deskbuddy 0.2.0-beta.37 → 0.2.0-beta.38

package/dist/cli.js

@@ -469,9 +469,9 @@ var defaultExec2 = (file, args, opts) => new Promise((resolve8, reject) => {
     } else resolve8();
   });
 });
-function ptyCandidatesIn(dir2, platform = process.platform, arch = process.arch) {
+function ptyCandidatesIn(dir2, platform = process.platform, arch2 = process.arch) {
   const pkg = join2(dir2, "node_modules", PACKAGE_NAME);
-  return [...hasVendoredPty(platform, arch) ? [join2(pkg, "vendor", "node-pty")] : [], join2(dir2, "node_modules", "node-pty")];
+  return [...hasVendoredPty(platform, arch2) ? [join2(pkg, "vendor", "node-pty")] : [], join2(dir2, "node_modules", "node-pty")];
 }
 function ptyLoadsIn(dir2, execPath = process.execPath) {
   const script = "for(const p of process.argv.slice(1)){try{const m=require(p);if(typeof m.spawn==='function')process.exit(0)}catch{}}process.exit(3)";
@@ -797,7 +797,7 @@ var AutoEnabler = class {
 import { randomBytes as randomBytes7 } from "crypto";
 import { existsSync as existsSync7, readdirSync as readdirSync11, readFileSync as readFileSync14, statSync as statSync13 } from "fs";
 import { homedir as homedir8 } from "os";
-import { basename as basename9, dirname as dirname9, join as join27 } from "path";
+import { basename as basename9, dirname as dirname9, join as join28 } from "path";
 import WebSocket2 from "ws";
 
 // src/core/transcript/locate.ts
@@ -6924,10 +6924,10 @@ var SNAPSHOT = `(async () => {${PRELUDE2}
   if (JSON.stringify(out).length > ${SNAPSHOT_MAX}) return { ok: false, why: 'too_big' };
   return out;
 })()`;
-function answerExpr2(sessionId, interruptId, type, body) {
-  const payload = { type, ...body.tool_use_id ? { tool_use_id: body.tool_use_id } : {}, answers: body.answers, state: body.state };
+function answerExpr2(sessionId, interruptId, type2, body) {
+  const payload = { type: type2, ...body.tool_use_id ? { tool_use_id: body.tool_use_id } : {}, answers: body.answers, state: body.state };
   return `(async () => {${PRELUDE2}
-  const sid = ${JSON.stringify(sessionId)}, iid = ${JSON.stringify(interruptId)}, want = ${JSON.stringify(type)};
+  const sid = ${JSON.stringify(sessionId)}, iid = ${JSON.stringify(interruptId)}, want = ${JSON.stringify(type2)};
   const payload = ${JSON.stringify(payload)};
   const list = (S().agentInterruptCards || {})[sid] || [];
   const c = list.find((x) => x && String(x.interruptId) === iid);
@@ -13108,11 +13108,11 @@ var CodexWatch = class {
   }
   /** 会话状态变了（广播 / 补查）：active 订阅，其余退订 */
   #applyStatus(id, status) {
-    const type = status.type;
-    if (typeof type !== "string") return;
+    const type2 = status.type;
+    if (typeof type2 !== "string") return;
     const prev = this.#status.get(id);
-    this.#status.set(id, type);
-    if (type === "idle" && prev !== "idle") {
+    this.#status.set(id, type2);
+    if (type2 === "idle" && prev !== "idle") {
       try {
         this.#d.onIdle?.(id);
       } catch {
@@ -13121,7 +13121,7 @@ var CodexWatch = class {
     const flags = Array.isArray(status.activeFlags) ? status.activeFlags : [];
     if (flags.includes("waitingOnApproval")) this.#waiting.add(id);
     else this.#waiting.delete(id);
-    if (type === "active") {
+    if (type2 === "active") {
       this.#idle.delete(id);
       this.#subscribe(id);
     } else {
@@ -13220,8 +13220,8 @@ var CodexWatch = class {
     };
     this.#own.set(tid, (this.#own.get(tid) ?? 0) + 1);
     const prev = this.#chain.get(tid);
-    let release;
-    const mine = new Promise((r) => release = r);
+    let release2;
+    const mine = new Promise((r) => release2 = r);
     const tail4 = (prev ?? Promise.resolve()).then(() => mine);
     this.#chain.set(tid, tail4);
     try {
@@ -13234,7 +13234,7 @@ var CodexWatch = class {
       this.#d.log(`Codex \u53D1\u4E00\u8F6E\u51FA\u9519\uFF1A${e.message}`);
       return { sent: false, reason: "start_failed" };
     } finally {
-      release();
+      release2();
       if (this.#chain.get(tid) === tail4) this.#chain.delete(tid);
       const n = (this.#own.get(tid) ?? 1) - 1;
       if (n > 0) this.#own.set(tid, n);
@@ -13425,11 +13425,11 @@ var CodexWatch = class {
       case "thread/status/changed": {
         const id = typeof p.threadId === "string" ? p.threadId : "";
         const status = p.status ?? {};
-        const type = status.type;
+        const type2 = status.type;
         if (!id) return;
-        if (type === "notLoaded") this.#setLoaded(id, false);
-        else if (typeof type === "string") this.#setLoaded(id, true);
-        if (typeof type === "string") this.#applyStatus(id, status);
+        if (type2 === "notLoaded") this.#setLoaded(id, false);
+        else if (typeof type2 === "string") this.#setLoaded(id, true);
+        if (typeof type2 === "string") this.#applyStatus(id, status);
         else {
           this.#idle.add(id);
           this.#unsubscribe(id);
@@ -14286,9 +14286,37 @@ function describe2(r) {
   return [r.status, r.n !== void 0 ? `n=${r.n}` : "", r.detail ?? ""].filter(Boolean).join(" ");
 }
 
+// src/daemon/health.ts
+import { arch, release, type } from "os";
+import { join as join24 } from "path";
+var MEM_LOG_MS = 30 * 60 * 1e3;
+function envLine() {
+  return `\u8FD0\u884C\u73AF\u5883\uFF1A${type()} ${release()} ${arch()}\uFF1BNode ${process.version}\uFF1BDeskBuddy ${packageVersion()}`;
+}
+var mb = (n) => Math.round(n / 1024 / 1024);
+function memLine() {
+  const m = process.memoryUsage();
+  let handles = -1;
+  try {
+    handles = process.getActiveResourcesInfo().length;
+  } catch {
+  }
+  return `\u5185\u5B58\uFF1Arss ${mb(m.rss)}MB\uFF0C\u5806 ${mb(m.heapUsed)}/${mb(m.heapTotal)}MB\uFF0Cexternal ${mb(m.external)}MB\uFF0CarrayBuffers ${mb(m.arrayBuffers)}MB\uFF1B\u6D3B\u52A8\u53E5\u67C4 ${handles}`;
+}
+function enableFatalReport(home) {
+  try {
+    const r = process.report;
+    if (!r) return;
+    r.directory = join24(home, "reports");
+    r.reportOnFatalError = true;
+    r.compact = true;
+  } catch {
+  }
+}
+
 // src/daemon/dshVersion.ts
 import { readFileSync as readFileSync11, realpathSync as realpathSync5 } from "fs";
-import { dirname as dirname8, join as join24 } from "path";
+import { dirname as dirname8, join as join25 } from "path";
 var DSH_HEADLESS_MIN_VERSION = "0.0.1-rc.1";
 var DSH_PKG = "@deepseek-ai/dsh";
 var DSH_VERSION_UNSUPPORTED = "tool_version_unsupported";
@@ -14320,7 +14348,7 @@ function dshSupport(d = defaultDeps2) {
   }
   let dir2 = dirname8(real2);
   for (let i = 0; i < 4; i++) {
-    const raw = d.readFile(join24(dir2, "package.json"));
+    const raw = d.readFile(join25(dir2, "package.json"));
     if (raw !== null) {
       let pkg = {};
       try {
@@ -14838,17 +14866,17 @@ function startWakeServer(path, hub, secret, platform = process.platform) {
 
