@pab-iprg/huohuo 1.0.0-preview.5 → 1.0.0-preview.7

package/README.md

@@ -11,3 +11,23 @@
 显式升级检查旧迁移不可变、追加迁移顺序、执行库格式与 DSH 会话兼容范围，先一致性备份再迁移和验证，成功后切换；不自动恢复旧备份覆盖新数据。默认卸载保留实例、凭据、会话和备份，不提供直接彻底删除业务数据的快捷入口。
 
 首版终端前台管理生命周期，Ctrl+C 停止本次实例。退出终端、休眠或关机后不承诺持续运行。模型凭据在现有设置页面填写，安装检查不调用真实模型或通知。
+
+
+Windows x64 候选沿用同一入口，使用系统自带 Windows PowerShell/CIM 读取本机状态，自动准备独立 Python 和固定 Windows wheels；不要求预装 Python、编译器、Git Bash、管理员权限或开发者模式。需要兼容的 Node 24.x（至少24.8）和自带 npm。候选构建成功不等于 Windows 实机已通过；实际支持范围以发行清单和验收记录为准。PowerShell 若拦截 npm/npx 的 .ps1 启动脚本，可使用 Node 自带的 `npx.cmd`，无需更改系统执行策略。
+
+
+Windows 用户可以直接使用命令提示符（CMD）或 PowerShell，两者调用同一安装器，无需先切换终端。候选发布到 preview 标签后：
+
+CMD：
+
+```bat
+npx --yes --prefer-online @pab-iprg/huohuo@preview
+```
+
+PowerShell：
+
+```powershell
+npx.cmd --yes --prefer-online @pab-iprg/huohuo@preview
+```
+
+默认目录无需手动填写。需要独立试用目录时，CMD 使用 `--home "%USERPROFILE%\.huohuo-windows-trial-01"`，PowerShell 使用 `--home "$env:USERPROFILE\.huohuo-windows-trial-01"`。程序内部使用系统自带 PowerShell 采样，不要求用户用 PowerShell 启动。两种终端的首装、Ctrl+C、再次启动及数据保留均需分别实机验收。

package/cli.js

@@ -4,28 +4,150 @@
 import { open as open3, readFile as readFile9, realpath as realpath5 } from "node:fs/promises";
 import { Readable } from "node:stream";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname6, join as join8, resolve as resolve5 } from "node:path";
+import { dirname as dirname6, join as join9, resolve as resolve5 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
+// distribution/processes.ts
+import { execFile } from "node:child_process";
+import { join } from "node:path";
+function interruptProcessTree(child, signal) {
+  if (!child.pid || child.exitCode !== null || child.signalCode !== null) return;
+  if (process.platform === "win32") {
+    const executable = join(process.env.SystemRoot ?? "C:\\Windows", "System32", "taskkill.exe");
+    execFile(executable, ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true, timeout: 5e3 }, (error) => {
+      if (error && child.exitCode === null && child.signalCode === null) child.kill("SIGKILL");
+    });
+  } else {
+    try {
+      process.kill(-child.pid, signal);
+    } catch {
+    }
+  }
+}
+
 // distribution/bootstrap/install.ts
 import { readFile as readFile4, mkdir as mkdir3, access, rename as rename3, rm as rm2, realpath as realpath3, readdir } from "node:fs/promises";
 import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypto";
-import { join as join3, resolve as resolve3 } from "node:path";
+import { join as join4, resolve as resolve3 } from "node:path";
 import { release as osRelease } from "node:os";
-import { spawn, execFile as execFile3 } from "node:child_process";
-import { promisify as promisify3 } from "node:util";
+import { spawn, execFile as execFile5 } from "node:child_process";
+import { promisify as promisify4 } from "node:util";
 
 // distribution/bootstrap/state.ts
 import { open, rename, unlink, readFile, mkdir } from "node:fs/promises";
 import { dirname } from "node:path";
 import { randomUUID } from "node:crypto";
-import { execFile } from "node:child_process";
+import { execFile as execFile3 } from "node:child_process";
+import { promisify as promisify2 } from "node:util";
+
+// distribution/windows.ts
+import { execFile as execFile2 } from "node:child_process";
+import { win32 } from "node:path";
 import { promisify } from "node:util";
-var execute = promisify(execFile);
+var execute = promisify(execFile2);
+var MAX_OUTPUT = 8 * 1024 * 1024;
+var prelude = "$ErrorActionPreference='Stop';[Console]::OutputEncoding=[Text.UTF8Encoding]::new($false);";
+var sidPattern = /^S-\d+(?:-\d+){1,15}$/;
+async function powershell(script) {
+  if (process.platform !== "win32") throw new Error("Windows \u63A2\u9488\u53EA\u80FD\u5728 Windows \u672C\u673A\u6267\u884C");
+  const root = process.env.SystemRoot ?? "C:\\Windows";
+  if (!win32.isAbsolute(root)) throw new Error("Windows \u7CFB\u7EDF\u76EE\u5F55\u65E0\u6548");
+  const executable = win32.join(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+  const { stdout } = await execute(
+    executable,
+    [
+      "-NoLogo",
+      "-NoProfile",
+      "-NonInteractive",
+      "-EncodedCommand",
+      Buffer.from(prelude + script, "utf16le").toString("base64")
+    ],
+    { timeout: 5e3, maxBuffer: MAX_OUTPUT, windowsHide: true, encoding: "utf8" }
+  );
+  return stdout;
+}
+function document(stdout) {
+  if (Buffer.byteLength(stdout, "utf8") > MAX_OUTPUT) throw new Error("Windows \u63A2\u9488\u54CD\u5E94\u8D85\u9650");
+  const value = JSON.parse(stdout.trim());
+  if (!value || typeof value !== "object" || Array.isArray(value) || value.format !== 1) throw new Error("Windows \u63A2\u9488\u54CD\u5E94\u65E0\u6548");
+  return value;
+}
+function sid(value) {
+  if (typeof value !== "string" || value.length > 184 || !sidPattern.test(value)) throw new Error("Windows \u7528\u6237\u8EAB\u4EFD\u672A\u77E5");
+  return value;
+}
+function integer(value, label) {
+  if (typeof value !== "number" && !(typeof value === "string" && /^(0|[1-9]\d*)$/.test(value))) throw new Error(`Windows ${label}\u63A2\u9488\u65E0\u6548`);
+  const n = Number(value);
+  if (!Number.isSafeInteger(n) || n < 0) throw new Error(`Windows ${label}\u63A2\u9488\u65E0\u6548`);
+  return n;
+}
+function parseWindowsUserIdentity(stdout) {
+  return sid(document(stdout).sid);
+}
+async function windowsUserIdentity() {
+  return parseWindowsUserIdentity(await powershell("@{format=1;sid=[Security.Principal.WindowsIdentity]::GetCurrent().User.Value}|ConvertTo-Json -Compress"));
+}
+function parseWindowsProcessIdentity(stdout) {
+  const value = document(stdout);
+  if (value.exists === false && Object.keys(value).every((key) => ["format", "exists"].includes(key))) return null;
+  if (value.exists !== true || typeof value.created !== "string" || !/^[1-9]\d{15,18}$/.test(value.created)) throw new Error("Windows \u8FDB\u7A0B\u542F\u52A8\u8EAB\u4EFD\u672A\u77E5");
+  return `${sid(value.sid)}:${value.created}`;
+}
+async function windowsProcessIdentity(pid) {
+  if (!Number.isSafeInteger(pid) || pid <= 0 || pid > 4294967295) throw new Error("Windows \u8FDB\u7A0B PID \u65E0\u6548");
+  return parseWindowsProcessIdentity(await powershell(`$p=Get-CimInstance -ClassName Win32_Process -Filter 'ProcessId=${pid}' -ErrorAction Stop;
+if($null -eq $p){@{format=1;exists=$false}|ConvertTo-Json -Compress}else{
+ if($null -eq $p.CreationDate){throw 'Process creation time unavailable'};
+ $owner=Invoke-CimMethod -InputObject $p -MethodName GetOwnerSid -ErrorAction Stop;
+ if($owner.ReturnValue -ne 0 -or [string]::IsNullOrEmpty($owner.Sid)){throw 'Process owner unavailable'};
+ @{format=1;exists=$true;sid=$owner.Sid;created=$p.CreationDate.ToUniversalTime().Ticks.ToString([Globalization.CultureInfo]::InvariantCulture)}|ConvertTo-Json -Compress
+}`));
+}
+function parseWindowsResourceSnapshot(stdout) {
+  const value = document(stdout);
+  const totalBytes = integer(value.totalKiB, "\u5185\u5B58\u5BB9\u91CF") * 1024;
+  const availableBytes = integer(value.availableKiB, "\u53EF\u7528\u5185\u5B58") * 1024;
+  if (!Number.isSafeInteger(totalBytes) || totalBytes <= 0 || !Number.isSafeInteger(availableBytes) || availableBytes > totalBytes || !Array.isArray(value.processes) || !value.processes.length || value.processes.length > 1e5) throw new Error("Windows \u8D44\u6E90\u5FEB\u7167\u65E0\u6548");
+  const seen = /* @__PURE__ */ new Set();
+  const processes = value.processes.map((row) => {
+    if (!row || typeof row !== "object" || Array.isArray(row)) throw new Error("Windows \u8FDB\u7A0B\u5FEB\u7167\u65E0\u6548");
+    const pid = integer(row.pid, "PID"), parent = integer(row.parent, "\u7236\u8FDB\u7A0B"), rss = integer(row.rss, "\u5DE5\u4F5C\u96C6");
+    if (pid > 4294967295 || parent > 4294967295 || seen.has(pid) || pid !== 0 && pid === parent) throw new Error("Windows \u8FDB\u7A0B\u5FEB\u7167\u65E0\u6548");
+    seen.add(pid);
+    return { pid, parent, rss };
+  });
+  return { totalBytes, availableBytes, processes };
+}
+function windowsMemoryPressure(availableBytes, totalBytes) {
+  if (!Number.isSafeInteger(availableBytes) || availableBytes < 0 || !Number.isSafeInteger(totalBytes) || totalBytes <= 0 || availableBytes > totalBytes) return "unknown";
+  const ratio = availableBytes / totalBytes;
+  return ratio <= 0.02 ? "critical" : ratio <= 0.05 ? "high" : "normal";
+}
+var cached;
+async function windowsResourceSnapshot() {
+  const now = performance.now();
+  if (!cached || now - cached.sampledAt >= 1e3) {
+    const pending = powershell(`$memory=Get-CimInstance -ClassName Win32_OperatingSystem -ErrorAction Stop;
+$rows=@(Get-CimInstance -ClassName Win32_Process -ErrorAction Stop|ForEach-Object {@{pid=[string]$_.ProcessId;parent=[string]$_.ParentProcessId;rss=[string]$_.WorkingSetSize}});
+@{format=1;totalKiB=[string]$memory.TotalVisibleMemorySize;availableKiB=[string]$memory.FreePhysicalMemory;processes=$rows}|ConvertTo-Json -Compress -Depth 4`).then(parseWindowsResourceSnapshot);
+    const entry = { sampledAt: now, pending };
+    cached = entry;
+    void pending.catch(() => {
+      if (cached === entry) cached = void 0;
+    });
+  }
+  return structuredClone(await cached.pending);
+}
+
+// distribution/bootstrap/state.ts
+var execute2 = promisify2(execFile3);
+var lockUser = () => process.platform === "win32" ? windowsUserIdentity() : Promise.resolve(process.getuid?.());
 async function processIdentity(pid) {
+  if (process.platform === "win32") return windowsProcessIdentity(pid);
   if (!Number.isSafeInteger(pid) || pid <= 0 || !["darwin", "linux"].includes(process.platform)) throw new Error("\u8FDB\u7A0B\u542F\u52A8\u8EAB\u4EFD\u63A2\u9488\u4E0D\u652F\u6301\u6216\u65E0\u6548");
   try {
-    const { stdout } = await execute("ps", ["-p", String(pid), "-o", "lstart=,uid="], { timeout: 2e3 });
+    const { stdout } = await execute2("ps", ["-p", String(pid), "-o", "lstart=,uid="], { timeout: 2e3 });
     if (!stdout.trim()) throw new Error("\u8FDB\u7A0B\u542F\u52A8\u8EAB\u4EFD\u63A2\u9488\u8FD4\u56DE\u7A7A\u503C");
     return stdout.trim().replace(/\s+/g, " ");
   } catch (e) {
@@ -42,7 +164,7 @@ async function processIdentity(pid) {
 async function isLockOwnerDead(path, token) {
   try {
     const previous = JSON.parse(await readFile(path, "utf8"));
