@senguoyun/dsh-arkme 0.1.31 → 0.1.33

package/lib/index.js

@@ -1,17 +1,18 @@
 import { a as securePrivateDirectory, c as securePrivateFileSync, i as prepareProfilePackageManager, n as isArkmeProfilePackageName, o as securePrivateDirectorySync, r as localExtensionPnpmArgs, s as securePrivateFile, t as applyArkmeProfileBundlePolicy } from "./profile-bundle-policy-CvojZuTD.js";
-import { $ as ARKME_RUNTIME_INSTANCE_ID, A as inspectNativeBundleArtifactV3, D as bundleSha256, E as arkmeSandboxEntryId, F as assertExtensionArtifactSize, G as validateVoiceprintPcm16Wav, I as canonicalExtensionJson, K as ARKME_DEFAULT_SHARE_WEBSITE, L as sha256Hex, M as packLocalNativeBundleDirectoryV3, N as readNativeBundleTarballV3, O as canonicalBundleJson, P as renderArkmeSandboxHostEntry, Q as ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, R as unpackArkmeExtension, S as ARKME_BUNDLE_ARTIFACT_KIND, T as ArkmeBundleArtifactError, U as ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE, W as ArkmeService, Z as ARKME_WORLD_PUBLISH_MAX_IMAGES, _ as arkmeClientContentDigest, at as ArkmePluginError, b as verifyExtensionResolutionSignature, c as persistentExtensionBundleDirectory, d as readPersistentExtensionActivation, et as ARKME_TOOL_FILE_MAX_BYTES, f as refreshPersistentClientWrapper, g as activeProfileExtensionOwnerConflicts, h as renderArkmeBundleClientBundle, i as invokePersistentArkmeExtension, it as isArkmeBotAvatarRef, j as packBundleFiles, k as inspectBundleArtifact, l as persistentExtensionPackageIdentity, m as writePersistentExtensionActivation, nt as arkmeNormalizedFileMimeType, o as persistentArkmeExtensionRuntimeState, ot as ArkmeOutgoingCallError, p as repairPersistentExtensionInstallation, q as ARKME_PROVIDER_CONTRACT_VERSION, r as deactivatePersistentArkmeExtension, rt as arkmePickedFileKind, s as materializePersistentExtensionBundle, t as activatePersistentArkmeExtension, tt as arkmeCanInlineLocalFile, u as quarantinePersistentExtension, v as arkmeClientContentDigestFromSource, w as ARKME_NATIVE_BUNDLE_ARTIFACT_KIND, x as verifyNativeBundleResolutionSignature, y as verifyBundleResolutionSignature, z as ARKME_EXTENSION_FORMAT } from "./persistent-runtime-BJ8konXI.js";
+import { $ as ARKME_RUNTIME_INSTANCE_ID, A as inspectNativeBundleArtifactV3, D as bundleSha256, E as arkmeSandboxEntryId, F as assertExtensionArtifactSize, G as validateVoiceprintPcm16Wav, I as canonicalExtensionJson, K as ARKME_DEFAULT_SHARE_WEBSITE, L as sha256Hex, M as packLocalNativeBundleDirectoryV3, N as readNativeBundleTarballV3, O as canonicalBundleJson, P as renderArkmeSandboxHostEntry, Q as ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, R as unpackArkmeExtension, S as ARKME_BUNDLE_ARTIFACT_KIND, T as ArkmeBundleArtifactError, U as ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE, W as ArkmeService, Z as ARKME_WORLD_PUBLISH_MAX_IMAGES, _ as arkmeClientContentDigest, at as ArkmePluginError, b as verifyExtensionResolutionSignature, c as persistentExtensionBundleDirectory, d as readPersistentExtensionActivation, et as ARKME_TOOL_FILE_MAX_BYTES, f as refreshPersistentClientWrapper, g as activeProfileExtensionOwnerConflicts, h as renderArkmeBundleClientBundle, i as invokePersistentArkmeExtension, it as isArkmeBotAvatarRef, j as packBundleFiles, k as inspectBundleArtifact, l as persistentExtensionPackageIdentity, m as writePersistentExtensionActivation, nt as arkmeNormalizedFileMimeType, o as persistentArkmeExtensionRuntimeState, ot as ArkmeOutgoingCallError, p as repairPersistentExtensionInstallation, q as ARKME_PROVIDER_CONTRACT_VERSION, r as deactivatePersistentArkmeExtension, rt as arkmePickedFileKind, s as materializePersistentExtensionBundle, t as activatePersistentArkmeExtension, tt as arkmeCanInlineLocalFile, u as quarantinePersistentExtension, v as arkmeClientContentDigestFromSource, w as ARKME_NATIVE_BUNDLE_ARTIFACT_KIND, x as verifyNativeBundleResolutionSignature, y as verifyBundleResolutionSignature, z as ARKME_EXTENSION_FORMAT } from "./persistent-runtime-DUqdJv8K.js";
 import { _ as parsePluginUpdateManifest, b as validatePluginUpdateServiceOrigin, d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginArtifactPath, h as downloadAndCachePluginArtifact, m as PluginUpdateArtifactError, n as buildTargetInstallArgs, o as reconcilePluginUpdaterProfilePolicy, p as ARKME_PLUGIN_PACKAGE_NAME$1, t as assertTargetArtifactIntegrity, u as detachManagedProfilePluginLink, v as pluginUpdateEndpointUrl, y as validatePluginUpdateArtifactOrigin } from "./plugin-updater-helper-BByw0ZyG.js";
 import { i as invokeArkmeBundle, n as arkmeBundleActive, r as deactivateArkmeBundle } from "./bundle-runtime-BTzRlc6V.js";
 import { t as ArkmeExtensionInstallStore } from "./install-store-C1tAM346.js";
-import { homedir } from "node:os";
+import { homedir, hostname } from "node:os";
 import { chmodSync, closeSync, createReadStream, existsSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, writeFileSync } from "node:fs";
-import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { createCipheriv, createDecipheriv, createHash, randomBytes, randomUUID } from "node:crypto";
 import { dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import Schema from "@deepseek-ai/schemastery";
 import { execFile, spawn } from "node:child_process";
-import { chmod as chmod$1, mkdir, open, readFile, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { chmod as chmod$1, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { promisify } from "node:util";
+import { createServer } from "node:http";
 import { Readable } from "node:stream";
 import semver from "semver";
 import { defineTool } from "@deepseek-ai/dsh-tools";
@@ -21,9 +22,9 @@ import { getOrCreateAnonymousUserId } from "@deepseek-ai/dsh-anonymous-user-id";
 import { LlmAdapter, LlmError, ProviderRequestId, createUserMessage } from "@deepseek-ai/dsh-llm";
 import { DeepSeekAdapter, resolveAdapterOptions } from "@deepseek-ai/dsh-llm-deepseek";
 import { Buffer as Buffer$1 } from "node:buffer";
-import { createServer } from "node:http";
 import sharp from "sharp";
 import { AttachmentError, AttachmentId } from "@deepseek-ai/dsh-attachment";
+import WebSocket from "ws";
 //#region src/openclaw/cli-adapter.ts
 const JOTMO_CHANNEL_PACKAGE = "@jotmo/openclaw-channel@0.1.12";
 function assertSucceeded(result, operation) {
@@ -503,7 +504,7 @@ function registerDSHAgentInputRecordSync(ctx, service, options = {}) {
 const PLUGIN_UPDATE_TERMINAL_STATE_TTL_MS = 10 * 6e4;
 //#endregion
 //#region src/plugin-update-state.ts
-function emptyState$1() {
+function emptyState$2() {
 	return {
 		version: 1,
 		consecutiveFailures: 0
@@ -555,7 +556,7 @@ function normalizedNotice(value) {
 }
 function parseState$1(raw) {
 	const value = JSON.parse(raw);
-	if (value === null || typeof value !== "object") return emptyState$1();
+	if (value === null || typeof value !== "object") return emptyState$2();
 	const source = value;
 	const lastCheckedAtMillis = positiveNumber$1(source.lastCheckedAtMillis);
 	const lastSuccessfulCheckAtMillis = positiveNumber$1(source.lastSuccessfulCheckAtMillis);
@@ -590,14 +591,14 @@ var PluginUpdateStateStore = class {
 		this.onRecover = options.onRecover;
 	}
 	async snapshot() {
-		let result = emptyState$1();
+		let result = emptyState$2();
 		await this.serial(async () => {
 			result = cloneState(await this.load());
 		});
 		return result;
 	}
 	async update(mutator) {
-		let result = emptyState$1();
+		let result = emptyState$2();
 		await this.serial(async () => {
 			const state = await this.load();
 			mutator(state);
@@ -617,7 +618,7 @@ var PluginUpdateStateStore = class {
 			this.state = parseState$1(await readFile(this.path, "utf8"));
 		} catch (error) {
 			if (error.code !== "ENOENT") this.onRecover?.(error);
-			this.state = emptyState$1();
+			this.state = emptyState$2();
 			await this.write(this.state);
 		}
 		return this.state;
@@ -1393,6 +1394,69 @@ function effectiveExtensionPublisherRole(item) {
 	return item.source?.type === "github_repository" ? "importer" : "author";
 }
 //#endregion
+//#region src/dsh-remote/errors.ts
+var DshRemoteError = class extends Error {
+	code;
+	retryable;
+	details;
+	constructor(code, message, retryable = false, details = {}, options) {
+		super(message, options);
+		this.code = code;
+		this.retryable = retryable;
+		this.details = details;
+		this.name = "DshRemoteError";
+	}
+};
+function asDshRemoteError(error) {
+	if (error instanceof DshRemoteError) return error;
+	return new DshRemoteError("REMOTE_TRANSPORT_FAILED", error instanceof Error && error.message.trim() !== "" ? error.message : "远程连接暂时不可用", true, {}, { cause: error });
+}
+//#endregion
+//#region src/link-metadata.ts
+function linkUrl(rawUrl) {
+	return rawUrl instanceof URL ? new URL(rawUrl.href) : new URL(rawUrl);
+}
+function arkmeKnownLinkMetadataFallback(rawUrl) {
+	try {
+		const url = linkUrl(rawUrl);
+		const host = url.hostname.replace(/^www\./iu, "").toLowerCase();
+		const parts = url.pathname.split("/").filter(Boolean);
+		if (host === "github.com") {
+			if (parts.length >= 4 && parts[2] === "pull") return {
+				url: url.href,
+				title: `Pull Request #${parts[3]} · ${parts[0]}/${parts[1]}`
+			};
+			if (parts.length >= 2) return {
+				url: url.href,
+				title: `${parts[0]}/${parts[1]}`
+			};
+		}
+		if ((host === "codeup.aliyun.com" || host.endsWith(".codeup.aliyun.com")) && parts.includes("change")) {
+			const changeIndex = parts.indexOf("change");
+			const repository = changeIndex >= 2 ? parts[changeIndex - 1] : void 0;
+			const changeNo = parts[changeIndex + 1];
+			if (repository !== void 0 && changeNo !== void 0) return {
+				url: url.href,
+				title: `${repository} · Change #${changeNo}`
+			};
+		}
+	} catch {}
+	return null;
+}
+function arkmeRequiredLinkMetadataFallback(rawUrl) {
+	const url = linkUrl(rawUrl);
+	const siteName = url.hostname.replace(/^www\./iu, "");
+	const known = arkmeKnownLinkMetadataFallback(url);
+	return known === null ? {
+		url: url.href,
+		title: "分享链接",
+		siteName
+	} : {
+		...known,
+		siteName
+	};
+}
+//#endregion
 //#region src/host-api.ts
 const MAX_REQUEST_BYTES = 128 * 1024;
 function isLoopback$5(address) {
@@ -1809,6 +1873,7 @@ function createArkmeHostApi(service, options) {
 			}
 			const request = await readRequest(req);
 			const params = request.params ?? {};
+			if (request.operation === "link.metadata" && origin === void 0) throw new ArkmePluginError("origin-required", "网址名称解析必须从当前 DSH 页面发起", false, 403);
 			if ([
 				"user.arkme-id.set",
 				"extensions.delete",
@@ -1827,15 +1892,18 @@ function createArkmeHostApi(service, options) {
 				"extensions.client.failure",
 				"extensions.persistent.invoke",
 				"extensions.bundle.invoke",
-				"extensions.mine.publish"
+				"extensions.mine.publish",
+				"extensions.quarantine.dismiss",
+				"extensions.quarantine.reenable",
+				"remote.renameDesktop"
 			].includes(request.operation) && origin === void 0) throw new ArkmePluginError("origin-required", "扩展变更必须从当前 DSH 页面发起", false, 403);
 			writeJson$4(res, 200, {
 				ok: true,
-				value: await dispatchArkmeHostOperation(service, request.operation, params, options.updateManager, options.extensionManager?.(), options.extensionInstallTasks?.(), options.ownedExtensionInventory?.(), controller.signal)
+				value: await dispatchArkmeHostOperation(service, request.operation, params, options.updateManager, options.extensionManager?.(), options.extensionInstallTasks?.(), options.ownedExtensionInventory?.(), controller.signal, options.remoteHost?.(), options.desktopQuarantine)
 			});
 		} catch (error) {
 			if (controller.signal.aborted && res.destroyed) return;
-			const known = error instanceof ArkmePluginError ? error : error instanceof ArkmePluginUpdateError ? new ArkmePluginError(error.code, error.message, error.retryable, error.retryable ? 503 : 409) : error instanceof ArkmeOutgoingCallError ? new ArkmePluginError(error.code, error.message, error.retryable, error.code === "call-active" ? 409 : 400) : new ArkmePluginError("internal-error", "Arkme 插件处理失败", true, 500, { cause: error });
+			const known = error instanceof ArkmePluginError ? error : error instanceof ArkmePluginUpdateError ? new ArkmePluginError(error.code, error.message, error.retryable, error.retryable ? 503 : 409) : error instanceof ArkmeOutgoingCallError ? new ArkmePluginError(error.code, error.message, error.retryable, error.code === "call-active" ? 409 : 400) : error instanceof DshRemoteError ? new ArkmePluginError(error.code, error.message, error.retryable, error.retryable ? 503 : 409) : new ArkmePluginError("internal-error", "Arkme 插件处理失败", true, 500, { cause: error });
 			writeJson$4(res, known.httpStatus, {
 				ok: false,
 				error: {
@@ -1849,12 +1917,17 @@ function createArkmeHostApi(service, options) {
 		}
 	};
 }
-async function dispatchArkmeHostOperation(service, operation, params, updateManager, extensionManager, extensionInstallTasks, ownedExtensionInventory, requestSignal) {
+async function dispatchArkmeHostOperation(service, operation, params, updateManager, extensionManager, extensionInstallTasks, ownedExtensionInventory, requestSignal, remoteHost, desktopQuarantine) {
 	switch (operation) {
 		case "provider.capabilities": return service.providerCapabilities();
 		case "provider.instance": return { instanceId: ARKME_RUNTIME_INSTANCE_ID };
 		case "provider.state": return await service.providerState();
 		case "chat.realtime.state": return service.chatRealtimeState();
+		case "link.metadata": return await service.resolveLinkMetadata(stringParam(params, "url"), requestSignal === void 0 ? {} : { signal: requestSignal });
+		case "source.link-metadata.resolve": {
+			const url = stringParam(params, "url");
+			return await service.resolveLinkMetadata(url, requestSignal === void 0 ? {} : { signal: requestSignal }) ?? arkmeRequiredLinkMetadataFallback(url);
+		}
 		case "plugin.update.status": return await requireUpdateManager(updateManager).status();
 		case "plugin.update.check": return await requireUpdateManager(updateManager).check({ manual: true });
 		case "plugin.update.install": return await requireUpdateManager(updateManager).install();
@@ -1875,6 +1948,8 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 		case "auth.phone.send": return await service.sendPhoneCode(stringParam(params, "phone"), captchaParam(params));
 		case "auth.phone.verify": return await service.verifyPhoneCode(stringParam(params, "phone"), stringParam(params, "code"));
 		case "auth.logout": return await service.logout();
+		case "remote.getStatus": return requireRemoteHost(remoteHost).getStatus();
+		case "remote.renameDesktop": return await requireRemoteHost(remoteHost).renameDesktop(stringParam(params, "displayName"));
 		case "billing.quota": return await service.billingQuota();
 		case "billing.products": return await service.billingProducts();
 		case "billing.order.create": return await service.createBillingOrder({
@@ -1921,8 +1996,10 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 		case "directory.group.open-chat": return await service.openDirectoryGroupChat(stringParam(params, "sourceRef").trim(), requestSignal);
 		case "directory.bot.open-chat": return await service.openBotChat(stringParam(params, "botRef").trim(), requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "bots.private-chat.open": return await service.openBotPrivateChat(stringParam(params, "botRef").trim(), requestSignal === void 0 ? {} : { signal: requestSignal });
+		case "bots.private-chat.refresh": return await service.refreshBotPrivateChat(stringParam(params, "botRef").trim(), requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "bots.private-chat.directory": return await service.listBotPrivateChatDirectory(requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "bots.private-chat.send": return await service.sendBotPrivateChatMessage(stringParam(params, "botRef").trim(), stringParam(params, "content"), requestSignal === void 0 ? {} : { signal: requestSignal });
+		case "bots.private-chat.mark-read": return await service.markBotPrivateChatRead(stringParam(params, "botRef").trim(), numberParam(params, "sequence", 0), requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "unmarked-speakers.options": return await service.unmarkedSpeakerOptions(stringParam(params, "candidateRef").trim());
 		case "unmarked-speakers.retry-inference": return await service.retryUnmarkedSpeakerInference(stringParam(params, "candidateRef").trim());
 		case "unmarked-speakers.segments": {
@@ -2162,7 +2239,7 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 		case "source.message-copy-link": return await service.copySourceMessageLink(stringParam(params, "sourceRef"), messageActionRefsParam(params), requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "source.message-copy-link.resolve": return await service.resolveMessageCopyLink(stringParam(params, "sid"), requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "source.message-copy-link.extend": return await service.extendMessageCopyLink(stringParam(params, "sid"), numberParam(params, "itemIndex", 0), stringParam(params, "textContent"), stringParam(params, "recordUid"), requestSignal === void 0 ? {} : { signal: requestSignal });
-		case "source.link-metadata.resolve": return await service.resolveLinkMetadata(stringParam(params, "url"), requestSignal === void 0 ? {} : { signal: requestSignal });
+		case "source.shared-recording-detail": return await service.sharedRecordingDetail(stringParam(params, "detailRef"), requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "source.forward-messages": return await service.forwardSourceMessages(stringParam(params, "sourceRef"), messageActionRefsParam(params), {
 			...stringParam(params, "targetSourceRef") === "" ? {} : { targetSourceRef: stringParam(params, "targetSourceRef") },
 			...stringParam(params, "recordUid") === "" ? {} : { recordUid: stringParam(params, "recordUid") },
@@ -2376,6 +2453,10 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 		case "extensions.share.resolve": return (await enrichExtensionAuthors(service, [await requireExtensionManager(extensionManager).resolveSharedCatalogDetail(stringParam(params, "shareRef"))]))[0];
 		case "extensions.delete": return await requireOwnedExtensionInventory(ownedExtensionInventory).delete({ extensionId: stringParam(params, "extensionId") });
 		case "extensions.installed-list": return requireExtensionManager(extensionManager).listInstalled();
+		case "extensions.quarantine.status": return await requireDesktopQuarantine(desktopQuarantine).status();
+		case "extensions.quarantine.dismiss": return await requireDesktopQuarantine(desktopQuarantine).dismiss(stringParam(params, "packageName"));
+		case "extensions.quarantine.reenable": return await requireDesktopQuarantine(desktopQuarantine).reenable(stringParam(params, "packageName"));
+		case "extensions.quarantine.health": return await requireDesktopQuarantine(desktopQuarantine).health(stringParam(params, "packageName"));
 		case "extensions.mine.list": return await requireOwnedExtensionInventory(ownedExtensionInventory).list({ ...stringParam(params, "currentSessionId").trim() === "" ? {} : { currentSessionId: stringParam(params, "currentSessionId").trim() } });
 		case "extensions.mine.publish": return await requireOwnedExtensionInventory(ownedExtensionInventory).publish({
 			ownedRef: stringParam(params, "ownedRef"),
@@ -2444,6 +2525,10 @@ function requireUpdateManager(updateManager) {
 	if (updateManager === void 0) throw new ArkmePluginError("plugin-update-unavailable", "插件更新检查暂不可用", true, 503);
 	return updateManager;
 }
+function requireRemoteHost(host) {
+	if (host === void 0) throw new ArkmePluginError("CAPABILITY_UNSUPPORTED", "当前 DSH 未加载远控 Host", false, 503);
+	return host;
+}
 function requireExtensionInstallTasks(tasks) {
 	if (tasks === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "当前 DSH 未加载扩展安装运行时", false, 503);
 	return tasks;
@@ -2452,6 +2537,10 @@ function requireExtensionManager(manager) {
 	if (manager === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "当前 DSH 未加载 Dynamic Cordis Runner，市集不可用", false, 503);
 	return manager;
 }
+function requireDesktopQuarantine(quarantine) {
+	if (quarantine === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "桌面扩展恢复状态尚未就绪", false, 503);
+	return quarantine;
+}
 function requireOwnedExtensionInventory(inventory) {
 	if (inventory === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "扩展运行时尚未就绪", true, 503);
 	return inventory;
@@ -2471,19 +2560,71 @@ function extensionEditableVisibilityParam(params) {
 	return value;
 }
 //#endregion
+//#region src/dsh-host-capabilities.ts
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function sessionController(value) {
+	if (!isRecord(value) || typeof value.openWorkspacePath !== "function") return void 0;
+	return value;
+}
+function apiProxy(value) {
+	if (!isRecord(value) || !isRecord(value.host) || typeof value.host.openPath !== "function") return void 0;
+	return value;
+}
+/**
+* Open one Arkme-owned, already-validated local path through the current DSH
+* Host capability. The service shape is detected at call time so one plugin
+* package works with both the Typert Remote and legacy ApiProxy generations.
+*/
+async function openDshHostPath(ctx, path, signal) {
+	signal.throwIfAborted();
+	const current = sessionController(ctx.get("sessionController"));
+	if (current !== void 0) {
+		const response = await current.openWorkspacePath({ path }, signal);
+		if (!isRecord(response) || response.opened !== true) throw new Error("DSH sessionController.openWorkspacePath 返回了无效响应");
+		return;
+	}
+	const legacy = apiProxy(ctx.get("apiProxy"));
+	if (legacy === void 0) throw new Error("当前 DSH 宿主未提供本机文件打开能力");
+	const response = await legacy.host.openPath({
+		rpcId: randomUUID(),
+		payload: { path }
+	}, signal);
+	if (!isRecord(response) || !isRecord(response.result)) throw new Error("DSH apiProxy.host.openPath 返回了无效响应");
+	if (response.result.ok === false) {
+		const error = response.result.error;
+		throw new Error(isRecord(error) && typeof error.message === "string" ? error.message : "DSH apiProxy.host.openPath 调用失败");
+	}
+	if (response.result.ok !== true || !isRecord(response.result.value) || response.result.value.opened !== true) throw new Error("DSH apiProxy.host.openPath 返回了无效响应");
+}
+//#endregion
 //#region src/harness-embed-contract.ts
 const ARKME_HARNESS_EMBED_PATH = "/arkme-self/harness-frame";
 //#endregion
 //#region src/harness-embed-route.ts
 const ARKME_PLUGIN_PACKAGE_NAME = "@senguoyun/dsh-arkme";
 const DSH_CLIENT_HMR_PACKAGE_NAME = "@deepseek-ai/dsh-client-hmr";
-const REQUIRED_BOOT_PACKAGES = ["@deepseek-ai/dsh-client-modules", "@deepseek-ai/dsh-client-runtime"];
+const REQUIRED_BOOT_PACKAGE_GROUPS = [{
+	capability: "client module loader",
+	alternatives: ["@deepseek-ai/dsh-client-modules"]
+}, {
+	capability: "client connection runtime",
+	alternatives: ["@deepseek-ai/dsh-client-runtime", "@deepseek-ai/dsh-client-connection"]
+}];
+/** Forward only the same-origin browser session needed by authenticated DSH roots. */
+function dshRootDocumentHeaders(request) {
+	const headers = { Accept: "text/html" };
+	if (request.headers.cookie !== void 0) headers.Cookie = request.headers.cookie;
+	return headers;
+}
 function shortHash(input) {
 	return createHash("sha1").update(input).digest("hex").slice(0, 12);
 }
-function bootAssignment(graph) {
-	return `window.__DSH_BOOT__ = ${JSON.stringify(graph).replaceAll("<", "\\u003c")}`;
+function serializedBootGraph(graph) {
+	return JSON.stringify(graph).replaceAll("<", "\\u003c");
 }
+const BOOT_ASSIGNMENT_RENDERERS = [(graph) => `window.__DSH_BOOT__ = ${serializedBootGraph(graph)}`, (graph) => `globalThis["__DSH_BOOT__"] = ${serializedBootGraph(graph)}`];
 function referencesPackage(specifier, packageName) {
 	return specifier === packageName || specifier.startsWith(`${packageName}/`);
 }
@@ -2493,10 +2634,17 @@ function dependencyRemovedBy(entry, removedPackageNames) {
 		if (removed !== void 0) return removed;
 	}
 }
-function isRequiredBootPackage(packageName) {
-	return REQUIRED_BOOT_PACKAGES.includes(packageName);
+function requiredBootPackages(entries) {
+	const packageNames = new Set(entries.map((entry) => entry.id));
+	const required = /* @__PURE__ */ new Set();
+	for (const group of REQUIRED_BOOT_PACKAGE_GROUPS) {
+		const available = group.alternatives.filter((packageName) => packageNames.has(packageName));
+		if (available.length === 0) throw new Error(`harness boot graph: required ${group.capability} is missing; expected one of ${group.alternatives.join(", ")}`);
+		for (const packageName of available) required.add(packageName);
+	}
+	return required;
 }
-function completeRemovedPackageClosure(entries, removedPackageNames) {
+function completeRemovedPackageClosure(entries, removedPackageNames, requiredPackageNames) {
 	let changed = true;
 	while (changed) {
 		changed = false;
@@ -2504,7 +2652,7 @@ function completeRemovedPackageClosure(entries, removedPackageNames) {
 			if (removedPackageNames.has(entry.id)) continue;
 			const removed = dependencyRemovedBy(entry, removedPackageNames);
 			if (removed === void 0) continue;
-			if (isRequiredBootPackage(entry.id)) throw new Error(`harness boot graph: required package ${entry.id} depends on removed package ${removed}`);
+			if (requiredPackageNames.has(entry.id)) throw new Error(`harness boot graph: required package ${entry.id} depends on removed package ${removed}`);
 			removedPackageNames.add(entry.id);
 			changed = true;
 		}
@@ -2516,32 +2664,67 @@ function assertNoRemovedDependencies(entries, removedPackageNames) {
 		if (removed !== void 0) throw new Error(`harness boot graph: kept package ${entry.id} depends on removed package ${removed}`);
 	}
 }
+function projectBootBatches(batches, keptPackageNames) {
+	if (batches === void 0) return void 0;
+	const projected = batches.flatMap((batch) => {
+		const entries = batch.entries.filter((packageName) => keptPackageNames.has(packageName));
+		return entries.length === 0 ? [] : [{
+			...batch,
+			entries
+		}];
+	});
+	const covered = /* @__PURE__ */ new Set();
+	for (const batch of projected) for (const packageName of batch.entries) {
+		if (covered.has(packageName)) throw new Error(`harness boot graph: package ${packageName} belongs to more than one projected batch`);
+		covered.add(packageName);
+	}
+	for (const packageName of keptPackageNames) if (!covered.has(packageName)) throw new Error(`harness boot graph: package ${packageName} belongs to no projected batch`);
+	return projected;
+}
 /**
 * Build the iframe-only DSH graph without any Arkme-managed extension clients.