 // src/core/appended.ts
 import { chmodSync as chmodSync4, mkdirSync as mkdirSync11, readFileSync as readFileSync12, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync10 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 var APPENDED_MAX_ITEMS = 5;
 var APPENDED_TEXT_MAX = 500;
 var APPENDED_RESULT_MAX = 800;
 var APPENDED_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 function appendedDir() {
-  return join25(deskbuddyHome(), "appended");
+  return join26(deskbuddyHome(), "appended");
 }
 function appendedPath(sessionId) {
   const safe2 = sessionId.replace(/[^A-Za-z0-9_-]/g, "");
-  return safe2 ? join25(appendedDir(), `${safe2}.json`) : null;
+  return safe2 ? join26(appendedDir(), `${safe2}.json`) : null;
 }
 function readAppended(sessionId) {
   const file = appendedPath(sessionId);
@@ -14878,13 +14906,13 @@ function writeAppended(sessionId, item) {
 var RUNNING_TTL_MS = 60 * 60 * 1e3;
 function runningPath(sessionId) {
   const safe2 = sessionId.replace(/[^A-Za-z0-9_-]/g, "");
-  return safe2 ? join25(deskbuddyHome(), "running", `${safe2}.json`) : null;
+  return safe2 ? join26(deskbuddyHome(), "running", `${safe2}.json`) : null;
 }
 function writeRunning(sessionId, now = Date.now()) {
   const file = runningPath(sessionId);
   if (!file) return;
   try {
-    mkdirSync11(join25(deskbuddyHome(), "running"), { recursive: true, mode: 448 });
+    mkdirSync11(join26(deskbuddyHome(), "running"), { recursive: true, mode: 448 });
     writeFileSync10(`${file}.tmp`, JSON.stringify({ at: now, pid: process.pid }), { encoding: "utf8", mode: 384 });
     renameSync8(`${file}.tmp`, file);
   } catch {
@@ -14932,7 +14960,7 @@ function resultSummary(tool, stdout6) {
 
 // src/core/dshMailbox.ts
 import { chmodSync as chmodSync5, existsSync as existsSync6, mkdirSync as mkdirSync12, readdirSync as readdirSync10, readFileSync as readFileSync13, renameSync as renameSync9, rmSync as rmSync10, writeFileSync as writeFileSync11 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 var DSH_HEARTBEAT_FRESH_MS = 5 * 1e3;
 var DSH_ACK_TIMEOUT_MS = 8 * 1e3;
 var ACK_POLL_MS = 200;
@@ -14943,10 +14971,10 @@ var REVOKE_RETRY_MS = 50;
 var SID_RE2 = /^[A-Za-z0-9_-]{1,128}$/;
 var IID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 function dshMailboxDir(home = deskbuddyHome(), channel = "dsh") {
-  return join26(home, channel);
+  return join27(home, channel);
 }
 function sub(home, name, channel = "dsh") {
-  return join26(dshMailboxDir(home, channel), name);
+  return join27(dshMailboxDir(home, channel), name);
 }
 function ensureDir2(p) {
   mkdirSync12(p, { recursive: true, mode: 448 });
@@ -14986,7 +15014,7 @@ function liveHeartbeats(sessionId, d0 = {}) {
     if (!/^\d+\.json$/.test(n)) continue;
     let hb;
     try {
-      hb = JSON.parse(readFileSync13(join26(dir2, n), "utf8"));
+      hb = JSON.parse(readFileSync13(join27(dir2, n), "utf8"));
     } catch {
       continue;
     }
@@ -15010,8 +15038,8 @@ async function dshDeliver(sessionId, msg, d0 = {}) {
   const ackDir = sub(d.home, "ack", d.channel);
   ensureDir2(inbox);
   ensureDir2(ackDir);
-  const letter = join26(inbox, `${sessionId}.${msg.instructionId}.json`);
-  const ackPath = join26(ackDir, `${msg.instructionId}.json`);
+  const letter = join27(inbox, `${sessionId}.${msg.instructionId}.json`);
+  const ackPath = join27(ackDir, `${msg.instructionId}.json`);
   if (existsSync6(letter)) return { ok: false, reason: "inbox_busy" };
   const writtenAt = d.now();
   writeJson(letter, {
@@ -15080,7 +15108,7 @@ function dshClearInbox(home = deskbuddyHome(), channel = "dsh") {
 var DSH_REPLY_WAIT_MS = 4 * 60 * 1e3;
 function takeMailboxReply(instructionId, home = deskbuddyHome(), channel = "dsh") {
   if (!IID_RE.test(instructionId)) return null;
-  const p = join26(sub(home, "reply", channel), `${instructionId}.json`);
+  const p = join27(sub(home, "reply", channel), `${instructionId}.json`);
   let v = null;
   try {
     v = JSON.parse(readFileSync13(p, "utf8"));
@@ -15109,7 +15137,7 @@ function clearDir(inbox) {
   let n = 0;
   for (const f of names) {
     try {
-      rmSync10(join26(inbox, f), { force: true });
+      rmSync10(join27(inbox, f), { force: true });
       n++;
     } catch {
     }
@@ -15184,7 +15212,7 @@ function defaultCodexAppServers() {
 }
 function opencodeReady() {
   const mod = ocPluginModule(installedHookPath());
-  return isOcPluginInstalled(opencodePluginPath()) && existsSync7(mod) && existsSync7(join27(dirname9(mod), "ocTranslate.mjs"));
+  return isOcPluginInstalled(opencodePluginPath()) && existsSync7(mod) && existsSync7(join28(dirname9(mod), "ocTranslate.mjs"));
 }
 var INTERNAL_PROMPT_MARK = "[DeskBuddy]";
 function orphanResumeText(summary2) {
@@ -15251,6 +15279,7 @@ var Daemon = class {
   #ws = null;
   #idleTimer = null;
   #windowScan = null;
+  #memLog = null;
   #aliveReport = null;
   #reportRetryTimer = null;
   #reportRetry = new ReportRetry({
@@ -15604,6 +15633,10 @@ var Daemon = class {
   async startGate() {
     const port = await this.#gate.start();
     log(`\u6388\u6743\u7AEF\u70B9\u5DF2\u5C31\u7EEA 127.0.0.1:${port}`);
+    enableFatalReport(deskbuddyHome());
+    log(`${envLine()}\uFF1B${memLine()}`);
+    this.#memLog = setInterval(() => log(memLine()), MEM_LOG_MS);
+    this.#memLog.unref();
     this.#windowScan = setInterval(() => this.#coord.scanWindows(), 1e3);
     this.#windowScan.unref();
     this.#aliveReport = setInterval(() => void this.#reportAlive(), ALIVE_REPORT_MS);
@@ -16002,6 +16035,7 @@ var Daemon = class {
     this.#clearIdle();
     if (this.#windowScan) clearInterval(this.#windowScan);
     if (this.#aliveReport) clearInterval(this.#aliveReport);
+    if (this.#memLog) clearInterval(this.#memLog);
     if (this.#reportRetryTimer) clearInterval(this.#reportRetryTimer);
     if (this.#codexTimer) clearInterval(this.#codexTimer);
     if (this.#wakeTimer) clearInterval(this.#wakeTimer);
@@ -16582,8 +16616,8 @@ var Daemon = class {
     }
     const sid = resolveAlias(cmd.sessionId);
     for (let p = this.#opening.get(sid); p; p = this.#opening.get(sid)) await p;
-    let release;
-    this.#opening.set(sid, new Promise((r) => release = r));
+    let release2;
+    this.#opening.set(sid, new Promise((r) => release2 = r));
     try {
       if (this.#queue.busy(sid)) await this.#queue.enqueue(sid, async () => {
       });
@@ -16605,7 +16639,7 @@ var Daemon = class {
       await this.#openWindowFor(cmd, sid, r.cwd);
     } finally {
       this.#opening.delete(sid);
-      release();
+      release2();
     }
   }
   #guiAvailable() {
@@ -17044,7 +17078,7 @@ var Daemon = class {
     for (const n of names) {
       if (!n.endsWith(".json")) continue;
       try {
-        const s2 = JSON.parse(readFileSync14(join27(stateDir(), n), "utf8"));
+        const s2 = JSON.parse(readFileSync14(join28(stateDir(), n), "utf8"));
         if (typeof s2.sessionId === "string" && typeof s2.tool === "string" && enabled.has(s2.tool)) out.push({ tool: s2.tool, sessionId: s2.sessionId, state: typeof s2.state === "string" ? s2.state : "", cwd: typeof s2.cwd === "string" ? s2.cwd : "" });
       } catch {
       }
@@ -17078,12 +17112,12 @@ var Daemon = class {
       }
       case "deepseek_harness": {
         if (!TRANSCRIPT_SID_RE.test(s2.sessionId)) return null;
-        const p = join27(deskbuddyHome(), "dsh", "transcript", `${s2.sessionId}.jsonl`);
+        const p = join28(deskbuddyHome(), "dsh", "transcript", `${s2.sessionId}.jsonl`);
         return existsSync7(p) ? { kind: "file", path: p, format: "dsh" } : null;
       }
       case "opencode": {
         if (!TRANSCRIPT_SID_RE.test(s2.sessionId)) return null;
-        return snapshotSource(`opencode-snap:${s2.sessionId}`, join27(deskbuddyHome(), "opencode", "transcript", `${s2.sessionId}.json`));
+        return snapshotSource(`opencode-snap:${s2.sessionId}`, join28(deskbuddyHome(), "opencode", "transcript", `${s2.sessionId}.json`));
       }
       case "dumate":
         return { kind: "http", key: "dumate", fetch: () => this.#dumate.transcriptMessages(s2.sessionId) };
@@ -18031,7 +18065,7 @@ async function runDisable(tools, opts = {}) {
 
