dsh-lark-bot 0.6.0 → 0.7.0

package/dist/cli.js

@@ -134,16 +134,29 @@ var init_dsh_runtime = __esm({
 // src/adapters/dsh/own-package.ts
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
-import { join as join2 } from "path";
+import { dirname, join as join2 } from "path";
 function ownPackageInfo() {
-  const root = fileURLToPath(new URL("../../..", import.meta.url));
-  let name = "dsh-lark-bot";
-  try {
-    const pkg = JSON.parse(readFileSync(join2(root, "package.json"), "utf8"));
-    if (typeof pkg.name === "string" && pkg.name) name = pkg.name;
-  } catch {
+  return findOwnPackageRoot(dirname(fileURLToPath(import.meta.url)));
+}
+function findOwnPackageRoot(startDir) {
+  let dir = startDir;
+  for (let depth = 0; depth < 8; depth += 1) {
+    const pkgPath = join2(dir, "package.json");
+    try {
+      const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+      if (typeof pkg.name === "string" && isOwnPackageName(pkg.name)) {
+        return { name: pkg.name, root: dir };
+      }
+    } catch {
+    }
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
   }
-  return { name, root };
+  return { name: "dsh-lark-bot", root: process.cwd() };
+}
+function isOwnPackageName(name) {
+  return name === "dsh-lark-bot" || name === "dsh-feishu-bot" || /^@[^/]+\/(dsh-lark-bot|dsh-feishu-bot)$/.test(name);
 }
 var init_own_package = __esm({
   "src/adapters/dsh/own-package.ts"() {
@@ -153,7 +166,8 @@ var init_own_package = __esm({
 
 // src/adapters/dsh/acp-runtime.ts
 import { spawn as spawn4 } from "child_process";
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync4, realpathSync as realpathSync2 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import { mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
 import { join as join4 } from "path";
 function acpProfileRoot(home, profile, env) {
@@ -224,7 +238,17 @@ function acpPluginInstalled(profileRoot) {
 }
 function isAcpProfileReady(profileRoot) {
   const own = ownPackageInfo();
-  return existsSync4(join4(profileRoot, "package.json")) && existsSync4(join4(profileRoot, "cordis.yml")) && existsSync4(join4(profileRoot, "cordis.patch.yml")) && acpPluginInstalled(profileRoot) && existsSync4(join4(profileRoot, "node_modules", own.name));
+  return existsSync4(join4(profileRoot, "package.json")) && existsSync4(join4(profileRoot, "cordis.yml")) && existsSync4(join4(profileRoot, "cordis.patch.yml")) && acpPluginInstalled(profileRoot) && ownPackageLinked2(profileRoot, own.name);
+}
+function ownPackageLinked2(profileRoot, ownName) {
+  const linkPath = join4(profileRoot, "node_modules", ownName);
+  try {
+    const real = realpathSync2(linkPath);
+    const pkg = JSON.parse(readFileSync3(join4(real, "package.json"), "utf8"));
+    return pkg.name === ownName && pkg.dsh?.bundle?.patch !== void 0;
+  } catch {
+    return false;
+  }
 }
 function runPnpmInstall2(profileRoot) {
   return new Promise((resolve5, reject) => {
@@ -633,8 +657,8 @@ var init_acp_adapter = __esm({
 });
 
 // src/cli.ts
-import { readFileSync as readFileSync2, realpathSync as realpathSync2 } from "fs";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { readFileSync as readFileSync4, realpathSync as realpathSync4 } from "fs";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { Command } from "commander";
 
 // src/cli/commands/doctor.ts
@@ -1235,7 +1259,8 @@ init_dsh_compat();
 init_dsh_runtime();
 init_own_package();
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync3, realpathSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { mkdir, writeFile } from "fs/promises";
 import { join as join3 } from "path";
 var SDK_SERVER_PACKAGE = "@deepseek-ai/dsh-sdk-jsonrpc-server";
@@ -1310,7 +1335,17 @@ function sdkServerInstalled(profileRoot) {
 }
 function isSdkProfileReady(profileRoot) {
   const own = ownPackageInfo();
-  return existsSync3(join3(profileRoot, "package.json")) && existsSync3(join3(profileRoot, "cordis.yml")) && existsSync3(join3(profileRoot, "cordis.patch.yml")) && sdkServerInstalled(profileRoot) && existsSync3(join3(profileRoot, "node_modules", own.name));
+  return existsSync3(join3(profileRoot, "package.json")) && existsSync3(join3(profileRoot, "cordis.yml")) && existsSync3(join3(profileRoot, "cordis.patch.yml")) && sdkServerInstalled(profileRoot) && ownPackageLinked(profileRoot, own.name);
+}
+function ownPackageLinked(profileRoot, ownName) {
+  const linkPath = join3(profileRoot, "node_modules", ownName);
+  try {
+    const real = realpathSync(linkPath);
+    const pkg = JSON.parse(readFileSync2(join3(real, "package.json"), "utf8"));
+    return pkg.name === ownName && pkg.dsh?.bundle?.patch !== void 0;
+  } catch {
+    return false;
+  }
 }
 function runPnpmInstall(profileRoot) {
   return new Promise((resolve5, reject) => {
@@ -1446,13 +1481,7 @@ function resolveAppPaths(root = defaultHome()) {
     archivesDir: (profile) => profilePath(profile, "archives"),
     workspacesFile: (profile) => profilePath(profile, "workspaces.json"),
     mediaDir: (profile) => profilePath(profile, "media"),
-    logsDir: (profile) => profilePath(profile, "logs"),
-    serviceDir: join5(root, "service"),
-    serviceEnvFile: join5(root, "service", "service.env"),
-    serviceMetadataFile: join5(root, "service", "service.json"),
-    serviceLogFile: (profile) => profilePath(profile, "logs", "bot.log"),
-    registryFile: join5(root, "registry", "processes.json"),
-    locksDir: join5(root, "registry", "locks")
+    logsDir: (profile) => profilePath(profile, "logs")
   };
 }
 
@@ -1612,14 +1641,14 @@ function loadRuntimeEnv(source = process.env) {
 // src/config/profile-store.ts
 import { readFile } from "fs/promises";
 import { mkdir as mkdir4 } from "fs/promises";
-import { dirname as dirname2 } from "path";
+import { dirname as dirname3 } from "path";
 
 // src/platform/atomic-write.ts
 import { randomBytes } from "crypto";
 import { mkdir as mkdir3, rename, writeFile as writeFile3 } from "fs/promises";
-import { dirname, join as join7 } from "path";
+import { dirname as dirname2, join as join7 } from "path";
 async function writeFileAtomic(target, data, options = {}) {
-  const directory = dirname(target);
+  const directory = dirname2(target);
   await mkdir3(directory, { recursive: true });
   const temporary = join7(directory, `.${randomBytes(8).toString("hex")}.tmp`);
   try {
@@ -1631,9 +1660,9 @@ async function writeFileAtomic(target, data, options = {}) {
   }
 }
 async function rmSilently(path) {
-  const { rm: rm4 } = await import("fs/promises");
+  const { rm: rm2 } = await import("fs/promises");
   try {
-    await rm4(path, { force: true });
+    await rm2(path, { force: true });
   } catch {
   }
 }
