dsh-vscode-mode 0.12.0 → 0.13.1

package/src/httpGuard.ts

@@ -0,0 +1,101 @@
+/** HTTP admission and bounded RPC decoding. @author ddj 2026年09月28号 */
+import type { IncomingMessage, ServerResponse } from 'node:http'
+import { BINARY_READ_CAP, READ_CAP } from './store.js'
+import type { Ctx } from './store.js'
+
+/** Text JSON can expand each byte into a six-character escape; binary uses base64. */
+export const RPC_BODY_CAP = Math.max(READ_CAP * 6, Math.ceil(BINARY_READ_CAP / 3) * 4) + 64 * 1024
+export interface RpcInput { method: string; args: Record<string, unknown> }
+type InputResult = { input: RpcInput } | { status: number; error: string }
+
+/**
+ * Send a JSON response without allowing credential-dependent results to be cached.
+ * @author ddj 2026年09月28号
+ * @param res HTTP response.
+ * @param status HTTP status code.
+ * @param value JSON payload.
+ */
+export function replyJson(res: ServerResponse, status: number, value: unknown): void {
+  res.statusCode = status
+  res.setHeader('content-type', 'application/json; charset=utf-8')
+  res.setHeader('cache-control', 'no-store')
+  res.end(JSON.stringify(value))
+}
+
+/**
+ * Admit a request through the Host connection fence before inspecting its body.
+ * @author ddj 2026年09月28号
+ * @param ctx Host context; connection is an optional capability on older hosts.
+ * @param req Original Node request, including authentication headers.
+ * @param res Response receiving a refusal when unavailable or unauthorized.
+ * @param methods Allowed HTTP methods for this route.
+ * @returns Whether the request may proceed.
+ */
+export function admitRoute(ctx: Ctx, req: IncomingMessage, res: ServerResponse, methods: string[]): boolean {
+  let rejection: number | undefined = 503
+  try {
+    const connection = ctx.get('connection')
+    if (typeof connection?.requestRejection === 'function') rejection = connection.requestRejection(req)
+  } catch { /* A missing or failed authentication service must not admit the request. */ }
+  if (rejection !== undefined) {
+    const status = rejection === 401 || rejection === 403 ? rejection : 503
+    replyJson(res, status, { ok: false, error: status === 503 ? 'Host authentication service unavailable' : 'Host authentication rejected this request' })
+    return false
+  }
+  if (!methods.includes(req.method ?? '')) {
+    res.setHeader('allow', methods.join(', '))
+    replyJson(res, 405, { ok: false, error: 'Method not allowed' })
+    return false
+  }
+  return true
+}
+
+/**
+ * Decode the RPC envelope without coercing scalar or array arguments into objects.
+ * @author ddj 2026年09月28号
+ * @param text Bounded UTF-8 JSON document.
+ * @returns Valid envelope or an HTTP 400 diagnostic.
+ */
+function parseRpc(text: string): InputResult {
+  try {
+    const value: unknown = JSON.parse(text)
+    if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error('Invalid envelope')
+    const { method, args = {} } = value as { method?: unknown; args?: unknown }
+    if (typeof method !== 'string' || !/^[\w]+(?:\.[\w]+)*$/.test(method)) throw new Error('Invalid method')
+    if (!args || typeof args !== 'object' || Array.isArray(args)) throw new Error('Invalid arguments')
+    return { input: { method, args: args as Record<string, unknown> } }
+  } catch {
+    return { status: 400, error: 'Expected a JSON RPC object with method and object arguments' }
+  }
+}
+
+/**
+ * Read a bounded JSON body; reject headers and streamed overruns before RPC dispatch.
+ * @author ddj 2026年09月28号
+ * @param req Authenticated HTTP request.
+ * @param cap Maximum encoded bytes, including JSON escaping and base64 overhead.
+ * @returns Parsed input or an HTTP validation error.
+ */
+export async function readRpc(req: IncomingMessage, cap = RPC_BODY_CAP): Promise<InputResult> {
+  if (!/^application\/json(?:\s*;|\s*$)/i.test(req.headers['content-type'] ?? '')) {
+    req.resume()
+    return { status: 415, error: 'Content-Type must be application/json' }
+  }
+  const length = req.headers['content-length']
+  if (length !== undefined && (!/^\d+$/.test(length) || Number(length) > cap)) {
+    req.resume()
+    return { status: 413, error: 'RPC request exceeds the supported file size' }
+  }
+  const chunks: Uint8Array[] = []
+  let bytes = 0
+  for await (const chunk of req.iterator({ destroyOnReturn: false })) {
+    const data = typeof chunk === 'string' ? Buffer.from(chunk) : chunk as Uint8Array
+    bytes += data.byteLength
+    if (bytes > cap) {
+      req.resume()
+      return { status: 413, error: 'RPC request exceeds the supported file size' }
+    }
+    chunks.push(data)
+  }
+  return parseRpc(Buffer.concat(chunks, bytes).toString('utf8'))
+}