 * Host halves stay process-owned and untouched; only this document's browser
 * boot graph is projected.
 */
 function projectHarnessBootGraph(graph, installedPackageNames) {
+	const requiredPackageNames = requiredBootPackages(graph.entries);
 	const removedPackageNames = /* @__PURE__ */ new Set([
 		ARKME_PLUGIN_PACKAGE_NAME,
 		DSH_CLIENT_HMR_PACKAGE_NAME,
 		...installedPackageNames.map((name) => name.trim()).filter(Boolean)
 	]);
-	completeRemovedPackageClosure(graph.entries, removedPackageNames);
+	completeRemovedPackageClosure(graph.entries, removedPackageNames, requiredPackageNames);
 	const entries = graph.entries.filter((entry) => !removedPackageNames.has(entry.id));
-	for (const required of REQUIRED_BOOT_PACKAGES) if (!entries.some((entry) => entry.id === required)) throw new Error(`harness boot graph: required package ${required} is missing`);
+	for (const required of requiredPackageNames) if (!entries.some((entry) => entry.id === required)) throw new Error(`harness boot graph: required package ${required} was removed`);
 	assertNoRemovedDependencies(entries, removedPackageNames);
+	const batches = projectBootBatches(graph.batches, new Set(entries.map((entry) => entry.id)));
 	return {
-		rev: shortHash(JSON.stringify(entries)),
-		entries
+		rev: shortHash(JSON.stringify(batches === void 0 ? entries : {
+			entries,
+			batches
+		})),
+		entries,
+		...batches === void 0 ? {} : { batches }
 	};
 }
 /** Replace exactly the graph DSH injected into the current root document. */
 function replaceHarnessBootGraph(html, fullGraph, projectedGraph) {
-	const fullAssignment = bootAssignment(fullGraph);
-	const first = html.indexOf(fullAssignment);
-	if (first === -1 || html.indexOf(fullAssignment, first + fullAssignment.length) !== -1) throw new Error("harness boot graph: expected exactly one current DSH boot assignment");
-	return `${html.slice(0, first)}${bootAssignment(projectedGraph)}${html.slice(first + fullAssignment.length)}`;
+	const matches = [];
+	for (const render of BOOT_ASSIGNMENT_RENDERERS) {
+		const assignment = render(fullGraph);
+		let at = html.indexOf(assignment);
+		while (at !== -1) {
+			matches.push({
+				at,
+				assignment,
+				render
+			});
+			at = html.indexOf(assignment, at + assignment.length);
+		}
+	}
+	if (matches.length !== 1) throw new Error("harness boot graph: expected exactly one current DSH boot assignment");
+	const { at, assignment, render } = matches[0];
+	return `${html.slice(0, at)}${render(projectedGraph)}${html.slice(at + assignment.length)}`;
 }
 function createHarnessEmbedRouteHandler(options) {
 	return async (request, response) => {
@@ -2556,7 +2739,7 @@ function createHarnessEmbedRouteHandler(options) {
 		try {
 			const fullGraph = options.getGraph();
 			const projectedGraph = projectHarnessBootGraph(fullGraph, options.installedPackageNames());
-			const html = replaceHarnessBootGraph(await options.readRootHtml(), fullGraph, projectedGraph);
+			const html = replaceHarnessBootGraph(await options.readRootHtml(request), fullGraph, projectedGraph);
 			const body = Buffer.from(html);
 			response.writeHead(200, {
 				"Content-Type": "text/html; charset=utf-8",
@@ -3268,6 +3451,220 @@ var ArkmeKeychainStore = class {
 		if (process.platform !== "darwin") throw new Error("当前版本只支持使用 macOS Keychain 保存 Arkme 登录凭据");
 	}
 };
+const MACOS_KEYCHAIN_JXA_SCRIPT = String.raw`
+ObjC.import('Foundation')
+ObjC.import('Security')
+function run(argv) {
+  if (argv.length !== 2) throw new Error('invalid Keychain coordinates')
+  const query = $.NSMutableDictionary.dictionary
+  query.setObjectForKey($("genp"), $("class"))
+  query.setObjectForKey($(argv[0]), $("acct"))
+  query.setObjectForKey($(argv[1]), $("svce"))
+  const payload = $.NSFileHandle.fileHandleWithStandardInput.readDataToEndOfFile
+  const update = $.NSMutableDictionary.dictionary
+  update.setObjectForKey(payload, $("v_Data"))
+  let status = Number($.SecItemUpdate(query, update))
+  if (status === -25300) {
+    query.setObjectForKey(payload, $("v_Data"))
+    status = Number($.SecItemAdd(query, null))
+  }
+  if (status !== 0) throw new Error('Keychain write failed with status ' + String(status))
+}
+`;
+const MACOS_KEYCHAIN_READ_JXA_SCRIPT = String.raw`
+ObjC.import('Foundation')
+ObjC.import('Security')
+function run(argv) {
+  if (argv.length !== 2) throw new Error('invalid Keychain coordinates')
+  const query = $.NSMutableDictionary.dictionary
+  query.setObjectForKey($("genp"), $("class"))
+  query.setObjectForKey($(argv[0]), $("acct"))
+  query.setObjectForKey($(argv[1]), $("svce"))
+  query.setObjectForKey($.NSNumber.numberWithBool(true), $("r_Data"))
+  query.setObjectForKey($("m_LimitOne"), $("m_Limit"))
+  const result = Ref()
+  const status = Number($.SecItemCopyMatching(query, result))
+  if (status === -25300) return JSON.stringify({ found: false })
+  if (status !== 0) throw new Error('Keychain read failed with status ' + String(status))
+  const data = ObjC.castRefToObject(result[0])
+  const encoded = data.base64EncodedStringWithOptions(0)
+  return JSON.stringify({ found: true, payload: ObjC.unwrap(encoded) })
+}
+`;
+const MACOS_KEYCHAIN_DELETE_JXA_SCRIPT = String.raw`
+ObjC.import('Foundation')
+ObjC.import('Security')
+function run(argv) {
+  if (argv.length !== 2) throw new Error('invalid Keychain coordinates')
+  const query = $.NSMutableDictionary.dictionary
+  query.setObjectForKey($("genp"), $("class"))
+  query.setObjectForKey($(argv[0]), $("acct"))
+  query.setObjectForKey($(argv[1]), $("svce"))
+  const status = Number($.SecItemDelete(query))
+  if (status !== 0 && status !== -25300) {
+    throw new Error('Keychain delete failed with status ' + String(status))
+  }
+}
+`;
+async function runMacOSKeychainJXA(script, args, operation, stdin) {
+	return await new Promise((resolve, reject) => {
+		const child = spawn("/usr/bin/osascript", [
+			"-l",
+			"JavaScript",
+			"-e",
+			script,
+			...args
+		], {
+			detached: true,
+			shell: false,
+			stdio: [
+				"pipe",
+				"pipe",
+				"pipe"
+			]
+		});
+		let stdout = "";
+		let stderr = "";
+		let settled = false;
+		const finish = (error) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			if (error === void 0) resolve(stdout.trim());
+			else reject(error);
+		};
+		const terminate = () => {
+			if (child.pid !== void 0) try {
+				process.kill(-child.pid, "SIGKILL");
+			} catch {
+				child.kill("SIGKILL");
+			}
+			else child.kill("SIGKILL");
+		};
+		const timer = setTimeout(() => {
+			terminate();
+			finish(/* @__PURE__ */ new Error(`${operation} macOS Keychain 超时`));
+		}, 5e3);
+		timer.unref();
+		child.stdout.setEncoding("utf8");
+		child.stdout.on("data", (chunk) => {
+			if (stdout.length + String(chunk).length > 1024 * 1024) {
+				terminate();
+				finish(/* @__PURE__ */ new Error(`macOS Keychain ${operation}结果超出限制`));
+				return;
+			}
+			stdout += String(chunk);
+		});
+		child.stderr.setEncoding("utf8");
+		child.stderr.on("data", (chunk) => {
+			if (stderr.length < 64 * 1024) stderr += String(chunk).slice(0, 64 * 1024 - stderr.length);
+		});
+		child.once("error", (error) => finish(new Error(`无法启动 macOS Keychain ${operation}命令`, { cause: error })));
+		child.once("close", (code) => {
+			if (code === 0) finish();
+			else finish(/* @__PURE__ */ new Error(`macOS Keychain ${operation}失败（退出码 ${String(code)}）：${stderr.trim().slice(0, 512)}`));
+		});
+		child.stdin.once("error", (error) => finish(new Error(`无法向 macOS Keychain ${operation}命令写入数据`, { cause: error })));
+		child.stdin.end(stdin ?? "", "utf8");
+	});
+}
+function macOSSecureValueCoordinates(args) {
+	if (args.length !== 7 || args[0] !== "add-generic-password" || args[1] !== "-a" || args[3] !== "-s" || args[5] !== "-U" || args[6] !== "-w" || args[2]?.trim() === "" || args[4]?.trim() === "") throw new Error("macOS Keychain 写入参数无效");
+	return {
+		account: args[2],
+		service: args[4]
+	};
+}
+async function writeArkmeMacOSSecureValue(args, payload) {
+	const coordinates = macOSSecureValueCoordinates(args);
+	await runMacOSKeychainJXA(MACOS_KEYCHAIN_JXA_SCRIPT, [coordinates.account, coordinates.service], "写入", payload);
+}
+async function readArkmeMacOSSecureValue(account, service) {
+	const output = await runMacOSKeychainJXA(MACOS_KEYCHAIN_READ_JXA_SCRIPT, [account, service], "读取");
+	let result;
+	try {
+		result = JSON.parse(output);
+	} catch (error) {
+		throw new Error("macOS Keychain 读取结果无效", { cause: error });
+	}
+	if (result === null || typeof result !== "object") throw new Error("macOS Keychain 读取结果无效");
+	const record = result;
+	if (record.found === false) return void 0;
+	if (record.found !== true || typeof record.payload !== "string") throw new Error("macOS Keychain 读取结果无效");
+	return Buffer.from(record.payload, "base64").toString("utf8");
+}
+async function deleteArkmeMacOSSecureValue(account, service) {
+	await runMacOSKeychainJXA(MACOS_KEYCHAIN_DELETE_JXA_SCRIPT, [account, service], "删除");
+}
+var ArkmeMacOSSecureValueStore = class {
+	service;
+	writer;
+	platform;
+	reader;
+	deleter;
+	constructor(service, writer = writeArkmeMacOSSecureValue, platform = process.platform, reader = readArkmeMacOSSecureValue, deleter = deleteArkmeMacOSSecureValue) {
+		this.service = service;
+		this.writer = writer;
+		this.platform = platform;
+		this.reader = reader;
+		this.deleter = deleter;
+	}
+	async read(account) {
+		this.requireMacOS();
+		try {
+			return await this.reader(account, this.service);
+		} catch (error) {
+			throw new Error("无法读取 macOS Keychain 中的 Arkme 安全数据", { cause: error });
+		}
+	}
+	async write(account, payload) {
+		this.requireMacOS();
+		await this.writer([
+			"add-generic-password",
+			"-a",
+			account,
+			"-s",
+			this.service,
+			"-U",
+			"-w"
+		], payload);
+	}
+	async delete(account) {
+		this.requireMacOS();
+		try {
+			await this.deleter(account, this.service);
+		} catch (error) {
+			throw new Error("无法删除 macOS Keychain 中的 Arkme 安全数据", { cause: error });
+		}
+	}
+	requireMacOS() {
+		if (this.platform !== "darwin") throw new Error("macOS Keychain 只能在 macOS 使用");
+	}
+};
+var ArkmeWindowsSecureValueStore = class {
+	service;
+	backend;
+	constructor(service, backend = new ArkmeWindowsCredentialManagerBackend()) {
+		this.service = service;
+		this.backend = backend;
+	}
+	async read(account) {
+		return await this.backend.read(this.service, account);
+	}
+	async write(account, payload) {
+		if (Buffer.byteLength(payload, "utf16le") > WINDOWS_CREDENTIAL_BLOB_MAX_BYTES) throw new Error("Arkme 安全数据超出 Windows Credential Manager 容量限制");
+		await this.backend.write(this.service, account, payload);
+	}
+	async delete(account) {
+		await this.backend.delete(this.service, account);
+	}
+};
+function createArkmeSecureValueStore(service, options = {}) {
+	const platform = options.platform ?? process.platform;
+	if (platform === "darwin") return new ArkmeMacOSSecureValueStore(service);
+	if (platform === "win32") return new ArkmeWindowsSecureValueStore(service, options.windowsBackend);
+	throw new Error(`当前版本只支持在 macOS 或 Windows 保存 Arkme 安全数据，当前平台：${platform}`);
+}
 var ArkmeWindowsCredentialStore = class {
 	service;
 	backend;
@@ -3808,11 +4205,18 @@ var ArkmeLocalDatabase = class {
 //#region src/managed-ai/adapter.ts
 const ARKME_MANAGED_PROVIDER = "arkme-managed";
 const ARKME_MANAGED_MODEL = "deepseek-v4-flash";
-const ARKME_MANAGED_PROVIDER_NAME = "Arkme";
-const ARKME_MANAGED_MODEL_DESCRIPTION = "使用 Arkme 登录，无需 API Key";
+const ARKME_MANAGED_PROVIDER_NAME = "Arkme · 余额计费";
+const ARKME_MANAGED_CATALOG_TTL_MS = 6e4;
+const ARKME_MANAGED_CATALOG_TIMEOUT_MS = 1e4;
 const ARKME_INSUFFICIENT_BALANCE_MESSAGE = "Arkme AI 余额不足，请前往 Arkme 设置中的余额充值后重试";
 const ARKME_LOGIN_MESSAGE = "请先登录或重新登录 Arkme 后再使用托管模型";
-const ARKME_MANAGED_MODELS = /* @__PURE__ */ new Set([ARKME_MANAGED_MODEL]);
+const ARKME_MANAGED_FALLBACK_MODEL = {
+	id: ARKME_MANAGED_MODEL,
+	name: "DeepSeek-V4-Flash",
+	contextWindow: 1e6,
+	maxTokens: 256e3
+};
+const ARKME_MANAGED_FALLBACK_MODELS = [ARKME_MANAGED_FALLBACK_MODEL];
 const ARKME_AUTH_FAILURE_CODES = /* @__PURE__ */ new Set([
 	"login-required",
 	"login-expired",
@@ -3910,9 +4314,8 @@ function localizeManagedAiError(error) {
 		...facts.requestId === void 0 ? {} : { requestId: ProviderRequestId(facts.requestId) }
 	});
 }
-function assertManagedRoute(provider, model) {
+function assertManagedProvider(provider) {
 	if (provider !== "arkme-managed") throw new LlmError(`当前 Arkme 托管模型不支持提供商“${provider}”`, "NO_ADAPTER");
-	if (model !== void 0 && !ARKME_MANAGED_MODELS.has(model)) throw new LlmError(`当前 Arkme 托管服务不支持模型“${model}”，请重新选择模型`, "UNKNOWN_MODEL");
 }
 async function resolveBearer(owner) {
 	try {
@@ -3932,11 +4335,195 @@ async function resolveBearer(owner) {
 	}
 	throw new LlmError(ARKME_LOGIN_MESSAGE, "AUTH");
 }
+function managedConnection(baseUrl, models) {
+	const defaults = models.find((model) => model.id === "deepseek-v4-flash") ?? models[0] ?? ARKME_MANAGED_FALLBACK_MODEL;
+	return resolveAdapterOptions({
+		baseURL: baseUrl,
+		thinking: "enabled",
+		reasoningEffort: "high",
+		maxTokens: defaults.maxTokens ?? 256e3,
+		defaultContextWindow: defaults.contextWindow ?? 1e6,
+		models: [...models],
+		retryPolicy: {
+			mode: "normal",
+			maxRetries: 0
+		}
+	});
+}
+function requiredCatalogText(source, key, label) {
+	const value = source[key];
+	if (typeof value !== "string") throw new LlmError(`Arkme 模型目录中的${label}无效`, "MALFORMED_RESPONSE");
+	const normalized = value.trim();
+	if (normalized === "" || normalized.length > 256) throw new LlmError(`Arkme 模型目录中的${label}无效`, "MALFORMED_RESPONSE");
+	return normalized;
+}
+function requiredCatalogModelId(source) {
+	const model = requiredCatalogText(source, "public_model_code", "模型 ID");
+	if (!/^[^\s\u0000-\u001F\u007F]+$/u.test(model)) throw new LlmError("Arkme 模型目录中的模型 ID 无效", "MALFORMED_RESPONSE");
+	return model;
+}
+function requiredCatalogTokens(source, key, label) {
+	const value = source[key];
+	if (typeof value !== "string" || !/^[1-9]\d*$/u.test(value)) throw new LlmError(`Arkme 模型目录中的${label}无效`, "MALFORMED_RESPONSE");
+	const parsed = Number(value);
+	if (!Number.isSafeInteger(parsed)) throw new LlmError(`Arkme 模型目录中的${label}无效`, "MALFORMED_RESPONSE");
+	return parsed;
+}
+function parseManagedCatalog(payload) {
+	const envelope = asRecord(payload);
+	if (envelope?.code !== 200) {
+		const status = validHttpStatus(envelope?.code);
+		throw localizeManagedAiError(new LlmError(typeof envelope?.message === "string" ? envelope.message : "Arkme 模型目录请求失败", "MANAGED_MODEL_CATALOG", { ...status === void 0 ? {} : { status } }));
+	}
+	const items = asRecord(envelope.data)?.item_ls;
+	if (!Array.isArray(items) || items.length > 256) throw new LlmError("Arkme 模型目录返回异常", "MALFORMED_RESPONSE");
+	const seen = /* @__PURE__ */ new Set();
+	return items.map((value) => {
+		const item = asRecord(value);
+		if (item?.provider !== "arkme-managed") throw new LlmError("Arkme 模型目录包含无效提供商", "MALFORMED_RESPONSE");
+		const id = requiredCatalogModelId(item);
+		if (seen.has(id)) throw new LlmError(`Arkme 模型目录包含重复模型“${id}”`, "MALFORMED_RESPONSE");
+		seen.add(id);
+		const contextWindow = requiredCatalogTokens(item, "context_window_tokens", "上下文窗口");
+		const defaultMaxTokens = requiredCatalogTokens(item, "default_max_output_tokens", "默认输出上限");
+		const maximumMaxTokens = requiredCatalogTokens(item, "maximum_max_output_tokens", "最大输出上限");
+		if (defaultMaxTokens > maximumMaxTokens || maximumMaxTokens > contextWindow) throw new LlmError(`Arkme 模型“${id}”的 Token 上限无效`, "MALFORMED_RESPONSE");
+		return {
+			id,
+			name: requiredCatalogText(item, "display_name", "显示名称"),
+			contextWindow,
+			maxTokens: defaultMaxTokens
+		};
+	});
+}
+function waitForSignal(promise, signal) {
+	if (signal.aborted) return Promise.reject(signal.reason ?? new DOMException("Aborted", "AbortError"));
+	return new Promise((resolve, reject) => {
+		const onAbort = () => {
+			signal.removeEventListener("abort", onAbort);
+			reject(signal.reason ?? new DOMException("Aborted", "AbortError"));
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+		promise.then((value) => {
+			signal.removeEventListener("abort", onAbort);
+			resolve(value);
+		}, (error) => {
+			signal.removeEventListener("abort", onAbort);
+			reject(error);
+		});
+	});
+}
+var ManagedModelCatalog = class {
+	credentialOwner;
+	baseUrl;
+	fetchImpl;
+	connectionSnapshot;
+	modelIds = new Set(ARKME_MANAGED_FALLBACK_MODELS.map((model) => model.id));
+	hasRemoteSnapshot = false;
+	refreshedAt = 0;
+	refreshPromise;
+	constructor(intelligentBaseUrl, credentialOwner, fetchImpl) {
+		this.credentialOwner = credentialOwner;
+		this.baseUrl = managedAiBaseUrl(intelligentBaseUrl);
+		this.fetchImpl = fetchImpl;
+		this.connectionSnapshot = managedConnection(this.baseUrl, ARKME_MANAGED_FALLBACK_MODELS);
+	}
+	connection() {
+		return this.connectionSnapshot;
+	}
+	isFresh() {
+		return this.hasRemoteSnapshot && Date.now() - this.refreshedAt < ARKME_MANAGED_CATALOG_TTL_MS;
+	}
+	async fetchCatalog(signal) {
+		const controller = new AbortController();
+		let timedOut = false;
+		const abortFromCaller = () => {
+			controller.abort(signal?.reason);
+		};
+		if (signal?.aborted === true) abortFromCaller();
+		else signal?.addEventListener("abort", abortFromCaller, { once: true });
+		const timeout = setTimeout(() => {
+			timedOut = true;
+			controller.abort();
+		}, ARKME_MANAGED_CATALOG_TIMEOUT_MS);
+		try {
+			if (controller.signal.aborted) throw controller.signal.reason ?? new DOMException("Aborted", "AbortError");
+			const bearer = await waitForSignal(resolveBearer(this.credentialOwner), controller.signal);
+			const response = await this.fetchImpl(`${this.baseUrl}/models/query`, {
+				method: "POST",
+				headers: {
+					Accept: "application/json",
+					Authorization: `Bearer ${bearer}`,
+					"Content-Type": "application/json"
+				},
+				body: "{}",
+				signal: controller.signal
+			});
+			if (!response.ok) {
+				const requestId = response.headers.get("x-request-id");
+				throw localizeManagedAiError(new LlmError("Arkme 模型目录请求失败", "MANAGED_MODEL_CATALOG", {
+					status: response.status,
+					...requestId === null || requestId === "" ? {} : { requestId: ProviderRequestId(requestId) }
+				}));
+			}
+			let payload;
+			try {
+				payload = await response.json();
+			} catch (error) {
+				if (controller.signal.aborted) throw error;
+				throw new LlmError("Arkme 模型目录返回异常", "MALFORMED_RESPONSE", { cause: error });
+			}
+			const models = parseManagedCatalog(payload);
+			this.connectionSnapshot = managedConnection(this.baseUrl, models);
+			this.modelIds = new Set(models.map((model) => model.id));
+			this.hasRemoteSnapshot = true;
+			this.refreshedAt = Date.now();
+		} catch (error) {
+			if (signal?.aborted === true) throw localizeManagedAiError(new LlmError("Arkme 模型目录请求已取消", "ABORTED", { cause: error }));
+			if (timedOut) throw localizeManagedAiError(new LlmError("Arkme 模型目录请求超时", "TIMEOUT", { cause: error }));
+			if (error instanceof LlmError) throw error;
+			throw localizeManagedAiError(new LlmError("无法连接 Arkme 模型目录", "TRANSPORT", { cause: error }));
+		} finally {
+			clearTimeout(timeout);
+			signal?.removeEventListener("abort", abortFromCaller);
+		}
+	}
+	refresh(signal) {
+		if (signal !== void 0) return this.fetchCatalog(signal);
+		if (this.refreshPromise !== void 0) return this.refreshPromise;
+		const refresh = this.fetchCatalog(signal).finally(() => {
+			if (this.refreshPromise === refresh) this.refreshPromise = void 0;
+		});
+		this.refreshPromise = refresh;
+		return refresh;
+	}
+	async refreshForListing() {
+		if (this.isFresh()) return;
+		try {
+			await this.refresh();
+		} catch {}
+	}
+	async ensureModel(model, signal) {
+		const known = this.modelIds.has(model);
+		if (known && !this.hasRemoteSnapshot || this.isFresh()) return;
+		try {
+			await this.refresh(signal);
+		} catch (error) {
+			if (signal?.aborted === true) throw error;
+			if (!known) throw error;
+		}
+	}
+	assertModel(model) {
+		if (!this.modelIds.has(model)) throw new LlmError(`当前 Arkme 托管服务不支持模型“${model}”，请重新选择模型`, "UNKNOWN_MODEL");
+	}
+};
 var ManagedAiLlmAdapter = class extends LlmAdapter {
 	delegate;
-	constructor(delegate) {
+	catalog;
+	constructor(delegate, catalog) {
 		super();
 		this.delegate = delegate;
+		this.catalog = catalog;
 	}
 	providerInfo(provider) {
 		return {
@@ -3947,17 +4534,22 @@ var ManagedAiLlmAdapter = class extends LlmAdapter {
 	providerRetryPolicy(provider) {
 		return this.delegate.providerRetryPolicy(provider);
 	}
-	listModels(provider) {
-		assertManagedRoute(provider);
-		return this.delegate.listModels(provider);
+	async listModels(provider) {
+		assertManagedProvider(provider);
+		await this.catalog.refreshForListing();
+		return await this.delegate.listModels(provider);
 	}
 	async resolveModel(provider, model, signal) {
-		assertManagedRoute(provider, model);
+		assertManagedProvider(provider);
+		await this.catalog.ensureModel(model, signal);
+		this.catalog.assertModel(model);
 		return await this.delegate.resolveModel(provider, model, signal);
 	}
 	async *stream(options) {
-		assertManagedRoute(options.provider, options.model);
 		try {
+			assertManagedProvider(options.provider);
+			await this.catalog.ensureModel(options.model, options.signal);
+			this.catalog.assertModel(options.model);
 			yield* this.delegate.stream(options);
 		} catch (error) {
 			throw localizeManagedAiError(error);
@@ -3965,29 +4557,12 @@ var ManagedAiLlmAdapter = class extends LlmAdapter {
 	}
 };
 function createManagedAiLlmAdapter(options) {
-	const connection = resolveAdapterOptions({
-		baseURL: managedAiBaseUrl(options.intelligentBaseUrl),
-		thinking: "enabled",
-		reasoningEffort: "high",
-		maxTokens: 256e3,
-		defaultContextWindow: 1e6,
-		models: [{
-			id: ARKME_MANAGED_MODEL,
-			name: "DeepSeek-V4-Flash",
-			description: ARKME_MANAGED_MODEL_DESCRIPTION,
-			contextWindow: 1e6,
-			maxTokens: 256e3
-		}],
-		retryPolicy: {
-			mode: "normal",
-			maxRetries: 0
-		}
-	});
+	const catalog = new ManagedModelCatalog(options.intelligentBaseUrl, options.credentialOwner, options.fetchImpl ?? globalThis.fetch);
 	return new ManagedAiLlmAdapter(new DeepSeekAdapter({
-		options: () => connection,
+		options: () => catalog.connection(),
 		resolveApiKey: async () => await resolveBearer(options.credentialOwner),
 		resolveUserId: options.resolveAnonymousUserId ?? getOrCreateAnonymousUserId
-	}));
+	}), catalog);
 }
 function registerManagedAiProvider(ctx, options) {
 	return ctx.llm.registerAdapter([ARKME_MANAGED_PROVIDER], createManagedAiLlmAdapter(options));
@@ -4073,6 +4648,247 @@ var ArkmeRealtimeEvents = class {
 	}
 };
 //#endregion
+//#region src/extensions/desktop-quarantine.ts
+const QUARANTINE_DIRECTORY_NAME = "desktop-extension-quarantine";
+const RECEIPT_FILE_NAME = "receipt.json";
+const PACKAGE_NAME_PATTERN = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
+const QUARANTINE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const RUNTIME_RELEASE_PATTERN = /^electron-runtime-v1-[a-f0-9]{32}$/;
+const MAX_FAILURE_SUMMARY_LENGTH = 2e3;
+const MAX_FAILURE_TAIL_LENGTH = 16384;
+var ArkmeDesktopExtensionQuarantine = class {
+	options;
+	now;
+	constructor(options) {
+		this.options = options;
+		this.now = options.now ?? (() => Date.now());
+	}
+	async reconcile() {
+		for (const stored of await this.readReceipts("active")) {
+			let changed = false;
+			for (const entry of stored.receipt.entries) {
+				if (entry.resolvedAtMillis !== void 0) continue;
+				const installed = this.installedByPackage(entry.packageName);
+				if (installed !== void 0 && (installed.enabled || installed.active || installed.lastError !== stored.receipt.failureSummary)) this.options.installStore.put({
+					...installed,
+					enabled: false,
+					active: false,
+					lastError: stored.receipt.failureSummary
+				});
+				if (entry.synchronizedAtMillis === void 0) {
+					entry.synchronizedAtMillis = this.now();
+					changed = true;
+				}
+			}
+			if (changed) await this.writeStoredReceipt(stored);
+		}
+	}
+	async status() {
+		const stored = (await this.readReceipts("active")).sort((left, right) => right.receipt.createdAtMillis - left.receipt.createdAtMillis)[0];
+		if (stored === void 0) return {
+			active: false,
+			entries: []
+		};
+		return {
+			active: true,
+			quarantineId: stored.receipt.quarantineId,
+			mode: stored.receipt.mode,
+			failureSummary: stored.receipt.failureSummary,
+			failureLogTail: stored.receipt.failureLogTail,
+			entries: stored.receipt.entries.filter((entry) => entry.resolvedAtMillis === void 0).map((entry) => ({
+				packageName: entry.packageName,
+				...this.installedByPackage(entry.packageName) === void 0 ? {} : { extensionId: this.installedByPackage(entry.packageName).extensionId },
+				dismissed: entry.notificationDismissedAtMillis !== void 0,
+				resolved: false
+			}))
+		};
+	}
+	async dismiss(packageName) {
+		const stored = await this.activeReceiptForPackage(packageName);
+		const entry = stored.receipt.entries.find((item) => item.packageName === packageName);
+		if (entry.notificationDismissedAtMillis === void 0) {
+			entry.notificationDismissedAtMillis = this.now();
+			await this.writeStoredReceipt(stored);
+		}
+	}
+	async reenable(packageName) {
+		const stored = await this.activeReceiptForPackage(packageName);
+		const entry = stored.receipt.entries.find((item) => item.packageName === packageName);