@@ -1725,7 +1754,7 @@ var ConfigStore = class {
   }
   async persist() {
     const data = this.getData();
-    await mkdir4(dirname2(this.path), { recursive: true });
+    await mkdir4(dirname3(this.path), { recursive: true });
     await writeFileAtomic(this.path, `${JSON.stringify(data, null, 2)}
 `, {
       mode: 384
@@ -1857,7 +1886,7 @@ var ActiveRuns = class {
 };
 
 // src/config/security.ts
-import { realpathSync } from "fs";
+import { realpathSync as realpathSync3 } from "fs";
 import { isIP } from "net";
 import { isAbsolute, relative, resolve as resolve3, sep } from "path";
 var REDACTED = "[redacted]";
@@ -1875,7 +1904,7 @@ function redactSecrets(text) {
 }
 function resolveReal(path) {
   try {
-    return realpathSync(path);
+    return realpathSync3(path);
   } catch {
     return resolve3(path);
   }
@@ -2959,7 +2988,7 @@ function errorMessage(error) {
 // src/config/dsh-config.ts
 import { mkdir as mkdir5, readFile as readFile3, rm, writeFile as writeFile4 } from "fs/promises";
 import { homedir as homedir5 } from "os";
-import { dirname as dirname3, join as join8 } from "path";
+import { dirname as dirname4, join as join8 } from "path";
 import { Document, parseDocument } from "yaml";
 init_dsh_runtime();
 var DEEPSEEK_NAMESPACE = "llm-deepseek";
@@ -3315,7 +3344,7 @@ var DshProviderManager = class {
       throw new Error(`\u975E\u6CD5\u51ED\u636E\u5F15\u7528\u540D\uFF1A${ref}\uFF08\u5E94\u4E3A POSIX \u73AF\u5883\u53D8\u91CF\u540D\uFF0C\u5982 OPENAI_API_KEY\uFF09`);
     }
     if (value.length === 0) throw new Error("\u51ED\u636E\u503C\u4E0D\u80FD\u4E3A\u7A7A");
-    await mkdir5(dirname3(this.credentialsFile), { recursive: true, mode: 448 });
+    await mkdir5(dirname4(this.credentialsFile), { recursive: true, mode: 448 });
     await withFileLock(this.credentialsFile, async () => {
       const text = await readOptional(this.credentialsFile);
       const root = parseYamlMap(text, this.credentialsFile);
@@ -3345,7 +3374,7 @@ var DshProviderManager = class {
     return removed;
   }
   async writeNamespace(ns, section) {
-    await mkdir5(dirname3(this.settingsFile), { recursive: true });
+    await mkdir5(dirname4(this.settingsFile), { recursive: true });
     await withFileLock(this.settingsFile, async () => {
       const text = await readOptional(this.settingsFile);
       const root = parseYamlMap(text, this.settingsFile);
@@ -5206,7 +5235,7 @@ async function safeRemove(path) {
 import { execFile as execFile2 } from "child_process";
 import { randomBytes as randomBytes4 } from "crypto";
 import { access as access2, copyFile, mkdir as mkdir8 } from "fs/promises";
-import { dirname as dirname4, join as join11 } from "path";
+import { dirname as dirname5, join as join11 } from "path";
 import { promisify as promisify2 } from "util";
 var execFileAsync2 = promisify2(execFile2);
 async function defaultRunGit2(args, cwd) {
@@ -5225,7 +5254,7 @@ async function exists2(path) {
   }
 }
 async function defaultCopyRulesFile(source, target) {
-  await mkdir8(dirname4(target), { recursive: true });
+  await mkdir8(dirname5(target), { recursive: true });
   await copyFile(source, target);
 }
 function slugify2(scope) {
@@ -5380,10 +5409,7 @@ async function ensureBotProfile(store, options) {
   }
   if (store.getProfile(profileName)) return true;
   if (!options.allowOnboarding) {
-    process.stderr.write(
-      "\u672A\u68C0\u6D4B\u5230\u98DE\u4E66 / Lark \u5E94\u7528\u51ED\u636E\u3002\u8BF7\u5148\u5728\u7EC8\u7AEF\u8FD0\u884C `dsh-lark-bot start` \u5B8C\u6210\u626B\u7801\u7ED1\u5B9A\u3002\n"
-    );
-    return false;
+    throw new Error("\u672A\u68C0\u6D4B\u5230\u98DE\u4E66 / Lark \u5E94\u7528\u51ED\u636E\uFF0C\u4E14\u672A\u5141\u8BB8\u626B\u7801\u7ED1\u5B9A\u3002");
   }
   try {
     const created = await onboardPersonalAgent();
@@ -5403,9 +5429,7 @@ async function ensureBotProfile(store, options) {
     return true;
   } catch (error) {
     log.fail("onboarding", error);
-    process.stderr.write("\u626B\u7801\u521B\u5EFA\u5E94\u7528\u5931\u8D25\uFF0C\u672A\u5199\u5165\u672C\u5730\u914D\u7F6E\u3002\n");
-    process.exitCode = 1;
-    return false;
+    throw new Error(`\u626B\u7801\u521B\u5EFA\u5E94\u7528\u5931\u8D25\uFF1A${errorMessage2(error)}`);
   }
 }
 function mergeStartEnv(options) {
@@ -5417,28 +5441,25 @@ function mergeStartEnv(options) {
     ...options.appSecret ? { DSH_LARK_APP_SECRET: options.appSecret } : {}
   };
 }
-async function runBot(options) {
-  const env = loadRuntimeEnv(mergeStartEnv(options));
+async function startBridgeEngine(options) {
+  const env = options.env;
   const paths = resolveAppPaths(env.home);
-  const profileName = options.profile ?? "default";
+  const profileName = options.profileName;
   const configStore = new ConfigStore(paths.configFile);
   await configStore.load();
   const ready = await ensureBotProfile(configStore, {
     env,
     profileName,
-    allowOnboarding: false
+    allowOnboarding: options.allowOnboarding
   });
   if (!ready) {
-    process.exitCode = 1;
-    return;
+    throw new Error("bot profile \u672A\u5C31\u7EEA\u3002");
   }
   const activeProfile = configStore.getProfile(profileName);
   if (!activeProfile) {
-    process.stderr.write("\u672C\u5730\u914D\u7F6E\u8BFB\u53D6\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u540E\u91CD\u8BD5\u3002\n");
-    process.exitCode = 1;
-    return;
+    throw new Error("\u672C\u5730\u914D\u7F6E\u8BFB\u53D6\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u540E\u91CD\u8BD5\u3002");
   }
-  const defaultWorkspace = options.workspace ?? activeProfile.workspaces.default ?? env.workspace ?? paths.profilePath(profileName, "workspace");
+  const defaultWorkspace = activeProfile.workspaces.default ?? env.workspace ?? paths.profilePath(profileName, "workspace");
   await mkdir9(defaultWorkspace, { recursive: true });
   const sessions = new SessionStore(paths.sessionsFile(profileName));
   const archiver = new SessionArchive(paths.archivesDir(profileName));
@@ -5454,19 +5475,10 @@ async function runBot(options) {
     roleStore.load(),
     scopeDirectory.load()
   ]);
-  let adapter;
-  try {
-    adapter = await buildAgentAdapter(env, {
-      stopGraceMs: activeProfile.preferences.stopGraceMs ?? env.stopGraceMs,
-      model: activeProfile.preferences.model
-    });
-  } catch (error) {
-    log.fail("adapter", error);
-    process.stderr.write(`agent adapter \u521D\u59CB\u5316\u5931\u8D25\uFF1A${errorMessage2(error)}
-`);
-    process.exitCode = 1;
-    return;
-  }
+  const adapter = options.adapter ?? await buildAgentAdapter(env, {
+    stopGraceMs: activeProfile.preferences.stopGraceMs ?? env.stopGraceMs,
+    model: activeProfile.preferences.model
