@senguoyun/dsh-arkme 0.1.51 → 0.1.53

package/lib/extension-profile-restart-helper.js

@@ -84,6 +84,7 @@ function start(plan) {
 async function healthy(plan) {
 	const deadline = Date.now() + HEALTH_TIMEOUT_MS;
 	while (Date.now() < deadline) {
+		let extensionReady = false;
 		try {
 			const response = await fetch(plan.healthUrl, {
 				method: "POST",
@@ -101,14 +102,17 @@ async function healthy(plan) {
 				const body = await response.json();
 				if (plan.desktopQuarantineActivation === true) {
 					const status = body.value;
-					if (body.ok === true && status?.profileEnabled === true && status.active === true) return true;
-					await new Promise((resolve) => setTimeout(resolve, 500));
-					continue;
+					extensionReady = body.ok === true && status?.profileEnabled === true && status.active === true;
+				} else {
+					const installed = Array.isArray(body.value) ? body.value.find((item) => item.extensionId === plan.extensionId) : void 0;
+					extensionReady = body.ok === true && (plan.activationChange === true ? plan.expectActive ? installed?.enabled === true && installed.active === true : installed?.enabled === false && installed.active === false : plan.expectActive ? installed?.active === true : installed === void 0);
 				}
-				const installed = Array.isArray(body.value) ? body.value.find((item) => item.extensionId === plan.extensionId) : void 0;
-				if (body.ok === true && (plan.activationChange === true ? plan.expectActive ? installed?.enabled === true && installed.active === true : installed?.enabled === false && installed.active === false : plan.expectActive ? installed?.active === true : installed === void 0)) return true;
 			}
 		} catch {}
+		if (extensionReady) try {
+			const root = await fetch(new URL("/", plan.healthUrl), { signal: AbortSignal.timeout(2e3) });
+			if (root.ok || root.status === 401 || root.status === 403) return true;
+		} catch {}
 		await new Promise((resolve) => setTimeout(resolve, 500));
 	}
 	return false;
@@ -220,7 +224,7 @@ async function main() {
 	if (planPath === void 0) throw new Error("extension restart plan path is required");
 	const rawPlan = JSON.parse(await readFile(planPath, "utf8"));
 	if (managed && isPluginUpdateRestartPlan(rawPlan)) {
-		const pluginUpdate = await import("./plugin-updater-helper-B0yVav4f.js");
+		const pluginUpdate = await import("./plugin-updater-helper-n8JrMPum.js");
 		if (mode === "--managed-finalize") {
 			const healthUrl = process.argv[4];
 			if (healthUrl === void 0) throw new Error("managed plugin update health URL is required");

package/lib/harness-model-client.js

@@ -751,6 +751,14 @@ window.__ModuleLoader__.load({
 					pinned
 				}, signal);
 			}
+			/** Read or explicitly set the existing topic home preference. */
+			async topicHomeVisibility(sourceRef, showInHome, signal) {
+				if (sourceRef.trim() === "") throw new TypeError("Arkme topic source reference must not be empty");
+				return await this.call("topic.home-visibility", {
+					sourceRef,
+					...showInHome === void 0 ? {} : { showInHome }
+				}, signal);
+			}
 			async listGroupMembers(sourceRef, signal) {
 				if (sourceRef.trim() === "") throw new TypeError("Arkme group source reference must not be empty");
 				return await this.call("group.members", {

package/lib/harness-onboarding-client.js

@@ -0,0 +1,73 @@
+window.__ModuleLoader__.load({
+	id: "@senguoyun/dsh-arkme/harness-onboarding",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react = require("react");
+		//#region src/client/home-tour-diagnostics.ts
+		let sequence = 0;
+		/** Structured lifecycle metadata only: never pass profile payloads, input text, or credentials. */
+		function homeTourDiagnostic(event, details = {}) {
+			try {
+				console.info("[ArkmeHomeTour]", JSON.stringify({
+					sequence: ++sequence,
+					at: (/* @__PURE__ */ new Date()).toISOString(),
