Normalize release artifacts before publishing

.github/workflows/build.yml

@@ -32,6 +32,7 @@ jobs:
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: 'preview'
 
       - name: Restore
         run: dotnet restore ${{ env.Solution_Name }}
@@ -68,10 +69,18 @@ jobs:
             libxrender1 libxkbcommon-x11-0 \
             clang zlib1g-dev
 
+          # Ubuntu 24.04+ moved several packages to t64 names.
+          sudo apt-get install -y libasound2t64 || sudo apt-get install -y libasound2
+          sudo apt-get install -y libportaudio2t64 || sudo apt-get install -y libportaudio2
+
+          # Prefer modern WebKit package, fallback for older images.
+          sudo apt-get install -y libwebkit2gtk-4.1-dev || sudo apt-get install -y libwebkit2gtk-4.0-dev
+
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: 'preview'
 
       - name: Restore
         run: dotnet restore ${{ env.Solution_Name }}
@@ -98,10 +107,14 @@ jobs:
           fetch-depth: 0
           submodules: recursive
 
+      - name: Install dependencies
+        run: brew install portaudio
+
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: 'preview'
 
       - name: Restore
         run: dotnet restore ${{ env.Solution_Name }}
@@ -132,6 +145,7 @@ jobs:
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: 'preview'
 
       - name: Pack SDK and template packages
         shell: pwsh

.github/workflows/code-quality.yml

@@ -25,12 +25,13 @@ jobs:
         with:
           fetch-depth: 0
           submodules: recursive
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: 'preview'
 