+  });
   const activeRuns = new ActiveRuns();
   const runPolicies = new RunPolicyStore();
   const concurrencyStore = new ConcurrencyStore();
@@ -5582,7 +5594,8 @@ async function runBot(options) {
     accessDefaultDeny: env.accessDefaultDeny,
     eventFreshnessMs: env.eventFreshnessMs,
     allowedUsers: activeProfile.access.allowedUsers,
-    allowedChats: activeProfile.access.allowedChats
+    allowedChats: activeProfile.access.allowedChats,
+    ...options.createChannel ? { createChannel: options.createChannel } : {}
   };
   if (activeProfile.preferences.stopGraceMs !== void 0) {
     channelInput.stopGraceMs = activeProfile.preferences.stopGraceMs;
@@ -5592,24 +5605,54 @@ async function runBot(options) {
   larkChannel = bridge.channel;
   await notifyServer.start();
   process.env.DSH_LARK_NOTIFY_URL = notifyServer.url ?? "";
+  const startedAt = (/* @__PURE__ */ new Date()).toISOString();
   log.info("cli", "started", {
     profile: profileName,
     home: paths.root,
     tenant: activeProfile.tenant,
-    workspace: defaultWorkspace
+    workspace: defaultWorkspace,
+    mode: "engine"
+  });
+  let stopped = false;
+  return {
+    profile: profileName,
+    home: paths.root,
+    status: () => ({
+      state: stopped ? "stopped" : "running",
+      profile: profileName,
+      home: paths.root,
+      adapterId: adapter.id,
+      startedAt,
+      workspace: defaultWorkspace,
+      notifyUrl: notifyServer.url
+    }),
+    stop: async () => {
+      if (stopped) return;
+      stopped = true;
+      await notifyServer.stop();
+      await bridge.disconnect();
+      await adapter.dispose?.();
+      await Promise.all([
+        sessions.flush(),
+        workspaces.flush(),
+        roleStore.flush(),
+        scopeDirectory.flush()
+      ]);
+    }
+  };
+}
+async function runBot(options) {
+  const env = loadRuntimeEnv(mergeStartEnv(options));
+  const profileName = options.profile ?? "default";
+  const engine = await startBridgeEngine({
+    env,
+    profileName,
+    allowOnboarding: false
   });
   process.stdout.write(`dsh-lark-bot \u5DF2\u542F\u52A8\uFF0Cprofile=${profileName}
 `);
   await waitForShutdown();
-  await notifyServer.stop();
-  await bridge.disconnect();
-  await adapter.dispose?.();
-  await Promise.all([
-    sessions.flush(),
-    workspaces.flush(),
-    roleStore.flush(),
-    scopeDirectory.flush()
-  ]);
+  await engine.stop();
 }
 function errorMessage2(error) {
   return error instanceof Error ? error.message : String(error);
@@ -5626,917 +5669,88 @@ function waitForShutdown() {
   });
 }
 
-// src/service/manager.ts
-import { mkdir as mkdir14, readFile as readFile11 } from "fs/promises";
-import { dirname as dirname7 } from "path";
-
-// src/service/command.ts
-import { execFile as execFile3 } from "child_process";
-import { basename, dirname as dirname5, join as join12 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var runCommand = (command, args, options) => new Promise((resolve5) => {
-  execFile3(
-    command,
-    [...args],
-    {
-      env: options?.env,
-      maxBuffer: 16 * 1024 * 1024,
-      windowsHide: true
-    },
-    (error, stdout, stderr) => {
-      let code = 0;
-      if (error) {
-        const errorCode = error.code;
-        code = typeof errorCode === "number" ? errorCode : 1;
-      }
-      resolve5({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
-    }
-  );
-});
-function resolveCliJsPath(metaUrl = import.meta.url) {
-  const current = fileURLToPath2(metaUrl);
-  const name = basename(current);
-  if (name === "cli.js" || name === "cli.mjs" || name === "cli.cjs") return current;
-  return join12(dirname5(current), "..", "dist", "cli.js");
-}
-function slugify3(value) {
-  const slug = value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-  return slug || "default";
-}
-function serviceNameFor(profile) {
-  return profile === "default" ? "dsh-lark-bot" : `dsh-lark-bot-${slugify3(profile)}`;
-}
-function launchdLabelFor(profile) {
-  return profile === "default" ? "io.dsh-lark-bot" : `io.dsh-lark-bot.${slugify3(profile)}`;
-}
-
-// src/service/env-snapshot.ts
-import { readFile as readFile9 } from "fs/promises";
-var EXTRA_KEYS = ["PATH", "HOME", "DEEPSEEK_API_KEY", "DSH_HOME"];
-function snapshotServiceEnv(source = process.env) {
-  const env = {};
-  for (const [key, value] of Object.entries(source)) {
-    if (value === void 0) continue;
-    if (key.startsWith("DSH_LARK_") || EXTRA_KEYS.includes(key)) {
-      env[key] = value;
-    }
-  }
-  return env;
-}
-function formatEnvFile(env) {
-  const lines = [];
-  for (const [key, value] of Object.entries(env)) {
-    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
-      throw new Error(`invalid service env key: ${key}`);
-    }
-    if (/[\r\n]/.test(value)) {
-      throw new Error(`service env value for ${key} contains a newline`);
-    }
-    const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-    lines.push(`${key}="${escaped}"`);
-  }
-  return `${lines.join("\n")}
-`;
-}
-function parseEnvFile(text) {
-  const env = {};
-  for (const rawLine of text.split("\n")) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith("#") || line.startsWith(";")) continue;
-    const eq = line.indexOf("=");
-    if (eq <= 0) continue;
-    const key = line.slice(0, eq).trim();
-    let value = line.slice(eq + 1).trim();
-    if (value.length >= 2 && value.startsWith('"') && value.endsWith('"')) {
-      value = value.slice(1, -1).replace(/\\(.)/g, "$1");
-    } else if (value.length >= 2 && value.startsWith("'") && value.endsWith("'")) {
-      value = value.slice(1, -1);
-    }
-    env[key] = value;
-  }
-  return env;
-}
-async function writeServiceEnv(file, env) {
-  await writeFileAtomic(file, formatEnvFile(env), { mode: 384 });
-}
-async function readServiceEnv(file) {
-  try {
-    return parseEnvFile(await readFile9(file, "utf8"));
-  } catch (error) {
-    if (error.code === "ENOENT") return {};
-    throw error;
-  }
-}
-
-// src/service/linux-systemd.ts
-import { mkdir as mkdir10, stat as stat3 } from "fs/promises";
-import { homedir as homedir6 } from "os";
-import { join as join13 } from "path";
-function defaultSystemdUnitDir() {
-  return join13(homedir6(), ".config", "systemd", "user");
-}
-function quoteSystemdArg(arg) {
-  if (!/[\s"\\]/.test(arg)) return arg;
-  return `"${arg.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
-}
-function buildSystemdUnit(spec) {
-  const exec = [spec.nodePath, spec.cliJsPath, "run", "--profile", spec.profile].map(quoteSystemdArg).join(" ");
-  return [
-    "[Unit]",
-    "Description=dsh-lark-bot bridge service",
-    "After=network-online.target",