+					documentTimeOrigin: typeof performance === "undefined" ? void 0 : performance.timeOrigin,
+					inFrame: typeof window === "undefined" ? void 0 : window !== window.top,
+					event,
+					...details
+				}));
+			} catch {}
+		}
+		//#endregion
+		//#region src/client/harness-onboarding-client.tsx
+		const inject = ["slots", "sessions"];
+		/** Runs in the native iframe. The settings coordinator owns when this step mounts. */
+		function apply(ctx) {
+			const sessions = ctx.sessions;
+			let completed = false;
+			let wasActive;
+			const publish = () => {
+				const snapshot = sessions.list.getSnapshot();
+				const active = snapshot.phase === "ready" && (snapshot.current === void 0 || snapshot.byId[snapshot.current]?.blank === true);
+				if (active && wasActive === false) completed = false;
+				wasActive = active;
+				const state = snapshot.phase === "ready" && (!active || completed) ? "ready" : "pending";
+				if (document.body.dataset.arkmeHarnessOnboarding !== state) {
+					document.body.dataset.arkmeHarnessOnboarding = state;
+					homeTourDiagnostic("harness-onboarding-state", {
+						state,
+						active,
+						completed
+					});
+				}
+			};
+			function OnboardingComplete({ complete }) {
+				(0, react.useEffect)(() => {
+					completed = true;
+					publish();
+					complete();
+				}, [complete]);
+				return null;
+			}
+			ctx.effect(() => {
+				publish();
+				const unsubscribe = sessions.list.subscribe(publish);
+				return () => {
+					unsubscribe();
+					delete document.body.dataset.arkmeHarnessOnboarding;
+				};
+			}, "arkme: native onboarding readiness");
+			ctx.slots.inject("settings.onboarding", () => ctx.slots.register({
+				name: "settings.onboarding",
+				id: "arkme-home-ready",
+				order: Number.MAX_SAFE_INTEGER
+			}, OnboardingComplete));
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});

package/lib/index.js

@@ -1,5 +1,5 @@
-import { $ as ARKME_DEFAULT_SHARE_WEBSITE, A as inspectNativeBundleArtifactV3, At as __exportAll, D as bundleSha256, Dt as createDesktopLifecycleReader, E as arkmeSandboxEntryId, Et as retryAfterMillis, F as assertExtensionArtifactSize, G as validateVoiceprintPcm16Wav, I as canonicalExtensionJson, J as arkmeRequiredLinkMetadataFallback, K as arkmeExtensionShareRefFromLink, L as sha256Hex, M as packLocalNativeBundleDirectoryV3, Mt as __toCommonJS, N as readNativeBundleTarballV3, O as canonicalBundleJson, Ot as __commonJSMin, P as renderArkmeSandboxHostEntry, Q as parseArkmeRecordReeditAttachments, R as unpackArkmeExtension, S as ARKME_BUNDLE_ARTIFACT_KIND, St as sameRecordingImportIdentity, T as ArkmeBundleArtifactError, Tt as ArkmePluginError, U as ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE, W as ArkmeService, X as arkmeRichBackgroundSound, Y as arkmeFileBackgroundSound, Z as ArkmeRecordReeditDraftConflict, _ as arkmeClientContentDigest, _t as SecretValue, at as ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, b as verifyExtensionResolutionSignature, bt as isUnresolvedRecordingImportJob, c as persistentExtensionBundleDirectory, ct as mergeMemberJoinEvents, d as readPersistentExtensionActivation, dt as ARKME_TOOL_FILE_MAX_BYTES, et as ARKME_PROVIDER_CONTRACT_VERSION, f as refreshPersistentClientWrapper, ft as arkmeCanInlineLocalFile, g as activeProfileExtensionOwnerConflicts, gt as ArkmeOutgoingCallError, h as renderArkmeBundleClientBundle, ht as isArkmeBotAvatarRef, i as invokePersistentArkmeExtension, it as ARKME_WORLD_PUBLISH_MAX_IMAGES, j as packBundleFiles, jt as __require, k as inspectBundleArtifact, kt as __esmMin, l as persistentExtensionPackageIdentity, lt as validateMemberUpdate, m as writePersistentExtensionActivation, mt as arkmePickedFileKind, o as persistentArkmeExtensionRuntimeState, ot as applyMemberUpdate, p as repairPersistentExtensionInstallation, pt