cordisx 0.1.0-beta.23 → 0.1.0-beta.24

package/THIRD_PARTY_NOTICES.md

@@ -38,6 +38,13 @@ UI. Its license is included at `third_party/openai-apps-sdk-ui-MIT.txt`.
 The bundled MiniMax glyph is sourced from the MIT-licensed LobeHub Icons
 collection. Its license is included at `third_party/lobe-icons-MIT.txt`.
 
+The model disclosure brain glyph is the upstream `brain.svg` asset from Lucide
+`0.468.0`, sourced from
+`https://raw.githubusercontent.com/lucide-icons/lucide/0.468.0/icons/brain.svg`.
+Its ISC license is included at `third_party/lucide-0.468.0-ISC.txt`. CordisX
+bundles only this single asset and does not install or redistribute the Lucide
+package.
+
 Other bundled provider/model marks are attributed to their respective owners.
 Their inclusion identifies compatible services or model families and does not
 imply sponsorship, certification, or ownership by CordisX.

package/dist/assets/icons/lucide-0.468.0/brain.svg

@@ -0,0 +1,21 @@
+<svg
+  xmlns="http://www.w3.org/2000/svg"
+  width="24"
+  height="24"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M12 5a3 3 0 1 0-5.997.125 4 4 0 0 0-2.526 5.77 4 4 0 0 0 .556 6.588A4 4 0 1 0 12 18Z" />
+  <path d="M12 5a3 3 0 1 1 5.997.125 4 4 0 0 1 2.526 5.77 4 4 0 0 1-.556 6.588A4 4 0 1 1 12 18Z" />
+  <path d="M15 13a4.5 4.5 0 0 1-3-4 4.5 4.5 0 0 1-3 4" />
+  <path d="M17.599 6.5a3 3 0 0 0 .399-1.375" />
+  <path d="M6.003 5.125A3 3 0 0 0 6.401 6.5" />
+  <path d="M3.477 10.896a4 4 0 0 1 .585-.396" />
+  <path d="M19.938 10.5a4 4 0 0 1 .585.396" />
+  <path d="M6 18a4 4 0 0 1-1.967-.516" />
+  <path d="M19.967 17.484A4 4 0 0 1 18 18" />
+</svg>

