dsh-clean-desktop-shell 0.1.12 → 0.1.13

package/lib/index.js

@@ -12,7 +12,7 @@ import { spawn } from 'node:child_process'
 import { appendFileSync } from 'node:fs'
 import { PKG_ROOT, MAIN_JS, dshHome, runtimeRoot, launchLogPath } from './common.js'
 import { ensureRuntime } from './runtime.js'
-import { patchExeIcon } from './icon.js'
+import { ensureRcedit, patchExeIcon } from './icon.js'
 
 // cordis registers the plugin by this name — bundles without an explicit
 // `name` export are silently skipped by the dsh loader.
@@ -21,8 +21,36 @@ export const name = 'dsh-clean-desktop-shell'
 // Disable auto-launch with DSH_SHELL_AUTO_LAUNCH=0.
 const AUTO_LAUNCH = process.env.DSH_SHELL_AUTO_LAUNCH !== '0'
 
+/**
+ * Hard budget for the taskbar-icon step. It runs before the spawn (Windows
+ * locks a running image), so it is on the launch path — but the icon is
+ * cosmetic and must never decide when the window appears. Without a budget a
+ * stalled rcedit fetch held the first launch for up to the fetchFile default
+ * of 600 s; with it, the worst case is 25 s and the usual case is ~0 (the
+ * fetch has already finished behind the Electron runtime download).
+ */
+const ICON_PATCH_DEADLINE_MS = 25000
+
 let launched = false
 
+/**
+ * Let a best-effort step run, but never wait longer than `ms` for it. Whatever
+ * it was doing keeps running in the background.
+ */
+function withDeadline(ctx, promise, ms) {
+  let timer
+  const deadline = new Promise((resolve) => {
+    timer = setTimeout(() => {
+      ctx.logger.warn(`[clean-desktop-shell] icon step exceeded ${ms} ms — launching without it`)
+      resolve()
+    }, ms)
+    // Do not keep the host process alive just to fire a warning.
+    timer.unref?.()
+  })
+  const settled = promise.then(() => {}, () => {})
+  return Promise.race([settled, deadline]).finally(() => clearTimeout(timer))
+}
+
 export function apply(ctx) {
   ctx.logger.info('[clean-desktop-shell] mounted (host half)')
   if (!AUTO_LAUNCH) return
@@ -30,10 +58,13 @@ export function apply(ctx) {
   // Runtime preparation is independent of authentication — start it now, but
   // defer the Electron spawn until the launch URL is minted below.
   let runtimeExe = null
+  // Kick the (tiny) rcedit fetch off alongside the (large) Electron runtime so
+  // the two never serialise; patchExeIcon reuses this same memoised promise.
+  void ensureRcedit(ctx)
   const runtimeReady = ensureRuntime(ctx)
     .then(async (exe) => {
       runtimeExe = exe
-      await patchExeIcon(ctx, exe).catch(() => {})
+      await withDeadline(ctx, patchExeIcon(ctx, exe), ICON_PATCH_DEADLINE_MS)
     })
     .catch((err) => {
       reportLaunchFailure(ctx, err)