package/src/index.ts

@@ -1,23 +1,18 @@
-/**
- * @dsh-external 生态 → dsh-vscode-mode：DSH 上的类 VSCode 编码体验（Host 半入口）。
- * 职责：装配 capture（tools/result 捕获 edit/write 差异）、RPC 分发（edrv.* / mcp.* / vscode.* / compat）、
- *       webServer 路由（/edrv/rpc、/edrv/assets/*、/edrv/vendor/*）、工作区旁车持久化、
- *       兼容层装配（依赖守卫 + 重复装配自诊断 + 启动日志兼容性报告）。
- * 结构：shared/（双面契约） + model/store/capture/workspace/revert/registry/rpc/routes/compat（host 模块）
- *       + log/debugLog（统一日志：bindHostLog 绑定 ctx.logger，edrv.debug 诊断文件通道）。
- * 作者 ddj 2026-08-20
- */
+/** dsh-vscode-mode Host composition. @author ddj 2026年09月28号 */
 import { registerRoutes } from './routes.js'
 import { captureToolResult } from './capture.js'
 import { handleRpc } from './rpc.js'
 import { newSearcher } from './search/orchestrator.js'
 import { newContentSearcher } from './search/content.js'
 import { installIsolation } from './mcpIsolation.js'
+import { installMcpRuntime } from './mcpRuntime.js'
 import { cwdOf } from './registry.js'
 import { setupOpenSettings, buildSettingsSchema } from './fileOpenSettings.js'
 import type { SettingsDeps } from './fileOpenSettings.js'
 import z from '@deepseek-ai/schemastery'
 import { shellMenuLifecycle } from './integrate.js'
+import { startOpenInbox } from './openInbox.js'
+import { installPlanTool } from './svnPlanTool.js'
 import { disposeIndex } from './treeIndex.js'
 import { sweepTreeCache } from './paths.js'
 import { buildReport } from './compat.js'
@@ -31,125 +26,139 @@ import { createSvnRpc } from './svn.js'
 import { createDapRpc } from './dap/rpc.js'
 import { installRulesSection } from './rules.js'
 import { installSkillGroup } from './skills.js'
-import type { RpcHandlerMap } from './shared/rpc.js'
+import type { RpcHandlerMap, RpcMethod, RpcRequestMap } from './shared/rpc.js'
 import type { Registry } from './registry.js'
 import type { Ctx } from './store.js'
 
-export const name = "dsh-vscode-mode"
+export const name = 'dsh-vscode-mode'
 export const inject = ['sessions', 'fs', 'webServer', 'loader', 'tools', 'workspaceRegistry', 'agents']
-
-/**
- * 插件 Config schema（cordis 从 module 导出读 `plugin.Config` 做启动校验；
- * DSH 0.1.7 起设置页按此 schema 自动生成表单，设置值 = profile 插件配置）。
- * 字段集与 installOpenSettingsSection 的 section schema 同源（buildSettingsSchema），
- * 全字段带默认值——undefined/空配置经 schemastery 校验自动填充（rc/alpha 两代
- * cordis 均读该导出，实测 4.0.0-rc.8 与 0.1.7 行为一致，校验必过）。
- * volatile: true —— 0.1.7 的 SettingsForms.describe 只下发含 volatile 字段的 entry
- * （volatileForm 门槛），漏标则 ns 不出现 → client configForms 恒 unavailable →
- * 设置页「设置服务暂不可用」；同时 volatile 字段由 Loader 就地提交免重载。
- * 运行时解析：@deepseek-ai/schemastery 经插件自身 dependencies（link/dev/npm 安装
- * 三形态一致，钉 ~3.18.4 —— 3.18.1 起才有 .volatile()，低版本经 markVolatile 守卫降级）。
- * @author ddj 2026年09月22号（2026年09月23号 增补 volatile 标记）
- */
+/** Shared settings schema; volatile fields remain live across supported Host generations. */
 export const Config = buildSettingsSchema(z as unknown as SettingsDeps['z'], { volatile: true })
+type Runtime = ReturnType<typeof createRuntime>
 