package/dist/native/dock-agent.cjs

@@ -0,0 +1,181 @@
+'use strict'
+
+// Loaded once into a verified CordisX-owned Electron main process. The
+// inspector used to install it is closed before the Host is marked ready.
+const fs = require('node:fs')
+const net = require('node:net')
+const path = require('node:path')
+const { app, nativeImage, nativeTheme } = require('electron')
+
+let installed = false
+const PNG = Buffer.from([137, 80, 78, 71, 13, 10, 26, 10])
+
+function privateFile(file) {
+  const fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW)
+  try {
+    const info = fs.fstatSync(fd)
+    if (
+      !info.isFile() || info.uid !== process.getuid() || (info.mode & 0o077) !== 0
+      || info.size < PNG.length || info.size > 1024 * 1024
+    ) throw new Error('Unsafe Dock image')
+    const bytes = fs.readFileSync(fd)
+    if (!bytes.subarray(0, PNG.length).equals(PNG)) throw new Error('Invalid Dock image')
+    const image = nativeImage.createFromBuffer(bytes)
+    const size = image.getSize()
+    if (image.isEmpty() || size.width < 16 || size.height < 16 || size.width > 1024 || size.height > 1024) {
+      throw new Error('Invalid Dock image dimensions')
+    }
+    return image
+  } finally {
+    fs.closeSync(fd)
+  }
+}
+
+// The Host passes its selected nativeImage to dock.setIcon, after applying
+// its own icon preference and system appearance. Compare opaque pixel lightness
+// on a small normalized bitmap so its source crop and resolution do not matter.
+function hostAppearance(input) {
+  if (input == null) return 'default'
+  const image = typeof input === 'string' ? nativeImage.createFromPath(input) : input
+  if (
+    !image || typeof image.isEmpty !== 'function' || image.isEmpty()
+    || typeof image.resize !== 'function'
+  ) return null
+  const bytes = image.resize({ width: 32, height: 32 }).toBitmap()
+  let total = 0
+  let pixels = 0
+  for (let offset = 0; offset + 3 < bytes.length; offset += 4) {
+    if (bytes[offset + 3] < 128) continue
+    total += bytes[offset] + bytes[offset + 1] + bytes[offset + 2]
+    pixels++
+  }
+  return pixels ? (total / pixels / 3 >= 145 ? 'light' : 'dark') : null
+}
+
+exports.install = async function install(options) {
+  if (installed || process.type !== 'browser' || process.pid !== options.pid) throw new Error('Invalid Dock owner')
+  if (
+    !/^[a-f0-9]{32}$/.test(options.entryId) || !/^[a-f0-9]{64}$/.test(options.token)
+    || !path.isAbsolute(options.socketPath) || !path.isAbsolute(options.iconPath)
+    || path.dirname(options.socketPath) !== path.dirname(options.iconPath)
+    || options.lightIconPath !== path.join(path.dirname(options.iconPath), 'dock-light.png')
+    || options.darkIconPath !== path.join(path.dirname(options.iconPath), 'dock-dark.png')
+    || options.defaultIconPath !== path.join(path.dirname(options.iconPath), 'dock-default.png')
+  ) {
+    throw new Error('Invalid Dock scope')
+  }
+  const directory = fs.lstatSync(path.dirname(options.socketPath))
+  if (
+    !directory.isDirectory() || directory.isSymbolicLink() || directory.uid !== process.getuid()
+    || (directory.mode & 0o077) !== 0
+  ) throw new Error('Unsafe Dock directory')
+  if (fs.existsSync(options.socketPath)) {
+    const old = fs.lstatSync(options.socketPath)
+    if (!old.isSocket() || old.uid !== process.getuid()) throw new Error('Unsafe stale Dock socket')
+    fs.unlinkSync(options.socketPath)
+  }
+  if (!app.dock || typeof app.dock.setIcon !== 'function') throw new Error('Host Dock API unavailable')
+  const original = app.dock.setIcon.bind(app.dock)
+  let hasImage = false
+  let selected = nativeTheme.shouldUseDarkColorsForSystemIntegratedUI ? 'dark' : 'light'
+  const apply = () => {
+    const file = fs.existsSync(options.iconPath)
+      ? options.iconPath
+      : selected === 'light'
+      ? options.lightIconPath
+      : selected === 'dark'
+      ? options.darkIconPath
+      : options.defaultIconPath
+    if (!fs.existsSync(file)) {
+      hasImage = false
+      return
+    }
+    original(privateFile(file))
+    hasImage = true
+  }
+  const server = net.createServer({ allowHalfOpen: true }, socket => {
+    let text = ''
+    let handled = false
+    socket.setEncoding('utf8')
+    socket.setTimeout(3000, () => socket.destroy())
+    socket.on('error', () => {})
+    socket.on('data', chunk => {
+      if (handled) return
+      text += chunk
+      if (text.length > 512) return socket.destroy()
+      const end = text.indexOf('\n')
+      if (end < 0) return
+      handled = true
+      const line = text.slice(0, end)
+      text = ''
+      try {
+        const request = JSON.parse(line)
+        if (
+          Object.keys(request).length !== 3 || request.token !== options.token
+          || request.entryId !== options.entryId || request.command !== 'refresh'
+        ) throw new Error('Denied')
+        apply()
+        socket.end('{"ok":true}\n')
+      } catch {
+        socket.end('{"ok":false}\n')
+      }
+    })
+  })
+  server.on('error', () => {})
+  await new Promise((resolve, reject) => {
+    server.once('error', reject)
+    server.listen(options.socketPath, resolve)
+  })
+  fs.chmodSync(options.socketPath, 0o600)
+  app.once('before-quit', () => {
+    server.close()
+    try {
+      fs.unlinkSync(options.socketPath)
+    } catch {}
+  })
+  app.dock.setIcon = image => {
+    try {
+      selected = hostAppearance(image) ?? selected
+    } catch {}
+    const result = original(image)
+    if (hasImage) {
+      queueMicrotask(() => {
+        try {
+          apply()
+        } catch {}
+      })
+    }
+    return result
+  }
+  nativeTheme.on('updated', () => {
+    // Follow the live system appearance when the Host does not issue another
+    // setIcon call. A Host call after this event still wins by updating
+    // selected before the deferred apply runs.
+    selected = nativeTheme.shouldUseDarkColorsForSystemIntegratedUI ? 'dark' : 'light'
+    if (hasImage) {
+      setTimeout(() => {
+        try {
+          apply()
+        } catch {}
+      }, 50)
+    }
+  })
+  // Automatic entries publish appearance variants rather than iconPath. Apply
+  // one before Host startup can select its own icon, then apply once more when
+  // Electron is ready so the final startup setIcon cannot win the race.
+  if (
+    [options.iconPath, options.lightIconPath, options.darkIconPath, options.defaultIconPath]
+      .some(file => fs.existsSync(file))
+  ) {
+    apply()
+    void app.whenReady().then(() =>
+      setTimeout(() => {
+        try {
+          apply()
+        } catch {}
+      }, 250)
+    ).catch(() => {})
+  }
+  installed = true
+  return { pid: process.pid, entryId: options.entryId, ready: true }
+}

