@senguoyun/dsh-arkme 0.1.32 → 0.1.34

package/lib/index.js

@@ -1,5 +1,5 @@
 import { a as securePrivateDirectory, c as securePrivateFileSync, i as prepareProfilePackageManager, n as isArkmeProfilePackageName, o as securePrivateDirectorySync, r as localExtensionPnpmArgs, s as securePrivateFile, t as applyArkmeProfileBundlePolicy } from "./profile-bundle-policy-CvojZuTD.js";
-import { $ as ARKME_RUNTIME_INSTANCE_ID, A as inspectNativeBundleArtifactV3, D as bundleSha256, E as arkmeSandboxEntryId, F as assertExtensionArtifactSize, G as validateVoiceprintPcm16Wav, I as canonicalExtensionJson, K as ARKME_DEFAULT_SHARE_WEBSITE, L as sha256Hex, M as packLocalNativeBundleDirectoryV3, N as readNativeBundleTarballV3, O as canonicalBundleJson, P as renderArkmeSandboxHostEntry, Q as ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, R as unpackArkmeExtension, S as ARKME_BUNDLE_ARTIFACT_KIND, T as ArkmeBundleArtifactError, U as ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE, W as ArkmeService, Z as ARKME_WORLD_PUBLISH_MAX_IMAGES, _ as arkmeClientContentDigest, at as ArkmePluginError, b as verifyExtensionResolutionSignature, c as persistentExtensionBundleDirectory, d as readPersistentExtensionActivation, et as ARKME_TOOL_FILE_MAX_BYTES, f as refreshPersistentClientWrapper, g as activeProfileExtensionOwnerConflicts, h as renderArkmeBundleClientBundle, i as invokePersistentArkmeExtension, it as isArkmeBotAvatarRef, j as packBundleFiles, k as inspectBundleArtifact, l as persistentExtensionPackageIdentity, m as writePersistentExtensionActivation, nt as arkmeNormalizedFileMimeType, o as persistentArkmeExtensionRuntimeState, ot as ArkmeOutgoingCallError, p as repairPersistentExtensionInstallation, q as ARKME_PROVIDER_CONTRACT_VERSION, r as deactivatePersistentArkmeExtension, rt as arkmePickedFileKind, s as materializePersistentExtensionBundle, t as activatePersistentArkmeExtension, tt as arkmeCanInlineLocalFile, u as quarantinePersistentExtension, v as arkmeClientContentDigestFromSource, w as ARKME_NATIVE_BUNDLE_ARTIFACT_KIND, x as verifyNativeBundleResolutionSignature, y as verifyBundleResolutionSignature, z as ARKME_EXTENSION_FORMAT } from "./persistent-runtime-CFeIg6aw.js";
+import { $ as ARKME_RUNTIME_INSTANCE_ID, A as inspectNativeBundleArtifactV3, D as bundleSha256, E as arkmeSandboxEntryId, F as assertExtensionArtifactSize, G as validateVoiceprintPcm16Wav, I as canonicalExtensionJson, K as ARKME_DEFAULT_SHARE_WEBSITE, L as sha256Hex, M as packLocalNativeBundleDirectoryV3, N as readNativeBundleTarballV3, O as canonicalBundleJson, P as renderArkmeSandboxHostEntry, Q as ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, R as unpackArkmeExtension, S as ARKME_BUNDLE_ARTIFACT_KIND, T as ArkmeBundleArtifactError, U as ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE, W as ArkmeService, Z as ARKME_WORLD_PUBLISH_MAX_IMAGES, _ as arkmeClientContentDigest, at as ArkmePluginError, b as verifyExtensionResolutionSignature, c as persistentExtensionBundleDirectory, d as readPersistentExtensionActivation, et as ARKME_TOOL_FILE_MAX_BYTES, f as refreshPersistentClientWrapper, g as activeProfileExtensionOwnerConflicts, h as renderArkmeBundleClientBundle, i as invokePersistentArkmeExtension, it as isArkmeBotAvatarRef, j as packBundleFiles, k as inspectBundleArtifact, l as persistentExtensionPackageIdentity, m as writePersistentExtensionActivation, nt as arkmeNormalizedFileMimeType, o as persistentArkmeExtensionRuntimeState, ot as ArkmeOutgoingCallError, p as repairPersistentExtensionInstallation, q as ARKME_PROVIDER_CONTRACT_VERSION, r as deactivatePersistentArkmeExtension, rt as arkmePickedFileKind, s as materializePersistentExtensionBundle, t as activatePersistentArkmeExtension, tt as arkmeCanInlineLocalFile, u as quarantinePersistentExtension, v as arkmeClientContentDigestFromSource, w as ARKME_NATIVE_BUNDLE_ARTIFACT_KIND, x as verifyNativeBundleResolutionSignature, y as verifyBundleResolutionSignature, z as ARKME_EXTENSION_FORMAT } from "./persistent-runtime-CZQTfyC1.js";
 import { _ as parsePluginUpdateManifest, b as validatePluginUpdateServiceOrigin, d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginArtifactPath, h as downloadAndCachePluginArtifact, m as PluginUpdateArtifactError, n as buildTargetInstallArgs, o as reconcilePluginUpdaterProfilePolicy, p as ARKME_PLUGIN_PACKAGE_NAME$1, t as assertTargetArtifactIntegrity, u as detachManagedProfilePluginLink, v as pluginUpdateEndpointUrl, y as validatePluginUpdateArtifactOrigin } from "./plugin-updater-helper-BByw0ZyG.js";
 import { i as invokeArkmeBundle, n as arkmeBundleActive, r as deactivateArkmeBundle } from "./bundle-runtime-BTzRlc6V.js";
 import { t as ArkmeExtensionInstallStore } from "./install-store-C1tAM346.js";
@@ -10,7 +10,7 @@ import { dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:p
 import { fileURLToPath, pathToFileURL } from "node:url";
 import Schema from "@deepseek-ai/schemastery";
 import { execFile, spawn } from "node:child_process";
-import { chmod as chmod$1, mkdir, open, readFile, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { chmod as chmod$1, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { promisify } from "node:util";
 import { createServer } from "node:http";
