@senguoyun/dsh-arkme 0.1.32 → 0.1.33

package/lib/extension-profile-restart-helper.js

@@ -35,15 +35,18 @@ function parseExtensionProfileRestartPlan(value) {
 		installStoreDirectory: stringValue(source.installStoreDirectory),
 		previousInstalled: source.previousInstalled !== null && typeof source.previousInstalled === "object" ? source.previousInstalled : void 0,
 		activationChange: source.activationChange === true ? true : void 0,
+		desktopQuarantineActivation: source.desktopQuarantineActivation === true ? true : void 0,
 		previousProfileIncluded: typeof source.previousProfileIncluded === "boolean" ? source.previousProfileIncluded : void 0,
 		healthUrl: stringValue(source.healthUrl),
-		logPath: stringValue(source.logPath)
+		logPath: stringValue(source.logPath),
+		runtimeReleaseId: stringValue(source.runtimeReleaseId)
 	};
 	if (![
 		1,
 		2,
-		3
-	].includes(plan.schemaVersion) || typeof plan.parentPid !== "number" || !Number.isSafeInteger(plan.parentPid) || plan.parentPid <= 0 || plan.execPath === void 0 || plan.dshBinPath === void 0 || plan.restartArgv.length === 0 || plan.dshHome === void 0 || plan.profileName === void 0 || plan.packageName === void 0 || plan.extensionId === void 0 || typeof plan.expectActive !== "boolean" || plan.installStoreDirectory === void 0 || plan.healthUrl === void 0 || plan.logPath === void 0 || plan.schemaVersion === 3 && (plan.activationChange !== true || plan.previousInstalled === void 0 || plan.previousProfileIncluded === void 0) || plan.schemaVersion !== 3 && plan.activationChange === true || (plan.schemaVersion === 1 ? !/^@arkme-local\/ext-[a-f0-9]{16}$/.test(plan.packageName) : !/^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/.test(plan.packageName))) throw new Error("extension restart plan is incomplete");
+		3,
+		4
+	].includes(plan.schemaVersion) || typeof plan.parentPid !== "number" || !Number.isSafeInteger(plan.parentPid) || plan.parentPid <= 0 || plan.execPath === void 0 || plan.dshBinPath === void 0 || plan.restartArgv.length === 0 || plan.dshHome === void 0 || plan.profileName === void 0 || plan.packageName === void 0 || plan.extensionId === void 0 || typeof plan.expectActive !== "boolean" || plan.installStoreDirectory === void 0 || plan.healthUrl === void 0 || plan.logPath === void 0 || plan.runtimeReleaseId !== void 0 && !/^electron-runtime-v1-[a-f0-9]{32}$/.test(plan.runtimeReleaseId) || plan.schemaVersion === 3 && (plan.activationChange !== true || plan.desktopQuarantineActivation === true || plan.previousInstalled === void 0 || plan.previousProfileIncluded === void 0) || plan.schemaVersion === 4 && (plan.activationChange !== true || plan.desktopQuarantineActivation !== true || plan.previousInstalled !== void 0 || plan.previousProfileIncluded !== false || plan.expectActive !== true || plan.extensionId !== `desktop-quarantine:${plan.packageName}`) || ![3, 4].includes(plan.schemaVersion) && plan.activationChange === true || plan.schemaVersion !== 4 && plan.desktopQuarantineActivation === true || (plan.schemaVersion === 1 ? !/^@arkme-local\/ext-[a-f0-9]{16}$/.test(plan.packageName) : !/^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/.test(plan.packageName))) throw new Error("extension restart plan is incomplete");
 	const health = new URL(plan.healthUrl);
 	if (health.protocol !== "http:" || !["127.0.0.1", "localhost"].includes(health.hostname)) throw new Error("extension restart health URL must be loopback HTTP");
 	return {
@@ -88,12 +91,21 @@ async function healthy(plan) {
 					"Content-Type": "application/json",
 					Origin: new URL(plan.healthUrl).origin
 				},
-				body: JSON.stringify({ operation: "extensions.installed-list" }),
+				body: JSON.stringify(plan.desktopQuarantineActivation === true ? {
+					operation: "extensions.quarantine.health",
+					params: { packageName: plan.packageName }
+				} : { operation: "extensions.installed-list" }),
 				signal: AbortSignal.timeout(2e3)
 			});
 			if (response.ok) {
 				const body = await response.json();
-				const installed = body.value?.find((item) => item.extensionId === plan.extensionId);
