
+	if (target.search !== "") throw new Error(`dsh desktop: the inspector endpoint must not carry a query: ${endpoint}`);
+	const socket = `${target.host}${target.pathname}`;
+	if (!/^[\u0021-\u007e]+$/u.test(socket) || socket.includes("&") || socket.includes("#")) throw new Error(`dsh desktop: the inspector endpoint is not usable in a query: ${endpoint}`);
+	return `${scheme}://app${DEVTOOLS_ASSETS_PREFIX}/${DEVTOOLS_ENTRY}?ws=${socket}&panel=console&disableLocaleInfoBar=true`;
+}
+//#endregion
+//#region src/developer-menu.ts
+function reportFailure(options, title, detail) {
+	console.error(`[dsh-shell] ${title}: ${detail}`);
+	const parent = options.mainWindow();
+	if (parent === void 0 || parent.isDestroyed()) dialog.showErrorBox(title, detail);
+	else dialog.showMessageBox(parent, {
+		type: "error",
+		message: title,
+		detail
+	});
+}
+function insertIntoViewMenu(menu, toggle) {
+	const view = menu?.items.find((entry) => entry.role === "viewMenu")?.submenu;
+	if (view === void 0) return false;
+	const devtools = view.items.findIndex((entry) => entry.role === "toggleDevTools");
+	const at = devtools === -1 ? view.items.length : devtools + 1;
+	view.insert(at, new MenuItem({ type: "separator" }));
+	view.insert(at + 1, new MenuItem(toggle));
+	return true;
+}
+function buildFallbackMenu(toggle) {
+	const template = [
+		...process.platform === "darwin" ? [{ role: "appMenu" }] : [],
+		{ role: "fileMenu" },
+		{ role: "editMenu" },
+		{
+			label: "View",
+			submenu: [
+				{ role: "reload" },
+				{ role: "forceReload" },
+				{ role: "toggleDevTools" },
+				{ type: "separator" },
+				toggle,
+				{ type: "separator" },
+				{ role: "resetZoom" },
+				{ role: "zoomIn" },
+				{ role: "zoomOut" },
+				{ type: "separator" },
+				{ role: "togglefullscreen" }
+			]
+		},
+		{ role: "windowMenu" }
+	];
+	return Menu.buildFromTemplate(template);
+}
+/**
+* 把「后端调试（Node Inspector）」挂进应用菜单的 View 里，并管理它那个 DevTools 窗口。
+* 勾选 ⇔ 端点开着 ⇔ 窗口在：关窗口、取消勾选、host 回报端点没了，三条都收敛到同一状态。
+* @param options - 协议、app 名与 host 取值函数。
+* @returns 退订与收尾。
+*/
+function installDeveloperMenu(options) {
+	let window;
+	let closingWindow = false;
+	let releaseInspected;
+	let toggleItem;
+	const setChecked = (checked) => {
+		if (toggleItem !== void 0) toggleItem.checked = checked;
+	};
+	function closeWindow() {
+		const current = window;
+		window = void 0;
+		if (current === void 0 || current.isDestroyed()) return;
+		closingWindow = true;
+		current.close();
+	}
+	function closeInspectorHost() {
+		releaseInspected?.();
+		releaseInspected = void 0;
+		closeWindow();
+		try {
+			options.host()?.endInspect();
+		} catch (error) {
+			console.error("[dsh-shell] host inspector shutdown failed", error);
+		}
+	}
+	function openWindow(endpoint) {
+		const current = window;
+		if (current !== void 0 && !current.isDestroyed()) {
+			current.focus();
+			return;
+		}
+		let target;
+		try {
+			target = nodeInspectorDevtoolsUrl(options.scheme, endpoint);
+		} catch (error) {
+			setChecked(false);
+			releaseInspected?.();
+			releaseInspected = void 0;
+			reportFailure(options, "后端调试", error instanceof Error ? error.message : String(error));
+			return;
+		}
+		const created = new BrowserWindow({
+			width: 1280,
+			height: 820,
+			title: `${options.appName} · Node Inspector`,
+			backgroundColor: "#202124"
+		});
+		window = created;
+		created.on("closed", () => {
+			if (window === created) window = void 0;
+			const closingOurselves = closingWindow;
+			closingWindow = false;
+			if (closingOurselves) return;
+			closeInspectorHost();
+			setChecked(false);
+		});
+		created.loadURL(target);
+	}
+	const toggle = {
+		id: "desktop-host-inspector",
+		label: "后端调试（Node Inspector）",
+		type: "checkbox",
+		checked: false,
+		click: (menu) => {
+			toggleItem = menu;
+			if (!menu.checked) {
+				closeInspectorHost();
+				return;
+			}
+			const host = options.host();
+			if (host === void 0) {
+				setChecked(false);
+				reportFailure(options, "后端调试", "后端进程还没就绪，稍后再试。");
+				return;
+			}
+			releaseInspected?.();
+			releaseInspected = host.onInspected((state) => {
+				if (state.url !== null) {
+					openWindow(state.url);
+					return;
+				}
+				setChecked(false);
+				closeWindow();
+				if (state.message !== void 0) reportFailure(options, "后端调试端点没有开起来", state.message);
+			});
+			try {
+				host.inspect(0);
+			} catch (error) {
+				releaseInspected?.();
+				releaseInspected = void 0;
+				setChecked(false);
+				reportFailure(options, "后端调试", error instanceof Error ? error.message : String(error));
+			}
+		}
+	};
+	if (!insertIntoViewMenu(Menu.getApplicationMenu(), toggle)) Menu.setApplicationMenu(buildFallbackMenu(toggle));
+	return { dispose: closeInspectorHost };
+}
 const DESKTOP_STREAM_PATH = "/.dsh/remote-stream";
 function encodeDesktopStreamOpen(endpoint, payload) {
 	return `${JSON.stringify({
@@ -206,6 +405,7 @@ function isDesktopHostEvent(value) {
 	if (!isRecord(value)) return false;
 	if (value.type === "ready") return value.protocolVersion === 1;
 	if (value.type === "fatal") return typeof value.message === "string" && (value.diagnostic === void 0 || typeof value.diagnostic === "string");
+	if (value.type === "inspected") return (value.url === null || typeof value.url === "string") && (value.message === void 0 || typeof value.message === "string");
 	return false;
 }
 //#endregion
@@ -230,7 +430,7 @@ async function exitsWithin(exit, milliseconds) {
 var DesktopHostProcess = class {
 	node;
 	runtimeDir;
-	projectDir;
+	profileDir;
 	inspectPort;
 	options;
 	child;
@@ -241,6 +441,7 @@ var DesktopHostProcess = class {
 	nextStreamId = 1;
 	pending = /* @__PURE__ */ new Map();
 	blockedResponses = /* @__PURE__ */ new Set();
+	inspectedListeners = /* @__PURE__ */ new Set();
 	readyResolve;
 	readyReject;
 	readyPromise = new Promise((resolve, reject) => {
@@ -251,16 +452,16 @@ var DesktopHostProcess = class {
 	stderr = "";
 	failureReported = false;
 	stopping = false;
-	constructor(node, runtimeDir, projectDir, inspectPort, options = {}) {
+	constructor(node, runtimeDir, profileDir, inspectPort, options) {
 		this.node = node;
