dsh-console-sentinel 0.3.0 → 1.0.0

package/lib/index.js

@@ -26,7 +26,7 @@ const PLUGIN_VERSION = (() => {
   try { return createRequire(import.meta.url)('dsh-console-sentinel/package.json').version }
   catch (_) { return '0.0.0' }
 })()
-import { runDesktopCleanup, DEFAULT_PROTECTED_PROCESSES } from './desktop.js'
+import { runDesktopCleanup, runDesktopProbe, forceCloseElevated, runElevatedClose, DEFAULT_PROTECTED_PROCESSES } from './desktop.js'
 import {
   createLedger,
   eligibleForAuto,
@@ -47,6 +47,91 @@ import {
 export const name = 'dsh-console-sentinel'
 export const inject = ['tools']
 
+// ---------------------------------------------------------------------------
+// Host-process guard — the SAFETY BACKSTOP for any bulk close/hide action.
+//
+// 🛑 2026-11-08 事故：点「关闭空壳窗口」把 DSH 客户端也关了。原因是从 ledger 里
+// 取"空壳"时只按 isEmpty 过滤，没排除宿主自己的进程家族 —— 宿主（Electron /
+// 其下 pwsh、node、conhost）里有些控制台窗口恰好"没有业务子进程"，被当成空壳
+// 一并 WM_CLOSE，连带把宿主进程树杀掉。
+//
+// 现在任何批量关闭/隐藏都必须先算出一个"宿主保护集"：宿主进程自身 + 全部祖先
+// + 全部后代 + 所有镜像名像 dsh/deepseek/electron 的进程。命中集合的窗口一律跳过。
+// ---------------------------------------------------------------------------
+let __hostGuardCache = { at: 0, set: null }
+function hostProcessGuard(ttlMs = 8000) {
+  const now = Date.now()
+  if (__hostGuardCache.set && now - __hostGuardCache.at < ttlMs) return __hostGuardCache.set
+  const guard = new Set()
+  const self = process.pid
+  guard.add(self)
+  try {
+    const req = createRequire(import.meta.url)
+    const { execFileSync } = req('node:child_process')
+    // One shot: pid|ppid|name for every process.
+    const raw = execFileSync('powershell.exe',
+      ['-NoProfile', '-NonInteractive', '-Command',
+        "Get-CimInstance Win32_Process | ForEach-Object { '{0}|{1}|{2}' -f $_.ProcessId,$_.ParentProcessId,$_.Name }"],
+      { encoding: 'utf8', timeout: 15000, windowsHide: true })
+    const map = new Map() // pid -> { ppid, name }
+    for (const line of String(raw).split(/\r?\n/)) {
+      const parts = line.trim().split('|')
+      if (parts.length < 3) continue
+      const pid = Number(parts[0])
+      if (!pid) continue
+      map.set(pid, { ppid: Number(parts[1]) || 0, name: String(parts[2] || '') })
+    }
+    const childrenOf = new Map()
+    for (const [pid, info] of map) {
+      if (!childrenOf.has(info.ppid)) childrenOf.set(info.ppid, [])
+      childrenOf.get(info.ppid).push(pid)
+    }
+    const seed = new Set([self])
+    // 1) ancestors of self
+    let cur = self
+    const upSeen = new Set()
+    while (cur && map.has(cur) && !upSeen.has(cur)) {
+      upSeen.add(cur); seed.add(cur); cur = map.get(cur).ppid
+    }
+    // 2) every process whose image looks like DSH / Electron / DeepSeek harness
+    for (const [pid, info] of map) {
+      const n = String(info.name).toLowerCase()
+      if (n.indexOf('dsh') === 0 || n.indexOf('deepseek') >= 0 || n === 'electron.exe' || n === 'electron') {
+        seed.add(pid)
+      }
+    }
+    // 3) expand to ALL descendants of every seed (whole DSH tree, wherever we sit)
+    const stack = [...seed]
+    const seen = new Set(seed)
+    for (const p of seed) guard.add(p)
+    while (stack.length) {
+      const p = stack.pop()
+      for (const c of (childrenOf.get(p) || [])) {
+        if (!seen.has(c)) { seen.add(c); guard.add(c); stack.push(c) }
+      }
+    }
+  } catch (_) {
+    // Could not enumerate: keep at least self. Callers additionally skip
+    // source==='dshHost' rows, so a total enumeration failure is still safe.
+  }
+  __hostGuardCache = { at: now, set: guard }
+  return guard
+}
+
+// 只有"裸解释器"才允许被批量关闭：cmd / powershell / pwsh / python。
+// 显式排除 mpiexec（Fluent MPI）、fluent/ansys/cx* 求解器、node（可能托管服务/中继）、
+// launcher 等——这些一旦被关，会杀掉正在计算的 Fluent 或后台服务。
+const SAFE_SHELL_NAMES = new Set([
+  'cmd', 'cmd.exe', 'powershell', 'powershell.exe', 'pwsh', 'pwsh.exe',
+  'python', 'python.exe', 'pythonw', 'pythonw.exe',
+])
+function isSafeClosableShell(row) {
+  const raw = String((row && (row.processName || row.process)) || '').toLowerCase()
+  if (!SAFE_SHELL_NAMES.has(raw)) return false
+  if (/mpi|fluent|ansys|cx\d|solver|launcher|cae/.test(raw)) return false
+  return true
+}
+
 export const Config = Schema.object({
   enabled: Schema.boolean().default(true).description(
     'Master switch. When off, no scans run and no actions are taken.',
@@ -132,6 +217,11 @@ export const Config = Schema.object({
     titles: Schema.array(Schema.string()).default([]).description(
       'Window-title substrings that are never auto-managed or bulk-closed.',
     ),
+    unprotect: Schema.array(Schema.string()).default([]).description(
+      'Process image names whose built-in desktop-cleanup protection is lifted, ' +
+      'so they CAN be closed by 一键关闭其他窗口. Managed at runtime from the ' +
+      'settings panel (taskbar list → 取消保护). Never applies to the DSH host.',
+    ),
   }).description('Static exemption list; merged with the runtime-managed whitelist file.'),
 })
 