package/dist/native/native-helper-artifact.json

@@ -0,0 +1,78 @@
+{
+  "schema": "cordisx/native-helper-artifact/v1",
+  "sourceCommit": "7ed2bf8fc92cd841c9454ab5d51d7288360816cc",
+  "deploymentTarget": "13.0",
+  "architectures": [
+    "arm64",
+    "x64"
+  ],
+  "inputs": {
+    "native/app-launcher.swift": "sha256:900aa9b31f293f7d493b93fadfa38083987de611597031a5158bf0111c0a52f2",
+    "native/host-open.swift": "sha256:a335a673534ac2338db3dcd4375ea92e6d20e0a521a086622b0d0b30a8191826",
+    "native/shortcut-helper/Entry.swift": "sha256:20b7584cff79b9605c03f20cdfdddfa2c43dbd0363457bd5b846804d0815b8f2",
+    "native/shortcut-helper/Images.swift": "sha256:911c21638b7d8c1aab1819b343598a5976389fee97ebaf9d7b5d6087e309838c",
+    "native/shortcut-helper/Runner.swift": "sha256:ace0e8d0c1916c81f34aa47a2ade64bf45507157fdbab1fefd0501cdfd08cf22",
+    "native/shortcut-helper/main.swift": "sha256:2514a383c1e71c0733edb105eb141f826e1c1fdd5947187799ca35be03b0a9ee",
+    "native/startup-gate.swift": "sha256:245c596fc45dbd9f08dd8e1fe204f9d8eebd4859f46fad1145499efadc8ff52d",
+    "native/dock-agent.cjs": "sha256:2a5f10f28df564a1d53a92d2a9f7ef5b39a728bf7f91086740358d9433635fb6",
+    "native/startup-cover.cjs": "sha256:b1d4fad013f536d22660535d71b52001dcfd7bc5b7b031f97118ae94cb0bbe39",
+    "native/startup-cover.css": "sha256:2b8c713fd5ba9dde302c3de630fba7d235d3e012892209cb3fd0d6f352d8a7a9",
+    "native/startup-loading.html": "sha256:aae67496961ce108ef9ddcde358ed283733afb4c6de534214f5f06243e121410",
+    "native/startup-navigation.cjs": "sha256:69ccfe9c4904774604b22b8cf99771633b080c48d6c2ee32abaa68b0c671fc62",
+    "native/visibility-agent.cjs": "sha256:25e819604cf1b62741e229437c331350715ebde3deee91444b8f8098b98552dc"
+  },
+  "helpers": {
+    "CordisXEntry": {
+      "sha256": "sha256:76ae13c7d1be4ab1d60d720353b07c0770506d84d266d6bc1f0a8e467efd92f4",
+      "mode": "0755",
+      "architectures": [
+        "arm64",
+        "x64"
+      ]
+    },
+    "CordisXHostOpen": {
+      "sha256": "sha256:2e7b79fcee38ba2b769ee55222deba196f8be81cdd967dc11da99f0c54d5f16a",
+      "mode": "0755",
+      "architectures": [
+        "arm64",
+        "x64"
+      ]
+    },
+    "CordisXLauncher": {
+      "sha256": "sha256:fa5646d6be7130e187e0c65e06593da9816adebb061c8b7763d31854d950135c",
+      "mode": "0755",
+      "architectures": [
+        "arm64",
+        "x64"
+      ]
+    },
+    "CordisXStartupGate": {
+      "sha256": "sha256:cdeb1be568cfba1579b90df3d4442077af43b1d35d786464a37e63452c7efe35",
+      "mode": "0755",
+      "architectures": [
+        "arm64",
+        "x64"
+      ]
+    }
+  },
+  "resources": {
+    "dock-agent.cjs": {
+      "sha256": "sha256:2a5f10f28df564a1d53a92d2a9f7ef5b39a728bf7f91086740358d9433635fb6"
+    },
+    "startup-cover.cjs": {
+      "sha256": "sha256:b1d4fad013f536d22660535d71b52001dcfd7bc5b7b031f97118ae94cb0bbe39"
+    },
+    "startup-cover.css": {
+      "sha256": "sha256:2b8c713fd5ba9dde302c3de630fba7d235d3e012892209cb3fd0d6f352d8a7a9"
+    },
+    "startup-loading.html": {
+      "sha256": "sha256:aae67496961ce108ef9ddcde358ed283733afb4c6de534214f5f06243e121410"
+    },
+    "startup-navigation.cjs": {
+      "sha256": "sha256:69ccfe9c4904774604b22b8cf99771633b080c48d6c2ee32abaa68b0c671fc62"
+    },
+    "visibility-agent.cjs": {
+      "sha256": "sha256:25e819604cf1b62741e229437c331350715ebde3deee91444b8f8098b98552dc"
+    }
+  }
+}