 import { Readable } from "node:stream";
@@ -1517,6 +1517,43 @@ function numberParam(params, key, fallback) {
 	const value = params[key];
 	return typeof value === "number" && Number.isFinite(value) ? value : fallback;
 }
+function captureContextParam(params) {
+	const raw = params.captureContext;
+	if (raw === void 0) return void 0;
+	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) throw new ArkmePluginError("capture-context-invalid", "记忆快照参数无效", false, 400);
+	const value = raw;
+	const clientName = stringParam(value, "clientName").trim().slice(0, 120);
+	const networkName = stringParam(value, "networkName").trim().slice(0, 120);
+	const electric = typeof value.electric === "number" && Number.isFinite(value.electric) ? Math.trunc(value.electric) : void 0;
+	const charge = Math.trunc(numberParam(value, "charge", 0));
+	const context = {
+		...clientName === "" ? {} : { clientName },
+		...networkName === "" ? {} : { networkName },
+		...electric === void 0 || electric < 0 || electric > 100 ? {} : { electric },
+		...charge < 1 || charge > 3 ? {} : { charge }
+	};
+	return Object.keys(context).length === 0 ? void 0 : context;
+}
+function recordLocationCaptureParam(params) {
+	const raw = params.location;
+	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) throw new ArkmePluginError("record-location-invalid", "位置快照参数无效", false, 400);
+	const value = raw;
+	const latitude = numberParam(value, "latitude", NaN);
+	const longitude = numberParam(value, "longitude", NaN);
+	if (!Number.isFinite(latitude) || latitude < -90 || latitude > 90 || !Number.isFinite(longitude) || longitude < -180 || longitude > 180) throw new ArkmePluginError("record-location-invalid", "位置坐标无效", false, 400);
+	const altitudeMeters = numberParam(value, "altitudeMeters", NaN);
+	const speedMetersPerSecond = numberParam(value, "speedMetersPerSecond", NaN);
+	const accuracyMeters = numberParam(value, "accuracyMeters", NaN);
+	const capturedAtMillis = Math.trunc(numberParam(value, "capturedAtMillis", 0));
+	return {
+		latitude,
+		longitude,
+		capturedAtMillis: capturedAtMillis > 0 ? capturedAtMillis : Date.now(),
+		...Number.isFinite(accuracyMeters) && accuracyMeters >= 0 ? { accuracyMeters } : {},
+		...Number.isFinite(altitudeMeters) ? { altitudeMeters } : {},
+		...Number.isFinite(speedMetersPerSecond) && speedMetersPerSecond >= 0 ? { speedMetersPerSecond } : {}
+	};
+}
 const ARKME_DIRECTORY_SECTIONS = /* @__PURE__ */ new Set([
 	"groups",
 	"bots",
@@ -1773,6 +1810,8 @@ function botRefsParam(params) {
 function richSendParam(params) {
 	const rawAssets = Array.isArray(params.assets) ? params.assets : [];
 	const thinkingDurationMillis = Math.max(0, Math.trunc(numberParam(params, "thinkingDurationMillis", 0)));
+	const recordDurationMillis = Math.max(0, Math.trunc(numberParam(params, "recordDurationMillis", 0)));
+	const captureContext = captureContextParam(params);
 	const humanMentions = humanMentionsParam(params);
 	const botMentions = botMentionsParam(params);
 	return {
@@ -1780,6 +1819,8 @@ function richSendParam(params) {
 		textContent: stringParam(params, "textContent"),
 		displayKind: numberParam(params, "displayKind", 0) === 1 ? 1 : 0,
 		...thinkingDurationMillis === 0 ? {} : { thinkingDurationMillis },
+		...recordDurationMillis === 0 ? {} : { recordDurationMillis },
+		...captureContext === void 0 ? {} : { captureContext },
 		...humanMentions.length === 0 ? {} : { humanMentions },
 		...botMentions.length === 0 ? {} : { botMentions },
 		assets: rawAssets.flatMap((raw) => {
@@ -1893,11 +1934,13 @@ function createArkmeHostApi(service, options) {
 				"extensions.persistent.invoke",
 				"extensions.bundle.invoke",
 				"extensions.mine.publish",
+				"extensions.quarantine.dismiss",
+				"extensions.quarantine.reenable",
 				"remote.renameDesktop"
 			].includes(request.operation) && origin === void 0) throw new ArkmePluginError("origin-required", "扩展变更必须从当前 DSH 页面发起", false, 403);
 			writeJson$4(res, 200, {
 				ok: true,
-				value: await dispatchArkmeHostOperation(service, request.operation, params, options.updateManager, options.extensionManager?.(), options.extensionInstallTasks?.(), options.ownedExtensionInventory?.(), controller.signal, options.remoteHost?.())
+				value: await dispatchArkmeHostOperation(service, request.operation, params, options.updateManager, options.extensionManager?.(), options.extensionInstallTasks?.(), options.ownedExtensionInventory?.(), controller.signal, options.remoteHost?.(), options.desktopQuarantine)
 			});
 		} catch (error) {
 			if (controller.signal.aborted && res.destroyed) return;
@@ -1915,7 +1958,7 @@ function createArkmeHostApi(service, options) {
 		}
 	};
 }
-async function dispatchArkmeHostOperation(service, operation, params, updateManager, extensionManager, extensionInstallTasks, ownedExtensionInventory, requestSignal, remoteHost) {
+async function dispatchArkmeHostOperation(service, operation, params, updateManager, extensionManager, extensionInstallTasks, ownedExtensionInventory, requestSignal, remoteHost, desktopQuarantine) {
 	switch (operation) {
 		case "provider.capabilities": return service.providerCapabilities();
 		case "provider.instance": return { instanceId: ARKME_RUNTIME_INSTANCE_ID };