-    "Wants=network-online.target",
-    "",
-    "[Service]",
-    "Type=simple",
-    `EnvironmentFile=${quoteSystemdArg(spec.envFile)}`,
-    `ExecStart=${exec}`,
-    "Restart=always",
-    "RestartSec=5",
-    "KillMode=mixed",
-    "TimeoutStopSec=30",
-    `StandardOutput=append:${spec.logFile}`,
-    `StandardError=append:${spec.logFile}`,
-    "",
-    "[Install]",
-    "WantedBy=default.target",
-    ""
-  ].join("\n");
-}
-async function isSystemdUserAvailable(runner = runCommand) {
-  const result = await runner("systemctl", ["--user", "show-environment"]);
-  return result.code === 0;
-}
-async function fileExists(path) {
-  try {
-    return (await stat3(path)).isFile();
-  } catch {
-    return false;
-  }
-}
-function parseMainPid(value) {
-  const raw = value?.trim();
-  if (!raw || raw === "0" || raw === "4294967295") return void 0;
-  const pid = Number(raw);
-  return Number.isInteger(pid) && pid > 0 ? pid : void 0;
-}
-function parseNumber(value) {
-  const raw = value?.trim();
-  if (!raw) return void 0;
-  const parsed = Number(raw);
-  return Number.isInteger(parsed) ? parsed : void 0;
-}
-var SystemdServiceController = class {
-  platform = "linux-systemd";
-  run;
-  unitDir;
-  constructor(options = {}) {
-    this.run = options.runCommand ?? runCommand;
-    this.unitDir = options.userUnitDir ?? defaultSystemdUnitDir();
-  }
-  unitPath(spec) {
-    return join13(this.unitDir, `${spec.serviceName}.service`);
-  }
-  unitName(spec) {
-    return `${spec.serviceName}.service`;
-  }
-  async isActive(name) {
-    const result = await this.run("systemctl", ["--user", "is-active", name]);
-    return result.code === 0;
-  }
-  async installAndStart(spec) {
-    await mkdir10(this.unitDir, { recursive: true });
-    await writeFileAtomic(this.unitPath(spec), buildSystemdUnit(spec));
-    await this.run("systemctl", ["--user", "daemon-reload"]);
-    const name = this.unitName(spec);
-    if (await this.isActive(name)) {
-      await this.run("systemctl", ["--user", "restart", name]);
-    } else {
-      await this.run("systemctl", ["--user", "enable", "--now", name]);
-    }
-  }
-  async stop(spec) {
-    await this.run("systemctl", ["--user", "disable", "--now", this.unitName(spec)]);
-  }
-  async restart(spec) {
-    await this.run("systemctl", ["--user", "daemon-reload"]);
-    await this.run("systemctl", ["--user", "restart", this.unitName(spec)]);
-  }
-  async status(spec) {
-    const name = this.unitName(spec);
-    const unitFile = this.unitPath(spec);
-    const installed = await fileExists(unitFile);
-    let autostartEnabled = false;
-    if (installed) {
-      const enabled = await this.run("systemctl", ["--user", "is-enabled", name]);
-      autostartEnabled = enabled.code === 0 && enabled.stdout.trim() === "enabled";
-    }
-    const active = await this.run("systemctl", ["--user", "is-active", name]);
-    const isActive = active.code === 0;
-    let detail = active.stdout.trim() || (isActive ? "active" : "inactive");
-    let pid;
-    let restarts;
-    if (isActive || installed) {
-      const show = await this.run(
-        "systemctl",
-        ["--user", "show", name, "-p", "MainPID", "-p", "ActiveState", "-p", "NRestarts", "--value"]
-      );
-      const [activeState, mainPid, nRestarts] = show.stdout.trim().split("\n");
-      if (activeState?.trim()) detail = activeState.trim();
-      pid = parseMainPid(mainPid);
-      restarts = parseNumber(nRestarts);
-    }
-    let state;
-    if (!installed) {
-      state = "stopped";
-    } else if (detail === "failed") {
-      state = "error";
-    } else if (isActive || detail === "activating" || detail === "deactivating" || detail === "reloading") {
-      state = "running";
-    } else {
-      state = "stopped";
-    }
-    return {
-      name: spec.serviceName,
-      platform: this.platform,
-      installed,
-      autostartEnabled,
-      state,
-      pid,
-      detail,
-      restarts
-    };
-  }
-};
-
-// src/service/macos-launchd.ts
-import { mkdir as mkdir11, rm as rm2, stat as stat4 } from "fs/promises";
-import { homedir as homedir7 } from "os";
-import { join as join14 } from "path";
-function defaultLaunchAgentDir() {
-  return join14(homedir7(), "Library", "LaunchAgents");
-}
-function xmlEscape(value) {
-  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
-function buildLaunchdPlist(spec) {
-  const envLines = Object.entries(spec.env).filter(([, value]) => value !== void 0).map(
-    ([key, value]) => `    <key>${xmlEscape(key)}</key>
-    <string>${xmlEscape(value)}</string>`
-  ).join("\n");
-  return [
-    '<?xml version="1.0" encoding="UTF-8"?>',
-    '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">',
-    '<plist version="1.0">',
-    "<dict>",
-    "  <key>Label</key>",
-    `  <string>${xmlEscape(spec.label)}</string>`,
-    "  <key>ProgramArguments</key>",
-    "  <array>",
-    `    <string>${xmlEscape(spec.nodePath)}</string>`,
-    `    <string>${xmlEscape(spec.cliJsPath)}</string>`,
-    "    <string>run</string>",
-    "    <string>--profile</string>",
-    `    <string>${xmlEscape(spec.profile)}</string>`,
-    "  </array>",
-    "  <key>RunAtLoad</key>",
-    "  <true/>",
-    "  <key>KeepAlive</key>",
-    "  <true/>",
-    "  <key>EnvironmentVariables</key>",
-    "  <dict>",
-    envLines,
-    "  </dict>",
-    "  <key>StandardOutPath</key>",
-    `  <string>${xmlEscape(spec.logFile)}</string>`,
-    "  <key>StandardErrorPath</key>",
-    `  <string>${xmlEscape(spec.logFile)}</string>`,
-    "  <key>ProcessType</key>",
-    "  <string>Background</string>",
-    "</dict>",
-    "</plist>",
-    ""
-  ].join("\n");
-}
-async function fileExists2(path) {
-  try {
-    return (await stat4(path)).isFile();
-  } catch {
-    return false;
-  }
-}
-var LaunchdServiceController = class {
-  platform = "darwin-launchd";
-  run;
-  agentDir;
-  uid;
-  constructor(options = {}) {
-    this.run = options.runCommand ?? runCommand;
-    this.agentDir = options.launchAgentDir ?? defaultLaunchAgentDir();
-    this.uid = options.uid ?? process.getuid?.() ?? -1;
-  }
-  domain() {
-    return `gui/${this.uid}`;
-  }
-  plistPath(spec) {
-    return join14(this.agentDir, `${spec.label}.plist`);
-  }
-  serviceRef(spec) {
-    return `${this.domain()}/${spec.label}`;
-  }
-  async installAndStart(spec) {
-    await mkdir11(this.agentDir, { recursive: true });
-    await writeFileAtomic(this.plistPath(spec), buildLaunchdPlist(spec));
-    const bootstrap = await this.run("launchctl", ["bootstrap", this.domain(), this.plistPath(spec)]);
-    if (bootstrap.code !== 0) {
-      await this.run("launchctl", ["kickstart", "-k", this.serviceRef(spec)]);