-    return previous.format === 1 && previous.path === path && previous.uid === process.getuid?.() && typeof previous.processStart === "string" && !!previous.processStart && typeof previous.token === "string" && /^[a-f0-9-]{36}$/.test(previous.token) && (token === void 0 || previous.token === token) && Number.isSafeInteger(previous.pid) && await processIdentity(previous.pid) === null;
+    return previous.format === 1 && previous.path === path && previous.uid === await lockUser() && typeof previous.processStart === "string" && !!previous.processStart && typeof previous.token === "string" && /^[a-f0-9-]{36}$/.test(previous.token) && (token === void 0 || previous.token === token) && Number.isSafeInteger(previous.pid) && await processIdentity(previous.pid) === null;
   } catch {
     return false;
   }
@@ -62,11 +184,13 @@ async function atomicJSON(path, value) {
   }
   try {
     await rename(pending, path);
-    const directory = await open(dirname(path), "r");
-    try {
-      await directory.sync();
-    } finally {
-      await directory.close();
+    if (process.platform !== "win32") {
+      const directory = await open(dirname(path), "r");
+      try {
+        await directory.sync();
+      } finally {
+        await directory.close();
+      }
     }
   } finally {
     await unlink(pending).catch(() => {
@@ -100,7 +224,7 @@ async function acquireLock(path) {
   try {
     const processStart = await processIdentity(process.pid);
     if (!processStart) throw new Error("\u5F53\u524D\u8FDB\u7A0B\u542F\u52A8\u8EAB\u4EFD\u672A\u77E5");
-    await lock.writeFile(JSON.stringify({ format: 1, path, uid: process.getuid?.(), pid: process.pid, processStart, startedAt: (/* @__PURE__ */ new Date()).toISOString(), token }));
+    await lock.writeFile(JSON.stringify({ format: 1, path, uid: await lockUser(), pid: process.pid, processStart, startedAt: (/* @__PURE__ */ new Date()).toISOString(), token }));
     await lock.sync();
   } catch (error) {
     await lock.close();
@@ -129,7 +253,7 @@ async function withLock(path, action) {
 // distribution/bootstrap/release.ts
 var version = /^\d+\.\d+\.\d+(?:-[a-zA-Z0-9.-]+)?$/;
 var hash = /^[a-f0-9]{64}$/;
-function integer(n) {
+function integer2(n) {
   return Number.isSafeInteger(n) && Number(n) >= 0;
 }
 function httpsURL(value) {
@@ -142,14 +266,14 @@ function httpsURL(value) {
   }
 }
 function artifact(a) {
-  if (!a || !hash.test(a.sha256) || !integer(a.downloadBytes) || !integer(a.expandedBytes) || !a.downloadBytes || !a.expandedBytes) return false;
+  if (!a || !hash.test(a.sha256) || !integer2(a.downloadBytes) || !integer2(a.expandedBytes) || !a.downloadBytes || !a.expandedBytes) return false;
   if (a.redirectHosts !== void 0 && (!Array.isArray(a.redirectHosts) || a.redirectHosts.length > 4 || !a.redirectHosts.every((s) => typeof s === "string" && /^[a-z0-9.-]+$/.test(s)))) return false;
   if (a.bundled !== void 0) return a.bundled === true && a.url === `https://bundled.invalid/${a.sha256}.tgz` && a.redirectHosts === void 0 && a.mirrors === void 0;
   return httpsURL(a.url) && (a.mirrors === void 0 || Array.isArray(a.mirrors) && a.mirrors.length <= 3 && a.mirrors.every(httpsURL));
 }
 function validateRelease(input) {
   const r = input;
-  if (!r || r.format !== 1 || r.bootstrapFormat !== 1 || !version.test(r.version) || !integer(r.nodeMajor) || r.nodeMajor < 24 || !integer(r.npmMajor) || r.npmMajor < 11 || !r.platform?.minimumOsRelease || !["darwin", "linux", "win32"].includes(r.platform.os) || !["arm64", "x64"].includes(r.platform.arch) || r.platform.libc !== void 0 && (r.platform.os !== "linux" || r.platform.libc !== "glibc") || r.assetPackage !== void 0 && (r.assetPackage.name !== `@pab-iprg/huohuo-assets-${r.platform.os}-${r.platform.arch}` || !version.test(r.assetPackage.version) || !r.runtime?.bundled || !r.pythonDependencies?.bundled) || !artifact(r.runtime) || r.runtime.name !== "@huohuo/research-agent" || r.runtime.version !== r.version || !/^sha512-[A-Za-z0-9+/]+={0,2}$/.test(r.runtime.integrity) || !artifact(r.python) || !artifact(r.pythonDependencies) || !r.python.build || !r.python.license || r.pythonDependencies.upstreamWheelCount !== void 0 && !integer(r.pythonDependencies.upstreamWheelCount) || !r.python.executable || r.python.executable.startsWith("/") || r.python.executable.split(/[\\/]/).some((p) => p === ".." || !p) || !version.test(r.dsh?.version) || !hash.test(r.dsh?.assemblySha256) || !hash.test(r.requirementsSha256) || !hash.test(r.profilesSha256) || !r.budget || ![
+  if (!r || r.format !== 1 || r.bootstrapFormat !== 1 || !version.test(r.version) || !integer2(r.nodeMajor) || r.nodeMajor < 24 || !integer2(r.npmMajor) || r.npmMajor < 11 || !r.platform?.minimumOsRelease || !["darwin", "linux", "win32"].includes(r.platform.os) || !["arm64", "x64"].includes(r.platform.arch) || r.platform.libc !== void 0 && (r.platform.os !== "linux" || r.platform.libc !== "glibc") || r.assetPackage !== void 0 && (r.assetPackage.name !== `@pab-iprg/huohuo-assets-${r.platform.os}-${r.platform.arch}` || !version.test(r.assetPackage.version) || !r.runtime?.bundled || !r.pythonDependencies?.bundled) || !artifact(r.runtime) || r.runtime.name !== "@huohuo/research-agent" || r.runtime.version !== r.version || !/^sha512-[A-Za-z0-9+/]+={0,2}$/.test(r.runtime.integrity) || !artifact(r.python) || !artifact(r.pythonDependencies) || !r.python.build || !r.python.license || r.pythonDependencies.upstreamWheelCount !== void 0 && !integer2(r.pythonDependencies.upstreamWheelCount) || !r.python.executable || r.python.executable.startsWith("/") || r.python.executable.split(/[\\/]/).some((p) => p === ".." || !p) || !version.test(r.dsh?.version) || !hash.test(r.dsh?.assemblySha256) || !hash.test(r.requirementsSha256) || !hash.test(r.profilesSha256) || !r.budget || ![
     "minimumEffectiveMemoryBytes",
     "startupHeadroomBytes",
     "heavyJobHeadroomBytes",
@@ -161,7 +285,7 @@ function validateRelease(input) {
     "processTreeBudgetBytes",
     "sampleIntervalMs",
     "sampleMaxAgeMs"
-  ].every((k) => integer(r.budget[k])) || r.budget.observedInstallRssBytes !== void 0 && (!integer(r.budget.observedInstallRssBytes) || r.budget.observedInstallRssBytes <= 0) || r.budget.startupHeadroomBytes <= 0 || r.budget.minimumEffectiveMemoryBytes <= 0 || r.budget.diskReserveBytes <= 0 || r.budget.recoverySamples < 2 || r.budget.heavyJobHeadroomBytes < r.budget.startupHeadroomBytes || r.budget.processTreeBudgetBytes <= 0 || r.budget.sampleIntervalMs < 1e3 || r.budget.sampleMaxAgeMs < r.budget.sampleIntervalMs * 2 || r.budget.sampleMaxAgeMs > 3e4 || !r.schema || !integer(r.schema.minimum) || !integer(r.schema.maximum) || r.schema.minimum > r.schema.maximum) {
+  ].every((k) => integer2(r.budget[k])) || r.budget.observedInstallRssBytes !== void 0 && (!integer2(r.budget.observedInstallRssBytes) || r.budget.observedInstallRssBytes <= 0) || r.budget.startupHeadroomBytes <= 0 || r.budget.minimumEffectiveMemoryBytes <= 0 || r.budget.diskReserveBytes <= 0 || r.budget.recoverySamples < 2 || r.budget.heavyJobHeadroomBytes < r.budget.startupHeadroomBytes || r.budget.processTreeBudgetBytes <= 0 || r.budget.sampleIntervalMs < 1e3 || r.budget.sampleMaxAgeMs < r.budget.sampleIntervalMs * 2 || r.budget.sampleMaxAgeMs > 3e4 || !r.schema || !integer2(r.schema.minimum) || !integer2(r.schema.maximum) || r.schema.minimum > r.schema.maximum) {
     throw new Error("\u53D1\u884C\u6E05\u5355\u65E0\u6548\u6216\u5C1A\u672A\u5B8C\u6210\u5E73\u53F0\u3001\u6458\u8981\u4E0E\u8D44\u6E90\u6D4B\u91CF\uFF1B\u4E0D\u80FD\u5B89\u88C5");
   }
   if (!hash.test(r.schema.migrationsSha256)) throw new Error("\u7F3A\u5C11\u6570\u636E\u5E93\u8FC1\u79FB\u88C5\u914D\u6458\u8981");
@@ -172,7 +296,7 @@ function validateRelease(input) {
 // distribution/bootstrap/artifact.ts
 import { createHash, randomUUID as randomUUID2 } from "node:crypto";
 import { createReadStream } from "node:fs";
-import { mkdir as mkdir2, open as open2, rename as rename2, rm, realpath, symlink, link, lstat } from "node:fs/promises";
+import { mkdir as mkdir2, open as open2, rename as rename2, rm, realpath, symlink, link, lstat, copyFile } from "node:fs/promises";
 import { dirname as dirname2, resolve, sep, posix } from "node:path";
 import { createGunzip } from "node:zlib";
 async function verifyArtifact(path, artifact2) {
@@ -286,8 +410,12 @@ async function transfer(artifact2, path, source, fetcher, onBytes) {
     await rm(pending, { force: true });
   }
 }
-function safePath(root, path) {
+function validateArchiveName(path, platform = process.platform) {
   if (!path || path.includes("\\") || path.includes("\0") || path.startsWith("/") || /^[A-Za-z]:/.test(path) || path.split("/").includes("..")) throw new Error("\u538B\u7F29\u5305\u8DEF\u5F84\u8D8A\u754C");
+  if (platform === "win32" && path.split("/").some((part) => part && part !== "." && (/[<>:"|?*\x00-\x1f]/.test(part) || /[. ]$/.test(part) || /^(?:con|prn|aux|nul|conin\$|conout\$|com[1-9¹²³]|lpt[1-9¹²³])$/i.test(part.split(".")[0].trimEnd())))) throw new Error("\u538B\u7F29\u5305\u542B Windows \u4E0D\u652F\u6301\u7684\u8DEF\u5F84\u540D\u79F0");
+}
+function safePath(root, path) {
+  validateArchiveName(path);
   const target = resolve(root, path);
   if (target !== root && !target.startsWith(root + sep)) throw new Error("\u538B\u7F29\u5305\u8DEF\u5F84\u8D8A\u754C");
   return target;
@@ -385,7 +513,8 @@ async function extractArchive(archive, root, expandedLimit) {
           throw e;
         }
         if (!source.startsWith(root + sep) || !(await lstat(source)).isFile()) throw new Error("\u94FE\u63A5\u5FC5\u987B\u6307\u5411\u5305\u5185\u666E\u901A\u6587\u4EF6");
-        if (item.symbolic) await symlink(item.text, item.target);
+        if (process.platform === "win32") await copyFile(source, item.target, 1);
+        else if (item.symbolic) await symlink(item.text, item.target);
         else await link(source, item.target);
       }
       if (later.length === pending.length) throw new Error("\u538B\u7F29\u5305\u94FE\u63A5\u7F3A\u5931\u6216\u5FAA\u73AF");
@@ -401,9 +530,9 @@ import { availableParallelism, totalmem } from "node:os";
 import { availableMemory, constrainedMemory } from "node:process";
 import { readFile as readFile3, realpath as realpath2, stat, statfs } from "node:fs/promises";
 import { dirname as dirname3, resolve as resolve2, sep as sep2 } from "node:path";
-import { execFile as execFile2 } from "node:child_process";