package/dist/native/startup-cover.cjs

@@ -0,0 +1,272 @@
+// Host-owned startup cover. This code executes in the original
+// main renderer, before its scripts, and never creates a native window/view.
+function installCover(options, animateMark) {
+  if (globalThis.top !== globalThis || location.href !== options.url) return
+  if (globalThis.__cordisxStartupDocument) return
+  const receipt = Object.freeze({
+    generation: options.generation,
+    nonce: crypto.randomUUID(),
+    timeOrigin: performance.timeOrigin,
+    url: location.href,
+  })
+  let phase = 'covered'
+  let disposed = false
+  let requestedAction = null
+  let presentationReleasedAt
+  let scheduledFrame
+  let modal = false
+  const dialog = document.createElement('dialog')
+  dialog.id = `cordisx-startup-${receipt.nonce}`
+  dialog.dataset.cordisxStartup = options.generation
+  dialog.setAttribute('aria-label', 'CordisX 正在启动')
+  dialog.style.cssText =
+    'position:fixed;inset:0;margin:0;max-width:none;max-height:none;width:100vw;height:100vh;border:0;padding:0;background:transparent;color-scheme:light dark;overflow:hidden;'
+  // The modal backdrop lives outside the content's shadow root. Scope its
+  // transparency to this document receipt and retire the rule with the cover.
+  const backdropStyle = document.createElement('style')
+  backdropStyle.textContent = `#${dialog.id}::backdrop { background: transparent; }
+    [data-cordisx-startup-mark="${receipt.nonce}"] { visibility: hidden; }`
+  const nativeMarks = new Map()
+  function restoreNativeMarks() {
+    for (const [element, previous] of nativeMarks) {
+      if (element.getAttribute('data-cordisx-startup-mark') !== receipt.nonce) continue
+      if (previous === null) element.removeAttribute('data-cordisx-startup-mark')
+      else element.setAttribute('data-cordisx-startup-mark', previous)
+    }
+    nativeMarks.clear()
+  }
+  const content = document.createElement('div')
+  content.style.cssText = 'width:100%;height:100%;'
+  dialog.append(content)
+  const shadow = content.attachShadow({ mode: 'closed' })
+  const style = document.createElement('style')
+  style.textContent = options.css
+  const main = document.createElement('main')
+  main.setAttribute('role', 'status')
+  main.setAttribute('aria-live', 'polite')
+  const mark = document.createElement('div')
+  mark.className = 'mark'
+  mark.setAttribute('aria-hidden', 'true')
+  if (options.mark) {
+    const parsed = new DOMParser().parseFromString(`<body>${options.mark}</body>`, 'text/html')
+    for (const svg of parsed.body.children) mark.append(document.importNode(svg, true))
+  }
+  const status = document.createElement('div')
+  status.className = 'status'
+  const message = document.createElement('p')
+  message.textContent = '正在准备…'
+  const actions = document.createElement('div')
+  actions.hidden = true
+  const retry = document.createElement('button')
+  retry.type = 'button'
+  retry.textContent = '重试'
+  retry.onclick = () => {
+    requestedAction = 'retry'
+  }
+  const close = document.createElement('button')
+  close.type = 'button'
+  close.textContent = '关闭'
+  close.onclick = () => {
+    requestedAction = 'close'
+  }
+  actions.append(retry, close)
+  status.append(message, actions)
+  main.append(mark, status)
+  shadow.append(style, main)
+  // Root-level mounting survives the app replacing its body/root subtree.
+  function mount() {
+    if (disposed || phase === 'presented' || !globalThis.document?.documentElement) return
+    if (backdropStyle.parentNode !== document.documentElement) document.documentElement.append(backdropStyle)
+    if (phase === 'covered' && options.nativeMarkSelector) {
+      const nativeMark = document.querySelector(options.nativeMarkSelector)
+      if (nativeMark && !nativeMarks.has(nativeMark)) {
+        nativeMarks.set(nativeMark, nativeMark.getAttribute('data-cordisx-startup-mark'))