@@ -2238,6 +2281,10 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 		case "source.message-copy-link.resolve": return await service.resolveMessageCopyLink(stringParam(params, "sid"), requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "source.message-copy-link.extend": return await service.extendMessageCopyLink(stringParam(params, "sid"), numberParam(params, "itemIndex", 0), stringParam(params, "textContent"), stringParam(params, "recordUid"), requestSignal === void 0 ? {} : { signal: requestSignal });
 		case "source.shared-recording-detail": return await service.sharedRecordingDetail(stringParam(params, "detailRef"), requestSignal === void 0 ? {} : { signal: requestSignal });
+		case "source.message-snapshot.detail": return await service.messageSnapshotDetail(stringParam(params, "sourceRef"), stringParam(params, "actionRef"), requestSignal === void 0 ? {} : { signal: requestSignal });
+		case "source.message-location.set":
+			await service.saveMessageLocation(stringParam(params, "sourceRef"), stringParam(params, "itemUid"), recordLocationCaptureParam(params), numberParam(params, "recordVersion", 0) || void 0, requestSignal === void 0 ? {} : { signal: requestSignal });
+			return { ok: true };
 		case "source.forward-messages": return await service.forwardSourceMessages(stringParam(params, "sourceRef"), messageActionRefsParam(params), {
 			...stringParam(params, "targetSourceRef") === "" ? {} : { targetSourceRef: stringParam(params, "targetSourceRef") },
 			...stringParam(params, "recordUid") === "" ? {} : { recordUid: stringParam(params, "recordUid") },
@@ -2249,9 +2296,12 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 			const botRefs = botRefsParam(params);
 			const humanMentions = humanMentionsParam(params);
 			const botMentions = botMentionsParam(params);
+			const captureContext = captureContextParam(params);
 			return await service.sendSourceText(stringParam(params, "sourceRef"), stringParam(params, "textContent"), {
 				...stringParam(params, "recordUid") === "" ? {} : { recordUid: stringParam(params, "recordUid") },
 				...stringParam(params, "relationUid") === "" ? {} : { relationUid: stringParam(params, "relationUid") },
+				...numberParam(params, "recordDurationMillis", 0) <= 0 ? {} : { recordDurationMillis: Math.max(0, Math.trunc(numberParam(params, "recordDurationMillis", 0))) },
+				...captureContext === void 0 ? {} : { captureContext },
 				...booleanParam(params, "agentAuthored") ? { agentAuthored: true } : {},
 				...botRefs.length === 0 ? {} : { botRefs },
 				...humanMentions.length === 0 ? {} : { humanMentions },
@@ -2451,6 +2501,10 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 		case "extensions.share.resolve": return (await enrichExtensionAuthors(service, [await requireExtensionManager(extensionManager).resolveSharedCatalogDetail(stringParam(params, "shareRef"))]))[0];
 		case "extensions.delete": return await requireOwnedExtensionInventory(ownedExtensionInventory).delete({ extensionId: stringParam(params, "extensionId") });
 		case "extensions.installed-list": return requireExtensionManager(extensionManager).listInstalled();
+		case "extensions.quarantine.status": return await requireDesktopQuarantine(desktopQuarantine).status();
+		case "extensions.quarantine.dismiss": return await requireDesktopQuarantine(desktopQuarantine).dismiss(stringParam(params, "packageName"));
+		case "extensions.quarantine.reenable": return await requireDesktopQuarantine(desktopQuarantine).reenable(stringParam(params, "packageName"));
+		case "extensions.quarantine.health": return await requireDesktopQuarantine(desktopQuarantine).health(stringParam(params, "packageName"));
 		case "extensions.mine.list": return await requireOwnedExtensionInventory(ownedExtensionInventory).list({ ...stringParam(params, "currentSessionId").trim() === "" ? {} : { currentSessionId: stringParam(params, "currentSessionId").trim() } });
 		case "extensions.mine.publish": return await requireOwnedExtensionInventory(ownedExtensionInventory).publish({
 			ownedRef: stringParam(params, "ownedRef"),
@@ -2531,6 +2585,10 @@ function requireExtensionManager(manager) {
 	if (manager === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "当前 DSH 未加载 Dynamic Cordis Runner，市集不可用", false, 503);
 	return manager;
 }
+function requireDesktopQuarantine(quarantine) {
+	if (quarantine === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "桌面扩展恢复状态尚未就绪", false, 503);
+	return quarantine;
+}
 function requireOwnedExtensionInventory(inventory) {
 	if (inventory === void 0) throw new ArkmePluginError("extension-runtime-unavailable", "扩展运行时尚未就绪", true, 503);
 	return inventory;
@@ -3743,6 +3801,8 @@ var ArkmeLocalDatabase = class {
         sync_state TEXT NOT NULL CHECK (sync_state IN ('synced', 'pending', 'failed')),
         attempts INTEGER NOT NULL DEFAULT 0,
         last_error TEXT,
+        record_duration_millis INTEGER NOT NULL DEFAULT 0,
+        capture_context_json TEXT,
         created_at_millis INTEGER NOT NULL,
         updated_at_millis INTEGER NOT NULL,
         PRIMARY KEY (user_id, record_uid)
@@ -3796,6 +3856,9 @@ var ArkmeLocalDatabase = class {
       CREATE UNIQUE INDEX IF NOT EXISTS extension_review_outbox_user_record
         ON extension_review_outbox (user_id, record_uid);
     `);