-import { promisify as promisify2 } from "node:util";
-var execute2 = promisify2(execFile2);
+import { execFile as execFile4 } from "node:child_process";
+import { promisify as promisify3 } from "node:util";
+var execute3 = promisify3(execFile4);
 async function existingParent(path) {
   let current = resolve2(path);
   while (true) {
@@ -425,6 +554,17 @@ function linuxAvailableMemory(processAvailable, meminfo) {
   const hostAvailable = Number(match[1]) * 1024;
   return Number.isSafeInteger(hostAvailable) && hostAvailable >= 0 ? Math.min(processAvailable, hostAvailable) : null;
 }
+function darwinAvailableMemory(processAvailable, effective, pressure, vmstat, constrained = false) {
+  if (processAvailable === null || !Number.isSafeInteger(processAvailable) || processAvailable <= 0) return null;
+  if (pressure !== "normal" || constrained || effective === null || !Number.isSafeInteger(effective) || effective <= 0) return processAvailable;
+  const pageSize = Number(/page size of (\d+) bytes/.exec(vmstat)?.[1]);
+  const counts = ["Pages free", "Pages purgeable", "Pages speculative", "File-backed pages"].map((label) => Number(new RegExp(`^${label}:\\s+(\\d+)\\.\\s*$`, "m").exec(vmstat)?.[1]));
+  if (![pageSize, ...counts].every(Number.isSafeInteger) || pageSize <= 0 || counts.some((n) => n < 0)) return processAvailable;
+  const [free, purgeable, speculative, fileBacked] = counts;
+  const estimate = pageSize * (free + Math.max(purgeable, Math.max(0, fileBacked - speculative)));
+  if (!Number.isSafeInteger(estimate) || estimate < 0 || estimate > effective) return processAvailable;
+  return Math.min(effective, Math.max(processAvailable, estimate));
+}
 async function sampleResources(paths) {
   const limit = constrainedMemory();
   let effectiveMemoryBytes = Math.min(totalmem(), limit || Infinity);
@@ -438,19 +578,14 @@ async function sampleResources(paths) {
   if (!(effectiveMemoryBytes > 0)) effectiveMemoryBytes = null;
   if (process.platform === "darwin") {
     try {
-      const { stdout } = await execute2("/usr/sbin/sysctl", ["-n", "kern.memorystatus_vm_pressure_level"], { timeout: 2e3 });
+      const { stdout } = await execute3("/usr/sbin/sysctl", ["-n", "kern.memorystatus_vm_pressure_level"], { timeout: 2e3 });
       pressure = { 1: "normal", 2: "high", 4: "critical" }[Number(stdout.trim())] ?? "unknown";
     } catch {
     }
     if (pressure === "normal" && availableMemoryBytes !== null && effectiveMemoryBytes !== null) {
       try {
-        const { stdout } = await execute2("/usr/bin/vm_stat", [], { timeout: 2e3 });
-        const pageBytes = Number(/page size of (\d+) bytes/.exec(stdout)?.[1]);
-        const pageCounts = ["free", "purgeable"].map((kind) => Number(new RegExp(`^Pages ${kind}:\\s+(\\d+)\\.`, "m").exec(stdout)?.[1]));
-        const reclaimable = pageBytes * pageCounts.reduce((sum, pages) => sum + pages, 0);
-        if (Number.isSafeInteger(reclaimable) && reclaimable > 0) {
-          availableMemoryBytes = Math.min(effectiveMemoryBytes, Math.max(availableMemoryBytes, reclaimable));
-        }
+        const { stdout } = await execute3("/usr/bin/vm_stat", [], { timeout: 2e3 });
+        availableMemoryBytes = darwinAvailableMemory(availableMemoryBytes, effectiveMemoryBytes, pressure, stdout, limit > 0);
       } catch {
       }
     }
@@ -464,6 +599,16 @@ async function sampleResources(paths) {
     } catch {
     }
   }
+  if (process.platform === "win32") {
+    try {
+      const snapshot = await windowsResourceSnapshot();
+      effectiveMemoryBytes = Math.min(effectiveMemoryBytes ?? Infinity, snapshot.totalBytes);
+      availableMemoryBytes = availableMemoryBytes === null ? null : Math.min(availableMemoryBytes, snapshot.availableBytes);
+      pressure = windowsMemoryPressure(snapshot.availableBytes, snapshot.totalBytes);
+    } catch {
+      pressure = "unknown";
+    }
+  }
   const disks = [];
   for (const path of [...new Set(paths.map((p) => resolve2(p)))]) {
     try {
@@ -538,10 +683,10 @@ function evaluateResources(sample, policy, costs, phase) {
 
 // runtime/npm.mjs
 import { existsSync } from "node:fs";
-import { dirname as dirname4, join as join2 } from "node:path";
+import { dirname as dirname4, join as join3 } from "node:path";
 function npmCommand() {
   if (process.platform !== "win32") return { command: "npm", prefix: [] };
-  const cli = join2(dirname4(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
+  const cli = join3(dirname4(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
   if (existsSync(cli)) return { command: process.execPath, prefix: [cli] };
   return { command: process.env.ComSpec ?? "cmd.exe", prefix: ["/d", "/s", "/c", "npm"] };
 }
@@ -596,29 +741,33 @@ async function ownedDirectory(path, owner) {
   await mkdir3(resolve3(path, ".."), { recursive: true, mode: 448 });
   try {
     await mkdir3(path, { mode: 448 });
-    await atomicJSON(join3(path, ".huohuo-owner.json"), { format: 1, owner });
+    await atomicJSON(join4(path, ".huohuo-owner.json"), { format: 1, owner });
   } catch (e) {
     if (e.code !== "EEXIST") throw e;
-    const marker = JSON.parse(await readFile4(join3(path, ".huohuo-owner.json"), "utf8"));
+    const marker = JSON.parse(await readFile4(join4(path, ".huohuo-owner.json"), "utf8"));
     if (marker.format !== 1 || marker.owner !== owner) throw new Error("\u76EE\u5F55\u5F52\u5C5E\u65E0\u6CD5\u6838\u9A8C\uFF1B\u672A\u63A5\u7BA1\u6216\u8986\u76D6");
   }
 }
-async function run(command, args, cwd, env = process.env) {
+async function run(command, args, cwd, env = process.env, onInterrupt) {
   await new Promise((done, fail) => {
     const child = spawn(command, args, { cwd, env, stdio: "inherit", detached: process.platform !== "win32" });
     let interrupted = false;
     let timer;
     const kill = (signal) => {
-      if (!child.pid) return;
-      try {
-        process.kill(process.platform === "win32" ? child.pid : -child.pid, signal);
-      } catch {
-      }
+      interruptProcessTree(child, signal);
     };
     const stop = () => {
+      if (interrupted) return;
       interrupted = true;
-      kill("SIGTERM");
-      timer ??= setTimeout(() => kill("SIGKILL"), 3e3);
+      if (process.platform === "win32" && onInterrupt) {
+        void onInterrupt().then((stopping) => {
+          if (!stopping) kill("SIGTERM");
+        }, () => kill("SIGTERM"));
+        timer = setTimeout(() => kill("SIGKILL"), 8e3);
+      } else {
+        kill("SIGTERM");
+        timer = setTimeout(() => kill("SIGKILL"), 3e3);
+      }
     };
     process.on("SIGINT", stop);
     process.on("SIGTERM", stop);
@@ -633,14 +782,14 @@ async function run(command, args, cwd, env = process.env) {
     });
     child.once("close", (code) => {
       cleanup();
-      code === 0 && !interrupted ? done() : fail(Object.assign(new Error("\u672C\u673A\u5B89\u88C5\u5B50\u8FDB\u7A0B\u5931\u8D25\u6216\u4E2D\u6B62\uFF0C\u4FDD\u7559\u539F\u9636\u6BB5\u4E0E\u5B9E\u4F8B"), { code: interrupted ? "INTERRUPTED" : `CHILD_${code}` }));
+      code === 0 && (!interrupted || process.platform === "win32" && onInterrupt !== void 0) ? done() : fail(Object.assign(new Error("\u672C\u673A\u5B89\u88C5\u5B50\u8FDB\u7A0B\u5931\u8D25\u6216\u4E2D\u6B62\uFF0C\u4FDD\u7559\u539F\u9636\u6BB5\u4E0E\u5B9E\u4F8B"), { code: interrupted ? "INTERRUPTED" : `CHILD_${code}` }));
     });
   });
 }
 async function readInstallation(home, recordFile = "installation.json") {
   let record;
   try {
-    record = JSON.parse(await readFile4(join3(home, recordFile), "utf8"));
+    record = JSON.parse(await readFile4(join4(home, recordFile), "utf8"));
   } catch (e) {
     if (e.code === "ENOENT") return;
     throw new Error("\u5B89\u88C5\u8BB0\u5F55\u65E0\u6CD5\u8BFB\u53D6\uFF0C\u672A\u91CD\u5EFA\u5B9E\u4F8B", { cause: e });
@@ -652,15 +801,15 @@ async function readInstallation(home, recordFile = "installation.json") {
 }
 function installationPaths(home, release) {
   const id = `${release.version}-${digest(release).slice(0, 16)}`;
-  const directory = join3(home, "releases", id);
+  const directory = join4(home, "releases", id);
   const dependencyBundle = release.pythonDependencies.bundled ? `-${release.pythonDependencies.sha256.slice(0, 16)}` : "";
   return {
     directory,
-    runtime: join3(directory, "node_modules/@huohuo/research-agent"),
-    python: join3(home, "runtimes/python", release.python.sha256),
-    environment: join3(home, "environments", `${release.python.sha256.slice(0, 16)}-${release.requirementsSha256.slice(0, 16)}${dependencyBundle}`),
-    archive: join3(home, "cache", release.runtime.sha256 + ".tgz"),
-    pythonArchive: join3(home, "cache", release.python.sha256 + ".tgz")
+    runtime: join4(directory, "node_modules/@huohuo/research-agent"),
+    python: join4(home, "runtimes/python", release.python.sha256),
+    environment: join4(home, "environments", `${release.python.sha256.slice(0, 16)}-${release.requirementsSha256.slice(0, 16)}${dependencyBundle}`),
+    archive: join4(home, "cache", release.runtime.sha256 + ".tgz"),
+    pythonArchive: join4(home, "cache", release.python.sha256 + ".tgz")
   };
 }
 function versionAtLeast(actual, minimum) {
@@ -682,20 +831,20 @@ async function install(home, candidate, hooks = {}, programsOnly = false) {
   home = resolve3(home);
   await mkdir3(home, { recursive: true, mode: 448 });
   home = await realpath3(home);
-  return withLock(join3(home, "state/install.lock"), async () => {
+  return withLock(join4(home, "state/install.lock"), async () => {
     if (!programsOnly) {
       try {
-        await access(join3(home, "state/default-run.lock"));
+        await access(join4(home, "state/default-run.lock"));
         throw new Error("\u5B9E\u4F8B\u4ECD\u6709\u8FD0\u884C\u9501\uFF1B\u5148\u6B63\u5E38\u505C\u6B62\u81EA\u5DF1\u7684\u5B9E\u4F8B\u518D\u4FEE\u590D\u7A0B\u5E8F");
       } catch (e) {
         if (e.code !== "ENOENT") throw e;
       }
     }
     const recordFile = programsOnly ? "state/upgrade-target.json" : "installation.json";
-    const recordPath = join3(home, recordFile);
+    const recordPath = join4(home, recordFile);
     let record = await readInstallation(home, recordFile);
     if (!programsOnly && !record && (await readdir(home)).some((name) => name !== "state")) throw new Error("\u76EE\u5F55\u542B\u65E0\u5B89\u88C5\u8BB0\u5F55\u7684\u65E2\u6709\u5185\u5BB9\uFF1B\u8BF7\u6838\u67E5\u5F52\u5C5E\u6216\u9009\u62E9\u7A7A\u76EE\u5F55");