+				if (plan.desktopQuarantineActivation === true) {
+					const status = body.value;
+					if (body.ok === true && status?.profileEnabled === true && status.active === true) return true;
+					await new Promise((resolve) => setTimeout(resolve, 500));
+					continue;
+				}
+				const installed = Array.isArray(body.value) ? body.value.find((item) => item.extensionId === plan.extensionId) : void 0;
 				if (body.ok === true && (plan.activationChange === true ? plan.expectActive ? installed?.enabled === true && installed.active === true : installed?.enabled === false && installed.active === false : plan.expectActive ? installed?.active === true : installed === void 0)) return true;
 			}
 		} catch {}

package/lib/index.js

@@ -1,5 +1,5 @@
 import { a as securePrivateDirectory, c as securePrivateFileSync, i as prepareProfilePackageManager, n as isArkmeProfilePackageName, o as securePrivateDirectorySync, r as localExtensionPnpmArgs, s as securePrivateFile, t as applyArkmeProfileBundlePolicy } from "./profile-bundle-policy-CvojZuTD.js";
-import { $ as ARKME_RUNTIME_INSTANCE_ID, A as inspectNativeBundleArtifactV3, D as bundleSha256, E as arkmeSandboxEntryId, F as assertExtensionArtifactSize, G as validateVoiceprintPcm16Wav, I as canonicalExtensionJson, K as ARKME_DEFAULT_SHARE_WEBSITE, L as sha256Hex, M as packLocalNativeBundleDirectoryV3, N as readNativeBundleTarballV3, O as canonicalBundleJson, P as renderArkmeSandboxHostEntry, Q as ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, R as unpackArkmeExtension, S as ARKME_BUNDLE_ARTIFACT_KIND, T as ArkmeBundleArtifactError, U as ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE, W as ArkmeService, Z as ARKME_WORLD_PUBLISH_MAX_IMAGES, _ as arkmeClientContentDigest, at as ArkmePluginError, b as verifyExtensionResolutionSignature, c as persistentExtensionBundleDirectory, d as readPersistentExtensionActivation, et as ARKME_TOOL_FILE_MAX_BYTES, f as refreshPersistentClientWrapper, g as activeProfileExtensionOwnerConflicts, h as renderArkmeBundleClientBundle, i as invokePersistentArkmeExtension, it as isArkmeBotAvatarRef, j as packBundleFiles, k as inspectBundleArtifact, l as persistentExtensionPackageIdentity, m as writePersistentExtensionActivation, nt as arkmeNormalizedFileMimeType, o as persistentArkmeExtensionRuntimeState, ot as ArkmeOutgoingCallError, p as repairPersistentExtensionInstallation, q as ARKME_PROVIDER_CONTRACT_VERSION, r as deactivatePersistentArkmeExtension, rt as arkmePickedFileKind, s as materializePersistentExtensionBundle, t as activatePersistentArkmeExtension, tt as arkmeCanInlineLocalFile, u as quarantinePersistentExtension, v as arkmeClientContentDigestFromSource, w as ARKME_NATIVE_BUNDLE_ARTIFACT_KIND, x as verifyNativeBundleResolutionSignature, y as verifyBundleResolutionSignature, z as ARKME_EXTENSION_FORMAT } from "./persistent-runtime-CFeIg6aw.js";
+import { $ as ARKME_RUNTIME_INSTANCE_ID, A as inspectNativeBundleArtifactV3, D as bundleSha256, E as arkmeSandboxEntryId, F as assertExtensionArtifactSize, G as validateVoiceprintPcm16Wav, I as canonicalExtensionJson, K as ARKME_DEFAULT_SHARE_WEBSITE, L as sha256Hex, M as packLocalNativeBundleDirectoryV3, N as readNativeBundleTarballV3, O as canonicalBundleJson, P as renderArkmeSandboxHostEntry, Q as ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, R as unpackArkmeExtension, S as ARKME_BUNDLE_ARTIFACT_KIND, T as ArkmeBundleArtifactError, U as ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE, W as ArkmeService, Z as ARKME_WORLD_PUBLISH_MAX_IMAGES, _ as arkmeClientContentDigest, at as ArkmePluginError, b as verifyExtensionResolutionSignature, c as persistentExtensionBundleDirectory, d as readPersistentExtensionActivation, et as ARKME_TOOL_FILE_MAX_BYTES, f as refreshPersistentClientWrapper, g as activeProfileExtensionOwnerConflicts, h as renderArkmeBundleClientBundle, i as invokePersistentArkmeExtension, it as isArkmeBotAvatarRef, j as packBundleFiles, k as inspectBundleArtifact, l as persistentExtensionPackageIdentity, m as writePersistentExtensionActivation, nt