+		const recordColumns = this.database.prepare("PRAGMA table_info(record_cache)").all();
+		if (!recordColumns.some((column) => column.name === "record_duration_millis")) this.database.exec("ALTER TABLE record_cache ADD COLUMN record_duration_millis INTEGER NOT NULL DEFAULT 0");
+		if (!recordColumns.some((column) => column.name === "capture_context_json")) this.database.exec("ALTER TABLE record_cache ADD COLUMN capture_context_json TEXT");
 		const metaColumns = this.database.prepare("PRAGMA table_info(cache_meta)").all();
 		if (!metaColumns.some((column) => column.name === "pagination_initialized")) this.database.exec("ALTER TABLE cache_meta ADD COLUMN pagination_initialized INTEGER NOT NULL DEFAULT 0");
 		if (!metaColumns.some((column) => column.name === "revision")) this.database.exec("ALTER TABLE cache_meta ADD COLUMN revision INTEGER NOT NULL DEFAULT 0");
@@ -3954,18 +4017,25 @@ var ArkmeLocalDatabase = class {
 	async listPending(userId) {
 		await this.ensureMigrated(userId);
 		return this.database.prepare(`
-      SELECT record_uid, text_content, created_at_millis, send_at_millis, attempts, last_error
+      SELECT record_uid, text_content, created_at_millis, send_at_millis, attempts, last_error,
+             record_duration_millis, capture_context_json
       FROM record_cache
       WHERE user_id = ? AND sync_state IN ('pending', 'failed')
       ORDER BY created_at_millis ASC, record_uid ASC
-    `).all(userId).map((row) => ({
-			recordUid: row.record_uid,
-			textContent: row.text_content,
-			createdAtMillis: row.created_at_millis,
-			sendAtMillis: row.send_at_millis,
-			attempts: row.attempts,
-			...row.last_error == null || row.last_error === "" ? {} : { lastError: row.last_error }
-		}));
+    `).all(userId).map((row) => {
+			const captureContext = this.pendingCaptureContext(row.capture_context_json);
+			const recordDurationMillis = Math.max(0, Math.trunc(row.record_duration_millis ?? 0));
+			return {
+				recordUid: row.record_uid,
+				textContent: row.text_content,
+				createdAtMillis: row.created_at_millis,
+				sendAtMillis: row.send_at_millis,
+				attempts: row.attempts,
+				...recordDurationMillis === 0 ? {} : { recordDurationMillis },
+				...captureContext === void 0 ? {} : { captureContext },
+				...row.last_error == null || row.last_error === "" ? {} : { lastError: row.last_error }
+			};
+		});
 	}
 	async putPending(userId, pending) {
 		await this.ensureMigrated(userId);
@@ -4101,12 +4171,14 @@ var ArkmeLocalDatabase = class {
 	}
 	insertPending(userId, pending) {
 		const now = Date.now();
+		const recordDurationMillis = Math.max(0, Math.trunc(pending.recordDurationMillis ?? 0));
+		const captureContextJson = pending.captureContext === void 0 ? null : JSON.stringify(pending.captureContext);
 		this.database.prepare(`
       INSERT INTO record_cache (
         user_id, record_uid, send_at_millis, title, text_content, template_kind,
         status, version, sync_state, attempts, last_error,
-        created_at_millis, updated_at_millis
-      ) VALUES (?, ?, ?, '', ?, 1, 0, 0, 'pending', ?, ?, ?, ?)
+        record_duration_millis, capture_context_json, created_at_millis, updated_at_millis
+      ) VALUES (?, ?, ?, '', ?, 1, 0, 0, 'pending', ?, ?, ?, ?, ?, ?)
       ON CONFLICT(user_id, record_uid) DO UPDATE SET
         send_at_millis = excluded.send_at_millis,
         text_content = excluded.text_content,
@@ -4114,8 +4186,31 @@ var ArkmeLocalDatabase = class {
         sync_state = 'pending',
         attempts = excluded.attempts,
         last_error = excluded.last_error,
+        record_duration_millis = excluded.record_duration_millis,
+        capture_context_json = excluded.capture_context_json,
         updated_at_millis = excluded.updated_at_millis
-    `).run(userId, pending.recordUid, pending.sendAtMillis, pending.textContent, pending.attempts, pending.lastError ?? null, pending.createdAtMillis, now);
+    `).run(userId, pending.recordUid, pending.sendAtMillis, pending.textContent, pending.attempts, pending.lastError ?? null, recordDurationMillis, captureContextJson, pending.createdAtMillis, now);
+	}
+	pendingCaptureContext(raw) {
+		if (raw == null || raw === "") return void 0;
+		try {
+			const value = JSON.parse(raw);
+			if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
+			const source = value;
+			const clientName = typeof source.clientName === "string" ? source.clientName.trim().slice(0, 120) : "";
+			const networkName = typeof source.networkName === "string" ? source.networkName.trim().slice(0, 120) : "";
+			const electric = typeof source.electric === "number" && Number.isFinite(source.electric) ? Math.trunc(source.electric) : void 0;
+			const charge = typeof source.charge === "number" && Number.isFinite(source.charge) ? Math.trunc(source.charge) : 0;
+			const result = {
+				...clientName === "" ? {} : { clientName },
+				...networkName === "" ? {} : { networkName },
+				...electric === void 0 || electric < 0 || electric > 100 ? {} : { electric },
+				...charge < 1 || charge > 3 ? {} : { charge }
+			};
+			return Object.keys(result).length === 0 ? void 0 : result;
+		} catch {
+			return;
+		}
 	}
 	upsertSyncedRecord(userId, item) {
 		const now = Date.now();
@@ -4638,6 +4733,247 @@ var ArkmeRealtimeEvents = class {