+// #region Owned services
 /**
- * 装配插件：挂事件监听、注册路由、安装兼容层。
- * @author ddj 2026年08月20号
- * @param ctx DSH 上下文（sessions/fs/webServer 由 inject 提供；sandboxPolicy/subprocess 惰性获取）
- * @param config 插件配置（可选 imageDir 覆盖图标目录）
+ * Create the managers shared by RPC routes, tools and lifecycle callbacks.
+ * @author ddj 2026年09月28号
+ * @param ctx Host context.
+ * @param config Plugin configuration.
+ * @returns One owned set of managers for this plugin instance.
  */
-export function apply(ctx: Ctx, config?: unknown): void {
-  // 统一日志出口：全部 host 日志经 ctx.logger（缺失时回退 console），此后任何模块 log.* 即生效
-  bindHostLog(ctx)
+function createRuntime(ctx: Ctx, config: unknown) {
   const registry: Registry = new Map()
   const searcher = newSearcher(ctx)
   const contentSearcher = newContentSearcher(ctx)
-  /** LSP 服务器管理器（语言智能：跳转/引用/大纲；诊断行带模块内前缀如 [lsp-manager]）。 */
+  const settings = setupOpenSettings(ctx, config, () => {})
   const lspManager = createLspManager((line) => log.debug(line))
-  /** 兼容性警告收集（route 护栏等写入，启动日志一并输出）。 */
-  const warnings: string[] = []
-  /** 设置状态（fileOpenTool + AI 补全配置读写；settings 不可用时内存态降级）。 */
-  const openSettings = setupOpenSettings(ctx, config, () => {})
-  /** LSP 配置为配置值模式：插件组合配置 + 会话内运行时覆盖（原 settings section 命名空间不合法，见 lsp/config.ts）。 */
-  /** 规则注入 section（~/.dsh/rules 与 <工作区>/.dsh/rules；旧版 DSH 无 systemPrompt 时静默降级）。 */
-  const rulesInstalled = installRulesSection(ctx)
-  if (!rulesInstalled) log.warn('未检测到 systemPrompt 服务，规则仅可管理不注入')
-  /** 插件自带技能组（<包根>/skills，惰性获取 skills 服务；返回值仅表示"已调度"，实际结果见 skillGroupState）。 */
-  const skillsDispatched = installSkillGroup(ctx)
-  if (!skillsDispatched) log.warn('技能组未调度，插件技能组不可用')
-  /** LSP RPC 与会话清理（一次性创建，tracker 状态跨请求保留）。 */
   const lspRpc = createLspRpc({ ctx, pluginConfig: config, manager: lspManager })
-  const lspHandlers: Partial<RpcHandlerMap> = lspRpc.handlers
-  /** AI 内联补全 RPC（settings 状态桥接 + llm 惰性获取）。 */
-  const aiRpc = createAiRpc({ ctx, settings: openSettings })
-  const aiHandlers: Partial<RpcHandlerMap> = aiRpc.handlers
-  /** SVN RPC（检测/更新/Tortoise 发射；settings 提供 svnPath/tortoisePath）。 */
-  const svnRpc = createSvnRpc({ ctx, settings: openSettings })
-  const svnHandlers: Partial<RpcHandlerMap> = svnRpc.handlers as Partial<RpcHandlerMap>
-  /** 调试 RPC（DAP 桥单例：spawn 扩展适配器 + 事件缓冲 + findFile 反向匹配）。 */
+  const aiRpc = createAiRpc({ ctx, settings })
+  const svnRpc = createSvnRpc({ ctx, settings })
   const dapRpc = createDapRpc(ctx)
-  const dapHandlers: Partial<RpcHandlerMap> = dapRpc.handlers
-  /** 文件磁盘新鲜度观察器（客户端轮询 edrv.versions；变化时顺带失效目录树缓存）。 */
   const fileVersions = createFileVersions(ctx)
+  return { registry, searcher, contentSearcher, lspManager, lspRpc, aiRpc, svnRpc, dapRpc, fileVersions }
+}
 
