@starpak/os 0.1.2 → 0.2.0

package/lib/index.d.ts

@@ -1,4 +1,78 @@
+import type { Readable } from 'node:stream';
 import type { ExtensionContext } from '@starpak/iwant';
+/** spak2os 贡献的 APPS（OS 只读消费，不反向写入）。 */
+export interface OsBridgeApp {
+    id: string;
+    name: string;
+    version?: string;
+    description?: string;
+    web?: string;
+    icon?: string;
+    width?: number;
+    height?: number;
+    accent?: string;
+    source?: 'extension' | 'mod';
+    contributor?: string;
+}
+/** `@starpak/spak2os` 暴露给 OS 的只读能力（结构兼容，避免硬依赖）。 */
+export interface OsBridge {
+    readonly readOnly?: boolean;
+    listApps(options?: {
+        refresh?: boolean;
+    }): Promise<OsBridgeApp[]>;
+    readAppAsset(id: string, relative: string): Promise<{
+        data: Uint8Array;
+        mime: string;
+        size?: number;
+    } | null>;
+    info(): Promise<Record<string, unknown>>;
+    scan(options: {
+        roots: string[];
+        kinds?: string[];
+        maxDepth?: number;
+        limit?: number;
+    }): Promise<{
+        roots: string[];
+        files: Array<{
+            path: string;
+            name: string;
+            ext: string;
+            kind: string;
+            size: number;
+            mtimeMs: number;
+            root: string;
+        }>;
+        scannedDirs: number;
+        truncated: boolean;
+        errors: Array<{
+            path: string;
+            message: string;
+        }>;
+    }>;
+    readdir(path: string): Promise<Array<{
+        name: string;
+        path: string;
+        kind: string;
+        size?: number;
+        mtimeMs?: number;
+    }>>;
+    stat(path: string): Promise<{
+        path: string;
+        size: number;
+        mtimeMs: number;
+        isFile: boolean;
+        isDirectory: boolean;
+    }>;
+    createReadStream(path: string, options?: {
+        start?: number;
+        end?: number;
+    }): Promise<{
+        stream: Readable;
+        size: number;
+        start: number;
+        end: number;
+    }>;
+}
 export interface OsOptions {
     /** 工程根目录（默认当前目录）。 */
     root?: string;
@@ -8,6 +82,8 @@ export interface OsOptions {
     port?: number;
     /** 监听地址（默认 127.0.0.1）。 */
     host?: string;
+    /** spak2os 只读桥；未安装时为 undefined，OS 仍可独立运行。 */
+    bridge?: OsBridge;
 }
 export interface OsHandle {
     port: number;
@@ -26,6 +102,7 @@ export declare function runOsCli(options?: {
     root?: string;
     port?: number;
     host?: string;
+    bridge?: OsBridge;
 }): Promise<void>;
 /** 扩展入口：注册 `spm os` 命令（需要 commands 能力），并顺带激活 apps 扩展。 */
 export declare function activate(ctx: ExtensionContext): Promise<void>;

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAYtD,MAAM,WAAW,SAAS;IACxB,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAmDD,wBAAsB,OAAO,CAAC,OAAO,GAAE,SAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqFxE;AAED,iDAAiD;AACjD,wBAAgB,KAAK,CAAC,GAAG,EAAE;IAAE,MAAM,CAAC,EAAE,GAAG,CAAC;IAAC,MAAM,CAAC,EAAE,GAAG,CAAA;CAAE,EAAE,MAAM,GAAE,SAAc,GAAG,IAAI,CAevF;AAED,iCAAiC;AACjC,wBAAsB,QAAQ,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAW3G;AAED,yDAAyD;AACzD,wBAAsB,QAAQ,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwDnE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEtD,uCAAuC;AACvC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,WAAW,GAAG,KAAK,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,mDAAmD;AACnD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACjE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IAC7G,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACxC,IAAI,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC/F,KAAK,EAAE,MAAM,EAAE,CAAA;QACf,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;QACpH,WAAW,EAAE,MAAM,CAAA;QACnB,SAAS,EAAE,OAAO,CAAA;QAClB,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KACjD,CAAC,CAAA;IACF,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAA;IACpH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IACnH,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAClF,MAAM,EAAE,QAAQ,CAAA;QAChB,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;QACb,GAAG,EAAE,MAAM,CAAA;KACZ,CAAC,CAAA;CACH;AA6CD,MAAM,WAAW,SAAS;IACxB,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6CAA6C;IAC7C,MAAM,CAAC,EAAE,QAAQ,CAAA;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAwJD,wBAAsB,OAAO,CAAC,OAAO,GAAE,SAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAmLxE;AAED,iDAAiD;AACjD,wBAAgB,KAAK,CAAC,GAAG,EAAE;IAAE,MAAM,CAAC,EAAE,GAAG,CAAC;IAAC,MAAM,CAAC,EAAE,GAAG,CAAA;CAAE,EAAE,MAAM,GAAE,SAAc,GAAG,IAAI,CAevF;AAED,iCAAiC;AACjC,wBAAsB,QAAQ,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAW9H;AAED,yDAAyD;AACzD,wBAAsB,QAAQ,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6DnE"}