       - name: Restore
         run: dotnet restore ${{ env.Solution_Name }}

.github/workflows/ddss-publish.yml

@@ -0,0 +1,166 @@
+name: DDSS
+
+on:
+  workflow_run:
+    workflows:
+      - PLONDS
+    types:
+      - completed
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag'
+        required: true
+        type: string
+
+env:
+  DOTNET_VERSION: '10.0.x'
+
+jobs:
+  publish:
+    if: ${{ github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      actions: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+      - name: Resolve release tag
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
+            RAW_TAG="${{ github.event.inputs.tag }}"
+            if [[ "$RAW_TAG" == v* ]]; then
+              TAG="$RAW_TAG"
+            else
+              TAG="v$RAW_TAG"
+            fi
+          else
+            gh run download "${{ github.event.workflow_run.id }}" -n plonds-run-metadata -D plonds-run-metadata
+            TAG="$(tr -d '\r\n' < plonds-run-metadata/tag.txt)"
+          fi
+
+          echo "RELEASE_TAG=${TAG}" >> "$GITHUB_ENV"
+          echo "S3_BASE_URL=${{ vars.S3_ENDPOINT }}/${{ vars.S3_BUCKET }}/lanmountain/update/releases/${TAG}/assets" >> "$GITHUB_ENV"
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: preview
+
+      - name: Prepare signing key
+        env:
+          UPDATE_PRIVATE_KEY_PEM: ${{ secrets.UPDATE_PRIVATE_KEY_PEM }}
+          PLONDS_SIGNING_KEY: ${{ secrets.PLONDS_SIGNING_KEY }}
+          PDC_SIGNING_KEY: ${{ secrets.PDC_SIGNING_KEY }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          KEY="${PLONDS_SIGNING_KEY:-}"
+          if [[ -z "$KEY" ]]; then KEY="${UPDATE_PRIVATE_KEY_PEM:-}"; fi
+          if [[ -z "$KEY" ]]; then KEY="${PDC_SIGNING_KEY:-}"; fi
+          if [[ -z "$KEY" ]]; then
+            echo "No signing key is configured."
+            exit 1
+          fi
+          printf '%s' "$KEY" > update-private-key.pem
+          echo "UPDATE_PRIVATE_KEY_PATH=$PWD/update-private-key.pem" >> "$GITHUB_ENV"
+
+      - name: Build PLONDS tool
+        run: dotnet build PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Tool/Plonds.Tool.csproj -c Release
+
+      - name: Download release assets
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p release-assets
+          gh release download "$RELEASE_TAG" -D release-assets
+          find release-assets -maxdepth 1 -type f | sort
+
+      - name: Upload release assets to Rainyun S3
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.S3_ACCESS_KEY }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.S3_SECRET_KEY }}
+          AWS_DEFAULT_REGION: ${{ vars.S3_REGION }}
+          AWS_REGION: ${{ vars.S3_REGION }}
+          S3_ENDPOINT: ${{ vars.S3_ENDPOINT }}
+          S3_BUCKET: ${{ vars.S3_BUCKET }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          aws --version
+          for file in release-assets/*; do
+            [[ -f "$file" ]] || continue
+            name="$(basename "$file")"
+            if [[ "$name" == "ddss.json" || "$name" == "ddss.json.sig" ]]; then
+              continue
+            fi
+            key="lanmountain/update/releases/${RELEASE_TAG}/assets/${name}"
+            sha256="$(sha256sum "$file" | awk '{print $1}')"
+            existing_sha="$(aws --endpoint-url "$S3_ENDPOINT" --region "$AWS_REGION" s3api head-object --bucket "$S3_BUCKET" --key "$key" --query 'Metadata.sha256' --output text 2>/dev/null || true)"
+            if [[ "$existing_sha" == "$sha256" ]]; then
+              echo "Skip existing asset: $name"
+              continue
+            fi
+            aws --endpoint-url "$S3_ENDPOINT" --region "$AWS_REGION" s3api put-object \
+              --bucket "$S3_BUCKET" \
+              --key "$key" \
+              --body "$file" \
+              --metadata "sha256=$sha256"
+          done
+
+      - name: Build DDSS manifest
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p ddss-output
+          dotnet run --project PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Tool/Plonds.Tool.csproj --configuration Release -- \
+            build-ddss \
+            --release-tag "$RELEASE_TAG" \
+            --assets-dir release-assets \
+            --output-dir ddss-output \
+            --private-key "$UPDATE_PRIVATE_KEY_PATH" \
+            --repository "${{ github.repository }}" \
+            --s3-base-url "$S3_BASE_URL"
+
+      - name: Upload DDSS manifest to release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          gh release upload "$RELEASE_TAG" ddss-output/ddss.json ddss-output/ddss.json.sig --clobber
+
+      - name: Upload DDSS manifest to Rainyun S3
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.S3_ACCESS_KEY }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.S3_SECRET_KEY }}
+          AWS_DEFAULT_REGION: ${{ vars.S3_REGION }}
+          AWS_REGION: ${{ vars.S3_REGION }}
+          S3_ENDPOINT: ${{ vars.S3_ENDPOINT }}
+          S3_BUCKET: ${{ vars.S3_BUCKET }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          for file in ddss-output/ddss.json ddss-output/ddss.json.sig; do
+            name="$(basename "$file")"
+            key="lanmountain/update/releases/${RELEASE_TAG}/assets/${name}"
+            sha256="$(sha256sum "$file" | awk '{print $1}')"
+            aws --endpoint-url "$S3_ENDPOINT" --region "$AWS_REGION" s3api put-object \
+              --bucket "$S3_BUCKET" \
+              --key "$key" \
+              --body "$file" \
+              --metadata "sha256=$sha256"
+          done