-    if (!programsOnly && !record && (await readdir(join3(home, "state"))).some((name) => name !== "install.lock")) throw new Error("\u76EE\u5F55\u542B\u65E0\u6CD5\u786E\u8BA4\u5F52\u5C5E\u7684\u72B6\u6001\uFF1B\u672A\u91CD\u5EFA\u5B89\u88C5");
+    if (!programsOnly && !record && (await readdir(join4(home, "state"))).some((name) => name !== "install.lock")) throw new Error("\u76EE\u5F55\u542B\u65E0\u6CD5\u786E\u8BA4\u5F52\u5C5E\u7684\u72B6\u6001\uFF1B\u672A\u91CD\u5EFA\u5B89\u88C5");
     if (programsOnly && (await readInstallation(home))?.status !== "ready") throw new Error("\u5F53\u524D\u5B89\u88C5\u4E0D\u5B8C\u6574\uFF0C\u5148\u4FEE\u590D\u539F\u7248\u672C");
     const bundleDirectory = hooks.bundleDirectory;
     if (!programsOnly && record && bundleDirectory && candidate && ["installing", "blocked", "failed"].includes(record.status) && ["preflight", "download"].includes(record.stage) && Object.keys(record.stages).every((stage2) => stage2 === "preflight" || stage2 === "download")) {
@@ -712,12 +861,12 @@ async function install(home, candidate, hooks = {}, programsOnly = false) {
       const oldAssets = bundled(record.release);
       const available = await Promise.all(oldAssets.map(async (artifact2) => {
         const file = artifact2.sha256 + ".tgz";
-        return await hasFile(join3(bundleDirectory, file)) || await hasFile(join3(home, "cache", file));
+        return await hasFile(join4(bundleDirectory, file)) || await hasFile(join4(home, "cache", file));
       }));
       if (available.includes(false)) {
         const next = validateRelease(candidate);
         const nextAssets = bundled(next);
-        if (next.runtime.bundled && next.version === record.release.version && (await Promise.all(nextAssets.map((artifact2) => hasFile(join3(bundleDirectory, artifact2.sha256 + ".tgz"))))).every(Boolean)) {
+        if (next.runtime.bundled && next.version === record.release.version && (await Promise.all(nextAssets.map((artifact2) => hasFile(join4(bundleDirectory, artifact2.sha256 + ".tgz"))))).every(Boolean)) {
           record = void 0;
           hooks.progress?.("resume-current-package");
         }
@@ -731,12 +880,12 @@ async function install(home, candidate, hooks = {}, programsOnly = false) {
     record ??= { format: 1, release, releaseDigest: digest(release), home, status: "installing", stage: "preflight", stages: {} };
     await atomicJSON(recordPath, record);
     const paths = installationPaths(home, release);
-    const execute4 = hooks.run ?? run;
+    const execute5 = hooks.run ?? run;
     const sample = hooks.sample ?? sampleResources;
     const files = [
       { name: "\u706B\u706B\u8FD0\u884C\u5305", artifact: release.runtime, path: paths.archive },
       { name: "Python \u8FD0\u884C\u73AF\u5883", artifact: release.python, path: paths.pythonArchive },
-      { name: "Python \u4F9D\u8D56\u6E05\u5355\u6216\u79BB\u7EBF\u5305", artifact: release.pythonDependencies, path: join3(home, "cache", release.pythonDependencies.sha256 + ".tgz") }
+      { name: "Python \u4F9D\u8D56\u6E05\u5355\u6216\u79BB\u7EBF\u5305", artifact: release.pythonDependencies, path: join4(home, "cache", release.pythonDependencies.sha256 + ".tgz") }
     ];
     const withActivity = async (label, action) => {
       hooks.progress?.(label);
@@ -747,7 +896,7 @@ async function install(home, candidate, hooks = {}, programsOnly = false) {
         if (timer) clearInterval(timer);
       }
     };
-    const cached = async (path, artifact2) => {
+    const cached2 = async (path, artifact2) => {
       try {
         await verifyArtifact(path, artifact2);
         return true;
@@ -758,22 +907,22 @@ async function install(home, candidate, hooks = {}, programsOnly = false) {
     };
     const installed = async () => {
       try {
-        const owner = JSON.parse(await readFile4(join3(paths.python, ".huohuo-owner.json"), "utf8"));
-        await access(join3(paths.python, release.python.executable));
+        const owner = JSON.parse(await readFile4(join4(paths.python, ".huohuo-owner.json"), "utf8"));
+        await access(join4(paths.python, release.python.executable));
         const python = owner.owner === release.python.sha256;
-        const root = join3(home, "instances/default");
-        const initialization = JSON.parse(await readFile4(join3(root, "initialization.json"), "utf8"));
-        const dependencies = JSON.parse(await readFile4(join3(paths.environment, ".dependencies-ready.json"), "utf8"));
-        const worker = JSON.parse(await readFile4(join3(root, "worker-install.json"), "utf8"));
-        const chat = JSON.parse(await readFile4(join3(root, "dsh/profiles/huohuo-chat/installed.json"), "utf8"));
-        for (const profile of ["huohuo-chat", "huohuo-worker", "huohuo-strategy-worker"]) await access(join3(root, "dsh/profiles", profile, "node_modules/@huohuo/research-agent/package.json"));
-        await access(join3(paths.runtime, "lib/distribution/managed.js"));
+        const root = join4(home, "instances/default");
+        const initialization = JSON.parse(await readFile4(join4(root, "initialization.json"), "utf8"));
+        const dependencies = JSON.parse(await readFile4(join4(paths.environment, ".dependencies-ready.json"), "utf8"));
+        const worker = JSON.parse(await readFile4(join4(root, "worker-install.json"), "utf8"));
+        const chat = JSON.parse(await readFile4(join4(root, "dsh/profiles/huohuo-chat/installed.json"), "utf8"));
+        for (const profile of ["huohuo-chat", "huohuo-worker", "huohuo-strategy-worker"]) await access(join4(root, "dsh/profiles", profile, "node_modules/@huohuo/research-agent/package.json"));
+        await access(join4(paths.runtime, "lib/distribution/managed.js"));
         return { python, dependencies: initialization.package_sha256 === release.runtime.sha256 && initialization.status === "complete" && dependencies.sha256 === release.pythonDependencies.sha256 && worker.complete === true && chat.complete === true };
       } catch (error) {
         if (error.code !== "ENOENT") throw error;
         try {
-          const owner = JSON.parse(await readFile4(join3(paths.python, ".huohuo-owner.json"), "utf8"));
-          await access(join3(paths.python, release.python.executable));
+          const owner = JSON.parse(await readFile4(join4(paths.python, ".huohuo-owner.json"), "utf8"));
+          await access(join4(paths.python, release.python.executable));
           return { python: owner.owner === release.python.sha256, dependencies: false };
         } catch {
           return { python: false, dependencies: false };
@@ -781,19 +930,19 @@ async function install(home, candidate, hooks = {}, programsOnly = false) {
       }
     };
     const check = async () => {
-      const [cacheHits, inventory] = await Promise.all([Promise.all(files.map((file) => cached(file.path, file.artifact))), installed()]);
+      const [cacheHits, inventory] = await Promise.all([Promise.all(files.map((file) => cached2(file.path, file.artifact))), installed()]);
       const remainingDependencies = inventory.dependencies ? 0 : release.budget.dependenciesBytes;
       const costs = [
-        { path: join3(home, "cache"), bytes: files.reduce((sum, file, index) => sum + (cacheHits[index] ? 0 : file.artifact.downloadBytes), 0) },
+        { path: join4(home, "cache"), bytes: files.reduce((sum, file, index) => sum + (cacheHits[index] ? 0 : file.artifact.downloadBytes), 0) },
         { path: paths.directory, bytes: inventory.dependencies ? 0 : release.runtime.expandedBytes + release.budget.installTemporaryBytes },
         { path: paths.python, bytes: inventory.python ? 0 : release.python.expandedBytes },
         { path: paths.environment, bytes: 0 },
-        { path: join3(home, "instances/default"), bytes: 0 },
+        { path: join4(home, "instances/default"), bytes: 0 },
         { path: paths.directory, bytes: inventory.dependencies ? 0 : release.pythonDependencies.expandedBytes },
-        { path: join3(home, "backups"), bytes: release.budget.backupBytes }
+        { path: join4(home, "backups"), bytes: release.budget.backupBytes }
       ];
       const observation = await sample(costs.map((c) => c.path));
-      const dependencyPaths = [paths.directory, paths.environment, join3(home, "instances/default")];
+      const dependencyPaths = [paths.directory, paths.environment, join4(home, "instances/default")];
       const volumes = /* @__PURE__ */ new Set();
       for (const path of dependencyPaths) {
         const device = diskBudgets(observation, [{ path, bytes: 0 }], 0)[0].device;
@@ -803,7 +952,7 @@ async function install(home, candidate, hooks = {}, programsOnly = false) {
         }
       }
       const result = evaluateResources(observation, release.budget, costs, "install");
-      await atomicJSON(join3(home, "state/resources.json"), result);
+      await atomicJSON(join4(home, "state/resources.json"), result);
       if (result.status === "unknown" || result.status === "blocked") {
         const details = result.reasons.map((reason) => `- ${reason}`).join("\n");
         throw Object.assign(new Error(`\u706B\u706B\u6682\u65F6\u65E0\u6CD5\u7EE7\u7EED\u5B89\u88C5\u3002
@@ -850,9 +999,9 @@ ${details}
     };
     await stage("preflight", async (plan) => {
       const npm = npmCommand();
-      const { stdout } = await promisify3(execFile3)(npm.command, [...npm.prefix, "--version"], { timeout: 5e3 });
+      const { stdout } = await promisify4(execFile5)(npm.command, [...npm.prefix, "--version"], { timeout: 5e3 });
       if (!/^\d+\.\d+\.\d+\s*$/.test(stdout) || Number(stdout.split(".")[0]) !== release.npmMajor) throw new Error("npm \u7248\u672C\u672A\u77E5\u6216\u4E0D\u5728\u6B64\u53D1\u884C\u5DF2\u9A8C\u8BC1\u8303\u56F4\u5185");
-      const probe = join3(home, `.write-probe-${randomUUID3()}`);
+      const probe = join4(home, `.write-probe-${randomUUID3()}`);
       try {
         await atomicJSON(probe, { probe: true });
       } finally {
@@ -882,19 +1031,19 @@ ${details}
     await stage("install-runtime", async () => {
       try {
         await access(paths.python);
-        const marker = JSON.parse(await readFile4(join3(paths.python, ".huohuo-owner.json"), "utf8"));
