termdock 1.4.322 → 1.4.324

package/.desktop-dist/main.js

@@ -1,1989 +0,0 @@
-import { readClipboardFiles } from './clipboardFiles.js';
-import { sessionAddress } from './collaborationFederation.js';
-import { prepareServiceFrontend, selectServiceFrontend } from './bundledFrontend.js';
-import { serviceConnection, serviceConnectionKeys, importServiceConnection, saveServiceConnection, invitationForService } from './serviceConnections.js';
-import { serviceMenuEntries } from './serviceMenu.js';
-import { LocalServiceSetupController } from './localServiceSetup.js';
-const pendingServiceInvitations = new WeakMap();
-import { app, BrowserWindow, clipboard, dialog, ipcMain, Menu, net, nativeImage, Notification, powerMonitor, screen, session, shell, Tray, } from 'electron';
-import { execFile } from 'node:child_process';
-import crypto from 'node:crypto';
-import dgram from 'node:dgram';
-import fs from 'node:fs';
-import https from 'node:https';
-import os from 'node:os';
-import path from 'node:path';
-import { promisify } from 'node:util';
-import { fileURLToPath, pathToFileURL } from 'node:url';
-import { desktopStatusTooltip, formatCompactDesktopStatus, menuBarStatusRows, mergeServiceActivity, nextServiceOrigin, normalizeServiceActivity, summarizeServiceActivity, } from './activityStatus.js';
-import { checkForDesktopUpdates, configureDesktopUpdater, getDesktopUpdateState, installDownloadedDesktopUpdate, isDesktopUpdateInstalling, subscribeDesktopUpdateState, } from './updater.js';
-import { isExternalLinkStagingUrl, isSafeExternalUrl } from './externalLinks.js';
-import { shouldThrottleDesktopRenderer } from './windowPolicy.js';
-import { serviceDocumentNeedsReload } from './serviceWindowRecovery.js';
-import { CertificateTrustRequests, resolveServiceCertificateTrust, canOfferCertificateTrust, downloadCertificateAuthority, isCertificateTrustError, isLocalNetworkHostname, matchManagedLocalCertificate, } from './certificateTrust.js';
-const execFileAsync = promisify(execFile);
-const currentDir = path.dirname(fileURLToPath(import.meta.url));
-const projectRoot = path.resolve(currentDir, '..');
-const termdockDir = path.join(os.homedir(), '.termdock');
-const desktopConfigPath = path.join(termdockDir, 'desktop.json');
-const serverStatePath = path.join(termdockDir, 'server.json');
-const DEFAULT_LOCAL_URL = 'http://localhost:9834';
-const PROTOCOL_VERSION = 1;
-const HEALTH_TIMEOUT_MS = 3_500;
-const SERVICE_RECOVERY_PROBE_TIMEOUT_MS = 5_000;
-const RESTORE_LOAD_TIMEOUT_MS = 15_000;
-const localServiceCertificatePath = path.join(termdockDir, 'certs', 'termdock-local.pem');
-const sessionTrustedCertificateTargets = new Set();
-const certificateTrustRequests = new CertificateTrustRequests();
-const sessionTrustedLeafByOrigin = new Map();
-const sessionTrustedCertificateAuthorities = new Map();
-let managedLocalCertificateFingerprint = null;
-const serviceWindowRecoveryTimers = new WeakMap();
-const serviceWindowRecoveryInFlight = new WeakSet();
-/** Delivered-but-unseen desktop notifications, mirrored into the Dock badge. */
-const activeNotifications = new Map();
-let unreadNotificationCount = 0;
-function clearUnreadNotifications() {
-    unreadNotificationCount = 0;
-    app.setBadgeCount(0);
-}
-function triggerLocalNetworkPermission() {
-    if (process.platform !== 'darwin')
-        return;
-    const socket = dgram.createSocket('udp4');
-    const close = () => {
-        try {
-            socket.close();
-        }
-        catch {
-            // The socket may already be closed after an immediate send failure.
-        }
-    };
-    socket.once('error', close);
-    socket.send(Buffer.from('Termdock'), 5353, '224.0.0.251', close);
-}
-let mainWindow = null;
-const localServiceSetup = new LocalServiceSetupController(getLocalServiceStatus, status => {
-    if (startupRestoreActive && ['checking', 'starting'].includes(status.phase))
-        updateStartupProgress(status.message);
-    if (mainWindow && !mainWindow.isDestroyed()) {
-        mainWindow.webContents.send('desktop:local-service-setup', status);
-    }
-});
-let startupRestoreActive = false;
-let startupProgressMessage = '正在启动 Termdock Desktop…';
-const serviceWindows = new Map();
-const serviceWindowPeers = new WeakMap();
-const windowServiceOrigins = new WeakMap();
-const restorableServiceWindows = new WeakSet();
-const reportedServiceActivity = new Map();
-const observedServiceActivity = new Map();
-let lastFocusedServiceWindow = null;
-let menuBarStatus = null;
-let menuBarStatusWidth = 0;
-let floatingWidgetWindow = null;
-let floatingPositionTimer = null;
-let isQuitting = false;
-const FLOATING_WIDGET_WIDTHS = [64, 108, 152];
-const FLOATING_WIDGET_HEIGHT = 40;
-function focusedWorkspaceWindow() {
-    const focused = BrowserWindow.getFocusedWindow();
-    if (focused && windowServiceOrigins.has(focused))
-        return focused;
-    if (lastFocusedServiceWindow && !lastFocusedServiceWindow.isDestroyed()) {
-        return lastFocusedServiceWindow;
-    }
-    return [...serviceWindows.values()].find((window) => !window.isDestroyed()) ?? null;
-}
-function showAndFocusWindow(window) {
-    if (windowServiceOrigins.has(window))
-        lastFocusedServiceWindow = window;
-    if (window.isMinimized())
-        window.restore();
-    window.show();
-    window.focus();
-}
-function serviceActivitySnapshot(targetWindow) {
-    const currentOrigin = windowServiceOrigins.get(targetWindow);
-    return [...serviceWindows.entries()].flatMap(([origin, window]) => {
-        if (window.isDestroyed())
-            return [];
-        const activity = mergeServiceActivity(reportedServiceActivity.get(origin), observedServiceActivity.get(origin));
-        return [{
-                origin,
-                targetPeerId: serviceWindowPeers.get(window),
-                label: serviceLabel(origin),
-                current: origin === currentOrigin,
-                focused: window.isFocused(),
-                ...activity,
-            }];
-    });
-}
-function broadcastServiceActivity() {
-    for (const window of serviceWindows.values()) {
-        if (window.isDestroyed())
-            continue;
-        window.webContents.send('desktop:service-activity-changed', serviceActivitySnapshot(window));
-    }
-    refreshDesktopStatusSurfaces();
-}
-function serviceLabel(url) {
-    const normalized = normalizeServiceUrl(url);
-    const saved = readDesktopConfig().connections.find((entry) => entry.url === normalized);
-    if (saved?.label.trim())
-        return saved.label.trim();
-    const parsed = new URL(normalized);
-    return parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1'
-        ? '本机'
-        : parsed.host;
-}
-function allServiceActivity() {
-    const focused = BrowserWindow.getFocusedWindow();
-    return [...serviceWindows.entries()].flatMap(([origin, window]) => {
-        if (window.isDestroyed())
-            return [];
-        return [{
-                origin,
-                targetPeerId: serviceWindowPeers.get(window),
-                label: serviceLabel(origin),
-                current: window === lastFocusedServiceWindow,
-                focused: window === focused,
-                ...mergeServiceActivity(reportedServiceActivity.get(origin), observedServiceActivity.get(origin)),
-            }];
-    });
-}
-function desktopStatusSnapshot() {
-    const services = allServiceActivity();
-    const summary = summarizeServiceActivity(services);
-    return {
-        ...summary,
-        text: formatCompactDesktopStatus(summary),
-        tooltip: desktopStatusTooltip(summary),
-        services,
-        preferences: readDesktopConfig().desktopPreferences,
-    };
-}
-function nextServiceWindow(scope) {
-    const currentOrigin = lastFocusedServiceWindow && !lastFocusedServiceWindow.isDestroyed()
-        ? windowServiceOrigins.get(lastFocusedServiceWindow) ?? null
-        : null;
-    const origin = nextServiceOrigin(allServiceActivity(), currentOrigin, scope);
-    return origin ? serviceWindows.get(origin) ?? null : focusedWorkspaceWindow();
-}
-function focusNextService(scope = 'attention') {
-    const target = nextServiceWindow(scope);
-    if (target && !target.isDestroyed()) {
-        showAndFocusWindow(target);
-        return;
-    }
-    void showConnectionCenter();
-}
-function menuBarContextMenu() {
-    const status = desktopStatusSnapshot();
-    const serviceItems = status.services.length > 0
-        ? status.services
-            .sort((left, right) => right.reviewCount - left.reviewCount
-            || right.runningCount - left.runningCount
-            || left.label.localeCompare(right.label))
-            .map((service) => ({
-            label: `${service.label}${service.runningCount > 0 ? `  运行 ${service.runningCount}` : ''}${service.reviewCount > 0 ? `  待办 ${service.reviewCount}` : ''}`,
-            click: () => {
-                const target = serviceWindows.get(service.origin);
-                if (target && !target.isDestroyed())
-                    showAndFocusWindow(target);
-            },
-        }))
-        : [{ label: '暂无已打开服务', enabled: false }];
-    return Menu.buildFromTemplate([
-        { label: status.tooltip, enabled: false },
-        { type: 'separator' },
-        ...serviceItems,
-        { type: 'separator' },
-        { label: '连接中心…', click: () => void showConnectionCenter() },
-        {
-            label: '显示悬浮状态',
-            type: 'checkbox',
-            checked: status.preferences.floatingWidgetEnabled,
-            click: (item) => updateDesktopPreferences({ floatingWidgetEnabled: item.checked }),
-        },
-        { type: 'separator' },
-        { role: 'quit' },
-    ]);
-}
-function menuBarStatusImage(status) {
-    const size = 18;
-    const scale = 2;
-    const bitmap = Buffer.alloc(size * scale * size * scale * 4);
-    const glyphs = {
-        '0': ['111', '101', '101', '101', '111'],
-        '1': ['010', '110', '010', '010', '111'],
-        '2': ['111', '001', '111', '100', '111'],
-        '3': ['111', '001', '111', '001', '111'],
-        '4': ['101', '101', '111', '001', '001'],
-        '5': ['111', '100', '111', '001', '111'],
-        '6': ['111', '100', '111', '101', '111'],
-        '7': ['111', '001', '010', '010', '010'],
-        '8': ['111', '101', '111', '101', '111'],
-        '9': ['111', '101', '111', '001', '111'],
-        '+': ['000', '010', '111', '010', '000'],
-    };
-    const drawPixel = (x, y, alpha = 255) => {
-        for (let offsetY = 0; offsetY < scale; offsetY += 1) {
-            for (let offsetX = 0; offsetX < scale; offsetX += 1) {
-                const pixelX = x * scale + offsetX;
-                const pixelY = y * scale + offsetY;
-                if (pixelX < 0 || pixelX >= size * scale || pixelY < 0 || pixelY >= size * scale)
-                    continue;
-                bitmap[(pixelY * size * scale + pixelX) * 4 + 3] = alpha;
-            }
-        }
-    };
-    const drawGlyph = (value, x, y, alpha) => {
-        const glyph = glyphs[value > 9 ? '+' : String(value)] ?? glyphs['0'];
-        glyph.forEach((row, rowIndex) => {
-            [...row].forEach((cell, columnIndex) => {
-                if (cell === '1')
-                    drawPixel(x + columnIndex, y + rowIndex, alpha);
-            });
-        });
-    };
-    const icons = {
-        running: [[0, 0], [0, 1], [1, 1], [0, 2], [1, 2], [2, 2], [3, 2], [0, 3], [1, 3], [0, 4]],
-        review: [[2, 0], [1, 1], [3, 1], [0, 2], [4, 2], [1, 3], [3, 3], [2, 4]],
-        services: [[0, 0], [1, 0], [3, 0], [4, 0], [1, 1], [3, 1], [2, 2], [2, 3], [1, 4], [2, 4], [3, 4]],
-    };
-    // A single connection is the normal case, so its count is redundant. Give
-    // the two actionable activity rows more breathing room instead. Zero and
-    // multiple connections keep the service row because those states matter.