+		entry.reenableRequestedAtMillis = this.now();
+		await this.writeStoredReceipt(stored);
+		let profileEnabled = false;
+		try {
+			await this.options.setProfileEnabled(packageName, true);
+			profileEnabled = true;
+			await this.options.requestRestart({
+				packageName,
+				previousProfileIncluded: false
+			});
+		} catch (error) {
+			if (profileEnabled) await this.options.setProfileEnabled(packageName, false).catch(() => void 0);
+			delete entry.reenableRequestedAtMillis;
+			await this.writeStoredReceipt(stored).catch(() => void 0);
+			throw error;
+		}
+	}
+	async resolveActive() {
+		for (const stored of await this.readReceipts("active")) {
+			let changed = false;
+			for (const entry of stored.receipt.entries) {
+				if (entry.resolvedAtMillis !== void 0) continue;
+				if (entry.reenableRequestedAtMillis !== void 0 && this.options.isPackageActive(entry.packageName)) {
+					entry.resolvedAtMillis = this.now();
+					delete entry.reenableRequestedAtMillis;
+					const installed = this.installedByPackage(entry.packageName);
+					if (installed !== void 0) {
+						const { lastError: _lastError, ...retained } = installed;
+						this.options.installStore.put({
+							...retained,
+							enabled: true,
+							active: true
+						});
+					}
+					changed = true;
+					continue;
+				}
+				if (entry.reenableRequestedAtMillis !== void 0) {
+					await this.options.setProfileEnabled(entry.packageName, false);
+					delete entry.reenableRequestedAtMillis;
+					const installed = this.installedByPackage(entry.packageName);
+					if (installed !== void 0) this.options.installStore.put({
+						...installed,
+						enabled: false,
+						active: false
+					});
+					changed = true;
+				}
+			}
+			if (stored.receipt.entries.every((entry) => entry.resolvedAtMillis !== void 0)) {
+				stored.receipt.phase = "resolved";
+				changed = true;
+			}
+			if (changed) await this.writeStoredReceipt(stored);
+		}
+	}
+	async health(packageName) {
+		if ((await this.activeReceiptForPackage(packageName)).receipt.entries.find((item) => item.packageName === packageName).reenableRequestedAtMillis === void 0) throw new Error("该扩展尚未请求重新启用");
+		const profileEnabled = await this.profileContains(packageName);
+		const active = this.options.isPackageActive(packageName);
+		if (profileEnabled && active) await this.resolveActive();
+		return {
+			profileEnabled,
+			active
+		};
+	}
+	async activeReceiptForPackage(packageName) {
+		if (!isPackageName(packageName) || isProtectedPackage(packageName)) throw new Error("隔离扩展包名无效");
+		const matches = (await this.readReceipts("active")).filter((stored) => stored.receipt.entries.some((entry) => entry.packageName === packageName && entry.resolvedAtMillis === void 0));
+		matches.sort((left, right) => right.receipt.createdAtMillis - left.receipt.createdAtMillis);
+		if (matches[0] === void 0) throw new Error("该扩展没有活动的启动隔离记录");
+		return matches[0];
+	}
+	installedByPackage(packageName) {
+		return this.options.installStore.list().find((item) => item.profilePackageName === packageName);
+	}
+	async profileContains(packageName) {
+		try {
+			const value = JSON.parse(await readFile(join(this.options.dshHome, "profiles", "web", "package.json"), "utf8"));
+			if (!isObject(value) || !isObject(value.dsh) || !isObject(value.dsh.profile) || !Array.isArray(value.dsh.profile.bundles)) return false;
+			return value.dsh.profile.bundles.some((item) => item === packageName);
+		} catch {
+			return false;
+		}
+	}
+	async readReceipts(phase) {
+		const root = join(this.options.dshHome, "arkme-self", QUARANTINE_DIRECTORY_NAME);
+		const directories = await readdir(root, { withFileTypes: true }).catch((error) => {
+			if (error.code === "ENOENT") return [];
+			throw error;
+		});
+		const receipts = [];
+		for (const directory of directories) {
+			if (!directory.isDirectory() || !QUARANTINE_ID_PATTERN.test(directory.name)) continue;
+			const receiptPath = join(root, directory.name, RECEIPT_FILE_NAME);
+			try {
+				const receipt = parseReceipt(await readFile(receiptPath, "utf8"));
+				if (receipt.quarantineId !== directory.name || receipt.environment !== this.options.environment || phase !== void 0 && receipt.phase !== phase) continue;
+				receipts.push({
+					path: receiptPath,
+					receipt
+				});
+			} catch {}
+		}
+		return receipts;
+	}
+	async writeStoredReceipt(stored) {
+		stored.receipt.updatedAtMillis = this.now();
+		await writeTextAtomically(stored.path, `${JSON.stringify(stored.receipt, void 0, 2)}\n`);
+	}
+};
+function parseReceipt(text) {
+	const value = JSON.parse(text);
+	if (!isObject(value) || value.schemaVersion !== 1 || typeof value.quarantineId !== "string" || !QUARANTINE_ID_PATTERN.test(value.quarantineId) || value.environment !== "prod" && value.environment !== "test" || ![
+		"pending",
+		"active",
+		"restored",
+		"resolved"
+	].includes(String(value.phase)) || value.mode !== "targeted" && value.mode !== "local-safe-mode" || !Number.isSafeInteger(value.createdAtMillis) || !Number.isSafeInteger(value.updatedAtMillis) || value.runtimeReleaseId !== void 0 && (typeof value.runtimeReleaseId !== "string" || !RUNTIME_RELEASE_PATTERN.test(value.runtimeReleaseId)) || typeof value.failureSummary !== "string" || value.failureSummary.trim() === "" || value.failureSummary.length > MAX_FAILURE_SUMMARY_LENGTH || typeof value.failureLogTail !== "string" || value.failureLogTail.length > MAX_FAILURE_TAIL_LENGTH || !Array.isArray(value.entries) || value.entries.length === 0) throw new Error("桌面扩展隔离记录无效");
+	const entries = value.entries.map((raw) => parseEntry(raw));
+	if (new Set(entries.map((entry) => entry.packageName)).size !== entries.length) throw new Error("桌面扩展隔离记录包含重复扩展");
+	return {
+		schemaVersion: 1,
+		quarantineId: value.quarantineId,
+		environment: value.environment,
+		phase: value.phase,
+		mode: value.mode,
+		createdAtMillis: Number(value.createdAtMillis),
+		updatedAtMillis: Number(value.updatedAtMillis),
+		...typeof value.runtimeReleaseId === "string" ? { runtimeReleaseId: value.runtimeReleaseId } : {},
+		failureSummary: value.failureSummary,
+		failureLogTail: value.failureLogTail,
+		entries
+	};
+}
+function parseEntry(value) {
+	if (!isObject(value) || typeof value.packageName !== "string" || !isPackageName(value.packageName) || isProtectedPackage(value.packageName) || typeof value.dependencySpec !== "string" || value.dependencySpec.length === 0 || value.dependencySpec.length > 4096 || !Number.isSafeInteger(value.originalBundleIndex) || Number(value.originalBundleIndex) < 0 || !optionalMillis(value.synchronizedAtMillis) || !optionalMillis(value.notificationDismissedAtMillis) || !optionalMillis(value.reenableRequestedAtMillis) || !optionalMillis(value.resolvedAtMillis)) throw new Error("桌面扩展隔离条目无效");
+	return {
+		packageName: value.packageName,
+		dependencySpec: value.dependencySpec,
+		originalBundleIndex: Number(value.originalBundleIndex),
+		...value.synchronizedAtMillis === void 0 ? {} : { synchronizedAtMillis: Number(value.synchronizedAtMillis) },
+		...value.notificationDismissedAtMillis === void 0 ? {} : { notificationDismissedAtMillis: Number(value.notificationDismissedAtMillis) },
+		...value.reenableRequestedAtMillis === void 0 ? {} : { reenableRequestedAtMillis: Number(value.reenableRequestedAtMillis) },
+		...value.resolvedAtMillis === void 0 ? {} : { resolvedAtMillis: Number(value.resolvedAtMillis) }
+	};
+}
+function optionalMillis(value) {
+	return value === void 0 || Number.isSafeInteger(value) && Number(value) >= 0;
+}
+function isObject(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isPackageName(value) {
+	return PACKAGE_NAME_PATTERN.test(value);
+}
+function isProtectedPackage(packageName) {
+	return packageName === "@senguoyun/dsh-arkme" || packageName.startsWith("@deepseek-ai/");
+}
+async function writeTextAtomically(filePath, text) {
+	const temporaryPath = `${filePath}.${process.pid}.${randomUUID()}.tmp`;
+	try {
+		const handle = await open(temporaryPath, "wx", 384);
+		try {
+			await handle.writeFile(text, "utf8");
+			await handle.sync();
+		} finally {
+			await handle.close();
+		}
+		await rename(temporaryPath, filePath);
+	} finally {
+		await rm(temporaryPath, { force: true }).catch(() => void 0);
+	}
+}
+//#endregion
 //#region src/extensions/install-tasks.ts
 const TASK_RETENTION_MILLIS = 600 * 1e3;
 const MAX_RETAINED_TASKS = 100;
@@ -6417,14 +7233,14 @@ var ArkmeExtensionManager = class {
 };
 //#endregion
 //#region src/extensions/publish-client.ts
-function record(value) {
+function record$1(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function legacyManifest(value) {
-	const manifest = record(value);
-	const runtime = record(manifest?.runtime);
-	const halves = record(manifest?.halves);
-	const entrypoints = record(manifest?.entrypoints);
+	const manifest = record$1(value);
+	const runtime = record$1(manifest?.runtime);
+	const halves = record$1(manifest?.halves);
+	const entrypoints = record$1(manifest?.entrypoints);
 	const permissions = manifest?.permissions;
 	if (manifest?.format !== "arkme-cordis-extension" || manifest.format_version !== 1 || typeof manifest.name !== "string" || typeof manifest.description !== "string" || typeof manifest.version !== "string" || typeof runtime?.dsh !== "string" || typeof runtime.arkme_provider_contract !== "number" || typeof halves?.host !== "boolean" || typeof halves.client !== "boolean" || !Array.isArray(permissions) || !permissions.every((permission) => typeof permission === "string") || entrypoints === void 0 || entrypoints.host !== void 0 && entrypoints.host !== "host.js" || entrypoints.client !== void 0 && entrypoints.client !== "client.js") return void 0;
 	return {
@@ -7350,7 +8166,7 @@ var ArkmeExtensionProfileInstaller = class {
 		await this.mutationTail;
 		if (this.options.stateDirectory === void 0 || this.options.healthUrl === void 0 || this.options.helperPath === void 0 || this.options.restartArgv === void 0 || this.options.installStoreDirectory === void 0) return;
 		const plan = {
-			schemaVersion: input.activationChange === true ? 3 : input.targetBundlePath?.endsWith(".tgz") === true || input.previousBundlePath?.endsWith(".tgz") === true || input.previousInstalled?.executionModel !== void 0 ? 2 : 1,
+			schemaVersion: input.desktopQuarantineActivation === true ? 4 : input.activationChange === true ? 3 : input.targetBundlePath?.endsWith(".tgz") === true || input.previousBundlePath?.endsWith(".tgz") === true || input.previousInstalled?.executionModel !== void 0 ? 2 : 1,
 			parentPid: process.pid,
 			execPath: this.options.execPath,
 			dshBinPath: this.options.dshBinPath,
@@ -7370,8 +8186,10 @@ var ArkmeExtensionProfileInstaller = class {
 				activationChange: true,
 				previousProfileIncluded: input.previousProfileIncluded === true
 			} : {},
+			...input.desktopQuarantineActivation === true ? { desktopQuarantineActivation: true } : {},
 			healthUrl: this.options.healthUrl,
-			logPath: join(this.options.stateDirectory, "extension-profile-restart.log")
+			logPath: join(this.options.stateDirectory, "extension-profile-restart.log"),
+			...this.options.runtimeReleaseId === void 0 ? {} : { runtimeReleaseId: this.options.runtimeReleaseId }
 		};
 		if (this.options.supervisedExitCode !== void 0) {
 			if (!Number.isSafeInteger(this.options.supervisedExitCode) || this.options.supervisedExitCode < 1 || this.options.supervisedExitCode > 255) throw new Error("受监督重启退出码无效");
@@ -7420,6 +8238,17 @@ var ArkmeExtensionProfileInstaller = class {
 			setTimeout(() => process.kill(process.pid, "SIGTERM"), 800).unref?.();
 		}))();
 	}
+	async restartDesktopQuarantine(input) {
+		if (!isArkmeProfilePackageName(input.packageName)) throw new Error("扩展 Bundle 包名无效");
+		await this.restart({
+			extensionId: `desktop-quarantine:${input.packageName}`,
+			packageName: input.packageName,
+			expectActive: true,
+			activationChange: true,
+			desktopQuarantineActivation: true,
+			previousProfileIncluded: false
+		});
+	}
 	async run(args) {
 		if (this.options.run !== void 0) return await this.options.run(args);
 		if (!existsSync(this.options.execPath) || !existsSync(this.options.dshBinPath)) throw new Error("当前 DSH 运行方式不支持修改 Profile 插件");
@@ -8165,7 +8994,7 @@ function sqliteHexText(value) {
 }
 //#endregion
 //#region src/state-store.ts
-function emptyState() {
+function emptyState$1() {
 	return {
 		version: 1,
 		uniqueCode: randomUUID(),
@@ -8212,7 +9041,7 @@ function normalizedPending(value) {
 }
 function parseState(raw) {
 	const parsed = JSON.parse(raw);
-	if (parsed === null || typeof parsed !== "object") return emptyState();
+	if (parsed === null || typeof parsed !== "object") return emptyState$1();
 	const source = parsed;
 	const pendingByUser = {};
 	if (source.pendingByUser !== null && typeof source.pendingByUser === "object") for (const [userId, pending] of Object.entries(source.pendingByUser)) pendingByUser[userId] = normalizedPending(pending);
@@ -8318,7 +9147,7 @@ var ArkmeStateStore = class {
 			this.state = parseState(await readFile(this.path, "utf8"));
 		} catch (error) {
 			if (error.code !== "ENOENT") throw error;
-			this.state = emptyState();
+			this.state = emptyState$1();
 			await this.write(this.state);
 		}
 		return this.state;
@@ -8414,18 +9243,18 @@ function requiredAgentId$2(agent) {
 	return id;
 }
 function fingerprintArguments(operationKey, value) {
-	return createHash("sha256").update(`arkme-conversational-confirmation-v1\0${operationKey}\0${canonicalJson(value)}`).digest("hex");
+	return createHash("sha256").update(`arkme-conversational-confirmation-v1\0${operationKey}\0${canonicalJson$1(value)}`).digest("hex");
 }
-function canonicalJson(value) {
+function canonicalJson$1(value) {
 	if (value === null || typeof value === "boolean" || typeof value === "string") return JSON.stringify(value);
 	if (typeof value === "number") {
 		if (!Number.isFinite(value)) throw new Error("对话确认参数必须是有限 JSON 数值");
 		return JSON.stringify(value);
 	}
-	if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+	if (Array.isArray(value)) return `[${value.map(canonicalJson$1).join(",")}]`;
 	if (typeof value === "object") {
 		const source = value;
-		return `{${Object.keys(source).filter((key) => source[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(source[key])}`).join(",")}}`;
+		return `{${Object.keys(source).filter((key) => source[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson$1(source[key])}`).join(",")}}`;
 	}
 	throw new Error("对话确认参数必须是可序列化 JSON");
 }
@@ -12462,7 +13291,7 @@ function inclusiveRange(from, to) {
 		count
 	};
 }
-function codePointLength(value) {
+function codePointLength$1(value) {
 	return [...value].length;
 }
 function recordingFingerprint(value) {
@@ -12547,7 +13376,7 @@ function timelineModelItemLength(item) {
 		item.todo,
 		...item.tags,
 		...item.participants
-	].reduce((total, value) => total + codePointLength(value), 0);
+	].reduce((total, value) => total + codePointLength$1(value), 0);
 }
 const DAYS_OUTPUT_SCHEMA = {
 	type: "object",
@@ -12886,7 +13715,7 @@ async function readTranscriptPage(ports, localDate, continued, limit, signal) {
 	while (itemOffset < section.items.length && items.length < limit) {
 		const item = section.items[itemOffset];
 		if (item === void 0) break;
-		const itemLength = codePointLength(item.text);
+		const itemLength = codePointLength$1(item.text);
 		if (itemLength > RECORDING_TEXT_BUDGET) {
 			itemOffset += 1;
 			unavailableCount += 1;
@@ -13460,7 +14289,7 @@ const worldMineToolModule = defineArkmeCoreToolModule({
 });
 //#endregion
 //#region src/tools/business/world/user.ts
-function positiveInteger(value, name) {
+function positiveInteger$2(value, name) {
 	if (!Number.isSafeInteger(value) || value <= 0) throw new Error(`${name} 必须是正整数`);
 	return value;
 }
@@ -13500,7 +14329,7 @@ const worldUserToolModule = defineArkmeCoreToolModule({
 			output: TEXT_OUTPUT$3,
 			isConcurrencySafe: () => true,
 			async execute(args, exec) {
-				const result = await ports.listUserWorldFeed(positiveInteger(args.user_id, "user_id"), {
+				const result = await ports.listUserWorldFeed(positiveInteger$2(args.user_id, "user_id"), {
 					limit: Math.min(20, Math.max(1, Math.trunc(args.limit ?? 20))),
 					offset: offset(args.offset),
 					signal: exec.signal
@@ -14758,10 +15587,2906 @@ function registerArkmeTools(ctx, ports, profile = "business") {
 }
 [...fileToolModules];
 //#endregion
-//#region src/index.ts
-const ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS = "{\"prod-ed25519-20260819-1\":\"m1MKKU16hyu1b1KKIXMG+zKEr/GmhmvyUEreJzthTxs=\"}";
-const Config = Schema.object({
-	environment: Schema.union(["test", "prod"]).default("test"),
+//#region src/dsh-remote/types.ts
+const DSH_REMOTE_PROTOCOL = "dsh.remote";
+const DSH_REMOTE_MAX_FRAME_BYTES = 60 * 1024;
+const DSH_REMOTE_MAX_PAGE_RESULT_BYTES = 40 * 1024;
+//#endregion
+//#region src/dsh-remote/dsh-event-contract.ts
+function record(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", "DSH HistoryEntry 结构无效", true);
+	return value;
+}
+function jsonSnapshot(value, field) {
+	try {
+		const encoded = JSON.stringify(value);
+		if (encoded === void 0) throw new TypeError(`${field} is not JSON`);
+		return JSON.parse(encoded);
+	} catch (error) {
+		throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", `DSH ${field} 不是有效 JSON`, true, {}, { cause: error });
+	}
+}
+function finiteNumber(value, field) {
+	if (typeof value !== "number" || !Number.isFinite(value)) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", `DSH ${field} 无效`, true);
+	return value;
+}
+function snapshotDshHistoryEntry(value) {
+	const source = record(value.event);
+	if (typeof source.type !== "string" || source.type.length === 0 || !Number.isSafeInteger(source.seq) || Number(source.seq) < 0) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", "DSH SessionEvent 信封无效", true);
+	const event = {
+		type: source.type,
+		seq: Number(source.seq),
+		time: finiteNumber(source.time, "SessionEvent.time"),
+		data: jsonSnapshot(source.data, "SessionEvent.data")
+	};
+	if (source.sourceEventSeqs !== void 0) {
+		if (!Array.isArray(source.sourceEventSeqs) || source.sourceEventSeqs.some((seq) => !Number.isSafeInteger(seq) || Number(seq) < 0)) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", "DSH sourceEventSeqs 无效", true);
+		event.sourceEventSeqs = [...source.sourceEventSeqs];
+	}
+	if (source.surfaceOp !== void 0) event.surfaceOp = jsonSnapshot(source.surfaceOp, "SessionEvent.surfaceOp");
+	if (source.ignorable !== void 0) {
+		if (source.ignorable !== true) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", "DSH ignorable 无效", true);
+		event.ignorable = true;
+	}
+	if (value.view === void 0) return { event };
+	const viewSource = record(value.view);
+	if (viewSource.for !== "call" && viewSource.for !== "result" || viewSource.view === null || typeof viewSource.view !== "object" || Array.isArray(viewSource.view)) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", "DSH ToolEventView 无效", true);
+	return {
+		event,
+		view: {
+			for: viewSource.for,
+			view: jsonSnapshot(viewSource.view, "ToolEventView.view")
+		}
+	};
+}
+function dshHistoryEntryUserRpcId(entry) {
+	if (entry.event.type !== "user/message" || entry.event.data === null || typeof entry.event.data !== "object" || Array.isArray(entry.event.data)) return void 0;
+	const data = entry.event.data;
+	const message = data.message !== null && typeof data.message === "object" && !Array.isArray(data.message) ? data.message : void 0;
+	const source = data.source !== null && typeof data.source === "object" && !Array.isArray(data.source) ? data.source : message?.source !== null && typeof message?.source === "object" && !Array.isArray(message.source) ? message.source : void 0;
+	return typeof source?.rpcId === "string" ? source.rpcId : void 0;
+}
+//#endregion
+//#region src/dsh-remote/api-proxy-adapter.ts
+function rpcId(prefix) {
+	return `${prefix}-${randomUUID()}`;
+}
+function unwrap(response) {
+	if (response.result.ok) return response.result.value;
+	const error = response.result.error;
+	switch (error.code) {
+		case "session-not-found": throw new DshRemoteError("SESSION_NOT_FOUND", "DSH 会话不存在");
+		case "workspace-not-found":
+		case "workspace-invalid-path": throw new DshRemoteError("WORKSPACE_UNAVAILABLE", "DSH 工作目录不可用");
+		case "agent-busy":
+		case "steer-unavailable":
+		case "queue-item-not-found": throw new DshRemoteError("SESSION_STATE_CHANGED", "DSH 会话状态已经变化", true);
+		default: throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", error.message || "DSH 操作失败", true, {
+			dshCode: error.code,
+			dshRejected: true
+		});
+	}
+}
+function offsetCursor(offset) {
+	return Buffer.from(JSON.stringify({
+		v: 1,
+		o: offset
+	})).toString("base64url");
+}
+function readOffset(cursor) {
+	if (cursor === void 0 || cursor === "") return 0;
+	try {
+		const value = JSON.parse(Buffer.from(cursor, "base64url").toString("utf8"));
+		if (value.v === 1 && Number.isSafeInteger(value.o) && Number(value.o) >= 0) return Number(value.o);
+	} catch {}
+	throw new DshRemoteError("REMOTE_REQUEST_INVALID", "分页游标无效");
+}
+function stableSessionId(requestRef) {
+	const bytes = createHash("sha256").update(`dsh-remote-session-v1\n${requestRef}`).digest().subarray(0, 16);
+	bytes[6] = bytes[6] & 15 | 64;
+	bytes[8] = bytes[8] & 63 | 128;
+	const hex = bytes.toString("hex");
+	return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function codePointLength(value) {
+	return [...value].length;
+}
+function jsonBytes(value) {
+	return Buffer.byteLength(JSON.stringify(value));
+}
+const MAX_ATOMIC_PROJECTION_BYTES = 24 * 1024;
+function boundedUtf8(value, maxBytes) {
+	if (Buffer.byteLength(value) <= maxBytes) return value;
+	let result = "";
+	let used = 0;
+	for (const point of value) {
+		const bytes = Buffer.byteLength(point);
+		if (used + bytes > maxBytes) break;
+		result += point;
+		used += bytes;
+	}
+	return result;
+}
+function pageLimit(value) {
+	return Math.min(50, Math.max(1, Math.trunc(value ?? 50)));
+}
+function pageByBytes(input) {
+	const items = [];
+	while (input.offset + items.length < input.all.length && items.length < input.limit) {
+		const candidate = [...items, input.all[input.offset + items.length]];
+		const consumed = input.offset + candidate.length;
+		const nextCursor = consumed < input.all.length ? offsetCursor(consumed) : void 0;
+		const result = input.build(candidate, nextCursor);
+		if (jsonBytes(result) > 40960 || jsonBytes(result) > 524288) break;
+		items.push(candidate.at(-1));
+	}
+	if (items.length === 0 && input.offset < input.all.length) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "单个 DSH 投影超过远控帧容量");
+	const consumed = input.offset + items.length;
+	return input.build(items, consumed < input.all.length ? offsetCursor(consumed) : void 0);
+}
+function projectQuestions(value) {
+	const result = [];
+	for (const raw of value.slice(0, 16)) {
+		if (raw === null || typeof raw !== "object" || Array.isArray(raw)) continue;
+		const source = raw;
+		if (typeof source.id !== "string" || typeof source.question !== "string") continue;
+		const options = Array.isArray(source.options) ? source.options.slice(0, 16).flatMap((option) => {
+			if (option === null || typeof option !== "object" || Array.isArray(option)) return [];
+			const item = option;
+			if (typeof item.label !== "string") return [];
+			return [{
+				label: boundedUtf8(item.label, 512),
+				...typeof item.description === "string" ? { description: boundedUtf8(item.description, 2 * 1024) } : {}
+			}];
+		}) : void 0;
+		const projected = {
+			id: boundedUtf8(source.id, 256),
+			question: boundedUtf8(source.question, 4 * 1024),
+			...typeof source.header === "string" ? { header: boundedUtf8(source.header, 512) } : {},
+			...typeof source.detail === "string" ? { detail: boundedUtf8(source.detail, 8 * 1024) } : {},
+			...options === void 0 ? {} : { options },
+			...typeof source.multiSelect === "boolean" ? { multiSelect: source.multiSelect } : {},
+			...source.intent !== null && typeof source.intent === "object" && !Array.isArray(source.intent) && source.intent.kind === "plan-review" && typeof source.intent.approve === "string" ? { intent: {
+				kind: "plan-review",
+				approve: boundedUtf8(source.intent.approve, 512)
+			} } : {}
+		};
+		if (jsonBytes([...result, projected]) > MAX_ATOMIC_PROJECTION_BYTES) return void 0;
+		result.push(projected);
+	}
+	return result;
+}
+var DshApiProxyAdapter = class {
+	api;
+	options;
+	pendingInteractions = /* @__PURE__ */ new Map();
+	interactionListeners = /* @__PURE__ */ new Set();
+	projectionListeners = /* @__PURE__ */ new Set();
+	eventController;
+	eventLoop;
+	constructor(api, options = {}) {
+		this.api = api;
+		this.options = options;
+	}
+	capabilities() {
+		const result = [];
+		if (typeof this.api.workspace?.list === "function") result.push("workspace.list");
+		if (typeof this.api.sessions?.list === "function") result.push("session.list");
+		if (typeof this.api.sessions?.create === "function") result.push("session.create");
+		if (typeof this.api.sessions?.history === "function") result.push("session.history");
+		if (typeof this.api.sessions?.prompt === "function") result.push("session.prompt", "session.prompt.queue", "session.prompt.steer");
+		if (typeof this.api.sessions?.cancel === "function") result.push("session.cancel");