package/lib/index.js

@@ -20,12 +20,43 @@ const MIME = {
     '.html': 'text/html; charset=utf-8',
     '.css': 'text/css; charset=utf-8',
     '.js': 'text/javascript; charset=utf-8',
+    '.mjs': 'text/javascript; charset=utf-8',
     '.json': 'application/json; charset=utf-8',
     '.svg': 'image/svg+xml',
     '.png': 'image/png',
+    '.webp': 'image/webp',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
     '.ico': 'image/x-icon',
+    '.mp3': 'audio/mpeg',
+    '.wav': 'audio/wav',
+    '.ogg': 'audio/ogg',
+    '.m4a': 'audio/mp4',
+    '.mp4': 'video/mp4',
+    '.webm': 'video/webm',
+    '.woff2': 'font/woff2',
+    '.woff': 'font/woff',
+    '.ttf': 'font/ttf',
 };
-async function listApps(root) {
+/** 桌面壳的安全头：脚本只允许同源文件，禁止被嵌入（防点击劫持）。 */
+const SECURITY_HEADERS = {
+    // 样式属性在 UI 里由 innerHTML 注入，只能对 style 放开 unsafe-inline；
+    // script 保持 'self'，即使清单里有恶意 JS 也不会执行。
+    'content-security-policy': "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob: data:; connect-src 'self' blob: data:; frame-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'",
+    'x-content-type-options': 'nosniff',
+    'referrer-policy': 'no-referrer',
+};
+/**
+ * Web 应用（清单里有 `web`）的静态资源安全头。
+ * 它们要作为 iframe 嵌进桌面，因此 frame-ancestors 只能是同源 'self'；
+ * 媒体（本地导入的 blob:）与内联样式在应用里是正常需求。
+ */
+const APP_HEADERS = {
+    'content-security-policy': "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob: data:; connect-src 'self' blob: data:; font-src 'self' data:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'self'",
+    'x-content-type-options': 'nosniff',
+    'referrer-policy': 'no-referrer',
+};
+async function listApps(root, bridge, refresh = false) {
     const appsDir = (0, node_path_1.join)(root, 'apps');
     const apps = [];
     let names = [];
@@ -33,7 +64,7 @@ async function listApps(root) {
         names = await (0, promises_1.readdir)(appsDir);
     }
     catch {
-        return apps;
+        // 没有 apps/ 时仍然可以列出扩展贡献的 APPS
     }
     for (const name of names.sort()) {
         if (name.startsWith('.'))
@@ -47,7 +78,34 @@ async function listApps(root) {
             // 不是应用目录就跳过
         }
     }
-    return apps;
+    if (bridge) {
+        try {
+            const contributed = await bridge.listApps({ refresh });
+            const seen = new Set(apps.map(app => String(app.id ?? '')));
+            for (const app of contributed) {
+                if (!app?.id || seen.has(app.id))
+                    continue;
+                seen.add(app.id);
+                apps.push({
+                    id: app.id,
+                    name: app.name,
+                    version: app.version,
+                    description: app.description,
+                    web: app.web || `/apps/${app.id}/`,
+                    icon: app.icon,
+                    width: app.width,
+                    height: app.height,
+                    accent: app.accent,
+                    source: app.source ?? 'extension',
+                    contributor: app.contributor,
+                });
+            }
+        }
+        catch (error) {
+            console.error('[spak-os] spak2os listApps 失败：', error.message);
+        }
+    }
+    return apps.sort((a, b) => String(a.id).localeCompare(String(b.id)));
 }
 async function listMods(root) {
     const modsDir = (0, node_path_1.join)(root, 'mods');
@@ -77,17 +135,96 @@ function json(response, status, body) {
     response.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'content-length': Buffer.byteLength(text) });
     response.end(text);
 }
+/**
+ * Web 应用的静态资源：/apps/<id>/... → apps/<id>/public/...
+ * 只暴露 public/，并拒绝任何路径穿越；没有清单或没有 web 字段一律当普通 404。
+ */
+async function serveApp(root, url, response, bridge) {
+    const match = /^\/apps\/([a-z0-9][a-z0-9._-]*)(\/.*)?$/.exec(url.pathname);
+    if (!match)
+        return json(response, 404, { error: 'not_found' });
+    const [, id, tail] = match;
+    // 没有尾斜杠时先重定向，保证页面里的 ./ 相对路径解析到应用目录
+    if (!tail) {
+        response.writeHead(308, { location: `/apps/${id}/`, 'content-length': 0 });
+        response.end();
+        return;
+    }
+    let relative;
+    try {
+        relative = decodeURIComponent(tail.slice(1)) || 'index.html';
+    }
+    catch {
+        return json(response, 400, { error: 'bad_request' });
+    }
+    // 1) 工程内 apps/<id>/public/（兼容旧的本地应用）
+    let manifest = {};
+    try {
+        manifest = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(root, 'apps', id, 'spak.app.json'), 'utf-8'));
+    }
+    catch { /* 扩展贡献的 APPS 没有本地清单 */ }
+    if (typeof manifest.web === 'string' && manifest.web) {
+        const publicDir = (0, node_path_1.resolve)(root, 'apps', id, 'public');
+        const target = (0, node_path_1.resolve)(publicDir, (0, node_path_1.normalize)(relative));
+        if (target === publicDir || target.startsWith(publicDir + node_path_1.sep)) {
+            let file = target;
+            try {
+                const info = await (0, promises_1.stat)(file);
+                if (info.isDirectory())
+                    file = (0, node_path_1.join)(file, 'index.html');
+            }
+            catch {
+                return json(response, 404, { error: 'not_found' });
+            }
+            const data = await (0, promises_1.readFile)(file);
+            response.writeHead(200, {
+                ...APP_HEADERS,
+                'content-type': MIME[(0, node_path_1.extname)(file)] ?? 'application/octet-stream',
+                'content-length': data.length,
+                'cache-control': 'no-cache',
+            });
+            response.end(data);
+            return;
+        }
+    }
+    // 2) spak2os 只读桥：扩展 / 模组贡献的 APPS
+    if (bridge) {
+        try {
+            const asset = await bridge.readAppAsset(id, relative);
+            if (asset) {
+                response.writeHead(200, {
+                    ...APP_HEADERS,
+                    'content-type': asset.mime,
+                    'content-length': asset.data.length,
+                    'cache-control': 'no-cache',
+                });
+                response.end(Buffer.from(asset.data));
+                return;
+            }
+        }
+        catch (error) {
+            console.error('[spak-os] spak2os readAppAsset 失败：', error.message);
+        }
+    }
+    return json(response, 404, { error: 'not_found' });
+}
 async function startOs(options = {}) {
     const root = (0, node_path_1.resolve)(options.root || process.cwd());
     // UI 资源随包发布（packages/os/ui），宿主只提供端口与应用目录
     const uiDir = options.uiDir ? (0, node_path_1.resolve)(options.uiDir) : (0, node_path_1.join)(__dirname, '..', 'ui');
     const port = options.port ?? 8008;
     const host = options.host ?? '127.0.0.1';
+    const bridge = options.bridge;
     const server = (0, node_http_1.createServer)(async (request, response) => {
         try {
             const url = new URL(request.url || '/', `http://${request.headers.host || 'localhost'}`);
             if (url.pathname === '/api/apps') {
-                return json(response, 200, { apps: await listApps(root) });
+                const refresh = url.searchParams.get('refresh') === '1';
+                return json(response, 200, {
+                    apps: await listApps(root, bridge, refresh),
+                    bridge: Boolean(bridge),
+                    readOnly: true,
+                });
             }
             if (url.pathname === '/api/mods') {
                 return json(response, 200, { mods: await listMods(root) });
@@ -95,6 +232,93 @@ async function startOs(options = {}) {
             if (url.pathname === '/api/health') {
                 return json(response, 200, { status: 'ok', os: 'spak-os', uptime: Math.round(process.uptime()) });
             }
+            // spak2os：只读 API（文件 / 目录池扫描 / 桥信息）
+            if (url.pathname.startsWith('/api/spak2os/')) {
+                if (!bridge) {
+                    return json(response, 501, {
+                        error: 'spak2os_not_installed',
+                        hint: '先运行 spm iwant -i spak2os',
+                    });
+                }
+                if (request.method !== 'GET' && request.method !== 'HEAD') {
+                    return json(response, 405, { error: 'read_only', hint: 'spak2os 不提供写接口' });
+                }
+                const action = url.pathname.slice('/api/spak2os/'.length);
+                if (action === 'info') {
+                    return json(response, 200, await bridge.info());
+                }
+                if (action === 'scan') {
+                    const roots = url.searchParams.getAll('root').filter(Boolean);
+                    const kindParam = url.searchParams.get('kind');
+                    const kinds = kindParam ? kindParam.split(',').map(item => item.trim()).filter(Boolean) : undefined;
+                    const limit = Number(url.searchParams.get('limit')) || undefined;
+                    const maxDepth = Number(url.searchParams.get('maxDepth')) || undefined;
+                    return json(response, 200, await bridge.scan({ roots, kinds, limit, maxDepth }));
+                }
+                if (action === 'dirs') {
+                    const info = await bridge.info();
+                    const target = url.searchParams.get('path') || String(info.home || '/');
+                    return json(response, 200, {
+                        path: target,
+                        entries: await bridge.readdir(target),
+                    });
+                }
+                if (action === 'stat') {
+                    const target = url.searchParams.get('path');
+                    if (!target)
+                        return json(response, 400, { error: 'missing_path' });
+                    return json(response, 200, await bridge.stat(target));
+                }
+                if (action === 'file') {
+                    const target = url.searchParams.get('path');
+                    if (!target)
+                        return json(response, 400, { error: 'missing_path' });
+                    const info = await bridge.stat(target);
+                    if (!info.isFile)
+                        return json(response, 404, { error: 'not_a_file' });
+                    let start = 0;
+                    let end = info.size - 1;
+                    let status = 200;
+                    const range = request.headers.range;
+                    if (range) {
+                        const parsed = /^bytes=(\d*)-(\d*)$/.exec(range.trim());
+                        if (!parsed) {
+                            response.writeHead(416, { 'content-range': `bytes */${info.size}` });
+                            return response.end();
+                        }
+                        const [, from, to] = parsed;
+                        if (from)
+                            start = Number(from);
+                        else if (to)
+                            start = Math.max(0, info.size - Number(to));
+                        if (to && from)
+                            end = Math.min(info.size - 1, Number(to));
+                        if (!Number.isFinite(start) || !Number.isFinite(end) || start > end || start >= info.size) {
+                            response.writeHead(416, { 'content-range': `bytes */${info.size}` });
+                            return response.end();
+                        }
+                        status = 206;
+                    }
+                    const slice = await bridge.createReadStream(target, { start, end });
+                    const headers = {
+                        'content-type': MIME[(0, node_path_1.extname)(target)] ?? 'application/octet-stream',
+                        'content-length': slice.end - slice.start + 1,
+                        'accept-ranges': 'bytes',
+                        'cache-control': 'no-store',
+                        'x-content-type-options': 'nosniff',
+                    };
+                    if (status === 206)
+                        headers['content-range'] = `bytes ${slice.start}-${slice.end}/${slice.size}`;
+                    response.writeHead(status, headers);
+                    slice.stream.on('error', () => response.destroy());
+                    return slice.stream.pipe(response);
+                }
+                return json(response, 404, { error: 'not_found' });
+            }
+            // Web 应用静态资源（apps/<id>/public/）+ 同源 iframe 安全头
+            if (url.pathname.startsWith('/apps/')) {
+                return await serveApp(root, url, response, bridge);
+            }
             // 静态文件（禁止路径穿越）
             const relative = (0, node_path_1.normalize)(decodeURIComponent(url.pathname)).replace(/^([/\\])+/, '');
             const target = (0, node_path_1.resolve)(uiDir, relative || 'index.html');
@@ -114,6 +338,7 @@ async function startOs(options = {}) {
             }
             const data = await (0, promises_1.readFile)(file);
             response.writeHead(200, {
+                ...SECURITY_HEADERS,
                 'content-type': MIME[(0, node_path_1.extname)(file)] ?? 'application/octet-stream',
                 'content-length': data.length,
                 'cache-control': 'no-cache',
@@ -121,7 +346,9 @@ async function startOs(options = {}) {
             response.end(data);
         }
         catch (error) {
-            json(response, 500, { error: 'internal_error', message: error.message });
+            // 只写服务端日志，响应不带内部错误与绝对路径
+            console.error('[spak-os]', error.message);
+            json(response, 500, { error: 'internal_error' });
         }
     });
     await new Promise((resolveListen, rejectListen) => {
@@ -235,7 +462,12 @@ async function activate(ctx) {
             if (!Number.isInteger(port) || port < 0 || port > 65535) {
                 throw new error_1.SpakError(error_1.CODES.INVALID_OPTION, { message: `端口不合法：${parsed.port}（0-65535）` });
             }
-            await runOsCli({ port, host: parsed.host, root: parsed.root });
+            // 所有扩展此时都已激活（包括 thismv 代激活的 spak2os），再取只读桥。
+            const bridge = ctx.getApi?.('spak2os');
+            if (!bridge) {
+                ctx.logger.warn('未检测到 spak2os：扩展 APPS 与外部媒体扫描不可用（spm iwant -i spak2os，或 iwant -i thismv）');
+            }
+            await runOsCli({ port, host: parsed.host, root: parsed.root, bridge });
         },
     });
     // spakos 的入口是 @starpak/os；应用管理 provider 在 @starpak/apps 里，