@@ -841,7 +931,7 @@ function registerHttpUi(ctx, deps) {
         hidden: rows.filter((row) => row.hidden).length,
       },
       windows: rows,
-      whitelist: { processes: wl.processes, titles: wl.titles },
+      whitelist: { processes: wl.processes, titles: wl.titles, unprotect: wl.unprotect || [] },
       whitelistPath: DEFAULT_WHITELIST_PATH,
       protectedProcesses: [
         ...(config.cleanup?.protectedProcesses || DEFAULT_PROTECTED_PROCESSES),
@@ -905,7 +995,12 @@ function registerHttpUi(ctx, deps) {
       }))
 
       register('/hide-empty', guard(async (req, res) => {
-        const targets = ledger.snapshot().filter((row) => row.isEmpty && !row.hidden)
+        const hostSet = hostProcessGuard()
+        const all = ledger.snapshot()
+        const targets = all.filter((row) =>
+          row.isEmpty && !row.hidden &&
+          row.source !== 'dsh-host' && !hostSet.has(Number(row.pid)) &&
+          isSafeClosableShell(row))
         let hidden = 0
         for (const row of targets) {
           const out = await runWindowAction(row.hwnd, 'hide')
@@ -915,6 +1010,72 @@ function registerHttpUi(ctx, deps) {
         wsSendJson(res, 200, { ok: true, hidden, status: statusPayload() })
       }))
 