 // src/commands/install.ts
 import { mkdirSync as mkdirSync13, rmSync as rmSync12, writeFileSync as writeFileSync13 } from "fs";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 
 // src/commands/setup.ts
 import qrcode from "qrcode-terminal";
@@ -18248,7 +18282,7 @@ function inSandbox(env) {
 }
 function precheckWritable(dirs) {
   for (const dir2 of dirs) {
-    const probe = join28(dir2, `.deskbuddy-probe-${process.pid}`);
+    const probe = join29(dir2, `.deskbuddy-probe-${process.pid}`);
     try {
       mkdirSync13(dir2, { recursive: true });
       writeFileSync13(probe, "");
@@ -18658,7 +18692,7 @@ async function runAutoSwitch(opts) {
 // src/wrap/run.ts
 import { randomBytes as randomBytes10 } from "crypto";
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync15, statSync as statSync16, truncateSync as truncateSync3 } from "fs";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 import { StringDecoder as StringDecoder2 } from "string_decoder";
 
 // src/wrap/injector.ts
@@ -19158,7 +19192,7 @@ import { execFileSync as execFileSync4, spawn as spawn4 } from "child_process";
 import { closeSync as closeSync9, mkdirSync as mkdirSync14, openSync as openSync9, readdirSync as readdirSync12, readFileSync as readFileSync16, rmSync as rmSync14, statSync as statSync15, truncateSync as truncateSync2, writeFileSync as writeFileSync14, renameSync as renameSync10 } from "fs";
 import { request as request2 } from "http";
 import { createServer as createServer5 } from "net";
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 var TAKEOVER_VALUE_OPTS = /* @__PURE__ */ new Set(["-c", "--config", "-m", "--model", "-s", "--sandbox", "-a", "--ask-for-approval", "-C", "--cd", "--enable", "--disable"]);
 var SHORT_VALUE_OPTS = /* @__PURE__ */ new Set(["-c", "-m", "-s", "-a", "-C"]);
 var TAKEOVER_FLAGS = /* @__PURE__ */ new Set(["--search", "--no-alt-screen", "--dangerously-bypass-approvals-and-sandbox"]);
@@ -19327,10 +19361,10 @@ async function runCodexWindow(real2, args, d) {
 }
 var MAX_LOG_BYTES2 = 1024 * 1024;
 function appServerLogPath() {
-  return join29(deskbuddyHome(), "codex-app-server.log");
+  return join30(deskbuddyHome(), "codex-app-server.log");
 }
 function windowsDir2() {
-  return join29(deskbuddyHome(), "codex-windows");
+  return join30(deskbuddyHome(), "codex-windows");
 }
 function pidAlive5(pid) {
   try {
@@ -19420,7 +19454,7 @@ function killOwnServer(pid, url, args = freshArgs, kill = (p) => killServer(p))
   if (a && isAppServerArgs(a, url)) kill(pid);
 }
 function recordPath(rec) {
-  return join29(windowsDir2(), `${rec.server}.json`);
+  return join30(windowsDir2(), `${rec.server}.json`);
 }
 function writeRecord(rec) {
   try {
@@ -19445,7 +19479,7 @@ function reapWindows(dir2 = windowsDir2(), alive = pidAlive5, args = freshArgs,
     return;
   }
   for (const n of names) {
-    const p = join29(dir2, n);
+    const p = join30(dir2, n);
     let rec;
     try {
       rec = JSON.parse(readFileSync16(p, "utf8"));
@@ -19468,7 +19502,7 @@ function reapWindows(dir2 = windowsDir2(), alive = pidAlive5, args = freshArgs,
 function launchLog(line) {
   try {
     mkdirSync14(deskbuddyHome(), { recursive: true });
-    writeFileSync14(join29(deskbuddyHome(), "wrap.log"), `${(/* @__PURE__ */ new Date()).toISOString()} [codex ${process.pid}] ${line}
+    writeFileSync14(join30(deskbuddyHome(), "wrap.log"), `${(/* @__PURE__ */ new Date()).toISOString()} [codex ${process.pid}] ${line}
 `, { flag: "a" });
   } catch {
   }
@@ -19493,7 +19527,7 @@ function defaultCodexWindowDeps(base) {
 // src/wrap/promptLaunch.ts
 import { randomBytes as randomBytes8, randomUUID as randomUUID3 } from "crypto";
 import { homedir as homedir10 } from "os";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 var FIRST_LINE_WAIT_MS2 = 2 * 60 * 1e3;
 function promptArgs(text, tool = "") {
   if (!text) return [];
@@ -19503,7 +19537,7 @@ function promptArgs(text, tool = "") {
 function promptEnv(tool, env, launcherPid = process.pid, answerWindowId = "") {
   const out = { ...env };
   if (tool === "workbuddy") {
-    if (!out.CODEBUDDY_CONFIG_DIR) out.CODEBUDDY_CONFIG_DIR = join30(homedir10(), ".workbuddy");
+    if (!out.CODEBUDDY_CONFIG_DIR) out.CODEBUDDY_CONFIG_DIR = join31(homedir10(), ".workbuddy");
     out.DESKBUDDY_LAUNCHER_PID = String(launcherPid);
     out.DESKBUDDY_LAUNCHED_TOOL = tool;
     if (answerWindowId) out.DESKBUDDY_LAUNCHED_WINDOW = answerWindowId;
@@ -20087,7 +20121,7 @@ function childEnv(src, windowId, takeover = true) {
 }
 function wrapLog(line) {
   try {
-    const p = join31(deskbuddyHome(), "wrap.log");
+    const p = join32(deskbuddyHome(), "wrap.log");
     mkdirSync15(deskbuddyHome(), { recursive: true });
     try {
       if (statSync16(p).size > MAX_LOG_BYTES3) truncateSync3(p, 0);