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,2CAA2C;AAC3C,EAAE;AACF,gCAAgC;AAChC,uBAAuB;AACvB,mDAAmD;AACnD,EAAE;AACF,qDAAqD;;AAsFrD,0BAqFC;AAGD,sBAeC;AAGD,4BAWC;AAGD,4BAwDC;AApQD,yCAAmF;AACnF,+CAA0D;AAC1D,6CAA2C;AAC3C,yCAAkE;AAClE,0CAAiD;AAGjD,MAAM,IAAI,GAA2B;IACnC,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,yBAAyB;IACjC,KAAK,EAAE,gCAAgC;IACvC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;CACvB,CAAA;AAoBD,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,MAAM,IAAI,GAAmC,EAAE,CAAA;IAC/C,IAAI,KAAK,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAClC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,mBAAQ,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;YAClE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,MAAM,IAAI,GAAmC,EAAE,CAAA;IAC/C,IAAI,KAAK,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,mBAAQ,EAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;YACrF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,IAAI,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5H,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACpB,CAAC;AAEM,KAAK,UAAU,OAAO,CAAC,UAAqB,EAAE;IACnD,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,yCAAyC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IAClF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAA;IAExC,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,KAAK,EAAE,OAAwB,EAAE,QAAwB,EAAE,EAAE;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAA;YAExF,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;YACnG,CAAC;YAED,eAAe;YACf,MAAM,QAAQ,GAAG,IAAA,qBAAS,EAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;YACrF,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,KAAK,EAAE,QAAQ,IAAI,YAAY,CAAC,CAAA;YACvD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,eAAG,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,IAAI,GAAG,MAAM,CAAA;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,CAAA;gBAC7B,IAAI,IAAI,CAAC,WAAW,EAAE;oBAAE,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,YAAY,CAAC,CAAA;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,IAAA,mBAAO,EAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;gBACzE,IAAI,GAAG,IAAA,gBAAI,EAAC,KAAK,EAAE,YAAY,CAAC,CAAA,CAAC,SAAS;YAC5C,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,CAAA;YACjC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;gBACtB,cAAc,EAAE,IAAI,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B;gBACjE,gBAAgB,EAAE,IAAI,CAAC,MAAM;gBAC7B,eAAe,EAAE,UAAU;aAC5B,CAAC,CAAA;YACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,CAAC,KAA4B,EAAE,EAAE;YAC/C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5B,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAA;YAChC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,YAAY,CAAC,IAAI,iBAAS,CAAC,aAAK,CAAC,WAAW,EAAE;oBACnD,OAAO,EAAE,MAAM,MAAM,OAAO;oBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvB,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC,CAAA;YACL,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtD,OAAO,YAAY,CAAC,IAAI,iBAAS,CAAC,aAAK,CAAC,aAAa,EAAE;oBACrD,OAAO,EAAE,UAAU,MAAM,EAAE;oBAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvB,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC,CAAA;YACL,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5B,aAAa,EAAE,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAChC,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAE/E,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,IAAI;QACJ,GAAG,EAAE,UAAU,IAAI,IAAI,UAAU,EAAE;QACnC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;KAC7E,CAAA;AACH,CAAC;AAED,iDAAiD;AACjD,SAAgB,KAAK,CAAC,GAAmC,EAAE,SAAoB,EAAE;IAC/E,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,CAAA;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,sCAAsC,CAAC,CAAA;QAC3D,OAAM;IACR,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC,CAAA;IACH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC,CAAA;AACL,CAAC;AAED,iCAAiC;AAC1B,KAAK,UAAU,QAAQ,CAAC,UAA2D,EAAE;IAC1F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;IAC5C,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;IACxF,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAC9B,MAAM,IAAI,OAAO,CAAO,CAAC,WAAW,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;QACpE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC5B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;AAC5B,CAAC;AAED,yDAAyD;AAClD,KAAK,UAAU,QAAQ,CAAC,GAAqB;IAClD,GAAG,CAAC,eAAe,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,EAAE;QACR,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE;YAC7D,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,iCAAiC,EAAE;YAC1E,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,EAAE;SAC9D;QACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,+BAA+B,CAAC;QACrD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAEpD,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,MAAM,OAAO,GAAa,EAAE,CAAA;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;gBACnB,MAAM,IAAI,GAAG,GAAW,EAAE;oBACxB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;oBACxB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAAC,OAAO,EAAE,CAAA;oBAAC,CAAC;oBAChF,CAAC,EAAE,CAAA;oBACH,OAAO,IAAI,CAAA;gBACb,CAAC,CAAA;gBACD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;qBACrD,IAAI,GAAG,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;qBAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;qBAC1D,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;;oBAC1C,MAAM,IAAI,iBAAS,CAAC,aAAK,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,aAAa,GAAG,EAAE,EAAE,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,iBAAS,CAAC,aAAK,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YAC1F,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACxD,MAAM,IAAI,iBAAS,CAAC,aAAK,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,SAAS,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,CAAA;YACzF,CAAC;YAED,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QAChE,CAAC;KACF,CAAC,CAAA;IAEF,2DAA2D;IAC3D,mCAAmC;IACnC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,2BAAa,EAAC,UAAU,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,eAAe,CAA0D,CAAA;QAClG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAgB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,2CAA2C;AAC3C,EAAE;AACF,gCAAgC;AAChC,uBAAuB;AACvB,mDAAmD;AACnD,EAAE;AACF,qDAAqD;;AAqQrD,0BAmLC;AAGD,sBAeC;AAGD,4BAWC;AAGD,4BA6DC;AAthBD,yCAAmF;AACnF,+CAA0D;AAC1D,6CAA2C;AAC3C,yCAAkE;AAElE,0CAAiD;AAyCjD,MAAM,IAAI,GAA2B;IACnC,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,yBAAyB;IACjC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,UAAU;CACnB,CAAA;AAED,sCAAsC;AACtC,MAAM,gBAAgB,GAA2B;IAC/C,uDAAuD;IACvD,sCAAsC;IACtC,yBAAyB,EAAE,iPAAiP;IAC5Q,wBAAwB,EAAE,SAAS;IACnC,iBAAiB,EAAE,aAAa;CACjC,CAAA;AAED;;;;GAIG;AACH,MAAM,WAAW,GAA2B;IAC1C,yBAAyB,EAAE,+QAA+Q;IAC1S,wBAAwB,EAAE,SAAS;IACnC,iBAAiB,EAAE,aAAa;CACjC,CAAA;AAsBD,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,MAAiB,EAAE,OAAO,GAAG,KAAK;IACtE,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,MAAM,IAAI,GAAmC,EAAE,CAAA;IAC/C,IAAI,KAAK,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAClC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,mBAAQ,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;YAClE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;YACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC3D,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAQ;gBAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBAChB,IAAI,CAAC,IAAI,CAAC;oBACR,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,SAAS,GAAG,CAAC,EAAE,GAAG;oBAClC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,WAAW;oBACjC,WAAW,EAAE,GAAG,CAAC,WAAW;iBAC7B,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAG,KAAe,CAAC,OAAO,CAAC,CAAA;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACtE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,MAAM,IAAI,GAAmC,EAAE,CAAA;IAC/C,IAAI,KAAK,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,mBAAQ,EAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;YACrF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,IAAI,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5H,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACpB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAQ,EAAE,QAAwB,EAAE,MAAiB;IACzF,MAAM,KAAK,GAAG,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC1E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;IAC9D,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,KAAK,CAAA;IAE1B,mCAAmC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1E,QAAQ,CAAC,GAAG,EAAE,CAAA;QACd,OAAM;IACR,CAAC;IAED,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,qCAAqC;IACrC,IAAI,QAAQ,GAAqB,EAAE,CAAA;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,mBAAQ,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IACzF,CAAC;IAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAEnC,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,IAAA,qBAAS,EAAC,QAAQ,CAAC,CAAC,CAAA;QACtD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,GAAG,eAAG,CAAC,EAAE,CAAC;YAC/D,IAAI,IAAI,GAAG,MAAM,CAAA;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,CAAA;gBAC7B,IAAI,IAAI,CAAC,WAAW,EAAE;oBAAE,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,YAAY,CAAC,CAAA;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YACpD,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,CAAA;YACjC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;gBACtB,GAAG,WAAW;gBACd,cAAc,EAAE,IAAI,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B;gBACjE,gBAAgB,EAAE,IAAI,CAAC,MAAM;gBAC7B,eAAe,EAAE,UAAU;aAC5B,CAAC,CAAA;YACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAClB,OAAM;QACR,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;YACrD,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACtB,GAAG,WAAW;oBACd,cAAc,EAAE,KAAK,CAAC,IAAI;oBAC1B,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;oBACnC,eAAe,EAAE,UAAU;iBAC5B,CAAC,CAAA;gBACF,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBACrC,OAAM;YACR,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAG,KAAe,CAAC,OAAO,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;AACpD,CAAC;AAEM,KAAK,UAAU,OAAO,CAAC,UAAqB,EAAE;IACnD,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,yCAAyC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IAClF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAE7B,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,KAAK,EAAE,OAAwB,EAAE,QAAwB,EAAE,EAAE;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAA;YAExF,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,CAAA;gBACvD,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;oBACzB,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;oBAC3C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;oBACvB,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAA;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;YACnG,CAAC;YAED,mCAAmC;YACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACzB,KAAK,EAAE,uBAAuB;wBAC9B,IAAI,EAAE,0BAA0B;qBACjC,CAAC,CAAA;gBACJ,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1D,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAA;gBAC5E,CAAC;gBAED,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;gBACzD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;gBACjD,CAAC;gBACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;oBAC7D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;oBACnG,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,SAAS,CAAA;oBAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,SAAS,CAAA;oBACtE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;gBAClF,CAAC;gBACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;oBAChC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAA;oBACvE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACzB,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;qBACtC,CAAC,CAAA;gBACJ,CAAC;gBACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBAC3C,IAAI,CAAC,MAAM;wBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;oBAClE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;gBACvD,CAAC;gBACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBAC3C,IAAI,CAAC,MAAM;wBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;oBAClE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;oBACtC,IAAI,CAAC,IAAI,CAAC,MAAM;wBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;oBAErE,IAAI,KAAK,GAAG,CAAC,CAAA;oBACb,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAA;oBACvB,IAAI,MAAM,GAAG,GAAG,CAAA;oBAChB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAA;oBACnC,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;wBACvD,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;4BACpE,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAA;wBACvB,CAAC;wBACD,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,CAAA;wBAC3B,IAAI,IAAI;4BAAE,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;6BACzB,IAAI,EAAE;4BAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;wBACxD,IAAI,EAAE,IAAI,IAAI;4BAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;wBACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;4BAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;4BACpE,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAA;wBACvB,CAAC;wBACD,MAAM,GAAG,GAAG,CAAA;oBACd,CAAC;oBAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;oBACnE,MAAM,OAAO,GAAoC;wBAC/C,cAAc,EAAE,IAAI,CAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC,IAAI,0BAA0B;wBACnE,gBAAgB,EAAE,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC;wBAC7C,eAAe,EAAE,OAAO;wBACxB,eAAe,EAAE,UAAU;wBAC3B,wBAAwB,EAAE,SAAS;qBACpC,CAAA;oBACD,IAAI,MAAM,KAAK,GAAG;wBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAA;oBAChG,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;oBACnC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;oBAClD,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACpC,CAAC;gBACD,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YACpD,CAAC;YAED,+CAA+C;YAC/C,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACpD,CAAC;YAED,eAAe;YACf,MAAM,QAAQ,GAAG,IAAA,qBAAS,EAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;YACrF,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,KAAK,EAAE,QAAQ,IAAI,YAAY,CAAC,CAAA;YACvD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,eAAG,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,IAAI,GAAG,MAAM,CAAA;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,CAAA;gBAC7B,IAAI,IAAI,CAAC,WAAW,EAAE;oBAAE,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,YAAY,CAAC,CAAA;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,IAAA,mBAAO,EAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;gBACzE,IAAI,GAAG,IAAA,gBAAI,EAAC,KAAK,EAAE,YAAY,CAAC,CAAA,CAAC,SAAS;YAC5C,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,CAAA;YACjC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;gBACtB,GAAG,gBAAgB;gBACnB,cAAc,EAAE,IAAI,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B;gBACjE,gBAAgB,EAAE,IAAI,CAAC,MAAM;gBAC7B,eAAe,EAAE,UAAU;aAC5B,CAAC,CAAA;YACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wBAAwB;YACxB,OAAO,CAAC,KAAK,CAAC,WAAW,EAAG,KAAe,CAAC,OAAO,CAAC,CAAA;YACpD,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAClD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,CAAC,KAA4B,EAAE,EAAE;YAC/C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5B,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAA;YAChC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,YAAY,CAAC,IAAI,iBAAS,CAAC,aAAK,CAAC,WAAW,EAAE;oBACnD,OAAO,EAAE,MAAM,MAAM,OAAO;oBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvB,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC,CAAA;YACL,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtD,OAAO,YAAY,CAAC,IAAI,iBAAS,CAAC,aAAK,CAAC,aAAa,EAAE;oBACrD,OAAO,EAAE,UAAU,MAAM,EAAE;oBAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvB,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC,CAAA;YACL,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5B,aAAa,EAAE,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAChC,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAE/E,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,IAAI;QACJ,GAAG,EAAE,UAAU,IAAI,IAAI,UAAU,EAAE;QACnC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;KAC7E,CAAA;AACH,CAAC;AAED,iDAAiD;AACjD,SAAgB,KAAK,CAAC,GAAmC,EAAE,SAAoB,EAAE;IAC/E,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,CAAA;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,sCAAsC,CAAC,CAAA;QAC3D,OAAM;IACR,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC,CAAA;IACH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC,CAAA;AACL,CAAC;AAED,iCAAiC;AAC1B,KAAK,UAAU,QAAQ,CAAC,UAA8E,EAAE;IAC7G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;IAC5C,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;IACxF,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAC9B,MAAM,IAAI,OAAO,CAAO,CAAC,WAAW,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;QACpE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC5B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;AAC5B,CAAC;AAED,yDAAyD;AAClD,KAAK,UAAU,QAAQ,CAAC,GAAqB;IAClD,GAAG,CAAC,eAAe,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,EAAE;QACR,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE;YAC7D,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,iCAAiC,EAAE;YAC1E,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,EAAE;SAC9D;QACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,+BAA+B,CAAC;QACrD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAEpD,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,MAAM,OAAO,GAAa,EAAE,CAAA;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;gBACnB,MAAM,IAAI,GAAG,GAAW,EAAE;oBACxB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;oBACxB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAAC,OAAO,EAAE,CAAA;oBAAC,CAAC;oBAChF,CAAC,EAAE,CAAA;oBACH,OAAO,IAAI,CAAA;gBACb,CAAC,CAAA;gBACD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;qBACrD,IAAI,GAAG,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;qBAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;qBAC1D,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;;oBAC1C,MAAM,IAAI,iBAAS,CAAC,aAAK,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,aAAa,GAAG,EAAE,EAAE,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,iBAAS,CAAC,aAAK,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YAC1F,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACxD,MAAM,IAAI,iBAAS,CAAC,aAAK,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,SAAS,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,CAAA;YACzF,CAAC;YAED,4CAA4C;YAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAW,SAAS,CAAC,CAAA;YAChD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAA;YAC5F,CAAC;YACD,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QACxE,CAAC;KACF,CAAC,CAAA;IAEF,2DAA2D;IAC3D,mCAAmC;IACnC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,2BAAa,EAAC,UAAU,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,eAAe,CAA0D,CAAA;QAClG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAgB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@starpak/os",
   "description": "Spak OS - desktop shell plugin (window manager, taskbar, launcher) served on :8008",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "main": "lib/index.js",
   "typings": "lib/index.d.ts",
   "files": [
@@ -11,7 +11,7 @@
   "author": "Spak Team",
   "license": "MIT",
   "dependencies": {
-    "@starpak/error": "^0.1.5",
-    "@starpak/iwant": "^0.1.0"
+    "@starpak/error": "^0.1.7",
+    "@starpak/iwant": "^0.1.2"
   }
 }