-    menuBarStatusRows(status).forEach(({ metric, value, y }) => {
-        const alpha = value > 0 ? 255 : 96;
-        icons[metric].forEach(([offsetX, offsetY]) => drawPixel(1 + offsetX, y + offsetY, alpha));
-        drawGlyph(value, 11, y, alpha);
-    });
-    // Template images are intentionally monochrome; macOS supplies the correct
-    // menu-bar color for the active appearance and accessibility state.
-    const image = nativeImage.createFromBitmap(bitmap, {
-        width: size * scale,
-        height: size * scale,
-        scaleFactor: scale,
-    });
-    image.setTemplateImage(true);
-    return image;
-}
-function refreshMenuBarStatus(status) {
-    if (process.platform !== 'darwin' || !status.preferences.menuBarStatusEnabled) {
-        menuBarStatus?.destroy();
-        menuBarStatus = null;
-        menuBarStatusWidth = 0;
-        return;
-    }
-    const image = menuBarStatusImage(status);
-    const imageWidth = image.getSize().width;
-    if (!menuBarStatus || menuBarStatus.isDestroyed() || menuBarStatusWidth !== imageWidth) {
-        menuBarStatus?.destroy();
-        menuBarStatus = new Tray(image);
-        menuBarStatusWidth = imageWidth;
-        menuBarStatus.on('click', () => focusNextService('attention'));
-        menuBarStatus.on('right-click', () => menuBarStatus?.popUpContextMenu(menuBarContextMenu()));
-    }
-    else {
-        menuBarStatus.setImage(image);
-    }
-    menuBarStatus.setTitle('');
-    menuBarStatus.setToolTip(`${status.tooltip}\n点击循环切换需关注的服务`);
-}
-function constrainFloatingPosition(position, width = FLOATING_WIDGET_WIDTHS[2]) {
-    const height = FLOATING_WIDGET_HEIGHT;
-    const display = position
-        ? screen.getDisplayMatching({ x: position.x, y: position.y, width, height })
-        : screen.getPrimaryDisplay();
-    const area = display.workArea;
-    const preferred = position ?? {
-        x: area.x + area.width - width - 18,
-        y: area.y + 18,
-    };
-    return {
-        x: Math.min(area.x + area.width - width, Math.max(area.x, Math.round(preferred.x))),
-        y: Math.min(area.y + area.height - height, Math.max(area.y, Math.round(preferred.y))),
-    };
-}
-function createFloatingWidget(position) {
-    const bounds = constrainFloatingPosition(position);
-    const window = new BrowserWindow({
-        title: 'Termdock Status',
-        type: 'panel',
-        width: FLOATING_WIDGET_WIDTHS[2],
-        height: FLOATING_WIDGET_HEIGHT,
-        x: bounds.x,
-        y: bounds.y,
-        show: false,
-        frame: false,
-        transparent: true,
-        backgroundColor: 'rgba(0, 0, 0, 0)',
-        vibrancy: 'popover',
-        visualEffectState: 'active',
-        resizable: false,
-        maximizable: false,
-        minimizable: false,
-        fullscreenable: false,
-        focusable: false,
-        skipTaskbar: true,
-        alwaysOnTop: true,
-        acceptFirstMouse: true,
-        hasShadow: true,
-        webPreferences: {
-            preload: path.join(currentDir, 'preload.cjs'),
-            nodeIntegration: false,
-            contextIsolation: true,
-            sandbox: true,
-            backgroundThrottling: false,
-        },
-    });
-    window.setAlwaysOnTop(true, 'floating');
-    window.setVisibleOnAllWorkspaces(true, {
-        visibleOnFullScreen: true,
-        // Electron otherwise temporarily transforms the whole process into a UI
-        // element, which can hide the app menu and remove normal windows from App
-        // Expose while this panel exists.
-        skipTransformProcessType: true,
-    });
-    // Keep the auxiliary status panel out of App Expose / Mission Control so it
-    // cannot disrupt macOS's three-finger application-window gesture.
-    window.setHiddenInMissionControl(true);
-    let constrainingMove = false;
-    window.on('move', () => {
-        if (constrainingMove || window.isDestroyed())
-            return;
-        const [x, y] = window.getPosition();
-        const [width] = window.getSize();
-        const constrained = constrainFloatingPosition({ x, y }, width);
-        if (constrained.x === x && constrained.y === y)
-            return;
-        constrainingMove = true;
-        window.setPosition(constrained.x, constrained.y, false);
-        constrainingMove = false;
-    });
-    window.on('moved', () => {
-        if (floatingPositionTimer)
-            clearTimeout(floatingPositionTimer);
-        floatingPositionTimer = setTimeout(() => {
-            floatingPositionTimer = null;
-            if (window.isDestroyed())
-                return;
-            const [x, y] = window.getPosition();
-            const config = readDesktopConfig();
-            config.desktopPreferences.floatingWidgetPosition = { x, y };
-            writeDesktopConfig(config);
-        }, 250);
-    });
-    window.on('closed', () => {
-        if (floatingWidgetWindow === window)
-            floatingWidgetWindow = null;
-    });
-    const rendererPath = app.isPackaged
-        ? path.join(process.resourcesPath, 'renderer', 'floating.html')
-        : path.join(projectRoot, 'desktop', 'renderer', 'floating.html');
-    void window.loadFile(rendererPath).then(() => window.showInactive());
-    return window;
-}
-function resizeFloatingWidget(metricCount) {
-    const window = floatingWidgetWindow;
-    if (!window || window.isDestroyed())
-        return;
-    const safeCount = Math.min(3, Math.max(1, Math.round(metricCount)));
-    const width = FLOATING_WIDGET_WIDTHS[safeCount - 1];
-    const [currentWidth] = window.getSize();
-    if (currentWidth === width)
-        return;
-    const [x, y] = window.getPosition();
-    window.setSize(width, FLOATING_WIDGET_HEIGHT, false);
-    const constrained = constrainFloatingPosition({ x: x + currentWidth - width, y }, width);
-    window.setPosition(constrained.x, constrained.y, false);
-}
-function refreshFloatingWidget(status) {
-    if (process.platform !== 'darwin' || !status.preferences.floatingWidgetEnabled) {
-        if (floatingWidgetWindow && !floatingWidgetWindow.isDestroyed())
-            floatingWidgetWindow.destroy();
-        floatingWidgetWindow = null;
-        return;
-    }
-    if (!floatingWidgetWindow || floatingWidgetWindow.isDestroyed()) {
-        floatingWidgetWindow = createFloatingWidget(status.preferences.floatingWidgetPosition);
-    }
-}
-function keepFloatingWidgetOnScreen() {
-    if (!floatingWidgetWindow || floatingWidgetWindow.isDestroyed())
-        return;
-    const [x, y] = floatingWidgetWindow.getPosition();
-    const [width] = floatingWidgetWindow.getSize();
-    const constrained = constrainFloatingPosition({ x, y }, width);
-    if (constrained.x !== x || constrained.y !== y) {
-        floatingWidgetWindow.setPosition(constrained.x, constrained.y, false);
-    }
-}
-function refreshDesktopStatusSurfaces() {
-    if (!app.isReady())
-        return;
-    const status = desktopStatusSnapshot();
-    refreshMenuBarStatus(status);
-    refreshFloatingWidget(status);
-    for (const window of BrowserWindow.getAllWindows()) {
-        if (!window.isDestroyed())
-            window.webContents.send('desktop:status-changed', status);
-    }
-}
-function updateDesktopPreferences(patch) {
-    const config = readDesktopConfig();
-    if (typeof patch.menuBarStatusEnabled === 'boolean') {
-        config.desktopPreferences.menuBarStatusEnabled = patch.menuBarStatusEnabled;
-    }
-    if (typeof patch.floatingWidgetEnabled === 'boolean') {
-        config.desktopPreferences.floatingWidgetEnabled = patch.floatingWidgetEnabled;
-    }
-    writeDesktopConfig(config);
-    refreshDesktopStatusSurfaces();
-}
-function showDesktopMessageBox(options) {
-    const parent = BrowserWindow.getFocusedWindow() ?? mainWindow;
-    return parent
-        ? dialog.showMessageBox(parent, options)
-        : dialog.showMessageBox(options);
-}
-function openExternalLink(url) {
-    if (!isSafeExternalUrl(url))
-        return;
-    void shell.openExternal(url);
-}
-function certificateTrustKey(hostname, fingerprint) {
-    return `${hostname.toLowerCase().replace(/^\[|\]$/g, '')}\0${fingerprint}`;
-}
-function readManagedLocalCertificateFingerprint() {
-    try {
-        return new crypto.X509Certificate(fs.readFileSync(localServiceCertificatePath)).fingerprint256;
-    }
-    catch {
-        return null;
-    }
-}
-function installCertificateVerifyProcedure(targetSession = session.defaultSession, serviceOrigin) {
-    targetSession.setCertificateVerifyProc((request, callback) => {
-        const routeOrigins = serviceOrigin ? readDesktopConfig().connections.flatMap(item => item.routes || []).map(route => route.url) : [];
-        const requestedOrigin = [serviceOrigin, ...routeOrigins].find(origin => origin && new URL(origin).hostname.replace(/^\[|\]$/g, '').toLowerCase() === request.hostname.replace(/^\[|\]$/g, '').toLowerCase());
-        let isLocalTarget = false;
-        try {
-            isLocalTarget = isLocalNetworkTarget(new URL(`https://${request.hostname}`));
-        }
-        catch {
-            // Keep Chromium's default verification for malformed hostnames.