-    }
-  }
-  async stop(spec) {
-    await this.run("launchctl", ["bootout", this.serviceRef(spec)]);
-    await rm2(this.plistPath(spec), { force: true });
-  }
-  async restart(spec) {
-    const kickstart = await this.run("launchctl", ["kickstart", "-k", this.serviceRef(spec)]);
-    if (kickstart.code !== 0) {
-      await this.installAndStart(spec);
-    }
-  }
-  async status(spec) {
-    const plistExists = await fileExists2(this.plistPath(spec));
-    const printed = await this.run("launchctl", ["print", this.serviceRef(spec)]);
-    const loaded = printed.code === 0;
-    let pid;
-    let state = "stopped";
-    let detail = loaded ? "loaded" : "not loaded";
-    if (loaded) {
-      const pidMatch = /pid = (\d+)/.exec(printed.stdout);
-      if (pidMatch?.[1]) pid = Number(pidMatch[1]);
-      if (/state = running/.test(printed.stdout)) {
-        state = "running";
-        detail = "running";
-      } else if (/state = exited|state = waiting/.test(printed.stdout)) {
-        state = "stopped";
-        detail = /state = exited/.test(printed.stdout) ? "exited" : "waiting";
-      }
-    }
-    return {
-      name: spec.serviceName,
-      platform: this.platform,
-      installed: plistExists,
-      autostartEnabled: loaded,
-      state,
-      pid,
-      detail,
-      restarts: void 0
-    };
-  }
-};
-
-// src/service/portable.ts
+// src/cli/commands/setup.ts
+init_dsh_runtime();
+init_own_package();
 import { spawn as spawn5 } from "child_process";
-import { mkdir as mkdir12, readFile as readFile10, rm as rm3, stat as stat5, writeFile as writeFile6 } from "fs/promises";
-import { homedir as homedir8 } from "os";
-import { join as join15 } from "path";
-function defaultAutostartDir() {
-  return join15(homedir8(), ".config", "autostart");
-}
-function quoteDesktopArg(arg) {
-  const escaped = arg.replace(/%/g, "%%").replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-  return /[\s"\\]/.test(arg) ? `"${escaped}"` : escaped;
-}
-function buildDesktopEntry(spec) {
-  const exec = [spec.nodePath, spec.cliJsPath, "supervise", "--profile", spec.profile].map(quoteDesktopArg).join(" ");
-  return [
-    "[Desktop Entry]",
-    "Type=Application",
-    `Name=${spec.serviceName}`,
-    "Comment=Keep dsh-lark-bot running in the background",
-    `Exec=${exec}`,
-    "Terminal=false",
-    "X-GNOME-Autostart-enabled=true",
-    "Hidden=false",
-    ""
-  ].join("\n");
-}
-function supervisorStatusFile(serviceDir, serviceName) {
-  return join15(serviceDir, `supervisor-${serviceName}.json`);
-}
-function isProcessAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (error) {
-    return error.code === "EPERM";
-  }
-}
-async function readSupervisorStatus(file) {
-  try {
-    return JSON.parse(await readFile10(file, "utf8"));
-  } catch {
-    return void 0;
-  }
-}
-function defaultSpawnDetached(nodePath, args) {
-  const child = spawn5(nodePath, [...args], {
-    detached: true,
-    stdio: "ignore",
-    env: process.env
-  });
-  child.unref();
-  return child;
-}
-var PortableServiceController = class {
-  platform = "linux-portable";
-  autostartDir;
-  serviceDir;
-  spawnDetached;
-  constructor(options = {}) {
-    this.autostartDir = options.autostartDir ?? defaultAutostartDir();
-    this.serviceDir = options.serviceDir ?? "";
-    this.spawnDetached = options.spawnDetached ?? defaultSpawnDetached;
-  }
-  desktopPath(spec) {
-    return join15(this.autostartDir, `${spec.serviceName}.desktop`);
-  }
-  statusFile(spec) {
-    return supervisorStatusFile(this.serviceDir, spec.serviceName);
-  }
-  async sendStopSignal(spec) {
-    const status = await readSupervisorStatus(this.statusFile(spec));
-    if (!status) return;
-    try {
-      process.kill(status.pid, "SIGTERM");
-    } catch {
-      return;
-    }
-    for (let attempt = 0; attempt < 20; attempt += 1) {
-      await new Promise((resolvePromise) => setTimeout(resolvePromise, 250));
-      if (!isProcessAlive(status.pid)) return;
-    }
-    try {
-      process.kill(status.pid, "SIGKILL");
-    } catch {
-    }
-  }
-  async installAndStart(spec) {
-    await this.sendStopSignal(spec);
-    await mkdir12(this.autostartDir, { recursive: true });
-    await writeFile6(this.desktopPath(spec), buildDesktopEntry(spec), { encoding: "utf8", mode: 420 });
-    if (!this.serviceDir) throw new Error("serviceDir is required for the portable supervisor");
-    await mkdir12(this.serviceDir, { recursive: true });
-    this.spawnDetached(spec.nodePath, [spec.cliJsPath, "supervise", "--profile", spec.profile]);
-  }
-  async stop(spec) {
-    await this.sendStopSignal(spec);
-    await rm3(this.desktopPath(spec), { force: true });
-  }
-  async restart(spec) {
-    await this.stop(spec);
-    await this.installAndStart(spec);
-  }
-  async status(spec) {
-    let desktopExists = false;
-    try {
-      desktopExists = (await stat5(this.desktopPath(spec))).isFile();
-    } catch {
-      desktopExists = false;
-    }
-    const status = await readSupervisorStatus(this.statusFile(spec));
-    const alive = status !== void 0 && isProcessAlive(status.pid);
-    return {
-      name: spec.serviceName,
-      platform: this.platform,
-      installed: desktopExists,
-      autostartEnabled: desktopExists,
-      state: alive ? "running" : "stopped",
-      pid: status?.childPid,
-      detail: alive ? `supervisor ${status?.pid ?? "?"}` : "stopped",
-      restarts: status?.restarts
-    };
-  }
-};
-
-// src/service/windows-task.ts
-import { mkdir as mkdir13, writeFile as writeFile7 } from "fs/promises";
-import { dirname as dirname6, join as join16 } from "path";
-function psQuote(value) {
-  return `'${value.replace(/'/g, "''")}'`;
-}
-function buildScheduledTaskScript(action, spec) {
-  const vars = [
-    `$taskName = ${psQuote(spec.serviceName)}`,
-    `$node = ${psQuote(spec.nodePath)}`,
-    `$cli = ${psQuote(spec.cliJsPath)}`,
-    `$log = ${psQuote(spec.logFile)}`,
-    `$profile = ${psQuote(spec.profile)}`,
-    `$workDir = ${psQuote(dirname6(spec.cliJsPath))}`
-  ].join("\n");
-  const install = [
-    `$inner = '"' + $node + '" "' + $cli + '" run --profile "' + $profile + '" >> "' + $log + '" 2>&1'`,
-    `$action = New-ScheduledTaskAction -Execute 'cmd.exe' -Argument ('/c ' + $inner) -WorkingDirectory $workDir`,
-    `$trigger = New-ScheduledTaskTrigger -AtLogOn`,
-    `$settings = New-ScheduledTaskSettingsSet -RestartCount 5 -RestartInterval (New-TimeSpan -Minutes 1) -ExecutionTimeLimit ([TimeSpan]::Zero) -MultipleInstances IgnoreNew -StartWhenAvailable -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries`,
-    `Unregister-ScheduledTask -TaskName $taskName -Confirm:$false -ErrorAction SilentlyContinue`,