 		this.runtimeDir = runtimeDir;
-		this.projectDir = projectDir;
+		this.profileDir = profileDir;
 		this.inspectPort = inspectPort;
 		this.options = options;
 	}
 	async start() {
 		if (this.child !== void 0) return this.readyPromise;
-		const entry = join(this.runtimeDir, "node_modules", ...DESKTOP_HOST_PACKAGE.split("/"), "lib", "index.js");
+		const entry = this.options.entry;
 		const packageManager = this.options.packageManager;
 		const args = [
 			"--expose-internals",
@@ -268,58 +469,46 @@ var DesktopHostProcess = class {
 			...this.inspectPort === void 0 ? [] : [`--inspect=127.0.0.1:${String(this.inspectPort)}`],
 			...this.options.nodeArgs ?? [],
 			entry,
+			"--profile-dir",
+			this.profileDir,
+			"--runtime-dir",
 			this.runtimeDir,
-			this.projectDir,
-			...packageManager === void 0 ? [] : [packageManager.pnpm, packageManager.nodeBin]
+			...packageManager === void 0 ? [] : [
+				"--pnpm",
+				packageManager.pnpm,
+				"--node-bin",
+				packageManager.nodeBin
+			]
 		];
 		const env = {
 			...Object.fromEntries(Object.entries(process.env).filter(([name]) => name !== "NODE_OPTIONS" && !name.startsWith("DSH_DESKTOP_") && !/^(?:npm|pnpm|corepack)_/iu.test(name))),
 			...this.options.extraEnv
 		};
 		const child = (this.options.spawn ?? spawn)(this.node, args, {
-			cwd: this.projectDir,
+			cwd: this.profileDir,
 			env,
 			stdio: [
 				"ignore",
 				"pipe",
 				"pipe",
-				"pipe",
-				"pipe",
 				"ipc"
 			]
 		});
-		const requestPipe = child.stdio[3];
-		const responsePipe = child.stdio[4];
-		if (!(requestPipe instanceof Writable) || !(responsePipe instanceof Readable)) {
-			child.kill("SIGTERM");
-			throw new Error("dsh desktop host did not expose the required byte pipes and IPC channel");
-		}
 		this.child = child;
-		this.requestPipe = requestPipe;
-		this.responsePipe = responsePipe;
+		const persist = (chunk) => {
+			if (this.options.logFile === void 0) return;
+			appendFile(this.options.logFile, chunk).catch(() => void 0);
+		};
 		child.stderr?.setEncoding("utf8");
 		child.stderr?.on("data", (chunk) => {
 			this.stderr = (this.stderr + chunk).slice(-65536);
 			process.stderr.write(`[dsh-host] ${chunk}`);
+			persist(chunk);
 		});
-		child.stdout?.pipe(process.stdout);
-		responsePipe.on("data", (chunk) => {
-			this.acceptResponseBytes(chunk);
-		});
-		responsePipe.once("end", () => {
-			try {
-				this.responseDecoder.finish();
-			} catch (error) {
-				this.fail(errorOf(error, "dsh desktop host response pipe failed"));
-				return;
-			}
-			this.fail(/* @__PURE__ */ new Error("dsh desktop host response pipe ended"));
-		});
-		requestPipe.once("error", (error) => {
-			this.fail(error);
-		});
-		responsePipe.once("error", (error) => {
-			this.fail(error);
+		child.stdout?.setEncoding("utf8");
+		child.stdout?.on("data", (chunk) => {
+			process.stdout.write(chunk);
+			persist(chunk);
 		});
 		child.on("message", (message) => {
 			if (!isDesktopHostEvent(message)) {
@@ -332,7 +521,14 @@ var DesktopHostProcess = class {
 				this.fail(new Error(message.message));
 				return;
 			}
-			this.readyResolve({ protocolVersion: message.protocolVersion });
+			if (message.type === "inspected") {
+				for (const listener of this.inspectedListeners) listener(message);
+				return;
+			}
+			this.readyResolve({
+				protocolVersion: message.protocolVersion,
+				origin: message.origin
+			});
 		});
 		child.once("error", (error) => {
 			this.fail(error);
@@ -388,6 +584,21 @@ var DesktopHostProcess = class {
 			});
 		});
 	}
+	inspect(port = 0) {
+		this.send({
+			type: "inspect",
+			port
+		});
+	}
+	endInspect() {
+		this.send({ type: "inspect-off" });
+	}
+	onInspected(listener) {
+		this.inspectedListeners.add(listener);
+		return () => {
+			this.inspectedListeners.delete(listener);
+		};
+	}
 	async stop() {
 		const child = this.child;
 		if (child === void 0) return;
@@ -592,33 +803,7 @@ var DesktopHostProcess = class {
 	}
 };
 //#endregion
-//#region ../../../vendor/deepseek-harness/packages/util/values/lib/index.js
-/** Duplicate-install-safe JSON and immutable-value helpers. @module @deepseek-ai/dsh-util-values */
-/**
-* Mark an unreachable closed-union branch.
-* @param value - impossible value; an unhandled typed variant fails at the call site.
-* @param context - optional switch-site label included in the failure message.
-* @returns never; a runtime value that escaped its type always throws.
-*/
-function assertNever(value, context) {
-	const rendered = JSON.stringify(value) ?? String(value);
-	throw new Error(`unreachable variant${context ? ` in ${context}` : ""}: ${rendered}`);
-}
-//#endregion
-//#region ../../../vendor/deepseek-harness/packages/util/crypto/lib/index.js
-/**
-* Random v4 UUID, minted from `crypto.getRandomValues`.
-* @returns the UUID string.
-*/
-function randomUUID() {
-	const bytes = globalThis.crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
-	const hex = Array.from(bytes, (byte, index) => {
-		return (index === 6 ? byte & 15 | 64 : index === 8 ? byte & 63 | 128 : byte).toString(16).padStart(2, "0");
-	}).join("");
-	return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
-}
-//#endregion
-//#region ../../../vendor/deepseek-harness/packages/client/shortcuts/lib/protocol.js
+//#region ../../../vendor/deepseek-harness/packages/client/shortcuts/src/binding.ts
 const keyNames = {
 	Slash: "/",
 	Comma: ",",
@@ -704,6 +889,644 @@ function isWebBindingAllowed(binding, platform) {
 		}
 	].some((candidate) => bindingKey(binding) === bindingKey(normalizeBinding(candidate, platform)));
 }
+//#endregion
+//#region ../../../vendor/deepseek-harness/packages/util/values/src/partial-json.ts
+/**
+* Lazily scanned view of one JSON object's top-level fields, built from text
+* that may still be streaming or from an already parsed object. Nothing is
+* scanned until a reader asks; the view remembers every question it answered
+* and reports changed answers when the owner refreshes for publication.
+* Used for model tool-call arguments: a row reads the fields it
+* cares about at whatever granularity it displays, at every stage of the call.