package/package.json

@@ -1,127 +1,140 @@
-{
-  "name": "dsh-clean-desktop-shell",
-  "version": "0.1.12",
-  "description": "Clean desktop shell for DeepSeek Harness (DSH) as a DSH plugin — wraps your web profile in a native window, tray-managed backend, offline auto-reconnect, zero visual changes. DSH 插件形态的纯净桌面壳：复用现有 web profile，托盘管理后端，零视觉改造。",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Icather/dsh-clean-desktop-shell.git"
-  },
-  "homepage": "https://github.com/Icather/dsh-clean-desktop-shell#readme",
-  "bugs": {
-    "url": "https://github.com/Icather/dsh-clean-desktop-shell/issues"
-  },
-  "type": "module",
-  "main": "lib/index.js",
-  "files": [
-    "lib/",
-    "electron/",
-    "src/",
-    "scripts/",
-    "build/icon.png",
-    "build/icon.ico",
-    "cordis.patch.yml",
-    "README.md",
-    "README.en.md",
-    "CONTRIBUTORS.md",
-    "LICENSE",
-    "version.txt"
-  ],
-  "exports": {
-    ".": "./lib/index.js",
-    "./client": "./lib/client.js",
-    "./package.json": "./package.json"
-  },
-  "scripts": {
-    "build": "node scripts/build.mjs",
-    "check": "node scripts/check-syntax.mjs && node scripts/selftest-runtime.mjs",
-    "dev": "electron electron/main.js",
-    "icons": "node scripts/gen-icons.mjs",
-    "pack": "electron-builder --win nsis",
-    "pack:mac": "electron-builder --mac dmg"
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-client-runtime",
-        "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-theme"
-      ],
-      "platform": "web"
-    }
-  },
-  "peerDependencies": {
-    "@deepseek-ai/dsh": "*"
-  },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/dsh": {
-      "optional": true
-    }
-  },
-  "devDependencies": {
-    "electron": "^33.0.0",
-    "electron-builder": "^25.0.0",
-    "png-to-ico": "^3.0.2",
-    "sharp": "^0.35.3"
-  },
-  "build": {
-    "appId": "com.icather.dsh-clean-desktop-shell",
-    "productName": "DSH Clean Desktop Shell",
-    "asar": true,
-    "files": [
-      "electron/**/*",
-      "lib/**/*",
-      "src/**/*",
-      "build/icon.png",
-      "package.json",
-      "cordis.patch.yml"
-    ],
-    "extraMetadata": {
-      "main": "electron/main.js"
-    },
-    "win": {
-      "target": [
-        {
-          "target": "nsis",
-          "arch": [
-            "x64"
-          ]
-        }
-      ],
-      "icon": "build/icon.ico",
-      "signAndEditExecutable": false
-    },
-    "mac": {
-      "target": [
-        "dmg"
-      ],
-      "category": "public.app-category.developer-tools",
-      "icon": "build/icon.png"
-    },
-    "nsis": {
-      "oneClick": true,
-      "perMachine": false,
-      "createDesktopShortcut": true,
-      "createStartMenuShortcut": true
-    },
-    "publish": {
-      "provider": "github",
-      "owner": "Icather",
-      "repo": "dsh-clean-desktop-shell"
-    }
-  },
-  "license": "MIT",
-  "allowScripts": {
-    "electron@33.4.11": true
-  },
-  "dependencies": {
-    "electron-updater": "^6.8.9",
-    "semver": "^7.7.2"
-  },
-  "desktopShell": {