as arkmeNormalizedFileMimeType, q as arkmeIsGenericLinkMetadataTitle, r as deactivatePersistentArkmeExtension, s as materializePersistentExtensionBundle, st as cachedMemberItem, t as activatePersistentArkmeExtension, u as quarantinePersistentExtension, ut as ARKME_RUNTIME_INSTANCE_ID, v as arkmeClientContentDigestFromSource, vt as ArkmeDirectMessageAdmissionError, w as ARKME_NATIVE_BUNDLE_ARTIFACT_KIND, wt as recordingImportFileNameKey, x as verifyNativeBundleResolutionSignature, xt as recordingImportFileKind, y as verifyBundleResolutionSignature, yt as isRecordingInstantOnOrAfterUnixEpoch, z as ARKME_EXTENSION_FORMAT } from "./persistent-runtime-Be8cvpQd.js";
-import { _ as parsePluginUpdateManifest, b as validatePluginUpdateServiceOrigin, d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginArtifactPath, h as downloadAndCachePluginArtifact, m as PluginUpdateArtifactError, n as buildTargetInstallArgs, o as reconcilePluginUpdaterProfilePolicy, p as ARKME_PLUGIN_PACKAGE_NAME$1, t as assertTargetArtifactIntegrity, u as detachManagedProfilePluginLink, v as pluginUpdateEndpointUrl, y as validatePluginUpdateArtifactOrigin } from "./plugin-updater-helper-BbjKUV9T.js";
+import { $ as ARKME_DEFAULT_SHARE_WEBSITE, A as inspectNativeBundleArtifactV3, At as __commonJSMin, D as bundleSha256, Dt as ArkmePluginError, E as arkmeSandboxEntryId, Et as normalizeRecentEmojiIds, F as assertExtensionArtifactSize, G as validateVoiceprintPcm16Wav, I as canonicalExtensionJson, J as arkmeRequiredLinkMetadataFallback, K as arkmeExtensionShareRefFromLink, L as sha256Hex, M as packLocalNativeBundleDirectoryV3, Mt as __exportAll, N as readNativeBundleTarballV3, Nt as __require, O as canonicalBundleJson, Ot as retryAfterMillis, P as renderArkmeSandboxHostEntry, Pt as __toCommonJS, Q as parseArkmeRecordReeditAttachments, R as unpackArkmeExtension, S as ARKME_BUNDLE_ARTIFACT_KIND, St as sameRecordingImportIdentity, T as ArkmeBundleArtifactError, Tt as isRecentEmojiId, U as ARKME_EXTENSION_RUNTIME_UNAVAILABLE_MESSAGE, W as ArkmeService, X as arkmeRichBackgroundSound, Y as arkmeFileBackgroundSound, Z as ArkmeRecordReeditDraftConflict, _ as arkmeClientContentDigest, _t as SecretValue, at as ARKME_WORLD_PUBLISH_MAX_IMAGE_BYTES, b as verifyExtensionResolutionSignature, bt as isUnresolvedRecordingImportJob, c as persistentExtensionBundleDirectory, ct as mergeMemberJoinEvents, d as readPersistentExtensionActivation, dt as ARKME_TOOL_FILE_MAX_BYTES, et as ARKME_PROVIDER_CONTRACT_VERSION, f as refreshPersistentClientWrapper, ft as arkmeCanInlineLocalFile, g as activeProfileExtensionOwnerConflicts, gt as ArkmeOutgoingCallError, h as renderArkmeBundleClientBundle, ht as isArkmeBotAvatarRef, i as invokePersistentArkmeExtension, it as ARKME_WORLD_PUBLISH_MAX_IMAGES, j as packBundleFiles, jt as __esmMin, k as inspectBundleArtifact, kt as createDesktopLifecycleReader, l as persistentExtensionPackageIdentity, lt as validateMemberUpdate, m as writePersistentExtensionActivation, mt as arkmePickedFileKind, o as persistentArkmeExtensionRuntimeState, ot as applyMemberUpdate, p as repairPersistentExtensionInstallation, pt as arkmeNormalizedFileMimeType, q as arkmeIsGenericLinkMetadataTitle, r as deactivatePersistentArkmeExtension, s as materializePersistentExtensionBundle, st as cachedMemberItem, t as activatePersistentArkmeExtension, u as quarantinePersistentExtension, ut as ARKME_RUNTIME_INSTANCE_ID, v as arkmeClientContentDigestFromSource, vt as ArkmeDirectMessageAdmissionError, w as ARKME_NATIVE_BUNDLE_ARTIFACT_KIND, wt as recordingImportFileNameKey, x as verifyNativeBundleResolutionSignature, xt as recordingImportFileKind, y as verifyBundleResolutionSignature, yt as isRecordingInstantOnOrAfterUnixEpoch, z as ARKME_EXTENSION_FORMAT } from "./persistent-runtime-Bu8Zk87a.js";