package/dist/gate.cjs

@@ -64,7 +64,7 @@ function readStdin() {
   })
 }
 
-function post(port, token, body) {
+function post(port, token, body, info) {
   return new Promise((resolve, reject) => {
     const req = http.request(
       {
@@ -87,10 +87,75 @@ function post(port, token, body) {
       }
     )
     req.on('error', reject)
+    // 连上过（守护进程收下了请求）还是根本没连上：窗口模式据此决定要不要等守护进程重启（问题表 268）
+    if (info) req.on('socket', (sock) => (sock.connecting ? sock.once('connect', () => (info.connected = true)) : (info.connected = true)))
     req.end(body)
   })
 }
 
+/** 守护进程等待中途没了（崩溃 / 被杀），launcher 10 秒后重拉：最多等这么久，等它换了新端口再提交一次 */
+const RESTART_WAIT_MS = 3 * 60 * 1000
+const RESTART_POLL_MS = 2000
+
+/** 与 src/daemon/autostart.ts STOP_MARK_FILE / STOP_MARK_TTL_MS 一致：DeskBuddy 自己的停止流程留的标记 */
+const STOP_MARK_FILE = 'daemon.stopping'
+const STOP_MARK_TTL_MS = 2 * 60 * 1000
+function stopMarkFresh(now) {
+  try {
+    const t = Number(fs.readFileSync(path.join(deskbuddyHome(), STOP_MARK_FILE), 'utf8').trim())
+    return Number.isFinite(t) && now - t >= 0 && now - t < STOP_MARK_TTL_MS
+  } catch (_) {
+    return false
+  }
+}
+
+function readGateConf() {
+  try {
+    const c = JSON.parse(fs.readFileSync(path.join(deskbuddyHome(), 'gate.json'), 'utf8'))
+    return c && Number.isInteger(c.port) && typeof c.token === 'string' && c.token ? c : null
+  } catch (_) {
+    return null
+  }
+}
+
+/**
+ * 窗口模式的 POST：守护进程在等设备答复期间没了（连上过、之后连接断开），不放弃 ——
+ * 等它重启（gate.json 换了端口 / 令牌）后把同一个授权再提交一次，设备上重新出卡（问题表 268：
+ * 崩溃后窗口里那道授权被撤、再也推不到设备）。🔴 一开始就连不上（守护进程根本不在）照旧立刻失败，不卡窗口
+ */
+async function postSurviving(conf, body, deps) {
+  const d = deps || {}
+  const send = d.post || post
+  const now = d.now || Date.now
+  const sleep = d.sleep || ((ms) => new Promise((r) => setTimeout(r, ms)))
+  const read = d.readConf || readGateConf
+  const stopping = d.stopping || stopMarkFresh
+  let cur = conf
+  let deadline = 0
+  for (;;) {
+    const info = { connected: false }
+    try {
+      return await send(cur.port, cur.token, body, info)
+    } catch (e) {
+      // 连上过又断了 = 守护进程这次没了，重新计时（重提交后又崩一次也能再等）；没连上且不在等重启 = 守护进程根本不在
+      if (info.connected) deadline = now() + RESTART_WAIT_MS
+      else if (!deadline) throw e
+      // 等新的守护进程起来：gate.json 换了才再提交（同一个端口还连不上就接着等）
+      for (;;) {
+        // 🔴 正常停止（disable / 升级 / 未授权退出）不等：停止流程先删 gate.json，Windows 结束进程时留停止标记（评审必修）
+        if (now() >= deadline || stopping(now())) throw e
+        await sleep(RESTART_POLL_MS)
+        const c = read()
+        if (!c || stopping(now())) throw e
+        if (c.port !== cur.port || c.token !== cur.token) {
+          cur = c
+          break
+        }
+      }
+    }
+  }
+}
+
 /**
  * 这个 hook 是不是由【交互窗口】里的 Claude Code 触发的。
  * 🔴 实测（2026-09-24，2.1.259）：`claude -p` 碰到要授权的工具**也会**触发 PermissionRequest，
@@ -792,7 +857,7 @@ async function windowMain() {
     ...(lang ? { lang } : {}),
     ...(tool === 'claude_code' ? { ccAutoMode: ccAutoMode(hook) } : {}),
   }
-  const res = await post(conf.port, conf.token, JSON.stringify({ mode: 'window', tool, hook, ...extra }))
+  const res = await postSurviving(conf, JSON.stringify({ mode: 'window', tool, hook, ...extra }))
   if (res.status !== 200) return fail()
   const out = JSON.parse(res.data)
   if (!out || (out.decision !== 'allow' && out.decision !== 'deny')) return fail()
@@ -925,5 +990,5 @@ if (require.main === module) {
 } else {
   // 只给单测（智能体永远是 `node gate.cjs` 直接跑）。
   // 🔴 禁止通过 require 调用本关卡：main 不跑，进程会 exit 0 = 放行
-  module.exports = { preToolOutput, PRETOOL_MAX_MS, traeNoticeHook, qoderCliMatches, qoderNodeCliMatches, isInteractiveAgentWin, claudeArgsInteractive, qoderArgsInteractive, isInteractiveQoder, qoderUi, ccAutoMode, CC_POLICY_DOMAIN, CC_REG_KEYS, codebuddyAgent, codebuddyCliArgs, codebuddyAgentWin, winScriptOf, findCodebuddy, codebuddyProduct }
+  module.exports = { postSurviving, RESTART_WAIT_MS, preToolOutput, PRETOOL_MAX_MS, traeNoticeHook, qoderCliMatches, qoderNodeCliMatches, isInteractiveAgentWin, claudeArgsInteractive, qoderArgsInteractive, isInteractiveQoder, qoderUi, ccAutoMode, CC_POLICY_DOMAIN, CC_REG_KEYS, codebuddyAgent, codebuddyCliArgs, codebuddyAgentWin, winScriptOf, findCodebuddy, codebuddyProduct }
 }

package/dist/launcher.cjs

@@ -54,6 +54,77 @@ function paths(h) {
     crashes: path.join(versions, 'crashes.json'),
     log: path.join(h, 'daemon.log'),
     pid: path.join(h, 'launcher.pid'),
+    stderr: path.join(h, 'daemon.stderr.log'),
+  }
+}
+
+/**
+ * 子进程 stderr 落盘（问题表 268）：Windows 上 Node 的致命错误（V8 内存耗尽、libuv 断言、原生模块 abort）
+ * 退出码都是 0xC0000409，原因只打在 stderr 上；launcher 是隐藏启动的，stderr 没人接 → 日志里什么都没有。
+ * 超过 1MB 先转存成 .1（只留一份）。打不开返回 null（照旧 inherit）
+ */
+const STDERR_MAX_BYTES = 1024 * 1024
+function openStderr(h) {
+  const p = paths(h).stderr
+  try {
+    fs.mkdirSync(h, { recursive: true })
+    try {
+      if (fs.statSync(p).size > STDERR_MAX_BYTES) fs.renameSync(p, p + '.1')
+    } catch {
+      /* 还没有这个文件 */
+    }
+    const fd = fs.openSync(p, 'a')
+    return { fd, start: fs.fstatSync(fd).size }
+  } catch {
+    return null
+  }
+}
+
+const FATAL_LINE_RE = /FATAL ERROR|Fatal error|Assertion failed|Check failed|Uncaught|Error:|Exception|out of memory|abort/i
+
+/** 这次运行期间写进 stderr 文件的末尾（最多 1500 字符，去掉空行）；没有返回 '' */
+function stderrTail(h, start) {
+  try {
+    const p = paths(h).stderr
+    const size = fs.statSync(p).size
+    const from = Math.max(start, size - 16384)
+    if (size <= from) return ''
+    const buf = Buffer.alloc(size - from)
+    const fd = fs.openSync(p, 'r')
+    try {
+      fs.readSync(fd, buf, 0, buf.length, from)
+    } finally {
+      fs.closeSync(fd)
+    }
+    const lines = buf.toString('utf8').split(/\r?\n/).filter((l) => l.trim())
+    // 关键行（V8 / libuv / Node 的致命错误头、未捕获异常）放前面：原生调用栈在后面，只留末尾几行
+    const key = lines.filter((l) => FATAL_LINE_RE.test(l) && !/^\s*\d+: 0x/.test(l)).slice(0, 4) // 原生调用栈帧（` 1: 0x… node::Abort()`）不算
+    const tail = lines.filter((l) => !key.includes(l)).slice(-4)
+    return [...key, ...(tail.length ? ['…', ...tail] : [])].join(' | ').slice(0, 1500)
+  } catch {
+    return ''
+  }
+}
+
+/** Node 致命错误时写诊断报告（JS / 原生调用栈、堆、句柄）的目录；只留最新 5 份 */
+const REPORT_KEEP = 5
+function reportDir(h) {
+  const d = path.join(h, 'reports')
+  try {
+    fs.mkdirSync(d, { recursive: true })
+    const old = fs.readdirSync(d).filter((n) => n.endsWith('.json')).sort()
+    for (const n of old.slice(0, Math.max(0, old.length - REPORT_KEEP))) fs.rmSync(path.join(d, n), { force: true })
+  } catch {
+    /* 清不了不影响启动 */
+  }
+  return d
+}
+
+function newReports(dir, since) {
+  try {
+    return fs.readdirSync(dir).filter((n) => n.endsWith('.json') && fs.statSync(path.join(dir, n)).mtimeMs >= since)
+  } catch {
+    return []
   }
 }
 
@@ -255,7 +326,25 @@ const AFTER_STOP_POLL_MS = 1000
 function runOnce(h, cur, args) {
   return new Promise((resolve) => {
     let stopping = false
-    const child = spawn(process.execPath, [cur.cliPath, ...args], { stdio: 'inherit', windowsHide: true, env: childEnv(process.env) })
+    const err = openStderr(h)
+    const reports = reportDir(h)
+    const startedAt = Date.now()
+    let child
+    try {
+      child = spawn(process.execPath, ['--report-on-fatalerror', '--report-compact', '--report-directory=' + reports, cur.cliPath, ...args], {
+        stdio: ['inherit', 'inherit', err ? err.fd : 'inherit'],
+        windowsHide: true,
+        env: childEnv(process.env),
+      })
+    } finally {
+      if (err) {
+        try {
+          fs.closeSync(err.fd) // 子进程已经拿到一份
+        } catch {
+          /* ignore */
+        }
+      }
+    }
     const forward = (sig) => {
       stopping = true
       try {
@@ -269,9 +358,9 @@ function runOnce(h, cur, args) {
       handlers[sig] = () => forward(sig)
       process.on(sig, handlers[sig])
     }
-    const done = (code, signal, err) => {
+    const done = (code, signal, e) => {
       for (const sig of Object.keys(handlers)) process.removeListener(sig, handlers[sig])
-      resolve({ code, signal, stopping, err })
+      resolve({ code, signal, stopping, err: e, stderr: err ? stderrTail(h, err.start) : '', reports: newReports(reports, startedAt) })
     }
     child.on('error', (e) => done(null, null, e))
     child.on('exit', (code, signal) => done(code, signal, null))
@@ -323,6 +412,10 @@ async function main(argv, deps) {
     }
     const startedAt = now()
     const r = await run(cur)
+    // 🔴 退出后重读一次：跑着的时候 daemon 可能已把 verifying 改成 good（连满 3 分钟）。
+    //    用启动时的旧副本会把验证通过之后的崩溃也算成「验证期内」、不记退出码（问题表 268 的 4 次「验证期内异常退出」）
+    const latest = readCurrent(h)
+    const ran = latest && latest.version === cur.version ? latest : cur
     const abnormal = !r.stopping && (r.err || r.signal || r.code !== 0)
     if (r.err) log(h, '起不来版本 ' + cur.version + '：' + r.err.message)
     if (!abnormal) return r.code == null ? 0 : r.code
@@ -340,16 +433,23 @@ async function main(argv, deps) {
       log(h, '守护进程已退出（DeskBuddy 停止流程），launcher 不再重拉')
       return 0
     }
+    // 崩溃现场（问题表 268）：退出码、stderr 末尾、诊断报告文件名记进 daemon.log
+    log(
+      h,
+      '守护进程退出码 ' + (r.code == null ? r.signal || '?' : r.code) +
+        (r.stderr ? '；stderr 末尾：' + r.stderr : '；stderr 没有输出') +
+        (r.reports && r.reports.length ? '；诊断报告：reports/' + r.reports.join(', reports/') : '')
+    )
     const killed = terminated(r)
     // 被外部 SIGTERM 不是这一版的毛病：不计崩溃、不触发回滚
-    const rolledBack = killed ? false : recordCrash(h, cur, now())
+    const rolledBack = killed ? false : recordCrash(h, ran, now())
     if (killed) log(h, '守护进程被外部结束（SIGTERM，不是 DeskBuddy 的停止流程），交给' + (platform === 'win32' ? ' launcher ' : '开机自启') + '重新拉起')
     // 非 Windows：交给 launchd / systemd 按「非正常退出」重拉（它们会重新执行本 launcher，读到回滚后的 current.json）
     if (platform !== 'win32') return r.code == null ? 1 : r.code || 1
     // Windows：「启动」文件夹只在登录时跑一次，退了没人拉 —— 本进程自己重拉。
     // 🔴 DeskBuddy 自己的停止流程先结束本 launcher 再结束 daemon（autostart.ts stopPidFileDaemon），并留了标记，不会走到这里
     let wait = WIN_RESTART_MS
-    if (cur.state !== 'verifying' && !rolledBack) {
+    if (ran.state !== 'verifying' && !rolledBack) {
       winFails = now() - startedAt >= WIN_STABLE_MS ? 1 : winFails + 1
       wait = Math.min(WIN_RESTART_MS * Math.pow(2, winFails - 1), WIN_RESTART_MAX_MS)
       log(h, '守护进程异常退出（退出码 ' + (r.code == null ? r.signal || '?' : r.code) + '），' + Math.round(wait / 1000) + ' 秒后重拉')
@@ -358,7 +458,7 @@ async function main(argv, deps) {
   }
 }
 