as arkmeNormalizedFileMimeType, o as persistentArkmeExtensionRuntimeState, ot as ArkmeOutgoingCallError, p as repairPersistentExtensionInstallation, q as ARKME_PROVIDER_CONTRACT_VERSION, r as deactivatePersistentArkmeExtension, rt as arkmePickedFileKind, s as materializePersistentExtensionBundle, t as activatePersistentArkmeExtension, tt as arkmeCanInlineLocalFile, u as quarantinePersistentExtension, v as arkmeClientContentDigestFromSource, w as ARKME_NATIVE_BUNDLE_ARTIFACT_KIND, x as verifyNativeBundleResolutionSignature, y as verifyBundleResolutionSignature, z as ARKME_EXTENSION_FORMAT } from "./persistent-runtime-DUqdJv8K.js";
 import { _ as parsePluginUpdateManifest, b as validatePluginUpdateServiceOrigin, d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginArtifactPath, h as downloadAndCachePluginArtifact, m as PluginUpdateArtifactError, n as buildTargetInstallArgs, o as reconcilePluginUpdaterProfilePolicy, p as ARKME_PLUGIN_PACKAGE_NAME$1, t as assertTargetArtifactIntegrity, u as detachManagedProfilePluginLink, v as pluginUpdateEndpointUrl, y as validatePluginUpdateArtifactOrigin } from "./plugin-updater-helper-BByw0ZyG.js";
 import { i as invokeArkmeBundle, n as arkmeBundleActive, r as deactivateArkmeBundle } from "./bundle-runtime-BTzRlc6V.js";
 import { t as ArkmeExtensionInstallStore } from "./install-store-C1tAM346.js";
@@ -10,7 +10,7 @@ import { dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:p
 import { fileURLToPath, pathToFileURL } from "node:url";
 import Schema from "@deepseek-ai/schemastery";
 import { execFile, spawn } from "node:child_process";
-import { chmod as chmod$1, mkdir, open, readFile, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { chmod as chmod$1, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { promisify } from "node:util";
 import { createServer } from "node:http";
 import { Readable } from "node:stream";
@@ -1893,11 +1893,13 @@ function createArkmeHostApi(service, options) {
 				"extensions.persistent.invoke",
 				"extensions.bundle.invoke",
 				"extensions.mine.publish",
+				"extensions.quarantine.dismiss",
+				"extensions.quarantine.reenable",
 				"remote.renameDesktop"
 			].includes(request.operation) && origin === void 0) throw new ArkmePluginError("origin-required", "扩展变更必须从当前 DSH 页面发起", false, 403);
 			writeJson$4(res, 200, {
 				ok: true,
-				value: await dispatchArkmeHostOperation(service, request.operation, params, options.updateManager, options.extensionManager?.(), options.extensionInstallTasks?.(), options.ownedExtensionInventory?.(), controller.signal, options.remoteHost?.())
+				value: await dispatchArkmeHostOperation(service, request.operation, params, options.updateManager, options.extensionManager?.(), options.extensionInstallTasks?.(), options.ownedExtensionInventory?.(), controller.signal, options.remoteHost?.(), options.desktopQuarantine)
 			});
 		} catch (error) {
 			if (controller.signal.aborted && res.destroyed) return;
@@ -1915,7 +1917,7 @@ function createArkmeHostApi(service, options) {
 		}
 	};
 }
-async function dispatchArkmeHostOperation(service, operation, params, updateManager, extensionManager, extensionInstallTasks, ownedExtensionInventory, requestSignal, remoteHost) {
+async function dispatchArkmeHostOperation(service, operation, params, updateManager, extensionManager, extensionInstallTasks, ownedExtensionInventory, requestSignal, remoteHost, desktopQuarantine) {
 	switch (operation) {
 		case "provider.capabilities": return service.providerCapabilities();
 		case "provider.instance": return { instanceId: ARKME_RUNTIME_INSTANCE_ID };
@@ -2451,6 +2453,10 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 		case "extensions.share.resolve": return (await enrichExtensionAuthors(service, [await requireExtensionManager(extensionManager).resolveSharedCatalogDetail(stringParam(params, "shareRef"))]))[0];
 		case "extensions.delete": return await requireOwnedExtensionInventory(ownedExtensionInventory).delete({ extensionId: stringParam(params, "extensionId") });