-  ctx.on('tools/result', (exec: unknown, result: unknown) => {
-    void captureToolResult(ctx, registry, exec, result)
-  })
-
-  ctx.on('session/disposed', (session: unknown) => {
-    const cwd = cwdOf(session as never)
+/**
+ * Own tool capture, per-session caches, and process cleanup under one Host fiber.
+ * @author ddj 2026年09月28号
+ * @param ctx Host context.
+ * @param runtime Managers created by this instance.
+ */
+function attachRuntime(ctx: Ctx, runtime: Runtime): void {
+  /** @author ddj 2026年09月28号 @param exec Tool execution. @param result Tool result. */
+  function onResult(exec: unknown, result: unknown): void {
+    void captureToolResult(ctx, runtime.registry, exec, result)
+  }
+  /** @author ddj 2026年09月28号 @param session Disposed session. */
+  function onDisposed(session: { id?: unknown }): void {
+    const cwd = cwdOf(session)
     if (cwd) {
-      registry.delete(cwd)
-      searcher.dispose(cwd)
-      contentSearcher.dispose(cwd)
+      runtime.registry.delete(cwd)
+      runtime.searcher.dispose(cwd)
+      runtime.contentSearcher.dispose(cwd)
       disposeIndex(cwd)
     }
-    const sid = (session as { id?: unknown })?.id
-    if (typeof sid === 'string') lspRpc.disposeSession(sid)
-  })
-
-  registerRoutes(ctx, config, (method, args) => handleRpc(ctx, registry, method, args, searcher, contentSearcher, lspHandlers, aiHandlers, fileVersions, svnHandlers, dapHandlers), (warning) => warnings.push(warning))
-  installIsolation(ctx)
-  // 系统集成生命周期：启动自动恢复右键菜单注册（marker 存在时）；插件卸载/reload 清理注册痕迹
-  ctx.effect(() => shellMenuLifecycle(ctx))
-  // 启动清理缓存目录：非当前 schema / 超保留期 / 未知残留（best-effort，不阻塞装配）
-  void sweepTreeCache()
-  void logCompatSummary(ctx, warnings)
-  // 卸载/重启时强杀 LSP 子进程（防残留）
-  ctx.effect(() => () => {
-    void lspManager.disposeAll().catch(() => {})
+    if (typeof session.id === 'string') runtime.lspRpc.disposeSession(session.id)
+  }
+  /** @author ddj 2026年09月28号 Release every manager even if another cleanup rejects. */
+  async function cleanup(): Promise<void> {
+    runtime.fileVersions.dispose()
     disposeAllServers()
-  })
-  // 卸载时清空文件版本基准表（观察器为模块内单例，不清会跨装配残留陈旧版本）
-  ctx.effect(() => () => fileVersions.dispose())
-  // 卸载时结束仍在运行的 SVN 更新，避免无主工作副本更新继续写入
-  ctx.effect(() => () => svnRpc.dispose())
-  // 卸载/重启时结束调试会话并强杀适配器子进程（防残留注入器/适配器孤儿）
-  ctx.effect(() => () => dapRpc.dispose())
-  // 宿主进程退出回收：ctx.effect 清理不覆盖进程退出，缺此注册会留下跨重启的孤儿服务器
+    const tasks = [() => runtime.lspManager.disposeAll(), () => runtime.svnRpc.dispose(), () => runtime.dapRpc.dispose()]
+    await Promise.allSettled(tasks.map((run) => Promise.resolve().then(run)))
+  }
+  ctx.on('tools/result', onResult)
+  ctx.on('session/disposed', onDisposed)
+  ctx.effect(() => cleanup, 'vscode-mode:runtime')
   hookExitReclaim()
+}
+
+/**
+ * Add user rules and bundled skills without requiring them on older Hosts.
+ * @author ddj 2026年09月28号
+ * @param ctx Host context.
+ */
+function installContent(ctx: Ctx): void {
+  if (!installRulesSection(ctx)) log.warn('未检测到 systemPrompt 服务，规则仅可管理不注入')
+  if (!installSkillGroup(ctx)) log.warn('技能组未调度，插件技能组不可用')
+}
+// #endregion
 