-module.exports = { main, childEnv, daemonLockName, lockOwnerAlive, intentionalStop, AFTER_STOP_ENV, SWITCH_ENV_KEYS, pickTarget, recordCrash, rollback, readCurrent, paths, CRASH_WINDOW_MS, CRASH_LIMIT, TERM_EXIT_CODE, UNBOUND_EXIT_CODE, STOP_MARK_FILE, STOP_MARK_TTL_MS, WIN_RESTART_MS, WIN_RESTART_MAX_MS }
+module.exports = { main, runOnce, childEnv, daemonLockName, lockOwnerAlive, intentionalStop, AFTER_STOP_ENV, SWITCH_ENV_KEYS, pickTarget, recordCrash, rollback, readCurrent, paths, CRASH_WINDOW_MS, CRASH_LIMIT, TERM_EXIT_CODE, UNBOUND_EXIT_CODE, STOP_MARK_FILE, STOP_MARK_TTL_MS, WIN_RESTART_MS, WIN_RESTART_MAX_MS }
 
 if (require.main === module) {
   main(process.argv.slice(2)).then(

package/hook/gate.cjs

@@ -64,7 +64,7 @@ function readStdin() {
   })
 }
 
-function post(port, token, body) {
+function post(port, token, body, info) {
   return new Promise((resolve, reject) => {
     const req = http.request(
       {
@@ -87,10 +87,75 @@ function post(port, token, body) {
       }
     )
     req.on('error', reject)
+    // 连上过（守护进程收下了请求）还是根本没连上：窗口模式据此决定要不要等守护进程重启（问题表 268）
+    if (info) req.on('socket', (sock) => (sock.connecting ? sock.once('connect', () => (info.connected = true)) : (info.connected = true)))
     req.end(body)
   })
 }
 
+/** 守护进程等待中途没了（崩溃 / 被杀），launcher 10 秒后重拉：最多等这么久，等它换了新端口再提交一次 */
+const RESTART_WAIT_MS = 3 * 60 * 1000
+const RESTART_POLL_MS = 2000
+
+/** 与 src/daemon/autostart.ts STOP_MARK_FILE / STOP_MARK_TTL_MS 一致：DeskBuddy 自己的停止流程留的标记 */
+const STOP_MARK_FILE = 'daemon.stopping'
+const STOP_MARK_TTL_MS = 2 * 60 * 1000
+function stopMarkFresh(now) {
+  try {
+    const t = Number(fs.readFileSync(path.join(deskbuddyHome(), STOP_MARK_FILE), 'utf8').trim())
+    return Number.isFinite(t) && now - t >= 0 && now - t < STOP_MARK_TTL_MS
+  } catch (_) {
+    return false
+  }
+}
+
+function readGateConf() {
+  try {
+    const c = JSON.parse(fs.readFileSync(path.join(deskbuddyHome(), 'gate.json'), 'utf8'))
+    return c && Number.isInteger(c.port) && typeof c.token === 'string' && c.token ? c : null
+  } catch (_) {
+    return null
+  }
+}
+
+/**
+ * 窗口模式的 POST：守护进程在等设备答复期间没了（连上过、之后连接断开），不放弃 ——
+ * 等它重启（gate.json 换了端口 / 令牌）后把同一个授权再提交一次，设备上重新出卡（问题表 268：
+ * 崩溃后窗口里那道授权被撤、再也推不到设备）。🔴 一开始就连不上（守护进程根本不在）照旧立刻失败，不卡窗口
+ */
+async function postSurviving(conf, body, deps) {
+  const d = deps || {}
+  const send = d.post || post
+  const now = d.now || Date.now
+  const sleep = d.sleep || ((ms) => new Promise((r) => setTimeout(r, ms)))
+  const read = d.readConf || readGateConf
+  const stopping = d.stopping || stopMarkFresh
+  let cur = conf
+  let deadline = 0
+  for (;;) {
+    const info = { connected: false }
+    try {
+      return await send(cur.port, cur.token, body, info)
+    } catch (e) {
+      // 连上过又断了 = 守护进程这次没了，重新计时（重提交后又崩一次也能再等）；没连上且不在等重启 = 守护进程根本不在
+      if (info.connected) deadline = now() + RESTART_WAIT_MS
+      else if (!deadline) throw e
+      // 等新的守护进程起来：gate.json 换了才再提交（同一个端口还连不上就接着等）
+      for (;;) {
+        // 🔴 正常停止（disable / 升级 / 未授权退出）不等：停止流程先删 gate.json，Windows 结束进程时留停止标记（评审必修）
+        if (now() >= deadline || stopping(now())) throw e
+        await sleep(RESTART_POLL_MS)
+        const c = read()
+        if (!c || stopping(now())) throw e
+        if (c.port !== cur.port || c.token !== cur.token) {
+          cur = c
+          break
+        }
+      }
+    }
+  }
+}
+
 /**
  * 这个 hook 是不是由【交互窗口】里的 Claude Code 触发的。
  * 🔴 实测（2026-09-24，2.1.259）：`claude -p` 碰到要授权的工具**也会**触发 PermissionRequest，
@@ -792,7 +857,7 @@ async function windowMain() {
     ...(lang ? { lang } : {}),
     ...(tool === 'claude_code' ? { ccAutoMode: ccAutoMode(hook) } : {}),
   }
-  const res = await post(conf.port, conf.token, JSON.stringify({ mode: 'window', tool, hook, ...extra }))
+  const res = await postSurviving(conf, JSON.stringify({ mode: 'window', tool, hook, ...extra }))
   if (res.status !== 200) return fail()
   const out = JSON.parse(res.data)
   if (!out || (out.decision !== 'allow' && out.decision !== 'deny')) return fail()
@@ -925,5 +990,5 @@ if (require.main === module) {
 } else {
   // 只给单测（智能体永远是 `node gate.cjs` 直接跑）。
   // 🔴 禁止通过 require 调用本关卡：main 不跑，进程会 exit 0 = 放行
-  module.exports = { preToolOutput, PRETOOL_MAX_MS, traeNoticeHook, qoderCliMatches, qoderNodeCliMatches, isInteractiveAgentWin, claudeArgsInteractive, qoderArgsInteractive, isInteractiveQoder, qoderUi, ccAutoMode, CC_POLICY_DOMAIN, CC_REG_KEYS, codebuddyAgent, codebuddyCliArgs, codebuddyAgentWin, winScriptOf, findCodebuddy, codebuddyProduct }
+  module.exports = { postSurviving, RESTART_WAIT_MS, preToolOutput, PRETOOL_MAX_MS, traeNoticeHook, qoderCliMatches, qoderNodeCliMatches, isInteractiveAgentWin, claudeArgsInteractive, qoderArgsInteractive, isInteractiveQoder, qoderUi, ccAutoMode, CC_POLICY_DOMAIN, CC_REG_KEYS, codebuddyAgent, codebuddyCliArgs, codebuddyAgentWin, winScriptOf, findCodebuddy, codebuddyProduct }
 }