+* @module @deepseek-ai/dsh-util-values/src/partial-json
+*/
+const SIMPLE_ESCAPES = {
+	"\"": "\"",
+	"\\": "\\",
+	"/": "/",
+	b: "\b",
+	f: "\f",
+	n: "\n",
+	r: "\r",
+	t: "	"
+};
+const CONTENT_ESCAPE = /[\\\u0000-\u001f]/u;
+function isWhitespace(c) {
+	return c === " " || c === "\n" || c === "\r" || c === "	";
+}
+function isHex(c) {
+	return c >= "0" && c <= "9" || c >= "a" && c <= "f" || c >= "A" && c <= "F";
+}
+(class PartialArguments {
+	/** The view of a call with no arguments available. */
+	static EMPTY = PartialArguments.fromObject({});
+	/**
+	* View finished argument text without scanning it until a reader asks.
+	* @param text - the complete argument JSON text.
+	* @returns a sealed view.
+	*/
+	static fromText(text) {
+		const view = new PartialArguments();
+		view.append(text);
+		view.sealed = true;
+		return view;
+	}
+	/**
+	* View an already parsed argument payload, such as a PTC dispatch object.
+	* @param value - the parsed argument value.
+	* @returns a sealed view; a non-object payload has no fields.
+	*/
+	static fromObject(value) {
+		const view = new PartialArguments();
+		view.object = typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
+		view.sealed = true;
+		return view;
+	}
+	/**
+	* The source: text so far or a parsed object, plus whether it can still grow.
+	* These are the only enumerable fields, so two views over the same source
+	* compare equal structurally however far each has been read.
+	*/
+	chunks = [];
+	object;
+	sealed = false;
+	#ends = [];
+	#size = 0;
+	#consumed = 0;
+	#mode = "root";
+	#escape = false;
+	#keyStart = 0;
+	#keyEscaped = false;
+	#key = "";
+	#current = null;
+	#nestedEnds = [];
+	#nestedInString = false;
+	#invalidAt;
+	#invalidValue = false;
+	#entries = /* @__PURE__ */ new Map();
+	#order = [];
+	#reads = /* @__PURE__ */ new Map();
+	/** Whether this view rejects further appends; does not scan text or register reads. */
+	get isSealed() {
+		return this.sealed;
+	}
+	/** Whether indexing or a content read found invalid JSON; unread value contents are not validated. */
+	get invalid() {
+		this.scan();
+		return this.#mode === "invalid" || this.#invalidValue;
+	}
+	/**
+	* Retain streamed argument text without scanning or comparing observed answers.
+	* @param fragment - the text following every fragment appended before.
+	*/
+	append(fragment) {
+		if (this.sealed) throw new Error("PartialArguments: cannot append to a sealed view");
+		if (fragment.length === 0) return;
+		this.chunks.push(fragment);
+		this.#size += fragment.length;
+		this.#ends.push(this.#size);
+	}
+	/**
+	* Reconcile a streamed prefix with authoritative complete text without joining the fragments.
+	* @param text - the final argument text, which replaces missing or conflicting deltas.
+	* @returns this view sealed with its caches retained when every character matches; otherwise a new sealed view.
+	*/
+	settle(text) {
+		if (this.object !== void 0 || text.length !== this.#size) return PartialArguments.fromText(text);
+		let offset = 0;
+		for (const chunk of this.chunks) {
+			if (!text.startsWith(chunk, offset)) return PartialArguments.fromText(text);
+			offset += chunk.length;
+		}
+		this.chunks = text.length === 0 ? [] : [text];
+		this.#ends = text.length === 0 ? [] : [text.length];
+		this.sealed = true;
+		return this;
+	}
+	/**
+	* Compare observed answers and advance their publication baseline. Unread views remain unscanned.
+	* @returns whether any observed answer changed since its first read or the preceding refresh.
+	*/
+	refresh() {
+		if (this.#reads.size === 0) return false;
+		this.scan();
+		let changed = false;
+		let completions = false;
+		for (const read of this.#reads.values()) {
+			if (read.completion) {
+				completions = true;
+				continue;
+			}
+			changed = this.refreshRead(read) || changed;
+		}
+		if (completions) {
+			for (const read of this.#reads.values()) if (read.completion) changed = this.refreshRead(read) || changed;
+		}
+		if (this.sealed) this.#reads.clear();
+		return changed;
+	}
+	refreshRead(read) {
+		const now = read.answer();
+		if (Object.is(now, read.last)) return false;
+		read.last = now;
+		return true;
+	}
+	/**
+	* Check whether no further fields can arrive.
+	* @returns whether the outer object closed, indexing failed, or the view is sealed; unread values are not validated.
+	*/
+	closed() {
+		return this.remember("closed", "", () => this.closedNow());
+	}
+	/**
+	* List discovered fields in first-appearance order.
+	* @returns top-level keys seen so far, in first-appearance order.
+	*/
+	keys() {
+		return this.remember("keys", "", () => this.keysNow(), (keys) => keys.length);
+	}
+	/**
+	* Check whether a top-level field has appeared.
+	* @param key - argument name.
+	* @returns whether the field has appeared (a string opened or another value began).
+	*/
+	has(key) {
+		return this.remember("has", key, () => this.hasNow(key));
+	}
+	/**
+	* Check whether a field's closing delimiter has arrived, without validating its contents.
+	* @param key - argument name.
+	* @returns whether its delimiter arrived and no content reader has reported an error for this value.
+	*/
+	complete(key) {
+		return this.remember("complete", key, () => this.completeNow(key));
+	}
+	/**
+	* Read string length without materializing its text.
+	* @param key - argument name.
+	* @param options - change granularity for a streaming string.
+	* @returns decoded UTF-16 length of the string field so far; undefined when absent or not a string.
+	*/
+	stringLength(key, options) {
+		const step = Math.max(1, Math.floor(options?.step ?? 1));
+		const offset = options?.offset ?? 0;
+		return this.remember(`length:${step}:${offset}`, key, () => this.lengthNow(key), (length) => length === void 0 ? void 0 : Math.ceil((length + offset) / step));
+	}
+	/**
+	* Check a string against a decoded UTF-16 length limit without materializing it.
+	* @param key - argument name.
+	* @param maxLength - decoded UTF-16 limit, floored to at least zero.
+	* @returns whether the string is longer than the limit; false when absent or not a string.
+	*/
+	stringExceeds(key, maxLength) {
+		const limit = Math.max(0, Math.floor(maxLength));
+		return this.remember(`exceeds:${limit}`, key, () => (this.lengthNow(key, limit + 1) ?? 0) > limit);
+	}
+	/**
+	* Read a decoded string, including a streaming prefix.
+	* @param key - argument name.
+	* @returns the string field's decoded text so far; undefined when absent or not a string.
+	*/
+	text(key) {
+		return this.remember("text", key, () => this.textNow(key));
+	}
+	/**
+	* Read at most the first decoded UTF-16 units of a string.
+	* @param key - argument name.
+	* @param maxLength - maximum decoded UTF-16 length, floored to at least one.
+	* @returns the bounded string prefix; undefined when absent or not a string.
+	*/
+	textPrefix(key, maxLength) {
+		const limit = Math.max(1, Math.floor(maxLength));
+		return this.remember(`prefix:${limit}`, key, () => this.textPrefixNow(key, limit));
+	}
+	/**
+	* Read a completed non-string argument.
+	* @param key - argument name.
+	* @returns the parsed non-string value once it closed; undefined while open, absent, or a string.