+        nativeMark.setAttribute('data-cordisx-startup-mark', receipt.nonce)
+      }
+    }
+    if (dialog.parentNode !== document.documentElement) document.documentElement.append(dialog)
+    if (!dialog.open) {
+      modal = presentationReleasedAt === undefined
+      if (modal) dialog.showModal()
+      else dialog.show()
+    }
+  }
+  function visible(element) {
+    if (!element.isConnected || element.closest('[hidden], [aria-hidden="true"], [inert]')) return false
+    const box = element.getBoundingClientRect()
+    if (
+      box.width <= 0 || box.height <= 0 || box.right <= 0 || box.bottom <= 0
+      || box.left >= innerWidth || box.top >= innerHeight
+    ) return false
+    for (let node = element; node; node = node.parentElement) {
+      const style = getComputedStyle(node)
+      if (style.display === 'none' || style.visibility === 'hidden' || Number(style.opacity || 1) === 0) return false
+    }
+    return true
+  }
+  function inspectSurface() {
+    if (
+      disposed || presentationReleasedAt !== undefined || !globalThis.document?.documentElement
+      || !options.nativeSurface || !matches(receipt)
+    ) return
+    const signals = options.nativeSurface
+    const surfaces = [...document.querySelectorAll(signals.root)].filter(visible).flatMap(root => {
+      const chrome = [...root.querySelectorAll(signals.chrome)].some(element =>
+        element.closest(signals.root) === root && visible(element)
+      )
+      if (!chrome) return []
+      return [...root.querySelectorAll(signals.main)].filter(element =>
+        element.closest(signals.root) === root && visible(element)
+        && [...element.querySelectorAll(signals.content)].some(visible)
+      )
+    })
+    if (surfaces.length !== 1) return
+    presentationReleasedAt = performance.timeOrigin + performance.now()
+    withdraw()
+    if (phase === 'failed') {
+      configureRecovery()
+      mount()
+    } else phase = 'presented'
+  }
+  function reconcile() {
+    if (disposed || !globalThis.document) return
+    inspectSurface()
+    mount()
+    // One deferred geometry check per mutation/event covers newly applied CSS.
+    // It is observation only; no elapsed time can authorize presentation.
+    if (
+      !disposed && presentationReleasedAt === undefined && scheduledFrame === undefined
+      && options.nativeSurface && typeof requestAnimationFrame === 'function'
+    ) {
+      scheduledFrame = requestAnimationFrame(() => {
+        scheduledFrame = undefined
+        inspectSurface()
+      })
+    }
+  }
+  const observer = new MutationObserver(reconcile)
+  observer.observe(document, {
+    childList: true,
+    subtree: true,
+    attributes: true,
+    attributeFilter: ['class', 'style', 'hidden', 'aria-hidden', 'inert'],
+  })
+  document.addEventListener('load', reconcile, true)
+  document.addEventListener('transitionrun', reconcile, true)
+  document.addEventListener('animationstart', reconcile, true)
+  document.addEventListener('transitionend', reconcile, true)
+  document.addEventListener('animationend', reconcile, true)
+  globalThis.addEventListener('resize', reconcile)
+  function block(event) {
+    if (disposed || presentationReleasedAt !== undefined) return
+    if (
+      event.type === 'keydown' && (event.metaKey || event.ctrlKey)
+      && ['q', 'w'].includes(event.key.toLowerCase())
+    ) return
+    if (event.composedPath().includes(dialog)) return
+    event.preventDefault()
+    event.stopImmediatePropagation()
+  }
+  const events = ['keydown', 'beforeinput', 'pointerdown', 'click', 'submit', 'focusin']
+  for (const name of events) globalThis.addEventListener(name, block, true)
+  function withdraw() {
+    observer.disconnect()
+    if (scheduledFrame !== undefined) cancelAnimationFrame(scheduledFrame)
+    scheduledFrame = undefined
+    document.removeEventListener('load', reconcile, true)
+    document.removeEventListener('transitionrun', reconcile, true)