+		if (typeof this.api.events?.mux === "function") result.push("session.events");
+		if (typeof this.api.events?.mux === "function" && typeof this.api.respond === "function") result.push("interaction.question.respond", "interaction.approval.respond");
+		return result;
+	}
+	async workspaces() {
+		const list = this.api.workspace?.list;
+		if (typeof list !== "function") this.unsupported("workspace.list");
+		const value = unwrap(await list.call(this.api.workspace, {
+			rpcId: rpcId("remote-workspaces"),
+			payload: {}
+		}));
+		return await Promise.all(value.items.map(async (item) => {
+			let available = false;
+			let path = item.path;
+			try {
+				path = await realpath(item.path);
+				available = (await stat(path)).isDirectory();
+			} catch {
+				available = false;
+			}
+			return {
+				workspaceId: item.workspaceId,
+				title: boundedUtf8(item.title, 512),
+				path,
+				available,
+				sessionIds: [...item.sessionIds]
+			};
+		}));
+	}
+	async workspacePage(input = {}) {
+		const all = (await this.workspaces()).map((item) => ({
+			...item,
+			sessionIds: []
+		}));
+		const offset = readOffset(input.cursor);
+		if (offset > all.length) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "分页游标超出工作目录投影");
+		return pageByBytes({
+			all,
+			offset,
+			limit: pageLimit(input.limit),
+			build: (items, nextCursor) => ({
+				items,
+				...nextCursor === void 0 ? {} : { nextCursor }
+			})
+		});
+	}
+	async sessions(input = {}) {
+		const list = this.api.sessions?.list;
+		if (typeof list !== "function") this.unsupported("session.list");
+		const workspaces = await this.workspaces();
+		const workspaceBySession = /* @__PURE__ */ new Map();
+		for (const workspace of workspaces) for (const sessionId of workspace.sessionIds) workspaceBySession.set(sessionId, workspace.workspaceId);
+		const all = unwrap(await list.call(this.api.sessions, {
+			rpcId: rpcId("remote-sessions"),
+			payload: {}
+		})).items.flatMap((item) => {
+			const workspaceId = workspaceBySession.get(item.sessionId);
+			if (workspaceId === void 0 || input.workspaceId !== void 0 && workspaceId !== input.workspaceId) return [];
+			const titleValue = item.projections?.values.title;
+			return [{
+				sessionId: item.sessionId,
+				workspaceId,
+				...typeof titleValue === "string" && titleValue.trim() !== "" ? { title: titleValue.trim().slice(0, 200) } : {},
+				updatedAt: item.updatedAt,
+				running: item.running,
+				blank: item.blank,
+				...item.projections === void 0 ? {} : { projectionAsOfSeq: item.projections.asOfSeq }
+			}];
+		}).sort((left, right) => right.updatedAt - left.updatedAt);
+		const offset = readOffset(input.cursor);
+		if (offset > all.length) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "分页游标超出会话投影");
+		return pageByBytes({
+			all,
+			offset,
+			limit: pageLimit(input.limit),
+			build: (items, nextCursor) => ({
+				items,
+				...nextCursor === void 0 ? {} : { nextCursor }
+			})
+		});
+	}
+	async history(input) {
+		await this.requireSession(input.sessionId, false);
+		const history = this.api.sessions?.history;
+		if (typeof history !== "function") this.unsupported("session.history");
+		const limit = pageLimit(input.limit);
+		const value = unwrap(await history.call(this.api.sessions, {
+			rpcId: rpcId("remote-history"),
+			payload: {
+				sessionId: input.sessionId,
+				maxMessages: limit,
+				...input.beforeSeq === void 0 ? {} : { beforeSeq: input.beforeSeq }
+			}
+		}));
+		const entries = value.events.map(snapshotDshHistoryEntry);
+		let truncatedByBudget = false;
+		while (entries.length > 0) {
+			const firstSeq = value.events[0]?.event.seq;
+			if (jsonBytes({
+				entries,
+				hasMore: value.hasMore || truncatedByBudget,
+				...firstSeq === void 0 || !value.hasMore && !truncatedByBudget ? {} : { nextCursor: firstSeq },
+				...value.projections === void 0 ? {} : { projectionAsOfSeq: value.projections.asOfSeq }
+			}) <= 524288) break;
+			entries.shift();
+			truncatedByBudget = true;
+		}
+		if (entries.length === 0 && truncatedByBudget) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "单条 DSH 历史投影超过远控帧容量");
+		const firstSeq = truncatedByBudget ? entries[0]?.event.seq : value.events[0]?.event.seq;
+		return {
+			entries,
+			hasMore: value.hasMore || truncatedByBudget,
+			...firstSeq === void 0 || !value.hasMore && !truncatedByBudget ? {} : { nextCursor: firstSeq },
+			...value.projections === void 0 ? {} : { projectionAsOfSeq: value.projections.asOfSeq }
+		};
+	}
+	historyContainsRpcId(entries, rpcIdValue) {
+		return entries.some((entry) => dshHistoryEntryUserRpcId(entry) === rpcIdValue);
+	}
+	async createSession(input) {
+		const workspace = (await this.workspaces()).find((item) => item.workspaceId === input.workspaceId);
+		if (workspace === void 0 || !workspace.available) throw new DshRemoteError("WORKSPACE_UNAVAILABLE", "工作目录已经删除或不可访问");
+		const create = this.api.sessions?.create;
+		if (typeof create !== "function") this.unsupported("session.create");
+		const sessionId = stableSessionId(input.dshRpcId);
+		const created = unwrap(await create.call(this.api.sessions, {
+			rpcId: input.dshRpcId,
+			payload: {
+				workspaceId: input.workspaceId,
+				sessionId
+			}
+		}));
+		if (created.sessionId !== sessionId) throw new DshRemoteError("REMOTE_INVALID_RESPONSE", "DSH 返回了与预分配值不一致的 SessionId");
+		return created;
+	}
+	async reconcileCreatedSession(input) {
+		const expected = stableSessionId(input.dshRpcId);
+		let cursor;
+		do {
+			const page = await this.sessions({
+				workspaceId: input.workspaceId,
+				limit: 50,
+				...cursor === void 0 ? {} : { cursor }
+			});
+			if (page.items.some((item) => item.sessionId === expected)) return { sessionId: expected };
+			cursor = page.nextCursor;
+		} while (cursor !== void 0);
+	}
+	async prompt(input) {
+		const text = this.textContent(input.content);
+		const session = await this.requireSession(input.sessionId, true);
+		if (input.mode === "steer" && !session.running) throw new DshRemoteError("SESSION_STATE_CHANGED", "会话当前未运行，不能立即引导");
+		const prompt = this.api.sessions?.prompt;
+		if (typeof prompt !== "function") this.unsupported("session.prompt");
+		return unwrap(await prompt.call(this.api.sessions, {
+			rpcId: input.dshRpcId,
+			payload: {
+				sessionId: input.sessionId,
+				mode: input.mode,
+				content: [{
+					type: "text",
+					text
+				}]
+			}
+		}));
+	}
+	async cancel(input) {
+		if (!(await this.requireSession(input.sessionId, false)).running) return { accepted: true };
+		const cancel = this.api.sessions?.cancel;
+		if (typeof cancel !== "function") this.unsupported("session.cancel");
+		return unwrap(await cancel.call(this.api.sessions, {
+			rpcId: input.dshRpcId,
+			payload: { sessionId: input.sessionId }
+		}));
+	}
+	async answerQuestion(input) {
+		const pending = this.pendingInteractions.get(input.interactionRpcRef);
+		if (pending?.kind !== "question" || pending.sessionId !== input.sessionId) this.resolved();
+		await this.respond(input.interactionRpcRef, {
+			sessionId: input.sessionId,
+			answer: input.answer
+		});
+	}
+	async answerApproval(input) {
+		const pending = this.pendingInteractions.get(input.interactionRpcRef);
+		if (pending?.kind !== "approval" || pending.sessionId !== input.sessionId || pending.approvalId !== input.approvalId) this.resolved();
+		if (input.outcome === "allowed-once" && !pending.canAllowOnce) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "审批上下文不完整，只能在桌面端处理或拒绝");
+		await this.respond(input.interactionRpcRef, {
+			sessionId: input.sessionId,
+			approvalId: input.approvalId,
+			outcome: input.outcome
+		});
+	}
+	pending() {
+		return [...this.pendingInteractions.values()];
+	}
+	subscribeInteractions(listener) {
+		this.interactionListeners.add(listener);
+		return () => {
+			this.interactionListeners.delete(listener);
+		};
+	}
+	subscribeProjectionEvents(listener) {
+		this.projectionListeners.add(listener);
+		return () => {
+			this.projectionListeners.delete(listener);
+		};
+	}
+	startEvents() {
+		if (this.eventLoop !== void 0) return () => {
+			this.stopEvents();
+		};
+		const mux = this.api.events?.mux;
+		if (typeof mux !== "function") return () => void 0;
+		const controller = new AbortController();
+		this.eventController = controller;
+		const loop = this.maintainEvents(mux.bind(this.api.events), controller.signal);
+		this.eventLoop = loop;
+		loop.finally(() => {
+			if (this.eventLoop === loop) this.eventLoop = void 0;
+			if (this.eventController === controller) this.eventController = void 0;
+		});
+		return () => {
+			this.stopEvents();
+		};
+	}
+	stopEvents() {
+		this.eventController?.abort();
+	}
+	async maintainEvents(mux, signal) {
+		let delay = Math.min(5e3, Math.max(10, this.options.eventRetryBaseMillis ?? 250));
+		while (!signal.aborted) {
+			try {
+				await this.consumeEvents(mux, signal);
+				if (signal.aborted) return;
+			} catch (error) {
+				if (signal.aborted) return;
+				console.warn("dsh-arkme: DSH remote mux disconnected:", error instanceof Error ? error.message : String(error));
+			}
+			this.pendingInteractions.clear();
+			this.emitInteractions();
+			await new Promise((resolve) => {
+				const done = () => {
+					signal.removeEventListener("abort", onAbort);
+					resolve();
+				};
+				const timer = setTimeout(done, delay);
+				timer.unref();
+				const onAbort = () => {
+					clearTimeout(timer);
+					done();
+				};
+				signal.addEventListener("abort", onAbort, { once: true });
+			});
+			delay = Math.min(5e3, delay * 2);
+		}
+	}
+	async snapshot(input = {}) {
+		const workspaces = await this.workspaces();
+		const sessions = [];
+		let cursor;
+		do {
+			const page = await this.sessions({
+				limit: 50,
+				...cursor === void 0 ? {} : { cursor }
+			});
+			sessions.push(...page.items);
+			cursor = page.nextCursor;
+		} while (cursor !== void 0);
+		const flattened = [
+			...workspaces.map((value) => ({
+				kind: "workspace",
+				value: {
+					...value,
+					sessionIds: []
+				}
+			})),
+			...sessions.map((value) => ({
+				kind: "session",
+				value
+			})),
+			...this.pending().map((value) => ({
+				kind: "interaction",
+				value
+			}))
+		];
+		const offset = readOffset(input.cursor);
+		if (offset > flattened.length) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "分页游标超出快照投影");
+		const projectionAsOfMillis = Date.now();
+		return pageByBytes({
+			all: flattened,
+			offset,
+			limit: pageLimit(input.limit),
+			build: (items, nextCursor) => ({
+				projectionAsOfMillis,
+				workspaces: items.flatMap((item) => item.kind === "workspace" ? [item.value] : []),
+				sessions: items.flatMap((item) => item.kind === "session" ? [item.value] : []),
+				pendingInteractions: items.flatMap((item) => item.kind === "interaction" ? [item.value] : []),
+				...nextCursor === void 0 ? {} : { nextCursor }
+			})
+		});
+	}
+	async consumeEvents(mux, signal) {
+		for await (const frame of mux({
+			rpcId: rpcId("remote-mux"),
+			payload: {}
+		}, signal)) {
+			if (signal.aborted) return;
+			const payload = frame.payload;
+			const type = payload.type;
+			let interactionsChanged = false;
+			if (type === "session/event" && typeof payload.sessionId === "string" && payload.event !== null && typeof payload.event === "object" && !Array.isArray(payload.event)) {
+				const event = payload.event;
+				if (typeof event.type === "string" && typeof event.seq === "number" && Number.isSafeInteger(event.seq) && event.seq >= 0 && typeof event.time === "number" && Number.isSafeInteger(event.time) && event.time >= 0) {
+					const entry = snapshotDshHistoryEntry({
+						event,
+						view: payload.view
+					});
+					this.emitProjection({
+						kind: "session-event",
+						sessionId: payload.sessionId,
+						entry
+					});
+				}
+			} else if (type === "session/subscribed" && typeof payload.sessionId === "string" && typeof payload.lastSeq === "number" && Number.isSafeInteger(payload.lastSeq) && payload.lastSeq >= -1) this.emitProjection({
+				kind: "mux-baseline",
+				sessionId: payload.sessionId,
+				lastSeq: payload.lastSeq,
+				pendingInteractions: this.pending()
+			});
+			else if (type === "question/requested" && typeof payload.sessionId === "string" && Array.isArray(payload.questions)) {
+				const questions = projectQuestions(payload.questions);
+				if (questions !== void 0 && questions.length > 0) {
+					this.pendingInteractions.set(frame.rpcId, {
+						kind: "question",
+						interactionRpcRef: frame.rpcId,
+						sessionId: payload.sessionId,
+						questions
+					});
+					interactionsChanged = true;
+				}
+			} else if (type === "approval/requested" && typeof payload.sessionId === "string" && typeof payload.approvalId === "string" && typeof payload.toolName === "string") {
+				const reason = typeof payload.reason === "string" && payload.reason.trim() !== "" ? payload.reason.trim().slice(0, 500) : void 0;
+				this.pendingInteractions.set(frame.rpcId, {
+					kind: "approval",
+					interactionRpcRef: frame.rpcId,
+					sessionId: payload.sessionId,
+					approvalId: payload.approvalId,
+					toolName: payload.toolName,
+					...reason === void 0 ? {} : { reason },
+					canAllowOnce: false
+				});
+				interactionsChanged = true;
+			} else if (type === "question/resolved" && typeof payload.questionRpcId === "string") interactionsChanged = this.pendingInteractions.delete(payload.questionRpcId);
+			else if (type === "approval/resolved") {
+				for (const [key, pending] of this.pendingInteractions) if (pending.kind === "approval" && pending.sessionId === payload.sessionId && pending.approvalId === payload.approvalId) {
+					this.pendingInteractions.delete(key);
+					interactionsChanged = true;
+				}
+			}
+			if (interactionsChanged) this.emitInteractions();
+		}
+	}
+	async requireSession(sessionId, requireWorkspaceAvailable) {
+		const workspace = (await this.workspaces()).find((item) => item.sessionIds.includes(sessionId));
+		if (workspace === void 0) throw new DshRemoteError("SESSION_NOT_FOUND", "会话不属于当前 Runtime 的已登记工作目录");
+		if (requireWorkspaceAvailable && !workspace.available) throw new DshRemoteError("WORKSPACE_UNAVAILABLE", "工作目录已经删除或不可访问");
+		let cursor;
+		do {
+			const page = await this.sessions({
+				workspaceId: workspace.workspaceId,
+				limit: 50,
+				...cursor === void 0 ? {} : { cursor }
+			});
+			const session = page.items.find((item) => item.sessionId === sessionId);
+			if (session !== void 0) return session;
+			cursor = page.nextCursor;
+		} while (cursor !== void 0);
+		throw new DshRemoteError("SESSION_NOT_FOUND", "DSH 会话不存在");
+	}
+	textContent(content) {
+		if (!Array.isArray(content) || content.length !== 1) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "首版远控只支持单个文本消息");
+		const block = content[0];
+		if (block === null || typeof block !== "object" || Array.isArray(block) || block.type !== "text" || typeof block.text !== "string") throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "首版远控不支持图片、文件或附件");
+		const text = block.text;
+		if (text.trim() === "" || codePointLength(text) > 2e4) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控文本必须为 1 至 20000 个字符");
+		if (text.trimStart().startsWith("/")) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "首版远控不执行 DSH slash command");
+		return text;
+	}
+	async respond(rpcIdValue, value) {
+		if (typeof this.api.respond !== "function") this.unsupported("interaction response");
+		if (!(await this.api.respond({
+			type: "client-response",
+			rpcId: rpcIdValue,
+			result: {
+				ok: true,
+				value
+			}
+		})).accepted) this.resolved();
+		this.pendingInteractions.delete(rpcIdValue);
+		this.emitInteractions();
+	}
+	emitInteractions() {
+		const snapshot = this.pending();
+		for (const listener of this.interactionListeners) listener(snapshot);
+		this.emitProjection({
+			kind: "interactions",
+			pendingInteractions: snapshot
+		});
+	}
+	emitProjection(event) {
+		for (const listener of this.projectionListeners) listener(event);
+	}
+	unsupported(capability) {
+		throw new DshRemoteError("CAPABILITY_UNSUPPORTED", `当前 DSH 版本不支持 ${capability}`);
+	}
+	resolved() {
+		throw new DshRemoteError("INTERACTION_RESOLVED", "问题或审批已在其他端处理");
+	}
+};
+//#endregion
+//#region src/dsh-remote/crypto.ts
+function encodeBase64Url(value) {
+	return Buffer.from(value).toString("base64url");
+}
+function decodeBase64Url(value) {
+	if (!/^[A-Za-z0-9_-]*$/.test(value)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "无效的 base64url 数据");
+	return Buffer.from(value, "base64url");
+}
+function normalizedCanonical(value) {
+	if (Array.isArray(value)) return value.map(normalizedCanonical);
+	if (value !== null && typeof value === "object") {
+		const sorted = {};
+		for (const key of Object.keys(value).sort()) {
+			const child = value[key];
+			if (child !== void 0) sorted[key] = normalizedCanonical(child);
+		}
+		return sorted;
+	}
+	if (typeof value === "number" && !Number.isFinite(value)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "协议数据不能包含非有限数字");
+	return value;
+}
+function canonicalJson(value) {
+	return JSON.stringify(normalizedCanonical(value));
+}
+function rotateLeft(value, count) {
+	return (value << count | value >>> 32 - count) >>> 0;
+}
+function quarterRound(state, a, b, c, d) {
+	state[a] = state[a] + state[b] >>> 0;
+	state[d] = rotateLeft(state[d] ^ state[a], 16);
+	state[c] = state[c] + state[d] >>> 0;
+	state[b] = rotateLeft(state[b] ^ state[c], 12);
+	state[a] = state[a] + state[b] >>> 0;
+	state[d] = rotateLeft(state[d] ^ state[a], 8);
+	state[c] = state[c] + state[d] >>> 0;
+	state[b] = rotateLeft(state[b] ^ state[c], 7);
+}
+function hChaCha20(key, nonce) {
+	if (key.length !== 32 || nonce.length !== 16) throw new TypeError("HChaCha20 requires a 32-byte key and 16-byte nonce");
+	const state = /* @__PURE__ */ new Uint32Array(16);
+	const constants = Buffer.from("expand 32-byte k", "ascii");
+	for (let index = 0; index < 4; index += 1) state[index] = constants.readUInt32LE(index * 4);
+	const keyBuffer = Buffer.from(key);
+	const nonceBuffer = Buffer.from(nonce);
+	for (let index = 0; index < 8; index += 1) state[index + 4] = keyBuffer.readUInt32LE(index * 4);
+	for (let index = 0; index < 4; index += 1) state[index + 12] = nonceBuffer.readUInt32LE(index * 4);
+	for (let round = 0; round < 10; round += 1) {
+		quarterRound(state, 0, 4, 8, 12);
+		quarterRound(state, 1, 5, 9, 13);
+		quarterRound(state, 2, 6, 10, 14);
+		quarterRound(state, 3, 7, 11, 15);
+		quarterRound(state, 0, 5, 10, 15);
+		quarterRound(state, 1, 6, 11, 12);
+		quarterRound(state, 2, 7, 8, 13);
+		quarterRound(state, 3, 4, 9, 14);
+	}
+	const result = Buffer.allocUnsafe(32);
+	for (const [outputIndex, stateIndex] of [
+		0,
+		1,
+		2,
+		3,
+		12,
+		13,
+		14,
+		15
+	].entries()) result.writeUInt32LE(state[stateIndex], outputIndex * 4);
+	return result;
+}
+function encryptXChaCha20Poly1305(key, plaintext, aad, nonce = randomBytes(24)) {
+	if (key.length !== 32 || nonce.length !== 24) throw new TypeError("XChaCha20-Poly1305 requires a 32-byte key and 24-byte nonce");
+	const cipher = createCipheriv("chacha20-poly1305", hChaCha20(key, nonce.subarray(0, 16)), Buffer.concat([Buffer.alloc(4), Buffer.from(nonce.subarray(16))]), { authTagLength: 16 });
+	const encodedPlaintext = Buffer.from(plaintext);
+	cipher.setAAD(Buffer.from(aad), { plaintextLength: encodedPlaintext.length });
+	const encrypted = Buffer.concat([
+		cipher.update(encodedPlaintext),
+		cipher.final(),
+		cipher.getAuthTag()
+	]);
+	return {
+		nonce: encodeBase64Url(nonce),
+		ciphertext: encodeBase64Url(encrypted)
+	};
+}
+function decryptXChaCha20Poly1305(key, input, aad) {
+	const nonce = decodeBase64Url(input.nonce);
+	const encoded = decodeBase64Url(input.ciphertext);
+	if (key.length !== 32 || nonce.length !== 24 || encoded.length < 16) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控密文格式无效");
+	try {
+		const decipher = createDecipheriv("chacha20-poly1305", hChaCha20(key, nonce.subarray(0, 16)), Buffer.concat([Buffer.alloc(4), nonce.subarray(16)]), { authTagLength: 16 });
+		decipher.setAAD(Buffer.from(aad), { plaintextLength: encoded.length - 16 });
+		decipher.setAuthTag(encoded.subarray(encoded.length - 16));
+		return Buffer.concat([decipher.update(encoded.subarray(0, encoded.length - 16)), decipher.final()]);
+	} catch (error) {
+		throw new DshRemoteError("REMOTE_STORAGE_FAILED", "命令账本密文认证失败", false, {}, { cause: error });
+	}
+}
+//#endregion
+//#region src/dsh-remote/command-ledger.ts
+function argumentsHash(operation, argumentsValue) {
+	return createHash("sha256").update(canonicalJson({
+		operation,
+		arguments: argumentsValue
+	})).digest("base64url");
+}
+function stableDshRpcId(input) {
+	return `remote_${createHash("sha256").update(`dsh-remote-rpc-v2\n${input.accountId}\n${input.runtimeRef}\n${input.requestRef}`).digest("base64url").slice(0, 32)}`;
+}
+var DshRemoteCommandLedger = class {
+	path;
+	database;
+	key;
+	now;
+	constructor(directory, key, options = {}) {
+		if (key.length !== 32) throw new TypeError("DshRemoteCommandLedger key must be 32 bytes");
+		this.key = Buffer.from(key);
+		this.now = options.now ?? Date.now;
+		mkdirSync(directory, {
+			recursive: true,
+			mode: 448
+		});
+		securePrivateDirectorySync(directory);
+		this.path = join(directory, "remote-command-ledger.sqlite3");
+		this.database = new DatabaseSync(this.path);
+		this.database.exec(`
+      PRAGMA journal_mode = WAL;
+      PRAGMA synchronous = FULL;
+      PRAGMA foreign_keys = ON;
+      CREATE TABLE IF NOT EXISTS remote_command_identity_v2 (
+        identity_id INTEGER PRIMARY KEY AUTOINCREMENT,
+        account_id TEXT NOT NULL,
+        runtime_ref TEXT NOT NULL,
+        request_ref TEXT NOT NULL,
+        operation TEXT NOT NULL,
+        arguments_hash TEXT NOT NULL,
+        dsh_rpc_id TEXT NOT NULL,
+        execute_before_millis INTEGER NOT NULL,
+        created_at_millis INTEGER NOT NULL,
+        UNIQUE (account_id, runtime_ref, request_ref)
+      );
+      CREATE TABLE IF NOT EXISTS remote_command_event_v2 (
+        event_id INTEGER PRIMARY KEY AUTOINCREMENT,
+        identity_id INTEGER NOT NULL REFERENCES remote_command_identity_v2(identity_id) ON DELETE CASCADE,
+        state TEXT NOT NULL CHECK (state IN ('pending', 'completed', 'outcome_unknown')),
+        nonce TEXT NOT NULL,
+        ciphertext TEXT NOT NULL,
+        created_at_millis INTEGER NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS remote_command_event_v2_identity
+        ON remote_command_event_v2 (identity_id, event_id DESC);
+      CREATE INDEX IF NOT EXISTS remote_command_identity_v2_created
+        ON remote_command_identity_v2 (created_at_millis DESC);
+    `);
+		this.secureFiles();
+	}
+	begin(input) {
+		this.validateIdentity(input);
+		const hash = argumentsHash(input.operation, input.arguments);
+		const existing = this.identity(input);
+		if (existing !== void 0) {
+			if (existing.operation !== input.operation || existing.arguments_hash !== hash || existing.account_id !== input.accountId) throw new DshRemoteError("SESSION_STATE_CHANGED", "相同 request_ref 携带了不同操作或参数");
+			return {
+				duplicate: true,
+				entry: this.entry(existing)
+			};
+		}
+		const now = this.now();
+		this.transaction(() => {
+			const result = this.database.prepare(`
+        INSERT INTO remote_command_identity_v2 (
+          account_id, runtime_ref, request_ref, operation, arguments_hash,
+          dsh_rpc_id, execute_before_millis, created_at_millis
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(input.accountId, input.runtimeRef, input.requestRef, input.operation, hash, stableDshRpcId(input), input.executeBeforeMillis, now);
+			this.appendEvent(Number(result.lastInsertRowid), "pending", { arguments: input.arguments }, now);
+		});
+		this.secureFiles();
+		const row = this.identity(input);
+		if (row === void 0) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "命令账本写入失败");
+		return {
+			duplicate: false,
+			entry: this.entry(row)
+		};
+	}
+	complete(identity, result) {
+		const row = this.requireIdentity(identity);
+		const current = this.entry(row);
+		if (current.state === "completed") return current;
+		if (current.state === "outcome_unknown") throw new DshRemoteError("COMMAND_OUTCOME_UNKNOWN", "命令结果尚未完成对账，禁止覆盖");
+		this.appendEvent(row.identity_id, "completed", { result }, this.now());
+		this.secureFiles();
+		return this.entry(row);
+	}
+	completeRejected(identity, error) {
+		return this.complete(identity, { rejected: {
+			code: error.code,
+			message: error.message.slice(0, 500),
+			retryable: error.retryable
+		} });
+	}
+	markOutcomeUnknown(identity, reason) {
+		const row = this.requireIdentity(identity);
+		const current = this.entry(row);
+		if (current.state === "completed" || current.state === "outcome_unknown") return current;
+		this.appendEvent(row.identity_id, "outcome_unknown", { reason: reason.slice(0, 500) }, this.now());
+		this.secureFiles();
+		return this.entry(row);
+	}
+	get(identity) {
+		const row = this.identity(identity);
+		if (row === void 0 || row.account_id !== identity.accountId) return void 0;
+		return this.entry(row);
+	}
+	pending(accountId, nowMillis = this.now()) {
+		return this.database.prepare(`
+      SELECT identity_id, account_id, runtime_ref, request_ref, operation,
+             arguments_hash, dsh_rpc_id, execute_before_millis, created_at_millis
+      FROM remote_command_identity_v2
+      WHERE account_id = ?