+import { _ as parsePluginUpdateManifest, b as validatePluginUpdateServiceOrigin, d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginArtifactPath, h as downloadAndCachePluginArtifact, m as PluginUpdateArtifactError, n as buildTargetInstallArgs, o as reconcilePluginUpdaterProfilePolicy, p as ARKME_PLUGIN_PACKAGE_NAME$1, t as assertTargetArtifactIntegrity, u as detachManagedProfilePluginLink, v as pluginUpdateEndpointUrl, y as validatePluginUpdateArtifactOrigin } from "./plugin-updater-helper-y7wzJLOx.js";
 import { a as securePrivateDirectory, c as securePrivateFileSync, i as prepareProfilePackageManager, n as isArkmeProfilePackageName, o as securePrivateDirectorySync, r as localExtensionPnpmArgs, s as securePrivateFile, t as applyArkmeProfileBundlePolicy } from "./profile-bundle-policy-DLXDyohJ.js";
 import { i as invokeArkmeBundle, n as arkmeBundleActive, r as deactivateArkmeBundle } from "./bundle-runtime-CE73h3vS.js";
 import { t as ArkmeExtensionInstallStore } from "./install-store-bnyQDtYt.js";
@@ -31,9 +31,9 @@ import { getOrCreateAnonymousUserId } from "@deepseek-ai/dsh-anonymous-user-id";
 import { EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ProviderRequestId, ReasoningEffortId, attributionHeaders, createUserMessage } from "@deepseek-ai/dsh-llm";
 import { DeepSeekAdapter, resolveAdapterOptions } from "@deepseek-ai/dsh-llm-deepseek";
 import sharp from "sharp";
+import WebSocket$1, { WebSocket, WebSocketServer } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { AttachmentError, AttachmentId } from "@deepseek-ai/dsh-attachment";
-import WebSocket from "ws";
 import { scheduler, setTimeout as setTimeout$1 } from "node:timers/promises";
 //#region src/tools/shared/output.ts
 const TEXT_OUTPUT$3 = {
@@ -108,6 +108,7 @@ const ARKME_HARNESS_EMBED_PATH = "/arkme-self/harness-frame";
 const HARNESS_SESSION_CLIENT_ID = "@senguoyun/dsh-arkme/harness-session";
 const HARNESS_SESSION_CLIENT_PATH = "/arkme-self/harness-session-client.js";
 const ARKME_HARNESS_MODEL_CLIENT_PATH = "/arkme-self/harness-model-client.js";
+const ARKME_HARNESS_ONBOARDING_CLIENT_PATH = "/arkme-self/harness-onboarding-client.js";
 //#endregion
 //#region src/plugin-update-policy.ts
 const PLUGIN_UPDATE_TERMINAL_STATE_TTL_MS = 10 * 6e4;
@@ -11453,6 +11454,7 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 			return await service.createBotSummary({
 				name: stringParam(params, "name"),
 				provider: botProviderParam(params),
+				...stringParam(params, "requestUid").trim() === "" ? {} : { requestUid: stringParam(params, "requestUid").trim() },
 				...stringParam(params, "description").trim() === "" ? {} : { description: stringParam(params, "description") },
 				...avatar === "" ? {} : { avatar }
 			});
@@ -11700,6 +11702,9 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 			...requestSignal === void 0 ? {} : { signal: requestSignal }
 		});
 		case "topic.rename": return await service.renameTopic(stringParam(params, "sourceRef"), stringParam(params, "title"));
+		case "topic.home-visibility":
+			if (params.showInHome !== void 0 && typeof params.showInHome !== "boolean") throw new ArkmePluginError("topic-policy-invalid", "首页展示开关必须为布尔值", false);
+			return await service.topicHomeVisibility(stringParam(params, "sourceRef"), params.showInHome, requestSignal);
 		case "topic.dissolve": return await service.dissolveTopic(stringParam(params, "sourceRef"), stringParam(params, "parentSourceRef") || void 0, stringListParam(params, "childSourceRefs"), stringParam(params, "requestId") || void 0, numberParam(params, "expectedRecordCount", 0));
 		case "topic.dissolve.status": return await service.topicDissolveStatus(stringParam(params, "requestId")) ?? null;
 		case "topic.dissolve.active": return await service.activeTopicDissolve() ?? null;
@@ -11722,7 +11727,8 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 			const cursor = timelineCursorParam(params);