+        const marker = JSON.parse(await readFile4(join4(paths.python, ".huohuo-owner.json"), "utf8"));
         if (marker.owner !== release.python.sha256) throw new Error("\u53D7\u7BA1 Python \u5F52\u5C5E\u4E0D\u7B26");
-        await access(join3(paths.python, release.python.executable));
+        await access(join4(paths.python, release.python.executable));
         return release.python.sha256;
       } catch (e) {
         if (e.code !== "ENOENT") throw e;
       }
-      await mkdir3(join3(home, "runtimes/python"), { recursive: true, mode: 448 });
+      await mkdir3(join4(home, "runtimes/python"), { recursive: true, mode: 448 });
       const staging = `${paths.python}.${randomUUID3()}.staging`;
       try {
         await extractArchive(paths.pythonArchive, staging, release.python.expandedBytes);
-        await access(join3(staging, release.python.executable));
-        await atomicJSON(join3(staging, ".huohuo-owner.json"), { format: 1, owner: release.python.sha256 });
+        await access(join4(staging, release.python.executable));
+        await atomicJSON(join4(staging, ".huohuo-owner.json"), { format: 1, owner: release.python.sha256 });
         await rename3(staging, paths.python);
       } finally {
         await rm2(staging, { recursive: true, force: true });
@@ -903,30 +1052,30 @@ ${details}
     });
     await stage("install-dependencies", async () => {
       await ownedDirectory(paths.directory, record.releaseDigest);
-      await atomicJSON(join3(paths.directory, "package.json"), {
+      await atomicJSON(join4(paths.directory, "package.json"), {
         name: "huohuo-managed-release",
         private: true,
         dependencies: { "@huohuo/research-agent": `file:${paths.archive}` }
       });
       const npm = npmCommand();
-      await withActivity("\u5B89\u88C5 npm \u4F9D\u8D56", () => execute4(npm.command, [...npm.prefix, "install", "--omit=dev", "--ignore-scripts", "--no-audit", "--no-fund", "--prefer-offline", "--cache", join3(home, "cache/npm")], paths.directory));
-      const runtime = JSON.parse(await readFile4(join3(paths.runtime, "package.json"), "utf8"));
+      await withActivity("\u5B89\u88C5 npm \u4F9D\u8D56", () => execute5(npm.command, [...npm.prefix, "install", "--omit=dev", "--ignore-scripts", "--no-audit", "--no-fund", "--prefer-offline", "--cache", join4(home, "cache/npm")], paths.directory));
+      const runtime = JSON.parse(await readFile4(join4(paths.runtime, "package.json"), "utf8"));
       if (runtime.name !== release.runtime.name || runtime.version !== release.version) throw new Error("\u8FD0\u884C\u5305\u8EAB\u4EFD\u4E0D\u7B26");
-      const requirements = await readFile4(join3(paths.runtime, "sidecar/requirements.lock"));
+      const requirements = await readFile4(join4(paths.runtime, "sidecar/requirements.lock"));
       if (createHash2("sha256").update(requirements).digest("hex") !== release.requirementsSha256) throw new Error("Python \u4F9D\u8D56\u9501\u6458\u8981\u4E0D\u7B26");
-      const assembly = await readFile4(join3(paths.runtime, "npm-shrinkwrap.json"));
+      const assembly = await readFile4(join4(paths.runtime, "npm-shrinkwrap.json"));
       if (createHash2("sha256").update(assembly).digest("hex") !== release.dsh.assemblySha256) throw new Error("DSH \u88C5\u914D\u9501\u6458\u8981\u4E0D\u7B26");
       await ownedDirectory(paths.environment, `${release.python.sha256}:${release.requirementsSha256}`);
-      const python = join3(paths.environment, process.platform === "win32" ? "Scripts/python.exe" : "bin/python");
-      const wheels = join3(paths.directory, `wheels-${release.pythonDependencies.sha256}`);
+      const python = join4(paths.environment, process.platform === "win32" ? "Scripts/python.exe" : "bin/python");
+      const wheels = join4(paths.directory, `wheels-${release.pythonDependencies.sha256}`);
       try {
-        await access(join3(wheels, "requirements.txt"));
+        await access(join4(wheels, "requirements.txt"));
       } catch (e) {
         if (e.code !== "ENOENT") throw e;
         const staging = `${wheels}.${randomUUID3()}.staging`;
         try {
-          await extractArchive(join3(home, "cache", release.pythonDependencies.sha256 + ".tgz"), staging, release.pythonDependencies.expandedBytes);
-          await access(join3(staging, "requirements.txt"));
+          await extractArchive(join4(home, "cache", release.pythonDependencies.sha256 + ".tgz"), staging, release.pythonDependencies.expandedBytes);
+          await access(join4(staging, "requirements.txt"));
           await rename3(staging, wheels);
         } finally {
           await rm2(staging, { recursive: true, force: true });
@@ -934,7 +1083,7 @@ ${details}
       }
       let environmentReady = false;
       try {
-        const ready = JSON.parse(await readFile4(join3(paths.environment, ".dependencies-ready.json"), "utf8"));
+        const ready = JSON.parse(await readFile4(join4(paths.environment, ".dependencies-ready.json"), "utf8"));
         if (ready.sha256 !== release.pythonDependencies.sha256) throw new Error("\u5DF2\u6709\u73AF\u5883\u7ED1\u5B9A\u4E0D\u540C wheel \u4EA7\u7269\uFF1B\u4E0D\u80FD\u539F\u4F4D\u6539\u5199\u5171\u4EAB\u73AF\u5883");
         await access(python);
         environmentReady = true;
@@ -942,13 +1091,13 @@ ${details}
         if (e.code !== "ENOENT") throw e;
       }
       if (!environmentReady) {
-        await execute4(join3(paths.python, release.python.executable), ["-m", "venv", paths.environment], home);
+        await execute5(join4(paths.python, release.python.executable), ["-m", "venv", paths.environment], home);
         if (release.pythonDependencies.bundled && hooks.progress) {
-          const lock = await readFile4(join3(wheels, "requirements.txt"), "utf8");
+          const lock = await readFile4(join4(wheels, "requirements.txt"), "utf8");
           const upstream = lock.split("\n").filter((line) => /^[\w.-]+\s+@\s+https:\/\//.test(line)).length;
           if (upstream) hooks.progress?.(`Python \u4F9D\u8D56\u6E05\u5355\u6709 ${upstream} \u4E2A\u4E0A\u6E38\u6587\u4EF6\uFF0C\u4E0B\u65B9\u663E\u793A\u6B63\u5728\u5904\u7406\u7684\u6587\u4EF6`);
         }
-        await withActivity("\u5B89\u88C5 Python \u4F9D\u8D56", () => execute4(python, [
+        await withActivity("\u5B89\u88C5 Python \u4F9D\u8D56", () => execute5(python, [
           "-m",
           "pip",
           "--isolated",
@@ -960,11 +1109,15 @@ ${details}
           "--only-binary=:all:",
           ...release.pythonDependencies.bundled ? ["--no-cache-dir"] : [],
           "-r",
-          join3(wheels, "requirements.txt")
+          join4(wheels, "requirements.txt")
         ], home));
       }
-      await execute4(python, ["-m", "pip", "--isolated", "check"], home);
-      await atomicJSON(join3(paths.environment, ".dependencies-ready.json"), { sha256: release.pythonDependencies.sha256 });
+      await execute5(python, ["-m", "pip", "--isolated", "check"], home);
+      if (process.platform === "win32") {
+        hooks.progress?.("\u68C0\u67E5 Windows Python \u4E0E\u672C\u5730\u4F9D\u8D56\u8FD0\u884C\u5E93");
+        await execute5(python, ["-c", 'import numpy,pandas,lxml.etree,pydantic_core,akshare; from py_mini_racer import MiniRacer; ctx=MiniRacer(); assert ctx.eval("1+1")==2; ctx.close(); print("Windows Python \u4F9D\u8D56\u52A0\u8F7D\u68C0\u67E5\u901A\u8FC7")'], home);
+      }
+      await atomicJSON(join4(paths.environment, ".dependencies-ready.json"), { sha256: release.pythonDependencies.sha256 });
       return { python, runtime: release.runtime.sha256 };
     });
     if (programsOnly) {
@@ -974,11 +1127,11 @@ ${details}
       return record;
     }
     await stage("assemble-profiles", async () => {
-      await withActivity("\u914D\u7F6E\u5BF9\u8BDD\u4E0E\u540E\u53F0\u8FD0\u884C\u4F9D\u8D56", () => execute4(process.execPath, [join3(paths.runtime, "lib/distribution/managed.js"), "prepare", home], home));
+      await withActivity("\u914D\u7F6E\u5BF9\u8BDD\u4E0E\u540E\u53F0\u8FD0\u884C\u4F9D\u8D56", () => execute5(process.execPath, [join4(paths.runtime, "lib/distribution/managed.js"), "prepare", home], home));
       return { release: record.releaseDigest };
     });
     await stage("verify", async () => {
-      await execute4(process.execPath, [join3(paths.runtime, "lib/distribution/managed.js"), "verify-live", home], home);
+      await execute5(process.execPath, [join4(paths.runtime, "lib/distribution/managed.js"), "verify-live", home], home);
       return { release: record.releaseDigest };
     });
     record.status = "ready";
@@ -991,14 +1144,14 @@ ${details}
 // distribution/bootstrap/control.ts
 import { createServer, request as httpRequest } from "node:http";
 import { readFile as readFile5, rm as rm3 } from "node:fs/promises";
-import { join as join4 } from "node:path";
-import { execFile as execFile4 } from "node:child_process";
-import { promisify as promisify4 } from "node:util";
-var execute3 = promisify4(execFile4);
+import { join as join5 } from "node:path";
+import { execFile as execFile6 } from "node:child_process";
+import { promisify as promisify5 } from "node:util";
+var execute4 = promisify5(execFile6);
 async function control(home, releaseDigest, command) {
   let binding;
   try {
-    binding = JSON.parse(await readFile5(join4(home, "state/default-control.json"), "utf8"));
+    binding = JSON.parse(await readFile5(join5(home, "state/default-control.json"), "utf8"));
   } catch (e) {
     if (e.code === "ENOENT") return false;
     throw new Error("\u672C\u673A\u8FD0\u884C\u8BB0\u5F55\u65E0\u6CD5\u6838\u9A8C");
@@ -1034,7 +1187,7 @@ async function control(home, releaseDigest, command) {
       req.end();
     });
   } catch (error) {
-    if (error.code === "ECONNREFUSED" && await isLockOwnerDead(join4(home, "state/default-run.lock"), binding.runOwner)) return false;
+    if (error.code === "ECONNREFUSED" && await isLockOwnerDead(join5(home, "state/default-run.lock"), binding.runOwner)) return false;
     throw error;
   }
   return true;
@@ -1042,13 +1195,13 @@ async function control(home, releaseDigest, command) {
 
 // distribution/bootstrap/maintenance.ts
 import { access as access2, readFile as readFile6, readdir as readdir2, lstat as lstat2, rename as rename4, rm as rm4, realpath as realpath4 } from "node:fs/promises";
-import { join as join5, resolve as resolve4 } from "node:path";