+      // 关闭空壳窗口：对"裸解释器空壳"发 WM_CLOSE（真正结束，不是隐藏）。
+      // 三重硬保护：① 宿主全进程树 ② source=dsh-host ③ 只认 cmd/powershell/pwsh/python，
+      // 绝不动 mpiexec/fluent/ansys/node —— 否则会误杀正在计算的 Fluent 或宿主。
+      register('/close-empty', guard(async (req, res) => {
+        const hostSet = hostProcessGuard()
+        const all = ledger.snapshot()
+        const targets = all.filter((row) =>
+          row.isEmpty &&
+          row.source !== 'dsh-host' && !hostSet.has(Number(row.pid)) &&
+          isSafeClosableShell(row))
+        const skipped = all.filter((row) => row.isEmpty && !targets.includes(row)).length
+        let closed = 0
+        for (const row of targets) {
+          const out = await runWindowAction(row.hwnd, 'close')
+          if (out && out.ok) closed += 1
+        }
+        await scan()
+        wsSendJson(res, 200, { ok: true, closed, skipped, status: statusPayload() })
+      }))
+
+      // 按软件一键关闭：对指定进程名的"全部窗口"发 WM_CLOSE（等于对该软件每个窗口按 Alt+F4），
+      // 不需要逐个点。宿主/DSH/Fluent 等硬保护；提权软件走一次 UAC 提权优雅关闭。
+      register('/close-process', guard(async (req, res) => {
+        const body = await wsReadJsonBody(req)
+        const procName = String(body.process || '').trim()
+        if (!procName) return wsSendJson(res, 400, { ok: false, reason: 'no-process' })
+        const target = procName.toLowerCase().replace(/\.exe$/, '')
+        if (/^dsh|electron|deepseek/i.test(target)) {
+          return wsSendJson(res, 200, { ok: false, reason: 'host-protected' })
+        }
+        let probe
+        try { probe = await runDesktopProbe(config.probeTimeoutMs || 20000) }
+        catch (err) { return wsSendJson(res, 200, { ok: false, reason: String((err && err.message) || err) }) }
+        if (!probe || !probe.ok) return wsSendJson(res, 200, { ok: false, reason: (probe && probe.reason) || 'probe-failed' })
+        const hostSet = hostProcessGuard()
+        const procOf = (w) => String(w.process ?? w.Process ?? '').toLowerCase().replace(/\.exe$/, '')
+        const pidOf = (w) => Number(w.pid ?? w.Pid)
+        const hwndOf = (w) => Number(w.hwnd ?? w.Hwnd)
+        const elevOf = (w) => Boolean(w.elevated ?? w.Elevated)
+        const wins = (probe.windows || []).filter((w) => procOf(w) === target && !hostSet.has(pidOf(w)))
+        if (!wins.length) return wsSendJson(res, 200, { ok: true, process: procName, total: 0, closedCount: 0, note: 'no-windows' })
+        const normalH = [], elevH = []
+        for (const w of wins) (elevOf(w) ? elevH : normalH).push(hwndOf(w))
+        let closed = 0
+        for (const h of normalH) {
+          const r = await runWindowAction(h, 'close')
+          if (r && r.ok) closed += 1
+        }
+        let elevRes = null
+        if (elevH.length) {
+          elevRes = await runElevatedClose(elevH, 120000)
+          closed += (elevRes.closedCount || 0)
+        }
+        await scan()
+        wsSendJson(res, 200, {
+          ok: true,
+          process: procName,
+          total: wins.length,
+          closedCount: closed,
+          normal: normalH.length,
+          elevated: elevH.length,
+          uacCancelled: Boolean(elevRes && elevRes.reason === 'uac-denied-or-cancelled'),
+          status: statusPayload(),
+        })
+      }))
+
       register('/window', guard(async (req, res) => {
         const body = await wsReadJsonBody(req)
         const hwnd = Number(body.hwnd)
@@ -922,6 +1083,26 @@ function registerHttpUi(ctx, deps) {
         if (!hwnd || supportedActions.indexOf(action) < 0) {
           return wsSendJson(res, 400, { ok: false, reason: 'bad-params' })
         }
+        // 单窗口操作也不能碰宿主 / Fluent / MPI（否则点一下就把 DSH 或正在算的 Fluent 关了）。