package/ui/os.css

@@ -80,7 +80,7 @@ body {
 .icon:hover, .icon:focus-visible { background: rgba(255, 255, 255, .08); outline: none; }
 .icon .glyph {
   width: 54px; height: 54px; display: grid; place-items: center;
-  border-radius: 16px; color: #ffcf87;
+  border-radius: 16px; color: var(--app-accent, #ffcf87);
   background: linear-gradient(160deg, rgba(255, 255, 255, .14), rgba(255, 255, 255, .05));
   border: 1px solid rgba(255, 255, 255, .20);
   box-shadow: inset 0 1px 0 rgba(255, 255, 255, .22), 0 8px 22px rgba(0, 0, 0, .40);
@@ -116,6 +116,49 @@ body {
 .win .body p { margin: 0 0 8px; color: var(--dim); }
 .win .body code { color: var(--accent2); }
 
+/* settings */
+.settings-shell { display: flex; flex-direction: column; gap: 10px; }
+.settings-card { padding: 12px 14px; border-radius: 14px; background: rgba(255, 255, 255, .045); border: 1px solid var(--line); }
+.settings-head { display: flex; align-items: center; justify-content: space-between; gap: 12px; }
+.settings-head b { display: block; font-size: 13px; }
+.settings-head small { display: block; color: var(--dim); font-size: 10.5px; }
+.settings-btn { height: 32px; padding: 0 12px; border-radius: 10px; border: 1px solid var(--line); background: rgba(255, 255, 255, .06); color: var(--fg); font-size: 11px; cursor: pointer; }
+.settings-btn:hover { border-color: rgba(255, 138, 0, .5); }
+.settings-btn:disabled { opacity: .4; cursor: default; }
+.settings-line { display: flex; align-items: center; gap: 8px; margin-top: 9px; color: var(--dim); font-size: 11.5px; }
+.settings-line .dot.off { background: #777; }
+.settings-help { margin: 8px 0 0; color: var(--dim); font-size: 11px; line-height: 1.6; }
+.settings-roots { display: flex; flex-direction: column; gap: 4px; margin-top: 10px; }
+.settings-root { display: flex; align-items: center; gap: 8px; padding: 6px 9px; border-radius: 9px; background: rgba(255, 255, 255, .05); font: 11px/1.4 ui-monospace, monospace; }
+.settings-root span { flex: 1; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.settings-root button { width: 24px; height: 24px; border: 0; border-radius: 7px; background: transparent; color: var(--dim); cursor: pointer; }
+.settings-root button:hover { background: rgba(255, 255, 255, .1); color: var(--fg); }
+.settings-empty { padding: 10px; border-radius: 9px; background: rgba(255, 255, 255, .035); color: var(--dim); font-size: 11px; }
+.settings-add { display: flex; gap: 6px; margin-top: 8px; }
+.settings-add input { flex: 1; min-width: 0; height: 32px; padding: 0 10px; border-radius: 9px; border: 1px solid var(--line); background: rgba(255, 255, 255, .05); color: var(--fg); font: 11px/1 ui-monospace, monospace; outline: none; }
+.settings-add input:focus { border-color: rgba(255, 138, 0, .5); }
+
+/* web 应用：iframe 铺满，去掉内边距 */
+.win .body.frame-body { padding: 0; overflow: hidden; position: relative; background: #0d0a0c; }
+.frame-body iframe { display: block; width: 100%; height: 100%; border: 0; background: #0d0a0c; }
+.win.web-app { border-radius: 18px; }
+.win.maximized { border-radius: 12px; }
+.win.maximized header { border-radius: 11px 11px 0 0; }
+
+/* 8 向缩放热区（全部在窗口内部，避免 overflow 裁剪） */
+.win .rs { position: absolute; z-index: 6; touch-action: none; }
+.rs-n, .rs-s { left: 10px; right: 10px; height: 7px; cursor: ns-resize; }
+.rs-n { top: 0; }
+.rs-s { bottom: 0; }
+.rs-e, .rs-w { top: 10px; bottom: 10px; width: 7px; cursor: ew-resize; }
+.rs-e { right: 0; }
+.rs-w { left: 0; }
+.rs-ne, .rs-nw, .rs-se, .rs-sw { width: 12px; height: 12px; }
+.rs-ne { top: 0; right: 0; cursor: nesw-resize; }
+.rs-nw { top: 0; left: 0; cursor: nwse-resize; }
+.rs-se { bottom: 0; right: 0; cursor: nwse-resize; }
+.rs-sw { bottom: 0; left: 0; cursor: nesw-resize; }
+
 /* terminal */
 .term { font: 13px/1.6 ui-monospace, "SF Mono", Menlo, monospace; background: #080b14; color: #cfe3ff; }
 .term .body { padding: 12px; }
@@ -190,7 +233,8 @@ body {
   color: var(--fg); font: inherit; cursor: pointer; transition: background .15s, border-color .15s;
 }
 .tile:hover { border-color: rgba(255, 138, 0, .5); }
-.tile .glyph { font-size: 22px; }
+.tile .glyph { font-size: 22px; color: var(--app-accent, #ffcf87); }
+.tile .glyph svg { width: 24px; height: 24px; fill: none; stroke: currentColor; stroke-width: 1.8; stroke-linejoin: round; stroke-linecap: round; }
 