+import { join as join6, resolve as resolve4, sep as sep3 } from "node:path";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { setTimeout as delay } from "node:timers/promises";
 async function upgradeJournal(home) {
   try {
-    const value = JSON.parse(await readFile6(join5(home, "state/upgrade.json"), "utf8"));
-    if (value.format !== 1 || !/^[a-f0-9]{64}$/.test(value.from) || !/^[a-f0-9]{64}$/.test(value.to) || !["stopping", "backed-up", "schema-unchanged", "profiles", "migrated", "verified", "complete"].includes(value.stage) || !value.backup.startsWith(join5(home, "backups") + "/")) throw new Error("\u5347\u7EA7\u8BB0\u5F55\u65E0\u6548");
+    const value = JSON.parse(await readFile6(join6(home, "state/upgrade.json"), "utf8"));
+    if (value.format !== 1 || !/^[a-f0-9]{64}$/.test(value.from) || !/^[a-f0-9]{64}$/.test(value.to) || !["stopping", "backed-up", "schema-unchanged", "profiles", "migrated", "verified", "complete"].includes(value.stage) || !value.backup.startsWith(join6(home, "backups") + sep3)) throw new Error("\u5347\u7EA7\u8BB0\u5F55\u65E0\u6548");
     return value;
   } catch (error) {
     if (error.code === "ENOENT") return;
@@ -1072,7 +1225,7 @@ async function stopOwned(home, releaseDigest) {
   if (!await control(home, releaseDigest, "stop")) return;
   for (let i = 0; i < 100; i++) {
     try {
-      await access2(join5(home, "state/default-run.lock"));
+      await access2(join6(home, "state/default-run.lock"));
     } catch (error) {
       if (error.code === "ENOENT") return;
       throw error;
@@ -1087,9 +1240,9 @@ async function backupBytes(directory) {
     for (const item of await readdir2(path, { withFileTypes: true })) {
       if (["node_modules", "cache", "python", "__pycache__"].includes(item.name)) continue;
       if (item.isSymbolicLink()) throw new Error("\u5907\u4EFD\u4E0D\u63A5\u7BA1\u672A\u77E5\u7684\u5B9E\u4F8B\u94FE\u63A5");
-      if (item.isDirectory()) await visit(join5(path, item.name));
+      if (item.isDirectory()) await visit(join6(path, item.name));
       else {
-        const info = await lstat2(join5(path, item.name));
+        const info = await lstat2(join6(path, item.name));
         bytes += info.size + 512;
       }
     }
@@ -1107,19 +1260,19 @@ async function upgrade(home, candidate, hooks = {}) {
   if (journal && journal.stage !== "complete" && journal.to !== digest(next)) throw new Error("\u5B58\u5728\u672A\u5B8C\u6210\u5347\u7EA7\uFF1B\u5FC5\u987B\u5148\u7EE7\u7EED\u539F\u56FA\u5B9A\u76EE\u6807");
   if (current.releaseDigest === digest(next)) {
     if (journal && journal.to === current.releaseDigest && journal.stage !== "complete") {
-      await (hooks.run ?? run)(process.execPath, [join5(installationPaths(home, next).runtime, "lib/distribution/managed.js"), "verify-live", home], home);
+      await (hooks.run ?? run)(process.execPath, [join6(installationPaths(home, next).runtime, "lib/distribution/managed.js"), "verify-live", home], home);
       journal.stage = "complete";
-      await atomicJSON(join5(home, "state/upgrade.json"), journal);
+      await atomicJSON(join6(home, "state/upgrade.json"), journal);
     }
     hooks.progress?.("\u5DF2\u7ECF\u662F\u540C\u4E00\u53D1\u884C\uFF0C\u65E0\u9700\u8FC1\u79FB");
     return;
   }
   assertCompatibleUpgrade(current.release, next);
   if (journal?.stage === "complete") {
-    await withLock(join5(home, "state/install.lock"), async () => {
-      await rename4(join5(home, "state/upgrade.json"), join5(home, `state/upgrade-${randomUUID4()}.json`));
+    await withLock(join6(home, "state/install.lock"), async () => {
+      await rename4(join6(home, "state/upgrade.json"), join6(home, `state/upgrade-${randomUUID4()}.json`));
       try {
-        await rename4(join5(home, "state/upgrade-target.json"), join5(home, `state/upgrade-target-${randomUUID4()}.json`));
+        await rename4(join6(home, "state/upgrade-target.json"), join6(home, `state/upgrade-target-${randomUUID4()}.json`));
       } catch (error) {
         if (error.code !== "ENOENT") throw error;
       }
@@ -1128,58 +1281,58 @@ async function upgrade(home, candidate, hooks = {}) {
   }
   const target = await install(home, next, hooks, true);
   if (target.releaseDigest !== digest(next)) throw new Error("\u5347\u7EA7\u6062\u590D\u76EE\u6807\u4E0E\u8BF7\u6C42\u4E0D\u540C\uFF1B\u4FDD\u7559\u539F\u56FA\u5B9A\u76EE\u6807");
-  const execute4 = hooks.run ?? run;
-  await withLock(join5(home, "state/install.lock"), async () => {
+  const execute5 = hooks.run ?? run;
+  await withLock(join6(home, "state/install.lock"), async () => {
     current = await readInstallation(home);
     if (journal && journal.from !== current.releaseDigest) throw new Error("\u5347\u7EA7\u671F\u95F4\u539F\u53D1\u884C\u7ED1\u5B9A\u53D8\u5316\uFF1B\u8BF7\u5148\u5BF9\u8D26");
     journal ??= {
       format: 1,
       from: current.releaseDigest,
       to: target.releaseDigest,
-      backup: join5(home, "backups", `upgrade-${target.releaseDigest.slice(0, 16)}-${randomUUID4()}`),
+      backup: join6(home, "backups", `upgrade-${target.releaseDigest.slice(0, 16)}-${randomUUID4()}`),
       stage: "stopping"
     };
-    await atomicJSON(join5(home, "state/upgrade.json"), journal);
+    await atomicJSON(join6(home, "state/upgrade.json"), journal);
     await stopOwned(home, current.releaseDigest);
-    const releaseRun = await acquireLock(join5(home, "state/default-run.lock"));
+    const releaseRun = await acquireLock(join6(home, "state/default-run.lock"));
     try {
-      const bytes = await backupBytes(join5(home, "instances/default"));
+      const bytes = await backupBytes(join6(home, "instances/default"));
       const result = evaluateResources(
-        await (hooks.sample ?? sampleResources)([join5(home, "backups")]),
+        await (hooks.sample ?? sampleResources)([join6(home, "backups")]),
         target.release.budget,
-        [{ path: join5(home, "backups"), bytes }],
+        [{ path: join6(home, "backups"), bytes }],
         "install"
       );
       if (result.status === "unknown" || result.status === "blocked") throw new Error("\u4E00\u81F4\u6027\u5907\u4EFD\u8D44\u6E90\u4E0D\u8DB3\uFF1B\u539F\u6570\u636E\u4FDD\u7559");
       if (journal.stage === "stopping") {
-        await execute4(process.execPath, [join5(installationPaths(home, current.release).runtime, "lib/distribution/managed.js"), "backup", home], home);
+        await execute5(process.execPath, [join6(installationPaths(home, current.release).runtime, "lib/distribution/managed.js"), "backup", home], home);
         journal.stage = "backed-up";
-        await atomicJSON(join5(home, "state/upgrade.json"), journal);
+        await atomicJSON(join6(home, "state/upgrade.json"), journal);
       }
       const runtime = installationPaths(home, target.release).runtime;
-      await execute4(process.execPath, [join5(runtime, "lib/distribution/managed.js"), "prepare-upgrade", home], home);
+      await execute5(process.execPath, [join6(runtime, "lib/distribution/managed.js"), "prepare-upgrade", home], home);
       journal.stage = "profiles";
-      await atomicJSON(join5(home, "state/upgrade.json"), journal);
+      await atomicJSON(join6(home, "state/upgrade.json"), journal);
       if (current.release.schema.migrationsSha256 !== target.release.schema.migrationsSha256) {
         const space = evaluateResources(
-          await (hooks.sample ?? sampleResources)([join5(home, "instances/default")]),
+          await (hooks.sample ?? sampleResources)([join6(home, "instances/default")]),
           target.release.budget,
-          [{ path: join5(home, "instances/default"), bytes: bytes + target.release.budget.installTemporaryBytes }],
+          [{ path: join6(home, "instances/default"), bytes: bytes + target.release.budget.installTemporaryBytes }],
           "install"
         );
         if (space.status === "blocked" || space.status === "unknown") throw new Error("\u8FC1\u79FB\u524D\u8D44\u6E90\u4E0D\u8DB3\uFF1B\u4FDD\u7559\u5347\u7EA7\u65E5\u5FD7\u548C\u5F53\u524D\u6570\u636E");
-        await execute4(process.execPath, [join5(runtime, "lib/distribution/managed.js"), "migrate-upgrade", home], home);
+        await execute5(process.execPath, [join6(runtime, "lib/distribution/managed.js"), "migrate-upgrade", home], home);
       }
       journal.stage = "migrated";
-      await atomicJSON(join5(home, "state/upgrade.json"), journal);
-      await execute4(process.execPath, [join5(runtime, "lib/distribution/managed.js"), "verify-upgrade", home], home);
+      await atomicJSON(join6(home, "state/upgrade.json"), journal);
+      await execute5(process.execPath, [join6(runtime, "lib/distribution/managed.js"), "verify-upgrade", home], home);
       journal.stage = "verified";
-      await atomicJSON(join5(home, "state/upgrade.json"), journal);
+      await atomicJSON(join6(home, "state/upgrade.json"), journal);
       target.status = "ready";
       target.stage = "ready";
-      await atomicJSON(join5(home, "installation.json"), target);
+      await atomicJSON(join6(home, "installation.json"), target);
       journal.stage = "complete";
-      await atomicJSON(join5(home, "state/upgrade.json"), journal);
+      await atomicJSON(join6(home, "state/upgrade.json"), journal);
       hooks.progress?.("\u5347\u7EA7\u9A8C\u8BC1\u901A\u8FC7\uFF0C\u5DF2\u5207\u6362\u53D1\u884C\u7ED1\u5B9A\uFF1B\u5907\u4EFD\u4FDD\u7559");
     } finally {
       await releaseRun();
@@ -1188,7 +1341,7 @@ async function upgrade(home, candidate, hooks = {}) {
 }
 async function removeOwned(path, expected) {
   try {
-    const marker = JSON.parse(await readFile6(join5(path, ".huohuo-owner.json"), "utf8"));
+    const marker = JSON.parse(await readFile6(join6(path, ".huohuo-owner.json"), "utf8"));
     if (marker.format !== 1 || marker.owner !== expected) throw new Error("\u53D7\u7BA1\u76EE\u5F55\u5F52\u5C5E\u4E0D\u7B26\uFF0C\u672A\u5220\u9664");
     await rm4(path, { recursive: true });
   } catch (error) {
@@ -1197,25 +1350,25 @@ async function removeOwned(path, expected) {
 }
 async function uninstall(home, hooks = {}) {
   home = await realpath4(resolve4(home));
-  await withLock(join5(home, "state/install.lock"), async () => {
+  await withLock(join6(home, "state/install.lock"), async () => {
     const current = await readInstallation(home);