 			return await service.readSource(stringParam(params, "sourceRef"), {
 				limit: numberParam(params, "limit", 30),
-				...cursor === void 0 ? {} : { cursor }
+				...cursor === void 0 ? {} : { cursor },
+				...requestSignal === void 0 ? {} : { signal: requestSignal }
 			});
 		}
 		case "source.timeline-around": return await service.readSourceAround(stringParam(params, "sourceRef"), stringParam(params, "itemUid"), numberParam(params, "recordOwnerUserId", 0), {
@@ -11958,6 +11964,8 @@ async function dispatchArkmeHostOperation(service, operation, params, updateMana
 				...expectedUserId === void 0 ? {} : { expectedUserId }
 			});
 		}
+		case "emoji.recent.list": return await service.recentEmojiIds(stringParam(params, "accountKey"), requestSignal);
+		case "emoji.recent.record": return await service.recordRecentEmoji(stringParam(params, "accountKey"), stringParam(params, "emojiId"), requestSignal);
 		case "favorite-stickers.list": return await service.favoriteStickers();
 		case "favorite-stickers.add": return await service.addFavoriteSticker(favoriteStickerItemParam(params));
 		case "favorite-stickers.send": return await service.sendFavoriteSticker(stringParam(params, "sourceRef"), stringParam(params, "fileAssetUid"), {
@@ -12422,6 +12430,20 @@ function createHarnessEmbedRouteHandler(options) {
 		try {
 			const fullGraph = options.getGraph();
 			const projectedGraph = projectHarnessBootGraph(fullGraph, options.installedPackageNames(), options.modelClient);
+			if (options.onboardingClient !== void 0) {
+				const entry = {
+					...options.onboardingClient,
+					inject: [...requiredBootPackages(projectedGraph.entries), ...projectedGraph.entries.filter((item) => item.id.startsWith("@deepseek-ai/dsh-client-ui-settings")).map((item) => item.id)]
+				};
+				projectedGraph.entries.push(entry);
+				projectedGraph.batches?.push({
+					phase: "application",
+					url: entry.url,
+					rev: entry.rev,
+					entries: [entry.id]
+				});
+				projectedGraph.rev = shortHash(`${projectedGraph.rev}:${entry.rev}`);
+			}
 			if (options.sessionClient !== void 0) {
 				const rev = options.sessionClient.revision;
 				projectedGraph.entries.push({
@@ -12572,6 +12594,10 @@ const ASSETS = {
 		contentType: "image/png",
 		cacheControl: "public, max-age=31536000, immutable"
 	},
+	"call-demo-utterance-v1.m4a": {
+		contentType: "audio/mp4",
+		cacheControl: "public, max-age=31536000, immutable"
+	},
 	"manifest.json": {
 		contentType: "application/json; charset=utf-8",
 		cacheControl: "no-store"
@@ -15453,6 +15479,9 @@ var ArkmeLocalDatabase = class {
       PRAGMA journal_mode = WAL;
       PRAGMA synchronous = NORMAL;
       PRAGMA foreign_keys = ON;
+      CREATE TABLE IF NOT EXISTS recent_emoji (
+        account_key TEXT PRIMARY KEY, emoji_ids TEXT NOT NULL
+      );
       CREATE TABLE IF NOT EXISTS conversation_directory (
         user_id INTEGER NOT NULL, identity TEXT NOT NULL, payload TEXT NOT NULL,
         visibility TEXT, PRIMARY KEY(user_id, identity)
@@ -16106,12 +16135,34 @@ var ArkmeLocalDatabase = class {
 			throw error;
 		}
 	}
+	readRecentEmojiIds(accountKey) {
+		const row = this.database.prepare("SELECT emoji_ids FROM recent_emoji WHERE account_key=?").get(accountKey);
+		if (!row) return [];
+		try {
+			return normalizeRecentEmojiIds(JSON.parse(row.emoji_ids));
+		} catch {
+			return [];
+		}
+	}
+	async recentEmojiIds(accountKey) {
+		return this.readRecentEmojiIds(accountKey);
+	}
+	async recordRecentEmoji(accountKey, emojiId) {
+		if (!isRecentEmojiId(emojiId)) throw new Error("Invalid recent emoji");
+		let ids = [];
+		this.transaction(() => {
+			ids = normalizeRecentEmojiIds([emojiId, ...this.readRecentEmojiIds(accountKey)]);
+			this.database.prepare(`INSERT INTO recent_emoji (account_key, emoji_ids) VALUES (?, ?)