+        const procHint = String(body.process || '').toLowerCase().replace(/\.exe$/, '')
+        const sysLocked = procHint && (/^dsh|electron|deepseek|mpi|fluent|ansys|^cx\d|solver|cae|launcher/i.test(procHint))
+        const hostSet = hostProcessGuard()
+        const rec = ledger.snapshot().find((r) => Number(r.hwnd) === hwnd)
+        if (sysLocked || (rec && (hostSet.has(Number(rec.pid)) || rec.source === 'dsh-host'))) {
+          return wsSendJson(res, 200, { ok: false, reason: 'host-protected', hwnd, action, status: statusPayload() })
+        }
+        // 管理员窗口：非提权 WM_CLOSE 会被 UIPI 丢弃 → 走一次提权优雅关闭（WM_CLOSE）。
+        if (action === 'close' && Boolean(body.elevated)) {
+          const er = await runElevatedClose([hwnd], 120000)
+          await scan()
+          const ok = (er.closedCount || 0) > 0
+          return wsSendJson(res, 200, {
+            ok,
+            hwnd, action, elevated: true,
+            reason: ok ? '' : (er.reason || 'not-closed'),
+            status: statusPayload(),
+          })
+        }
         const result = await runWindowAction(hwnd, action)
         await scan()
         wsSendJson(res, 200, { ok: Boolean(result && result.ok), hwnd, action, result, status: statusPayload() })
@@ -931,33 +1112,150 @@ function registerHttpUi(ctx, deps) {
         const body = await wsReadJsonBody(req)
         const dryRun = Boolean(body.dryRun)
         const wl = getWhitelist()
+        const norm = (s) => String(s).toLowerCase().replace(/\.exe$/, '')
+        // Effective protection = (built-in + config + whitelist) minus the
+        // processes the user explicitly lifted via 取消保护. The DSH host is
+        // always kept protected regardless of the unprotect list.
+        const unprotect = new Set((wl.unprotect || []).map(norm))
+        const baseProtected = [
+          ...(config.cleanup?.protectedProcesses || DEFAULT_PROTECTED_PROCESSES),
+          ...wl.processes,
+        ]
+        const effectiveProtected = baseProtected.filter((p) => {
+          const n = norm(p)
+          if (n === 'dsh desktop' || n.startsWith('dsh next') || n === 'dsh') return true // host never closable
+          return !unprotect.has(n)
+        })
         const result = await runDesktopCleanup({
           confirm: !dryRun,
           selfPid: process.pid,
-          protectedProcesses: [...(config.cleanup?.protectedProcesses || []), ...wl.processes],
+          protectedProcesses: effectiveProtected,
           keepTitles: [...(config.cleanup?.keepTitles || []), ...wl.titles],
+          // Never let 一键清理任务栏窗口 touch the DSH host process family.
+          keepPids: [...hostProcessGuard()],
         })
         const fmt = (w) => 'hwnd=' + w.hwnd + ' pid=' + w.pid + ' [' + (w.process || '?') + '] ' + (w.title || '').slice(0, 70)
+        const detailed = (w) => ({
+          hwnd: w.hwnd,
+          pid: w.pid,
+          process: w.process || '',
+          title: w.title || '',
+          icon: w.icon || '',
+        })
         wsSendJson(res, 200, {
           ok: result.ok,
           dryRun: result.dryRun,
           fgHwnd: result.fgHwnd,
           planned: (result.targets || []).map(fmt),
+          plannedDetailed: (result.targets || []).map(detailed),
           plannedCount: (result.targets || []).length,
           kept: (result.kept || []).map((k) => ({ reason: k.keepReason, text: fmt(k) })),
           closedCount: (result.closed || []).length,
+          elevatedCount: result.elevatedCount || 0,
+          elevatedUacCancelled: Boolean(result.elevatedUacCancelled),
           reason: result.reason,
         })
       }))
 