     if (!current) throw new Error("\u6CA1\u6709\u53EF\u6838\u9A8C\u7684\u6301\u4E45\u5B89\u88C5");
     const journal = await upgradeJournal(home);
     if (journal && journal.stage !== "complete") throw new Error("\u5347\u7EA7\u5C1A\u672A\u5BF9\u8D26\uFF0C\u4E0D\u80FD\u5378\u8F7D\u7A0B\u5E8F");
     await stopOwned(home, current.releaseDigest);
-    const releaseRun = await acquireLock(join5(home, "state/default-run.lock"));
+    const releaseRun = await acquireLock(join6(home, "state/default-run.lock"));
     try {
       const paths = installationPaths(home, current.release);
-      if ((await readdir2(join5(home, "instances"))).some((name) => name !== "default")) throw new Error("\u68C0\u6D4B\u5230\u5176\u4ED6\u5B9E\u4F8B\uFF1B\u5171\u4EAB\u8FD0\u884C\u73AF\u5883\u5F52\u5C5E\u9700\u5148\u6838\u67E5\uFF0C\u672A\u5220\u9664");
+      if ((await readdir2(join6(home, "instances"))).some((name) => name !== "default")) throw new Error("\u68C0\u6D4B\u5230\u5176\u4ED6\u5B9E\u4F8B\uFF1B\u5171\u4EAB\u8FD0\u884C\u73AF\u5883\u5F52\u5C5E\u9700\u5148\u6838\u67E5\uFF0C\u672A\u5220\u9664");
       if (current.status !== "uninstalled") {
-        await (hooks.run ?? run)(process.execPath, [join5(paths.runtime, "lib/distribution/managed.js"), "uninstall-programs", home], home);
+        await (hooks.run ?? run)(process.execPath, [join6(paths.runtime, "lib/distribution/managed.js"), "uninstall-programs", home], home);
         current.status = "uninstalled";
         current.stage = "uninstalled";
-        await atomicJSON(join5(home, "installation.json"), current);
+        await atomicJSON(join6(home, "installation.json"), current);
       }
       await removeOwned(paths.directory, current.releaseDigest);
       await removeOwned(paths.environment, `${current.release.python.sha256}:${current.release.requirementsSha256}`);
-      if (!(await readdir2(join5(home, "releases"))).length) await removeOwned(paths.python, current.release.python.sha256);
+      if (!(await readdir2(join6(home, "releases"))).length) await removeOwned(paths.python, current.release.python.sha256);
       hooks.progress?.(`\u5DF2\u5378\u8F7D\u53EF\u518D\u751F\u6210\u7A0B\u5E8F\uFF1B\u5B9E\u4F8B\u3001\u51ED\u636E\u3001\u4F1A\u8BDD\u548C\u5907\u4EFD\u4FDD\u7559\u5728 ${home}`);
     } finally {
       await releaseRun();
@@ -1226,7 +1379,7 @@ async function uninstall(home, hooks = {}) {
 // distribution/bootstrap/install-ui.ts
 import { createInterface } from "node:readline";
 import { homedir } from "node:os";
-import { relative, sep as sep3 } from "node:path";
+import { relative, sep as sep4 } from "node:path";
 var gb = (bytes) => bytes === null ? "\u672A\u77E5" : `${(bytes / 1e9).toFixed(2)} GB`;
 var mb = (bytes) => bytes < 1e5 ? `${(bytes / 1e3).toFixed(1)} KB` : `${(bytes / 1e6).toFixed(1)} MB`;
 var memory = (bytes) => {
@@ -1236,7 +1389,7 @@ var memory = (bytes) => {
 function displayPath(path) {
   const local = relative(homedir(), path);
   if (!local) return "~";
-  return local === ".." || local.startsWith(`..${sep3}`) ? path : `~${sep3}${local}`;
+  return local === ".." || local.startsWith(`..${sep4}`) ? path : `~${sep4}${local}`;
 }
 function installUI(assumeYes) {
   const interactive = process.stdin.isTTY && process.stderr.isTTY;
@@ -1339,7 +1492,7 @@ function installUI(assumeYes) {
 
 // distribution/bootstrap/status-ui.ts
 import { readFile as readFile7 } from "node:fs/promises";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
 var mib = (bytes) => typeof bytes === "number" && Number.isFinite(bytes) ? `${Math.round(bytes / 2 ** 20)} MiB` : "\u672A\u77E5";
 var pressureLabels = { normal: "\u6B63\u5E38", high: "\u504F\u9AD8", critical: "\u4E25\u91CD", unknown: "\u672A\u77E5" };
@@ -1350,7 +1503,7 @@ async function statusLines(home) {
   if (installed.status !== "ready") return [title, "\u5B89\u88C5\u5C1A\u672A\u5B8C\u6210\u3002"];
   let admission;
   try {
-    admission = JSON.parse(await readFile7(join6(home, "state/default-admission.json"), "utf8"));
+    admission = JSON.parse(await readFile7(join7(home, "state/default-admission.json"), "utf8"));
   } catch (error) {
     if (error.code !== "ENOENT") return [title, "\u6682\u65F6\u65E0\u6CD5\u8BFB\u53D6\u8D44\u6E90\u72B6\u6001\u3002"];
   }
@@ -1419,10 +1572,10 @@ async function showStatus(home, watch) {
 // distribution/bootstrap/assets.ts
 import { createRequire } from "node:module";
 import { readFile as readFile8 } from "node:fs/promises";
-import { dirname as dirname5, join as join7 } from "node:path";
+import { dirname as dirname5, join as join8 } from "node:path";
 import { fileURLToPath } from "node:url";
 async function assetsDirectory(release, entryURL = import.meta.url) {
-  if (!release?.assetPackage) return join7(dirname5(fileURLToPath(entryURL)), "assets");
+  if (!release?.assetPackage) return join8(dirname5(fileURLToPath(entryURL)), "assets");
   const expected = release.assetPackage;
   let file;
   try {
@@ -1434,7 +1587,7 @@ async function assetsDirectory(release, entryURL = import.meta.url) {
   if (manifest.name !== expected.name || manifest.version !== expected.version) {
     throw new Error("\u706B\u706B\u5165\u53E3\u4E0E\u5E73\u53F0\u8D44\u6E90\u5305\u7248\u672C\u4E0D\u4E00\u81F4\u3002\u8BF7\u91CD\u65B0\u8FD0\u884C\u540C\u4E00\u7248\u672C\u7684\u5B8C\u6574\u5B89\u88C5\u547D\u4EE4\u3002");
   }
-  return join7(dirname5(file), "assets");
+  return join8(dirname5(file), "assets");
 }
 
 // distribution/bootstrap/entry.ts
@@ -1446,7 +1599,7 @@ function artifactSource(source, directory) {
     const sha256 = bundled?.[1] ?? artifact2?.sha256;
     if (!sha256) throw new Error("\u672C\u673A\u4EA7\u7269\u76EE\u5F55\u7F3A\u5C11\u8BE5\u56FA\u5B9A\u53D1\u884C\u8D44\u6E90");
     const root = directory ?? await assetsDirectory(source, import.meta.url);
-    const path = join8(root, sha256 + ".tgz");
+    const path = join9(root, sha256 + ".tgz");
     const file = await open3(path).catch((error) => {
       if (error.code === "ENOENT" && bundled) throw new Error("\u7F3A\u5C11\u4E0A\u6B21\u5B89\u88C5\u4F7F\u7528\u7684\u6587\u4EF6\u3002\u8BF7\u7528\u4E0A\u6B21\u5B89\u88C5\u65F6\u7684\u7248\u672C\u7EE7\u7EED\u3002");
       throw error;
@@ -1455,7 +1608,7 @@ function artifactSource(source, directory) {
   };
 }
 async function main(args = process.argv.slice(2)) {
-  let home = join8(homedir2(), ".huohuo"), noOpen = false, assumeYes = false, watch = false, command = "start";
+  let home = join9(homedir2(), ".huohuo"), noOpen = false, assumeYes = false, watch = false, command = "start";
   let releaseFile, artifactDirectory;
   for (let i = 0; i < args.length; i++) {
     if (args[i] === "--home") {
@@ -1470,7 +1623,7 @@ async function main(args = process.argv.slice(2)) {
     else if (args[i] === "--yes") assumeYes = true;
     else if (args[i] === "--watch") watch = true;
     else if (args[i] === "--version") {
-      const packageFile = join8(dirname6(fileURLToPath2(import.meta.url)), "package.json");
+      const packageFile = join9(dirname6(fileURLToPath2(import.meta.url)), "package.json");
       const manifest = JSON.parse(await readFile9(packageFile, "utf8"));
       console.log(`${manifest.name} ${manifest.version}${manifest.private ? "\uFF08\u672C\u5730\u5019\u9009\uFF09" : ""}`);
       return;
@@ -1502,11 +1655,11 @@ async function main(args = process.argv.slice(2)) {
   };
   const ui = installUI(assumeYes);
   if (command === "upgrade") {
-    const candidate = selectRelease(JSON.parse(await readFile9(releaseFile ?? join8(dirname6(fileURLToPath2(import.meta.url)), "release.json"), "utf8")));
+    const candidate = selectRelease(JSON.parse(await readFile9(releaseFile ?? join9(dirname6(fileURLToPath2(import.meta.url)), "release.json"), "utf8")));
     await upgrade(home, candidate, { fetcher: artifactSource(candidate, artifactDirectory), progress, ...ui });
     const current = await readInstallation(home);
     if (await control(home, current.releaseDigest, noOpen ? "status" : "open")) return;
-    await run(process.execPath, [join8(installationPaths(home, current.release).runtime, "lib/distribution/managed.js"), "start", home, ...noOpen ? ["--no-open"] : []], home);
+    await run(process.execPath, [join9(installationPaths(home, current.release).runtime, "lib/distribution/managed.js"), "start", home, ...noOpen ? ["--no-open"] : []], home, process.env, () => control(home, current.releaseDigest, "stop"));
     return;
   }
   if (command === "uninstall") {
@@ -1524,7 +1677,7 @@ async function main(args = process.argv.slice(2)) {
       return;
     }
     const paths = installationPaths(home, record.release);
-    const targets = [home, paths.directory, paths.environment, join8(home, "instances/default")];
+    const targets = [home, paths.directory, paths.environment, join9(home, "instances/default")];
     const resources = evaluateResources(await sampleResources(targets), record.release.budget, targets.map((path) => ({ path, bytes: 0 })), "start");
     console.log(JSON.stringify({
       home,
@@ -1545,7 +1698,7 @@ async function main(args = process.argv.slice(2)) {
     }
     const runtime = installationPaths(home, record.release).runtime;
     try {
-      await readFile9(join8(runtime, "lib/distribution/managed.js"));
+      await readFile9(join9(runtime, "lib/distribution/managed.js"));
     } catch (e) {
       if (e.code !== "ENOENT") throw e;
       record = void 0;
@@ -1557,7 +1710,7 @@ async function main(args = process.argv.slice(2)) {
     if (!source) {
       let catalog = null;
       try {
-        catalog = JSON.parse(await readFile9(releaseFile ?? join8(dirname6(fileURLToPath2(import.meta.url)), "release.json"), "utf8"));
+        catalog = JSON.parse(await readFile9(releaseFile ?? join9(dirname6(fileURLToPath2(import.meta.url)), "release.json"), "utf8"));
       } catch (e) {
         if (e.code !== "ENOENT") throw e;
       }
@@ -1567,7 +1720,7 @@ async function main(args = process.argv.slice(2)) {
     record = await install(home, source, { fetcher, progress, ...ui });
   }
   const installedHome = record.home;
-  await run(process.execPath, [join8(installationPaths(installedHome, record.release).runtime, "lib/distribution/managed.js"), "start", installedHome, ...noOpen ? ["--no-open"] : []], installedHome);