+      ORDER BY created_at_millis ASC
+    `).all(accountId).map((row) => this.entry(row)).filter((entry) => entry.state === "pending" && entry.executeBeforeMillis >= nowMillis);
+	}
+	/**
+	* Returns every unsettled command still inside the v4 reconciliation window.
+	*
+	* An expired execute_before only prevents executing the command again. It must
+	* not hide the crash window where DSH accepted the stable rpcId before the Host
+	* persisted the result. Callers must inspect DSH history and either complete
+	* the entry or mark outcome_unknown; they must never re-dispatch these rows.
+	*/
+	unsettledForReconciliation(accountId, nowMillis = this.now(), reconciliationWindowMillis = 1440 * 6e4) {
+		if (!Number.isSafeInteger(reconciliationWindowMillis) || reconciliationWindowMillis <= 0) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "命令对账窗口无效");
+		return this.database.prepare(`
+      SELECT identity_id, account_id, runtime_ref, request_ref, operation,
+             arguments_hash, dsh_rpc_id, execute_before_millis, created_at_millis
+      FROM remote_command_identity_v2
+      WHERE account_id = ? AND created_at_millis >= ?
+      ORDER BY created_at_millis ASC
+    `).all(accountId, nowMillis - reconciliationWindowMillis).map((row) => this.entry(row)).filter((entry) => entry.state === "pending");
+	}
+	cleanup(options = {}) {
+		const cutoff = this.now() - (options.retentionMillis ?? 10080 * 6e4);
+		const maxCommands = Math.min(1e5, Math.max(100, options.maxCommands ?? 1e4));
+		const before = Number(this.database.prepare("SELECT COUNT(*) AS count FROM remote_command_identity_v2").get().count);
+		this.transaction(() => {
+			this.database.prepare("DELETE FROM remote_command_identity_v2 WHERE created_at_millis < ?").run(cutoff);
+			this.database.prepare(`
+        DELETE FROM remote_command_identity_v2
+        WHERE identity_id NOT IN (
+          SELECT identity_id FROM remote_command_identity_v2 ORDER BY created_at_millis DESC LIMIT ?
+        )
+      `).run(maxCommands);
+		});
+		const after = Number(this.database.prepare("SELECT COUNT(*) AS count FROM remote_command_identity_v2").get().count);
+		this.secureFiles();
+		return before - after;
+	}
+	close() {
+		this.database.close();
+		this.secureFiles();
+		this.key.fill(0);
+	}
+	validateIdentity(input) {
+		for (const [name, value] of Object.entries({
+			accountId: input.accountId,
+			runtimeRef: input.runtimeRef,
+			requestRef: input.requestRef
+		})) if (value.trim() === "" || value.length > 256) throw new DshRemoteError("REMOTE_REQUEST_INVALID", `${name} 无效`);
+		if (!Number.isSafeInteger(input.executeBeforeMillis) || input.executeBeforeMillis <= 0) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "命令 deadline 无效");
+	}
+	identity(input) {
+		return this.database.prepare(`
+      SELECT identity_id, account_id, runtime_ref, request_ref, operation,
+             arguments_hash, dsh_rpc_id, execute_before_millis, created_at_millis
+      FROM remote_command_identity_v2
+      WHERE account_id = ? AND runtime_ref = ? AND request_ref = ?
+    `).get(input.accountId, input.runtimeRef, input.requestRef);
+	}
+	requireIdentity(input) {
+		const row = this.identity(input);
+		if (row === void 0 || row.account_id !== input.accountId) throw new DshRemoteError("SESSION_STATE_CHANGED", "命令账本记录不存在");
+		return row;
+	}
+	entry(row) {
+		const event = this.database.prepare(`
+      SELECT state, nonce, ciphertext, created_at_millis
+      FROM remote_command_event_v2 WHERE identity_id = ? ORDER BY event_id DESC LIMIT 1
+    `).get(row.identity_id);
+		if (event === void 0) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "命令账本状态缺失");
+		const aad = this.eventAad(row, event.state, event.created_at_millis);
+		let payload;
+		try {
+			payload = JSON.parse(decryptXChaCha20Poly1305(this.key, event, aad).toString("utf8"));
+		} catch (error) {
+			if (error instanceof DshRemoteError) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "命令账本认证失败", false, {}, { cause: error });
+			throw error;
+		}
+		return {
+			accountId: row.account_id,
+			runtimeRef: row.runtime_ref,
+			requestRef: row.request_ref,
+			operation: row.operation,
+			executeBeforeMillis: row.execute_before_millis,
+			argumentsHash: row.arguments_hash,
+			state: event.state,
+			dshRpcId: row.dsh_rpc_id,
+			payload,
+			createdAtMillis: row.created_at_millis,
+			updatedAtMillis: event.created_at_millis
+		};
+	}
+	appendEvent(identityId, state, payload, now) {
+		const row = this.database.prepare(`
+      SELECT identity_id, account_id, runtime_ref, request_ref, operation,
+             arguments_hash, dsh_rpc_id, execute_before_millis, created_at_millis
+      FROM remote_command_identity_v2 WHERE identity_id = ?
+    `).get(identityId);
+		if (row === void 0) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "命令账本 identity 缺失");
+		const encrypted = encryptXChaCha20Poly1305(this.key, canonicalJson(payload), this.eventAad(row, state, now), randomBytes(24));
+		this.database.prepare(`
+      INSERT INTO remote_command_event_v2 (identity_id, state, nonce, ciphertext, created_at_millis)
+      VALUES (?, ?, ?, ?, ?)
+    `).run(identityId, state, encrypted.nonce, encrypted.ciphertext, now);
+	}
+	eventAad(row, state, now) {
+		return canonicalJson({
+			schemaVersion: 2,
+			identityId: row.identity_id,
+			accountId: row.account_id,
+			runtimeRef: row.runtime_ref,
+			requestRef: row.request_ref,
+			operation: row.operation,
+			argumentsHash: row.arguments_hash,
+			state,
+			createdAtMillis: now
+		});
+	}
+	transaction(work) {
+		this.database.exec("BEGIN IMMEDIATE");
+		try {
+			work();
+			this.database.exec("COMMIT");
+		} catch (error) {
+			this.database.exec("ROLLBACK");
+			throw error;
+		}
+	}
+	secureFiles() {
+		for (const suffix of [
+			"",
+			"-wal",
+			"-shm"
+		]) try {
+			securePrivateFileSync(`${this.path}${suffix}`);
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+		}
+	}
+};
+//#endregion
+//#region src/dsh-remote/control-plane.ts
+const BASE = "/api/v1/dsh-remote";
+function pathRef(value) {
+	const normalized = value.trim();
+	if (!/^[A-Za-z0-9._:-]{1,256}$/.test(normalized)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控资源引用无效");
+	return encodeURIComponent(normalized);
+}
+var DshRemoteHttpControlPlane = class {
+	request;
+	constructor(request) {
+		this.request = request;
+	}
+	async post(path, body, signal) {
+		try {
+			return await this.request.post(path, body, signal);
+		} catch (error) {
+			throw mapDshRemoteControlPlaneError(error);
+		}
+	}
+	async registerDesktop(input, signal) {
+		return await this.post(`${BASE}/desktops/register`, input, signal);
+	}
+	async registerRuntime(desktopRef, input, signal) {
+		return await this.post(`${BASE}/desktops/${pathRef(desktopRef)}/runtimes/register`, input, signal);
+	}
+	async syncWorkspaces(input, signal) {
+		return await this.post(`${BASE}/workspaces/sync`, input, signal);
+	}
+	async syncSessions(input, signal) {
+		return await this.post(`${BASE}/sessions/sync`, input, signal);
+	}
+	async appendSessionEvents(input, signal) {
+		return await this.post(`${BASE}/session-events/append`, input, signal);
+	}
+};
+function mapDshRemoteControlPlaneError(error) {
+	if (error instanceof DshRemoteError) return error;
+	const code = error !== null && typeof error === "object" && typeof error.code === "string" ? error.code : "";
+	const mappedCode = (/* @__PURE__ */ new Set([
+		"REMOTE_PROTOCOL_UNSUPPORTED",
+		"REMOTE_REQUEST_INVALID",
+		"REMOTE_INVALID_RESPONSE",
+		"REMOTE_NETWORK_UNAVAILABLE",
+		"REMOTE_STORAGE_FAILED",
+		"REMOTE_TRANSPORT_FAILED",
+		"REMOTE_LOGIN_REQUIRED",
+		"RUNTIME_OFFLINE",
+		"RUNTIME_LIMIT_REACHED",
+		"HOST_CHANNEL_NOT_READY",
+		"HOST_GENERATION_STALE",
+		"REPLAY_GAP",
+		"CAPABILITY_UNSUPPORTED",
+		"REMOTE_NOT_FOUND",
+		"REMOTE_PROJECTION_CONFLICT",
+		"REMOTE_REALTIME_UNAVAILABLE"
+	])).has(code) ? code : "REMOTE_TRANSPORT_FAILED";
+	return new DshRemoteError(mappedCode, error instanceof Error ? error.message : "远控控制面请求失败", [
+		"REMOTE_NETWORK_UNAVAILABLE",
+		"REMOTE_TRANSPORT_FAILED",
+		"RUNTIME_OFFLINE",
+		"HOST_CHANNEL_NOT_READY",
+		"HOST_GENERATION_STALE",
+		"REPLAY_GAP",
+		"REMOTE_REALTIME_UNAVAILABLE"
+	].includes(mappedCode), {}, { cause: error });
+}
+//#endregion
+//#region src/dsh-remote/default-socket-factory.ts
+function dshRemoteRealtimeEndpoint(realtimeBaseUrl) {
+	const endpoint = new URL(realtimeBaseUrl);
+	if (endpoint.protocol !== "https:" || endpoint.username !== "" || endpoint.password !== "" || endpoint.pathname !== "/" || endpoint.search !== "" || endpoint.hash !== "") throw new TypeError("DSH remote Realtime requires a credential-free HTTPS service origin");
+	endpoint.protocol = "wss:";
+	endpoint.pathname = "/api/v1/realtime/connect";
+	return endpoint.toString();
+}
+function createDefaultDshRemoteSocket(input) {
+	const accessToken = input.accessToken.trim();
+	if (accessToken === "") throw new TypeError("DSH remote Realtime access token is required");
+	if (input.signal.aborted) throw input.signal.reason;
+	const socket = new WebSocket(dshRemoteRealtimeEndpoint(input.realtimeBaseUrl), {
+		headers: { Authorization: `Bearer ${accessToken}` },
+		handshakeTimeout: 1e4,
+		maxPayload: DSH_REMOTE_MAX_FRAME_BYTES,
+		perMessageDeflate: false,
+		followRedirects: false
+	});
+	const closeOnAbort = () => {
+		socket.close(1e3, "aborted");
+	};
+	input.signal.addEventListener("abort", closeOnAbort, { once: true });
+	socket.addEventListener("close", () => {
+		input.signal.removeEventListener("abort", closeOnAbort);
+	}, { once: true });
+	return socket;
+}
+//#endregion
+//#region src/dsh-remote/transport-fragment.ts
+const DIRECT_PLAINTEXT_BYTES = 32 * 1024;
+const FRAGMENT_CHUNK_BYTES = 18 * 1024;
+const MAX_FRAGMENT_COUNT = 256;
+function sha256(value) {
+	return createHash("sha256").update(value).digest("base64url");
+}
+/**
+* Splits a large typed payload into independently bounded Realtime events.
+*/
+function dshRemoteOutboundPayloads(envelope, transferSeed) {
+	const encoded = Buffer.from(JSON.stringify(envelope));
+	if (encoded.length <= DIRECT_PLAINTEXT_BYTES) return [{ value: envelope }];
+	if (encoded.length > 524288) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "完整 DSH 事件超过 512KiB 远控对象上限", false, {
+		logicalTooLarge: true,
+		payloadBytes: encoded.length
+	});
+	const fragmentCount = Math.ceil(encoded.length / FRAGMENT_CHUNK_BYTES);
+	if (fragmentCount > MAX_FRAGMENT_COUNT) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "完整 DSH 事件需要过多远控分片", false, {
+		logicalTooLarge: true,
+		fragmentCount
+	});
+	const digest = sha256(encoded);
+	const transferRef = `fragment_${createHash("sha256").update(`${transferSeed}\n${digest}`).digest("base64url").slice(0, 40)}`;
+	return Array.from({ length: fragmentCount }, (_, fragmentIndex) => ({
+		fragmentIndex,
+		commandId: `fragment_${createHash("sha256").update(`${transferRef}\n${fragmentIndex}`).digest("base64url").slice(0, 40)}_${fragmentIndex}`,
+		value: {
+			protocol: "dsh.remote-fragment",
+			protocol_major: 1,
+			kind: "fragment",
+			transfer_ref: transferRef,
+			fragment_index: fragmentIndex,
+			fragment_count: fragmentCount,
+			payload_bytes: encoded.length,
+			payload_sha256: digest,
+			chunk: encoded.subarray(fragmentIndex * FRAGMENT_CHUNK_BYTES, Math.min(encoded.length, (fragmentIndex + 1) * FRAGMENT_CHUNK_BYTES)).toString("base64url")
+		}
+	}));
+}
+//#endregion
+//#region src/dsh-remote/channel-manager.ts
+/**
+* Owns the single account-scoped Runtime channel. The Host subscribes with
+* generation 0 before registration, then activates the exact positive lease
+* returned by Realtime. No controller identity or pairing state exists here.
+*/
+var DshRemoteHostChannelManager = class {
+	options;
+	controller = new AbortController();
+	unsubscribe;
+	target;
+	lastTransportSequence = 0;
+	persistedTransportSequence = 0;
+	outboundTail = Promise.resolve();
+	pendingEvents = [];
+	closed = false;
+	constructor(options) {
+		this.options = options;
+		this.target = {
+			runtimeRef: options.runtimeRef,
+			hostProfileRef: options.profileRef,
+			hostClientRef: options.hostClientRef,
+			hostLeaseGeneration: 0
+		};
+	}
+	async prepare() {
+		if (this.closed || this.unsubscribe !== void 0) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "Runtime channel 已准备");
+		this.lastTransportSequence = await this.options.secretBroker.runtimeCursor({
+			accountId: this.options.accountId,
+			runtimeRef: this.options.runtimeRef,
+			channelRef: this.options.runtimeRef
+		});
+		this.persistedTransportSequence = this.lastTransportSequence;
+		const subscribe = async (afterSequence) => await this.options.realtime.subscribe({
+			target: this.target,
+			...afterSequence === void 0 ? {} : { afterSequence },
+			onEvent: (payload, metadata) => {
+				this.handle(payload, metadata).catch((error) => {
+					this.options.onFatal(error);
+				});
+			},
+			signal: this.controller.signal
+		});
+		try {
+			this.unsubscribe = await subscribe(this.lastTransportSequence);
+		} catch (error) {
+			if (!(error instanceof DshRemoteError) || error.code !== "REPLAY_GAP") throw error;
+			this.unsubscribe = await subscribe();
+		}
+	}
+	async activate(serviceLeaseGeneration) {
+		if (this.closed || this.unsubscribe === void 0 || !Number.isSafeInteger(serviceLeaseGeneration) || serviceLeaseGeneration <= 0) throw new DshRemoteError("HOST_CHANNEL_NOT_READY", "Runtime channel 尚未完成 Host 注册", true);
+		this.target = {
+			...this.target,
+			hostLeaseGeneration: serviceLeaseGeneration
+		};
+		for (const event of this.pendingEvents.splice(0)) await this.handle(event.payload, event.metadata);
+	}
+	status() {
+		return {
+			runtimeRef: this.options.runtimeRef,
+			serviceLeaseGeneration: this.target.hostLeaseGeneration,
+			ready: !this.closed && this.unsubscribe !== void 0 && this.target.hostLeaseGeneration > 0
+		};
+	}
+	async close() {
+		if (this.closed) return;
+		this.closed = true;
+		if (this.lastTransportSequence > this.persistedTransportSequence) await this.persistCursor().catch(() => void 0);
+		this.unsubscribe?.();
+		this.unsubscribe = void 0;
+		this.controller.abort();
+	}
+	async publishProjectionEvent(envelope, commandId) {
+		if (!this.status().ready) return;
+		await this.publishPayload(envelope, commandId, "event");
+	}
+	async handle(payload, metadata) {
+		if (this.closed) return;
+		if (metadata.transportSequence !== void 0 && metadata.transportSequence > this.lastTransportSequence) {
+			this.lastTransportSequence = metadata.transportSequence;
+			if (this.lastTransportSequence - this.persistedTransportSequence >= 16) {
+				this.persistedTransportSequence = this.lastTransportSequence;
+				this.persistCursor().catch((error) => {
+					this.options.onFatal(error);
+				});
+			}
+		}
+		if (metadata.senderRole === "host") return;
+		if (this.target.hostLeaseGeneration === 0) {
+			if (this.pendingEvents.length >= 8) throw new DshRemoteError("HOST_CHANNEL_NOT_READY", "Host 注册期间收到过多并发请求", true);
+			this.pendingEvents.push({
+				payload,
+				metadata
+			});
+			return;
+		}
+		if (metadata.senderRole !== "controller" || metadata.runtimeRef !== this.options.runtimeRef || metadata.targetHostLeaseGeneration !== this.target.hostLeaseGeneration) throw new DshRemoteError("HOST_GENERATION_STALE", "远控请求不属于当前 Runtime Host lease", true);
+		const result = await this.options.dispatch(payload, {
+			serviceLeaseGeneration: this.target.hostLeaseGeneration,
+			metadata
+		});
+		const responseCommandId = `response_${createHash("sha256").update(result.request_ref).digest("base64url")}`;
+		await this.publishPayload(result, responseCommandId, "response");
+	}
+	async publishPayload(envelope, commandId, direction) {
+		const publish = async () => {
+			const frames = dshRemoteOutboundPayloads(envelope, commandId);
+			for (const frame of frames) {
+				if (!this.status().ready) return;
+				await this.options.realtime.publish({
+					target: this.target,
+					commandId: frame.commandId ?? commandId,
+					direction,
+					payload: frame.value,
+					signal: this.controller.signal
+				});
+			}
+		};
+		const result = this.outboundTail.then(publish);
+		this.outboundTail = result.catch(() => void 0);
+		await result;
+	}
+	async persistCursor() {
+		await this.options.secretBroker.putRuntimeCursor({
+			accountId: this.options.accountId,
+			runtimeRef: this.options.runtimeRef,
+			channelRef: this.options.runtimeRef,
+			lastTransportSequence: this.lastTransportSequence
+		});
+	}
+};
+//#endregion
+//#region src/dsh-remote/protocol-v1.ts
+const OPERATIONS = /* @__PURE__ */ new Set([
+	"workspace.list",
+	"session.create",
+	"session.list",
+	"session.history",
+	"session.prompt",
+	"session.cancel",
+	"interaction.question.respond",
+	"interaction.approval.respond",
+	"snapshot.get",
+	"capabilities.get"
+]);
+const REQUEST_KEYS = /* @__PURE__ */ new Set([
+	"protocol",
+	"protocol_major",
+	"kind",
+	"request_ref",
+	"host_generation",
+	"issued_at",
+	"execute_before",
+	"operation",
+	"body"
+]);
+function object(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控请求必须为对象");
+	return value;
+}
+function ref(value, name) {
+	if (typeof value !== "string" || value.length < 8 || value.length > 128 || !/^[A-Za-z0-9._:-]+$/.test(value)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", `${name} 无效`);
+	return value;
+}
+function positiveInteger$1(value, name) {
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0) throw new DshRemoteError("REMOTE_REQUEST_INVALID", `${name} 无效`);
+	return value;
+}
+function assertOnly(source, keys) {
+	const allowed = new Set(keys);
+	if (Object.keys(source).some((key) => !allowed.has(key))) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控操作 body 包含未定义字段");
+}
+function bodyRef(source, key, required = true) {
+	const value = source[key];
+	if (value === void 0 && !required) return;
+	if (typeof value !== "string" || value.length < 1 || value.length > 256) throw new DshRemoteError("REMOTE_REQUEST_INVALID", `${key} 无效`);
+}
+function pageFields(source) {
+	if (source.cursor !== void 0 && (typeof source.cursor !== "string" || source.cursor.length < 1 || source.cursor.length > 512)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "cursor 无效");
+	if (source.limit !== void 0 && (!Number.isSafeInteger(source.limit) || Number(source.limit) < 1 || Number(source.limit) > 100)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "limit 无效");
+}
+function validateOperationBody(operation, source) {
+	switch (operation) {
+		case "capabilities.get":
+			assertOnly(source, []);
+			return;
+		case "snapshot.get":
+		case "workspace.list":
+			assertOnly(source, ["cursor", "limit"]);
+			pageFields(source);
+			return;
+		case "session.list":
+			assertOnly(source, [
+				"workspace_ref",
+				"cursor",
+				"limit"
+			]);
+			bodyRef(source, "workspace_ref", false);
+			pageFields(source);
+			return;
+		case "session.create":
+			assertOnly(source, ["workspace_ref"]);
+			bodyRef(source, "workspace_ref");
+			return;
+		case "session.history":
+			assertOnly(source, [
+				"session_ref",
+				"before_seq",
+				"limit"
+			]);
+			bodyRef(source, "session_ref");
+			if (source.before_seq !== void 0 && (!Number.isSafeInteger(source.before_seq) || Number(source.before_seq) < 1)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "before_seq 无效");
+			pageFields(source);
+			return;
+		case "session.prompt": {
+			assertOnly(source, [
+				"session_ref",
+				"mode",
+				"content"
+			]);
+			bodyRef(source, "session_ref");
+			if (source.mode !== "queue" && source.mode !== "steer") throw new DshRemoteError("REMOTE_REQUEST_INVALID", "mode 无效");
+			const content = object(source.content);
+			if (content.type !== "text") throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "首版远控只支持有界普通文本");
+			assertOnly(content, ["type", "text"]);
+			if (typeof content.text !== "string" || content.text.length < 1 || content.text.length > 16e3) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "首版远控只支持有界普通文本");
+			return;
+		}
+		case "session.cancel":
+			assertOnly(source, ["session_ref"]);
+			bodyRef(source, "session_ref");
+			return;
+		case "interaction.question.respond":
+			assertOnly(source, [
+				"session_ref",
+				"interaction_rpc_ref",
+				"answer"
+			]);
+			bodyRef(source, "session_ref");
+			bodyRef(source, "interaction_rpc_ref");
+			if (!Object.hasOwn(source, "answer")) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "answer 缺失");
+			return;
+		case "interaction.approval.respond":
+			assertOnly(source, [
+				"session_ref",
+				"interaction_rpc_ref",
+				"approval_id",
+				"outcome"
+			]);
+			bodyRef(source, "session_ref");
+			bodyRef(source, "interaction_rpc_ref");
+			bodyRef(source, "approval_id");
+			if (source.outcome !== "allowed-once" && source.outcome !== "rejected") throw new DshRemoteError("REMOTE_REQUEST_INVALID", "outcome 无效");
+	}
+}
+function parseDshRemoteRequest(value, options) {
+	if (Buffer.from(JSON.stringify(value)).length > 61440) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控请求超过 60KiB");
+	const source = object(value);
+	if (Object.keys(source).some((key) => !REQUEST_KEYS.has(key))) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控请求包含未定义字段");
+	if (source.protocol !== "dsh.remote" || source.protocol_major !== 1) throw new DshRemoteError("REMOTE_PROTOCOL_UNSUPPORTED", "远控协议版本不受支持");
+	if (source.kind !== "request") throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控消息类型无效");
+	const hostGeneration = positiveInteger$1(source.host_generation, "host_generation");
+	if (hostGeneration !== options.expectedHostGeneration) throw new DshRemoteError("HOST_GENERATION_STALE", "请求指向的 Host 实例已经失效", true);
+	const issuedAt = positiveInteger$1(source.issued_at, "issued_at");
+	const executeBefore = positiveInteger$1(source.execute_before, "execute_before");
+	const now = options.nowMillis ?? Date.now();
+	if (executeBefore < now) throw new DshRemoteError("COMMAND_EXPIRED", "远控命令已经过期");
+	if (issuedAt > now + 3e4 || executeBefore > now + 5 * 6e4 || executeBefore < issuedAt) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控命令时间窗口无效");
+	if (typeof source.operation !== "string" || !OPERATIONS.has(source.operation)) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "远控操作不受支持");
+	const body = object(source.body);
+	validateOperationBody(source.operation, body);
+	return {
+		protocol: DSH_REMOTE_PROTOCOL,
+		protocol_major: 1,
+		kind: "request",
+		request_ref: ref(source.request_ref, "request_ref"),
+		host_generation: hostGeneration,
+		issued_at: issuedAt,
+		execute_before: executeBefore,
+		operation: source.operation,
+		body
+	};
+}
+//#endregion
+//#region src/dsh-remote/host.ts
+function stringBody(body, key, max = 256) {
+	const value = body[key];
+	if (typeof value !== "string" || value.trim() === "" || value.length > max) throw new DshRemoteError("REMOTE_REQUEST_INVALID", `${key} 无效`);
+	return value.trim();
+}
+function optionalString(body, key) {
+	return typeof body[key] === "string" && body[key] !== "" ? body[key] : void 0;
+}
+function optionalPositive(body, key) {
+	const value = body[key];
+	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : void 0;
+}
+function requiredCapabilities(operation) {
+	switch (operation) {
+		case "capabilities.get": return [];
+		case "snapshot.get": return ["workspace.list", "session.list"];
+		case "workspace.list": return ["workspace.list"];
+		case "session.list": return ["session.list"];
+		case "session.create": return ["session.create"];
+		case "session.history": return ["session.history"];
+		case "session.prompt": return ["session.prompt"];
+		case "session.cancel": return ["session.cancel"];
+		case "interaction.question.respond": return ["interaction.question.respond"];
+		case "interaction.approval.respond": return ["interaction.approval.respond"];
+	}
+}
+function response(request, status, now, payload) {
+	const result = {
+		protocol: DSH_REMOTE_PROTOCOL,
+		protocol_major: 1,
+		kind: "response",
+		request_ref: request.request_ref,
+		status,
+		host_generation: request.host_generation,
+		issued_at: now,
+		operation: request.operation,
+		body: {}
+	};
+	if (payload.result !== void 0) result.result = payload.result;
+	if (payload.error !== void 0) result.error = payload.error;
+	return result;
+}
+function resultFromLedger(entry) {
+	const result = entry.payload.result;
+	if (result !== null && typeof result === "object" && "rejected" in result) {
+		const rejected = result.rejected;
+		if (rejected !== null && typeof rejected === "object") {
+			const source = rejected;
+			throw new DshRemoteError(typeof source.code === "string" ? source.code : "REMOTE_TRANSPORT_FAILED", typeof source.message === "string" ? source.message : "DSH 已拒绝该远控命令", source.retryable === true);
+		}
+	}
+	return result !== null && typeof result === "object" && "value" in result ? result.value : result;
+}
+/**
+* Account-login Host facade. Backend owns durable discovery/projections,
+* Realtime owns the short-lived Host lease, and DSH remains session truth.