.github/workflows/plonds-build.yml

@@ -0,0 +1,235 @@
+name: PLONDS
+
+on:
+  release:
+    types:
+      - published
+      - prereleased
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag'
+        required: true
+        type: string
+      baseline_tag:
+        description: 'Optional baseline tag'
+        required: false
+        type: string
+      channel:
+        description: 'Update channel'
+        required: false
+        type: choice
+        default: stable
+        options:
+          - stable
+          - preview
+
+env:
+  DOTNET_VERSION: '10.0.x'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+      - name: Resolve release context
+        shell: bash
+        run: |
+          if [[ "${{ github.event_name }}" == "release" ]]; then
+            TAG="${{ github.event.release.tag_name }}"
+            if [[ "${{ github.event.release.prerelease }}" == "true" ]]; then
+              CHANNEL="preview"
+            else
+              CHANNEL="stable"
+            fi
+            BASELINE_TAG=""
+          else
+            RAW_TAG="${{ github.event.inputs.tag }}"
+            if [[ "${RAW_TAG}" == v* ]]; then
+              TAG="${RAW_TAG}"
+            else
+              TAG="v${RAW_TAG}"
+            fi
+            CHANNEL="${{ github.event.inputs.channel }}"
+            BASELINE_TAG="${{ github.event.inputs.baseline_tag }}"
+          fi
+
+          echo "RELEASE_TAG=${TAG}" >> "$GITHUB_ENV"
+          echo "RELEASE_VERSION=${TAG#v}" >> "$GITHUB_ENV"
+          echo "RELEASE_CHANNEL=${CHANNEL}" >> "$GITHUB_ENV"
+          echo "BASELINE_TAG_INPUT=${BASELINE_TAG}" >> "$GITHUB_ENV"
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: preview
+
+      - name: Prepare signing key
+        env:
+          UPDATE_PRIVATE_KEY_PEM: ${{ secrets.UPDATE_PRIVATE_KEY_PEM }}
+          PLONDS_SIGNING_KEY: ${{ secrets.PLONDS_SIGNING_KEY }}
+          PDC_SIGNING_KEY: ${{ secrets.PDC_SIGNING_KEY }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          KEY="${PLONDS_SIGNING_KEY:-}"
+          if [[ -z "$KEY" ]]; then KEY="${UPDATE_PRIVATE_KEY_PEM:-}"; fi
+          if [[ -z "$KEY" ]]; then KEY="${PDC_SIGNING_KEY:-}"; fi
+          if [[ -z "$KEY" ]]; then
+            echo "No signing key is configured."
+            exit 1
+          fi
+          printf '%s' "$KEY" > update-private-key.pem
+          echo "UPDATE_PRIVATE_KEY_PATH=$PWD/update-private-key.pem" >> "$GITHUB_ENV"
+
+      - name: Build PLONDS tool
+        run: dotnet build PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Tool/Plonds.Tool.csproj -c Release
+
+      - name: Resolve baseline plan
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+          $repo = '${{ github.repository }}'
+          $tag = $env:RELEASE_TAG
+          $baselineInput = $env:BASELINE_TAG_INPUT
+          $currentRelease = gh release view $tag --repo $repo --json tagName,isPrerelease,assets,publishedAt | ConvertFrom-Json
+          $allReleases = gh api "repos/$repo/releases?per_page=100" | ConvertFrom-Json
+          $platforms = @('windows-x64', 'windows-x86', 'linux-x64')
+
+          $entries = foreach ($platform in $platforms) {
+            $assetName = "files-$platform.zip"
+            $currentAsset = $currentRelease.assets | Where-Object { $_.name -eq $assetName } | Select-Object -First 1
+            if (-not $currentAsset) {
+              throw "Current release $tag does not contain required asset $assetName"
+            }
+
+            $baselineRelease = $null
+            if (-not [string]::IsNullOrWhiteSpace($baselineInput)) {
+              $normalizedBaseline = if ($baselineInput.StartsWith('v')) { $baselineInput } else { "v$baselineInput" }
+              $baselineRelease = $allReleases | Where-Object { $_.tag_name -eq $normalizedBaseline } | Select-Object -First 1
+              if (-not $baselineRelease) {
+                throw "Specified baseline tag not found: $normalizedBaseline"
+              }
+            }
+            else {
+              $baselineRelease = $allReleases |
+                Where-Object {
+                  $_.tag_name -ne $tag -and
+                  -not $_.draft -and