+    document.removeEventListener('animationstart', reconcile, true)
+    document.removeEventListener('transitionend', reconcile, true)
+    document.removeEventListener('animationend', reconcile, true)
+    globalThis.removeEventListener('resize', reconcile)
+    for (const name of events) globalThis.removeEventListener(name, block, true)
+    if (dialog.open) dialog.close()
+    modal = false
+    dialog.remove()
+    restoreNativeMarks()
+    backdropStyle.remove()
+  }
+  function configureRecovery() {
+    if (presentationReleasedAt === undefined) return
+    // An initialization failure remains actionable without blocking the native
+    // main surface that has already taken over presentation and interaction.
+    dialog.style.cssText =
+      'position:fixed;inset:auto 16px 16px auto;margin:0;width:360px;max-width:calc(100vw - 32px);height:auto;max-height:calc(100vh - 32px);border:1px solid GrayText;border-radius:12px;padding:16px;background:Canvas;color:CanvasText;color-scheme:light dark;overflow:auto;'
+    content.style.height = 'auto'
+    main.style.height = 'auto'
+    status.style.position = 'static'
+  }
+  const retire = () => {
+    disposed = true
+    phase = 'retired'
+    withdraw()
+    globalThis.removeEventListener('pagehide', retire)
+    dialog.removeEventListener('cancel', cancel)
+  }
+  globalThis.addEventListener('pagehide', retire, { once: true })
+  const cancel = event => event.preventDefault()
+  dialog.addEventListener('cancel', cancel)
+  function matches(value) {
+    return value && Object.keys(receipt).every(key => value[key] === receipt[key])
+      && globalThis.location?.href === options.url
+      && globalThis.performance?.timeOrigin === receipt.timeOrigin
+  }
+  const api = Object.freeze({
+    snapshot: () => ({
+      receipt,
+      phase,
+      requestedAction,
+      mounted: dialog.isConnected,
+      modal: dialog.open && modal,
+      presentationReleasedAt,
+    }),
+    ownsDialog(candidate, value) {
+      return !disposed && candidate === dialog && matches(value)
+    },
+    // The caller must supply observations from this final document. This is a
+    // release fence, not an implementation of native/application readiness.
+    release(value, observations) {
+      if (
+        disposed || !['covered', 'presented'].includes(phase) || !matches(value)
+        || !matches(observations?.receipt)
+        || document.readyState === 'loading'
+        || observations?.hostUsable !== true
+        || !(observations?.workspaceUsable === true && observations?.cordisxReady === true
+            && observations?.authenticated === undefined
+          || observations?.authenticated === true && observations?.cordisxReady === true
+          || observations?.authenticated === false && observations?.loginUsable === true
+          || observations?.authenticated === undefined && observations?.loginUsable === true
+            && observations?.cordisxReady === true)
+      ) return false
+      disposed = true
+      phase = 'released'
+      withdraw()
+      globalThis.removeEventListener('pagehide', retire)
+      dialog.removeEventListener('cancel', cancel)
+      return true
+    },
+    fail(value) {
+      if (disposed || !matches(value)) return false
+      phase = 'failed'
+      mark.hidden = true
+      restoreNativeMarks()
+      message.textContent = '启动未完成，请重试或关闭此窗口'
+      actions.hidden = false
+      configureRecovery()
+      mount()
+      if (presentationReleasedAt === undefined) retry.focus()
+      return true
+    },
+    retire(value) {
+      if (disposed || !matches(value)) return false
+      retire()
+      return true
+    },
+  })
+  Object.defineProperty(globalThis, '__cordisxStartupDocument', { value: api, configurable: false })
+  reconcile()
+  animateMark?.(mark)
+}
+
+exports.buildCoverSource = (options, animate) =>
+  `(${installCover.toString()})(${JSON.stringify(options)},${animate ?? 'undefined'});`