+        ON CONFLICT(account_key) DO UPDATE SET emoji_ids=excluded.emoji_ids`).run(accountKey, JSON.stringify(ids));
+		});
+		return ids;
+	}
 	transaction(work) {
 		this.database.exec("BEGIN IMMEDIATE");
 		try {
 			work();
-			this.database.exec("COMMIT");
 			this.secureDatabaseFiles();
+			this.database.exec("COMMIT");
 		} catch (error) {
 			this.database.exec("ROLLBACK");
 			throw error;
@@ -17747,80 +17798,84 @@ const HEARTBEAT_MS = 2e4;
 function isLoopback$2(address) {
 	return address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
 }
-function dataLine(event) {
-	return `data: ${JSON.stringify({
+function eventFrame(event) {
+	return JSON.stringify({
 		...event,
 		providerInstanceId: ARKME_RUNTIME_INSTANCE_ID
-	})}\n\n`;
+	});
 }
+/** Host-owned, receive-only event transport; no business commands or credentials. */
 var ArkmeRealtimeEvents = class {
+	service;
 	options;
-	connections = /* @__PURE__ */ new Set();
+	server = new WebSocketServer({
+		noServer: true,
+		maxPayload: 1024,
+		perMessageDeflate: false
+	});
+	awaitingPong = /* @__PURE__ */ new Set();
 	unsubscribe;
 	heartbeat;
+	closed = false;
 	constructor(service, options) {
+		this.service = service;
 		this.options = options;
 		this.unsubscribe = service.subscribeChatRealtime((event) => {
-			this.broadcast(dataLine(event));
+			const frame = eventFrame(event);
+			for (const client of this.server.clients) if (client.readyState === WebSocket.OPEN) client.send(frame);
 		});
 		this.heartbeat = setInterval(() => {
-			this.broadcast(": heartbeat\n\n");
+			for (const client of this.server.clients) {
+				if (this.awaitingPong.has(client)) {
+					client.terminate();
+					continue;
+				}
+				this.awaitingPong.add(client);
+				client.ping();
+			}
 		}, HEARTBEAT_MS);
 		this.heartbeat.unref();
-		this.service = service;
 	}
-	service;
-	handler = (req, res) => {
-		if (req.method !== "GET") {
-			res.writeHead(405);
-			res.end();
-			return;
-		}
-		if (!this.options.allowNonLoopback && !isLoopback$2(req.socket.remoteAddress)) {
-			res.writeHead(403);
-			res.end();
-			return;
-		}
-		const origin = req.headers.origin;
-		if (origin !== void 0) try {
-			const parsed = new URL(origin);
-			const port = parsed.port === "" ? parsed.protocol === "https:" ? 443 : 80 : Number(parsed.port);
-			if (!["127.0.0.1", "localhost"].includes(parsed.hostname) || port !== this.options.expectedPort) {
-				res.writeHead(403);
-				res.end();
-				return;
-			}
-		} catch {
-			res.writeHead(403);
-			res.end();
+	handler = (req, socket, head) => {
+		if (req.method !== "GET" || !this.allowed(req)) {
+			socket.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n");
 			return;
 		}
-		res.writeHead(200, {
-			"Content-Type": "text/event-stream; charset=utf-8",
-			"Cache-Control": "no-cache, no-transform",
-			Connection: "keep-alive",
-			"X-Accel-Buffering": "no",
-			"X-Content-Type-Options": "nosniff"
-		});
-		res.write("retry: 1000\n: connected\n\n");
-		res.write(dataLine(this.service.chatRealtimeInitialEvent()));
-		this.connections.add(res);
-		res.on("close", () => {
-			this.connections.delete(res);
+		this.server.handleUpgrade(req, socket, head, (client) => {
+			client.on("error", () => {
+				client.terminate();
+			});
+			client.on("pong", () => {
+				this.awaitingPong.delete(client);
+			});
+			client.on("close", () => {
+				this.awaitingPong.delete(client);
+			});
+			client.on("message", () => {
+				client.close(1008, "Receive-only channel");
+			});
+			client.send(eventFrame(this.service.chatRealtimeInitialEvent()));
 		});
 	};
 	close() {
+		if (this.closed) return;
+		this.closed = true;
 		this.unsubscribe();
 		clearInterval(this.heartbeat);