-        }
-        let presentedFingerprint = null;
-        try {
-            presentedFingerprint = new crypto.X509Certificate(request.certificate.data).fingerprint256;
-        }
-        catch {
-            // Keep Chromium's default verification if the certificate cannot be parsed.
-        }
-        const explicitlyTrustedTarget = presentedFingerprint
-            ? serviceOrigin
-                ? !!requestedOrigin && sessionTrustedLeafByOrigin.get(requestedOrigin) === presentedFingerprint
-                : sessionTrustedCertificateTargets.has(certificateTrustKey(request.hostname, presentedFingerprint))
-            : false;
-        const managedMatch = isLocalTarget
-            ? matchManagedLocalCertificate(presentedFingerprint, managedLocalCertificateFingerprint, readManagedLocalCertificateFingerprint)
-            : { matches: false, currentFingerprint: managedLocalCertificateFingerprint };
-        managedLocalCertificateFingerprint = managedMatch.currentFingerprint;
-        const managedLocalCertificate = managedMatch.matches;
-        if (explicitlyTrustedTarget || managedLocalCertificate) {
-            callback(0);
-            return;
-        }
-        if (requestedOrigin && canOfferCertificateTrust(requestedOrigin)
-            && isCertificateTrustError(request.verificationResult)) {
-            // Resolve trust before Chromium caches a rejection. This covers fetch,
-            // WebSocket and navigation requests, not only the initial Node probe.
-            void resolveServiceCertificateTrust(requestedOrigin, request.hostname, request.certificate.data, () => requestCertificateTrust(requestedOrigin)).then((trusted) => callback(trusted ? 0 : -3), (error) => {
-                console.warn(`[desktop-certificate] ${serviceOrigin}: ${networkErrorDetails(error)}`);
-                callback(-3);
-            });
-            return;
-        }
-        callback(-3);
-    });
-}
-function configureLocalServiceCertificateTrust() {
-    managedLocalCertificateFingerprint = readManagedLocalCertificateFingerprint();
-    installCertificateVerifyProcedure();
-}
-function defaultConfig() {
-    return {
-        version: 1,
-        connections: [],
-        lastConnectionUrl: null,
-        openConnectionUrls: [],
-        trustedCertificateAuthorities: [],
-        desktopPreferences: {
-            menuBarStatusEnabled: true,
-            floatingWidgetEnabled: false,
-            floatingWidgetPosition: null,
-        },
-    };
-}
-function normalizeDesktopPreferences(value) {
-    const input = value && typeof value === 'object'
-        ? value
-        : {};
-    const position = input.floatingWidgetPosition;
-    return {
-        // The compact, text-only status is the useful default on macOS. Existing
-        // desktop.json files therefore gain the feature without a migration step.
-        menuBarStatusEnabled: input.menuBarStatusEnabled !== false,
-        floatingWidgetEnabled: input.floatingWidgetEnabled === true,
-        floatingWidgetPosition: position
-            && Number.isFinite(position.x)
-            && Number.isFinite(position.y)
-            ? { x: Math.round(position.x), y: Math.round(position.y) }
-            : null,
-    };
-}
-function normalizeServiceUrl(raw) {
-    const value = raw.trim();
-    if (!value)
-        throw new Error('请输入 Termdock 服务地址');
-    const parsed = new URL(value.includes('://') ? value : `http://${value}`);
-    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-        throw new Error('服务地址只支持 http:// 或 https://');
-    }
-    parsed.username = '';
-    parsed.password = '';
-    parsed.hash = '';
-    parsed.search = '';
-    parsed.pathname = parsed.pathname.replace(/\/+$/, '') || '/';
-    return parsed.toString().replace(/\/$/, '');
-}
-function isLocalNetworkTarget(url) {
-    return isLocalNetworkHostname(url.hostname);
-}
-function networkErrorDetails(error) {
-    if (!(error instanceof Error))
-        return String(error);
-    const cause = error.cause;
-    return cause ? `${error.message} ${networkErrorDetails(cause)}` : error.message;
-}
-function looksLikeLocalNetworkPermissionError(error) {
-    return /ERR_ADDRESS_UNREACHABLE|ERR_NETWORK_ACCESS_DENIED/i.test(networkErrorDetails(error));
-}
-function certificateDetail(target, certificate) {
-    return [
-        `目标：${target}`,
-        `CA：${certificate.subject.replace(/\n/g, ', ')}`,
-        `CA SHA-256：${certificate.fingerprint256}`,
-        `服务证书 SHA-256：${certificate.leafFingerprint256}`,
-        `有效期：${certificate.validFrom} — ${certificate.validTo}`,
-        '',
-        '继续后仅 Termdock 会信任该目标使用的这张 CA，不会修改 macOS 系统钥匙串。请只信任你确认属于该服务的证书。',
-    ].join('\n');
-}
-function trustedCertificateAuthorityFor(target) {
-    const origin = new URL(target).origin;
-    return readDesktopConfig().trustedCertificateAuthorities.find((entry) => entry.origin === origin);
-}
-function requestCertificateTrust(target) {
-    return certificateTrustRequests.request(new URL(target).origin, () => confirmCertificateTrust(target));
-}
-function rememberSessionCertificate(target, certificate) {
-    const url = new URL(target);
-    const previous = sessionTrustedLeafByOrigin.get(url.origin);
-    if (previous)
-        sessionTrustedCertificateTargets.delete(certificateTrustKey(url.hostname, previous));
-    sessionTrustedLeafByOrigin.set(url.origin, certificate.leafFingerprint256);
-    sessionTrustedCertificateAuthorities.set(url.origin, certificate.certificatePem);
-    sessionTrustedCertificateTargets.add(certificateTrustKey(url.hostname, certificate.leafFingerprint256));
-}
-async function confirmCertificateTrust(target) {
-    let certificate;
-    try {
-        certificate = await downloadCertificateAuthority(target);
-    }
-    catch (error) {
-        await showDesktopMessageBox({
-            type: 'error',
-            title: '无法获取可信的 CA 证书',
-            message: `无法为 ${target} 准备证书信任`,
-            detail: networkErrorDetails(error),
-        });
-        return null;
-    }
-    const existingTrust = trustedCertificateAuthorityFor(target);
-    if (existingTrust?.fingerprint256 === certificate.fingerprint256) {
-        rememberSessionCertificate(target, certificate);
-        return certificate;
-    }
-    const confirmation = await showDesktopMessageBox({
-        type: 'warning',
-        title: '信任 HTTPS 服务证书',
-        message: existingTrust
-            ? '此服务的 CA 证书已发生变化'
-            : '此服务使用了 Termdock 尚未信任的 HTTPS 证书',
-        detail: `${certificateDetail(target, certificate)}${existingTrust
-            ? `\n\n此前信任的 CA SHA-256：${existingTrust.fingerprint256}`
-            : ''}`,
-        buttons: ['信任并连接', '取消'],
-        defaultId: 1,
-        cancelId: 1,
-        noLink: true,
-    });
-    if (confirmation.response !== 0)
-        return null;
-    const config = readDesktopConfig();
-    const origin = new URL(target).origin;
-    config.trustedCertificateAuthorities = config.trustedCertificateAuthorities
-        .filter((entry) => entry.origin !== origin);
-    config.trustedCertificateAuthorities.push({
-        origin,
-        fingerprint256: certificate.fingerprint256,
-        subject: certificate.subject,
-        trustedAt: Date.now(),
-    });
-    writeDesktopConfig(config);
-    rememberSessionCertificate(target, certificate);
-    return certificate;
-}
-async function requestLocalNetworkPermissionRetry(target) {
-    const result = await showDesktopMessageBox({
-        type: 'warning',
-        title: '需要本地网络权限',
-        message: 'macOS 阻止了 Termdock 访问局域网服务',
-        detail: `目标：${target}\n\n请在系统提示中选择“允许”。如果之前选择过“不允许”，请前往“系统设置 → 隐私与安全性 → 本地网络”开启 Termdock。`,
-        buttons: ['已允许，重试', '打开系统设置', '取消'],
-        defaultId: 0,
-        cancelId: 2,
-    });
-    if (result.response === 1) {
-        await shell.openExternal('x-apple.systempreferences:com.apple.preference.security?Privacy_LocalNetwork');
-    }
-    return result.response === 0;
-}
-function readDesktopConfig() {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(desktopConfigPath, 'utf8'));
-        if (parsed.version !== 1 || !Array.isArray(parsed.connections))
-            return defaultConfig();
-        const lastConnectionUrl = typeof parsed.lastConnectionUrl === 'string' ? parsed.lastConnectionUrl : null;
-        return {
-            version: 1,
-            removedServiceKeys: Array.isArray(parsed.removedServiceKeys) ? parsed.removedServiceKeys.filter((key) => typeof key === 'string').slice(-768) : [],
-            connections: parsed.connections.filter((entry) => Boolean(entry)
-                && typeof entry.id === 'string'
-                && typeof entry.label === 'string'
-                && typeof entry.url === 'string'),
-            lastConnectionUrl,
-            // Older desktop.json files only remembered the most recent window. Use
-            // that value once as their restore list, while preserving an explicit
-            // empty list when the user intentionally closed every service window.