package/dist/native/startup-cover.css

@@ -0,0 +1,78 @@
+:host, :root {
+  --startup-surface: #f4f5f7;
+  --startup-text: #202124;
+  --startup-muted: #65676b;
+  color-scheme: light dark;
+  background: transparent;
+  color: var(--startup-text);
+  font: 15px/1.6 -apple-system, BlinkMacSystemFont, sans-serif;
+}
+html, body {
+  background: transparent;
+  width: 100%;
+  height: 100%;
+  margin: 0;
+  overflow: hidden;
+}
+main {
+  box-sizing: border-box;
+  position: relative;
+  width: 100%;
+  height: 100%;
+  text-align: center;
+  user-select: none;
+}
+.mark {
+  position: absolute;
+  top: 50%;
+  left: 50%;
+  width: 128px;
+  height: 128px;
+  transform: translate(-50%, -50%);
+}
+.mark svg {
+  display: block;
+  width: 100%;
+  height: 100%;
+}
+.mark .mark-dark {
+  display: none;
+}
+.status {
+  position: absolute;
+  top: calc(50% + 92px);
+  left: 16px;
+  right: 16px;
+  font-size: 13px;
+}
+p {
+  margin: 0 0 16px;
+  color: var(--startup-muted);
+}
+button {
+  margin: 0 6px;
+  padding: 8px 18px;
+  border: 1px solid var(--startup-muted);
+  border-radius: 8px;
+  background: var(--startup-surface);
+  color: var(--startup-text);
+  font: inherit;
+  cursor: pointer;
+}
+button:focus-visible {
+  outline: 2px solid var(--startup-text);
+  outline-offset: 3px;
+}
+@media (prefers-color-scheme: dark) {
+  :host, :root {
+    --startup-surface: #17181a;
+    --startup-text: #f2f3f5;
+    --startup-muted: #a7aab0;
+  }
+  .mark .mark-light {
+    display: none;
+  }
+  .mark .mark-dark {
+    display: block;
+  }
+}

package/dist/native/startup-loading.html

@@ -0,0 +1,17 @@
+<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; script-src 'nonce-__STARTUP_NONCE__'">
+    <title>CordisX</title>
+    <style>__STARTUP_CSS__</style>
+  </head>
+  <body>
+    <main role="status" aria-live="polite">
+      <div class="mark" aria-hidden="true">__STARTUP_MARK__</div>
+      <div class="status"><p>正在准备…</p></div>
+    </main>
+    <script nonce="__STARTUP_NONCE__">__STARTUP_ANIMATION__</script>
+  </body>
+</html>