-    "electronVersion": "33.4.11"
-  }
-}
+{
+  "name": "dsh-clean-desktop-shell",
+  "version": "0.1.13",
+  "description": "Clean desktop shell for DeepSeek Harness (DSH) as a DSH plugin — wraps your web profile in a native window, tray-managed backend, offline auto-reconnect, zero visual changes. DSH 插件形态的纯净桌面壳：复用现有 web profile，托盘管理后端，零视觉改造。",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Icather/dsh-clean-desktop-shell.git"
+  },
+  "homepage": "https://github.com/Icather/dsh-clean-desktop-shell#readme",
+  "bugs": {
+    "url": "https://github.com/Icather/dsh-clean-desktop-shell/issues"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "files": [
+    "lib/",
+    "electron/",
+    "src/",
+    "scripts/",
+    "build/icon.png",
+    "build/icon.ico",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "CONTRIBUTORS.md",
+    "LICENSE",
+    "version.txt"
+  ],
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "check": "node scripts/check-syntax.mjs && node scripts/selftest-runtime.mjs && node scripts/selftest-recovery.mjs",
+    "dev": "electron electron/main.js",
+    "icons": "node scripts/gen-icons.mjs",
+    "pack": "electron-builder --win nsis",
+    "pack:mac": "electron-builder --mac dmg"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "compatibility": {
+      "dsh": ">=0.1.1 <0.2.0",
+      "dshReleases": {
+        "0.1.1-rc.2": "unknown",
+        "0.1.5-rc.1": "compatible",
+        "0.1.5-rc.2": "unknown",
+        "0.1.5-alpha.2": "unknown"
+      }
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-theme"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh": "*"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "electron": "^33.0.0",
+    "electron-builder": "^25.0.0",
+    "png-to-ico": "^3.0.2",
+    "sharp": "^0.35.3"
+  },
+  "build": {
+    "appId": "com.icather.dsh-clean-desktop-shell",
+    "productName": "DSH Clean Desktop Shell",
+    "asar": true,
+    "files": [
+      "electron/**/*",
+      "lib/**/*",
+      "src/**/*",
+      "build/icon.png",
+      "package.json",
+      "cordis.patch.yml"
+    ],
+    "extraMetadata": {
+      "main": "electron/main.js"
+    },
+    "win": {
+      "target": [
+        {
+          "target": "nsis",
+          "arch": [
+            "x64"
+          ]
+        }
+      ],
+      "icon": "build/icon.ico",
+      "signAndEditExecutable": false
+    },
+    "mac": {
+      "target": [
+        "dmg"
+      ],
+      "category": "public.app-category.developer-tools",
+      "icon": "build/icon.png"
+    },
+    "nsis": {
+      "oneClick": true,
+      "perMachine": false,
+      "createDesktopShortcut": true,
+      "createStartMenuShortcut": true
+    },
+    "publish": {
+      "provider": "github",
+      "owner": "Icather",
+      "repo": "dsh-clean-desktop-shell"
+    }
+  },
+  "license": "MIT",
+  "allowScripts": {
+    "electron@33.4.11": true
+  },
+  "dependencies": {
+    "electron-updater": "^6.8.9",
+    "semver": "^7.7.2"
+  },
+  "desktopShell": {
+    "electronVersion": "33.4.11"
+  }
+}