+	*/
+	value(key) {
+		return this.remember("value", key, () => this.valueNow(key));
+	}
+	/** Answer a question and, on a streaming view, remember it for change detection. */
+	remember(kind, key, read, comparison) {
+		this.scan();
+		const result = read();
+		if (!this.sealed) {
+			const id = `${kind}/${key}`;
+			if (!this.#reads.has(id)) this.#reads.set(id, {
+				completion: kind === "complete",
+				answer: comparison === void 0 ? read : () => comparison(read()),
+				last: comparison === void 0 ? result : comparison(result)
+			});
+		}
+		return result;
+	}
+	closedNow() {
+		return this.sealed || this.#mode === "closed" || this.#mode === "invalid";
+	}
+	keysNow() {
+		return this.object === void 0 ? this.#order : Object.keys(this.object);
+	}
+	hasNow(key) {
+		return this.object === void 0 ? this.#entries.has(key) : Object.hasOwn(this.object, key);
+	}
+	completeNow(key) {
+		if (this.object !== void 0) return Object.hasOwn(this.object, key);
+		const entry = this.#entries.get(key);
+		return entry !== void 0 && entry.end >= 0 && (entry.kind === "string" ? entry.invalidAt === void 0 : !entry.invalid);
+	}
+	lengthNow(key, limit = Number.POSITIVE_INFINITY) {
+		if (this.object !== void 0) {
+			const field = Object.hasOwn(this.object, key) ? this.object[key] : void 0;
+			return typeof field === "string" ? field.length : void 0;
+		}
+		const entry = this.#entries.get(key);
+		if (entry?.kind !== "string") return void 0;
+		if (entry.text !== void 0 && entry.text.at === entry.end) return entry.text.length;
+		const read = entry.length ??= {
+			at: entry.start,
+			length: 0,
+			text: ""
+		};
+		this.readString(entry, read, limit, false);
+		return read.length;
+	}
+	textNow(key) {
+		if (this.object !== void 0) {
+			const field = Object.hasOwn(this.object, key) ? this.object[key] : void 0;
+			return typeof field === "string" ? field : void 0;
+		}
+		const entry = this.#entries.get(key);
+		if (entry?.kind !== "string") return void 0;
+		if (entry.text === void 0 && entry.end >= 0 && entry.needsDecoding && entry.invalidAt === void 0) {
+			let text;
+			try {
+				text = JSON.parse(`"${this.slice(entry.start, entry.end)}"`);
+			} catch (_error) {}
+			if (text !== void 0) entry.text = {
+				at: entry.end,
+				length: text.length,
+				text
+			};
+		}
+		const read = entry.text ??= {
+			at: entry.start,
+			length: 0,
+			text: ""
+		};
+		this.readString(entry, read, Number.POSITIVE_INFINITY, true);
+		return read.text;
+	}
+	textPrefixNow(key, maxLength) {
+		if (this.object !== void 0) {
+			const field = Object.hasOwn(this.object, key) ? this.object[key] : void 0;
+			return typeof field === "string" ? field.slice(0, maxLength) : void 0;
+		}
+		const entry = this.#entries.get(key);
+		if (entry?.kind !== "string") return void 0;
+		const prefixes = entry.prefixes ??= /* @__PURE__ */ new Map();
+		let read = prefixes.get(maxLength);
+		if (read === void 0) {
+			read = {
+				at: entry.start,
+				length: 0,
+				text: ""
+			};
+			prefixes.set(maxLength, read);
+		}
+		this.readString(entry, read, maxLength, true);
+		return read.text;
+	}
+	valueNow(key) {
+		if (this.object !== void 0) {
+			if (!Object.hasOwn(this.object, key)) return void 0;
+			const field = this.object[key];
+			return typeof field === "string" ? void 0 : field;
+		}
+		const entry = this.#entries.get(key);
+		if (entry?.kind !== "value" || entry.end < 0 || entry.invalid) return void 0;
+		if (entry.parsed === void 0) try {
+			entry.parsed = JSON.parse(this.slice(entry.start, entry.end));
+		} catch (_error) {
+			entry.invalid = true;
+			this.#invalidValue = true;
+		}
+		return entry.parsed;
+	}
+	chunkAt(at) {
+		let low = 0;
+		let high = this.#ends.length;
+		while (low < high) {
+			const mid = low + high >>> 1;
+			if (this.#ends[mid] <= at) low = mid + 1;
+			else high = mid;
+		}
+		return low;
+	}
+	/** Materialize only a requested range, never the cumulative source. */
+	slice(start, end) {
+		if (start >= end) return "";
+		const first = this.chunkAt(start);
+		const last = this.chunkAt(end - 1);
+		const base = first === 0 ? 0 : this.#ends[first - 1];
+		if (first === last) return this.chunks[first].slice(start - base, end - base);
+		const parts = [this.chunks[first].slice(start - base)];
+		for (let i = first + 1; i < last; i++) parts.push(this.chunks[i]);
+		parts.push(this.chunks[last].slice(0, end - this.#ends[last - 1]));
+		return parts.join("");
+	}
+	readString(entry, read, limit, materialize) {
+		const end = Math.min(entry.end < 0 ? this.#consumed : entry.end, entry.invalidAt ?? Number.POSITIVE_INFINITY, this.#invalidAt ?? Number.POSITIVE_INFINITY);
+		if (!entry.needsDecoding) {
+			const length = Math.min(end - read.at, limit - read.length);
+			if (length <= 0) return;
+			if (materialize) read.text += this.slice(read.at, read.at + length);
+			read.at += length;
+			read.length += length;
+			return;
+		}
+		let chunkIndex = this.chunkAt(read.at);
+		while (read.at < end && read.length < limit) {
+			const base = chunkIndex === 0 ? 0 : this.#ends[chunkIndex - 1];
+			const chunk = this.chunks[chunkIndex];
+			const remaining = chunk.slice(read.at - base, Math.min(chunk.length, end - base));
+			const boundary = remaining.search(CONTENT_ESCAPE);
+			const length = Math.min(boundary < 0 ? remaining.length : boundary, limit - read.length);
+			if (length > 0) {
+				if (materialize) read.text += remaining.slice(0, length);
+				read.at += length;
+				read.length += length;
+				if (read.at === base + chunk.length) chunkIndex++;
+				continue;
+			}
+			const type = remaining.length > 1 ? remaining[1] : read.at + 1 < end ? this.chunks[chunkIndex + 1][0] : void 0;
+			let decoded;
+			let width = 2;
+			if (remaining[0] === "\\" && type === void 0 && entry.end < 0) return;
+			if (remaining[0] === "\\" && type === "u") {
+				const hex = this.slice(read.at + 2, Math.min(end, read.at + 6));
+				let valid = true;
+				for (let i = 0; i < hex.length; i++) if (!isHex(hex[i])) valid = false;
+				if (valid) {
+					if (hex.length < 4 && entry.end < 0) return;
+					if (hex.length === 4) decoded = String.fromCharCode(Number.parseInt(hex, 16));
+				}
+				width = 6;