 	}
 };
 //#endregion
+//#region src/extensions/desktop-quarantine.ts
+const QUARANTINE_DIRECTORY_NAME = "desktop-extension-quarantine";
+const RECEIPT_FILE_NAME = "receipt.json";
+const PACKAGE_NAME_PATTERN = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
+const QUARANTINE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const RUNTIME_RELEASE_PATTERN = /^electron-runtime-v1-[a-f0-9]{32}$/;
+const MAX_FAILURE_SUMMARY_LENGTH = 2e3;
+const MAX_FAILURE_TAIL_LENGTH = 16384;
+var ArkmeDesktopExtensionQuarantine = class {
+	options;
+	now;
+	constructor(options) {
+		this.options = options;
+		this.now = options.now ?? (() => Date.now());
+	}
+	async reconcile() {
+		for (const stored of await this.readReceipts("active")) {
+			let changed = false;
+			for (const entry of stored.receipt.entries) {
+				if (entry.resolvedAtMillis !== void 0) continue;
+				const installed = this.installedByPackage(entry.packageName);
+				if (installed !== void 0 && (installed.enabled || installed.active || installed.lastError !== stored.receipt.failureSummary)) this.options.installStore.put({
+					...installed,
+					enabled: false,
+					active: false,
+					lastError: stored.receipt.failureSummary
+				});
+				if (entry.synchronizedAtMillis === void 0) {
+					entry.synchronizedAtMillis = this.now();
+					changed = true;
+				}
+			}
+			if (changed) await this.writeStoredReceipt(stored);
+		}
+	}
+	async status() {
+		const stored = (await this.readReceipts("active")).sort((left, right) => right.receipt.createdAtMillis - left.receipt.createdAtMillis)[0];
+		if (stored === void 0) return {
+			active: false,
+			entries: []
+		};
+		return {
+			active: true,
+			quarantineId: stored.receipt.quarantineId,
+			mode: stored.receipt.mode,
+			failureSummary: stored.receipt.failureSummary,
+			failureLogTail: stored.receipt.failureLogTail,
+			entries: stored.receipt.entries.filter((entry) => entry.resolvedAtMillis === void 0).map((entry) => ({
+				packageName: entry.packageName,
+				...this.installedByPackage(entry.packageName) === void 0 ? {} : { extensionId: this.installedByPackage(entry.packageName).extensionId },
+				dismissed: entry.notificationDismissedAtMillis !== void 0,
+				resolved: false
+			}))
+		};
+	}
+	async dismiss(packageName) {
+		const stored = await this.activeReceiptForPackage(packageName);
+		const entry = stored.receipt.entries.find((item) => item.packageName === packageName);
+		if (entry.notificationDismissedAtMillis === void 0) {
+			entry.notificationDismissedAtMillis = this.now();
+			await this.writeStoredReceipt(stored);
+		}
+	}
+	async reenable(packageName) {
+		const stored = await this.activeReceiptForPackage(packageName);
+		const entry = stored.receipt.entries.find((item) => item.packageName === packageName);
+		entry.reenableRequestedAtMillis = this.now();
+		await this.writeStoredReceipt(stored);
+		let profileEnabled = false;
+		try {
+			await this.options.setProfileEnabled(packageName, true);
+			profileEnabled = true;
+			await this.options.requestRestart({
+				packageName,
+				previousProfileIncluded: false
+			});
+		} catch (error) {
+			if (profileEnabled) await this.options.setProfileEnabled(packageName, false).catch(() => void 0);
+			delete entry.reenableRequestedAtMillis;
+			await this.writeStoredReceipt(stored).catch(() => void 0);
+			throw error;
+		}
+	}
+	async resolveActive() {
+		for (const stored of await this.readReceipts("active")) {
+			let changed = false;
+			for (const entry of stored.receipt.entries) {
+				if (entry.resolvedAtMillis !== void 0) continue;
+				if (entry.reenableRequestedAtMillis !== void 0 && this.options.isPackageActive(entry.packageName)) {
+					entry.resolvedAtMillis = this.now();
+					delete entry.reenableRequestedAtMillis;
+					const installed = this.installedByPackage(entry.packageName);
+					if (installed !== void 0) {
+						const { lastError: _lastError, ...retained } = installed;
+						this.options.installStore.put({
+							...retained,
+							enabled: true,
+							active: true
+						});
+					}
+					changed = true;
+					continue;
+				}
+				if (entry.reenableRequestedAtMillis !== void 0) {
+					await this.options.setProfileEnabled(entry.packageName, false);
+					delete entry.reenableRequestedAtMillis;
+					const installed = this.installedByPackage(entry.packageName);
+					if (installed !== void 0) this.options.installStore.put({
+						...installed,
+						enabled: false,
+						active: false
+					});
+					changed = true;
+				}
+			}
+			if (stored.receipt.entries.every((entry) => entry.resolvedAtMillis !== void 0)) {
+				stored.receipt.phase = "resolved";
+				changed = true;
+			}
+			if (changed) await this.writeStoredReceipt(stored);
+		}
+	}
+	async health(packageName) {
+		if ((await this.activeReceiptForPackage(packageName)).receipt.entries.find((item) => item.packageName === packageName).reenableRequestedAtMillis === void 0) throw new Error("该扩展尚未请求重新启用");
+		const profileEnabled = await this.profileContains(packageName);
+		const active = this.options.isPackageActive(packageName);
+		if (profileEnabled && active) await this.resolveActive();
+		return {
+			profileEnabled,
+			active
+		};
+	}
+	async activeReceiptForPackage(packageName) {