-		for (const response of this.connections) response.destroy();
-		this.connections.clear();
+		for (const client of this.server.clients) client.terminate();
+		this.awaitingPong.clear();
+		this.server.close();
 	}
-	broadcast(frame) {
-		for (const response of [...this.connections]) try {
-			response.write(frame);
+	allowed(req) {
+		if (!this.options.allowNonLoopback && !isLoopback$2(req.socket.remoteAddress)) return false;
+		const origin = req.headers.origin;
+		if (origin === void 0) return true;
+		try {
+			const parsed = new URL(origin);
+			const port = parsed.port === "" ? parsed.protocol === "https:" ? 443 : 80 : Number(parsed.port);
+			return ["http:", "https:"].includes(parsed.protocol) && ["127.0.0.1", "localhost"].includes(parsed.hostname) && port === this.options.expectedPort;
 		} catch {
-			response.destroy();
-			this.connections.delete(response);
+			return false;
 		}
 	}
 };
@@ -25442,6 +25497,36 @@ const pinBotDirectoryToolModule = defineArkmeCoreToolModule({
 	}
 });
 //#endregion
+//#region src/tools/business/conversation/topic-home-visibility.ts
+const topicHomeVisibilityToolModule = defineArkmeCoreToolModule({
+	meta: {
+		id: "business.conversation.topic-home-visibility.v1",
+		toolName: "arkme_topic_home_visibility",
+		kind: "business",
+		phase: "core",
+		effect: "write",
+		grant: "explicit-user-write",
+		profiles: ["business", "hybrid"]
+	},
+	create: (ports) => defineTool({
+		name: "arkme_topic_home_visibility",
+		description: "Read a topic home visibility preference. Only set show_in_home after an explicit user request. This never changes topic contents, name, privacy or the origin of any message.",
+		parameters: {
+			source_ref: {
+				type: "string",
+				required: true,
+				description: "Account-bound topic source_ref from arkme_sources_list."
+			},
+			show_in_home: {
+				type: "boolean",
+				description: "Omit to read; true to show topic records on home, false to hide."
+			}
+		},
+		output: TEXT_OUTPUT$3,
+		execute: async (args) => taggedJSON("主题首页展示", await ports.topicHomeVisibility(args.source_ref, args.show_in_home))
+	})
+});
+//#endregion
 //#region src/tools/business/conversation/group-ai-polish.ts
 const groupAiPolishToolModule = defineArkmeCoreToolModule({
 	meta: {
@@ -29234,6 +29319,7 @@ const businessToolModules = [
 	...wechatToolModules,
 	listSourcesToolModule,
 	pinBotDirectoryToolModule,
+	topicHomeVisibilityToolModule,
 	unreadConversationsToolModule,
 	...groupMemberToolModules,
 	readSourceToolModule,
@@ -29400,6 +29486,7 @@ const arkmeToolCatalog = defineArkmeToolCatalog([
 const CORE_CONFIRMATION_TOOLS = /* @__PURE__ */ new Set([
 	"arkme_bot_conversation_pin",
 	"arkme_direct_message_refusal_set",
+	"arkme_topic_home_visibility",
 	"arkme_background_sound_disable",
 	"arkme_file_prepare",
 	"arkme_files_send",
@@ -29445,6 +29532,7 @@ function cleanArgument(value, maxLength) {
 function coreConfirmationQuestion(name, args) {
 	if (name === "arkme_direct_message_refusal_set") return args.refused === true ? "是否确认拒收这个私聊用户的消息？拒收期间双方都无法发送新消息，历史记录保留。" : "是否确认解除你对这个私聊用户的拒收？如果对方仍拒收，双方依然无法发送新消息。";
 	if (name === "arkme_recording_import") return args.action === "retry" ? "是否确认重试这条失败的录音上传任务？" : `是否确认按指定的开始时间导入所选录音，并将归属设为“${args.ownership === "other" ? "其他" : "自己"}”？`;
+	if (name === "arkme_topic_home_visibility") return args.show_in_home === true ? "是否确认将这个主题的快记展示在首页？" : "是否确认在首页隐藏这个主题的快记？主题与快记不会被删除。";
 	if (name === "arkme_background_sound_disable") return "是否确认关闭当前 Arkme 账号的文字背景音？这不会删除已经发送的背景音。";
 	if (name === "arkme_user_ban") return "是否确认封禁这个私聊用户？确认后将无法重新登录；Backend、聊天和录音请求立即受限；其他仅离线验 JWT 的服务中，旧 Access Token 最迟约 1 小时失效。";
 	if (name === "arkme_user_unban") return "是否确认解封这个私聊用户？确认后该用户可重新登录并恢复操作。";