-  log.info('编辑差异审查已装配（/edrv/rpc 路由就绪，项目 MCP 隔离已启用，语言服务器 LSP 已接入，规则注入' + (rulesInstalled ? '已接入' : '未接入') + '，技能组' + (skillsDispatched ? '装配中' : '未装配') + '）')
+/**
+ * Activate authenticated routes, scoped MCP, analysis submission and private file opens.
+ * @author ddj 2026年09月28号
+ * @param ctx Injected Host context.
+ * @param config Validated live plugin configuration.
+ * @returns Startup readiness; owned effects are released on activation failure or unload.
+ */
+export async function apply(ctx: Ctx, config?: unknown): Promise<void> {
+  bindHostLog(ctx)
+  const runtime = createRuntime(ctx, config)
+  const warnings: string[] = []
+  attachRuntime(ctx, runtime)
+  installContent(ctx)
+  /** @author ddj 2026年09月28号 @param method RPC name. @param args Typed request. @returns RPC result. */
+  function dispatch<M extends RpcMethod>(method: M, args: RpcRequestMap[M]) {
+    const { registry, searcher, contentSearcher, lspRpc, aiRpc, fileVersions, svnRpc, dapRpc } = runtime
+    return handleRpc(ctx, registry, method, args, searcher, contentSearcher, lspRpc.handlers,
+      aiRpc.handlers, fileVersions, svnRpc.handlers as Partial<RpcHandlerMap>, dapRpc.handlers)
+  }
+  /** @author ddj 2026年09月28号 @param warning Startup compatibility diagnostic. */
+  function noteWarning(warning: string): void { warnings.push(warning) }
+  /** @author ddj 2026年09月28号 @returns Private inbox disposer, or a reported disabled capability. */
+  async function mountInbox(): Promise<() => void> {
+    try { return await startOpenInbox(ctx) } catch (error) {
+      noteWarning('外部打开通道未启用：' + String(error))
+      return () => {}
+    }
+  }
+  registerRoutes(ctx, config, dispatch, noteWarning)
+  installIsolation(ctx)
+  await installMcpRuntime(ctx)
+  /** @author ddj 2026年09月28号 @param args Session-bound plan. @returns Validated inbox result. */
+  function submitPlan(args: RpcRequestMap['svn.aiPlanSubmit']) { return dispatch('svn.aiPlanSubmit', args) }
+  await installPlanTool(ctx, submitPlan)
+  ctx.effect(mountInbox, 'vscode-mode:open-inbox')
+  ctx.effect(() => shellMenuLifecycle(ctx), 'vscode-mode:integration')
+  void sweepTreeCache()
+  await logCompatSummary(ctx, warnings)
+  log.info('编辑差异审查已装配（认证路由、项目 MCP 作用域、SVN 方案工具与外部打开通道）')
 }
 
 /**
- * 异步输出兼容性报告摘要（含重复装配/路由冲突自诊断）。
- * @author ddj 2026年08月24号
- * @param ctx DSH host 上下文
- * @param warnings 装配期收集的兼容性警告
+ * Log the actual compatibility report without turning a reporting failure into boot failure.
+ * @author ddj 2026年09月28号
+ * @param ctx Host context.
+ * @param warnings Activation diagnostics.
  */
 async function logCompatSummary(ctx: Ctx, warnings: string[]): Promise<void> {
   try {
     const report = await buildReport(ctx)
-    for (const warning of warnings) report.warnings.push(warning)
+    report.warnings.push(...warnings)
     const dsh = report.dshVersion ? 'DSH ' + report.dshVersion : 'DSH 未探测'
     const head = '兼容性：' + dsh + ' · ' + report.external.length + ' 项外部适配 / ' + report.guards.length + ' 项护栏 / ' + (report.adapters?.length ?? 0) + ' 项版本适配'
-    if (report.warnings.length) {
-      log.warn(head + '，警告 ' + report.warnings.length + ' 条：' + report.warnings.join('；'))
-    } else {
-      log.info(head + '，无警告')
-    }
+    if (report.warnings.length) log.warn(head + '，警告 ' + report.warnings.length + ' 条：' + report.warnings.join('；'))
+    else log.info(head + '，无警告')
   } catch (error) {
     log.warn('兼容性报告生成失败：' + String(error))
   }