package/scripts/selftest-recovery.mjs

@@ -0,0 +1,140 @@
+/**
+ * Self-check for the backend-outage run (electron/outage.js).
+ *
+ * Defends the phase-1 recovery transitions, not threshold constants alone:
+ *  - consecutive probe failures escalate the in-page notice from transient
+ *    to persistent/unavailable only after the agreed boundary, and a single
+ *    success resets the run (a one-off slow response can never escalate a
+ *    loaded session);
+ *  - the navigation token discards probe results that finish after the
+ *    window navigated or was disposed — a stale result (success or failure)
+ *    must never mutate the run nor produce a notice payload.
+ *
+ * Run: node scripts/selftest-recovery.mjs
+ * Electron additionally checks that a real failed spawn remains retryable.
+ */
+import { OutageRun, PERSISTENT_AFTER_FAILURES } from '../electron/outage.js'
+
+let failures = 0
+
+function check(label, cond) {
+  console.log(`  ${cond ? 'ok  ' : 'FAIL'} ${label}`)
+  if (!cond) failures++
+}
+
+function same(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b)
+}
+
+console.log('[escalation: transient → persistent → recovery]')
+const run = new OutageRun()
+check('a healthy probe yields the ok payload', same(run.apply(run.checkpoint(), true), { state: 'ok' }))
+for (let i = 1; i < PERSISTENT_AFTER_FAILURES; i++) {
+  const out = run.apply(run.checkpoint(), false)
+  check(
+    `failure ${i} stays transient (failures=${run.failures})`,
+    same(out, { state: 'degraded', persistent: false }) && run.failures === i,
+  )
+}
+const escalated = run.apply(run.checkpoint(), false)
+check(
+  `failure ${PERSISTENT_AFTER_FAILURES} escalates to persistent`,
+  same(escalated, { state: 'degraded', persistent: true }) &&
+    run.failures === PERSISTENT_AFTER_FAILURES,
+)
+check(
+  'further failures stay persistent',
+  same(run.apply(run.checkpoint(), false), { state: 'degraded', persistent: true }),
+)
+const recovered = run.apply(run.checkpoint(), true)
+check('a success recovers and resets the run', same(recovered, { state: 'ok' }) && run.failures === 0)
+check(
+  'a failure after recovery is transient again',
+  same(run.apply(run.checkpoint(), false), { state: 'degraded', persistent: false }) &&
+    run.failures === 1,
+)
+
+console.log('[stale results after navigation are discarded]')
+const run2 = new OutageRun()
+const t1 = run2.checkpoint()
+const t2 = run2.checkpoint()
+check('checkpoints stay valid while no navigation happens', run2.isCurrent(t1) && run2.isCurrent(t2))
+run2.apply(t1, false)
+run2.reset() // e.g. showOffline / reload / fresh page load
+check('reset invalidates outstanding checkpoints', !run2.isCurrent(t1) && !run2.isCurrent(t2))
+check('a stale failure result is discarded (no payload)', run2.apply(t1, false) === null)
+check('a stale success result is discarded too', run2.apply(t2, true) === null)
+check('discards did not mutate the fresh run', run2.failures === 0)
+check(
+  'a fresh probe after the reset starts over at failure 1',
+  same(run2.apply(run2.checkpoint(), false), { state: 'degraded', persistent: false }) &&
+    run2.failures === 1,
+)
+
+if (process.versions.electron) {
+  const { default: assert } = await import('node:assert/strict')
+  const { mkdtempSync, writeFileSync, unlinkSync, rmdirSync } = await import('node:fs')
+  const { tmpdir } = await import('node:os')
+  const { join } = await import('node:path')
+  const service = await import('../electron/service.js')
+  const folder = mkdtempSync(join(tmpdir(), 'dsh-failed-spawn-'))
+  const command = join(folder, 'dsh')
+  const fetch = globalThis.fetch
+  // Keep the probe isolated from any real backend; process spawning stays real.
+  globalThis.fetch = async () => { throw new Error('isolated unreachable backend') }
+  try {
+    writeFileSync(command, 'not an executable', { mode: 0o600 })
+    await assert.rejects(service.start({ backendPath: folder }))
+    await assert.rejects(service.start({ backendPath: folder }))
+    check('a failed spawn rejects again instead of reporting a live backend', true)
+  } catch (error) {
+    console.error(error)
+    check('a failed spawn rejects again instead of reporting a live backend', false)
+  } finally {
+    globalThis.fetch = fetch
+    unlinkSync(command)
+    rmdirSync(folder)
+  }
+
+  const { app, ipcMain } = await import('electron')
+  const { createServer } = await import('node:http')
+  const { once } = await import('node:events')
+  const { createMainWindow } = await import('../electron/window.js')
+  const server = createServer((_request, response) => response.end('<!doctype html><title>Recovery check</title>'))
+  app.whenReady().then(async () => {
+    let window
+    try {
+      await new Promise(resolve => server.listen(0, '127.0.0.1', resolve))
+      window = createMainWindow({ target: `http://127.0.0.1:${server.address().port}/?dsh-desktop-mode=advanced` })
+      window.hide()
+      await once(window.webContents, 'did-finish-load')
+      await window.webContents.executeJavaScript(`
+        window.attempts = 0
+        window.shellAPI.onReconnectRequest(() => {
+          if (++window.attempts > 5) return
+          window.shellAPI.connectionReport('connecting')
+          window.shellAPI.connectionReport('disconnected')
+        })
+        window.shellAPI.connectionReport('disconnected')
+      `)
+      for (let i = 0; i < 5; i++) ipcMain.emit('shell:retry-connection', { sender: window.webContents })
+      await new Promise(resolve => setTimeout(resolve, 500))
+      assert.equal(await window.webContents.executeJavaScript('window.attempts'), 1)
+      check('burst retries share one attempt and immediate failure does not feed back', true)
+    } catch (error) {
+      console.error(error)
+      check('burst retries share one attempt and immediate failure does not feed back', false)
+    } finally {
+      window?.destroy()
+      server.close()
+    }
+    finish()
+  })
+}
+
+function finish() {
+  console.log(`\n${failures === 0 ? 'PASS' : `FAIL (${failures} check(s))`}`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+if (!process.versions.electron) finish()