 		case "extensions.installed-list": return requireExtensionManager(extensionManager).listInstalled();
+		case "extensions.quarantine.status": return await requireDesktopQuarantine(desktopQuarantine).status();
+		case "extensions.quarantine.dismiss": return await requireDesktopQuarantine(desktopQuarantine).dismiss(stringParam(params, "packageName"));
+		case "extensions.quarantine.reenable": return await requireDesktopQuarantine(desktopQuarantine).reenable(stringParam(params, "packageName"));
+		case "extensions.quarantine.health": return await requireDesktopQuarantine(desktopQuarantine).health(stringParam(params, "packageName"));
 		case "extensions.mine.list": return await requireOwnedExtensionInventory(ownedExtensionInventory).list({ ...stringParam(params, "currentSessionId").trim() === "" ? {} : { currentSessionId: stringParam(params, "currentSessionId").trim() } });
 		case "extensions.mine.publish": return await requireOwnedExtensionInventory(ownedExtensionInventory).publish({
 			ownedRef: stringParam(params, "ownedRef"),
@@ -2531,6 +2537,10 @@ function requireExtensionManager(manager) {
 	if (manager === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "当前 DSH 未加载 Dynamic Cordis Runner，市集不可用", false, 503);
 	return manager;
 }
+function requireDesktopQuarantine(quarantine) {
+	if (quarantine === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "桌面扩展恢复状态尚未就绪", false, 503);
+	return quarantine;
+}
 function requireOwnedExtensionInventory(inventory) {
 	if (inventory === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "扩展运行时尚未就绪", true, 503);
 	return inventory;
@@ -4638,6 +4648,247 @@ var ArkmeRealtimeEvents = class {
 	}
 };
 //#endregion
+//#region src/extensions/desktop-quarantine.ts
+const QUARANTINE_DIRECTORY_NAME = "desktop-extension-quarantine";
+const RECEIPT_FILE_NAME = "receipt.json";
+const PACKAGE_NAME_PATTERN = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
+const QUARANTINE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const RUNTIME_RELEASE_PATTERN = /^electron-runtime-v1-[a-f0-9]{32}$/;
+const MAX_FAILURE_SUMMARY_LENGTH = 2e3;
+const MAX_FAILURE_TAIL_LENGTH = 16384;
+var ArkmeDesktopExtensionQuarantine = class {
+	options;
+	now;
+	constructor(options) {
+		this.options = options;
+		this.now = options.now ?? (() => Date.now());
+	}
+	async reconcile() {
+		for (const stored of await this.readReceipts("active")) {
+			let changed = false;
+			for (const entry of stored.receipt.entries) {
+				if (entry.resolvedAtMillis !== void 0) continue;
+				const installed = this.installedByPackage(entry.packageName);
+				if (installed !== void 0 && (installed.enabled || installed.active || installed.lastError !== stored.receipt.failureSummary)) this.options.installStore.put({
+					...installed,
+					enabled: false,
+					active: false,
+					lastError: stored.receipt.failureSummary
+				});
+				if (entry.synchronizedAtMillis === void 0) {
+					entry.synchronizedAtMillis = this.now();
+					changed = true;
+				}
+			}
+			if (changed) await this.writeStoredReceipt(stored);
+		}
+	}
+	async status() {
+		const stored = (await this.readReceipts("active")).sort((left, right) => right.receipt.createdAtMillis - left.receipt.createdAtMillis)[0];
+		if (stored === void 0) return {
+			active: false,
+			entries: []
+		};
+		return {
+			active: true,
+			quarantineId: stored.receipt.quarantineId,
+			mode: stored.receipt.mode,
+			failureSummary: stored.receipt.failureSummary,
+			failureLogTail: stored.receipt.failureLogTail,
+			entries: stored.receipt.entries.filter((entry) => entry.resolvedAtMillis === void 0).map((entry) => ({
+				packageName: entry.packageName,
+				...this.installedByPackage(entry.packageName) === void 0 ? {} : { extensionId: this.installedByPackage(entry.packageName).extensionId },
+				dismissed: entry.notificationDismissedAtMillis !== void 0,
+				resolved: false
+			}))
+		};
+	}
+	async dismiss(packageName) {
+		const stored = await this.activeReceiptForPackage(packageName);
+		const entry = stored.receipt.entries.find((item) => item.packageName === packageName);
+		if (entry.notificationDismissedAtMillis === void 0) {