-            openConnectionUrls: Array.isArray(parsed.openConnectionUrls)
-                ? parsed.openConnectionUrls.filter((url) => typeof url === 'string')
-                : lastConnectionUrl ? [lastConnectionUrl] : [],
-            trustedCertificateAuthorities: Array.isArray(parsed.trustedCertificateAuthorities)
-                ? parsed.trustedCertificateAuthorities.filter((entry) => Boolean(entry)
-                    && typeof entry.origin === 'string'
-                    && typeof entry.fingerprint256 === 'string'
-                    && typeof entry.subject === 'string'
-                    && typeof entry.trustedAt === 'number')
-                : [],
-            desktopPreferences: normalizeDesktopPreferences(parsed.desktopPreferences),
-        };
-    }
-    catch {
-        return defaultConfig();
-    }
-}
-function writeDesktopConfig(config) {
-    fs.mkdirSync(termdockDir, { recursive: true, mode: 0o700 });
-    const temporaryPath = `${desktopConfigPath}.${process.pid}.tmp`;
-    fs.writeFileSync(temporaryPath, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
-    fs.renameSync(temporaryPath, desktopConfigPath);
-}
-function readServerState() {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(serverStatePath, 'utf8'));
-        if (typeof parsed.pid !== 'number'
-            || !Number.isInteger(parsed.pid)
-            || typeof parsed.host !== 'string'
-            || typeof parsed.port !== 'number') {
-            return null;
-        }
-        return parsed;
-    }
-    catch {
-        return null;
-    }
-}
-function isProcessRunning(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function stateUrl(state) {
-    if (state.localUrl)
-        return normalizeServiceUrl(state.localUrl);
-    const scheme = state.scheme ?? 'http';
-    const host = state.host === '0.0.0.0' ? 'localhost' : state.host;
-    return `${scheme}://${host}:${state.port}`;
-}
-async function fetchWithTimeout(url) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), HEALTH_TIMEOUT_MS);
-    try {
-        // Electron's network stack follows the macOS Keychain trust store. Node's
-        // global fetch does not, so a healthy local service using Termdock's
-        // mkcert certificate could otherwise be reported as a failed start.
-        return await net.fetch(url, {
-            signal: controller.signal,
-            redirect: 'error',
-            headers: { Accept: 'application/json' },
-        });
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-async function fetchJsonWithCertificateAuthority(rawUrl, certificateAuthority) {
-    return await new Promise((resolve, reject) => {
-        const request = https.get(rawUrl, {
-            agent: false,
-            ca: certificateAuthority,
-            rejectUnauthorized: true,
-            headers: { Accept: 'application/json' },
-        }, (response) => {
-            const chunks = [];
-            let size = 0;
-            response.on('data', (chunk) => {
-                size += chunk.length;
-                if (size > 256 * 1024) {
-                    request.destroy(new Error('服务响应过大'));
-                    return;
-                }
-                chunks.push(chunk);
-            });
-            response.on('end', () => {
-                try {
-                    const body = Buffer.concat(chunks).toString('utf8');
-                    resolve({
-                        status: response.statusCode ?? 0,
-                        json: body ? JSON.parse(body) : null,
-                    });
-                }
-                catch {
-                    reject(new Error('服务返回了无效的 JSON'));
-                }
-            });
-        });
-        request.setTimeout(HEALTH_TIMEOUT_MS, () => request.destroy(new Error('连接超时')));
-        request.on('error', reject);
-    });
-}
-async function probeServiceWithCertificateAuthority(rawUrl, certificateAuthority) {
-    const url = normalizeServiceUrl(rawUrl);
-    try {
-        const healthResponse = await fetchJsonWithCertificateAuthority(`${url}/health`, certificateAuthority);
-        if (healthResponse.status < 200 || healthResponse.status >= 300) {
-            return { ok: false, url, error: `健康检查返回 HTTP ${healthResponse.status}` };
-        }
-        const health = healthResponse.json;
-        if (health?.status !== 'ok') {
-            return { ok: false, url, error: '目标地址不是可识别的 Termdock 服务' };
-        }
-        try {
-            const metadataResponse = await fetchJsonWithCertificateAuthority(`${url}/api/meta`, certificateAuthority);
-            if (metadataResponse.status >= 200 && metadataResponse.status < 300) {
-                const metadata = metadataResponse.json;
-                if (metadata?.product && metadata.product !== 'termdock') {
-                    return { ok: false, url, error: '目标服务的产品标识不是 Termdock' };
-                }
-                return {
-                    ok: true,
-                    url,
-                    version: typeof metadata?.version === 'string' ? metadata.version : undefined,
-                    protocolVersion: typeof metadata?.protocolVersion === 'number'
-                        ? metadata.protocolVersion
-                        : undefined,
-                };
-            }
-        }
-        catch {
-            // Older Termdock releases do not expose /api/meta.
-        }
-        return { ok: true, url };
-    }
-    catch (error) {
-        return { ok: false, url, error: networkErrorDetails(error) };
-    }
-}
-async function probeService(rawUrl) {
-    let url;
-    try {
-        url = normalizeServiceUrl(rawUrl);
-    }
-    catch (error) {
-        return { ok: false, url: rawUrl, error: error instanceof Error ? error.message : String(error) };
-    }
-    try {
-        const healthResponse = await fetchWithTimeout(`${url}/health`);
-        if (!healthResponse.ok) {
-            return { ok: false, url, error: `健康检查返回 HTTP ${healthResponse.status}` };
-        }
-        const health = await healthResponse.json();
-        if (health.status !== 'ok') {
-            return { ok: false, url, error: '目标地址不是可识别的 Termdock 服务' };
-        }
-        try {
-            const metadataResponse = await fetchWithTimeout(`${url}/api/meta`);
-            if (metadataResponse.ok) {
-                const metadata = await metadataResponse.json();
-                if (metadata.product && metadata.product !== 'termdock') {
-                    return { ok: false, url, error: '目标服务的产品标识不是 Termdock' };
-                }
-                return {
-                    ok: true,
-                    url,
-                    version: typeof metadata.version === 'string' ? metadata.version : undefined,
-                    protocolVersion: typeof metadata.protocolVersion === 'number'
-                        ? metadata.protocolVersion
-                        : undefined,
-                };
-            }
-        }
-        catch {
-            // Older Termdock releases do not expose /api/meta. A valid health
-            // response is enough to allow a backwards-compatible connection.
-        }
-        return { ok: true, url };
-    }
-    catch (error) {
-        const message = error instanceof Error && error.name === 'AbortError'
-            ? '连接超时'
-            : networkErrorDetails(error);
-        return { ok: false, url, error: message };
-    }
-}
-async function probeServiceWithLocalNetworkPermission(rawUrl, options = {}) {
-    let normalizedUrl;
-    try {
-        normalizedUrl = normalizeServiceUrl(rawUrl);
-    }
-    catch {
-        return await probeService(rawUrl);
-    }
-    // Do the first macOS HTTPS probe with Node TLS. Sending an untrusted
-    // certificate through Chromium first permanently caches that rejection for
-    // the process and prevents an immediate retry after the user approves it.
-    if (options.interactive !== false && canOfferCertificateTrust(normalizedUrl)
-        && trustedCertificateAuthorityFor(normalizedUrl)) {
-        const certificate = await requestCertificateTrust(normalizedUrl);
-        if (!certificate)
-            return { ok: false, url: normalizedUrl, error: 'HTTPS 证书尚未受信任' };
-    }
-    const approvedAuthority = sessionTrustedCertificateAuthorities.get(new URL(normalizedUrl).origin);
-    let probe = approvedAuthority
-        ? await probeServiceWithCertificateAuthority(normalizedUrl, approvedAuthority)
-        : canOfferCertificateTrust(normalizedUrl)
-            ? await probeServiceWithCertificateAuthority(normalizedUrl)
-            : await probeService(normalizedUrl);
-    if (probe.ok)
-        return probe;
-    let parsedProbeUrl;
-    try {
-        parsedProbeUrl = new URL(probe.url);
-    }
-    catch {
-        return probe;
-    }
-    if (canOfferCertificateTrust(probe.url) && isCertificateTrustError(probe.error)) {
-        if (options.interactive === false)
-            return probe;
-        const certificate = await requestCertificateTrust(probe.url);
-        if (!certificate) {
-            return { ...probe, error: 'HTTPS 证书尚未受信任' };
-        }
-        return await probeServiceWithCertificateAuthority(rawUrl, certificate.certificatePem);
-    }
-    if (!isLocalNetworkTarget(parsedProbeUrl) || !looksLikeLocalNetworkPermissionError(probe.error)) {
-        return probe;
-    }
-    if (options.interactive === false)
-        return probe;
-    if (!(await requestLocalNetworkPermissionRetry(probe.url))) {
-        return { ...probe, error: 'Termdock 尚未获得 macOS 本地网络权限' };
-    }
-    probe = await probeService(rawUrl);
-    return probe;
-}
-async function getLocalServiceStatus() {
-    const state = readServerState();
-    if (!state || !isProcessRunning(state.pid)) {
-        return { running: false, state, probe: null };
-    }
-    const probe = await probeService(stateUrl(state));
-    return { running: probe.ok, state, probe };
-}
-async function snapshot() {
-    const config = readDesktopConfig();
-    return {
-        appVersion: app.getVersion(),
-        localService: { ...await getLocalServiceStatus(), setup: localServiceSetup.status },
-        connections: config.connections,
-        lastConnectionUrl: config.lastConnectionUrl,
-        desktopPreferences: config.desktopPreferences,
-    };
-}
-function bundledClientDist() {
-    return app.isPackaged
-        ? path.join(process.resourcesPath, 'client')
-        : path.join(projectRoot, 'dist', 'client');
-}
-async function connectWindow(rawUrl, options = {}) {
-    if (options.focus !== false) {
-        try {
-            certificateTrustRequests.retry(new URL(normalizeServiceUrl(rawUrl)).origin);
-        }
-        catch {
-            return await probeService(rawUrl);
-        }
-    }
-    const known = readDesktopConfig().connections.find(item => (item.serviceOrigin || item.url) === normalizeServiceUrl(rawUrl));
-    let probe = known?.targetPeerId ? { ok: true, url: normalizeServiceUrl(rawUrl) } : await probeServiceWithLocalNetworkPermission(rawUrl, {
-        interactive: options.focus !== false,
-    });
-    if (!probe.ok)
-        return probe;
-    const parsed = new URL(probe.url);
-    const key = parsed.origin;
-    const existingWindow = serviceWindows.get(key) ?? (known?.targetPeerId && !options.invitation
-        ? [...serviceWindows.values()].find(window => !window.isDestroyed() && serviceWindowPeers.get(window) === known.targetPeerId)
-        : undefined);
-    if (existingWindow && !existingWindow.isDestroyed()) {
-        const existingOrigin = windowServiceOrigins.get(existingWindow);
-        // An alternate address is still the same service. Keep the existing
-        // renderer and its storage partition instead of navigating it across origins.