package/src/client/client.js

@@ -1,11 +1,21 @@
 /**
  * dsh-clean-desktop-shell — client half (web browser bundle).
  *
- * The shell is a standalone Electron window; it injects nothing into the
- * dsh web UI. This client module exists only to satisfy the client-modules
- * loader contract — a bundle's client entry must register itself via
- * `window.__ModuleLoader__.load({ id, factory })`, otherwise dsh reports
- * "loaded without registering … via __ModuleLoader__.load".
+ * Bridges the page's DSH client-runtime connection lifecycle into the
+ * Electron shell so HTTP health alone can never hide a terminal disconnect
+ * (e.g. the backend restarted under the page: HTTP answers again while the
+ * page's WebSocket generation is dead).
+ *
+ *  - ctx.connection.state ('connected' | 'connecting' | 'disconnected') is
+ *    forwarded to the main process (shell:client-connection → preload
+ *    shellAPI.connectionReport);
+ *  - main-process reconnect requests (shell:client-reconnect →
+ *    shellAPI.onReconnectRequest) call ctx.connection.reconnect() —
+ *    recovery through the app's own reconnect loop, never a reload.
+ *
+ * The supported baseline provides ctx.connection.state / reconnect();
+ * missing APIs fail activation loudly instead of degrading. A plain browser
+ * (no shellAPI — no Electron shell) is the only silent case.
  */
 window.__ModuleLoader__.load({
   id: 'dsh-clean-desktop-shell',
@@ -13,7 +23,32 @@ window.__ModuleLoader__.load({
     var module = { exports: {} };
     var exports = module.exports;
     Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-    exports.apply = () => {};
+    exports.inject = ['connection'];
+    exports.apply = function (ctx) {
+      var api = window.shellAPI;
+      if (!api) return;
+      var connection = ctx.connection;
+      var latest = null;
+      var notify = function () {
+        var state = connection.state.getSnapshot();
+        if (state === latest) return;
+        latest = state;
+        if (state === 'connected' || state === 'connecting' || state === 'disconnected') {
+          api.connectionReport(state);
+        }
+      };
+      var unsubscribe = connection.state.subscribe(notify);
+      notify(); // report whatever the runtime already is — a lost initial disconnect must not be hidden
+      var unregisterRequest = api.onReconnectRequest(function () {
+        connection.reconnect();
+      });
+      ctx.effect(function () {
+        return function () {
+          unsubscribe();
+          unregisterRequest();
+        };
+      });
+    };
     return module.exports;
   },
 });

package/src/host/icon.js

@@ -16,6 +16,48 @@ import { existsSync, writeFileSync } from 'node:fs'
 import { join } from 'node:path'
 import { PKG_ROOT, isWin, runtimeRoot, fetchFile } from './common.js'
 
+const RCEDIT_NAME = 'rcedit-x64.exe'
+const RCEDIT_URL = 'https://github.com/electron/rcedit/releases/download/v2.0.0/rcedit-x64.exe'
+
+/**
+ * rcedit is a ~1.3 MB self-contained exe, and its download sits on the launch
+ * path (Windows locks a running image, so the patch has to happen before the
+ * exe is spawned). fetchFile's default budget — 600 s — is sized for the
+ * ~100 MB Electron runtime, not for this: behind a stalled proxy it could keep
+ * the window off screen for ten minutes. Cap it well below that; a miss only
+ * costs the default icon.
+ */
+const RCEDIT_TIMEOUT_SEC = 20
+
+let rceditPromise = null
+
+/**
+ * Fetch (once) the cached rcedit binary next to the runtimes. Memoised so the
+ * host half can start this alongside the Electron runtime download and have
+ * the icon step reuse the same fetch instead of serialising behind it.
+ *
+ * Never rejects: every failure mode just means "no rcedit, default icon".
+ */
+export function ensureRcedit(ctx) {
+  if (!rceditPromise) {
+    rceditPromise = (async () => {
+      try {
+        const rcedit = join(runtimeRoot(), RCEDIT_NAME)
+        if (existsSync(rcedit)) return rcedit
+        ctx.logger.info('[clean-desktop-shell] downloading rcedit for icon patching')
+        if (await fetchFile(RCEDIT_URL, rcedit, RCEDIT_TIMEOUT_SEC)) return rcedit
+        ctx.logger.warn('[clean-desktop-shell] rcedit download failed — taskbar icon stays default')
+      } catch (err) {
+        ctx.logger.warn(`[clean-desktop-shell] rcedit unavailable (${err?.message ?? err}) — taskbar icon stays default`)
+      }
+      // Not memoised as a failure: a later launch deserves a fresh attempt.
+      rceditPromise = null
+      return null
+    })()
+  }
+  return rceditPromise
+}
+
 export async function patchExeIcon(ctx, exe) {
   if (!isWin) return
   const ico = join(PKG_ROOT, 'build', 'icon.ico')
@@ -23,16 +65,8 @@ export async function patchExeIcon(ctx, exe) {
   const marker = `${exe}.whale-icon`
   if (existsSync(marker)) return
 