+			entry.notificationDismissedAtMillis = this.now();
+			await this.writeStoredReceipt(stored);
+		}
+	}
+	async reenable(packageName) {
+		const stored = await this.activeReceiptForPackage(packageName);
+		const entry = stored.receipt.entries.find((item) => item.packageName === packageName);
+		entry.reenableRequestedAtMillis = this.now();
+		await this.writeStoredReceipt(stored);
+		let profileEnabled = false;
+		try {
+			await this.options.setProfileEnabled(packageName, true);
+			profileEnabled = true;
+			await this.options.requestRestart({
+				packageName,
+				previousProfileIncluded: false
+			});
+		} catch (error) {
+			if (profileEnabled) await this.options.setProfileEnabled(packageName, false).catch(() => void 0);
+			delete entry.reenableRequestedAtMillis;
+			await this.writeStoredReceipt(stored).catch(() => void 0);
+			throw error;
+		}
+	}
+	async resolveActive() {
+		for (const stored of await this.readReceipts("active")) {
+			let changed = false;
+			for (const entry of stored.receipt.entries) {
+				if (entry.resolvedAtMillis !== void 0) continue;
+				if (entry.reenableRequestedAtMillis !== void 0 && this.options.isPackageActive(entry.packageName)) {
+					entry.resolvedAtMillis = this.now();
+					delete entry.reenableRequestedAtMillis;
+					const installed = this.installedByPackage(entry.packageName);
+					if (installed !== void 0) {
+						const { lastError: _lastError, ...retained } = installed;
+						this.options.installStore.put({
+							...retained,
+							enabled: true,
+							active: true
+						});
+					}
+					changed = true;
+					continue;
+				}
+				if (entry.reenableRequestedAtMillis !== void 0) {
+					await this.options.setProfileEnabled(entry.packageName, false);
+					delete entry.reenableRequestedAtMillis;
+					const installed = this.installedByPackage(entry.packageName);
+					if (installed !== void 0) this.options.installStore.put({
+						...installed,
+						enabled: false,
+						active: false
+					});
+					changed = true;
+				}
+			}
+			if (stored.receipt.entries.every((entry) => entry.resolvedAtMillis !== void 0)) {
+				stored.receipt.phase = "resolved";
+				changed = true;
+			}
+			if (changed) await this.writeStoredReceipt(stored);
+		}
+	}
+	async health(packageName) {
+		if ((await this.activeReceiptForPackage(packageName)).receipt.entries.find((item) => item.packageName === packageName).reenableRequestedAtMillis === void 0) throw new Error("该扩展尚未请求重新启用");
+		const profileEnabled = await this.profileContains(packageName);
+		const active = this.options.isPackageActive(packageName);
+		if (profileEnabled && active) await this.resolveActive();
+		return {
+			profileEnabled,
+			active
+		};
+	}
+	async activeReceiptForPackage(packageName) {
+		if (!isPackageName(packageName) || isProtectedPackage(packageName)) throw new Error("隔离扩展包名无效");
+		const matches = (await this.readReceipts("active")).filter((stored) => stored.receipt.entries.some((entry) => entry.packageName === packageName && entry.resolvedAtMillis === void 0));
+		matches.sort((left, right) => right.receipt.createdAtMillis - left.receipt.createdAtMillis);
+		if (matches[0] === void 0) throw new Error("该扩展没有活动的启动隔离记录");
+		return matches[0];
+	}
+	installedByPackage(packageName) {
+		return this.options.installStore.list().find((item) => item.profilePackageName === packageName);
+	}
+	async profileContains(packageName) {
+		try {
+			const value = JSON.parse(await readFile(join(this.options.dshHome, "profiles", "web", "package.json"), "utf8"));
+			if (!isObject(value) || !isObject(value.dsh) || !isObject(value.dsh.profile) || !Array.isArray(value.dsh.profile.bundles)) return false;
+			return value.dsh.profile.bundles.some((item) => item === packageName);
+		} catch {
+			return false;
+		}
+	}
+	async readReceipts(phase) {
+		const root = join(this.options.dshHome, "arkme-self", QUARANTINE_DIRECTORY_NAME);
+		const directories = await readdir(root, { withFileTypes: true }).catch((error) => {
+			if (error.code === "ENOENT") return [];
+			throw error;
+		});