+      register('/taskbar-windows', guard(async (req, res) => {
+        // Enumerate every visible taskbar window, attach its exe icon (base64
+        // PNG data URL) and the current whitelist / protection state so the
+        // settings panel can present a checkbox list the user picks exemptions
+        // from, and can lift built-in protection per process ("取消保护").
+        let probe
+        try {
+          probe = await runDesktopProbe(config.probeTimeoutMs || 20000)
+        } catch (err) {
+          return wsSendJson(res, 200, { ok: false, reason: String((err && err.message) || err), windows: [] })
+        }
+        if (!probe || !probe.ok) {
+          return wsSendJson(res, 200, { ok: false, reason: (probe && probe.reason) || 'probe-failed', windows: [] })
+        }
+        const wl = getWhitelist()
+        const norm = (s) => String(s).toLowerCase().replace(/\.exe$/, '')
+        const wlProc = new Set((wl.processes || []).map(norm))
+        const wlTitle = (wl.titles || []).map((s) => String(s).toLowerCase()).filter(Boolean)
+        const hardSet = new Set((config.cleanup?.protectedProcesses || DEFAULT_PROTECTED_PROCESSES).map(norm))
+        const unprotectSet = new Set((wl.unprotect || []).map(norm))
+        // The DSH host window itself must never be closeable — not even via 取消保护.
+        const isHostProc = (p) => p === 'dsh desktop' || p.startsWith('dsh next') || p === 'dsh'
+        const seen = new Set()
+        const windows = []
+        for (const raw of probe.windows || []) {
+          const hwnd = raw.hwnd ?? raw.Hwnd
+          const pid = raw.pid ?? raw.Pid
+          const proc = raw.process ?? raw.Process ?? ''
+          const title = raw.title ?? raw.Title ?? ''
+          const icon = raw.icon ?? raw.Icon ?? ''
+          const cls = raw.class ?? raw.Class ?? ''
+          const procLower = norm(proc)
+          const titleLower = String(title).toLowerCase()
+          const byProcess = wlProc.has(procLower)
+          const byTitle = !byProcess && wlTitle.some((t) => t && titleLower.indexOf(t) >= 0)
+          const isHard = hardSet.has(procLower) || isHostProc(procLower)
+          const isUnprotect = unprotectSet.has(procLower)
+          const hostLocked = isHostProc(procLower)
+          const elevated = Boolean(raw.elevated ?? raw.Elevated)
+          const key = String(hwnd) + '|' + String(proc) + '|' + String(title)
+          if (seen.has(key)) continue
+          seen.add(key)
+          windows.push({
+            hwnd,
+            pid,
+            process: proc,
+            title,
+            icon,
+            class: cls,
+            whitelisted: byProcess || byTitle,
+            whitelistedBy: byProcess ? 'process' : (byTitle ? 'title' : ''),
+            // effective protection == built-in protected AND not lifted by user
+            protected: (isHard && !isUnprotect) || hostLocked,
+            hardProtected: isHard,
+            unprotected: isHard && isUnprotect && !hostLocked,
+            hostLocked,
+            // Elevated rows cannot be closed by WM_CLOSE (UIPI drops it); the
+            // panel offers 强制关闭(管理员) which goes through UAC + taskkill.
+            elevated,
+          })
+        }
+        wsSendJson(res, 200, { ok: true, selfElevated: Boolean(probe.selfElevated), windows })
+      }))
+
+      // 强制关闭(管理员): UAC-elevated taskkill for windows whose owner runs
+      // elevated. An unelevated WM_CLOSE is silently dropped by Windows UIPI,
+      // which is why Taskmgr / iTop icons "would not close" (measured
+      // 2026-11-07). One UAC prompt per batch; answering No returns
+      // uac-denied-or-cancelled and changes nothing.
+      register('/force-close', guard(async (req, res) => {
+        const body = await wsReadJsonBody(req)
+        const pids = Array.isArray(body.pids) ? body.pids : (body.pid ? [body.pid] : [])
+        // Only processes the caller actually listed are accepted; forceCloseElevated
+        // additionally re-verifies every pid with tasklist and blocks the DSH host.
+        const allowedProcesses = Array.isArray(body.allowedProcesses) ? body.allowedProcesses : []
+        const result = await forceCloseElevated(pids, {
+          selfPid: process.pid,
+          allowedProcesses,
+          timeoutMs: 120000,
+        })
+        wsSendJson(res, 200, {
+          ok: Boolean(result.ok),
+          reason: result.reason || '',
+          killedCount: result.killedCount || 0,
+          total: result.total || 0,
+          results: result.results || [],
+          rejected: result.rejected || [],
+          stderr: result.stderr || '',
+        })
+      }))
+
       register('/whitelist', guard(async (req, res) => {
         if ((req.method || 'GET').toUpperCase() === 'GET') {
           const wl = getWhitelist()
-          return wsSendJson(res, 200, { ok: true, processes: wl.processes, titles: wl.titles, path: DEFAULT_WHITELIST_PATH })
+          return wsSendJson(res, 200, { ok: true, processes: wl.processes, titles: wl.titles, unprotect: wl.unprotect || [], path: DEFAULT_WHITELIST_PATH })
         }
         const body = await wsReadJsonBody(req)
         const act = String(body.action || 'list')
-        const kind = body.kind === 'title' ? 'titles' : 'processes'
+        const kind = body.kind === 'title' ? 'titles' : (body.kind === 'unprotect' ? 'unprotect' : 'processes')
         const items = Array.isArray(body.items) ? body.items : []
         let wl = getWhitelist()
         if (act === 'add') {
@@ -973,7 +1271,7 @@ function registerHttpUi(ctx, deps) {
           setWhitelist(wl)
           ctx.emit('console-sentinel/whitelist', { action: act, kind })
         }
-        wsSendJson(res, 200, { ok: true, action: act, processes: wl.processes, titles: wl.titles, path: DEFAULT_WHITELIST_PATH })
+        wsSendJson(res, 200, { ok: true, action: act, processes: wl.processes, titles: wl.titles, unprotect: wl.unprotect || [], path: DEFAULT_WHITELIST_PATH })
       }))
     })
   } catch (error) {