+		if (!isPackageName(packageName) || isProtectedPackage(packageName)) throw new Error("隔离扩展包名无效");
+		const matches = (await this.readReceipts("active")).filter((stored) => stored.receipt.entries.some((entry) => entry.packageName === packageName && entry.resolvedAtMillis === void 0));
+		matches.sort((left, right) => right.receipt.createdAtMillis - left.receipt.createdAtMillis);
+		if (matches[0] === void 0) throw new Error("该扩展没有活动的启动隔离记录");
+		return matches[0];
+	}
+	installedByPackage(packageName) {
+		return this.options.installStore.list().find((item) => item.profilePackageName === packageName);
+	}
+	async profileContains(packageName) {
+		try {
+			const value = JSON.parse(await readFile(join(this.options.dshHome, "profiles", "web", "package.json"), "utf8"));
+			if (!isObject(value) || !isObject(value.dsh) || !isObject(value.dsh.profile) || !Array.isArray(value.dsh.profile.bundles)) return false;
+			return value.dsh.profile.bundles.some((item) => item === packageName);
+		} catch {
+			return false;
+		}
+	}
+	async readReceipts(phase) {
+		const root = join(this.options.dshHome, "arkme-self", QUARANTINE_DIRECTORY_NAME);
+		const directories = await readdir(root, { withFileTypes: true }).catch((error) => {
+			if (error.code === "ENOENT") return [];
+			throw error;
+		});
+		const receipts = [];
+		for (const directory of directories) {
+			if (!directory.isDirectory() || !QUARANTINE_ID_PATTERN.test(directory.name)) continue;
+			const receiptPath = join(root, directory.name, RECEIPT_FILE_NAME);
+			try {
+				const receipt = parseReceipt(await readFile(receiptPath, "utf8"));
+				if (receipt.quarantineId !== directory.name || receipt.environment !== this.options.environment || phase !== void 0 && receipt.phase !== phase) continue;
+				receipts.push({
+					path: receiptPath,
+					receipt
+				});
+			} catch {}
+		}
+		return receipts;
+	}
+	async writeStoredReceipt(stored) {
+		stored.receipt.updatedAtMillis = this.now();
+		await writeTextAtomically(stored.path, `${JSON.stringify(stored.receipt, void 0, 2)}\n`);
+	}
+};
+function parseReceipt(text) {
+	const value = JSON.parse(text);
+	if (!isObject(value) || value.schemaVersion !== 1 || typeof value.quarantineId !== "string" || !QUARANTINE_ID_PATTERN.test(value.quarantineId) || value.environment !== "prod" && value.environment !== "test" || ![
+		"pending",
+		"active",
+		"restored",
+		"resolved"
+	].includes(String(value.phase)) || value.mode !== "targeted" && value.mode !== "local-safe-mode" || !Number.isSafeInteger(value.createdAtMillis) || !Number.isSafeInteger(value.updatedAtMillis) || value.runtimeReleaseId !== void 0 && (typeof value.runtimeReleaseId !== "string" || !RUNTIME_RELEASE_PATTERN.test(value.runtimeReleaseId)) || typeof value.failureSummary !== "string" || value.failureSummary.trim() === "" || value.failureSummary.length > MAX_FAILURE_SUMMARY_LENGTH || typeof value.failureLogTail !== "string" || value.failureLogTail.length > MAX_FAILURE_TAIL_LENGTH || !Array.isArray(value.entries) || value.entries.length === 0) throw new Error("桌面扩展隔离记录无效");
+	const entries = value.entries.map((raw) => parseEntry(raw));
+	if (new Set(entries.map((entry) => entry.packageName)).size !== entries.length) throw new Error("桌面扩展隔离记录包含重复扩展");
+	return {
+		schemaVersion: 1,
+		quarantineId: value.quarantineId,
+		environment: value.environment,
+		phase: value.phase,
+		mode: value.mode,
+		createdAtMillis: Number(value.createdAtMillis),
+		updatedAtMillis: Number(value.updatedAtMillis),
+		...typeof value.runtimeReleaseId === "string" ? { runtimeReleaseId: value.runtimeReleaseId } : {},
+		failureSummary: value.failureSummary,
+		failureLogTail: value.failureLogTail,
+		entries
+	};
+}
+function parseEntry(value) {
+	if (!isObject(value) || typeof value.packageName !== "string" || !isPackageName(value.packageName) || isProtectedPackage(value.packageName) || typeof value.dependencySpec !== "string" || value.dependencySpec.length === 0 || value.dependencySpec.length > 4096 || !Number.isSafeInteger(value.originalBundleIndex) || Number(value.originalBundleIndex) < 0 || !optionalMillis(value.synchronizedAtMillis) || !optionalMillis(value.notificationDismissedAtMillis) || !optionalMillis(value.reenableRequestedAtMillis) || !optionalMillis(value.resolvedAtMillis)) throw new Error("桌面扩展隔离条目无效");
+	return {
+		packageName: value.packageName,
+		dependencySpec: value.dependencySpec,
+		originalBundleIndex: Number(value.originalBundleIndex),
+		...value.synchronizedAtMillis === void 0 ? {} : { synchronizedAtMillis: Number(value.synchronizedAtMillis) },
+		...value.notificationDismissedAtMillis === void 0 ? {} : { notificationDismissedAtMillis: Number(value.notificationDismissedAtMillis) },
+		...value.reenableRequestedAtMillis === void 0 ? {} : { reenableRequestedAtMillis: Number(value.reenableRequestedAtMillis) },
+		...value.resolvedAtMillis === void 0 ? {} : { resolvedAtMillis: Number(value.resolvedAtMillis) }
+	};
+}
+function optionalMillis(value) {
+	return value === void 0 || Number.isSafeInteger(value) && Number(value) >= 0;
+}
+function isObject(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isPackageName(value) {
+	return PACKAGE_NAME_PATTERN.test(value);
+}
+function isProtectedPackage(packageName) {