-  // rcedit is a single self-contained exe, cached next to the runtimes.
-  const rcedit = join(runtimeRoot(), 'rcedit-x64.exe')
-  if (!existsSync(rcedit)) {
-    const url = 'https://github.com/electron/rcedit/releases/download/v2.0.0/rcedit-x64.exe'
-    ctx.logger.info('[clean-desktop-shell] downloading rcedit for icon patching')
-    if (!(await fetchFile(url, rcedit))) {
-      ctx.logger.warn('[clean-desktop-shell] rcedit download failed — taskbar icon stays default')
-      return
-    }
-  }
+  const rcedit = await ensureRcedit(ctx)
+  if (!rcedit) return
 
   const child = spawn(rcedit, [exe, '--set-icon', ico], {
     windowsHide: true,

package/src/host/index.js

@@ -12,7 +12,7 @@ import { spawn } from 'node:child_process'
 import { appendFileSync } from 'node:fs'
 import { PKG_ROOT, MAIN_JS, dshHome, runtimeRoot, launchLogPath } from './common.js'
 import { ensureRuntime } from './runtime.js'
-import { patchExeIcon } from './icon.js'
+import { ensureRcedit, patchExeIcon } from './icon.js'
 
 // cordis registers the plugin by this name — bundles without an explicit
 // `name` export are silently skipped by the dsh loader.
@@ -21,8 +21,36 @@ export const name = 'dsh-clean-desktop-shell'
 // Disable auto-launch with DSH_SHELL_AUTO_LAUNCH=0.
 const AUTO_LAUNCH = process.env.DSH_SHELL_AUTO_LAUNCH !== '0'
 
+/**
+ * Hard budget for the taskbar-icon step. It runs before the spawn (Windows
+ * locks a running image), so it is on the launch path — but the icon is
+ * cosmetic and must never decide when the window appears. Without a budget a
+ * stalled rcedit fetch held the first launch for up to the fetchFile default
+ * of 600 s; with it, the worst case is 25 s and the usual case is ~0 (the
+ * fetch has already finished behind the Electron runtime download).
+ */
+const ICON_PATCH_DEADLINE_MS = 25000
+
 let launched = false
 
+/**
+ * Let a best-effort step run, but never wait longer than `ms` for it. Whatever
+ * it was doing keeps running in the background.
+ */
+function withDeadline(ctx, promise, ms) {
+  let timer
+  const deadline = new Promise((resolve) => {
+    timer = setTimeout(() => {
+      ctx.logger.warn(`[clean-desktop-shell] icon step exceeded ${ms} ms — launching without it`)
+      resolve()
+    }, ms)
+    // Do not keep the host process alive just to fire a warning.
+    timer.unref?.()
+  })
+  const settled = promise.then(() => {}, () => {})
+  return Promise.race([settled, deadline]).finally(() => clearTimeout(timer))
+}
+
 export function apply(ctx) {
   ctx.logger.info('[clean-desktop-shell] mounted (host half)')
   if (!AUTO_LAUNCH) return
@@ -30,10 +58,13 @@ export function apply(ctx) {
   // Runtime preparation is independent of authentication — start it now, but
   // defer the Electron spawn until the launch URL is minted below.
   let runtimeExe = null
+  // Kick the (tiny) rcedit fetch off alongside the (large) Electron runtime so
+  // the two never serialise; patchExeIcon reuses this same memoised promise.
+  void ensureRcedit(ctx)
   const runtimeReady = ensureRuntime(ctx)
     .then(async (exe) => {
       runtimeExe = exe
-      await patchExeIcon(ctx, exe).catch(() => {})
+      await withDeadline(ctx, patchExeIcon(ctx, exe), ICON_PATCH_DEADLINE_MS)
     })
     .catch((err) => {
       reportLaunchFailure(ctx, err)

package/version.txt

@@ -1 +1 @@
-0.1.12
+0.1.13