-        if (existingOrigin && existingOrigin !== key) {
-            if (options.focus !== false) {
-                mainWindow?.hide();
-                showAndFocusWindow(existingWindow);
-            }
-            return { ok: true, url: existingOrigin };
-        }
-        if (options.persist !== false) {
-            const config = readDesktopConfig();
-            if (options.updateLastConnection !== false)
-                config.lastConnectionUrl = probe.url;
-            config.openConnectionUrls = [
-                ...config.openConnectionUrls.filter((url) => {
-                    try {
-                        return new URL(url).origin !== key;
-                    }
-                    catch {
-                        return false;
-                    }
-                }),
-                probe.url,
-            ];
-            const existing = config.connections.find((entry) => entry.url === probe.url);
-            if (existing)
-                existing.lastConnectedAt = Date.now();
-            writeDesktopConfig(config);
-        }
-        if (options.invitation || await serviceDocumentNeedsReload(existingWindow.webContents, key)) {
-            if (options.invitation)
-                pendingServiceInvitations.set(existingWindow, options.invitation);
-            await existingWindow.loadURL(probe.url);
-        }
-        if (options.focus !== false) {
-            mainWindow?.hide();
-            showAndFocusWindow(existingWindow);
-        }
-        else {
-            existingWindow.showInactive();
-        }
-        return probe;
-    }
-    // Existing windows keep their document when transport connectivity changes.
-    // New direct windows use the target's own frontend; a saved relay is the only
-    // reason to bootstrap a local frontend under an unreachable target origin.
-    if (known?.targetPeerId) {
-        probe = await probeServiceWithLocalNetworkPermission(rawUrl, { interactive: options.focus !== false });
-    }
-    const frontendSource = selectServiceFrontend(probe.ok, known);
-    if (!frontendSource)
-        return probe;
-    if (frontendSource === 'bundled')
-        probe = { ok: true, url: normalizeServiceUrl(rawUrl) };
-    const workspaceWindow = createDesktopWindow({ serviceOrigin: key, label: serviceLabel(probe.url) });
-    if (known?.targetPeerId)
-        serviceWindowPeers.set(workspaceWindow, known.targetPeerId);
-    try {
-        await prepareServiceFrontend(workspaceWindow.webContents.session, key, frontendSource, bundledClientDist);
-    }
-    catch (error) {
-        workspaceWindow.destroy();
-        return { ...probe, ok: false, error: networkErrorDetails(error) };
-    }
-    if (options.invitation)
-        pendingServiceInvitations.set(workspaceWindow, options.invitation);
-    serviceWindows.set(key, workspaceWindow);
-    broadcastServiceActivity();
-    while (!workspaceWindow.isDestroyed()) {
-        try {
-            const load = workspaceWindow.loadURL(probe.url);
-            if (options.focus === false) {
-                await Promise.race([
-                    load,
-                    new Promise((_resolve, reject) => {
-                        const timer = setTimeout(() => reject(new Error('恢复连接超时')), RESTORE_LOAD_TIMEOUT_MS);
-                        timer.unref();
-                    }),
-                ]);
-            }
-            else {
-                await load;
-            }
-            if (options.persist !== false) {
-                const config = readDesktopConfig();
-                if (options.updateLastConnection !== false)
-                    config.lastConnectionUrl = probe.url;
-                config.openConnectionUrls = [
-                    ...config.openConnectionUrls.filter((url) => {
-                        try {
-                            return new URL(url).origin !== key;
-                        }
-                        catch {
-                            return false;
-                        }
-                    }),
-                    probe.url,
-                ];
-                const existing = config.connections.find((entry) => entry.url === probe.url);
-                if (existing)
-                    existing.lastConnectedAt = Date.now();
-                writeDesktopConfig(config);
-            }
-            restorableServiceWindows.add(workspaceWindow);
-            if (options.focus !== false) {
-                mainWindow?.hide();
-                showAndFocusWindow(workspaceWindow);
-            }
-            else {
-                // Restored workspaces must be real visible macOS windows so App Expose
-                // can select them, but opening several at launch must not steal focus
-                // from each other.
-                workspaceWindow.showInactive();
-            }
-            return probe;
-        }
-        catch (error) {
-            const message = networkErrorDetails(error);
-            if (options.focus === false) {
-                workspaceWindow.destroy();
-                return { ...probe, ok: false, error: message };
-            }
-            if (isLocalNetworkTarget(parsed) && looksLikeLocalNetworkPermissionError(error)) {
-                if (await requestLocalNetworkPermissionRetry(probe.url))
-                    continue;
-                workspaceWindow.destroy();
-                return { ...probe, ok: false, error: 'Termdock 尚未获得 macOS 本地网络权限' };
-            }
-            workspaceWindow.destroy();
-            await showDesktopMessageBox({
-                type: 'error',
-                title: '连接 Termdock 服务失败',
-                message: `无法打开 ${probe.url}`,
-                detail: message,
-            });
-            return { ...probe, ok: false, error: message };
-        }
-    }
-    return { ...probe, ok: false, error: 'Termdock 窗口已关闭' };
-}
-async function showConnectionCenter() {
-    if (!mainWindow || mainWindow.isDestroyed()) {
-        mainWindow = createDesktopWindow();
-    }
-    const rendererPath = app.isPackaged
-        ? path.join(process.resourcesPath, 'renderer', 'index.html')
-        : path.join(projectRoot, 'desktop', 'renderer', 'index.html');
-    await mainWindow?.loadFile(rendererPath);
-    if (mainWindow)
-        showAndFocusWindow(mainWindow);
-}
-async function showStartupProgress(message) {
-    if (!startupRestoreActive)
-        return;
-    startupProgressMessage = message;
-    await showConnectionCenter();
-    if (!startupRestoreActive || !mainWindow || mainWindow.isDestroyed())
-        return;
-    mainWindow.webContents.send('desktop:startup-progress', startupProgressMessage);
-}
-function updateStartupProgress(message) {
-    if (!startupRestoreActive)
-        return;
-    startupProgressMessage = message;
-    if (mainWindow && !mainWindow.isDestroyed()) {
-        mainWindow.webContents.send('desktop:startup-progress', startupProgressMessage);
-    }
-}
-function finishStartupProgress() {
-    startupRestoreActive = false;
-    if (!mainWindow || mainWindow.isDestroyed())
-        return;
-    mainWindow.webContents.send('desktop:startup-progress', null);
-}
-function scheduleServiceWindowRecovery(window, reason, delayMs = 750) {
-    if (window.isDestroyed() || !windowServiceOrigins.has(window))
-        return;
-    const previous = serviceWindowRecoveryTimers.get(window);
-    if (previous)
-        clearTimeout(previous);
-    const timer = setTimeout(() => {
-        serviceWindowRecoveryTimers.delete(window);
-        void recoverServiceWindow(window, reason);
-    }, delayMs);
-    timer.unref();
-    serviceWindowRecoveryTimers.set(window, timer);
-}
-async function recoverServiceWindow(window, reason) {
-    if (window.isDestroyed() || serviceWindowRecoveryInFlight.has(window))
-        return;
-    const serviceOrigin = windowServiceOrigins.get(window);
-    if (!serviceOrigin)
-        return;
-    serviceWindowRecoveryInFlight.add(window);
-    try {
-        let probeTimer = null;
-        const probe = await Promise.race([
-            probeServiceWithLocalNetworkPermission(serviceOrigin, { interactive: false }),
-            new Promise((resolve) => {
-                probeTimer = setTimeout(() => resolve({
-                    ok: false,
-                    url: serviceOrigin,
-                    error: '桌面恢复健康检查超时',
-                }), SERVICE_RECOVERY_PROBE_TIMEOUT_MS);
-                probeTimer.unref();
-            }),
-        ]);
-        if (probeTimer)
-            clearTimeout(probeTimer);
-        if (!probe.ok || window.isDestroyed())
-            return;
-        if (!(await serviceDocumentNeedsReload(window.webContents, serviceOrigin)) || window.isDestroyed())
-            return;
-        console.warn(`[desktop-recovery] reloading ${serviceOrigin} after ${reason}`);
-        await window.loadURL(probe.url);
-    }
-    catch (error) {
-        console.warn(`[desktop-recovery] ${serviceOrigin} recovery after ${reason} failed: ${networkErrorDetails(error)}`);
-    }
-    finally {
-        serviceWindowRecoveryInFlight.delete(window);
-    }
-}
-function createDesktopWindow(options) {
-    const serviceSession = options
-        ? session.fromPartition(`persist:termdock-service-${crypto
-            .createHash('sha256')
-            .update(options.serviceOrigin)
-            .digest('hex')
-            .slice(0, 24)}`)
-        : null;
-    if (serviceSession)
-        installCertificateVerifyProcedure(serviceSession, options?.serviceOrigin);
-    // macOS clips the old fixed width on smaller displays but leaves the fixed
-    // height untouched. Size workspace windows to the active display's usable
-    // area before loading, including restored windows shown without focus.
-    const workspaceBounds = options && process.platform === 'darwin'
-        ? screen.getDisplayNearestPoint(screen.getCursorScreenPoint()).workArea
-        : { width: options ? 1500 : 1280, height: 820 };
-    const window = new BrowserWindow({
-        title: options ? `Termdock — ${options.label}` : 'Termdock — 连接中心',
-        show: false,
-        ...workspaceBounds,
-        minWidth: 760,
-        minHeight: 520,
-        backgroundColor: 'rgb(28, 27, 26)',
-        titleBarStyle: 'hiddenInset',
-        trafficLightPosition: { x: 16, y: 16 },
-        webPreferences: {
-            ...(serviceSession ? { session: serviceSession } : {}),
-            preload: path.join(currentDir, 'preload.cjs'),
-            nodeIntegration: false,
-            contextIsolation: true,
-            sandbox: true,
-            // A service window owns live terminal streams. If Chromium suspends it
-            // while macOS places the app in the background, tens of seconds of WS
-            // messages can hit the renderer in one burst when the user returns.