package/hook/hook-debug.log

@@ -380,3 +380,27 @@
 2026-10-12T11:00:13.614Z [opencode] opencode 版本 读不出：带说明的拒绝不走新路由
 2026-10-12T11:00:13.614Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
 2026-10-12T11:00:15.993Z [opencode] 后台任务里的提问 que_r2 没法在设备上回答（后台任务不能提问，请在电脑上继续），已拒绝
+2026-10-12T11:15:58.702Z [opencode] 回填选择题失败：/question/{requestID}/reply status=404
+2026-10-12T11:16:03.652Z [opencode] opencode 版本 1.4.3：带说明的拒绝不走新路由
+2026-10-12T11:16:03.652Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-12T11:16:03.752Z [opencode] opencode 版本 读不出：带说明的拒绝不走新路由
+2026-10-12T11:16:03.753Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-12T11:16:06.045Z [opencode] 后台任务里的提问 que_r2 没法在设备上回答（后台任务不能提问，请在电脑上继续），已拒绝
+2026-10-12T11:21:53.902Z [opencode] 回填选择题失败：/question/{requestID}/reply status=404
+2026-10-12T11:21:58.896Z [opencode] opencode 版本 1.4.3：带说明的拒绝不走新路由
+2026-10-12T11:21:58.896Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-12T11:21:58.995Z [opencode] opencode 版本 读不出：带说明的拒绝不走新路由
+2026-10-12T11:21:58.995Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-12T11:22:01.397Z [opencode] 后台任务里的提问 que_r2 没法在设备上回答（后台任务不能提问，请在电脑上继续），已拒绝
+2026-10-12T11:24:28.256Z [opencode] 回填选择题失败：/question/{requestID}/reply status=404
+2026-10-12T11:24:33.247Z [opencode] opencode 版本 1.4.3：带说明的拒绝不走新路由
+2026-10-12T11:24:33.247Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-12T11:24:33.342Z [opencode] opencode 版本 读不出：带说明的拒绝不走新路由
+2026-10-12T11:24:33.342Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-12T11:24:35.695Z [opencode] 后台任务里的提问 que_r2 没法在设备上回答（后台任务不能提问，请在电脑上继续），已拒绝
+2026-10-12T11:26:33.586Z [opencode] 回填选择题失败：/question/{requestID}/reply status=404
+2026-10-12T11:26:38.587Z [opencode] opencode 版本 1.4.3：带说明的拒绝不走新路由
+2026-10-12T11:26:38.588Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-12T11:26:38.709Z [opencode] opencode 版本 读不出：带说明的拒绝不走新路由
+2026-10-12T11:26:38.710Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-12T11:26:41.188Z [opencode] 后台任务里的提问 que_r2 没法在设备上回答（后台任务不能提问，请在电脑上继续），已拒绝

package/hook/launcher.cjs

@@ -54,6 +54,77 @@ function paths(h) {
     crashes: path.join(versions, 'crashes.json'),
     log: path.join(h, 'daemon.log'),
     pid: path.join(h, 'launcher.pid'),
+    stderr: path.join(h, 'daemon.stderr.log'),
+  }
+}
+
+/**
+ * 子进程 stderr 落盘（问题表 268）：Windows 上 Node 的致命错误（V8 内存耗尽、libuv 断言、原生模块 abort）
+ * 退出码都是 0xC0000409，原因只打在 stderr 上；launcher 是隐藏启动的，stderr 没人接 → 日志里什么都没有。
+ * 超过 1MB 先转存成 .1（只留一份）。打不开返回 null（照旧 inherit）
+ */
+const STDERR_MAX_BYTES = 1024 * 1024
+function openStderr(h) {
+  const p = paths(h).stderr
+  try {
+    fs.mkdirSync(h, { recursive: true })
+    try {
+      if (fs.statSync(p).size > STDERR_MAX_BYTES) fs.renameSync(p, p + '.1')
+    } catch {
+      /* 还没有这个文件 */
+    }
+    const fd = fs.openSync(p, 'a')
+    return { fd, start: fs.fstatSync(fd).size }
+  } catch {
+    return null
+  }
+}
+
+const FATAL_LINE_RE = /FATAL ERROR|Fatal error|Assertion failed|Check failed|Uncaught|Error:|Exception|out of memory|abort/i
+
+/** 这次运行期间写进 stderr 文件的末尾（最多 1500 字符，去掉空行）；没有返回 '' */
+function stderrTail(h, start) {
+  try {
+    const p = paths(h).stderr
+    const size = fs.statSync(p).size
+    const from = Math.max(start, size - 16384)
+    if (size <= from) return ''
+    const buf = Buffer.alloc(size - from)
+    const fd = fs.openSync(p, 'r')
+    try {
+      fs.readSync(fd, buf, 0, buf.length, from)
+    } finally {
+      fs.closeSync(fd)
+    }
+    const lines = buf.toString('utf8').split(/\r?\n/).filter((l) => l.trim())
+    // 关键行（V8 / libuv / Node 的致命错误头、未捕获异常）放前面：原生调用栈在后面，只留末尾几行
+    const key = lines.filter((l) => FATAL_LINE_RE.test(l) && !/^\s*\d+: 0x/.test(l)).slice(0, 4) // 原生调用栈帧（` 1: 0x… node::Abort()`）不算
+    const tail = lines.filter((l) => !key.includes(l)).slice(-4)
+    return [...key, ...(tail.length ? ['…', ...tail] : [])].join(' | ').slice(0, 1500)
+  } catch {
+    return ''
+  }
+}
+
+/** Node 致命错误时写诊断报告（JS / 原生调用栈、堆、句柄）的目录；只留最新 5 份 */
+const REPORT_KEEP = 5
+function reportDir(h) {
+  const d = path.join(h, 'reports')
+  try {
+    fs.mkdirSync(d, { recursive: true })
+    const old = fs.readdirSync(d).filter((n) => n.endsWith('.json')).sort()
+    for (const n of old.slice(0, Math.max(0, old.length - REPORT_KEEP))) fs.rmSync(path.join(d, n), { force: true })
+  } catch {
+    /* 清不了不影响启动 */
+  }
+  return d
+}
+
+function newReports(dir, since) {
+  try {
+    return fs.readdirSync(dir).filter((n) => n.endsWith('.json') && fs.statSync(path.join(dir, n)).mtimeMs >= since)
+  } catch {
+    return []
   }
 }
 