 /* touch: 放大热区 */
 @media (pointer: coarse) {
@@ -214,6 +258,7 @@ body {
     width: calc(100vw - 16px) !important;
     height: calc(100dvh - var(--bar-h) - 16px) !important;
   }
+  .win .rs { display: none; }
 }
 
 /* 终端输入：彻底去掉 UA 边框/背景 */

package/ui/os.js

@@ -8,15 +8,28 @@
   const launcher = $('#launcher')
   const clock = $('#clock')
 
-  const state = { z: 10, open: new Map(), seq: 0, focused: null, installed: [], mods: [] }
+  const state = { z: 10, open: new Map(), seq: 0, focused: null, installed: [], mods: [], bridge: false }
+
+  // 清单字段来自磁盘（可被第三方 .app/.pak 控制），进 innerHTML 前一律转义，
+  // 防止存储型 XSS 直接拿下桌面壳。
+  const esc = (value) => String(value ?? '').replace(/[&<>"']/g, ch => ({
+    '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
+  }[ch]))
 
   const svg = (body) => `<svg viewBox="0 0 24 24" aria-hidden="true">${body}</svg>`
-  const APPS = {
+  const BUILTIN = {
     files: { title: '文件', glyph: svg('<path d="M3 6h6l2 2h10v10H3z"/>'), mount: mountFiles },
     terminal: { title: '终端', glyph: svg('<rect x="3" y="4" width="18" height="16" rx="2"/><path d="m7 9 3 3-3 3M13 15h4"/>'), mount: mountTerminal },
     settings: { title: '设置', glyph: svg('<circle cx="12" cy="12" r="3"/><path d="M12 3v2m0 14v2M3 12h2m14 0h2M5.6 5.6l1.4 1.4m10 10 1.4 1.4m0-12.8-1.4 1.4m-10 10-1.4 1.4"/>'), mount: mountSettings },
     mods: { title: '模组', glyph: svg('<path d="M4 7h7v7H4zM13 4h7v7h-7zM13 13h7v7h-7zM4 15h7v5H4z"/>'), mount: mountMods },
   }
+  /** 已知扩展 APP 的品牌字形；未登记的用通用窗口图标。 */
+  const APP_STYLE = {
+    music: { glyph: svg('<path d="M9 18V6l9-2v12"/><circle cx="6.5" cy="18.5" r="2.6"/><circle cx="15.5" cy="16.5" r="2.6"/>'), accent: '#ff8a7a' },
+    nv: { glyph: svg('<rect x="3" y="5" width="18" height="14" rx="2"/><path d="m10 9 5 3-5 3z"/><path d="M7 5v14M17 5v14" opacity=".45"/>'), accent: '#8f9dff' },
+  }
+  // 只放内建窗口；扩展 APPS 一律等 /api/apps（spak2os）确认后再注册。
+  const APPS = { ...BUILTIN }
 
   /* ---------- 窗口 ---------- */
   function openApp(id, payload) {
@@ -26,38 +39,185 @@
     if (state.open.has(key)) return focus(state.open.get(key).el)
 
     const el = document.createElement('section')
-    el.className = `win ${id}${id === 'terminal' ? ' term' : ''}`
+    el.className = `win ${id}${id === 'terminal' ? ' term' : ''}${app.web ? ' web-app' : ''}`
     el.tabIndex = 0
     el.innerHTML = `
-      <header><b>${app.title}</b><span class="spacer"></span>
-        <button data-act="min" title="最小化">–</button>
-        <button data-act="close" title="关闭">×</button>
+      <header><b>${esc(app.title)}</b><span class="spacer"></span>
+        <button data-act="min" title="最小化" aria-label="最小化">–</button>
+        <button data-act="max" title="全屏（Esc 退出）" aria-label="全屏">⛶</button>
+        <button data-act="close" title="关闭" aria-label="关闭">×</button>
       </header>
       <div class="body"></div>`
     const body = $('.body', el)
 
     const narrow = desktop.clientWidth < 600
-    const width = narrow ? desktop.clientWidth - 16 : Math.min(560, Math.max(300, desktop.clientWidth - 60))
-    const height = narrow ? desktop.clientHeight - 16 : Math.min(380, Math.max(180, desktop.clientHeight - 80))
+    const pref = app.size || { w: 560, h: 380 }
+    const width = narrow ? desktop.clientWidth - 16 : Math.min(pref.w, desktop.clientWidth - 24)
+    const height = narrow ? desktop.clientHeight - 16 : Math.min(pref.h, desktop.clientHeight - 24)
     const n = state.seq++
+    const left = narrow ? 8 : Math.max(8, Math.min((desktop.clientWidth - width) / 2 + n * 18, desktop.clientWidth - width - 8))
+    const top = narrow ? 8 : Math.max(8, Math.min((desktop.clientHeight - height) / 2 + n * 14, desktop.clientHeight - height - 8))
     el.style.width = width + 'px'
     el.style.height = height + 'px'
-    el.style.left = narrow ? '8px' : Math.min(150 + n * 26, Math.max(10, desktop.clientWidth - width - 10)) + 'px'
-    el.style.top = narrow ? '8px' : Math.min(40 + n * 22, Math.max(10, desktop.clientHeight - height - 10)) + 'px'
+    el.style.left = left + 'px'
+    el.style.top = top + 'px'
+    el.dataset.minW = String(app.web ? 560 : 280)
+    el.dataset.minH = String(app.web ? 360 : 160)
 
     layer.appendChild(el)
-    const rec = { el, id, key, body, min: false }
+    const rec = { el, id, key, body, min: false, max: false, restore: null }
     state.open.set(key, rec)
     bindDrag(el, $('header', el))
+    bindResize(el)
     bindTask(rec)
-    app.mount(body, payload, el)
+    if (app.web) mountFrame(body, app.web, app.title)
+    else app.mount(body, payload, el)
     focus(el)
     el.addEventListener('pointerdown', () => focus(el))
     $('[data-act="close"]', el).onclick = () => close(rec)
     $('[data-act="min"]', el).onclick = () => minimize(rec)
+    $('[data-act="max"]', el).onclick = () => toggleFullscreen(rec)
+    $('header', el).addEventListener('dblclick', (event) => {
+      if (!event.target.closest('button')) toggleFullscreen(rec)
+    })
     return rec
   }
 