+*/
+var ArkmeRemoteRealtimeHost = class {
+	options;
+	now;
+	listeners = /* @__PURE__ */ new Set();
+	runtime;
+	accountId;
+	clientId = 0;
+	ledger;
+	started = false;
+	connected = false;
+	serviceLeaseGeneration = 0;
+	revision = 0;
+	stopEvents;
+	stopProjectionEvents;
+	channelManager;
+	stopTransportDisconnect;
+	reconnectTimer;
+	reconnecting = false;
+	sessionTimer;
+	connectionError;
+	lastProjectionSyncAttemptMillis = 0;
+	projectionVersion = 0;
+	constructor(options) {
+		this.options = options;
+		this.now = options.now ?? Date.now;
+	}
+	async start() {
+		if (this.started) return;
+		this.started = true;
+		if (!this.options.featureEnabled) {
+			this.bump();
+			return;
+		}
+		this.stopTransportDisconnect = this.options.realtime.subscribeDisconnect((error) => {
+			this.handleTransportDisconnect(error);
+		});
+		await this.syncSessionSafely();
+		this.scheduleSessionSync();
+	}
+	async stop() {
+		if (!this.started) return;
+		this.started = false;
+		this.stopApiProxyEvents();
+		this.stopTransportDisconnect?.();
+		this.stopTransportDisconnect = void 0;
+		if (this.sessionTimer !== void 0) clearTimeout(this.sessionTimer);
+		this.sessionTimer = void 0;
+		if (this.reconnectTimer !== void 0) clearTimeout(this.reconnectTimer);
+		this.reconnectTimer = void 0;
+		await this.deactivateAccount();
+		this.bump();
+	}
+	getStatus() {
+		const available = this.options.featureEnabled && this.accountId !== void 0 && this.options.transportAvailable !== false && this.options.apiProxy.capabilities().length > 0;
+		return {
+			contractVersion: 1,
+			available,
+			enabled: this.options.featureEnabled && this.accountId !== void 0,
+			connected: this.connected,
+			hostGeneration: this.runtime?.hostGeneration ?? 0,
+			capabilities: this.runtime?.capabilities ?? this.options.apiProxy.capabilities(),
+			revision: this.revision,
+			...this.accountId === void 0 ? {} : { accountId: this.accountId },
+			...this.runtime?.desktopRef === void 0 ? {} : { desktopRef: this.runtime.desktopRef },
+			...this.runtime === void 0 ? {} : { runtimeRef: this.runtime.runtimeRef },
+			...this.connectionError !== void 0 ? { unavailableReason: this.connectionError.message } : available ? {} : { unavailableReason: !this.options.featureEnabled ? "远控能力尚未在此版本启用" : this.accountId === void 0 ? "请先登录 Arkme 后使用 DSH 远程会话" : this.options.transportAvailable === false ? "当前 DSH Host 尚未提供带登录态的 Realtime Socket Factory" : this.options.apiProxy.capabilities().length === 0 ? "当前 DSH 缺少公共 ApiProxy 能力" : "远控运行依赖尚未就绪" }
+		};
+	}
+	async renameDesktop(displayName) {
+		this.requireReady();
+		const normalized = displayName.trim();
+		await this.options.runtimeStore.renameDesktop(this.accountId, normalized);
+		if (this.runtime?.desktopRef !== void 0) await this.options.controlPlane.registerDesktop({
+			display_name: normalized,
+			platform: this.options.platform ?? process.platform
+		});
+		this.bump();
+		return this.getStatus();
+	}
+	subscribe(listener) {
+		this.listeners.add(listener);
+		listener(this.getStatus());
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	/** Entry used only by the authenticated Realtime channel bridge. */
+	async dispatchAuthorizedRequest(value, context) {
+		this.requireConnected();
+		if (context.metadata.senderRole !== "controller" || context.metadata.runtimeRef !== this.runtime.runtimeRef) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控发送方上下文无效");
+		if (context.serviceLeaseGeneration !== this.serviceLeaseGeneration || context.metadata.targetHostLeaseGeneration !== this.serviceLeaseGeneration) throw new DshRemoteError("HOST_GENERATION_STALE", "远控请求属于旧 Host lease", true);
+		if (this.now() - context.metadata.acceptedAtMillis > 3e4) throw new DshRemoteError("COMMAND_EXPIRED", "远控请求投递延迟过长");
+		const request = parseDshRemoteRequest(value, {
+			expectedHostGeneration: this.runtime.hostGeneration,
+			nowMillis: this.now()
+		});
+		try {
+			const capabilities = new Set(this.options.apiProxy.capabilities());
+			if (requiredCapabilities(request.operation).some((capability) => !capabilities.has(capability))) throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "当前 DSH Runtime 不支持该操作");
+			const result = await this.dispatch(request);
+			return response(request, result.duplicate ? "duplicate" : "completed", this.now(), { result: result.value });
+		} catch (error) {
+			const remote = asDshRemoteError(error);
+			return response(request, "rejected", this.now(), { error: {
+				code: remote.code,
+				message: remote.message.slice(0, 256),
+				retryable: remote.retryable,
+				trace_ref: randomUUID()
+			} });
+		}
+	}
+	async syncSessionSafely() {
+		try {
+			await this.syncSession();
+		} catch (error) {
+			this.connectionError = asDshRemoteError(error);
+			this.bump();
+		}
+	}
+	async syncSession() {
+		if (!this.started || !this.options.featureEnabled) return;
+		const session = await this.options.readSession();
+		if (session === void 0) {
+			if (this.accountId !== void 0) await this.deactivateAccount();
+			this.bump();
+			return;
+		}
+		const accountId = String(session.userId);
+		if (this.accountId === accountId && this.clientId === session.clientId && this.runtime !== void 0) {
+			await this.ensureAutomaticConnection();
+			return;
+		}
+		if (this.accountId !== void 0) await this.deactivateAccount();
+		this.clientId = session.clientId;
+		this.accountId = accountId;
+		this.runtime = await this.options.runtimeStore.activateRuntime({
+			accountId,
+			profileRef: this.options.profileRef,
+			capabilities: this.options.apiProxy.capabilities(),
+			nowMillis: this.now()
+		});
+		this.ledger = await this.options.ledgerForAccount(accountId, await this.options.secretBroker.ledgerKey(accountId));
+		await this.reconcileUnsettled();
+		this.ledger.cleanup({
+			retentionMillis: 10080 * 6e4,
+			maxCommands: 1e4
+		});
+		await this.ensureAutomaticConnection();
+		this.bump();
+	}
+	async ensureAutomaticConnection() {
+		if (this.accountId === void 0 || this.runtime === void 0) return;
+		if (this.connected) {
+			await this.syncProjectionSnapshotSafely();
+			return;
+		}
+		if (this.options.transportAvailable === false || this.options.apiProxy.capabilities().length === 0) {
+			this.connectionError = void 0;
+			this.bump();
+			return;
+		}
+		this.startApiProxyEvents();
+		try {
+			await this.connectHost();
+		} catch (error) {
+			this.handleTransportDisconnect(error);
+			throw error;
+		}
+	}
+	scheduleSessionSync() {
+		if (!this.started || !this.options.featureEnabled || this.sessionTimer !== void 0) return;
+		this.sessionTimer = setTimeout(() => {
+			this.sessionTimer = void 0;
+			this.syncSessionSafely().finally(() => {
+				this.scheduleSessionSync();
+			});
+		}, 2e3);
+		this.sessionTimer.unref();
+	}
+	async deactivateAccount() {
+		this.stopApiProxyEvents();
+		let unregistered = false;
+		try {
+			if (this.connected) {
+				await this.options.realtime.unregisterHost();
+				unregistered = true;
+			}
+		} catch {}
+		if (!unregistered) await this.options.realtime.disconnect();
+		await this.channelManager?.close();
+		this.channelManager = void 0;
+		if (unregistered) await this.options.realtime.disconnect();
+		this.connected = false;
+		this.serviceLeaseGeneration = 0;
+		this.ledger?.close();
+		this.ledger = void 0;
+		this.runtime = void 0;
+		this.accountId = void 0;
+		this.clientId = 0;
+		this.connectionError = void 0;
+		this.lastProjectionSyncAttemptMillis = 0;
+		this.projectionVersion = 0;
+	}
+	startApiProxyEvents() {
+		if (this.stopProjectionEvents === void 0) this.stopProjectionEvents = this.options.apiProxy.subscribeProjectionEvents((event) => {
+			this.publishProjectionEvent(event).catch((error) => {
+				this.connectionError = asDshRemoteError(error);
+				this.bump();
+			});
+		});
+		if (this.stopEvents === void 0) this.stopEvents = this.options.apiProxy.startEvents();
+	}
+	stopApiProxyEvents() {
+		this.stopEvents?.();
+		this.stopEvents = void 0;
+		this.stopProjectionEvents?.();
+		this.stopProjectionEvents = void 0;
+	}
+	async publishProjectionEvent(event) {
+		const runtime = this.runtime;
+		const manager = this.channelManager;
+		if (!this.started || !this.connected || runtime === void 0 || manager === void 0) return;
+		const issuedAt = this.now();
+		if (event.kind === "session-event") {
+			const append = async () => {
+				await this.options.controlPlane.appendSessionEvents({
+					runtime_ref: runtime.runtimeRef,
+					host_generation: runtime.hostGeneration,
+					session_ref: event.sessionId,
+					entries: [event.entry]
+				});
+			};
+			try {
+				await append();
+			} catch (error) {
+				if (asDshRemoteError(error).code !== "REMOTE_NOT_FOUND") throw error;
+				await this.syncProjectionSnapshot(true);
+				await append();
+			}
+			const seq = event.entry.event.seq;
+			const requestRef = `event_${createHash("sha256").update([
+				"dsh-remote-session-event-v1",
+				runtime.runtimeRef,
+				String(runtime.hostGeneration),
+				event.sessionId,
+				String(seq),
+				event.entry.event.type
+			].join("\n")).digest("base64url").slice(0, 40)}`;
+			await manager.publishProjectionEvent({
+				protocol: DSH_REMOTE_PROTOCOL,
+				protocol_major: 1,
+				kind: "event",
+				request_ref: requestRef,
+				host_generation: runtime.hostGeneration,
+				issued_at: issuedAt,
+				operation: "session.history",
+				body: {
+					session_ref: event.sessionId,
+					entries: [event.entry]
+				},
+				session_seq: seq,
+				projection_as_of_seq: seq
+			}, requestRef);
+			return;
+		}
+		const baseline = event.kind === "mux-baseline";
+		const requestRef = `projection_${randomUUID()}`;
+		const pendingFits = Buffer.byteLength(JSON.stringify(event.pendingInteractions)) <= DSH_REMOTE_MAX_PAGE_RESULT_BYTES;
+		await manager.publishProjectionEvent({
+			protocol: DSH_REMOTE_PROTOCOL,
+			protocol_major: 1,
+			kind: "event",
+			request_ref: requestRef,
+			host_generation: runtime.hostGeneration,
+			issued_at: issuedAt,
+			operation: "snapshot.get",
+			body: {
+				...pendingFits ? { pending_interactions: event.pendingInteractions } : {},
+				...baseline ? {
+					reason: "mux-generation",
+					session_ref: event.sessionId,
+					last_seq: event.lastSeq
+				} : {},
+				...!pendingFits && !baseline ? { reason: "projection-overflow" } : {}
+			},
+			...baseline && event.lastSeq >= 0 ? { projection_as_of_seq: event.lastSeq } : {}
+		}, requestRef);
+	}
+	handleTransportDisconnect(error) {
+		if (!this.started || this.runtime === void 0) return;
+		const remote = error === void 0 ? void 0 : asDshRemoteError(error);
+		if (remote !== void 0) this.connectionError = remote;
+		this.connected = false;
+		this.serviceLeaseGeneration = 0;
+		const manager = this.channelManager;
+		this.channelManager = void 0;
+		this.options.realtime.disconnect().finally(async () => {
+			await manager?.close();
+		}).catch(() => void 0);
+		this.bump();
+		if (this.reconnectTimer !== void 0 || this.options.transportAvailable === false || remote?.retryable === false) return;
+		this.reconnectTimer = setTimeout(() => {
+			this.reconnectTimer = void 0;
+			if (!this.started || this.runtime === void 0 || this.reconnecting) return;
+			this.reconnecting = true;
+			this.connectHost().catch((caught) => {
+				this.handleTransportDisconnect(caught);
+			}).finally(() => {
+				this.reconnecting = false;
+			});
+		}, 1e3);
+		this.reconnectTimer.unref();
+	}
+	async connectHost() {
+		const localRuntime = this.runtime;
+		const accountId = this.accountId;
+		const platform = this.options.platform ?? process.platform;
+		const displayName = (await this.options.runtimeStore.account(accountId)).displayName ?? this.options.displayName ?? hostname();
+		const desktop = await this.options.controlPlane.registerDesktop({
+			display_name: displayName,
+			platform
+		});
+		const desktopRef = typeof desktop.desktop_ref === "string" ? desktop.desktop_ref : typeof desktop.desktopRef === "string" ? desktop.desktopRef : "";
+		if (desktopRef === "") throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", "Backend 未返回桌面设备引用", true);
+		await this.options.runtimeStore.bindDesktop(accountId, { desktopRef });
+		this.runtime = {
+			...localRuntime,
+			desktopRef
+		};
+		const registeredRuntime = await this.options.controlPlane.registerRuntime(desktopRef, {
+			profile_ref: this.options.profileRef,
+			host_client_ref: this.options.hostClientRef,
+			service_namespace: "dsh_remote",
+			service_name: "host",
+			protocol: DSH_REMOTE_PROTOCOL,
+			protocol_major: 1,
+			host_generation: localRuntime.hostGeneration,
+			capabilities: localRuntime.capabilities
+		});
+		const backendRuntimeRef = typeof registeredRuntime.runtime_ref === "string" ? registeredRuntime.runtime_ref : "";
+		const backendHostGeneration = typeof registeredRuntime.host_generation === "number" && Number.isSafeInteger(registeredRuntime.host_generation) && registeredRuntime.host_generation > 0 ? registeredRuntime.host_generation : 0;
+		if (backendRuntimeRef === "" || backendHostGeneration < localRuntime.hostGeneration) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", "Backend 未返回匹配的 Runtime 引用与 Host generation", true);
+		this.runtime = {
+			...await this.options.runtimeStore.adoptRuntimeRef(accountId, this.options.profileRef, backendRuntimeRef, backendHostGeneration),
+			desktopRef
+		};
+		await this.syncProjectionSnapshot(true);
+		const controller = new AbortController();
+		await this.options.realtime.connect({
+			profileRef: this.options.profileRef,
+			clientRef: this.options.hostClientRef,
+			signal: controller.signal
+		});
+		const manager = new DshRemoteHostChannelManager({
+			accountId,
+			profileRef: this.options.profileRef,
+			hostClientRef: this.options.hostClientRef,
+			runtimeRef: backendRuntimeRef,
+			realtime: this.options.realtime,
+			secretBroker: this.options.secretBroker,
+			dispatch: async (request, context) => await this.dispatchAuthorizedRequest(request, context),
+			onFatal: (error) => {
+				this.handleTransportDisconnect(error);
+			}
+		});
+		try {
+			await manager.prepare();
+			const registered = await this.options.realtime.registerHost({
+				runtimeRef: backendRuntimeRef,
+				capabilities: this.runtime.capabilities,
+				signal: controller.signal
+			});
+			await manager.activate(registered.serviceLeaseGeneration);
+			this.channelManager = manager;
+			this.serviceLeaseGeneration = registered.serviceLeaseGeneration;
+			this.connected = true;
+			this.connectionError = void 0;
+			this.bump();
+		} catch (error) {
+			await this.options.realtime.disconnect();
+			await manager.close();
+			throw error;
+		}
+	}
+	async syncProjectionSnapshotSafely(force = false) {
+		const now = this.now();
+		if (!force && now - this.lastProjectionSyncAttemptMillis < 5e3) return;
+		this.lastProjectionSyncAttemptMillis = now;
+		try {
+			await this.syncProjectionSnapshot(force);
+			this.connectionError = void 0;
+		} catch (error) {
+			this.connectionError = asDshRemoteError(error);
+			this.bump();
+		}
+	}
+	nextProjectionVersion() {
+		this.projectionVersion = Math.max(this.projectionVersion + 1, Math.trunc(this.now()));
+		return this.projectionVersion;
+	}
+	async syncProjectionSnapshot(force = false) {
+		const runtime = this.runtime;
+		const accountId = this.accountId;
+		if (runtime === void 0 || accountId === void 0) return;
+		if (force) this.lastProjectionSyncAttemptMillis = this.now();
+		const capabilities = new Set(this.options.apiProxy.capabilities());
+		const projectionAt = this.nextProjectionVersion();
+		const previous = await this.options.runtimeStore.projectionInventory(accountId, this.options.profileRef);
+		const workspaces = capabilities.has("workspace.list") ? await this.options.apiProxy.workspaces() : [];
+		const currentWorkspaceRefs = new Set(workspaces.map((item) => item.workspaceId));
+		const workspaceItems = [...workspaces.map((item) => ({
+			workspace_ref: item.workspaceId,
+			title: item.title,
+			path: item.path,
+			available: item.available,
+			projection_at: projectionAt,
+			deleted: false
+		})), ...previous.workspaceRefs.filter((workspaceRef) => !currentWorkspaceRefs.has(workspaceRef)).map((workspaceRef) => ({
+			workspace_ref: workspaceRef,
+			title: "",
+			path: "",
+			available: false,
+			projection_at: projectionAt,
+			deleted: true
+		}))];
+		for (let offset = 0; offset < workspaceItems.length || offset === 0; offset += 100) {
+			await this.options.controlPlane.syncWorkspaces({
+				runtime_ref: runtime.runtimeRef,
+				host_generation: runtime.hostGeneration,
+				items: workspaceItems.slice(offset, offset + 100)
+			});
+			if (workspaceItems.length === 0) break;
+		}
+		const sessions = [];
+		if (capabilities.has("session.list")) {
+			let cursor;
+			const seenCursors = /* @__PURE__ */ new Set();
+			for (let pageCount = 0; pageCount < 200; pageCount += 1) {
+				const page = await this.options.apiProxy.sessions({
+					limit: 50,
+					...cursor === void 0 ? {} : { cursor }
+				});
+				sessions.push(...page.items);
+				if (page.nextCursor === void 0) break;
+				if (seenCursors.has(page.nextCursor)) throw new DshRemoteError("REMOTE_INVALID_RESPONSE", "DSH 会话游标发生循环");
+				seenCursors.add(page.nextCursor);
+				cursor = page.nextCursor;
+				if (pageCount === 199) throw new DshRemoteError("REMOTE_INVALID_RESPONSE", "DSH 会话分页超过安全上限");
+			}
+		}
+		const currentSessionRefs = new Set(sessions.map((item) => item.sessionId));
+		const sessionItems = [...sessions.map((item) => ({
+			workspace_ref: item.workspaceId,
+			session_ref: item.sessionId,
+			title: item.title ?? "",
+			source_updated_at: Math.max(1, Math.trunc(item.updatedAt)),
+			projection_at: projectionAt,
+			running: item.running,
+			blank: item.blank,
+			...item.projectionAsOfSeq === void 0 ? {} : { projection_as_of_seq: item.projectionAsOfSeq },
+			deleted: false
+		})), ...previous.sessions.filter((item) => !currentSessionRefs.has(item.sessionRef)).map((item) => ({
+			workspace_ref: item.workspaceRef,
+			session_ref: item.sessionRef,
+			title: "",
+			source_updated_at: item.sourceUpdatedAt,
+			projection_at: projectionAt,
+			running: false,
+			blank: false,
+			deleted: true
+		}))];
+		for (let offset = 0; offset < sessionItems.length || offset === 0; offset += 100) {
+			await this.options.controlPlane.syncSessions({
+				runtime_ref: runtime.runtimeRef,
+				host_generation: runtime.hostGeneration,
+				items: sessionItems.slice(offset, offset + 100)
+			});
+			if (sessionItems.length === 0) break;
+		}
+		await this.options.runtimeStore.saveProjectionInventory(accountId, this.options.profileRef, {
+			workspaceRefs: workspaces.map((item) => item.workspaceId),
+			sessions: sessions.map((item) => ({
+				sessionRef: item.sessionId,
+				workspaceRef: item.workspaceId,
+				sourceUpdatedAt: Math.max(1, Math.trunc(item.updatedAt))
+			}))
+		});
+	}
+	async dispatch(request) {
+		switch (request.operation) {
+			case "capabilities.get": return {
+				duplicate: false,
+				value: { capabilities: this.options.apiProxy.capabilities() }
+			};
+			case "snapshot.get": {
+				const cursor = optionalString(request.body, "cursor");
+				const limit = optionalPositive(request.body, "limit");
+				return {
+					duplicate: false,
+					value: await this.options.apiProxy.snapshot({
+						...cursor === void 0 ? {} : { cursor },
+						...limit === void 0 ? {} : { limit }
+					})
+				};
+			}
+			case "workspace.list": {
+				const cursor = optionalString(request.body, "cursor");
+				const limit = optionalPositive(request.body, "limit");
+				return {
+					duplicate: false,
+					value: await this.options.apiProxy.workspacePage({
+						...cursor === void 0 ? {} : { cursor },
+						...limit === void 0 ? {} : { limit }
+					})
+				};
+			}
+			case "session.list": {
+				const workspaceId = optionalString(request.body, "workspace_ref");
+				const cursor = optionalString(request.body, "cursor");
+				const limit = optionalPositive(request.body, "limit");
+				return {
+					duplicate: false,
+					value: await this.options.apiProxy.sessions({
+						...workspaceId === void 0 ? {} : { workspaceId },
+						...cursor === void 0 ? {} : { cursor },
+						...limit === void 0 ? {} : { limit }
+					})
+				};
+			}
+			case "session.history": {
+				const beforeSeq = optionalPositive(request.body, "before_seq");
+				const limit = optionalPositive(request.body, "limit");
+				return {
+					duplicate: false,
+					value: await this.options.apiProxy.history({
+						sessionId: stringBody(request.body, "session_ref"),
+						...beforeSeq === void 0 ? {} : { beforeSeq },
+						...limit === void 0 ? {} : { limit }
+					})
+				};
+			}
+			default: return await this.dispatchWrite(request);
+		}
+	}
+	async dispatchWrite(request) {
+		const ledger = this.ledger;
+		if (ledger === void 0) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "远控命令账本尚未就绪");
+		const accountId = this.accountId;
+		const runtimeRef = this.runtime.runtimeRef;
+		const begun = ledger.begin({
+			accountId,
+			runtimeRef,
+			requestRef: request.request_ref,
+			operation: request.operation,
+			arguments: request.body,
+			executeBeforeMillis: request.execute_before
+		});
+		if (begun.duplicate) {
+			if (begun.entry.state === "completed") return {
+				duplicate: true,
+				value: resultFromLedger(begun.entry)
+			};
+			throw new DshRemoteError("COMMAND_OUTCOME_UNKNOWN", "同一命令的结果尚未完成对账");
+		}
+		const identity = {
+			accountId,
+			runtimeRef,
+			requestRef: request.request_ref
+		};
+		let value;
+		try {
+			switch (request.operation) {
+				case "session.create":
+					value = await this.options.apiProxy.createSession({
+						workspaceId: stringBody(request.body, "workspace_ref"),
+						dshRpcId: begun.entry.dshRpcId
+					});
+					break;
+				case "session.prompt":
+					value = await this.options.apiProxy.prompt({
+						sessionId: stringBody(request.body, "session_ref"),
+						mode: request.body.mode === "queue" || request.body.mode === "steer" ? request.body.mode : (() => {
+							throw new DshRemoteError("REMOTE_REQUEST_INVALID", "prompt mode 无效");
+						})(),
+						content: [request.body.content],
+						dshRpcId: begun.entry.dshRpcId
+					});
+					break;
+				case "session.cancel":
+					value = await this.options.apiProxy.cancel({
+						sessionId: stringBody(request.body, "session_ref"),
+						dshRpcId: begun.entry.dshRpcId
+					});
+					break;