+		const receipts = [];
+		for (const directory of directories) {
+			if (!directory.isDirectory() || !QUARANTINE_ID_PATTERN.test(directory.name)) continue;
+			const receiptPath = join(root, directory.name, RECEIPT_FILE_NAME);
+			try {
+				const receipt = parseReceipt(await readFile(receiptPath, "utf8"));
+				if (receipt.quarantineId !== directory.name || receipt.environment !== this.options.environment || phase !== void 0 && receipt.phase !== phase) continue;
+				receipts.push({
+					path: receiptPath,
+					receipt
+				});
+			} catch {}
+		}
+		return receipts;
+	}
+	async writeStoredReceipt(stored) {
+		stored.receipt.updatedAtMillis = this.now();
+		await writeTextAtomically(stored.path, `${JSON.stringify(stored.receipt, void 0, 2)}\n`);
+	}
+};
+function parseReceipt(text) {
+	const value = JSON.parse(text);
+	if (!isObject(value) || value.schemaVersion !== 1 || typeof value.quarantineId !== "string" || !QUARANTINE_ID_PATTERN.test(value.quarantineId) || value.environment !== "prod" && value.environment !== "test" || ![
+		"pending",
+		"active",
+		"restored",
+		"resolved"
+	].includes(String(value.phase)) || value.mode !== "targeted" && value.mode !== "local-safe-mode" || !Number.isSafeInteger(value.createdAtMillis) || !Number.isSafeInteger(value.updatedAtMillis) || value.runtimeReleaseId !== void 0 && (typeof value.runtimeReleaseId !== "string" || !RUNTIME_RELEASE_PATTERN.test(value.runtimeReleaseId)) || typeof value.failureSummary !== "string" || value.failureSummary.trim() === "" || value.failureSummary.length > MAX_FAILURE_SUMMARY_LENGTH || typeof value.failureLogTail !== "string" || value.failureLogTail.length > MAX_FAILURE_TAIL_LENGTH || !Array.isArray(value.entries) || value.entries.length === 0) throw new Error("桌面扩展隔离记录无效");
+	const entries = value.entries.map((raw) => parseEntry(raw));
+	if (new Set(entries.map((entry) => entry.packageName)).size !== entries.length) throw new Error("桌面扩展隔离记录包含重复扩展");
+	return {
+		schemaVersion: 1,
+		quarantineId: value.quarantineId,
+		environment: value.environment,
+		phase: value.phase,
+		mode: value.mode,
+		createdAtMillis: Number(value.createdAtMillis),
+		updatedAtMillis: Number(value.updatedAtMillis),
+		...typeof value.runtimeReleaseId === "string" ? { runtimeReleaseId: value.runtimeReleaseId } : {},
+		failureSummary: value.failureSummary,
+		failureLogTail: value.failureLogTail,
+		entries
+	};
+}
+function parseEntry(value) {
+	if (!isObject(value) || typeof value.packageName !== "string" || !isPackageName(value.packageName) || isProtectedPackage(value.packageName) || typeof value.dependencySpec !== "string" || value.dependencySpec.length === 0 || value.dependencySpec.length > 4096 || !Number.isSafeInteger(value.originalBundleIndex) || Number(value.originalBundleIndex) < 0 || !optionalMillis(value.synchronizedAtMillis) || !optionalMillis(value.notificationDismissedAtMillis) || !optionalMillis(value.reenableRequestedAtMillis) || !optionalMillis(value.resolvedAtMillis)) throw new Error("桌面扩展隔离条目无效");
+	return {
+		packageName: value.packageName,
+		dependencySpec: value.dependencySpec,
+		originalBundleIndex: Number(value.originalBundleIndex),
+		...value.synchronizedAtMillis === void 0 ? {} : { synchronizedAtMillis: Number(value.synchronizedAtMillis) },
+		...value.notificationDismissedAtMillis === void 0 ? {} : { notificationDismissedAtMillis: Number(value.notificationDismissedAtMillis) },
+		...value.reenableRequestedAtMillis === void 0 ? {} : { reenableRequestedAtMillis: Number(value.reenableRequestedAtMillis) },
+		...value.resolvedAtMillis === void 0 ? {} : { resolvedAtMillis: Number(value.resolvedAtMillis) }
+	};
+}
+function optionalMillis(value) {
+	return value === void 0 || Number.isSafeInteger(value) && Number(value) >= 0;
+}
+function isObject(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isPackageName(value) {
+	return PACKAGE_NAME_PATTERN.test(value);
+}
+function isProtectedPackage(packageName) {
+	return packageName === "@senguoyun/dsh-arkme" || packageName.startsWith("@deepseek-ai/");
+}
+async function writeTextAtomically(filePath, text) {