package/lib/probe.js

@@ -72,7 +72,7 @@ $cb = [PInvoke.W32+EnumWindowsProc]{
   if ($cls -eq 'CASCADIA_HOSTING_WINDOW_CLASS' -or $cls -eq 'PseudoConsoleWindow' -or $cls -eq 'ConsoleWindowClass') {
     $t = [System.Text.StringBuilder]::new(512); $null = [PInvoke.W32]::GetWindowText($hWnd, $t, 512)
     $procid = 0; $null = [PInvoke.W32]::GetWindowThreadProcessId($hWnd, [ref]$procid)
-    $global:__sentinelWins += [PSCustomObject]@{ Hwnd = $hWnd.ToInt64(); Class = $cls; Title = $t.ToString(); PID = [int]$procid; Visible = [PInvoke.W32]::IsWindowVisible($hWnd) }
+    $global:__sentinelWins += [PSCustomObject]@{ Hwnd = $hWnd.ToInt64(); Class = $cls; Title = $t.ToString(); PID = [int]$procid; Visible = [PInvoke.W32]::IsWindowVisible($hWnd); IconPath = [string]::Empty }
   }
   return $true
 }
@@ -127,6 +127,7 @@ foreach ($pid_ in $consolePids) {
   if ($ppid -and $byPid.ContainsKey([int]$ppid)) { $pName = $byPid[[int]$ppid].Name }
   $kids = @()
   if ($childMap.ContainsKey([int]$pid_)) { $kids = @($childMap[[int]$pid_]) }
+
   $procs[[string]$pid_] = @{
     Name = $p.Name
     CpuMs = [int64]($p.TotalProcessorTime.TotalMilliseconds)

package/lib/whitelist.js

@@ -27,23 +27,29 @@ function normItems(arr) {
 }
 
 export function emptyWhitelist() {
-  return { processes: [], titles: [] }
+  return { processes: [], titles: [], unprotect: [] }
 }
 
 export function sanitizeWhitelist(raw) {
   const r = raw && typeof raw === 'object' ? raw : {}
-  return { processes: normItems(r.processes), titles: normItems(r.titles) }
+  return {
+    processes: normItems(r.processes),
+    titles: normItems(r.titles),
+    unprotect: normItems(r.unprotect),
+  }
 }
 
 export function mergeWhitelists(...lists) {
   const processes = []
   const titles = []
+  const unprotect = []
   for (const l of lists) {
     const c = sanitizeWhitelist(l)
     for (const p of c.processes) if (!processes.includes(p)) processes.push(p)
     for (const t of c.titles) if (!titles.includes(t)) titles.push(t)
+    for (const u of c.unprotect) if (!unprotect.includes(u)) unprotect.push(u)
   }
-  return { processes, titles }
+  return { processes, titles, unprotect }
 }
 
 export function loadWhitelist(file = DEFAULT_WHITELIST_PATH) {
@@ -62,7 +68,7 @@ export function saveWhitelist(data, file = DEFAULT_WHITELIST_PATH) {
   return clean
 }
 