package/src/integrate.ts

@@ -4,17 +4,19 @@
  *   ~/.dsh/dsh-vscode-mode/shell/，HKCU\Software\Classes 三类菜单键（`*`/Directory/Directory\Background）。
  * - Linux：dsh-open.sh + GNOME Files（Nautilus）右键脚本 + KDE Dolphin 服务菜单（纯文件写入）。
  * - macOS：dsh-open.sh（Finder 快速操作由用户按配方手动创建，自动检测/移除）。
- * 生命周期：注册成功写 marker（shell/registered.json）→ 插件卸载/reload 清理注册痕迹，
- * 启动时 marker 存在则自动恢复（更新插件不丢注册）；用户显式「移除注册」删 marker 永不自动恢复。
+ * 生命周期：注册成功写 marker；启动按 marker 升级 launcher 文件，不反复重写系统注册。
+ * 用户显式「移除注册」删 marker，后续启动不会恢复。
  * 所有 reg/csc 调用经 subprocess 服务 argv 数组（卸载清理用 child_process 直调，teardown 可靠）。
  * 纯函数（键路径/命令行/ini/脚本内容）可单测。
  * 作者 ddj 2026-09-07
  */
-import { spawn } from 'node:child_process'
+import { childEnv } from './childEnv.js'
 import { chmod, copyFile, mkdir, readFile, rm, stat, writeFile } from 'node:fs/promises'
 import { homedir } from 'node:os'
 import { join } from 'node:path'
 import { assetsDirOf, dshHome, PLUGIN_ID } from './paths.js'
+import { findProfileDir } from './devForm.js'
+import { openIni, writeOpenConfig } from './openBridge.js'
 import { INTEGRATION_BASE_DEFAULT, SHELL_MENU_LEAF } from './shared/integration.js'
 import { unitySourceDir } from './unityBridge.js'
 import type { ShellIntegrationStatus, ShellLauncherState, ShellMenuEntry } from './shared/integration.js'
@@ -53,7 +55,7 @@ export const WHALE_ICO = 'dsh-whale.ico'
 interface RunOutcome { code: number | null; output: string }
 
 /** 注册 marker 内容。 */
-interface RegistrationMarker { baseUrl: string; at: string }
+interface RegistrationMarker { baseUrl: string; at: string; transport?: number; profile?: string }
 
 /**
  * reg.exe 路径（SystemRoot 派生；env 可注入便于测试）。
@@ -172,8 +174,8 @@ export function ps1CommandValue(ps1Path: string, token: string = FILE_TOKEN, pow
  * @param baseUrl 深链基址
  * @returns ini 文件全文
  */
-export function iniContent(baseUrl: string): string {
-  return '[dsh]\nbase=' + (baseUrl.trim() || INTEGRATION_BASE_DEFAULT) + '\n'
+export function iniContent(baseUrl: string, metadata: Record<string, string> = {}): string {
+  return openIni(baseUrl, metadata)
 }
 
 /**
@@ -186,7 +188,7 @@ export function nautilusScript(launcherPath: string): string {
   return [
     '#!/usr/bin/env bash',
     '# 由 dsh-vscode-mode 生成：GNOME Files（Nautilus）右键脚本 → DSH 文件编辑',
-    'launcher="$HOME/.dsh/dsh-vscode-mode/shell/' + LAUNCHER_SH + '"',
+    'launcher=' + "'" + launcherPath.replace(/'/g, "'\"'\"'") + "'",
     'args=()',
     'while IFS= read -r line; do',
     '  [ -n "$line" ] && args+=("$line")',
@@ -251,6 +253,7 @@ async function runArgv(ctx: Ctx, argv: string[], cwd = dshHome()): Promise<RunOu
     handle = sub.spawn({
       argv,
       cwd,
+      env: childEnv(),
       stdio: { stdout: 'inherit', stderr: 'inherit', stdin: 'ignore' },
       graceMs: 10000,
     })
@@ -292,17 +295,17 @@ async function keyExists(ctx: Ctx, key: string): Promise<boolean> {
 /** 读注册 marker（缺失/非法 → null）。 */
 async function readMarker(home = dshHome()): Promise<RegistrationMarker | null> {
   try {
-    const data = JSON.parse(await readFile(markerFile(home), 'utf8')) as { baseUrl?: unknown; at?: unknown }
+    const data = JSON.parse(await readFile(markerFile(home), 'utf8')) as { baseUrl?: unknown; at?: unknown; transport?: unknown; profile?: unknown }
     if (typeof data?.baseUrl !== 'string' || !data.baseUrl) return null
-    return { baseUrl: data.baseUrl, at: typeof data.at === 'string' ? data.at : '' }
+    return { baseUrl: data.baseUrl, at: typeof data.at === 'string' ? data.at : '', transport: typeof data.transport === 'number' ? data.transport : undefined, profile: typeof data.profile === 'string' ? data.profile : undefined }
   } catch {
     return null
   }
 }
 