-            backgroundThrottling: shouldThrottleDesktopRenderer(Boolean(options)),
-        },
-    });
-    if (options)
-        windowServiceOrigins.set(window, options.serviceOrigin);
-    if (options) {
-        window.webContents.on('certificate-error', (event, url, error, certificate, callback) => {
-            if (new URL(url).origin !== options.serviceOrigin
-                || !canOfferCertificateTrust(url) || !isCertificateTrustError(error))
-                return;
-            event.preventDefault();
-            void resolveServiceCertificateTrust(options.serviceOrigin, new URL(url).hostname, certificate.data, () => requestCertificateTrust(options.serviceOrigin)).then(callback, () => callback(false));
-        });
-    }
-    if (options) {
-        window.webContents.on('page-title-updated', (event) => {
-            event.preventDefault();
-            window.setTitle(`Termdock — ${options.label}`);
-        });
-    }
-    window.webContents.setWindowOpenHandler(({ url }) => {
-        if (isExternalLinkStagingUrl(url)) {
-            return {
-                action: 'allow',
-                overrideBrowserWindowOptions: {
-                    show: false,
-                    webPreferences: {
-                        nodeIntegration: false,
-                        contextIsolation: true,
-                        sandbox: true,
-                    },
-                },
-            };
-        }
-        openExternalLink(url);
-        return { action: 'deny' };
-    });
-    window.webContents.on('did-create-window', (childWindow, details) => {
-        if (!isExternalLinkStagingUrl(details.url))
-            return;
-        childWindow.hide();
-        childWindow.webContents.on('will-navigate', (event, url) => {
-            event.preventDefault();
-            openExternalLink(url);
-            childWindow.close();
-        });
-    });
-    window.webContents.on('will-navigate', (event, url) => {
-        const serviceOrigin = windowServiceOrigins.get(window);
-        if (!serviceOrigin)
-            return;
-        try {
-            if (new URL(url).origin === serviceOrigin)
-                return;
-        }
-        catch {
-            // Block malformed navigations.
-        }
-        event.preventDefault();
-        openExternalLink(url);
-    });
-    window.webContents.on('did-finish-load', () => {
-        if (!windowServiceOrigins.has(window))
-            return;
-        void window.webContents.insertCSS(`
-      html[data-termdock-desktop='true'] {
-        --safe-top-inset: max(env(safe-area-inset-top, 0px), 38px) !important;
-      }
-      html[data-termdock-desktop='true'] #root {
-        padding-top: 0 !important;
-      }
-      html[data-termdock-desktop='true'] body::after {
-        display: none !important;
-      }
-      html[data-termdock-desktop='true'] #root main > div > div:first-child {
-        padding-left: 80px !important;
-        position: relative;
-        -webkit-app-region: no-drag;
-      }
-      html[data-termdock-desktop='true'] #root main > div > div:first-child::before {
-        content: '';
-        position: absolute;
-        top: 0;
-        bottom: 0;
-        left: 50%;
-        width: min(240px, 25vw);
-        transform: translateX(-50%);
-        pointer-events: none;
-        -webkit-app-region: drag;
-      }
-      html[data-termdock-desktop='true'] #root .h-full.flex.flex-col.app-chrome-bg.border-r > .shrink-0.border-b {
-        padding-left: 80px !important;
-        -webkit-app-region: drag;
-      }
-      html[data-termdock-desktop='true'] #root button,
-      html[data-termdock-desktop='true'] #root a,
-      html[data-termdock-desktop='true'] #root input,
-      html[data-termdock-desktop='true'] #root textarea,
-      html[data-termdock-desktop='true'] #root select,
-      html[data-termdock-desktop='true'] #root [data-rbd-draggable-id] {
-        -webkit-app-region: no-drag;
-      }
-      html[data-termdock-desktop='true'] [data-sidebar='right'] {
-        padding-top: 0 !important;
-      }
-      html[data-termdock-desktop='true'] [data-sidebar='right'][style*='pointer-events: auto'] {
-        transform: none !important;
-      }
-      html[data-termdock-desktop='true'] [data-sidebar='right'] > div:first-child {
-        -webkit-app-region: no-drag;
-      }
-      html[data-termdock-desktop='true'] [data-sidebar='right'] > div:first-child > div:first-child > .min-w-0.flex-1 {
-        -webkit-app-region: drag;
-      }
-      html[data-termdock-desktop='true'] [data-sidebar='right'] div:has(> [data-right-search]) + div:has(> button[aria-pressed]) {
-        width: fit-content !important;
-        margin-left: auto !important;
-      }
-      html[data-termdock-desktop='true'] [data-sidebar='right'] div:has(> [data-right-search]) + div:has(> button[aria-pressed]) > button {
-        flex: none !important;
-        padding: 0.125rem 0.5rem !important;
-        font-size: 10px !important;
-      }
-    `);
-    });
-    window.webContents.on('did-fail-load', (_event, _errorCode, _errorDescription, _validatedURL, isMainFrame) => {
-        if (isMainFrame)
-            scheduleServiceWindowRecovery(window, 'main-frame-load-failure');
-    });
-    window.webContents.on('render-process-gone', (_event, details) => {
-        scheduleServiceWindowRecovery(window, `renderer-${details.reason}`);
-    });
-    window.on('unresponsive', () => scheduleServiceWindowRecovery(window, 'unresponsive'));
-    window.on('closed', () => {
-        if (mainWindow === window)
-            mainWindow = null;
-        if (lastFocusedServiceWindow === window)
-            lastFocusedServiceWindow = null;
-        const serviceOrigin = windowServiceOrigins.get(window);
-        if (serviceOrigin && serviceWindows.get(serviceOrigin) === window) {
-            serviceWindows.delete(serviceOrigin);
-            reportedServiceActivity.delete(serviceOrigin);
-            observedServiceActivity.delete(serviceOrigin);
-            broadcastServiceActivity();
-        }
-    });
-    window.on('focus', () => {
-        if (windowServiceOrigins.has(window))
-            lastFocusedServiceWindow = window;
-        broadcastServiceActivity();
-        // User is looking at the app — the Dock badge has served its purpose.
-        clearUnreadNotifications();
-        scheduleServiceWindowRecovery(window, 'window-focus');
-    });
-    window.on('close', (event) => {
-        const closingForQuit = isQuitting || isDesktopUpdateInstalling();
-        const serviceOrigin = windowServiceOrigins.get(window);
-        if (serviceOrigin && !closingForQuit && restorableServiceWindows.has(window)) {
-            const config = readDesktopConfig();
-            config.openConnectionUrls = config.openConnectionUrls.filter((url) => {
-                try {
-                    return new URL(url).origin !== serviceOrigin;
-                }
-                catch {
-                    return false;
-                }
-            });
-            writeDesktopConfig(config);
-        }
-        if (window === mainWindow && process.platform === 'darwin' && !closingForQuit) {
-            event.preventDefault();
-            window.hide();
-        }
-    });
-    return window;
-}
-function installIpcHandlers() {
-    ipcMain.handle('desktop:read-clipboard-files', (event, options) => {
-        const sourceWindow = BrowserWindow.fromWebContents(event.sender);
-        const origin = sourceWindow ? windowServiceOrigins.get(sourceWindow) : undefined;
-        if (!origin || event.senderFrame !== event.sender.mainFrame
-            || new URL(event.sender.getURL()).origin !== origin)
-            throw new Error('未授权的服务窗口');
-        return readClipboardFiles(options);
-    });
-    ipcMain.handle('desktop:read-clipboard-image', (event) => {
-        const sourceWindow = BrowserWindow.fromWebContents(event.sender);
-        if (!sourceWindow || !windowServiceOrigins.has(sourceWindow))
-            return null;
-        const image = clipboard.readImage();
-        if (image.isEmpty())
-            return null;
-        const png = image.toPNG();
-        return png.buffer.slice(png.byteOffset, png.byteOffset + png.byteLength);
-    });
-    const collaborationOrigin = (event) => {
-        const window = BrowserWindow.fromWebContents(event.sender);
-        const origin = window ? windowServiceOrigins.get(window) : undefined;
-        if (!origin || event.senderFrame !== event.sender.mainFrame
-            || new URL(event.sender.getURL()).origin !== origin)
-            throw new Error('未授权的服务窗口');
-        return origin;
-    };
-    ipcMain.handle('desktop:collaboration-focus', (event, id) => {
-        collaborationOrigin(event);
-        const address = sessionAddress(id);
-        const target = address ? serviceWindows.get(address.origin) : null;
-        if (!target || target.isDestroyed())
-            return false;
-        showAndFocusWindow(target);
-        target.webContents.send('desktop:focus-session', address.id);
-        return true;
-    });
-    let deviceInfo;
-    ipcMain.handle('desktop:device-info', event => {
-        collaborationOrigin(event);
-        return deviceInfo ??= (async () => {
-            let model = '';
-            if (process.platform === 'darwin') {
-                try {
-                    model = (await execFileAsync('/usr/sbin/sysctl', ['-n', 'hw.model'], { timeout: 3000 })).stdout.trim();
-                }
-                catch { /* Optional hardware information. */ }
-            }
-            return { system: process.platform === 'darwin' ? `macOS ${process.getSystemVersion()}` : `${os.type()} ${os.release()}`,
-                client: `Termdock ${app.getVersion()}`, model, arch: process.arch, cpu: os.cpus()[0]?.model || '', hostname: os.hostname(), mode: '桌面客户端' };
-        })();
-    });
-    ipcMain.handle('desktop:snapshot', () => snapshot());
-    const connectionCenterSender = (event) => {
-        const rendererPath = app.isPackaged
-            ? path.join(process.resourcesPath, 'renderer', 'index.html')
-            : path.join(projectRoot, 'desktop', 'renderer', 'index.html');
-        if (!mainWindow || event.sender !== mainWindow.webContents
-            || event.senderFrame !== event.sender.mainFrame
-            || event.senderFrame.url !== pathToFileURL(rendererPath).href) {
-            throw new Error('请在连接中心准备本机服务。');
-        }
-    };
-    ipcMain.handle('desktop:prepare-local-service', async (event, install) => {