+				case "interaction.question.respond":
+					await this.options.apiProxy.answerQuestion({
+						interactionRpcRef: stringBody(request.body, "interaction_rpc_ref"),
+						sessionId: stringBody(request.body, "session_ref"),
+						answer: request.body.answer
+					});
+					value = { accepted: true };
+					break;
+				case "interaction.approval.respond":
+					await this.options.apiProxy.answerApproval({
+						interactionRpcRef: stringBody(request.body, "interaction_rpc_ref"),
+						sessionId: stringBody(request.body, "session_ref"),
+						approvalId: stringBody(request.body, "approval_id"),
+						outcome: request.body.outcome === "allowed-once" || request.body.outcome === "rejected" ? request.body.outcome : (() => {
+							throw new DshRemoteError("REMOTE_REQUEST_INVALID", "approval outcome 无效");
+						})()
+					});
+					value = { accepted: true };
+					break;
+				default: throw new DshRemoteError("CAPABILITY_UNSUPPORTED", "远控操作不受支持");
+			}
+		} catch (error) {
+			if (error instanceof DshRemoteError && (error.code !== "REMOTE_TRANSPORT_FAILED" || error.details.dshRejected === true)) ledger.completeRejected(identity, error);
+			else ledger.markOutcomeUnknown(identity, "DSH transport failed after the command ledger entered pending");
+			throw error;
+		}
+		ledger.complete(identity, { value });
+		return {
+			duplicate: false,
+			value
+		};
+	}
+	async reconcileUnsettled() {
+		if (this.ledger === void 0 || this.accountId === void 0) return;
+		for (const entry of this.ledger.unsettledForReconciliation(this.accountId, this.now())) {
+			const argumentsValue = entry.payload.arguments;
+			const argumentsRecord = argumentsValue !== null && typeof argumentsValue === "object" && !Array.isArray(argumentsValue) ? argumentsValue : void 0;
+			const sessionId = typeof argumentsRecord?.session_ref === "string" ? argumentsRecord.session_ref : void 0;
+			let proven = false;
+			let recoveredValue = {
+				recovered: true,
+				dshRpcId: entry.dshRpcId
+			};
+			if (entry.operation === "session.create" && typeof argumentsRecord?.workspace_ref === "string") try {
+				const created = await this.options.apiProxy.reconcileCreatedSession({
+					workspaceId: argumentsRecord.workspace_ref,
+					dshRpcId: entry.dshRpcId
+				});
+				if (created !== void 0) {
+					proven = true;
+					recoveredValue = {
+						recovered: true,
+						sessionId: created.sessionId
+					};
+				}
+			} catch {}
+			if (sessionId !== void 0) try {
+				const history = await this.options.apiProxy.history({
+					sessionId,
+					limit: 50
+				});
+				proven = this.options.apiProxy.historyContainsRpcId(history.entries, entry.dshRpcId);
+			} catch {}
+			const identity = {
+				accountId: entry.accountId,
+				runtimeRef: entry.runtimeRef,
+				requestRef: entry.requestRef
+			};
+			if (proven) this.ledger.complete(identity, { value: recoveredValue });
+			else this.ledger.markOutcomeUnknown(identity, "DSH history did not prove the accepted result after Host recovery");
+		}
+	}
+	requireReady() {
+		if (!this.started || this.accountId === void 0 || this.runtime === void 0) throw new DshRemoteError("REMOTE_LOGIN_REQUIRED", "请先登录 Arkme 后使用远控");
+	}
+	requireConnected() {
+		this.requireReady();
+		if (!this.connected || this.serviceLeaseGeneration <= 0) throw new DshRemoteError("RUNTIME_OFFLINE", "当前 Runtime 未连接 Realtime", true);
+	}
+	bump() {
+		this.revision += 1;
+		const snapshot = this.getStatus();
+		for (const listener of this.listeners) listener(snapshot);
+	}
+};
+//#endregion
+//#region src/dsh-remote/realtime-transport.ts
+/**
+* Mirrors jotmo-realtime's login-only channel.publish and channel.event
+* wrappers. Max-width sequence/timestamp values keep the check conservative.
+*/
+function dshRemoteFrameByteLengths(input) {
+	const maxInt64 = 0x8000000000000000;
+	const requestId = "00000000-0000-4000-8000-000000000000";
+	const target = wireTarget(input.target);
+	const publish = {
+		type: "channel.publish",
+		namespace: "dsh_remote",
+		channel_ref: input.target.runtimeRef,
+		...target,
+		direction: input.direction,
+		command_id: input.commandId,
+		payload: input.payload,
+		request_id: requestId
+	};
+	const event = {
+		type: "channel.event",
+		namespace: "dsh_remote",
+		channel_ref: input.target.runtimeRef,
+		seq: maxInt64,
+		event: {
+			channel_ref: input.target.runtimeRef,
+			command_id: input.commandId,
+			seq: maxInt64,
+			sender_role: input.senderRole,
+			runtime_ref: input.target.runtimeRef,
+			accepted_at: maxInt64,
+			target_host_lease_generation: input.target.hostLeaseGeneration,
+			payload: input.payload,
+			created_at: maxInt64
+		}
+	};
+	return {
+		publish: Buffer.byteLength(JSON.stringify(publish)),
+		event: Buffer.byteLength(JSON.stringify(event))
+	};
+}
+function assertDshRemoteFramesFit(input) {
+	const sizes = dshRemoteFrameByteLengths(input);
+	if (sizes.publish > 61440 || sizes.event > 61440) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "Realtime publish/event frame 超过 60KiB", false, {
+		frameTooLarge: true,
+		publishBytes: sizes.publish,
+		eventBytes: sizes.event
+	});
+}
+const SERVER_FIELDS = {
+	"connection.ready": /* @__PURE__ */ new Set(["type", "connection_generation"]),
+	"connection.replaced": /* @__PURE__ */ new Set(["type", "connection_generation"]),
+	"service.registered": /* @__PURE__ */ new Set([
+		"type",
+		"request_id",
+		"namespace",
+		"service",
+		"protocol",
+		"protocol_major",
+		"connection_generation",
+		"service_lease_generation",
+		"duplicate"
+	]),
+	"service.unregistered": /* @__PURE__ */ new Set([
+		"type",
+		"request_id",
+		"namespace",
+		"service",
+		"protocol",
+		"protocol_major",
+		"duplicate"
+	]),
+	"channel.subscribed": /* @__PURE__ */ new Set([
+		"type",
+		"request_id",
+		"namespace",
+		"channel_ref",
+		"seq",
+		"duplicate"
+	]),
+	"channel.unsubscribed": /* @__PURE__ */ new Set([
+		"type",
+		"request_id",
+		"namespace",
+		"channel_ref",
+		"duplicate"
+	]),
+	"channel.published": /* @__PURE__ */ new Set([
+		"type",
+		"request_id",
+		"namespace",
+		"channel_ref",
+		"seq",
+		"duplicate"
+	]),
+	"channel.event": /* @__PURE__ */ new Set([
+		"type",
+		"namespace",
+		"channel_ref",
+		"seq",
+		"event"
+	]),
+	error: /* @__PURE__ */ new Set([
+		"type",
+		"request_id",
+		"channel_ref",
+		"code",
+		"message",
+		"retryable"
+	])
+};
+function validServerFrame(frame) {
+	const allowed = SERVER_FIELDS[frame.type];
+	if (allowed === void 0 || Object.keys(frame).some((key) => !allowed.has(key))) return false;
+	if (frame.type === "connection.ready") return positiveInteger(frame.connection_generation);
+	if (frame.type === "connection.replaced") return true;
+	if (frame.type === "channel.event") return frame.namespace === "dsh_remote" && validRef(frame.channel_ref) && positiveInteger(frame.seq) && frame.event !== null && typeof frame.event === "object" && !Array.isArray(frame.event);
+	return validRef(frame.request_id);
+}
+function remoteError(frame) {
+	const code = typeof frame.code === "string" ? frame.code : "REMOTE_TRANSPORT_FAILED";
+	return new DshRemoteError((/* @__PURE__ */ new Set([
+		"REMOTE_LOGIN_REQUIRED",
+		"RUNTIME_OFFLINE",
+		"HOST_CHANNEL_NOT_READY",
+		"CONNECTION_REPLACED",
+		"HOST_GENERATION_STALE",
+		"REMOTE_PROTOCOL_UNSUPPORTED",
+		"REMOTE_REQUEST_INVALID",
+		"REMOTE_TRANSPORT_FAILED",
+		"REPLAY_GAP"
+	])).has(code) ? code : "REMOTE_TRANSPORT_FAILED", typeof frame.message === "string" && frame.message.trim() !== "" ? frame.message : "Realtime 远控操作失败", frame.retryable === true);
+}
+function positive(frame, key) {
+	const value = frame[key];
+	if (!positiveInteger(value)) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", `Realtime ${key} 无效`, true);
+	return value;
+}
+function positiveInteger(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+function validRef(value) {
+	return typeof value === "string" && /^[A-Za-z0-9._:-]{1,128}$/.test(value);
+}
+function validateTarget(target, allowUnregisteredHost) {
+	if (!validRef(target.runtimeRef) || !validRef(target.hostProfileRef) || !validRef(target.hostClientRef) || !Number.isSafeInteger(target.hostLeaseGeneration) || target.hostLeaseGeneration < 0 || !allowUnregisteredHost && target.hostLeaseGeneration <= 0) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "Realtime Runtime 目标无效");
+}
+function wireTarget(target) {
+	return {
+		runtime_ref: target.runtimeRef,
+		host_profile_ref: target.hostProfileRef,
+		host_client_ref: target.hostClientRef,
+		host_lease_generation: target.hostLeaseGeneration
+	};
+}
+/** Exact adapter for jotmo-realtime's login-only DSH Remote contract. */
+var ArkmeRemoteRealtimeTransport = class {
+	createSocket;
+	requestTimeoutMillis;
+	socket;
+	connectionGeneration = 0;
+	serviceLeaseGeneration = 0;
+	waiters = /* @__PURE__ */ new Map();
+	channelListeners = /* @__PURE__ */ new Map();
+	disconnectListeners = /* @__PURE__ */ new Set();
+	onMessage;
+	onClose;
+	constructor(createSocket, requestTimeoutMillis = 1e4) {
+		this.createSocket = createSocket;
+		this.requestTimeoutMillis = requestTimeoutMillis;
+		if (!Number.isSafeInteger(requestTimeoutMillis) || requestTimeoutMillis < 1e3 || requestTimeoutMillis > 6e4) throw new TypeError("Realtime request timeout must be between 1000 and 60000 milliseconds");
+	}
+	async connect(input) {
+		await this.disconnect();
+		if (input.signal.aborted) throw input.signal.reason;
+		const socket = await this.createSocket(input);
+		this.socket = socket;
+		this.onMessage = (event) => {
+			this.receive(event.data);
+		};
+		this.onClose = () => {
+			if (this.socket !== socket) return;
+			this.failConnection(new DshRemoteError("REMOTE_TRANSPORT_FAILED", "Realtime 连接意外关闭", true), false);
+		};
+		socket.addEventListener("message", this.onMessage);
+		socket.addEventListener("close", this.onClose);
+		await new Promise((resolve, reject) => {
+			const onOpen = () => {
+				cleanup();
+				resolve();
+			};
+			const onError = () => {
+				cleanup();
+				reject(new DshRemoteError("REMOTE_TRANSPORT_FAILED", "Realtime 连接失败", true));
+			};
+			const onEarlyClose = () => {
+				cleanup();
+				reject(new DshRemoteError("REMOTE_TRANSPORT_FAILED", "Realtime 在握手前关闭", true));
+			};
+			const onAbort = () => {
+				cleanup();
+				socket.close(1e3, "aborted");
+				reject(input.signal.reason);
+			};
+			const cleanup = () => {
+				clearTimeout(timer);
+				socket.removeEventListener("open", onOpen);
+				socket.removeEventListener("error", onError);
+				socket.removeEventListener("close", onEarlyClose);
+				input.signal.removeEventListener("abort", onAbort);
+			};
+			const timer = setTimeout(() => {
+				cleanup();
+				socket.close(1e3, "handshake timeout");
+				reject(new DshRemoteError("REMOTE_TRANSPORT_FAILED", "Realtime 连接握手超时", true));
+			}, this.requestTimeoutMillis);
+			timer.unref();
+			socket.addEventListener("open", onOpen);
+			socket.addEventListener("error", onError);
+			socket.addEventListener("close", onEarlyClose);
+			input.signal.addEventListener("abort", onAbort, { once: true });
+		});
+		const ready = this.waitForType("connection.ready", input.signal);
+		this.send({
+			type: "connection.open",
+			profile_ref: input.profileRef,
+			client_ref: input.clientRef
+		});
+		this.connectionGeneration = positive(await ready, "connection_generation");
+	}
+	async disconnect() {
+		this.failConnection(new DshRemoteError("REMOTE_TRANSPORT_FAILED", "Realtime 连接已关闭", true), true);
+	}
+	subscribeDisconnect(listener) {
+		this.disconnectListeners.add(listener);
+		return () => {
+			this.disconnectListeners.delete(listener);
+		};
+	}
+	async registerHost(input) {
+		if (!validRef(input.runtimeRef) || input.capabilities.some((capability) => !/^[A-Za-z0-9._:-]{1,128}$/.test(capability))) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "Realtime Host 服务描述无效");
+		const frame = await this.request({
+			type: "service.register",
+			namespace: "dsh_remote",
+			service: "host",
+			protocol: "dsh.remote",
+			protocol_major: 1,
+			descriptor: {
+				runtime_ref: input.runtimeRef,
+				capabilities: [...new Set(input.capabilities)].sort()
+			}
+		}, "service.registered", input.signal);
+		this.serviceLeaseGeneration = positive(frame, "service_lease_generation");
+		return { serviceLeaseGeneration: this.serviceLeaseGeneration };
+	}
+	async unregisterHost(signal) {
+		if (this.socket === void 0) {
+			this.serviceLeaseGeneration = 0;
+			return;
+		}
+		try {
+			await this.request({
+				type: "service.unregister",
+				namespace: "dsh_remote",
+				service: "host",
+				protocol: "dsh.remote",
+				protocol_major: 1
+			}, "service.unregistered", signal ?? new AbortController().signal);
+		} finally {
+			this.serviceLeaseGeneration = 0;
+		}
+	}
+	async subscribe(input) {
+		validateTarget(input.target, true);
+		if (input.afterSequence !== void 0 && (!Number.isSafeInteger(input.afterSequence) || input.afterSequence < 0)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "Realtime after_seq 无效");
+		await this.request({
+			type: "channel.subscribe",
+			namespace: "dsh_remote",
+			channel_ref: input.target.runtimeRef,
+			...wireTarget(input.target),
+			...input.afterSequence === void 0 ? {} : { after_seq: input.afterSequence }
+		}, "channel.subscribed", input.signal);
+		this.channelListeners.set(input.target.runtimeRef, (frame) => {
+			const event = frame.event;
+			if (event === null || typeof event !== "object" || Array.isArray(event)) return;
+			const source = event;
+			if (source.payload === null || typeof source.payload !== "object" || Array.isArray(source.payload)) return;
+			if (source.sender_role !== "host" && source.sender_role !== "controller") return;
+			if (source.runtime_ref !== input.target.runtimeRef || !positiveInteger(source.accepted_at) || !Number.isSafeInteger(source.target_host_lease_generation) || source.target_host_lease_generation < 0) return;
+			input.onEvent(source.payload, {
+				senderRole: source.sender_role,
+				runtimeRef: source.runtime_ref,
+				acceptedAtMillis: source.accepted_at,
+				targetHostLeaseGeneration: source.target_host_lease_generation,
+				...positiveInteger(source.seq) ? { transportSequence: source.seq } : {}
+			});
+			if (positiveInteger(source.seq)) this.send({
+				type: "channel.ack",
+				request_id: randomUUID(),
+				namespace: "dsh_remote",
+				channel_ref: input.target.runtimeRef,
+				seq: source.seq
+			});
+		});
+		let unsubscribed = false;
+		const unsubscribe = () => {
+			if (unsubscribed) return;
+			unsubscribed = true;
+			input.signal.removeEventListener("abort", unsubscribe);
+			this.channelListeners.delete(input.target.runtimeRef);
+			if (this.socket !== void 0) this.send({
+				type: "channel.unsubscribe",
+				request_id: randomUUID(),
+				namespace: "dsh_remote",
+				channel_ref: input.target.runtimeRef
+			});
+		};
+		input.signal.addEventListener("abort", unsubscribe, { once: true });
+		return unsubscribe;
+	}
+	async publish(input) {
+		validateTarget(input.target, false);
+		if (!validRef(input.commandId)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "Realtime command_id 无效");
+		const senderRole = input.target.hostProfileRef === "" ? "controller" : "host";
+		assertDshRemoteFramesFit({
+			target: input.target,
+			commandId: input.commandId,
+			direction: input.direction,
+			payload: input.payload,
+			senderRole
+		});
+		return { sequence: positive(await this.request({
+			type: "channel.publish",
+			namespace: "dsh_remote",
+			channel_ref: input.target.runtimeRef,
+			...wireTarget(input.target),
+			direction: input.direction,
+			command_id: input.commandId,
+			payload: input.payload
+		}, "channel.published", input.signal), "seq") };
+	}
+	async request(frame, expectedType, signal) {
+		const requestId = randomUUID();
+		const response = this.waitForRequest(requestId, expectedType, signal);
+		this.send({
+			...frame,
+			request_id: requestId
+		});
+		return await response;
+	}
+	waitForRequest(requestId, expectedType, signal) {
+		return new Promise((resolve, reject) => {
+			const cleanup = () => {
+				clearTimeout(timer);
+				signal.removeEventListener("abort", onAbort);
+			};
+			const onAbort = () => {
+				this.waiters.delete(requestId);
+				cleanup();
+				reject(signal.reason);
+			};
+			const timer = setTimeout(() => {
+				this.waiters.delete(requestId);
+				cleanup();
+				reject(new DshRemoteError("REMOTE_TRANSPORT_FAILED", `Realtime ${expectedType} 响应超时`, true));
+			}, this.requestTimeoutMillis);
+			timer.unref();
+			signal.addEventListener("abort", onAbort, { once: true });
+			this.waiters.set(requestId, {
+				resolve: (frame) => {
+					cleanup();
+					if (frame.type !== expectedType) reject(remoteError(frame));
+					else resolve(frame);
+				},
+				reject: (error) => {
+					cleanup();
+					reject(error);
+				}
+			});
+		});
+	}
+	waitForType(type, signal) {
+		return this.waitForRequest(`@type:${type}`, type, signal);
+	}
+	receive(data) {
+		let frame;
+		try {
+			const raw = typeof data === "string" ? data : data instanceof ArrayBuffer ? Buffer.from(data).toString("utf8") : String(data);
+			if (Buffer.byteLength(raw) > 61440) return;
+			const parsed = JSON.parse(raw);
+			if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed) || typeof parsed.type !== "string") return;
+			frame = parsed;
+		} catch {
+			return;
+		}
+		if (!validServerFrame(frame)) return;
+		if (frame.type === "connection.replaced") {
+			this.failConnection(new DshRemoteError("CONNECTION_REPLACED", "Realtime 连接已被同一客户端的新连接替换", true), false);
+			return;
+		}
+		const requestId = frame.request_id;
+		const waiterKey = typeof requestId === "string" && this.waiters.has(requestId) ? requestId : `@type:${frame.type}`;
+		const waiter = this.waiters.get(waiterKey);
+		if (waiter !== void 0) {
+			this.waiters.delete(waiterKey);
+			waiter.resolve(frame);
+			return;
+		}
+		if (frame.type === "channel.event" && typeof frame.channel_ref === "string") this.channelListeners.get(frame.channel_ref)?.(frame);
+	}
+	failConnection(error, expected) {
+		const socket = this.socket;
+		if (socket !== void 0 && this.onMessage !== void 0) socket.removeEventListener("message", this.onMessage);
+		if (socket !== void 0 && this.onClose !== void 0) socket.removeEventListener("close", this.onClose);
+		this.socket = void 0;
+		this.onMessage = void 0;
+		this.onClose = void 0;
+		this.connectionGeneration = 0;
+		this.serviceLeaseGeneration = 0;
+		socket?.close(1e3, expected ? "remote host stopped" : "remote connection failed");
+		for (const waiter of this.waiters.values()) waiter.reject(error);
+		this.waiters.clear();
+		this.channelListeners.clear();
+		if (!expected) for (const listener of this.disconnectListeners) listener(error);
+	}
+	send(frame) {
+		if (this.socket === void 0 || this.socket.readyState !== 1) throw new DshRemoteError("REMOTE_TRANSPORT_FAILED", "Realtime 尚未连接", true);
+		const encoded = JSON.stringify(frame);
+		if (Buffer.byteLength(encoded) > 61440) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "Realtime frame 超过 60KiB");
+		this.socket.send(encoded);
+	}
+};
+//#endregion
+//#region src/dsh-remote/runtime-store.ts
+const MAX_RUNTIMES_PER_ACCOUNT = 16;
+function emptyState() {
+	return {
+		schemaVersion: 2,
+		accounts: {}
+	};
+}
+function accountState(state, accountId) {
+	return state.accounts[accountId] ?? {
+		runtimes: {},
+		projections: {}
+	};
+}
+var DshRemoteRuntimeStore = class {
+	path;
+	state;
+	queue = Promise.resolve();
+	constructor(directory) {
+		this.path = join(directory, "dsh-remote", "runtime-state.json");
+	}
+	async activateRuntime(input) {
+		let result;
+		await this.update((state) => {
+			const account = accountState(state, input.accountId);
+			const current = account.runtimes[input.profileRef];
+			if (current === void 0 && Object.keys(account.runtimes).length >= MAX_RUNTIMES_PER_ACCOUNT) throw new DshRemoteError("RUNTIME_LIMIT_REACHED", "同一桌面账号最多注册 16 个 DSH Runtime");
+			result = {
+				runtimeRef: current?.runtimeRef ?? `runtime_${randomUUID()}`,
+				...account.desktopRef === void 0 ? {} : { desktopRef: account.desktopRef },
+				profileRef: input.profileRef,
+				accountId: input.accountId,
+				hostGeneration: (current?.hostGeneration ?? 0) + 1,
+				capabilities: [...new Set(input.capabilities)].sort(),
+				updatedAtMillis: input.nowMillis ?? Date.now()
+			};
+			account.runtimes[input.profileRef] = result;
+			state.accounts[input.accountId] = account;
+		});
+		return result;
+	}
+	async adoptRuntimeRef(accountId, profileRef, runtimeRef, hostGeneration) {
+		const normalized = runtimeRef.trim();
+		if (!/^[A-Za-z0-9._:-]{8,256}$/.test(normalized)) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "Backend Runtime 引用无效");
+		if (hostGeneration !== void 0 && (!Number.isSafeInteger(hostGeneration) || hostGeneration <= 0)) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "Backend Host generation 无效");
+		let result;
+		await this.update((state) => {
+			const account = accountState(state, accountId);
+			const runtime = account.runtimes[profileRef];
+			if (runtime === void 0) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "远控 Runtime 尚未注册");
+			if (Object.entries(account.runtimes).some(([otherProfile, other]) => otherProfile !== profileRef && other.runtimeRef === normalized)) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "Backend Runtime 引用与其他 Profile 冲突");
+			if (hostGeneration !== void 0 && hostGeneration < runtime.hostGeneration) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "Backend Host generation 发生回退");
+			result = {
+				...runtime,
+				runtimeRef: normalized,
+				hostGeneration: hostGeneration ?? runtime.hostGeneration,
+				updatedAtMillis: Date.now()
+			};
+			account.runtimes[profileRef] = result;
+			state.accounts[accountId] = account;
+		});
+		return result;
+	}
+	async bindDesktop(accountId, input) {
+		await this.update((state) => {
+			const account = accountState(state, accountId);
+			account.desktopRef = input.desktopRef;
+			for (const [profileRef, runtime] of Object.entries(account.runtimes)) account.runtimes[profileRef] = {
+				...runtime,
+				desktopRef: input.desktopRef
+			};
+			state.accounts[accountId] = account;
+		});
+	}
+	async renameDesktop(accountId, displayName) {
+		const normalized = displayName.trim();
+		if (normalized === "" || [...normalized].length > 80) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "电脑名称必须为 1 至 80 个字符");