+			} else if (remaining[0] === "\\" && type !== void 0) decoded = SIMPLE_ESCAPES[type];
+			if (decoded === void 0) {
+				entry.invalidAt = read.at;
+				this.#invalidValue = true;
+				return;
+			}
+			if (materialize) read.text += decoded;
+			read.length++;
+			read.at += width;
+			while (chunkIndex < this.chunks.length && read.at >= this.#ends[chunkIndex]) chunkIndex++;
+		}
+	}
+	/** Locate new field ranges without decoding or parsing their contents. */
+	scan() {
+		if (this.object !== void 0 || this.#consumed === this.#size) return;
+		for (let i = this.chunkAt(this.#consumed); i < this.chunks.length && this.#invalidAt === void 0; i++) {
+			const pending = this.chunks[i];
+			const base = i === 0 ? 0 : this.#ends[i - 1];
+			for (let index = this.#consumed - base; index < pending.length && this.#mode !== "invalid"; index++) {
+				if (this.#mode === "string" || this.#mode === "nested" && this.#nestedInString) {
+					const end = this.stringBoundary(pending, index);
+					this.#consumed += end - index;
+					index = end;
+					if (index === pending.length) break;
+				}
+				this.step(pending[index], this.#consumed);
+				this.#consumed++;
+			}
+		}
+	}
+	/** Only raw quotes and their preceding backslash runs can terminate a string. */
+	stringBoundary(fragment, start) {
+		let at = start;
+		while (true) {
+			const quote = fragment.indexOf("\"", at);
+			const end = quote < 0 ? fragment.length : quote;
+			if (this.#mode === "string") {
+				const entry = this.#current;
+				if (!entry.needsDecoding && CONTENT_ESCAPE.test(fragment.slice(at, end))) entry.needsDecoding = true;
+			}
+			let slashStart = end;
+			while (slashStart > at && fragment[slashStart - 1] === "\\") slashStart--;
+			const escaped = (end - slashStart) % 2 === 1 !== (slashStart === at && this.#escape);
+			this.#escape = quote < 0 && escaped;
+			if (quote < 0 || !escaped) return end;
+			at = quote + 1;
+		}
+	}
+	step(c, at) {
+		switch (this.#mode) {
+			case "root":
+				if (isWhitespace(c)) return;
+				if (c === "{") {
+					this.#mode = "key-or-end";
+					return;
+				}
+				this.fail();
+				return;
+			case "key-or-end":
+				if (isWhitespace(c)) return;
+				if (c === "}") {
+					this.#mode = "closed";
+					return;
+				}
+				if (c === "\"") {
+					this.beginKey(at);
+					return;
+				}
+				this.fail();
+				return;
+			case "key-only":
+				if (isWhitespace(c)) return;
+				if (c === "\"") {
+					this.beginKey(at);
+					return;
+				}
+				this.fail();
+				return;
+			case "key":
+				this.stepKey(c, at);
+				return;
+			case "colon":
+				if (isWhitespace(c)) return;
+				if (c === ":") {
+					this.#mode = "value";
+					return;
+				}
+				this.fail();
+				return;
+			case "value":
+				this.beginValue(c, at);
+				return;
+			case "string": {
+				const entry = this.#current;
+				entry.end = at;
+				this.#current = null;
+				this.#mode = "comma-or-end";
+				return;
+			}
+			case "scalar":
+				this.stepScalar(c, at);
+				return;
+			case "nested":
+				this.stepNested(c, at);
+				return;
+			case "comma-or-end":
+				if (isWhitespace(c)) return;
+				if (c === ",") {
+					this.#mode = "key-only";
+					return;
+				}
+				if (c === "}") {
+					this.#mode = "closed";
+					return;
+				}
+				this.fail();
+				return;
+			case "closed":
+				if (isWhitespace(c)) return;
+				this.fail();
+				return;
+			/* v8 ignore next 2 -- scan() stops stepping once the view is invalid. */
+			case "invalid": return;
+			/* v8 ignore next 2 -- Every scanner mode has a handler above. */
+			default: assertNever(this.#mode);
+		}
+	}
+	fail() {
+		this.#invalidAt = this.#consumed;
+		this.#mode = "invalid";
+		this.#current = null;
+	}
+	beginKey(at) {
+		this.#mode = "key";
+		this.#keyStart = at + 1;
+		this.#keyEscaped = false;
+		this.#escape = false;
+	}
+	stepKey(c, at) {
+		if (c < " ") {
+			this.fail();
+			return;
+		}
+		if (this.#escape) {
+			this.#escape = false;
+			return;
+		}
+		if (c === "\\") {
+			this.#escape = true;
+			this.#keyEscaped = true;
+			return;
+		}
+		if (c !== "\"") return;
+		const raw = this.slice(this.#keyStart, at);
+		if (this.#keyEscaped) try {
+			this.#key = JSON.parse(`"${raw}"`);
+		} catch (_error) {
+			this.fail();
+			return;
+		}
+		else this.#key = raw;
+		this.#mode = "colon";
+	}
+	open(entry) {
+		if (!this.#entries.has(this.#key)) this.#order.push(this.#key);
+		this.#entries.set(this.#key, entry);
+		this.#current = entry;
+	}
+	beginValue(c, at) {
+		if (isWhitespace(c)) return;
+		if (c === "\"") {
+			this.open({
+				kind: "string",
+				start: at + 1,
+				end: -1,
+				needsDecoding: false,
+				invalidAt: void 0,
+				length: void 0,
+				text: void 0,
+				prefixes: void 0
+			});
+			this.#escape = false;
+			this.#mode = "string";
+			return;
+		}
+		if (c === "}" || c === "," || c === ":" || c === "]") {
+			this.fail();
+			return;
+		}
+		this.open({
+			kind: "value",
+			start: at,
+			end: -1,
+			parsed: void 0,
+			invalid: false
+		});
+		if (c === "{" || c === "[") {
+			this.#mode = "nested";
+			this.#nestedEnds = [c === "{" ? "}" : "]"];
+			this.#nestedInString = false;
+			this.#escape = false;
+			return;
+		}
+		this.#mode = "scalar";
+	}
+	stepScalar(c, at) {
+		if (c !== "," && c !== "}" && !isWhitespace(c)) return;
+		this.closeValue(at);
+		this.#mode = c === "," ? "key-only" : c === "}" ? "closed" : "comma-or-end";
+	}
+	stepNested(c, at) {
+		if (this.#nestedInString) {
+			this.#nestedInString = false;
+			return;
+		}
+		if (c === "\"") {
+			this.#nestedInString = true;
+			return;
+		}
+		if (c === "{" || c === "[") {
+			this.#nestedEnds.push(c === "{" ? "}" : "]");
+			return;
+		}
+		if (c === "}" || c === "]") {
+			if (this.#nestedEnds.pop() !== c) {
+				this.fail();
+				return;
+			}
+			if (this.#nestedEnds.length === 0) {
+				this.closeValue(at + 1);
+				this.#mode = "comma-or-end";
+			}
+		}
+	}
+	closeValue(end) {
+		const entry = this.#current;
+		entry.end = end;
+		this.#current = null;
+	}
+});
+//#endregion
+//#region ../../../vendor/deepseek-harness/packages/util/values/src/index.ts
+/**
+* Mark an unreachable closed-union branch.
+* @param value - impossible value; an unhandled typed variant fails at the call site.