-    `Register-ScheduledTask -TaskName $taskName -Action $action -Trigger $trigger -Settings $settings -Force`,
-    `Enable-ScheduledTask -TaskName $taskName`,
-    `Start-ScheduledTask -TaskName $taskName`
-  ].join("\n");
-  const stop = [
-    `Stop-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue`,
-    `Disable-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue`
-  ].join("\n");
-  const restart = [
-    `Stop-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue`,
-    `Start-ScheduledTask -TaskName $taskName`
-  ].join("\n");
-  const status = [
-    `$task = Get-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue`,
-    `if ($null -eq $task) { Write-Output 'STATE:missing'; Write-Output 'ENABLED:false'; exit 2 }`,
-    `$info = Get-ScheduledTaskInfo -TaskName $taskName`,
-    `Write-Output ('STATE:' + $task.State)`,
-    `Write-Output ('ENABLED:' + $task.Settings.Enabled)`,
-    `Write-Output ('LAST_RESULT:' + $info.LastTaskResult)`,
-    `Write-Output ('LAST_RUN:' + $info.LastRunTime)`
-  ].join("\n");
-  const body = {
-    install,
-    stop,
-    restart,
-    status
-  };
-  return [
-    `$ErrorActionPreference = 'Stop'`,
-    vars,
-    body[action],
-    ""
-  ].join("\n");
-}
-function parseTaskStatusOutput(output) {
-  const fields = /* @__PURE__ */ new Map();
-  for (const rawLine of output.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    const eq = line.indexOf(":");
-    if (eq <= 0) continue;
-    fields.set(line.slice(0, eq).trim(), line.slice(eq + 1).trim());
-  }
-  const stateValue = fields.get("STATE") ?? "missing";
-  const enabled = fields.get("ENABLED") === "True";
-  const installed = stateValue !== "missing";
-  let state = "unknown";
-  if (stateValue === "Running") state = "running";
-  else if (stateValue === "Ready" || stateValue === "Disabled") state = "stopped";
-  else if (stateValue === "Unknown") state = "unknown";
-  else if (stateValue === "missing") state = "stopped";
-  const lastResultRaw = fields.get("LAST_RESULT");
-  const lastResult = lastResultRaw !== void 0 ? Number.parseInt(lastResultRaw, 10) : void 0;
-  const lastResultValue = lastResult !== void 0 && Number.isFinite(lastResult) ? lastResult : void 0;
-  if (installed && lastResultValue !== void 0 && lastResultValue !== 0 && stateValue === "Ready") {
-    state = "error";
+import { mkdir as mkdir10, readFile as readFile9, writeFile as writeFile6 } from "fs/promises";
+import { homedir as homedir6 } from "os";
+import { join as join12 } from "path";
+async function runSetup(options = {}) {
+  const profile = options.profile ?? "dsh-lark";
+  const own = ownPackageInfo();
+  const packageSpec = options.packageSpec ?? process.env.DSH_LARK_SETUP_PACKAGE ?? own.name;
+  const dshHome = options.dshHome ?? resolveDshHome(homedir6(), process.env);
+  const bin = options.bin ?? discoverDshBin(homedir6(), process.env);
+  if (!bin) {
+    throw new Error(
+      "\u672A\u627E\u5230\u672C\u673A dsh \u5B89\u88C5\uFF08`@deepseek-ai/dsh`\uFF09\u3002\u8BF7\u5148\u5B89\u88C5 DeepSeek Harness\uFF0C\u518D\u8FD0\u884C\u672C\u547D\u4EE4\u3002"
+    );
   }
-  return {
-    installed,
-    autostartEnabled: enabled,
-    state,
-    detail: stateValue,
-    lastResult: lastResultValue
-  };
+  const profileDir = join12(dshHome, "profiles", profile);
+  await mkdir10(profileDir, { recursive: true });
+  await approveBuilds(profileDir);
+  process.stdout.write(
+    `\u6B63\u5728\u628A ${packageSpec} \u5B89\u88C5\u5230 dsh profile \`${profile}\`\uFF08$DSH_HOME=${dshHome}\uFF09...
+`
+  );
+  await runDshPlugin(bin, profile, packageSpec);
+  process.stdout.write(
+    [
+      "",
+      "\u2705 \u5B89\u88C5\u5B8C\u6210\u3002\u542F\u52A8\u65B9\u5F0F\uFF08\u552F\u4E00\u7684\u90E8\u7F72\u8DEF\u5F84\uFF09\uFF1A",
+      "",
+      `  dsh --profile ${profile}`,
+      "",
+      "\u9996\u6B21\u542F\u52A8\u4F1A\u5728\u7EC8\u7AEF\u6253\u5370\u4E8C\u7EF4\u7801\uFF0C\u7528\u98DE\u4E66 / Lark \u626B\u7801\u5B8C\u6210\u4E00\u6B21\u6027\u7ED1\u5B9A\uFF1B",
+      "\u7ED1\u5B9A\u540E dsh \u5373\u4EE5\u6807\u51C6\u63D2\u4EF6\u65B9\u5F0F\u52A0\u8F7D dsh-lark-bot \u7684\u6865\u63A5\u5F15\u64CE\u3002",
+      ""
+    ].join("\n")
+  );
 }
-var WindowsTaskServiceController = class {
-  platform = "win32-task";
-  run;
-  scriptDir;
-  constructor(options = {}) {
-    this.run = options.runCommand ?? runCommand;
-    this.scriptDir = options.scriptDir ?? "";
-  }
-  scriptPath(spec, action) {
-    return join16(this.scriptDir, `${action}-${spec.serviceName}.ps1`);
-  }
-  async runScript(spec, action) {
-    const script = this.scriptPath(spec, action);
-    if (this.scriptDir) await mkdir13(this.scriptDir, { recursive: true });
-    await writeFile7(script, buildScheduledTaskScript(action, spec), { encoding: "utf8" });
-    const result = await this.run("powershell.exe", [
-      "-NoProfile",
-      "-NonInteractive",
-      "-ExecutionPolicy",
-      "Bypass",
-      "-File",
-      script
-    ]);
-    return { result, script };
-  }
-  async installAndStart(spec) {
-    const { result } = await this.runScript(spec, "install");
-    if (result.code !== 0) {
-      throw new Error(
-        `\u65E0\u6CD5\u6CE8\u518C Windows \u8BA1\u5212\u4EFB\u52A1\uFF08exit ${result.code}\uFF09\uFF1A${result.stderr.trim() || result.stdout.trim() || "\u672A\u77E5\u9519\u8BEF"}`
-      );
-    }
-  }
-  async stop(spec) {
-    const { result } = await this.runScript(spec, "stop");
-    if (result.code !== 0) {
-      throw new Error(
-        `\u65E0\u6CD5\u505C\u6B62 Windows \u8BA1\u5212\u4EFB\u52A1\uFF08exit ${result.code}\uFF09\uFF1A${result.stderr.trim() || result.stdout.trim() || "\u672A\u77E5\u9519\u8BEF"}`
-      );
-    }
-  }
-  async restart(spec) {
-    const { result } = await this.runScript(spec, "restart");
-    if (result.code !== 0) {
-      throw new Error(
-        `\u65E0\u6CD5\u91CD\u542F Windows \u8BA1\u5212\u4EFB\u52A1\uFF08exit ${result.code}\uFF09\uFF1A${result.stderr.trim() || result.stdout.trim() || "\u672A\u77E5\u9519\u8BEF"}`
-      );
-    }
-  }
-  async status(spec) {
-    const { result } = await this.runScript(spec, "status");
-    const parsed = parseTaskStatusOutput(result.stdout);
-    if (result.code !== 0 && result.code !== 2) {
-      throw new Error(
-        `\u65E0\u6CD5\u67E5\u8BE2 Windows \u8BA1\u5212\u4EFB\u52A1\uFF08exit ${result.code}\uFF09\uFF1A${result.stderr.trim() || result.stdout.trim() || "\u672A\u77E5\u9519\u8BEF"}`
-      );
-    }
-    return {
-      name: spec.serviceName,
-      platform: this.platform,
-      installed: parsed.installed,
-      autostartEnabled: parsed.autostartEnabled,