 /** 写注册 marker（父目录已存在）。 */
-async function saveMarker(baseUrl: string, home = dshHome()): Promise<void> {
-  const data: RegistrationMarker = { baseUrl, at: new Date().toISOString() }
+async function saveMarker(baseUrl: string, home = dshHome(), profile?: string): Promise<void> {
+  const data: RegistrationMarker = { baseUrl, at: new Date().toISOString(), transport: 1, profile }
   await writeFile(markerFile(home), JSON.stringify(data, null, 2) + '\n', 'utf8')
 }
 
@@ -310,9 +313,9 @@ async function saveMarker(baseUrl: string, home = dshHome()): Promise<void> {
 async function installPosix(dir: string, baseUrl: string): Promise<void> {
   await copyFile(join(assetsDirOf(import.meta.url), 'shell', LAUNCHER_SH), join(dir, LAUNCHER_SH))
   await chmod(join(dir, LAUNCHER_SH), 0o755)
-  await writeFile(join(dir, INI_NAME), iniContent(baseUrl), 'utf8')
 }
 
+
 /** 写 Nautilus 右键脚本（父目录按需创建 + 执行位）。 */
 async function writeNautilus(home: string, launcherPath: string): Promise<void> {
   const script = nautilusPath(home)
@@ -348,19 +351,6 @@ async function dropFinderMenu(home: string): Promise<void> {
   await rm(dir, { recursive: true, force: true })
 }
 
-/** 卸载清理专用：直调 reg delete（subprocess 服务在 teardown 可能已卸载）。⚠️ stdio 'ignore'：受管环境禁管道。 */
-function regDeleteDirect(key: string): Promise<void> {
-  return new Promise((resolve) => {
-    try {
-      const child = spawn(regExe(), ['delete', key, '/f'], { windowsHide: true, timeout: 5000, stdio: 'ignore' })
-      child.once('close', () => resolve())
-      child.once('error', () => resolve())
-    } catch {
-      resolve()
-    }
-  })
-}
-
 /**
  * 查询系统集成状态（按平台探测条目注册状态 + launcher 安装态）。
  * @author ddj 2026年09月07号
@@ -412,7 +402,6 @@ export async function shellMenuRegister(ctx: Ctx, baseUrl: string): Promise<Shel
   const dir = shellInstallDir()
   await mkdir(dir, { recursive: true })
   if (process.platform === 'win32') {
-    await writeFile(join(dir, INI_NAME), iniContent(baseUrl), 'utf8')
     await installIcon(dir)
     const compiled = await installLauncher(ctx, dir, true)
     if (!(await readMarker())) await backupKeys(ctx, dir)
@@ -426,7 +415,8 @@ export async function shellMenuRegister(ctx: Ctx, baseUrl: string): Promise<Shel
     // macOS 菜单由用户按 Automator 配方手动创建（UI 提供一键复制）；这里仅安装 launcher
     await installPosix(dir, baseUrl)
   }
-  await saveMarker(baseUrl)
+  await writeOpenConfig(ctx, dir, baseUrl)
+  await saveMarker(baseUrl, dshHome(), findProfileDir(ctx))
   return shellMenuStatus(ctx, baseUrl)
 }
 
@@ -454,38 +444,40 @@ export async function shellMenuRemove(ctx: Ctx, baseUrl: string): Promise<ShellI
 