-// kind is the canonical plural key: 'processes' | 'titles'.
+// kind is the canonical plural key: 'processes' | 'titles' | 'unprotect'.
 export function addWhitelistItems(data, kind, items) {
   const base = sanitizeWhitelist(data)
   return mergeWhitelists(base, { [kind]: items })
@@ -70,9 +76,9 @@ export function addWhitelistItems(data, kind, items) {
 
 export function removeWhitelistItems(data, kind, items) {
   const base = sanitizeWhitelist(data)
-  const key = kind === 'titles' ? 'titles' : 'processes'
+  const key = kind === 'titles' ? 'titles' : (kind === 'unprotect' ? 'unprotect' : 'processes')
   const drop = new Set(normItems(items).map((s) => s.toLowerCase()))
-  const out = { processes: base.processes, titles: base.titles }
+  const out = { processes: base.processes, titles: base.titles, unprotect: base.unprotect }
   out[key] = base[key].filter((v) => !drop.has(v.toLowerCase()))
   return out
 }

package/package.json

@@ -1,82 +1,90 @@
-{
-  "name": "dsh-console-sentinel",
-  "version": "0.3.0",
-  "description": "DSH console window sentinel - auto-hides idle AI/script console windows on Windows",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/loyalchiiina/dsh-console-sentinel.git"
-  },
-  "homepage": "https://github.com/loyalchiiina/dsh-console-sentinel#readme",
-  "bugs": {
-    "url": "https://github.com/loyalchiiina/dsh-console-sentinel/issues"
-  },
-  "type": "module",
-  "main": "lib/index.js",
-  "exports": {
-    ".": "./lib/index.js",
-    "./client": "./lib/client.js",
-    "./package.json": "./package.json",
-    "./locale/*.json": "./locale/*.json",
-    "./icon": "./icon.svg"
-  },
-  "files": [
-    "lib",
-    "lib/**/*.js",
-    "cordis.patch.yml",
-    "LICENSE",
-    "README.md",
-    "README.zh.md",
-    "locale/*.json",
-    "icon.svg",
-    "README-zh.md",
-    "README-es.md",
-    "README-pt.md",
-    "README-hi.md",
-    "CHANGELOG.md"
-  ],
-  "engines": {
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "console",
-    "window",
-    "powershell",
-    "windows"
-  ],
-  "peerDependencies": {
-    "@deepseek-ai/cordis": ">=4.0.2",
-    "@deepseek-ai/dsh-tools": ">=0.1.5-rc.2",
-    "@deepseek-ai/schemastery": ">=3.18.0"
-  },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/cordis": {
-      "optional": false
-    },
-    "@deepseek-ai/dsh-tools": {
-      "optional": false
-    },
-    "@deepseek-ai/schemastery": {
-      "optional": false
-    }
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-runtime",
-        "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-slots",
-        "@deepseek-ai/dsh-client-locale"
-      ],
-      "platform": "web"
-    }
-  },
-  "packageManager": "pnpm@11.7.0"
-}
+{
+  "name": "dsh-console-sentinel",
+  "version": "1.0.0",
+  "description": "DSH console sentinel for Windows — one-click cleanup of taskbar windows and empty console shells. Graceful WM_CLOSE (= Alt+F4) per window or whole app, UAC-elevated close for admin apps, icon-grid and detail views, preview-before-execute, persistent whitelist, and hard protection for the DSH host and Fluent/MPI solvers.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/loyalchiiina/dsh-console-sentinel.git"
+  },
+  "homepage": "https://github.com/loyalchiiina/dsh-console-sentinel#readme",
+  "bugs": {
+    "url": "https://github.com/loyalchiiina/dsh-console-sentinel/issues"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "lib",
+    "lib/**/*.js",
+    "cordis.patch.yml",
+    "LICENSE",
+    "README.md",
+    "README.zh.md",
+    "README-zh.md",
+    "README.es.md",
+    "README.pt.md",
+    "README.hi.md",
+    "CHANGELOG.md",
+    "icon.svg",
+    "docs/screenshots/*.png",
+    "locale/*.json"
+  ],
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "console",
+    "window",
+    "taskbar",
+    "close-window",
+    "alt-f4",
+    "wm-close",
+    "uac",
+    "elevated",
+    "powershell",
+    "process-manager",
+    "windows"
+  ],
+  "peerDependencies": {
+    "@deepseek-ai/cordis": ">=4.0.2",
+    "@deepseek-ai/dsh-tools": ">=0.1.5-rc.2",
+    "@deepseek-ai/schemastery": ">=3.18.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": false
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": false
+    },
+    "@deepseek-ai/schemastery": {
+      "optional": false
+    }
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "packageManager": "pnpm@11.7.0"
+}