-      state: parsed.state,
-      pid: void 0,
-      detail: parsed.detail,
-      restarts: void 0
-    };
-  }
-};
-
-// src/service/manager.ts
-var ServiceManager = class {
-  profile;
-  sourceEnv;
-  paths;
-  version;
-  controllerOverride;
-  constructor(deps = {}) {
-    this.profile = deps.profile ?? "default";
-    this.sourceEnv = deps.env ?? process.env;
-    this.paths = deps.paths ?? resolveAppPaths();
-    this.version = deps.version ?? "0.0.0";
-    this.controllerOverride = deps.controller;
-  }
-  buildSpec() {
-    const serviceName = serviceNameFor(this.profile);
-    return {
-      serviceName,
-      label: launchdLabelFor(this.profile),
-      profile: this.profile,
-      nodePath: process.execPath,
-      cliJsPath: resolveCliJsPath(),
-      envFile: this.paths.serviceEnvFile,
-      logFile: this.paths.serviceLogFile(this.profile),
-      env: snapshotServiceEnv(this.sourceEnv)
-    };
-  }
-  async resolveController() {
-    if (this.controllerOverride) return this.controllerOverride;
-    if (process.platform === "darwin") return new LaunchdServiceController();
-    if (process.platform === "win32") return new WindowsTaskServiceController({
-      scriptDir: this.paths.serviceDir
+function runDshPlugin(bin, profile, packageSpec) {
+  return new Promise((resolve5, reject) => {
+    const child = spawn5(
+      "node",
+      [bin, "plugin", "--profile", profile, "add", packageSpec],
+      { stdio: "inherit" }
+    );
+    child.once("error", reject);
+    child.once("exit", (code) => {
+      if (code === 0) resolve5();
+      else reject(new Error(`dsh plugin add exited with code ${String(code)}`));
     });
-    const systemd = new SystemdServiceController();
-    if (await isSystemdUserAvailable()) return systemd;
-    return new PortableServiceController({ serviceDir: this.paths.serviceDir });
-  }
-  async saveMetadata(platform) {
-    const metadata = {
-      schemaVersion: 1,
-      serviceName: this.buildSpec().serviceName,
-      profile: this.profile,
-      platform,
-      version: this.version,
-      installedAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    await writeFileAtomic(this.paths.serviceMetadataFile, `${JSON.stringify(metadata, null, 2)}
-`);
-  }
-  async readMetadata() {
-    try {
-      return JSON.parse(await readFile11(this.paths.serviceMetadataFile, "utf8"));
-    } catch {
-      return void 0;
-    }
-  }
-  async prepareFiles(spec) {
-    await mkdir14(dirname7(spec.logFile), { recursive: true });
-    await mkdir14(dirname7(spec.envFile), { recursive: true });
-    await writeServiceEnv(spec.envFile, spec.env);
-  }
-  async start() {
-    const controller = await this.resolveController();
-    const spec = this.buildSpec();
-    await this.prepareFiles(spec);
-    await controller.installAndStart(spec);
-    await this.saveMetadata(controller.platform);
-    return controller.status(spec);
-  }
-  async stop() {
-    const controller = await this.resolveController();
-    const spec = this.buildSpec();
-    await controller.stop(spec);
-    return controller.status(spec);
-  }
-  async restart() {
-    const controller = await this.resolveController();
-    const spec = this.buildSpec();
-    const before = await controller.status(spec);
-    if (!before.installed) {
-      throw new Error("\u540E\u53F0\u670D\u52A1\u5C1A\u672A\u5B89\u88C5\uFF0C\u8BF7\u5148\u8FD0\u884C dsh-lark-bot start");
-    }
-    await this.prepareFiles(spec);
-    await controller.restart(spec);
-    await this.saveMetadata(controller.platform);
-    return controller.status(spec);
-  }
-  async status() {
-    const controller = await this.resolveController();
-    const spec = this.buildSpec();
-    return controller.status(spec);
-  }
-};
-
-// src/cli/commands/service.ts
-function mergeStartEnv2(options) {
-  return {
-    ...process.env,
-    ...options.workspace ? { DSH_LARK_WORKSPACE: options.workspace } : {},
-    ...options.tenant ? { DSH_LARK_TENANT: options.tenant } : {},
-    ...options.appId ? { DSH_LARK_APP_ID: options.appId } : {},
-    ...options.appSecret ? { DSH_LARK_APP_SECRET: options.appSecret } : {}
-  };
-}
-function createManager(options, version) {
-  const env = loadRuntimeEnv(mergeStartEnv2(options));
-  const paths = resolveAppPaths(env.home);
-  return new ServiceManager({
-    profile: options.profile ?? "default",
-    env: mergeStartEnv2(options),
-    paths,
-    version
   });
 }
-function printServiceStatus(status, output) {
-  const lines = [
-    "dsh-lark-bot \u670D\u52A1\u72B6\u6001",
-    `  name:      ${status.name}`,
-    `  platform:  ${status.platform}`,
-    `  installed: ${status.installed ? "\u662F" : "\u5426"}`,
-    `  autostart: ${status.autostartEnabled ? "\u5DF2\u542F\u7528\uFF08\u5F00\u673A\u81EA\u542F\uFF09" : "\u672A\u542F\u7528"}`,
-    `  state:     ${status.state}`,
-    `  detail:    ${status.detail}`,
-    `  pid:       ${status.pid ?? "-"}`,
-    `  restarts:  ${status.restarts ?? "-"}`
-  ];
-  output(`${lines.join("\n")}
-`);
-}
-async function runServiceStart(options, deps = {}) {
-  const version = deps.version ?? "0.0.0";
-  const output = deps.output ?? ((text) => process.stdout.write(text));
-  if (!deps.manager) {
-    const env = loadRuntimeEnv(mergeStartEnv2(options));
-    const paths = resolveAppPaths(env.home);
-    const profileName = options.profile ?? "default";
-    const store = new ConfigStore(paths.configFile);
-    await store.load();
-    const ready = await ensureBotProfile(store, {
-      env,
-      profileName,
-      allowOnboarding: true
-    });
-    if (!ready) {
-      process.exitCode = 1;
-      return;
-    }
-  }
-  const manager = deps.manager ?? createManager(options, version);
-  try {
-    const status = await manager.start();
-    printServiceStatus(status, output);
-    if (status.state !== "running") process.exitCode = 1;
-  } catch (error) {
-    output(`${error instanceof Error ? error.message : String(error)}
-`);
-    process.exitCode = 1;
-  }
-}
-async function runServiceCommand(action, options, deps = {}) {
-  const output = deps.output ?? ((text) => process.stdout.write(text));
-  const manager = deps.manager ?? createManager(options, deps.version ?? "0.0.0");
+async function approveBuilds(profileDir) {
+  const workspaceFile = join12(profileDir, "pnpm-workspace.yaml");
+  let existing = "";
   try {
-    let status;
-    if (action === "status") {
-      status = await manager.status();
-    } else if (action === "restart") {
-      status = await manager.restart();
-    } else {
-      status = await manager.stop();
-    }
-    printServiceStatus(status, output);
-    if (action === "status") {