+	return packageName === "@senguoyun/dsh-arkme" || packageName.startsWith("@deepseek-ai/");
+}
+async function writeTextAtomically(filePath, text) {
+	const temporaryPath = `${filePath}.${process.pid}.${randomUUID()}.tmp`;
+	try {
+		const handle = await open(temporaryPath, "wx", 384);
+		try {
+			await handle.writeFile(text, "utf8");
+			await handle.sync();
+		} finally {
+			await handle.close();
+		}
+		await rename(temporaryPath, filePath);
+	} finally {
+		await rm(temporaryPath, { force: true }).catch(() => void 0);
+	}
+}
+//#endregion
 //#region src/extensions/install-tasks.ts
 const TASK_RETENTION_MILLIS = 600 * 1e3;
 const MAX_RETAINED_TASKS = 100;
@@ -7915,7 +8251,7 @@ var ArkmeExtensionProfileInstaller = class {
 		await this.mutationTail;
 		if (this.options.stateDirectory === void 0 || this.options.healthUrl === void 0 || this.options.helperPath === void 0 || this.options.restartArgv === void 0 || this.options.installStoreDirectory === void 0) return;
 		const plan = {
-			schemaVersion: input.activationChange === true ? 3 : input.targetBundlePath?.endsWith(".tgz") === true || input.previousBundlePath?.endsWith(".tgz") === true || input.previousInstalled?.executionModel !== void 0 ? 2 : 1,
+			schemaVersion: input.desktopQuarantineActivation === true ? 4 : input.activationChange === true ? 3 : input.targetBundlePath?.endsWith(".tgz") === true || input.previousBundlePath?.endsWith(".tgz") === true || input.previousInstalled?.executionModel !== void 0 ? 2 : 1,
 			parentPid: process.pid,
 			execPath: this.options.execPath,
 			dshBinPath: this.options.dshBinPath,
@@ -7935,8 +8271,10 @@ var ArkmeExtensionProfileInstaller = class {
 				activationChange: true,
 				previousProfileIncluded: input.previousProfileIncluded === true
 			} : {},
+			...input.desktopQuarantineActivation === true ? { desktopQuarantineActivation: true } : {},
 			healthUrl: this.options.healthUrl,
-			logPath: join(this.options.stateDirectory, "extension-profile-restart.log")
+			logPath: join(this.options.stateDirectory, "extension-profile-restart.log"),
+			...this.options.runtimeReleaseId === void 0 ? {} : { runtimeReleaseId: this.options.runtimeReleaseId }
 		};
 		if (this.options.supervisedExitCode !== void 0) {
 			if (!Number.isSafeInteger(this.options.supervisedExitCode) || this.options.supervisedExitCode < 1 || this.options.supervisedExitCode > 255) throw new Error("受监督重启退出码无效");
@@ -7985,6 +8323,17 @@ var ArkmeExtensionProfileInstaller = class {
 			setTimeout(() => process.kill(process.pid, "SIGTERM"), 800).unref?.();
 		}))();
 	}
+	async restartDesktopQuarantine(input) {
+		if (!isArkmeProfilePackageName(input.packageName)) throw new Error("扩展 Bundle 包名无效");
+		await this.restart({
+			extensionId: `desktop-quarantine:${input.packageName}`,
+			packageName: input.packageName,
+			expectActive: true,
+			activationChange: true,
+			desktopQuarantineActivation: true,
+			previousProfileIncluded: false
+		});
+	}
 	async run(args) {
 		if (this.options.run !== void 0) return await this.options.run(args);
 		if (!existsSync(this.options.execPath) || !existsSync(this.options.dshBinPath)) throw new Error("当前 DSH 运行方式不支持修改 Profile 插件");
@@ -8756,6 +9105,21 @@ function normalizedLongArticleDraft(value) {
 function longArticleDraftKey(sourceRef, itemUid) {
 	return `${sourceRef}\u0000${itemUid ?? ""}`;
 }
+function normalizedCaptureContext(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const source = value;
+	const clientName = typeof source.clientName === "string" ? source.clientName.trim().slice(0, 120) : "";
+	const networkName = typeof source.networkName === "string" ? source.networkName.trim().slice(0, 120) : "";
+	const electric = typeof source.electric === "number" && Number.isFinite(source.electric) ? Math.trunc(source.electric) : void 0;
+	const charge = typeof source.charge === "number" && Number.isFinite(source.charge) ? Math.trunc(source.charge) : 0;
+	const result = {
+		...clientName === "" ? {} : { clientName },
+		...networkName === "" ? {} : { networkName },
+		...electric === void 0 || electric < 0 || electric > 100 ? {} : { electric },
+		...charge < 1 || charge > 3 ? {} : { charge }
+	};
+	return Object.keys(result).length === 0 ? void 0 : result;
+}
 function normalizedPending(value) {
 	if (!Array.isArray(value)) return [];
 	const result = [];
@@ -8764,12 +9128,16 @@ function normalizedPending(value) {
 		const source = item;
 		if (typeof source.recordUid !== "string" || source.recordUid.trim() === "") continue;
 		if (typeof source.textContent !== "string" || source.textContent.trim() === "") continue;
+		const recordDurationMillis = typeof source.recordDurationMillis === "number" && Number.isFinite(source.recordDurationMillis) ? Math.max(0, Math.trunc(source.recordDurationMillis)) : 0;
+		const captureContext = normalizedCaptureContext(source.captureContext);
 		result.push({
 			recordUid: source.recordUid,
 			textContent: source.textContent,
 			createdAtMillis: typeof source.createdAtMillis === "number" ? source.createdAtMillis : 0,
 			sendAtMillis: typeof source.sendAtMillis === "number" ? source.sendAtMillis : 0,
 			attempts: typeof source.attempts === "number" ? source.attempts : 0,
+			...recordDurationMillis === 0 ? {} : { recordDurationMillis },