 /**
  * 系统集成生命周期（index.ts 经 ctx.effect 挂载）：
- * 启动时 marker 存在 → 幂等自动恢复注册（插件更新/reload 不丢注册）；
- * 返回的 disposer 在插件卸载/reload 时清理注册痕迹（marker 保留供下次恢复）。
+ * 启动时仅升级用户已注册的 launcher 文件与配置；保留系统注册和明确选中的 profile。
+ * 卸载时取消后续迁移步骤；移除系统注册只由用户显式操作触发。
  * @author ddj 2026年09月07号
  * @param ctx DSH 上下文
  * @returns 卸载清理 disposer
  */
 export function shellMenuLifecycle(ctx: Ctx): () => void {
-  void restoreOnLoad(ctx).catch(() => {})
-  return () => {
-    void cleanupOnUnload().catch(() => {})
-  }
+  let disposed = false
+  void restoreOnLoad(ctx, () => disposed).catch((error) => console.warn('[dsh-vscode-mode] launcher migration failed:', error))
+  return () => { disposed = true }
 }
 
-/** 启动自动恢复：marker 存在才执行（幂等；exe 已存在跳过编译）。 */
-async function restoreOnLoad(ctx: Ctx): Promise<void> {
-  const marker = await readMarker()
-  if (!marker) return
-  await shellMenuRegister(ctx, marker.baseUrl)
-}
-
-/** 卸载清理：marker 存在 → 按平台移除注册痕迹（launcher 文件与 marker 保留）。 */
-async function cleanupOnUnload(): Promise<void> {
+/** @private @author ddj 2026年09月28号
+ * Upgrade installed assets only; OS registration remains user-owned across reloads.
+ * @param ctx Host profile context.
+ * @param disposed Whether lifecycle disposal has started.
+ */
+async function restoreOnLoad(ctx: Ctx, disposed: () => boolean): Promise<void> {
   const marker = await readMarker()
-  if (!marker) return
-  if (process.platform === 'win32') {
-    const paths = menuKeyPaths()
-    for (const key of [paths.files, paths.dir, paths.background]) await regDeleteDirect(key)
-  } else if (process.platform === 'linux') {
-    await removePosixFiles(homedir())
-  } else if (process.platform === 'darwin') {
-    await dropFinderMenu(homedir())
+  if (!marker || disposed()) return
+  const profile = findProfileDir(ctx)
+  if (!profile || (marker.profile && marker.profile !== profile)) return
+  const dir = shellInstallDir()
+  const baseUrl = await storedOpenBase(dir, marker.baseUrl)
+  if (marker.transport !== 1) {
+    if (process.platform === 'win32') {
+      const hadExe = await fileExists(join(dir, LAUNCHER_EXE))
+      const compiled = await installLauncher(ctx, dir, true)
+      if (hadExe && !compiled) throw new Error('旧 launcher 编译升级失败，请在设置中重新注册')
+    } else await installPosix(dir, baseUrl)
   }
+  if (disposed()) return
+  await writeOpenConfig(ctx, dir, baseUrl)
+  if (!disposed()) await saveMarker(baseUrl, dshHome(), profile)
 }
 
 /**
@@ -500,6 +492,7 @@ async function installLauncher(ctx: Ctx, dir: string, force: boolean): Promise<b
   const exe = join(dir, LAUNCHER_EXE)
   if (!force && await fileExists(exe)) return true
   const shellAssets = join(assetsDirOf(import.meta.url), 'shell')
+  await copyFile(join(shellAssets, LAUNCHER_PS1), join(dir, LAUNCHER_PS1))
   for (const candidate of cscCandidates()) {
     if (!(await fileExists(candidate))) continue
     try {
@@ -574,3 +567,16 @@ async function addMenuKey(ctx: Ctx, key: string, iconPath: string, command: stri
   await runArgv(ctx, [reg, 'add', key, '/v', REG_VALUE_NAME_ICON, '/t', 'REG_SZ', '/d', iconPath, '/f'])
   await runArgv(ctx, [reg, 'add', key + '\\command', '/ve', '/t', 'REG_SZ', '/d', command, '/f'])
 }
+
+/** @private @author ddj 2026年09月28号
+ * Preserve a manually configured public URL during launcher migration.
+ * @param dir Launcher directory.
+ * @param fallback Registered legacy address.
+ * @returns Existing base value, or the marker's address.
+ */
+async function storedOpenBase(dir: string, fallback: string): Promise<string> {
+  try {
+    const text = await readFile(join(dir, INI_NAME), 'utf8')
+    return /^base\s*=\s*(.+)$/im.exec(text)?.[1]?.trim() || fallback
+  } catch { return fallback }
+}