+	const temporaryPath = `${filePath}.${process.pid}.${randomUUID()}.tmp`;
+	try {
+		const handle = await open(temporaryPath, "wx", 384);
+		try {
+			await handle.writeFile(text, "utf8");
+			await handle.sync();
+		} finally {
+			await handle.close();
+		}
+		await rename(temporaryPath, filePath);
+	} finally {
+		await rm(temporaryPath, { force: true }).catch(() => void 0);
+	}
+}
+//#endregion
 //#region src/extensions/install-tasks.ts
 const TASK_RETENTION_MILLIS = 600 * 1e3;
 const MAX_RETAINED_TASKS = 100;
@@ -7915,7 +8166,7 @@ var ArkmeExtensionProfileInstaller = class {
 		await this.mutationTail;
 		if (this.options.stateDirectory === void 0 || this.options.healthUrl === void 0 || this.options.helperPath === void 0 || this.options.restartArgv === void 0 || this.options.installStoreDirectory === void 0) return;
 		const plan = {
-			schemaVersion: input.activationChange === true ? 3 : input.targetBundlePath?.endsWith(".tgz") === true || input.previousBundlePath?.endsWith(".tgz") === true || input.previousInstalled?.executionModel !== void 0 ? 2 : 1,
+			schemaVersion: input.desktopQuarantineActivation === true ? 4 : input.activationChange === true ? 3 : input.targetBundlePath?.endsWith(".tgz") === true || input.previousBundlePath?.endsWith(".tgz") === true || input.previousInstalled?.executionModel !== void 0 ? 2 : 1,
 			parentPid: process.pid,
 			execPath: this.options.execPath,
 			dshBinPath: this.options.dshBinPath,
@@ -7935,8 +8186,10 @@ var ArkmeExtensionProfileInstaller = class {
 				activationChange: true,
 				previousProfileIncluded: input.previousProfileIncluded === true
 			} : {},
+			...input.desktopQuarantineActivation === true ? { desktopQuarantineActivation: true } : {},
 			healthUrl: this.options.healthUrl,
-			logPath: join(this.options.stateDirectory, "extension-profile-restart.log")
+			logPath: join(this.options.stateDirectory, "extension-profile-restart.log"),
+			...this.options.runtimeReleaseId === void 0 ? {} : { runtimeReleaseId: this.options.runtimeReleaseId }
 		};
 		if (this.options.supervisedExitCode !== void 0) {
 			if (!Number.isSafeInteger(this.options.supervisedExitCode) || this.options.supervisedExitCode < 1 || this.options.supervisedExitCode > 255) throw new Error("受监督重启退出码无效");
@@ -7985,6 +8238,17 @@ var ArkmeExtensionProfileInstaller = class {
 			setTimeout(() => process.kill(process.pid, "SIGTERM"), 800).unref?.();
 		}))();
 	}
+	async restartDesktopQuarantine(input) {
+		if (!isArkmeProfilePackageName(input.packageName)) throw new Error("扩展 Bundle 包名无效");
+		await this.restart({
+			extensionId: `desktop-quarantine:${input.packageName}`,
+			packageName: input.packageName,
+			expectActive: true,
+			activationChange: true,
+			desktopQuarantineActivation: true,
+			previousProfileIncluded: false
+		});
+	}
 	async run(args) {
 		if (this.options.run !== void 0) return await this.options.run(args);
 		if (!existsSync(this.options.execPath) || !existsSync(this.options.dshBinPath)) throw new Error("当前 DSH 运行方式不支持修改 Profile 插件");
@@ -18300,6 +18564,9 @@ function resolveArkmeAppVersion(configuredAppVersion, environment = process.env)
 	const injected = environment.ARKME_APP_VERSION?.trim();
 	return injected === void 0 || injected === "" ? void 0 : injected;
 }
+function resolvePluginUpdateEnabled(configured, environment = process.env) {
+	return configured && environment.ARKME_RUNTIME_MANAGED !== "1";
+}
 function dshRemoteClientId(accessToken) {
 	const parts = accessToken.split(".");
 	if (parts.length !== 3) return void 0;
@@ -18344,7 +18611,7 @@ function apply(ctx, config) {
 	const extensionStore = new ArkmeExtensionInstallStore(extensionDirectory);
 	const clientModules = ctx.clientModules;
 	const updateManager = new ArkmePluginUpdateManager({
-		enabled: config.updateCheckEnabled,
+		enabled: resolvePluginUpdateEnabled(config.updateCheckEnabled),
 		channel: config.updateChannel,
 		updateServiceBaseUrl: config.updateServiceBaseUrl,
 		...config.updateArtifactBaseUrl.trim() === "" ? {} : { updateArtifactBaseUrl: config.updateArtifactBaseUrl },