+                  [bool]$_.prerelease -eq [bool]$currentRelease.isPrerelease -and
+                  ($_.assets | Where-Object { $_.name -eq $assetName } | Measure-Object).Count -gt 0
+                } |
+                Select-Object -First 1
+            }
+
+            [pscustomobject]@{
+              platform = $platform
+              assetName = $assetName
+              baselineTag = if ($baselineRelease) { $baselineRelease.tag_name } else { $null }
+              baselineVersion = if ($baselineRelease) { ($baselineRelease.tag_name -replace '^v', '') } else { $null }
+              isFullPayload = -not $baselineRelease
+            }
+          }
+
+          $plan = [pscustomobject]@{
+            tag = $tag
+            version = $env:RELEASE_VERSION
+            channel = $env:RELEASE_CHANNEL
+            platforms = $entries
+          }
+
+          $plan | ConvertTo-Json -Depth 8 | Set-Content plonds-plan.json -Encoding utf8
+          Get-Content plonds-plan.json
+
+      - name: Download payload zips
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+          $repo = '${{ github.repository }}'
+          $plan = Get-Content plonds-plan.json | ConvertFrom-Json
+
+          foreach ($entry in $plan.platforms) {
+            $currentDir = Join-Path $PWD "plonds-input/current/$($entry.platform)"
+            New-Item -ItemType Directory -Path $currentDir -Force | Out-Null
+            gh release download $plan.tag --repo $repo -p $entry.assetName -D $currentDir
+
+            if (-not [string]::IsNullOrWhiteSpace($entry.baselineTag)) {
+              $baselineDir = Join-Path $PWD "plonds-input/baseline/$($entry.platform)"
+              New-Item -ItemType Directory -Path $baselineDir -Force | Out-Null
+              gh release download $entry.baselineTag --repo $repo -p $entry.assetName -D $baselineDir
+            }
+          }
+
+      - name: Build delta assets
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+          $plan = Get-Content plonds-plan.json | ConvertFrom-Json
+          foreach ($entry in $plan.platforms) {
+            $currentZip = Join-Path $PWD "plonds-input/current/$($entry.platform)/$($entry.assetName)"
+            $args = @(
+              'run', '--project', 'PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Tool/Plonds.Tool.csproj', '--configuration', 'Release', '--',
+              'build-delta',
+              '--platform', $entry.platform,
+              '--current-version', $plan.version,
+              '--current-tag', $plan.tag,
+              '--current-zip', $currentZip,
+              '--output-dir', 'plonds-output',
+              '--private-key', $env:UPDATE_PRIVATE_KEY_PATH,
+              '--channel', $plan.channel
+            )
+
+            if ([bool]$entry.isFullPayload) {
+              $args += @('--is-full-payload', 'true')
+            }
+            else {
+              $baselineZip = Join-Path $PWD "plonds-input/baseline/$($entry.platform)/$($entry.assetName)"
+              $args += @('--baseline-tag', $entry.baselineTag, '--baseline-version', $entry.baselineVersion, '--baseline-zip', $baselineZip)
+            }
+
+            dotnet @args
+          }
+
+          dotnet run --project PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Tool/Plonds.Tool.csproj --configuration Release -- `
+            build-index `
+            --release-tag $plan.tag `
+            --version $plan.version `
+            --channel $plan.channel `
+            --platform-summaries-dir plonds-output/platform-summaries `
+            --output-dir plonds-output `
+            --private-key $env:UPDATE_PRIVATE_KEY_PATH
+
+      - name: Upload PLONDS assets to release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          gh release upload "$RELEASE_TAG" plonds-output/release-assets/* --clobber
+
+      - name: Persist run metadata
+        shell: bash
+        run: |
+          mkdir -p plonds-run-metadata
+          printf '%s' "$RELEASE_TAG" > plonds-run-metadata/tag.txt
+
+      - name: Upload run metadata artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: plonds-run-metadata
+          path: plonds-run-metadata/tag.txt
+          if-no-files-found: error
+          retention-days: 7