+* @param context - optional switch-site label included in the failure message.
+* @returns never; a runtime value that escaped its type always throws.
+*/
+function assertNever(value, context) {
+	const rendered = JSON.stringify(value) ?? String(value);
+	throw new Error(`unreachable variant${context ? ` in ${context}` : ""}: ${rendered}`);
+}
+//#endregion
+//#region ../../../vendor/deepseek-harness/packages/client/shortcuts/src/configuration.ts
 /** Validated preference documents and deterministic conflict resolution, without browser dependencies. */
 const record = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const commandPattern = /^[a-z][a-zA-Z0-9-]*(?:\.[a-zA-Z][a-zA-Z0-9-]*)+$/u;
@@ -950,6 +1773,21 @@ function parseShortcutDefinitions(value) {
 	}
 	return definitions;
 }
+//#endregion
+//#region ../../../vendor/deepseek-harness/packages/util/crypto/src/index.ts
+/**
+* Random v4 UUID, minted from `crypto.getRandomValues`.
+* @returns the UUID string.
+*/
+function randomUUID() {
+	const bytes = globalThis.crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
+	const hex = Array.from(bytes, (byte, index) => {
+		return (index === 6 ? byte & 15 | 64 : index === 8 ? byte & 63 | 128 : byte).toString(16).padStart(2, "0");
+	}).join("");
+	return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+//#endregion
+//#region ../../../vendor/deepseek-harness/packages/client/shortcuts/src/persistence.ts
 /** Serialized preference transactions; storage owners publish only accepted writes or read diagnostics. */
 /**
 * Create a disabled initial snapshot for asynchronous adapter startup.
@@ -1098,7 +1936,7 @@ var ShortcutPersistence = class {
 	}
 };
 //#endregion
-//#region ../../../vendor/deepseek-harness/packages/util/atomic-write/lib/index.js
+//#region ../../../vendor/deepseek-harness/packages/util/atomic-write/src/index.ts
 /**
 * Zero-dependency atomic file replacement and writer coordination.
 * `writeFileAtomic` writes a random-suffix sibling with exclusive create and
@@ -1399,13 +2237,20 @@ function shellWrappedSpawn(command, args, options) {
 //#endregion
 //#region src/index.ts
 let focusPrimaryWindow = () => {};
+/** app 目录（dev 是装配目录、打包是 `Resources/app`）：由引导写进全局。 */
+function shellRoot() {
+	const root = globalThis.__DSH_SHELL_ROOT__;
+	if (root === void 0 || root === "") throw new Error("dsh desktop: the shell root is missing (bootstrap did not report it)");
+	return root;
+}
 function appConfigDir() {
-	const configured = process.env.DSH_DESKTOP_APPCONFIG_DIR;
+	const configured = developmentLayout() === void 0 ? void 0 : join(shellRoot(), "..", "runtime");
 	return app.isPackaged || configured === void 0 || configured === "" ? process.resourcesPath : configured;
 }
 function startupFailure(error) {
 	const message = error instanceof Error ? error.message : String(error);
-	console.error(error);
+	shellLog("入口失败或收尾失败 %o", error);
+	shellLog(`启动失败：${message}`);
 	dialog.showErrorBox("dsh desktop startup failed", message);
 	app.exit(1);
 	throw error instanceof Error ? error : new Error(message);
@@ -1429,44 +2274,49 @@ protocol.registerSchemesAsPrivileged([{
 		codeCache: true
 	}
 }]);
-const WEB_FRONTEND_PACKAGE = "@deepseek-ai/dsh-web-frontend";
-const APPLICATION_URL = `${SCHEME}://app/`;
 const WINDOWS_TITLEBAR_HEIGHT = 40;
-async function pathExists(path) {
-	try {
-		await access(path);
-		return true;
-	} catch {
-		return false;
+/**
+* 打包形态下"当 node 用"的可执行文件。
+*
+* macOS 上 spawn 主二进制（`process.execPath`）会让系统**多出一个叫 `exec` 的 Dock 图标**——它落在 `.app`
+* 里、被当成 GUI 应用注册。改用同 bundle 的 **Helper**（它的 `Info.plist` 带 `LSUIElement`）就没有这个图标，
+* 而 `ELECTRON_RUN_AS_NODE` 对它一样生效。其余平台/形态直接用 `process.execPath`。
+* @returns 可执行文件的绝对路径。
+*/
+async function nodeExecutableOf() {
+	if (process.platform === "darwin") {
+		const app = basename(process.execPath);
+		const helper = join(dirname(process.execPath), "..", "Frameworks", `${app} Helper.app`, "Contents", "MacOS", `${app} Helper`);
+		if (await pathExistsOf(helper)) return helper;
 	}
+	return process.execPath;
 }
-function runtimeResources() {
-	const development = !app.isPackaged;
-	const node = (development ? process.env.DSH_DESKTOP_NODE_BINARY : void 0) ?? join(process.resourcesPath, "runtime", "node", process.platform === "win32" ? "node.exe" : "node");
-	const seed = (development ? process.env.DSH_DESKTOP_SEED_DIR : void 0) ?? join(process.resourcesPath, "seed");
+async function runtimeResources() {
+	const resourcesDir = developmentLayout() === void 0 ? process.resourcesPath : join(shellRoot(), "..");
+	const node = developmentLayout() === void 0 ? await nodeExecutableOf() : "node";
+	const seed = join(resourcesDir, "seed");
 	return {
 		node,
 		seed,
-		runtime: join(seed, SEED_RUNTIME_DIR_NAME),
-		pnpm: join(process.resourcesPath, "runtime", "pnpm", "bin", "pnpm.mjs"),
-		nodeBin: join(process.resourcesPath, "runtime", "bin")
+		runtime: developmentLayout() === void 0 ? join(resourcesDir, "runtime") : join(seed, SEED_RUNTIME_DIR_NAME),
+		pnpm: join(resourcesDir, "runtime", "pnpm", "bin", "pnpm.mjs"),
+		nodeBin: join(resourcesDir, "runtime", "bin"),
+		loader: join(resourcesDir, "runtime", "loader", "register.mjs")
 	};
 }
-async function installPlantedProfile(profileDir, resources) {
-	const settingsPath = join(profileDir, PROFILE_WORKSPACE_NAME);
-	const overrides = await runtimeOverrides(profileDir, resources.runtime);
-	await writeFile(settingsPath, workspaceWithOverrides(await readFile(settingsPath, "utf8"), overrides));
-	await installProfile({
-		node: resources.node,
-		pnpmEntry: resources.pnpm,
-		profileDir
-	});
+function configuredPath(value) {
+	return value === void 0 || value === "" ? void 0 : value;
 }
-function developmentProject() {
-	const configured = process.env.DSH_DESKTOP_DEV_PROJECT_DIR;
-	if (configured === void 0 || configured === "") return void 0;
-	if (app.isPackaged) throw new Error("dsh desktop: development project override is unavailable in packaged applications");
-	return resolve(configured);
+function developmentLayout() {