@@ -29495,6 +29583,7 @@ function withCoreConversationalConfirmation(definition, conversation) {
 			const violations = validateJsonSchemaValue(definition.parameters, args, "");
 			if (violations.length > 0) throw new ToolArgsError(violations);
 			if (definition.name === "arkme_recording_import" && typeof args === "object" && args !== null && "action" in args && args.action === "status") return await definition.execute(args, exec);
+			if (definition.name === "arkme_topic_home_visibility" && args.show_in_home === void 0) return await definition.execute(args, exec);
 			if (exec.agent === void 0) throw new Error("该 Arkme 操作必须在一个真实 DSH Agent 会话中执行");
 			const hooks = arkmeConfirmationContextHooks(definition);
 			const request = hooks?.confirmationRequest?.(args);
@@ -31141,7 +31230,7 @@ function createDefaultDshRemoteSocket(input) {
 	if (accessToken === "") throw new TypeError("DSH remote Realtime access token is required");
 	if (input.signal.aborted) throw input.signal.reason;
 	const diagnosticRequestId = randomUUID();
-	const socket = new WebSocket(dshRemoteRealtimeEndpoint(input.realtimeBaseUrl), {
+	const socket = new WebSocket$1(dshRemoteRealtimeEndpoint(input.realtimeBaseUrl), {
 		headers: {
 			Authorization: `Bearer ${accessToken}`,
 			"X-Request-ID": diagnosticRequestId
@@ -36202,7 +36291,25 @@ function apply(ctx, config) {
 		}
 	}), "arkme: Harness session observer asset");
 	const harnessModelClient = readFileSync(new URL("../lib/harness-model-client.js", import.meta.url));
+	const harnessOnboardingClient = readFileSync(new URL("../lib/harness-onboarding-client.js", import.meta.url));
+	ctx.effect(() => ctx.webServer.register({
+		kind: "exact",
+		path: ARKME_HARNESS_ONBOARDING_CLIENT_PATH,
+		handler: (_request, response) => {
+			response.writeHead(200, {
+				"Content-Type": "application/javascript",
+				"Cache-Control": "no-cache"
+			});
+			response.end(harnessOnboardingClient);
+		}
+	}), "arkme: Harness onboarding bridge asset");
 	const harnessEmbedHandler = createHarnessEmbedRouteHandler({
+		onboardingClient: {
+			id: "@senguoyun/dsh-arkme/harness-onboarding",
+			url: ARKME_HARNESS_ONBOARDING_CLIENT_PATH,
+			rev: createHash("sha256").update(harnessOnboardingClient).digest("hex"),
+			external: ["react"]
+		},
 		...sessionClient === void 0 ? {} : { sessionClient: {
 			revision: createHash("sha256").update(sessionClient.source).digest("hex").slice(0, 12),
 			apiPath: sessionClient.apiPath
@@ -36340,8 +36447,7 @@ function apply(ctx, config) {
 		handler: extensionPreviewReadHandler
 	}), "dsh-arkme: extension preview read route");
 	ctx.effect(() => {
-		const disposeRoute = ctx.webServer.register({
-			kind: "exact",
+		const disposeRoute = ctx.webServer.registerUpgrade({
 			path: `${config.routePath}/events`,
 			handler: realtimeEvents.handler
 		});

package/lib/persistent-extension.js

@@ -1,2 +1,2 @@
-import { a as persistentArkmeExtensionActive, i as invokePersistentArkmeExtension, n as applyPersistentArkmeHostExtension, o as persistentArkmeExtensionRuntimeState, r as deactivatePersistentArkmeExtension, t as activatePersistentArkmeExtension } from "./persistent-runtime-Be8cvpQd.js";
+import { a as persistentArkmeExtensionActive, i as invokePersistentArkmeExtension, n as applyPersistentArkmeHostExtension, o as persistentArkmeExtensionRuntimeState, r as deactivatePersistentArkmeExtension, t as activatePersistentArkmeExtension } from "./persistent-runtime-Bu8Zk87a.js";
 export { activatePersistentArkmeExtension, applyPersistentArkmeHostExtension, deactivatePersistentArkmeExtension, invokePersistentArkmeExtension, persistentArkmeExtensionActive, persistentArkmeExtensionRuntimeState };