.github/workflows/release.yml

@@ -30,14 +30,22 @@ jobs:
       informational_version: ${{ steps.version.outputs.informational_version }}
       tag: ${{ steps.version.outputs.tag }}
       checkout_ref: ${{ steps.version.outputs.checkout_ref }}
+      is_prerelease: ${{ steps.version.outputs.is_prerelease }}
+      release_channel: ${{ steps.version.outputs.release_channel }}
 
     steps:
+      - name: Checkout repository metadata
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
       - name: Get release info
         id: version
         run: |
           if [[ "${{ github.event_name }}" == "push" ]]; then
             TAG="${GITHUB_REF#refs/tags/}"
             CHECKOUT_REF="${GITHUB_REF}"
+            IS_PRERELEASE="false"
           else
             RAW_TAG="${{ github.event.inputs.tag }}"
             if [[ "${RAW_TAG}" == refs/tags/* ]]; then
@@ -47,19 +55,40 @@ jobs:
             else
               TAG="v${RAW_TAG}"
             fi
-            CHECKOUT_REF="${GITHUB_SHA}"
+
+            if git rev-parse -q --verify "refs/tags/${TAG}" >/dev/null; then
+              CHECKOUT_REF="refs/tags/${TAG}"
+            else
+              CHECKOUT_REF="${GITHUB_SHA}"
+            fi
+
+            if [[ "${{ github.event.inputs.is_prerelease }}" == "true" ]]; then
+              IS_PRERELEASE="true"
+            else
+              IS_PRERELEASE="false"
+            fi
           fi
+
           VERSION="${TAG#v}"
           IFS='.' read -r -a VERSION_PARTS <<< "${VERSION}"
           while [ "${#VERSION_PARTS[@]}" -lt 4 ]; do
             VERSION_PARTS+=("0")
           done
           ASSEMBLY_VERSION="${VERSION_PARTS[0]}.${VERSION_PARTS[1]}.${VERSION_PARTS[2]}.${VERSION_PARTS[3]}"
-          echo "tag=${TAG}" >> $GITHUB_OUTPUT
-          echo "version=${VERSION}" >> $GITHUB_OUTPUT
-          echo "assembly_version=${ASSEMBLY_VERSION}" >> $GITHUB_OUTPUT
-          echo "informational_version=${VERSION}" >> $GITHUB_OUTPUT
-          echo "checkout_ref=${CHECKOUT_REF}" >> $GITHUB_OUTPUT
+
+          if [[ "${IS_PRERELEASE}" == "true" ]]; then
+            RELEASE_CHANNEL="preview"
+          else
+            RELEASE_CHANNEL="stable"
+          fi
+
+          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+          echo "assembly_version=${ASSEMBLY_VERSION}" >> "$GITHUB_OUTPUT"
+          echo "informational_version=${VERSION}" >> "$GITHUB_OUTPUT"
+          echo "checkout_ref=${CHECKOUT_REF}" >> "$GITHUB_OUTPUT"
+          echo "is_prerelease=${IS_PRERELEASE}" >> "$GITHUB_OUTPUT"
+          echo "release_channel=${RELEASE_CHANNEL}" >> "$GITHUB_OUTPUT"
 
   build-windows:
     needs: prepare
@@ -88,6 +117,7 @@ jobs:
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: 'preview'
 
       - name: Restore
         run: dotnet restore ${{ env.Solution_Name }}
@@ -106,9 +136,6 @@ jobs:
           $arch = "${{ matrix.arch }}"
           $launcherPublishDir = "publish/launcher-win-$arch"
 