-      if (status.state !== "running") process.exitCode = 1;
-    } else if (action === "restart") {
-      if (status.state !== "running") process.exitCode = 1;
-    } else if (status.state === "running") {
-      process.exitCode = 1;
-    }
-  } catch (error) {
-    output(`${error instanceof Error ? error.message : String(error)}
-`);
-    process.exitCode = 1;
+    existing = await readFile9(workspaceFile, "utf8");
+  } catch {
   }
-}
+  const allowBuilds = [
+    "protobufjs: true",
+    ...ownPackageInfo().name.startsWith("@") ? [] : [`${ownPackageInfo().name}: true`]
+  ].join("\n");
+  if (!existing.includes("allowBuilds")) {
+    existing = existing.trimEnd() ? `${existing.trimEnd()}
 
-// src/cli/commands/supervise.ts
-import { spawn as spawn6 } from "child_process";
-import { closeSync, mkdirSync, openSync } from "fs";
-import { dirname as dirname8 } from "path";
-var BASE_BACKOFF_MS = 5e3;
-var MAX_BACKOFF_MS = 3e4;
-function computeBackoffMs(restarts) {
-  return Math.min(MAX_BACKOFF_MS, BASE_BACKOFF_MS * 2 ** Math.min(restarts, 3));
-}
-function waitForExit(child) {
-  return new Promise((resolvePromise) => {
-    const done = () => resolvePromise();
-    child.once("exit", done);
-    child.once("error", done);
-  });
-}
-function sleep2(ms) {
-  return new Promise((resolvePromise) => setTimeout(resolvePromise, ms));
-}
-async function runSupervise(options) {
-  const env = loadRuntimeEnv(process.env);
-  const paths = resolveAppPaths(env.home);
-  const profile = options.profile ?? "default";
-  const serviceName = serviceNameFor(profile);
-  const statusFile = supervisorStatusFile(paths.serviceDir, serviceName);
-  const logFile = paths.serviceLogFile(profile);
-  const serviceEnv = await readServiceEnv(paths.serviceEnvFile);
-  const childEnv = { ...process.env, ...serviceEnv };
-  const cliJsPath = resolveCliJsPath();
-  mkdirSync(dirname8(statusFile), { recursive: true });
-  mkdirSync(dirname8(logFile), { recursive: true });
-  const logFd = openSync(logFile, "a");
-  const writeStatus = async (state, childPid, restarts2) => {
-    const status = {
-      pid: process.pid,
-      childPid,
-      state,
-      startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      restarts: restarts2,
-      profile
-    };
-    await writeFileAtomic(statusFile, `${JSON.stringify(status)}
+allowBuilds:
+  ${allowBuilds}
+` : `allowBuilds:
+  ${allowBuilds}
+`;
+  } else if (!existing.includes("protobufjs: true")) {
+    existing = existing.replace(/(allowBuilds:\s*\n)/, `$1  ${allowBuilds}
 `);
-  };
-  let stopping = false;
-  let child;
-  const stop = () => {
-    stopping = true;
-    child?.kill("SIGTERM");
-  };
-  process.once("SIGTERM", stop);
-  process.once("SIGINT", stop);
-  let restarts = 0;
-  try {
-    while (!stopping) {
-      await writeStatus("running", void 0, restarts);
-      const spawned = spawn6(process.execPath, [cliJsPath, "run", "--profile", profile], {
-        env: childEnv,
-        stdio: ["ignore", logFd, logFd]
-      });
-      child = spawned;
-      await writeStatus("running", spawned.pid, restarts);
-      await waitForExit(spawned);
-      child = void 0;
-      if (stopping) break;
-      restarts += 1;
-      await writeStatus("restarting", void 0, restarts);
-      const backoff = computeBackoffMs(restarts);
-      await sleep2(backoff);
-    }
-  } finally {
-    await writeStatus("stopped", void 0, restarts);
-    closeSync(logFd);
   }
+  await writeFile6(workspaceFile, existing, "utf8");
 }
 
 // src/cli.ts
 function packageVersion() {
-  const raw = readFileSync2(new URL("../package.json", import.meta.url), "utf8");
+  const raw = readFileSync4(new URL("../package.json", import.meta.url), "utf8");
   const pkg = JSON.parse(raw);
   return typeof pkg.version === "string" ? pkg.version : "0.0.0";
 }
@@ -6546,39 +5760,19 @@ function addBotOptions(command) {
 function buildProgram() {
   const program = new Command();
   program.name("dsh-lark-bot").description("Bridge DeepSeek Harness into Feishu / Lark").version(packageVersion(), "-v, --version");
-  addBotOptions(
-    program.command("start").description("Install and start the background service (autostart + auto-restart)")
-  ).action(async (opts) => {
-    await runServiceStart(opts, { version: packageVersion() });
+  program.command("setup").description(
+    "Install this package as a standard dsh profile bundle (single install path)"
+  ).option("--profile <name>", "dsh profile to install into (default: dsh-lark)").action(async (opts) => {
+    await runSetup({ ...opts.profile ? { profile: opts.profile } : {} });
   });
-  addBotOptions(program.command("status").description("Show background service status")).action(
-    async (opts) => {
-      await runServiceCommand("status", opts, { version: packageVersion() });
-    }
-  );
-  addBotOptions(program.command("restart").description("Restart the background service")).action(
-    async (opts) => {
-      await runServiceCommand("restart", opts, { version: packageVersion() });
-    }
-  );
-  addBotOptions(program.command("stop").description("Stop the background service and remove autostart")).action(
-    async (opts) => {
-      await runServiceCommand("stop", opts, { version: packageVersion() });
-    }
-  );
   program.command("doctor").description("Run local diagnostics").option("--profile <name>", "profile name").option("--workspace <path>", "initial working directory").option("--app-id <id>", "existing Lark/Feishu app id").option("--app-secret <secret>", "existing Lark/Feishu app secret").option("--tenant <tenant>", "feishu or lark").action(async (opts) => {
     await runDoctor({ ...opts, version: packageVersion() });
   });
   addBotOptions(
-    program.command("run", { hidden: true }).description("Run the bridge process (managed by the background service; not for interactive use)")
+    program.command("run", { hidden: true }).description("Run the bridge engine directly (diagnostics; the dsh plugin runs it in-process)")
   ).action(async (opts) => {
     await runBot(opts);
   });
-  addBotOptions(
-    program.command("supervise", { hidden: true }).description("Supervisor loop for the portable background service; not for interactive use")
-  ).action(async (opts) => {
-    await runSupervise(opts);
-  });
   return program;
 }
 async function main(argv = process.argv) {
@@ -6587,7 +5781,7 @@ async function main(argv = process.argv) {
 function isDirectInvocation(entry = process.argv[1], metaUrl = import.meta.url) {
   if (!entry) return false;
   try {
-    return realpathSync2(entry) === fileURLToPath3(metaUrl);
+    return realpathSync4(entry) === fileURLToPath2(metaUrl);
   } catch {
     return false;
   }