+			...captureContext === void 0 ? {} : { captureContext },
 			...typeof source.lastError === "string" && source.lastError !== "" ? { lastError: source.lastError } : {}
 		});
 	}
@@ -18300,6 +18668,9 @@ function resolveArkmeAppVersion(configuredAppVersion, environment = process.env)
 	const injected = environment.ARKME_APP_VERSION?.trim();
 	return injected === void 0 || injected === "" ? void 0 : injected;
 }
+function resolvePluginUpdateEnabled(configured, environment = process.env) {
+	return configured && environment.ARKME_RUNTIME_MANAGED !== "1";
+}
 function dshRemoteClientId(accessToken) {
 	const parts = accessToken.split(".");
 	if (parts.length !== 3) return void 0;
@@ -18344,7 +18715,7 @@ function apply(ctx, config) {
 	const extensionStore = new ArkmeExtensionInstallStore(extensionDirectory);
 	const clientModules = ctx.clientModules;
 	const updateManager = new ArkmePluginUpdateManager({
-		enabled: config.updateCheckEnabled,
+		enabled: resolvePluginUpdateEnabled(config.updateCheckEnabled),
 		channel: config.updateChannel,
 		updateServiceBaseUrl: config.updateServiceBaseUrl,
 		...config.updateArtifactBaseUrl.trim() === "" ? {} : { updateArtifactBaseUrl: config.updateArtifactBaseUrl },
@@ -18386,9 +18757,26 @@ function apply(ctx, config) {
 		installStoreDirectory: extensionDirectory,
 		...process.env.ARKME_DESKTOP_MANAGED_RESTART === "1" && process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH !== void 0 ? {
 			supervisedExitCode: 75,
-			supervisedPlanPath: process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH
+			supervisedPlanPath: process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH,
+			...process.env.ARKME_RUNTIME_RELEASE_ID === void 0 ? {} : { runtimeReleaseId: process.env.ARKME_RUNTIME_RELEASE_ID }
 		} : {}
 	});
+	const pluginInventory = ctx.get("pluginInventory");
+	const desktopQuarantine = new ArkmeDesktopExtensionQuarantine({
+		dshHome,
+		environment: config.environment,
+		installStore: extensionStore,
+		setProfileEnabled: async (packageName, enabled) => {
+			await extensionProfileInstaller.setEnabled(packageName, enabled);
+		},
+		requestRestart: async ({ packageName }) => {
+			await extensionProfileInstaller.restartDesktopQuarantine({ packageName });
+		},
+		isPackageActive: (packageName) => pluginInventory.list().entries.some((entry) => entry.moduleName === packageName && entry.enabled && entry.fiberPhase === "active")
+	});
+	desktopQuarantine.reconcile().catch((error) => {
+		ctx.logger.warn("Arkme desktop extension quarantine reconciliation failed: %s", error instanceof Error ? error.message : String(error));
+	});
 	const ownedExtensionStore = new ArkmeOwnedExtensionStore(extensionDirectory);
 	const ownedExtensionRefs = new ArkmeOwnedExtensionRefs();
 	const ownedExtensionHostInstanceId = randomUUID();
@@ -18414,7 +18802,7 @@ function apply(ctx, config) {
 			profileDirectory: extensionProfileDirectory,
 			profileInstaller: extensionProfileInstaller,
 			clientApiPath: config.routePath,
-			pluginInventory: ctx.get("pluginInventory"),
+			pluginInventory,
 			...dshRuntimeVersion === void 0 ? {} : { dshRuntimeVersion }
 		});
 		extensionManager = manager;
@@ -18523,7 +18911,8 @@ function apply(ctx, config) {
 		extensionManager: () => extensionManager,
 		extensionInstallTasks: () => extensionInstallTasks,
 		ownedExtensionInventory: () => ownedExtensionInventory,
-		remoteHost: () => remoteHost
+		remoteHost: () => remoteHost,
+		desktopQuarantine
 	});
 	const callAssetHandler = createOutgoingCallAssetHandler({ routePrefix: `${config.routePath}/call` });
 	const richMediaOptions = {
@@ -18718,4 +19107,4 @@ function validateConfig(ctx, config) {
 	}
 }
 //#endregion
-export { ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS, ARKME_PROVIDER_CONTRACT_VERSION, ARKME_WORLD_PUBLISH_MAX_IMAGES, ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, ArkmeOutgoingCallError, ArkmeService, Config, apply, createOpenClawCliAdapter, inject, name, readDshRuntimeVersion, resolveArkmeAppVersion, resolveArkmeConfig };
+export { ARKME_PRODUCTION_TRUSTED_SIGNING_KEYS, ARKME_PROVIDER_CONTRACT_VERSION, ARKME_WORLD_PUBLISH_MAX_IMAGES, ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, ArkmeOutgoingCallError, ArkmeService, Config, apply, createOpenClawCliAdapter, inject, name, readDshRuntimeVersion, resolveArkmeAppVersion, resolveArkmeConfig, resolvePluginUpdateEnabled };

package/lib/persistent-extension.js

@@ -1,2 +1,2 @@
-import { a as persistentArkmeExtensionActive, i as invokePersistentArkmeExtension, n as applyPersistentArkmeHostExtension, o as persistentArkmeExtensionRuntimeState, r as deactivatePersistentArkmeExtension, t as activatePersistentArkmeExtension } from "./persistent-runtime-CFeIg6aw.js";
+import { a as persistentArkmeExtensionActive, i as invokePersistentArkmeExtension, n as applyPersistentArkmeHostExtension, o as persistentArkmeExtensionRuntimeState, r as deactivatePersistentArkmeExtension, t as activatePersistentArkmeExtension } from "./persistent-runtime-CZQTfyC1.js";
 export { activatePersistentArkmeExtension, applyPersistentArkmeHostExtension, deactivatePersistentArkmeExtension, invokePersistentArkmeExtension, persistentArkmeExtensionActive, persistentArkmeExtensionRuntimeState };