+		await this.update((state) => {
+			const account = accountState(state, accountId);
+			account.displayName = normalized;
+			state.accounts[accountId] = account;
+		});
+	}
+	async account(accountId) {
+		return await this.read((state) => {
+			const account = accountState(state, accountId);
+			return {
+				...account.displayName === void 0 ? {} : { displayName: account.displayName },
+				...account.desktopRef === void 0 ? {} : { desktopRef: account.desktopRef },
+				runtimes: Object.values(account.runtimes).map((runtime) => ({ ...runtime }))
+			};
+		});
+	}
+	async projectionInventory(accountId, profileRef) {
+		return await this.read((state) => {
+			const inventory = accountState(state, accountId).projections[profileRef];
+			return inventory === void 0 ? {
+				workspaceRefs: [],
+				sessions: []
+			} : {
+				workspaceRefs: [...inventory.workspaceRefs],
+				sessions: inventory.sessions.map((value) => ({ ...value }))
+			};
+		});
+	}
+	async saveProjectionInventory(accountId, profileRef, inventory) {
+		await this.update((state) => {
+			const account = accountState(state, accountId);
+			account.projections[profileRef] = {
+				workspaceRefs: [...new Set(inventory.workspaceRefs)].sort(),
+				sessions: [...inventory.sessions].map((value) => ({ ...value })).sort((left, right) => left.sessionRef.localeCompare(right.sessionRef))
+			};
+			state.accounts[accountId] = account;
+		});
+	}
+	async read(reader) {
+		let result;
+		await this.serial(async () => {
+			result = reader(await this.load());
+		});
+		return result;
+	}
+	async update(mutator) {
+		await this.serial(async () => {
+			const state = await this.load();
+			mutator(state);
+			await this.persist(state);
+		});
+	}
+	async serial(work) {
+		const next = this.queue.then(work, work);
+		this.queue = next.then(() => void 0, () => void 0);
+		await next;
+	}
+	async load() {
+		if (this.state !== void 0) return this.state;
+		try {
+			const raw = JSON.parse(await readFile(this.path, "utf8"));
+			if (raw.schemaVersion !== 1 && raw.schemaVersion !== 2 || raw.accounts === null || typeof raw.accounts !== "object") throw new Error("schema mismatch");
+			const accounts = {};
+			for (const [accountId, value] of Object.entries(raw.accounts)) {
+				if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("account schema mismatch");
+				const source = value;
+				if (source.runtimes === null || typeof source.runtimes !== "object" || Array.isArray(source.runtimes)) throw new Error("runtime schema mismatch");
+				const runtimes = {};
+				for (const [profileRef, runtimeValue] of Object.entries(source.runtimes)) {
+					if (runtimeValue === null || typeof runtimeValue !== "object" || Array.isArray(runtimeValue)) throw new Error("runtime schema mismatch");
+					const runtime = { ...runtimeValue };
+					delete runtime.remoteEnabled;
+					runtimes[profileRef] = runtime;
+				}
+				const projections = {};
+				if (source.projections !== void 0) {
+					if (source.projections === null || typeof source.projections !== "object" || Array.isArray(source.projections)) throw new Error("projection inventory schema mismatch");
+					for (const [profileRef, inventoryValue] of Object.entries(source.projections)) {
+						if (inventoryValue === null || typeof inventoryValue !== "object" || Array.isArray(inventoryValue)) throw new Error("projection inventory schema mismatch");
+						const inventory = inventoryValue;
+						if (!Array.isArray(inventory.workspaceRefs) || !Array.isArray(inventory.sessions)) throw new Error("projection inventory schema mismatch");
+						projections[profileRef] = {
+							workspaceRefs: inventory.workspaceRefs.map((value) => {
+								if (typeof value !== "string" || value.trim() === "") throw new Error("workspace inventory schema mismatch");
+								return value;
+							}),
+							sessions: inventory.sessions.map((value) => {
+								if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("session inventory schema mismatch");
+								const session = value;
+								if (typeof session.sessionRef !== "string" || session.sessionRef.trim() === "" || typeof session.workspaceRef !== "string" || session.workspaceRef.trim() === "" || !Number.isSafeInteger(session.sourceUpdatedAt) || Number(session.sourceUpdatedAt) <= 0) throw new Error("session inventory schema mismatch");
+								return {
+									sessionRef: session.sessionRef,
+									workspaceRef: session.workspaceRef,
+									sourceUpdatedAt: Number(session.sourceUpdatedAt)
+								};
+							})
+						};
+					}
+				}
+				accounts[accountId] = {
+					...typeof source.displayName === "string" ? { displayName: source.displayName } : {},
+					...typeof source.desktopRef === "string" ? { desktopRef: source.desktopRef } : {},
+					runtimes,
+					projections
+				};
+			}
+			this.state = {
+				schemaVersion: 2,
+				accounts
+			};
+			if (raw.schemaVersion !== 2) await this.persist(this.state);
+		} catch (error) {
+			if (error.code !== "ENOENT") throw new DshRemoteError("REMOTE_STORAGE_FAILED", "远控 Runtime 状态已损坏", false, {}, { cause: error });
+			this.state = emptyState();
+			await this.persist(this.state);
+		}
+		return this.state;
+	}
+	async persist(state) {
+		const directory = dirname(this.path);
+		await mkdir(directory, {
+			recursive: true,
+			mode: 448
+		});
+		await securePrivateDirectory(directory);
+		const temporary = `${this.path}.${process.pid}.${randomUUID()}.tmp`;
+		await writeFile(temporary, `${JSON.stringify(state, void 0, 2)}\n`, { mode: 384 });
+		await securePrivateFile(temporary);
+		await rename(temporary, this.path);
+		await securePrivateFile(this.path);
+		this.state = state;
+	}
+};
+//#endregion
+//#region src/dsh-remote/runtime-secret-broker.ts
+function normalizedAccountId(accountId) {
+	const normalized = accountId.trim();
+	if (!/^[A-Za-z0-9._:-]{1,128}$/.test(normalized)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控账号标识无效");
+	return normalized;
+}
+function accountKey(accountId) {
+	return `dsh-remote-desktop:${normalizedAccountId(accountId)}`;
+}
+function decodeSecrets(raw, accountId) {
+	let value;
+	try {
+		value = JSON.parse(raw);
+	} catch (error) {
+		throw new DshRemoteError("REMOTE_STORAGE_FAILED", "远控本地密钥已损坏", false, {}, { cause: error });
+	}
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "远控本地密钥已损坏");
+	const source = value;
+	if (source.schemaVersion !== 1 && source.schemaVersion !== 2 || source.accountId !== accountId || typeof source.ledgerKey !== "string" || decodeBase64Url(source.ledgerKey).length !== 32) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "远控本地密钥合同不兼容");
+	return {
+		secrets: {
+			schemaVersion: 2,
+			accountId,
+			ledgerKey: source.ledgerKey
+		},
+		migrated: source.schemaVersion !== 2 || "identity" in source
+	};
+}
+/**
+* Stores only the local command-ledger encryption key and replay cursor.
+* These values protect local recovery data; they are not remote authority.
+*/
+var DshRemoteRuntimeSecretBroker = class {
+	store;
+	inFlight = /* @__PURE__ */ new Map();
+	cursorWrites = /* @__PURE__ */ new Map();
+	constructor(store) {
+		this.store = store;
+	}
+	async ledgerKey(accountId) {
+		return decodeBase64Url((await this.secrets(accountId)).ledgerKey);
+	}
+	async runtimeCursor(input) {
+		const key = this.cursorKey(input);
+		await this.cursorWrites.get(key)?.catch(() => void 0);
+		const raw = await this.store.read(key);
+		if (raw === void 0) return 0;
+		return this.parseCursor(raw, input).lastTransportSequence;
+	}
+	async putRuntimeCursor(input) {
+		if (!Number.isSafeInteger(input.lastTransportSequence) || input.lastTransportSequence < 0) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控 transport sequence 无效");
+		const key = this.cursorKey(input);
+		const writing = (this.cursorWrites.get(key) ?? Promise.resolve()).catch(() => void 0).then(async () => {
+			const raw = await this.store.read(key);
+			if (raw !== void 0 && this.parseCursor(raw, input).lastTransportSequence >= input.lastTransportSequence) return;
+			const value = {
+				schemaVersion: 2,
+				accountId: input.accountId,
+				runtimeRef: input.runtimeRef,
+				channelRef: input.channelRef,
+				lastTransportSequence: input.lastTransportSequence
+			};
+			await this.store.write(key, JSON.stringify(value));
+		});
+		this.cursorWrites.set(key, writing);
+		try {
+			await writing;
+		} finally {
+			if (this.cursorWrites.get(key) === writing) this.cursorWrites.delete(key);
+		}
+	}
+	async secrets(accountIdValue) {
+		const accountId = normalizedAccountId(accountIdValue);
+		const existing = this.inFlight.get(accountId);
+		if (existing !== void 0) return await existing;
+		const loading = this.loadOrCreate(accountId);
+		this.inFlight.set(accountId, loading);
+		try {
+			return await loading;
+		} catch (error) {
+			if (this.inFlight.get(accountId) === loading) this.inFlight.delete(accountId);
+			throw error;
+		}
+	}
+	async loadOrCreate(accountId) {
+		const key = accountKey(accountId);
+		const raw = await this.store.read(key);
+		if (raw !== void 0) {
+			const decoded = decodeSecrets(raw, accountId);
+			if (decoded.migrated) await this.store.write(key, JSON.stringify(decoded.secrets));
+			return decoded.secrets;
+		}
+		const created = {
+			schemaVersion: 2,
+			accountId,
+			ledgerKey: encodeBase64Url(randomBytes(32))
+		};
+		await this.store.write(key, JSON.stringify(created));
+		return created;
+	}
+	parseCursor(raw, input) {
+		let source;
+		try {
+			source = JSON.parse(raw);
+		} catch (error) {
+			throw new DshRemoteError("REMOTE_STORAGE_FAILED", "远控 transport cursor 已损坏", false, {}, { cause: error });
+		}
+		if (source.schemaVersion !== 2 || source.accountId !== input.accountId || source.runtimeRef !== input.runtimeRef || source.channelRef !== input.channelRef || typeof source.lastTransportSequence !== "number" || !Number.isSafeInteger(source.lastTransportSequence) || source.lastTransportSequence < 0) throw new DshRemoteError("REMOTE_STORAGE_FAILED", "远控 transport cursor 路由不匹配");
+		return source;
+	}
+	cursorKey(input) {
+		normalizedAccountId(input.accountId);
+		if ([input.runtimeRef, input.channelRef].some((value) => value.trim() === "" || value.length > 256)) throw new DshRemoteError("REMOTE_REQUEST_INVALID", "远控 transport cursor 路由无效");
+		return `dsh-remote-runtime-cursor:${createHash("sha256").update([
+			"dsh-remote-runtime-cursor-v2",
+			input.accountId,
+			input.runtimeRef,
+			input.channelRef
+		].join("\n")).digest("base64url")}`;
+	}
+};
+//#endregion
+//#region src/index.ts
+const ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS = "{\"prod-ed25519-20260819-1\":\"m1MKKU16hyu1b1KKIXMG+zKEr/GmhmvyUEreJzthTxs=\"}";
+const Config = Schema.object({
+	environment: Schema.union(["test", "prod"]).default("test"),
 	authBaseUrl: Schema.string().default("https://jotmo.senguo.me"),
 	subjectBaseUrl: Schema.string().default("https://jotmo-subject.senguo.me"),
 	recordBaseUrl: Schema.string().default("https://jotmo-record.senguo.me"),
@@ -14807,7 +18532,9 @@ const Config = Schema.object({
 	richMediaSendEnabled: Schema.boolean().default(true),
 	maxUploadBytes: Schema.number().min(1024).max(1024 * 1024 * 1024).default(100 * 1024 * 1024),
 	openclawProfile: Schema.string().default("dev"),
-	shareWebsite: Schema.string().default(ARKME_DEFAULT_SHARE_WEBSITE)
+	shareWebsite: Schema.string().default(ARKME_DEFAULT_SHARE_WEBSITE),
+	dshRemoteFeatureEnabled: Schema.boolean().default(false),
+	dshRemoteRealtimeBaseUrl: Schema.string().default("")
 });
 const name = "dsh-arkme";
 const inject = [
@@ -14815,8 +18542,7 @@ const inject = [
 	"tools",
 	"systemPrompt",
 	"pluginInventory",
-	"clientModules",
-	"apiProxy"
+	"clientModules"
 ];
 function readDshRuntimeVersion(dshBinPath) {
 	if (dshBinPath.trim() === "") return void 0;
@@ -14838,6 +18564,20 @@ function resolveArkmeAppVersion(configuredAppVersion, environment = process.env)
 	const injected = environment.ARKME_APP_VERSION?.trim();
 	return injected === void 0 || injected === "" ? void 0 : injected;
 }
+function resolvePluginUpdateEnabled(configured, environment = process.env) {
+	return configured && environment.ARKME_RUNTIME_MANAGED !== "1";
+}
+function dshRemoteClientId(accessToken) {
+	const parts = accessToken.split(".");
+	if (parts.length !== 3) return void 0;
+	try {
+		const claims = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+		const clientId = claims.client_id ?? claims.clientId;
+		return typeof clientId === "number" && Number.isSafeInteger(clientId) && clientId > 0 ? clientId : void 0;
+	} catch {
+		return;
+	}
+}
 function apply(ctx, config) {
 	config = resolveArkmeConfig(ctx, config);
 	const dshHome = process.env.DSH_HOME?.trim() || join(homedir(), ".dsh");
@@ -14853,14 +18593,9 @@ function apply(ctx, config) {
 		fileStateDirectory: join(stateDirectory, "files")
 	}, sessionStore, localDatabase, fetch, pendingSessionStore);
 	service.attachLocalFileOpener(async (path, signal) => {
-		const apiProxy = ctx.get("apiProxy");
-		if (apiProxy === void 0) throw new Error("当前 DSH 宿主未提供本机文件打开能力");
-		const response = await apiProxy.host.openPath({
-			rpcId: randomUUID(),
-			payload: { path }
-		}, signal);
-		if (!response.result.ok) throw new Error(response.result.error.message);
+		await openDshHostPath(ctx, path, signal);
 	});
+	let remoteHost;
 	const openClawStateDirectory = join(stateDirectory, "openclaw");
 	const openClawCli = createOpenClawCliAdapter({
 		profile: config.openclawProfile,
@@ -14876,7 +18611,7 @@ function apply(ctx, config) {
 	const extensionStore = new ArkmeExtensionInstallStore(extensionDirectory);
 	const clientModules = ctx.clientModules;
 	const updateManager = new ArkmePluginUpdateManager({
-		enabled: config.updateCheckEnabled,
+		enabled: resolvePluginUpdateEnabled(config.updateCheckEnabled),
 		channel: config.updateChannel,
 		updateServiceBaseUrl: config.updateServiceBaseUrl,
 		...config.updateArtifactBaseUrl.trim() === "" ? {} : { updateArtifactBaseUrl: config.updateArtifactBaseUrl },
@@ -14918,9 +18653,26 @@ function apply(ctx, config) {
 		installStoreDirectory: extensionDirectory,
 		...process.env.ARKME_DESKTOP_MANAGED_RESTART === "1" && process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH !== void 0 ? {
 			supervisedExitCode: 75,
-			supervisedPlanPath: process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH
+			supervisedPlanPath: process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH,
+			...process.env.ARKME_RUNTIME_RELEASE_ID === void 0 ? {} : { runtimeReleaseId: process.env.ARKME_RUNTIME_RELEASE_ID }
 		} : {}
 	});
+	const pluginInventory = ctx.get("pluginInventory");
+	const desktopQuarantine = new ArkmeDesktopExtensionQuarantine({
+		dshHome,
+		environment: config.environment,
+		installStore: extensionStore,
+		setProfileEnabled: async (packageName, enabled) => {
+			await extensionProfileInstaller.setEnabled(packageName, enabled);
+		},
+		requestRestart: async ({ packageName }) => {
+			await extensionProfileInstaller.restartDesktopQuarantine({ packageName });
+		},
+		isPackageActive: (packageName) => pluginInventory.list().entries.some((entry) => entry.moduleName === packageName && entry.enabled && entry.fiberPhase === "active")
+	});
+	desktopQuarantine.reconcile().catch((error) => {
+		ctx.logger.warn("Arkme desktop extension quarantine reconciliation failed: %s", error instanceof Error ? error.message : String(error));
+	});
 	const ownedExtensionStore = new ArkmeOwnedExtensionStore(extensionDirectory);
 	const ownedExtensionRefs = new ArkmeOwnedExtensionRefs();
 	const ownedExtensionHostInstanceId = randomUUID();
@@ -14946,7 +18698,7 @@ function apply(ctx, config) {
 			profileDirectory: extensionProfileDirectory,
 			profileInstaller: extensionProfileInstaller,
 			clientApiPath: config.routePath,
-			pluginInventory: ctx.get("pluginInventory"),
+			pluginInventory,
 			...dshRuntimeVersion === void 0 ? {} : { dshRuntimeVersion }
 		});
 		extensionManager = manager;
@@ -14998,13 +18750,65 @@ function apply(ctx, config) {
 			tasks.dispose();
 		}, "dsh-arkme: marketplace dynamic runner bridge");
 	});
+	ctx.inject(["apiProxy"], (apiCtx) => {
+		if (!config.dshRemoteFeatureEnabled) return;
+		const authenticatedSocketFactory = apiCtx.get("arkmeRemoteSocketFactory") ?? ((input) => createDefaultDshRemoteSocket({
+			realtimeBaseUrl: config.dshRemoteRealtimeBaseUrl,
+			accessToken: input.accessToken,
+			signal: input.signal
+		}));
+		const profileRefValue = process.env.DSH_PROFILE?.trim() || "web";
+		const profileRef = /^[A-Za-z0-9._:-]{1,128}$/.test(profileRefValue) ? profileRefValue : "web";
+		const hostClientRef = `host_${createHash("sha256").update(`dsh-remote-host-client-v1\n${stateDirectory}\n${profileRef}`).digest("base64url")}`;
+		const realtime = new ArkmeRemoteRealtimeTransport(async (input) => {
+			const session = await sessionStore.read();
+			if (session === void 0) throw new Error("Arkme session is unavailable");
+			return await authenticatedSocketFactory({
+				...input,
+				accessToken: session.accessToken
+			});
+		});
+		const apiProxy = new DshApiProxyAdapter(apiCtx.apiProxy);
+		const secretBroker = new DshRemoteRuntimeSecretBroker(createArkmeSecureValueStore(`${config.keychainServicePrefix}.${config.environment}.dsh-remote-desktop`));
+		const host = new ArkmeRemoteRealtimeHost({
+			featureEnabled: config.dshRemoteFeatureEnabled,
+			transportAvailable: true,
+			profileRef,
+			hostClientRef,
+			secretBroker,
+			runtimeStore: new DshRemoteRuntimeStore(stateDirectory),
+			controlPlane: new DshRemoteHttpControlPlane({ post: async (path, body, signal) => await service.dshRemotePost(path, body, signal) }),
+			realtime,
+			apiProxy,
+			readSession: async () => {
+				const session = await sessionStore.read();
+				if (session === void 0) return void 0;
+				const clientId = dshRemoteClientId(session.accessToken);
+				return clientId === void 0 ? void 0 : {
+					userId: session.userId,
+					clientId
+				};
+			},
+			ledgerForAccount: (accountId, key) => new DshRemoteCommandLedger(join(stateDirectory, "dsh-remote", "ledger", createHash("sha256").update(`dsh-remote-ledger-account-v1\n${accountId}`).digest("base64url")), key)
+		});
+		remoteHost = host;
+		apiCtx.effect(async () => {
+			await host.start();
+			return async () => {
+				if (remoteHost === host) remoteHost = void 0;
+				await host.stop();
+			};
+		}, "dsh-arkme: DSH remote Host lifecycle");
+	});
 	const handler = createArkmeHostApi(service, {
 		expectedPort: ctx.webServer.port,
 		allowNonLoopback: config.allowNonLoopback,
 		updateManager,
 		extensionManager: () => extensionManager,
 		extensionInstallTasks: () => extensionInstallTasks,
-		ownedExtensionInventory: () => ownedExtensionInventory
+		ownedExtensionInventory: () => ownedExtensionInventory,
+		remoteHost: () => remoteHost,
+		desktopQuarantine
 	});
 	const callAssetHandler = createOutgoingCallAssetHandler({ routePrefix: `${config.routePath}/call` });
 	const richMediaOptions = {
@@ -15037,9 +18841,9 @@ function apply(ctx, config) {
 	const harnessEmbedHandler = createHarnessEmbedRouteHandler({
 		getGraph: () => clientModules.graph(),
 		installedPackageNames: () => extensionStore.list().flatMap((item) => item.profilePackageName === void 0 ? [] : [item.profilePackageName]),
-		readRootHtml: async () => {
+		readRootHtml: async (request) => {
 			const response = await fetch(`http://127.0.0.1:${String(ctx.webServer.port)}/`, {
-				headers: { Accept: "text/html" },
+				headers: dshRootDocumentHeaders(request),
 				signal: AbortSignal.timeout(Math.min(config.requestTimeoutMs, 5e3))
 			});
 			if (!response.ok) throw new Error(`DSH root document returned HTTP ${String(response.status)}`);
@@ -15159,7 +18963,8 @@ function validateConfig(ctx, config) {
 			config.worldBaseUrl,
 			config.relationBaseUrl,
 			config.intelligentBaseUrl,
-			config.audioBaseUrl
+			config.audioBaseUrl,
+			...config.dshRemoteFeatureEnabled ? [config.dshRemoteRealtimeBaseUrl] : []
 		].filter((origin) => new URL(origin).hostname.endsWith(".senguo.me")).length > 0) throw new Error("dsh-arkme: production environment must explicitly configure every service origin");
 	}
 	if (!config.allowNonLoopback && ctx.webServer.host !== "127.0.0.1") throw new Error("dsh-arkme: Web UI must bind 127.0.0.1 unless allowNonLoopback is true");
@@ -15168,6 +18973,7 @@ function validateConfig(ctx, config) {
 	validatePluginUpdateServiceOrigin(config.updateServiceBaseUrl);
 	if (config.updateArtifactBaseUrl.trim() !== "") validatePluginUpdateArtifactOrigin(config.updateArtifactBaseUrl);
 	if (!/^[A-Za-z0-9_-]{1,64}$/.test(config.openclawProfile)) throw new Error("dsh-arkme: openclawProfile must be a fixed profile name");
+	if (config.dshRemoteFeatureEnabled && config.dshRemoteRealtimeBaseUrl.trim() === "") throw new Error("dsh-arkme: enabled DSH remote requires dshRemoteRealtimeBaseUrl");
 	for (const [label, raw] of [
 		["authBaseUrl", config.authBaseUrl],
 		["subjectBaseUrl", config.subjectBaseUrl],
@@ -15181,7 +18987,8 @@ function validateConfig(ctx, config) {
 		["relationBaseUrl", config.relationBaseUrl],
 		["intelligentBaseUrl", config.intelligentBaseUrl],
 		["audioBaseUrl", config.audioBaseUrl],
-		["shareWebsite", config.shareWebsite]
+		["shareWebsite", config.shareWebsite],
+		...config.dshRemoteFeatureEnabled ? [["dshRemoteRealtimeBaseUrl", config.dshRemoteRealtimeBaseUrl]] : []
 	]) {
 		const url = new URL(raw);
 		if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.pathname !== "/") throw new Error(`dsh-arkme: ${label} must be an HTTPS origin without credentials or path`);
@@ -15196,4 +19003,4 @@ function validateConfig(ctx, config) {
 	}
 }
 //#endregion
-export { ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS, ARKME_PROVIDER_CONTRACT_VERSION, ARKME_WORLD_PUBLISH_MAX_IMAGES, ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, ArkmeOutgoingCallError, ArkmeService, Config, apply, createOpenClawCliAdapter, inject, name, readDshRuntimeVersion, resolveArkmeAppVersion, resolveArkmeConfig };
+export { ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS, ARKME_PROVIDER_CONTRACT_VERSION, ARKME_WORLD_PUBLISH_MAX_IMAGES, ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, ArkmeOutgoingCallError, ArkmeService, Config, apply, createOpenClawCliAdapter, inject, name, readDshRuntimeVersion, resolveArkmeAppVersion, resolveArkmeConfig, resolvePluginUpdateEnabled };