-        connectionCenterSender(event);
-        await localServiceSetup.prepare(install === true);
-        return snapshot();
-    });
-    ipcMain.handle('desktop:download-node', async (event) => {
-        connectionCenterSender(event);
-        await shell.openExternal('https://nodejs.org/en/download');
-    });
-    const directorySender = (event) => {
-        const window = BrowserWindow.fromWebContents(event.sender);
-        if (!window || event.senderFrame !== event.sender.mainFrame)
-            throw new Error('无法访问服务列表。');
-        const origin = windowServiceOrigins.get(window);
-        const url = new URL(event.senderFrame.url);
-        if (origin ? url.origin !== origin || url.pathname !== '/' : window !== mainWindow || url.protocol !== 'file:')
-            throw new Error('无法访问服务列表。');
-        return window;
-    };
-    const directoryChanged = () => {
-        const connections = readDesktopConfig().connections;
-        for (const [origin, window] of serviceWindows) {
-            const connection = connections.find(item => (item.serviceOrigin || item.url) === origin);
-            if (connection?.targetPeerId)
-                serviceWindowPeers.set(window, connection.targetPeerId);
-        }
-        installMenu();
-        for (const window of BrowserWindow.getAllWindows())
-            window.webContents.send('desktop:service-connections-changed');
-        broadcastServiceActivity();
-    };
-    ipcMain.handle('desktop:service-connections', event => { directorySender(event); return readDesktopConfig().connections; });
-    ipcMain.handle('desktop:save-service-connection', (event, input) => {
-        directorySender(event);
-        const config = readDesktopConfig();
-        Object.assign(config, saveServiceConnection(config.connections, config.removedServiceKeys || [], input));
-        writeDesktopConfig(config);
-        directoryChanged();
-        return config.connections;
-    });
-    ipcMain.handle('desktop:import-service-connection', (event, input) => {
-        directorySender(event);
-        const config = readDesktopConfig();
-        config.connections = importServiceConnection(config.connections, config.removedServiceKeys || [], input);
-        writeDesktopConfig(config);
-        directoryChanged();
-        return config.connections;
-    });
-    ipcMain.handle('desktop:remove-service-connection', (event, id) => {
-        directorySender(event);
-        const config = readDesktopConfig();
-        const removed = config.connections.find(item => item.id === id);
-        if (removed)
-            config.removedServiceKeys = [...new Set([...(config.removedServiceKeys || []), ...serviceConnectionKeys(removed)])].slice(-768);
-        config.connections = config.connections.filter(item => item.id !== id);
-        writeDesktopConfig(config);
-        directoryChanged();
-        return config.connections;
-    });
-    ipcMain.handle('desktop:current-service-connection', event => {
-        const window = directorySender(event), origin = windowServiceOrigins.get(window);
-        const connection = readDesktopConfig().connections.find(item => (item.serviceOrigin || item.url) === origin);
-        const invitation = pendingServiceInvitations.get(window);
-        pendingServiceInvitations.delete(window);
-        return connection ? { ...connection, ...(invitation ? { invitation } : {}) } : null;
-    });
-    ipcMain.handle('desktop:open-service-connection', async (event, input, rawInvitation) => {
-        directorySender(event);
-        const connection = serviceConnection(input), invitation = invitationForService(rawInvitation, connection);
-        // A bookmark pin is connection metadata, never authorization to the service.
-        const config = readDesktopConfig();
-        Object.assign(config, saveServiceConnection(config.connections, config.removedServiceKeys || [], connection));
-        writeDesktopConfig(config);
-        directoryChanged();
-        return connectWindow(connection.serviceOrigin || connection.url, { invitation });
-    });
-    ipcMain.handle('desktop:probe', (_event, url) => {
-        try {
-            certificateTrustRequests.retry(new URL(normalizeServiceUrl(url)).origin);
-        }
-        catch { /* probe reports invalid URLs */ }
-        return probeServiceWithLocalNetworkPermission(url);
-    });
-    ipcMain.handle('desktop:save-connection', async (_event, input) => {
-        const url = normalizeServiceUrl(input.url);
-        const config = readDesktopConfig();
-        const existing = config.connections.find((entry) => entry.url === url);
-        Object.assign(config, saveServiceConnection(config.connections, config.removedServiceKeys || [], {
-            id: existing?.id || crypto.randomUUID(),
-            label: input.label.trim() || new URL(url).host,
-            url,
-        }));
-        writeDesktopConfig(config);
-        installMenu();
-        return snapshot();
-    });
-    ipcMain.handle('desktop:remove-connection', async (_event, id) => {
-        const config = readDesktopConfig();
-        config.connections = config.connections.filter((entry) => entry.id !== id);
-        writeDesktopConfig(config);
-        installMenu();
-        return snapshot();
-    });
-    ipcMain.handle('desktop:connect', (_event, url) => connectWindow(url));
-    ipcMain.on('desktop:report-service-activity', (event, activity) => {
-        const sourceWindow = BrowserWindow.fromWebContents(event.sender);
-        if (!sourceWindow)
-            return;
-        const origin = windowServiceOrigins.get(sourceWindow);
-        if (!origin)
-            return;
-        const next = normalizeServiceActivity(activity);
-        const current = reportedServiceActivity.get(origin);
-        if (current?.runningCount === next.runningCount && current.reviewCount === next.reviewCount) {
-            // The sender may have just reloaded and still needs the complete roster.
-            sourceWindow.webContents.send('desktop:service-activity-changed', serviceActivitySnapshot(sourceWindow));
-            return;
-        }
-        reportedServiceActivity.set(origin, next);
-        broadcastServiceActivity();
-    });
-    ipcMain.on('desktop:observe-service-activity', (event, activity) => {
-        const sourceWindow = BrowserWindow.fromWebContents(event.sender);
-        if (!sourceWindow)
-            return;
-        const origin = windowServiceOrigins.get(sourceWindow);
-        if (!origin)
-            return;
-        const next = normalizeServiceActivity(activity);
-        const current = observedServiceActivity.get(origin);
-        if (current?.runningCount === next.runningCount && current.reviewCount === next.reviewCount)
-            return;
-        observedServiceActivity.set(origin, next);
-        broadcastServiceActivity();
-    });
-    ipcMain.handle('desktop:focus-service', (event, origin) => {
-        const sourceWindow = BrowserWindow.fromWebContents(event.sender);
-        if (!sourceWindow || !windowServiceOrigins.has(sourceWindow))
-            return false;
-        const targetWindow = serviceWindows.get(origin);
-        if (!targetWindow || targetWindow.isDestroyed())
-            return false;
-        showAndFocusWindow(targetWindow);
-        broadcastServiceActivity();
-        return true;
-    });
-    ipcMain.handle('desktop:update-preferences', async (_event, preferences) => {
-        updateDesktopPreferences({
-            ...(typeof preferences?.menuBarStatusEnabled === 'boolean'
-                ? { menuBarStatusEnabled: preferences.menuBarStatusEnabled }
-                : {}),
-            ...(typeof preferences?.floatingWidgetEnabled === 'boolean'
-                ? { floatingWidgetEnabled: preferences.floatingWidgetEnabled }
-                : {}),
-        });
-        return snapshot();
-    });
-    ipcMain.handle('desktop:status-snapshot', () => desktopStatusSnapshot());
-    ipcMain.handle('desktop:focus-next-service', (_event, scope) => {
-        const normalized = scope === 'running'
-            || scope === 'review'
-            || scope === 'all'
-            ? scope
-            : 'attention';
-        focusNextService(normalized);
-    });
-    ipcMain.handle('desktop:set-floating-metric-count', (event, count) => {
-        const sourceWindow = BrowserWindow.fromWebContents(event.sender);
-        if (sourceWindow !== floatingWidgetWindow || typeof count !== 'number' || !Number.isFinite(count))
-            return;
-        resizeFloatingWidget(count);
-    });
-    ipcMain.handle('desktop:disable-floating-widget', async () => {
-        updateDesktopPreferences({ floatingWidgetEnabled: false });
-        return snapshot();
-    });
-    ipcMain.handle('desktop:update-state', () => getDesktopUpdateState());
-    ipcMain.handle('desktop:check-update', () => checkForDesktopUpdates());
-    ipcMain.handle('desktop:install-update', () => installDownloadedDesktopUpdate());
-    ipcMain.handle('desktop:show-connection-center', () => showConnectionCenter());
-    ipcMain.handle('desktop:reveal-data-directory', async () => {
-        fs.mkdirSync(termdockDir, { recursive: true, mode: 0o700 });
-        const error = await shell.openPath(termdockDir);
-        if (error)
-            throw new Error(error);
-    });
-    ipcMain.handle('desktop:open-notification-settings', async () => {
-        await shell.openExternal('x-apple.systempreferences:com.apple.Notifications-Settings.extension?bundleId=com.jovines.termdock');
-    });
-    ipcMain.handle('desktop:prepare-notification-test', (event) => {
-        const sourceWindow = BrowserWindow.fromWebContents(event.sender);
-        if (sourceWindow && !sourceWindow.isDestroyed())
-            sourceWindow.minimize();
-    });
-    ipcMain.handle('desktop:show-notification', (event, payload) => {
-        if (!Notification.isSupported() || typeof payload?.title !== 'string')
-            return false;
-        const sourceWindow = BrowserWindow.fromWebContents(event.sender);
-        // The renderer also suppresses automatic notifications while focused, but
-        // enforce the rule in the native process as well so a focus race can never
-        // produce a foreground sound, Notification Center entry, or Dock badge.
-        if (sourceWindow?.isFocused())
-            return true;
-        // Web Notification tag semantics: a new notification with the same tag
-        // replaces the previous one instead of stacking.