+	const profileDir = configuredPath(process.env.DSH_DESKTOP_DEV_PROFILE_DIR);
+	const runtimeDir = configuredPath(process.env.DSH_DESKTOP_DEV_RUNTIME_DIR);
+	if (profileDir === void 0 && runtimeDir === void 0) return void 0;
+	if (app.isPackaged) throw new Error("dsh desktop: the development layout is unavailable in packaged applications");
+	if (profileDir === void 0 || runtimeDir === void 0) throw new Error("dsh desktop: DSH_DESKTOP_DEV_PROFILE_DIR and DSH_DESKTOP_DEV_RUNTIME_DIR must be set together");
+	return {
+		profileDir: resolve(profileDir),
+		runtimeDir: resolve(runtimeDir)
+	};
 }
 function windowFrame() {
 	if (process.platform === "darwin") return {
@@ -1516,31 +2366,55 @@ function developmentHostInspectPort(enabled) {
 	const configured = process.env.DSH_DESKTOP_HOST_INSPECT_PORT;
 	if (!enabled || configured === void 0 || configured === "") return void 0;
 	const port = Number(configured);
-	if (!Number.isSafeInteger(port) || port < 1 || port > 65535) throw new Error("dsh desktop: DSH_DESKTOP_HOST_INSPECT_PORT must be an integer from 1 through 65535");
+	if (!Number.isSafeInteger(port) || port < 0 || port > 65535) throw new Error("dsh desktop: DSH_DESKTOP_HOST_INSPECT_PORT must be an integer from 0 through 65535");
 	return port;
 }
-function developmentNodeArgs() {
-	const specifier = process.env.DSH_DESKTOP_TSX_IMPORT;
-	return specifier === void 0 || specifier === "" ? [] : [`--import=${specifier}`];
+function sourceLoader(resources) {
+	return resources.loader;
+}
+function sourceLoaderEnvironment(path) {
+	return { DSH_SOURCE_LOADER: path };
+}
+/**
+* 壳的日志。
+*
+* 打包形态的 Electron **不把 `console` 写进 stdout**（它进系统日志），出了事只看到"窗口没起来"。
+* 所以壳自己的关键节点（启动、宿主就绪、fatal）落一份文件日志，与宿主那份（`${DSH_HOME}/logs/dev-host.log`，
+* 由 `@morlay/dsh-client-modules` 写）同目录，两边对着看就能定位"页面 → 壳 → 宿主"断在哪一段。
+*/
+async function shellLog(message, ...args) {
+	const home = resolveDshHome(appConfig) ?? join(process.cwd(), ".dsh-store");
+	const file = join(home, "logs", "shell.log");
+	try {
+		await mkdir(dirname(file), { recursive: true });
+		await appendFile(file, `${(/* @__PURE__ */ new Date()).toISOString()} ${format(message, ...args)}\n`, "utf8");
+	} catch {}
+}
+/** 文件在不在（项目禁同步 IO）。 */
+async function pathExistsOf(path) {
+	return await access(path).then(() => true, () => false);
 }
 async function main() {
-	const development = developmentProject();
-	const resources = runtimeResources();
+	const development = developmentLayout();
+	const resources = await runtimeResources();
 	const hostInspectPort = developmentHostInspectPort(development !== void 0);
-	const activeProject = development ?? join(resolveDshHome(appConfig) ?? "", "profiles", "desktop");
-	const runtimeProject = development ?? resources.runtime;
-	const webDocumentRoot = join(runtimeProject, "node_modules", ...WEB_FRONTEND_PACKAGE.split("/"), "dist");
-	const dshHome = resolveDshHome(appConfig);
+	const profileDir = development?.profileDir ?? join(resolveDshHome(appConfig) ?? "", "profiles", "desktop");
+	const runtimeDir = development?.runtimeDir ?? resources.runtime;
+	const dataDir = resolveDshHome(appConfig);
+	const bundleCount = await readFile(join(profileDir, "package.json"), "utf8").then((text) => JSON.parse(text).dsh?.profile?.bundles?.length).catch(() => void 0);
+	await shellLog(`启动：形态=${development === void 0 ? "bundle" : "dev"} root=${globalThis.__DSH_SHELL_ROOT__ ?? "(未知)"} profileDir=${profileDir} dataDir=${dataDir ?? "(未解析)"} dataDirSpec=${appConfig.dataDir} bundles=${String(bundleCount)}`);
 	if (development === void 0) {
-		if (dshHome === void 0) throw new Error("dsh desktop: packaged applications require a concrete dshHome");
-		if (await ensureSeedProfile(resources.seed, dshHome)) await installPlantedProfile(activeProject, resources);
+		if (dataDir === void 0) throw new Error("dsh desktop: packaged applications require a concrete dataDir");
+		const seeded = await ensureSeedProfile(resources.seed, dataDir);
+		if (seeded === "no-seed") throw new Error(`dsh desktop: the packaged app carries no ${PROFILE_NAME} profile seed at ${resources.seed}`);
+		await shellLog(`profile 种子：${seeded === "seeded" ? "已重种" : "已是最新"}`);
 	}
-	if (!await pathExists(join(webDocumentRoot, "index.html"))) throw new Error(`dsh desktop: the Web frontend is missing at ${webDocumentRoot}; the runtime closure must carry ${WEB_FRONTEND_PACKAGE}`);
 	let host;
 	let mainWindow;
 	let quitConfirmed = false;
 	let quitPrompting = false;
-	const appPreload = fileURLToPath(new URL("./preload-app.cjs", import.meta.url));
+	/** preload 落盘的位置：字节由宿主现场打包（sandboxed preload 只能是 CJS），这里只是放它。 */
+	const preloadPathOf = () => join(app.getPath("userData"), "preload-app.cjs");
 	const confirmQuit = async (window) => {
 		if (quitPrompting) return;
 		quitPrompting = true;
@@ -1567,17 +2441,26 @@ async function main() {
 	const handleHostFailure = (error) => {
 		if (hostFailureHandled) return;
 		hostFailureHandled = true;
-		console.error(`[dsh-shell] backend stopped: ${error.message}`);
+		shellLog(`后端停止：${error.message}`);
+		shellLog(`宿主停止：${error.message}`);
 		dialog.showErrorBox("dsh desktop backend stopped", error.message);
 		quitConfirmed = true;
 		app.exit(1);
 	};
-	const startHost = async (projectDir = activeProject) => {
-		const next = new DesktopHostProcess(resources.node, runtimeProject, projectDir, hostInspectPort, {
-			nodeArgs: development === void 0 ? [] : developmentNodeArgs(),
+	const startHost = async (target = profileDir) => {
+		const loader = sourceLoader(resources);
+		const next = new DesktopHostProcess(resources.node, runtimeDir, target, hostInspectPort, {
+			nodeArgs: [`--import=${loader}`],
+			logFile: join(dataDir ?? join(process.cwd(), ".dsh-store"), "logs", "host.log"),
+			entry: createRequire(import.meta.url).resolve(DESKTOP_HOST_PACKAGE),
 			extraEnv: {
-				...dshHome === void 0 ? {} : { DSH_HOME: dshHome },
-				...development === void 0 ? {} : { ELECTRON_RUN_AS_NODE: "1" }
+				ELECTRON_RUN_AS_NODE: "1",
+				...dataDir === void 0 ? {} : { DSH_HOME: dataDir },
+				...globalThis.__DSH_SHELL_ROOT__ === void 0 ? {} : { DSH_DESKTOP_SHELL_ROOT: globalThis.__DSH_SHELL_ROOT__ },