+  /** 浏览器级全屏：隐藏浏览器 UI、OS 任务栏与窗口边框。 */
+  async function toggleFullscreen(rec) {
+    if (document.fullscreenElement) {
+      try { await document.exitFullscreen() } catch { /* ignore */ }
+      return
+    }
+    if (!rec.el.querySelector('iframe') && !rec.el.requestFullscreen) {
+      toggleMax(rec)
+      return
+    }
+    const target = rec.el.querySelector('iframe') || rec.el
+    try {
+      await target.requestFullscreen({ navigationUI: 'hide' })
+      toast('全屏 · Esc 退出')
+    } catch {
+      // Fullscreen API 被拒绝时退回桌面内最大化
+      toggleMax(rec)
+      toast('浏览器拒绝了全屏，已最大化窗口')
+    }
+  }
+
+  document.addEventListener('fullscreenchange', () => {
+    const active = document.fullscreenElement
+    document.body.classList.toggle('app-fullscreen', Boolean(active))
+    for (const rec of state.open.values()) {
+      const isOwn = Boolean(active) && (rec.el === active || rec.el.contains(active))
+      rec.el.classList.toggle('fullscreen', isOwn)
+      const button = $('[data-act="max"]', rec.el)
+      if (button) {
+        button.textContent = isOwn ? '⤢' : '⛶'
+        button.title = isOwn ? '退出全屏（Esc）' : '全屏（Esc 退出）'
+      }
+    }
+    if (!active) {
+      // 退出后把焦点还给原来的窗口
+      const focused = [...state.open.values()].find(rec => rec.el.classList.contains('focused'))
+      if (focused) focusedTask(focused)
+    }
+  })
+
+  function focusedTask(rec) {
+    rec.el.hidden = false
+    rec.min = false
+    rec.el.classList.remove('minimizing')
+    focus(rec.el)
+    renderTasks()
+  }
+
+  function mountFrame(body, src, title) {
+    body.classList.add('frame-body')
+    const frame = document.createElement('iframe')
+    frame.src = src
+    frame.title = title
+    frame.loading = 'eager'
+    frame.setAttribute('allow', 'autoplay; fullscreen; encrypted-media; picture-in-picture')
+    frame.setAttribute('allowfullscreen', '')
+    body.appendChild(frame)
+  }
+
+  function toggleMax(rec) {
+    const el = rec.el
+    if (rec.max) {
+      Object.assign(el.style, rec.restore)
+      rec.max = false
+      el.classList.remove('maximized')
+      $('[data-act="max"]', el).textContent = '□'
+      $('[data-act="max"]', el).title = '最大化'
+    } else {
+      rec.restore = { left: el.style.left, top: el.style.top, width: el.style.width, height: el.style.height }
+      el.style.left = '8px'
+      el.style.top = '8px'
+      el.style.width = (desktop.clientWidth - 16) + 'px'
+      el.style.height = (desktop.clientHeight - 16) + 'px'
+      rec.max = true
+      el.classList.add('maximized')
+      $('[data-act="max"]', el).textContent = '❐'
+      $('[data-act="max"]', el).title = '还原'
+    }
+    focus(el)
+  }
+
+  /** 8 向缩放；窗口最大化或窄屏时禁用。 */
+  function bindResize(el) {
+    const dirs = ['n', 'e', 's', 'w', 'ne', 'nw', 'se', 'sw']
+    for (const dir of dirs) {
+      const handle = document.createElement('i')
+      handle.className = `rs rs-${dir}`
+      handle.dataset.dir = dir
+      el.appendChild(handle)
+      handle.addEventListener('pointerdown', (event) => {
+        if (el.classList.contains('maximized') || desktop.clientWidth < 600) return
+        event.preventDefault()
+        event.stopPropagation()
+        handle.setPointerCapture(event.pointerId)
+        const start = el.getBoundingClientRect()
+        const ox = event.clientX
+        const oy = event.clientY
+        const minW = Number(el.dataset.minW || 280)
+        const minH = Number(el.dataset.minH || 160)
+        const move = (e) => {
+          let x = start.left
+          let y = start.top
+          let w = start.width
+          let h = start.height
+          if (dir.includes('e')) w = clampSize(e.clientX - ox + start.width, minW, desktop.clientWidth - x - 4)
+          if (dir.includes('s')) h = clampSize(e.clientY - oy + start.height, minH, desktop.clientHeight - y - 4)
+          if (dir.includes('w')) {
+            const nextW = clampSize(start.width - (e.clientX - ox), minW, start.right - 4)
+            x = start.right - nextW
+            w = nextW
+          }
+          if (dir.includes('n')) {
+            const nextH = clampSize(start.height - (e.clientY - oy), minH, start.bottom - 4)
+            y = start.bottom - nextH
+            h = nextH
+          }
+          el.style.left = Math.max(0, x) + 'px'
+          el.style.top = Math.max(0, y) + 'px'
+          el.style.width = w + 'px'
+          el.style.height = h + 'px'
+        }
+        const stop = (e) => {
+          handle.removeEventListener('pointermove', move)
+          handle.removeEventListener('pointerup', stop)
+          handle.removeEventListener('pointercancel', stop)
+          try { handle.releasePointerCapture(e.pointerId) } catch {}
+        }
+        handle.addEventListener('pointermove', move)
+        handle.addEventListener('pointerup', stop)
+        handle.addEventListener('pointercancel', stop)
+      })
+    }
+  }
+  const clampSize = (v, min, max) => Math.max(min, Math.min(max, v))
+
   function focus(el) {
     state.focused = el
     el.style.zIndex = ++state.z
@@ -97,6 +257,7 @@
     let dx = 0, dy = 0, dragging = false
     handle.addEventListener('pointerdown', (event) => {
       if (event.target.closest('button')) return
+      if (el.classList.contains('maximized')) return
       dragging = true
       const rect = el.getBoundingClientRect()
       dx = event.clientX - rect.left
@@ -129,7 +290,7 @@
     for (const row of rows) {
       const el = document.createElement('div')
       el.className = 'row'
-      el.innerHTML = `<span class="dot"></span><div><b>${row.name}</b><br><small>${row.note}</small></div>`
+      el.innerHTML = `<span class="dot"></span><div><b>${esc(row.name)}</b><br><small>${esc(row.note)}</small></div>`
       list.appendChild(el)
     }
   }
@@ -175,23 +336,100 @@
       const summary = Object.entries(perms).map(([key, value]) => `${key}=${value}`).join(' · ') || '无额外权限'
       const row = document.createElement('div')
       row.className = 'row'
-      row.innerHTML = `<span class="dot"></span><div><b>${mod.name || mod.id}</b> <small>v${mod.version || '0.0.0'}</small><br><small>${summary}</small></div>`
+      row.innerHTML = `<span class="dot"></span><div><b>${esc(mod.name || mod.id)}</b> <small>v${esc(mod.version || '0.0.0')}</small><br><small>${esc(summary)}</small></div>`
       list.appendChild(row)
     }
   }
 