-        const tag = typeof payload.tag === 'string' && payload.tag ? payload.tag : null;
-        if (tag) {
-            const previous = activeNotifications.get(tag);
-            if (previous) {
-                previous.close();
-                activeNotifications.delete(tag);
-            }
-        }
-        const notification = new Notification({
-            title: payload.title.slice(0, 160),
-            body: typeof payload.body === 'string' ? payload.body.slice(0, 1000) : undefined,
-            silent: payload.silent === true,
-        });
-        if (tag) {
-            activeNotifications.set(tag, notification);
-            notification.on('close', () => {
-                if (activeNotifications.get(tag) === notification)
-                    activeNotifications.delete(tag);
-            });
-        }
-        notification.on('click', () => {
-            const targetWindow = sourceWindow && !sourceWindow.isDestroyed()
-                ? sourceWindow
-                : focusedWorkspaceWindow();
-            targetWindow?.show();
-            targetWindow?.focus();
-            if (typeof payload.sessionId === 'string') {
-                targetWindow?.webContents.send('desktop:focus-session', payload.sessionId);
-            }
-        });
-        return new Promise((resolve) => {
-            let settled = false;
-            const finish = (delivered, error) => {
-                if (settled)
-                    return;
-                settled = true;
-                clearTimeout(timeout);
-                if (!delivered) {
-                    if (tag && activeNotifications.get(tag) === notification) {
-                        activeNotifications.delete(tag);
-                    }
-                    if (error)
-                        console.error(`[desktop notification] ${error}`);
-                    resolve(false);
-                    return;
-                }
-                unreadNotificationCount += 1;
-                app.setBadgeCount(unreadNotificationCount);
-                // macOS banners auto-dismiss even for "persistent" alerts; bounce the Dock
-                // icon so the signal survives until the user looks at the app.
-                if (payload.persistent === true && !sourceWindow?.isFocused()) {
-                    app.dock?.bounce('informational');
-                }
-                resolve(true);
-            };
-            notification.once('show', () => finish(true));
-            notification.once('failed', (_notificationEvent, error) => finish(false, error));
-            // macOS can silently discard notifications when this user disabled the
-            // app in System Settings. Do not report success or increment the Dock
-            // badge unless Electron confirms delivery.
-            const timeout = setTimeout(() => {
-                finish(false, 'macOS did not confirm notification delivery');
-            }, 2_000);
-            notification.show();
-        });
-    });
-}
-function installMenu() {
-    const sendCommand = (command) => {
-        focusedWorkspaceWindow()?.webContents.send('desktop:command', command);
-    };
-    const openService = (url) => {
-        void connectWindow(url).then((probe) => {
-            if (!probe.ok) {
-                void showDesktopMessageBox({
-                    type: 'error',
-                    title: '连接 Termdock 服务失败',
-                    message: `无法打开 ${probe.url}`,
-                    detail: probe.error,
-                });
-            }
-        });
-    };
-    const openLocalService = () => {
-        void getLocalServiceStatus().then((status) => {
-            if (status.running && status.state) {
-                openService(stateUrl(status.state));
-                return;
-            }
-            void showConnectionCenter();
-        });
-    };
-    const config = readDesktopConfig();
-    const localState = readServerState();
-    const localUrl = localState ? stateUrl(localState) : DEFAULT_LOCAL_URL;
-    const serviceItems = serviceMenuEntries(config.connections, localUrl)
-        .map(({ label, connection }) => ({
-        label,
-        click: connection
-            ? () => openService(connection.serviceOrigin || connection.url)
-            : openLocalService,
-    }));
-    const menu = Menu.buildFromTemplate([
-        {
-            label: 'Termdock',
-            submenu: [
-                { role: 'about' },
-                { type: 'separator' },
-                {
-                    label: '设置…',
-                    accelerator: 'CmdOrCtrl+,',
-                    click: () => focusedWorkspaceWindow()?.webContents.send('desktop:open-settings'),
-                },
-                {
-                    label: '新建连接或切换服务…',
-                    accelerator: 'CmdOrCtrl+N',
-                    click: () => void showConnectionCenter(),
-                },
-                { label: '打开服务', submenu: serviceItems },
-                {
-                    label: '检查更新…',
-                    click: () => void checkForDesktopUpdates({ presentNativeDialogs: true }),
-                },
-                {
-                    label: '打开 Termdock 数据目录',
-                    click: () => {
-                        fs.mkdirSync(termdockDir, { recursive: true, mode: 0o700 });
-                        void shell.openPath(termdockDir);
-                    },
-                },
-                { type: 'separator' },
-                { role: 'hide' },
-                { role: 'hideOthers' },
-                { role: 'unhide' },
-                { type: 'separator' },
-                { role: 'quit' },
-            ],
-        },
-        {
-            label: '文件',
-            submenu: [
-                {
-                    label: '新建会话',
-                    accelerator: 'CmdOrCtrl+T',
-                    click: () => sendCommand('new-session'),
-                },
-                {
-                    label: '关闭当前会话',
-                    accelerator: 'CmdOrCtrl+W',
-                    click: () => sendCommand('close-session'),
-                },
-                { type: 'separator' },
-                {
-                    label: '上一个会话',
-                    accelerator: 'CmdOrCtrl+Shift+[',
-                    click: () => sendCommand('previous-session'),
-                },
-                {
-                    label: '下一个会话',
-                    accelerator: 'CmdOrCtrl+Shift+]',
-                    click: () => sendCommand('next-session'),
-                },
-                { type: 'separator' },
-                {
-                    label: '上一个待处理',
-                    accelerator: 'CmdOrCtrl+Alt+[',
-                    click: () => sendCommand('previous-attention'),
-                },
-                {
-                    label: '下一个待处理',
-                    accelerator: 'CmdOrCtrl+Alt+]',
-                    click: () => sendCommand('next-attention'),
-                },
-            ],
-        },
-        {
-            label: '编辑',
-            submenu: [
-                { role: 'undo' },
-                { role: 'redo' },
-                { type: 'separator' },
-                { role: 'cut' },
-                { role: 'copy' },
-                { role: 'paste' },
-                { role: 'selectAll' },
-            ],
-        },
-        {
-            label: '显示',
-            submenu: [
-                {
-                    label: '切换会话侧栏',
-                    accelerator: 'CmdOrCtrl+B',
-                    click: () => sendCommand('toggle-left-sidebar'),
-                },
-                {
-                    label: '切换文件侧栏',
-                    accelerator: 'CmdOrCtrl+Shift+B',
-                    click: () => sendCommand('toggle-right-sidebar'),
-                },
-                { type: 'separator' },
-                { role: 'reload' },
-                { role: 'forceReload' },
-                { type: 'separator' },
-                { role: 'resetZoom' },
-                { role: 'zoomIn' },
-                { role: 'zoomOut' },
-                { type: 'separator' },
-                { role: 'togglefullscreen' },
-            ],
-        },
-        {
-            label: '窗口',
-            submenu: [
-                {
-                    label: '连接中心',
-                    accelerator: 'CmdOrCtrl+Shift+O',
-                    click: () => void showConnectionCenter(),
-                },
-                { label: '打开服务', submenu: serviceItems },
-                { type: 'separator' },
-                { role: 'minimize' },
-                { role: 'zoom' },
-                { role: 'front' },
-            ],
-        },
-    ]);
-    Menu.setApplicationMenu(menu);
-    app.dock?.setMenu(Menu.buildFromTemplate([
-        { label: '连接中心', click: () => void showConnectionCenter() },
-        { type: 'separator' },
-        ...serviceItems,
-    ]));
-}
-app.whenReady().then(async () => {
-    triggerLocalNetworkPermission();
-    configureLocalServiceCertificateTrust();
-    installIpcHandlers();
-    const localPreparation = localServiceSetup.prepare();
-    installMenu();
-    refreshDesktopStatusSurfaces();
-    screen.on('display-removed', keepFloatingWidgetOnScreen);
-    screen.on('display-metrics-changed', keepFloatingWidgetOnScreen);
-    powerMonitor.on('resume', () => {
-        for (const window of serviceWindows.values()) {
-            scheduleServiceWindowRecovery(window, 'system-resume', 1_200);
-        }
-    });
-    configureDesktopUpdater(showDesktopMessageBox);
-    subscribeDesktopUpdateState((state) => {
-        for (const window of BrowserWindow.getAllWindows()) {
-            if (!window.isDestroyed())
-                window.webContents.send('desktop:update-state-changed', state);
-        }
-    });
-    const startupConfig = readDesktopConfig();
-    const restoreUrls = startupConfig.openConnectionUrls;
-    startupRestoreActive = true;
-    const startupProgressTimer = setTimeout(() => {
-        void showStartupProgress('正在检查已保存连接…');
-    }, 350);
-    startupProgressTimer.unref();
-    let completedRestores = 0;
-    updateStartupProgress(`正在恢复连接 0/${restoreUrls.length}…`);
-    const restoreResults = await Promise.all(restoreUrls.map(async (url) => {
-        try {
-            if (['localhost', '127.0.0.1', '[::1]'].includes(new URL(url).hostname))
-                await localPreparation;
-        }
-        catch { /* The connection probe reports malformed saved URLs. */ }
-        const probe = await connectWindow(url, {
-            focus: false,
-            updateLastConnection: false,
-            persist: false,
-        });
-        completedRestores += 1;
-        updateStartupProgress(`正在恢复连接 ${completedRestores}/${restoreUrls.length}…`);
-        return probe;
-    }));
-    const restoredWindowCount = restoreResults.filter((probe) => probe.ok).length;
-    clearTimeout(startupProgressTimer);
-    finishStartupProgress();
-    if (restoredWindowCount > 0) {
-        let preferredOrigin = null;
-        try {
-            preferredOrigin = startupConfig.lastConnectionUrl
-                ? new URL(startupConfig.lastConnectionUrl).origin
-                : null;
-        }
-        catch {
-            // A malformed legacy value must not prevent the other saved windows
-            // from being restored.
-        }
-        const preferredWindow = preferredOrigin ? serviceWindows.get(preferredOrigin) : null;
-        showAndFocusWindow(preferredWindow ?? [...serviceWindows.values()][0]);
-    }
-    else {
-        await showConnectionCenter();
-    }
-    app.on('activate', () => {
-        const workspaceWindow = focusedWorkspaceWindow();
-        if (workspaceWindow) {
-            showAndFocusWindow(workspaceWindow);
-            return;
-        }
-        void showConnectionCenter();
-    });
-}).catch((error) => {
-    void dialog.showErrorBox('Termdock 启动失败', error instanceof Error ? error.message : String(error));
-    app.quit();
-});
-app.on('window-all-closed', () => {
-    // Keep the macOS application lifecycle conventional: closing the last
-    // window keeps the app available in the Dock.
-});
-app.on('before-quit', () => {
-    isQuitting = true;
-});
-export { PROTOCOL_VERSION };