@@ -18386,9 +18653,26 @@ function apply(ctx, config) {
 		installStoreDirectory: extensionDirectory,
 		...process.env.ARKME_DESKTOP_MANAGED_RESTART === "1" && process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH !== void 0 ? {
 			supervisedExitCode: 75,
-			supervisedPlanPath: process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH
+			supervisedPlanPath: process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH,
+			...process.env.ARKME_RUNTIME_RELEASE_ID === void 0 ? {} : { runtimeReleaseId: process.env.ARKME_RUNTIME_RELEASE_ID }
 		} : {}
 	});
+	const pluginInventory = ctx.get("pluginInventory");
+	const desktopQuarantine = new ArkmeDesktopExtensionQuarantine({
+		dshHome,
+		environment: config.environment,
+		installStore: extensionStore,
+		setProfileEnabled: async (packageName, enabled) => {
+			await extensionProfileInstaller.setEnabled(packageName, enabled);
+		},
+		requestRestart: async ({ packageName }) => {
+			await extensionProfileInstaller.restartDesktopQuarantine({ packageName });
+		},
+		isPackageActive: (packageName) => pluginInventory.list().entries.some((entry) => entry.moduleName === packageName && entry.enabled && entry.fiberPhase === "active")
+	});
+	desktopQuarantine.reconcile().catch((error) => {
+		ctx.logger.warn("Arkme desktop extension quarantine reconciliation failed: %s", error instanceof Error ? error.message : String(error));
+	});
 	const ownedExtensionStore = new ArkmeOwnedExtensionStore(extensionDirectory);
 	const ownedExtensionRefs = new ArkmeOwnedExtensionRefs();
 	const ownedExtensionHostInstanceId = randomUUID();
@@ -18414,7 +18698,7 @@ function apply(ctx, config) {
 			profileDirectory: extensionProfileDirectory,
 			profileInstaller: extensionProfileInstaller,
 			clientApiPath: config.routePath,
-			pluginInventory: ctx.get("pluginInventory"),
+			pluginInventory,
 			...dshRuntimeVersion === void 0 ? {} : { dshRuntimeVersion }
 		});
 		extensionManager = manager;
@@ -18523,7 +18807,8 @@ function apply(ctx, config) {
 		extensionManager: () => extensionManager,
 		extensionInstallTasks: () => extensionInstallTasks,
 		ownedExtensionInventory: () => ownedExtensionInventory,
-		remoteHost: () => remoteHost
+		remoteHost: () => remoteHost,
+		desktopQuarantine
 	});
 	const callAssetHandler = createOutgoingCallAssetHandler({ routePrefix: `${config.routePath}/call` });
 	const richMediaOptions = {
@@ -18718,4 +19003,4 @@ function validateConfig(ctx, config) {
 	}
 }
 //#endregion
-export { ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS, ARKME_PROVIDER_CONTRACT_VERSION, ARKME_WORLD_PUBLISH_MAX_IMAGES, ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, ArkmeOutgoingCallError, ArkmeService, Config, apply, createOpenClawCliAdapter, inject, name, readDshRuntimeVersion, resolveArkmeAppVersion, resolveArkmeConfig };
+export { ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS, ARKME_PROVIDER_CONTRACT_VERSION, ARKME_WORLD_PUBLISH_MAX_IMAGES, ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, ArkmeOutgoingCallError, ArkmeService, Config, apply, createOpenClawCliAdapter, inject, name, readDshRuntimeVersion, resolveArkmeAppVersion, resolveArkmeConfig, resolvePluginUpdateEnabled };

package/lib/persistent-extension.js

@@ -1,2 +1,2 @@
-import { a as persistentArkmeExtensionActive, i as invokePersistentArkmeExtension, n as applyPersistentArkmeHostExtension, o as persistentArkmeExtensionRuntimeState, r as deactivatePersistentArkmeExtension, t as activatePersistentArkmeExtension } from "./persistent-runtime-CFeIg6aw.js";
+import { a as persistentArkmeExtensionActive, i as invokePersistentArkmeExtension, n as applyPersistentArkmeHostExtension, o as persistentArkmeExtensionRuntimeState, r as deactivatePersistentArkmeExtension, t as activatePersistentArkmeExtension } from "./persistent-runtime-DUqdJv8K.js";
 export { activatePersistentArkmeExtension, applyPersistentArkmeHostExtension, deactivatePersistentArkmeExtension, invokePersistentArkmeExtension, persistentArkmeExtensionActive, persistentArkmeExtensionRuntimeState };