   function mountSettings(body) {
     const theme = localStorage.getItem('spak-theme') || 'dark'
+    const roots = (() => {
+      try { return JSON.parse(localStorage.getItem('spak2os.roots.v1') || '[]') || [] } catch { return [] }
+    })()
+    const autoScan = localStorage.getItem('spak2os.autoScan.v1') !== 'false'
+    const contributed = state.installed.filter(app => app.web).length
+
     body.innerHTML = `
-      <p>外观</p>
-      <div class="row"><span class="dot"></span><div>主题：<b data-theme-label>${theme}</b></div>
-      <button class="tile" data-act="theme" style="margin-left:auto;padding:8px 14px">切换</button></div>
-      <p style="margin-top:16px">输入</p>
-      <p>键盘：Alt+Tab 切换 · Esc 关闭 · Ctrl+K 启动器<br>鼠标：拖动标题栏 · 点击任务栏<br>触屏：单指拖动 · 双指滚动</p>`
-    $('[data-act="theme"]', body).onclick = () => {
-      toggleTheme()
-      $('[data-theme-label]', body).textContent = localStorage.getItem('spak-theme')
+      <div class="settings-shell">
+        <section class="settings-card">
+          <div class="settings-head"><div><b>扩展 APPS</b><small>由 spak2os 只读聚合 · 已发现 ${contributed} 个</small></div>
+            <button class="settings-btn" data-act="rescan">重新扫描</button></div>
+          <div class="settings-line"><span class="dot ${state.bridge ? '' : 'off'}"></span>
+            <span>${state.bridge ? 'spak2os 已连接 · 只读' : '未安装 spak2os · 只读桥不可用'}</span></div>
+        </section>
+
+        <section class="settings-card">
+          <div class="settings-head"><div><b>媒体目录池</b><small>Music / NV 共用 · 只读扫描</small></div>
+            <button class="settings-btn" data-act="scan" ${state.bridge ? '' : 'disabled'}>扫描</button></div>
+          <div class="settings-roots" data-roots></div>
+          <div class="settings-add">
+            <input data-root-input placeholder="/storage/emulated/0/Music" aria-label="添加扫描目录">
+            <button class="settings-btn" data-act="add-root">添加</button>
+          </div>
+          <label class="settings-line"><input type="checkbox" data-act="auto" ${autoScan ? 'checked' : ''}> 打开 Music / NV 时自动扫描</label>
+        </section>
+
+        <section class="settings-card">
+          <div class="settings-head"><div><b>外观与输入</b><small>主题 ${esc(theme)}</small></div>
+            <button class="settings-btn" data-act="theme">切换主题</button></div>
+          <p class="settings-help">键盘：Alt+Tab 切换 · Esc 关闭 · Ctrl+K 启动器<br>触屏：单指拖动 · 双击标题栏最大化</p>
+        </section>
+      </div>`
+
+    const renderRoots = () => {
+      const list = $('[data-roots]', body)
+      const current = (() => {
+        try { return JSON.parse(localStorage.getItem('spak2os.roots.v1') || '[]') || [] } catch { return [] }
+      })()
+      list.innerHTML = current.length
+        ? current.map(root => `<div class="settings-root"><span>${esc(root)}</span><button data-remove-root="${esc(root)}" aria-label="移除">×</button></div>`).join('')
+        : '<div class="settings-empty">还没有扫描目录。添加后，Music / NV 会读取其中的媒体元数据。</div>'
+    }
+
+    const saveRoots = (next) => {
+      localStorage.setItem('spak2os.roots.v1', JSON.stringify(next))
+      renderRoots()
     }
+
+    body.addEventListener('click', async (event) => {
+      const remove = event.target.closest('[data-remove-root]')
+      if (remove) {
+        let list = []
+        try { list = JSON.parse(localStorage.getItem('spak2os.roots.v1') || '[]') || [] } catch {}
+        saveRoots(list.filter(root => root !== remove.dataset.removeRoot))
+        return
+      }
+      const action = event.target.closest('[data-act]')?.dataset.act
+      if (action === 'theme') {
+        toggleTheme()
+        toast('主题已切换')
+      } else if (action === 'add-root') {
+        const input = $('[data-root-input]', body)
+        const value = input.value.trim()
+        if (!value) return
+        let list = []
+        try { list = JSON.parse(localStorage.getItem('spak2os.roots.v1') || '[]') || [] } catch {}
+        if (!list.includes(value)) list.push(value)
+        saveRoots(list)
+        input.value = ''
+        toast('已加入媒体目录池')
+      } else if (action === 'rescan') {
+        try {
+          const count = await refreshApps()
+          toast(`已重新扫描 · ${count} 个扩展 APP`)
+        } catch (error) {
+          toast(`扫描失败：${error.message}`)
+        }
+      } else if (action === 'scan') {
+        if (!state.bridge) return toast('先安装 spak2os')
+        toast('目录池已更新 · 打开 Music 或 NV 即可扫描')
+      }
+    })
+
+    $('[data-act="auto"]', body).addEventListener('change', (event) => {
+      localStorage.setItem('spak2os.autoScan.v1', event.target.checked ? 'true' : 'false')
+    })
+    renderRoots()
   }
 
   /* 叶序螺旋点阵（黄金角 137.507764°）：r = c*sqrt(n), theta = n*phi */
@@ -223,12 +461,43 @@
     setTimeout(() => el.remove(), 1800)
   }
 
+  /** 把 spak2os 聚合来的 APPS 注册进桌面；内建窗口永远优先。 */
+  function syncContributedApps() {
+    for (const app of state.installed) {
+      if (!app.web || !/^[a-z0-9][a-z0-9._-]*$/.test(app.id || '') || BUILTIN[app.id]) continue
+      const style = APP_STYLE[app.id] || {}
+      APPS[app.id] = {
+        title: app.name || app.id,
+        glyph: style.glyph || svg('<rect x="3" y="4" width="18" height="16" rx="3"/><path d="M3 9h18M8 4v5"/>'),
+        accent: app.accent || style.accent || '#ffcf87',
+        web: `/apps/${app.id}/`,
+        size: {
+          w: Number(app.width) > 0 ? Number(app.width) : 980,
+          h: Number(app.height) > 0 ? Number(app.height) : 660,
+        },
+      }
+    }
+    renderIcons()
+    renderLauncher()
+  }
+
+  async function refreshApps() {
+    const response = await fetch('/api/apps?refresh=1')
+    if (!response.ok) throw new Error(`HTTP ${response.status}`)
+    const body = await response.json()
+    state.installed = body.apps || []
+    state.bridge = Boolean(body.bridge)
+    syncContributedApps()
+    return state.installed.filter(app => app.web).length
+  }
+
   function renderIcons() {
     iconBox.innerHTML = ''
     for (const [id, app] of Object.entries(APPS)) {
       const btn = document.createElement('button')
       btn.className = 'icon'
-      btn.innerHTML = `<span class="glyph">${app.glyph}</span><span>${app.title}</span>`
+      btn.style.setProperty('--app-accent', app.accent || '#ffcf87')
+      btn.innerHTML = `<span class="glyph">${app.glyph}</span><span>${esc(app.title)}</span>`
       btn.onclick = () => openApp(id)
       iconBox.appendChild(btn)
     }
@@ -240,8 +509,9 @@
     for (const [id, app] of Object.entries(APPS)) {
       const tile = document.createElement('button')
       tile.className = 'tile'
+      tile.style.setProperty('--app-accent', app.accent || '#ffcf87')
       tile.dataset.name = `${app.title} ${id}`.toLowerCase()
-      tile.innerHTML = `<span class="glyph">${app.glyph}</span><span>${app.title}</span>`
+      tile.innerHTML = `<span class="glyph">${app.glyph}</span><span>${esc(app.title)}</span>`
       tile.onclick = () => { launcher.hidden = true; openApp(id) }
       grid.appendChild(tile)
     }
@@ -296,9 +566,14 @@
     setInterval(tick, 1000)
     try {
       const response = await fetch('/api/apps')
-      if (response.ok) state.installed = (await response.json()).apps || []
+      if (response.ok) {
+        const body = await response.json()
+        state.installed = body.apps || []
+        state.bridge = Boolean(body.bridge)
+      }
       const mods = await fetch('/api/mods')
       if (mods.ok) state.mods = (await mods.json()).mods || []
+      syncContributedApps()
     } catch { /* 离线也照常启动 */ }
     setTimeout(() => {
       $('#boot').classList.add('done')