@@ -255,7 +326,25 @@ const AFTER_STOP_POLL_MS = 1000
 function runOnce(h, cur, args) {
   return new Promise((resolve) => {
     let stopping = false
-    const child = spawn(process.execPath, [cur.cliPath, ...args], { stdio: 'inherit', windowsHide: true, env: childEnv(process.env) })
+    const err = openStderr(h)
+    const reports = reportDir(h)
+    const startedAt = Date.now()
+    let child
+    try {
+      child = spawn(process.execPath, ['--report-on-fatalerror', '--report-compact', '--report-directory=' + reports, cur.cliPath, ...args], {
+        stdio: ['inherit', 'inherit', err ? err.fd : 'inherit'],
+        windowsHide: true,
+        env: childEnv(process.env),
+      })
+    } finally {
+      if (err) {
+        try {
+          fs.closeSync(err.fd) // 子进程已经拿到一份
+        } catch {
+          /* ignore */
+        }
+      }
+    }
     const forward = (sig) => {
       stopping = true
       try {
@@ -269,9 +358,9 @@ function runOnce(h, cur, args) {
       handlers[sig] = () => forward(sig)
       process.on(sig, handlers[sig])
     }
-    const done = (code, signal, err) => {
+    const done = (code, signal, e) => {
       for (const sig of Object.keys(handlers)) process.removeListener(sig, handlers[sig])
-      resolve({ code, signal, stopping, err })
+      resolve({ code, signal, stopping, err: e, stderr: err ? stderrTail(h, err.start) : '', reports: newReports(reports, startedAt) })
     }
     child.on('error', (e) => done(null, null, e))
     child.on('exit', (code, signal) => done(code, signal, null))
@@ -323,6 +412,10 @@ async function main(argv, deps) {
     }
     const startedAt = now()
     const r = await run(cur)
+    // 🔴 退出后重读一次：跑着的时候 daemon 可能已把 verifying 改成 good（连满 3 分钟）。
+    //    用启动时的旧副本会把验证通过之后的崩溃也算成「验证期内」、不记退出码（问题表 268 的 4 次「验证期内异常退出」）
+    const latest = readCurrent(h)
+    const ran = latest && latest.version === cur.version ? latest : cur
     const abnormal = !r.stopping && (r.err || r.signal || r.code !== 0)
     if (r.err) log(h, '起不来版本 ' + cur.version + '：' + r.err.message)
     if (!abnormal) return r.code == null ? 0 : r.code
@@ -340,16 +433,23 @@ async function main(argv, deps) {
       log(h, '守护进程已退出（DeskBuddy 停止流程），launcher 不再重拉')
       return 0
     }
+    // 崩溃现场（问题表 268）：退出码、stderr 末尾、诊断报告文件名记进 daemon.log
+    log(
+      h,
+      '守护进程退出码 ' + (r.code == null ? r.signal || '?' : r.code) +
+        (r.stderr ? '；stderr 末尾：' + r.stderr : '；stderr 没有输出') +
+        (r.reports && r.reports.length ? '；诊断报告：reports/' + r.reports.join(', reports/') : '')
+    )
     const killed = terminated(r)
     // 被外部 SIGTERM 不是这一版的毛病：不计崩溃、不触发回滚
-    const rolledBack = killed ? false : recordCrash(h, cur, now())
+    const rolledBack = killed ? false : recordCrash(h, ran, now())
     if (killed) log(h, '守护进程被外部结束（SIGTERM，不是 DeskBuddy 的停止流程），交给' + (platform === 'win32' ? ' launcher ' : '开机自启') + '重新拉起')
     // 非 Windows：交给 launchd / systemd 按「非正常退出」重拉（它们会重新执行本 launcher，读到回滚后的 current.json）
     if (platform !== 'win32') return r.code == null ? 1 : r.code || 1
     // Windows：「启动」文件夹只在登录时跑一次，退了没人拉 —— 本进程自己重拉。
     // 🔴 DeskBuddy 自己的停止流程先结束本 launcher 再结束 daemon（autostart.ts stopPidFileDaemon），并留了标记，不会走到这里
     let wait = WIN_RESTART_MS
-    if (cur.state !== 'verifying' && !rolledBack) {
+    if (ran.state !== 'verifying' && !rolledBack) {
       winFails = now() - startedAt >= WIN_STABLE_MS ? 1 : winFails + 1
       wait = Math.min(WIN_RESTART_MS * Math.pow(2, winFails - 1), WIN_RESTART_MAX_MS)
       log(h, '守护进程异常退出（退出码 ' + (r.code == null ? r.signal || '?' : r.code) + '），' + Math.round(wait / 1000) + ' 秒后重拉')
@@ -358,7 +458,7 @@ async function main(argv, deps) {
   }
 }
 
-module.exports = { main, childEnv, daemonLockName, lockOwnerAlive, intentionalStop, AFTER_STOP_ENV, SWITCH_ENV_KEYS, pickTarget, recordCrash, rollback, readCurrent, paths, CRASH_WINDOW_MS, CRASH_LIMIT, TERM_EXIT_CODE, UNBOUND_EXIT_CODE, STOP_MARK_FILE, STOP_MARK_TTL_MS, WIN_RESTART_MS, WIN_RESTART_MAX_MS }
+module.exports = { main, runOnce, childEnv, daemonLockName, lockOwnerAlive, intentionalStop, AFTER_STOP_ENV, SWITCH_ENV_KEYS, pickTarget, recordCrash, rollback, readCurrent, paths, CRASH_WINDOW_MS, CRASH_LIMIT, TERM_EXIT_CODE, UNBOUND_EXIT_CODE, STOP_MARK_FILE, STOP_MARK_TTL_MS, WIN_RESTART_MS, WIN_RESTART_MAX_MS }
 
 if (require.main === module) {
   main(process.argv.slice(2)).then(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deskbuddy",
-  "version": "0.2.0-beta.37",
+  "version": "0.2.0-beta.38",
   "description": "把 Claude Code、Codex 等 AI 编码智能体每个会话窗口的状态，实时同步到桌面硬件屏幕",
   "keywords": [
     "ai",