+				DSH_DEV_FORM: "desktop",
+				UV_THREADPOOL_SIZE: process.env["UV_THREADPOOL_SIZE"] ?? "64",
+				...development === void 0 ? { ELECTRON_RUN_AS_NODE: "1" } : {},
+				...sourceLoaderEnvironment(loader)
 			},
 			processTitle: `${appConfig.name}-server`,
 			...development === void 0 ? { packageManager: {
@@ -1587,17 +2470,27 @@ async function main() {
 			spawn: shellWrappedSpawn,
 			onFailure: handleHostFailure
 		});
-		await next.start();
-		return next;
+		return {
+			process: next,
+			ready: await next.start()
+		};
 	};
 	protocol.handle(SCHEME, async (request) => {
 		const url = new URL(request.url);
 		if (url.hostname !== "app") return new Response(null, { status: 404 });
 		const active = host;
 		if (active === void 0) return new Response("backend unavailable", { status: 503 });
-		if (!app.isPackaged) console.error(`[dsh-shell] recv ${request.method} ${url.pathname}`);
-		const response = await active.fetch(request);
-		if (!app.isPackaged) console.error(`[dsh-shell] ${request.method} ${url.pathname} → ${String(response.status)}`);
+		if (!app.isPackaged) shellLog(`recv ${request.method} ${url.pathname}`);
+		const conditional = new Request(request.url, {
+			method: request.method,
+			headers: [...request.headers].filter(([name]) => name !== "if-none-match" && name !== "if-modified-since"),
+			...request.body === null ? {} : {
+				body: request.body,
+				duplex: "half"
+			}
+		});
+		const response = await active.fetch(conditional);
+		if (!app.isPackaged) shellLog(`${request.method} ${url.pathname} → ${String(response.status)}`);
 		return response;
 	});
 	installDesktopDirectoryPicker(() => mainWindow, SCHEME);
@@ -1611,7 +2504,7 @@ async function main() {
 		try {
 			uplink.close();
 		} catch (error) {
-			if (!app.isPackaged) console.error("[dsh-shell] stream uplink close failed", error);
+			if (!app.isPackaged) shellLog("stream uplink close failed %o", error);
 		}
 	};
 	ipcMain.handle(DESKTOP_IPC.streamOpen, async (event, endpoint, payload) => {
@@ -1619,7 +2512,7 @@ async function main() {
 		if (typeof endpoint !== "string") throw new Error("dsh desktop: stream endpoint must be text");
 		const active = host;
 		if (active === void 0) throw new Error("dsh desktop: Host is unavailable");
-		if (!app.isPackaged) console.error(`[dsh-shell] stream open ${endpoint}`);
+		if (!app.isPackaged) shellLog(`stream open ${endpoint}`);
 		const id = nextStreamId++;
 		const abort = new AbortController();
 		const stream = {
@@ -1646,7 +2539,7 @@ async function main() {
 		(async () => {
 			try {
 				const response = await active.fetch(request);
-				if (!app.isPackaged) console.error(`[dsh-shell] stream ${endpoint} → ${String(response.status)}`);
+				if (!app.isPackaged) shellLog(`stream ${endpoint} → ${String(response.status)}`);
 				event.sender.send(DESKTOP_IPC.streamChunk, {
 					id,
 					status: response.status
@@ -1686,7 +2579,7 @@ async function main() {
 		try {
 			uplink.enqueue(streamEncoder.encode(encodeDesktopStreamItem(item)));
 		} catch (error) {
-			if (!app.isPackaged) console.error("[dsh-shell] stream uplink rejected", error);
+			if (!app.isPackaged) shellLog("stream uplink rejected %o", error);
 		}
 	});
 	ipcMain.on(DESKTOP_IPC.streamUplinkEnd, (event, id) => {
@@ -1704,6 +2597,9 @@ async function main() {
 	app.on("will-quit", () => {
 		shortcuts.dispose();
 	});
+	/** 宿主回环的 ws 端口：宿主起好之后填入（窗口重建时仍用它）。 */
+	let hostOrigin = "";
+	let appPreload = preloadPathOf();
 	const createMainWindow = () => {
 		const window = createWindow(appPreload, appConfig.window);
 		mainWindow = window;
@@ -1724,16 +2620,31 @@ async function main() {
 	focusPrimaryWindow = () => {
 		const window = mainWindow;
 		if (window === void 0 || window.isDestroyed()) {
-			createMainWindow().loadURL(APPLICATION_URL);
+			createMainWindow().loadURL(hostOrigin);
 			return;
 		}
 		if (window.isMinimized()) window.restore();
 		window.show();
 		window.focus();
 	};
-	host = await startHost();
+	const developerMenu = installDeveloperMenu({
+		scheme: SCHEME,
+		appName: appConfig.displayName,
+		host: () => host,
+		mainWindow: () => mainWindow
+	});
+	app.on("will-quit", () => {
+		developerMenu.dispose();
+	});
+	const started = await startHost();
+	host = started.process;
+	hostOrigin = started.ready.origin;
+	appPreload = preloadPathOf();
+	const preload = await fetch(new Request(`${hostOrigin}${PRELOAD_SOURCE_PATH}`));
+	if (!preload.ok) throw new Error(`dsh desktop: preload bundling failed (${String(preload.status)}): ${await preload.text()}`);
+	await writeFile(appPreload, await preload.text(), "utf8");
 	mainWindow = createMainWindow();
-	await mainWindow.loadURL(APPLICATION_URL);
+	await mainWindow.loadURL(hostOrigin);
 	if (development !== void 0 && process.env.DSH_DESKTOP_OPEN_DEVTOOLS !== "0") mainWindow.webContents.openDevTools({ mode: "detach" });
 	app.on("activate", () => {
 		if (BrowserWindow.getAllWindows().length === 0) focusPrimaryWindow();
@@ -1752,7 +2663,7 @@ async function main() {
 		const active = host;
 		host = void 0;
 		active.stop().catch((error) => {
-			console.error(error);
+			shellLog("入口失败或收尾失败 %o", error);
 		}).finally(() => {
 			app.quit();
 		});
@@ -1763,7 +2674,7 @@ if (app.isPackaged) try {
 	await mkdir(profile, { recursive: true });
 	app.setPath("userData", profile);
 } catch (error) {
-	console.error(error);
+	shellLog("入口失败或收尾失败 %o", error);
 }
 if ((() => {
 	if (!app.requestSingleInstanceLock()) {
@@ -1776,7 +2687,7 @@ if ((() => {
 	return true;
 })()) app.whenReady().then(main).catch(async (error) => {
 	const message = error instanceof Error ? error.message : String(error);
-	console.error(error);
+	shellLog("入口失败或收尾失败 %o", error);
 	const diagnosticFile = process.env.DSH_DESKTOP_DIAGNOSTIC_FILE;
 	if (diagnosticFile !== void 0) await import("node:fs/promises").then((fs) => fs.writeFile(diagnosticFile, `${error instanceof Error ? error.stack ?? message : message}\n`)).catch(() => void 0);
 	dialog.showErrorBox("dsh desktop startup failed", message);