+  await run(process.execPath, [join9(installationPaths(installedHome, record.release).runtime, "lib/distribution/managed.js"), "start", installedHome, ...noOpen ? ["--no-open"] : []], installedHome, process.env, () => control(installedHome, record.releaseDigest, "stop"));
 }
 if (process.argv[1] && await realpath5(resolve5(process.argv[1])).catch(() => "") === await realpath5(fileURLToPath2(import.meta.url))) {
   main().catch((error) => {

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@pab-iprg/huohuo",
-  "version": "1.0.0-preview.5",
+  "version": "1.0.0-preview.7",
   "type": "module",
-  "description": "火火双平台安装入口（实验预览）",
+  "description": "火火多平台安装入口（实验预览）",
   "bin": {
     "huohuo": "./cli.js"
   },
@@ -15,8 +15,9 @@
     "README.md"
   ],
   "optionalDependencies": {
-    "@pab-iprg/huohuo-assets-darwin-arm64": "1.0.0-preview.5",
-    "@pab-iprg/huohuo-assets-linux-x64": "1.0.0-preview.5"
+    "@pab-iprg/huohuo-assets-darwin-arm64": "1.0.0-preview.7",
+    "@pab-iprg/huohuo-assets-linux-x64": "1.0.0-preview.7",
+    "@pab-iprg/huohuo-assets-win32-x64": "1.0.0-preview.7"
   },
   "publishConfig": {
     "access": "public",

package/release.json

@@ -18,12 +18,12 @@
       "runtime": {
         "name": "@huohuo/research-agent",
         "version": "1.0.0",
-        "url": "https://bundled.invalid/45b0bbe6c53759c5e1f50fbd506ea97ec74adf1f29b3ade98793210f3b66dfbc.tgz",
+        "url": "https://bundled.invalid/32e96855b2579f293877c67dc6c5645b2b1fb4e9300f70f3e7a783a6d67a4120.tgz",
         "bundled": true,
-        "sha256": "45b0bbe6c53759c5e1f50fbd506ea97ec74adf1f29b3ade98793210f3b66dfbc",
-        "integrity": "sha512-bFFRkVFn/4OgqU6CneroGm+qy0tP8hXaHZ4U0C6tW3DHGxvBX8c0gn0UTRYIRxrQUQ2QbcXbvcgAG7MsADw26A==",
-        "downloadBytes": 2609884,
-        "expandedBytes": 8326138
+        "sha256": "32e96855b2579f293877c67dc6c5645b2b1fb4e9300f70f3e7a783a6d67a4120",
+        "integrity": "sha512-6IAa0KnmqVFw7Z6ogyyLlaeOCHCFPJ7VxMIz7nzemffiZwBYGt8+SvNjkk4CWKzjtJppYQQl2NAPooqZ6keteg==",
+        "downloadBytes": 2613970,
+        "expandedBytes": 8341044
       },
       "python": {
         "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20261026/cpython-3.13.18%2B20261026-aarch64-apple-darwin-install_only_stripped.tar.gz",
@@ -50,7 +50,7 @@
         "assemblySha256": "08cf11de70e49981b4891c0aaa2a5e7b872a95b6aa07557bb629713fa8f9e249"
       },
       "requirementsSha256": "57042fff45cee66fe33712472e2e5b88f03a084068ca20242588b2e18b3e167b",
-      "profilesSha256": "aae1b5ee7f19d24d384a0f57de3e62ea9a1501e316193266d630f773dac058f1",
+      "profilesSha256": "fb3540e0d604f26280128a21f97313575848f6348733a221f7e230233fdb8e2d",
       "budget": {
         "minimumEffectiveMemoryBytes": 34359738368,
         "startupHeadroomBytes": 134217728,
@@ -99,7 +99,7 @@
       },
       "assetPackage": {
         "name": "@pab-iprg/huohuo-assets-darwin-arm64",
-        "version": "1.0.0-preview.5"
+        "version": "1.0.0-preview.7"
       }
     },
     {
@@ -118,12 +118,12 @@
       "runtime": {
         "name": "@huohuo/research-agent",
         "version": "1.0.0",
-        "url": "https://bundled.invalid/4bab6aed6c844ab711d0a91b27c2e108ca8d4f4de1f4b30f7668b73f922d8500.tgz",
+        "url": "https://bundled.invalid/79cbf018a4363d256fee64f07dc3cd8e434ef1e89ba1dcfdcbdf4c2b0a424f65.tgz",
         "bundled": true,
-        "sha256": "4bab6aed6c844ab711d0a91b27c2e108ca8d4f4de1f4b30f7668b73f922d8500",
-        "integrity": "sha512-Iu0NMfgVLZmPXcxcUfYbW48X0uvHFDUzpQWhPP6unz06v2G1f178m10ehU0pxNzJaUXkwg/p8OH5/DAeuungRg==",
-        "downloadBytes": 2609889,
-        "expandedBytes": 8326156
+        "sha256": "79cbf018a4363d256fee64f07dc3cd8e434ef1e89ba1dcfdcbdf4c2b0a424f65",
+        "integrity": "sha512-8KMx3WCkkFxvcD6XQcV7N9FNTgU/Q5SNezCkyJizOnlT4lt4bqWdbxlBfhRcTiVmaP2/3PjsyzFDB1KEaaev3g==",
+        "downloadBytes": 2613972,
+        "expandedBytes": 8341062
       },
       "python": {
         "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20261026/cpython-3.13.18%2B20261026-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz",
@@ -150,7 +150,7 @@
         "assemblySha256": "08cf11de70e49981b4891c0aaa2a5e7b872a95b6aa07557bb629713fa8f9e249"
       },
       "requirementsSha256": "d4ff8161886fc286e6f8ddfcd070ac5812528971affe7b87baa03662dd242d45",
-      "profilesSha256": "aae1b5ee7f19d24d384a0f57de3e62ea9a1501e316193266d630f773dac058f1",
+      "profilesSha256": "fb3540e0d604f26280128a21f97313575848f6348733a221f7e230233fdb8e2d",
       "budget": {
         "minimumEffectiveMemoryBytes": 8589934592,
         "startupHeadroomBytes": 1073741824,
@@ -198,7 +198,105 @@
       },
       "assetPackage": {
         "name": "@pab-iprg/huohuo-assets-linux-x64",
-        "version": "1.0.0-preview.5"
+        "version": "1.0.0-preview.7"
+      }
+    },
+    {
+      "format": 1,
+      "bootstrapFormat": 1,
+      "version": "1.0.0",
+      "nodeMajor": 24,
+      "npmMajor": 11,
+      "qualification": "controlled-acceptance-only",
+      "platform": {
+        "os": "win32",
+        "arch": "x64",
+        "minimumOsRelease": "10.0.19045"
+      },
+      "runtime": {
+        "name": "@huohuo/research-agent",
+        "version": "1.0.0",
+        "url": "https://bundled.invalid/32f67fca6cae53021035f6b972953335a657357907620c1fa5a618290cc552eb.tgz",
+        "bundled": true,
+        "sha256": "32f67fca6cae53021035f6b972953335a657357907620c1fa5a618290cc552eb",
+        "integrity": "sha512-NVB0sYN/W8BWmBu6ShAl75t8jncWzSprwQ5NfS1k6M6KzJtqY+oEY/zQYZz500W6/na2yzCJC6TKmkxCugXfwA==",
+        "downloadBytes": 2613974,
+        "expandedBytes": 8341060
+      },
+      "python": {
+        "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20261026/cpython-3.13.18%2B20261026-x86_64-pc-windows-msvc-install_only_stripped.tar.gz",
+        "sha256": "7369f7a35f261222a6ac8b3a87c1c88eeebee8af945d85346202591a64038dd3",
+        "downloadBytes": 22023022,
+        "expandedBytes": 65192448,
+        "redirectHosts": [
+          "release-assets.githubusercontent.com"
+        ],
+        "executable": "python/python.exe",
+        "license": "python/LICENSE.txt",
+        "build": "cpython-3.13.18+20261026-x86_64-pc-windows-msvc-install_only_stripped.tar.gz"
+      },
+      "pythonDependencies": {
+        "url": "https://bundled.invalid/fd54d77024b4e1a82b58144bbdc4c130ba576e857789439dc473b7cb37ca5aa5.tgz",
+        "bundled": true,
+        "sha256": "fd54d77024b4e1a82b58144bbdc4c130ba576e857789439dc473b7cb37ca5aa5",
+        "downloadBytes": 14578,
+        "expandedBytes": 51200,
+        "upstreamWheelCount": 40
+      },
+      "dsh": {
+        "version": "0.2.1-rc.2",
+        "assemblySha256": "08cf11de70e49981b4891c0aaa2a5e7b872a95b6aa07557bb629713fa8f9e249"
+      },
+      "requirementsSha256": "acb5dea55d39bda017e8c63c70fcfcd5dfb74eb987376d4612161257a9fd0900",
+      "profilesSha256": "fb3540e0d604f26280128a21f97313575848f6348733a221f7e230233fdb8e2d",
+      "budget": {
+        "minimumEffectiveMemoryBytes": 4294967296,
+        "startupHeadroomBytes": 536870912,
+        "heavyJobHeadroomBytes": 1073741824,
+        "processTreeBudgetBytes": 3221225472,
+        "diskReserveBytes": 1073741824,
+        "recoverySamples": 3,
+        "sampleIntervalMs": 2000,
+        "sampleMaxAgeMs": 10000,
+        "installTemporaryBytes": 1073741824,
+        "dependenciesBytes": 4294967296,
+        "backupBytes": 1073741824
+      },
+      "schema": {
+        "minimum": 1,
+        "maximum": 1,
+        "migrationsSha256": "ba029fdbffa5320e61393b484d08accafce60e9aa8dacde5b6212fb79dd9146b",
+        "files": {
+          "001_init.sql": "b42b6192d872f0f65cfbbf9d0c7fb442d3aa49584a6cf321d3bcc641b31b70da",
+          "002_contact_decision.sql": "af82cb9975a09fa09c0f970b70d04a7b55a960d72e0853f4573d571efaa46f0a",
+          "003_schedules.sql": "2937f7be2693ce9b410ee9a73bd10c5e819c5081a10a6b3993c33f37ad42295f",
+          "004_condition_state.sql": "f081d250dd525ad57a450bd6bca59a75f8fb1428177d670ae9fa142ed79721d6",
+          "005_execution_handoff.sql": "ebf2e5c4890b7a73ae1ffb57a70bb15183f48a6c1fa2acf3a48b95ccb3d992b3",
+          "006_entity_confirmation.sql": "d25ee376e7f6dd55df2edeb68d7591ef5fbaa34eeb3eef662cd76e183526d3c0",
+          "007_research_tool_calls.sql": "df9c7d8d25b44b151f743e2d5167b34ae89c64e67423d8af554364fd792da942",
+          "008_followup_notifications.sql": "98865d811879afd679846087a5f01ee2db371dcb90381a9c400c940a5c1c4b37",
+          "008_investment.sql": "71cecf6215552c725797059efdcb501247e1225c7d9f662de606266d3a947e61",
+          "009_notification_channels.sql": "572424d739203a8514ae59920a0ad69cf83f278479b48d48becb88bddda25d9a",
+          "010_strategies.sql": "af023fab201db6bd2e15e2348125d112bc21cf3a59d8afd0a2d616fc05cee209",
+          "011_strategy_run_subjects.sql": "53a1c216ed775a06549dcc201f9494ceabe308bee6dc52a214b685cca2f2fe8d",
+          "012_strategy_schedule.sql": "ccddd81bb70d2c86356e6f1ad09132e7397837d17e926b515c8e281a362bdd58",
+          "014_industry_chain.sql": "b656efffe746d14ca350ea1c9ecfcce2d98b5753e4b2f862c75d0456a062fd4a",
+          "015_source_heads.sql": "652bf637892edbbe969ce5ed4ce45a4a0c43d03de395fce1b828fc4c0169f885",
+          "016_legacy_transfer.sql": "b6e3c214b103487d741226b0f83525e0cacbb0c440bd1935d0e963dc9b9bfd07",
+          "017_unified_strategy_work.sql": "8d055ca58f3e73482fb16c630c733ae93197244b37e4509cc90c7dec3bf88d60",
+          "018_personalization.sql": "7f62a4eb74707fb071f56d6057b6d6517ed7648af23ebe290f3be15d260a103c",
+          "019_position_risk.sql": "3c461fa435b352127fd4ee4e7ed3de2c924561a3727dce1535d7d3a47c436ca9",
+          "020_notification_tests.sql": "3eb0d72eadf04b074208dbe0ef6a72ee614ec11a15143108a2471568b7b4fb22",
+          "021_notification_priority.sql": "f742b4c4b796e918bfc6a08bac8c5ae206382075925acf7b1c430b033f5177e6",
+          "022_research_job_priority.sql": "fcb0c0af025806faab7cd403097a9d2c55e07331ab0a78b2926c1927a87f4ed4",
+          "023_adaptive_notifications.sql": "80630e2dad73844d48b265fbc33648b01d8321a6fd9a0587ef4dc01f362aadec",
+          "023_notification_attention.sql": "5dd85fb001192558211c7b69e3452984c52119f215750ed6283b296d3dccc842",
+          "024_t_trade_watch.sql": "aa38470ddab00e0cbca07ce6d5cc31399ba2b6e40c8d8d888e88ec093a9f89ef"
+        }
+      },
+      "assetPackage": {
+        "name": "@pab-iprg/huohuo-assets-win32-x64",
+        "version": "1.0.0-preview.7"
       }
     }
   ]