-          Write-Host "Publishing Launcher with AOT for Windows $arch..."
-
-          # AOT 单文件发布
           dotnet publish LanMountainDesktop.Launcher/LanMountainDesktop.Launcher.csproj `
             -c Release `
             -o ./$launcherPublishDir `
@@ -119,27 +146,16 @@ jobs:
             -p:IncludeNativeLibrariesForSelfExtract=true `
             -p:EnableCompressionInSingleFile=true `
             -p:DebugType=none `
-            -p:DebugSymbols=false
+            -p:DebugSymbols=false `
+            -p:Version=${{ needs.prepare.outputs.version }} `
+            -p:AssemblyVersion=${{ needs.prepare.outputs.assembly_version }} `
+            -p:FileVersion=${{ needs.prepare.outputs.assembly_version }} `
+            -p:InformationalVersion=${{ needs.prepare.outputs.informational_version }}
 
           if ($LASTEXITCODE -ne 0) {
             Write-Error "Launcher AOT publish failed"
             exit 1
           }
-
-          # 显示发布结果
-          Write-Host "Launcher published to: $launcherPublishDir"
-          $exeFile = Get-ChildItem -Path $launcherPublishDir -Filter "*.exe" | Select-Object -First 1
-          if ($exeFile) {
-            $size = [Math]::Round($exeFile.Length / 1MB, 2)
-            Write-Host "Launcher executable: $($exeFile.Name) ($size MB)"
-          }
-
-          # 清理不必要的文件（AOT 单文件应该只有一个 exe）
-          $files = Get-ChildItem -Path $launcherPublishDir -File
-          if ($files.Count -gt 1) {
-            Write-Host "Warning: Expected single file but found $($files.Count) files"
-            $files | ForEach-Object { Write-Host "  - $($_.Name)" }
-          }
         shell: pwsh
 
       - name: Publish Main App
@@ -177,9 +193,6 @@ jobs:
               -p:FileVersion=${{ needs.prepare.outputs.assembly_version }} `
               -p:InformationalVersion=${{ needs.prepare.outputs.informational_version }}
           }
-
-          Write-Host "Published to: $publishDir"
-          Write-Host "Self-contained: $selfContained"
         shell: pwsh
 
       - name: Restructure for Launcher
@@ -190,97 +203,58 @@ jobs:
           $publishDir = if ($selfContained) { "publish/windows-$arch" } else { "publish/windows-$arch-lite" }
           $launcherPublishDir = "publish/launcher-win-$arch"
           $appDir = "app-$version"
-
-          Write-Host "Restructuring for Launcher mode..."
-          Write-Host "Version: $version"
-          Write-Host "Publish dir: $publishDir"
-
           $newStructure = "publish-launcher/windows-$arch"
-          New-Item -ItemType Directory -Path $newStructure -Force | Out-Null
 
+          New-Item -ItemType Directory -Path $newStructure -Force | Out-Null
           $appPath = Join-Path $newStructure $appDir
           Move-Item -Path $publishDir -Destination $appPath -Force
 
-          $launcherSource = $launcherPublishDir
-          if (Test-Path $launcherSource) {
-            Write-Host "Copying Launcher to root..."
-            Copy-Item -Path "$launcherSource\*" -Destination $newStructure -Recurse -Force
-          } else {
-            Write-Warning "Launcher publish dir not found: $launcherSource"
+          if (Test-Path $launcherPublishDir) {
+            Copy-Item -Path "$launcherPublishDir\*" -Destination $newStructure -Recurse -Force
           }
 
           New-Item -ItemType File -Path (Join-Path $appPath ".current") -Force | Out-Null
 
-          Write-Host "New directory structure:"
-          Get-ChildItem -Path $newStructure -Recurse -Depth 2 | Select-Object FullName
-
           Remove-Item -Path $publishDir -Recurse -Force -ErrorAction SilentlyContinue
           Remove-Item -Path $launcherPublishDir -Recurse -Force -ErrorAction SilentlyContinue
           Move-Item -Path $newStructure -Destination $publishDir -Force
         shell: pwsh
 
-      - name: Install Inno Setup
-        run: choco install innosetup -y --no-progress
+      - name: Install Inno Setup and 7z
+        run: |
+          choco install innosetup -y --no-progress
+          choco install 7zip -y --no-progress
         shell: pwsh
 
       - name: Build Installer
         run: |
           $version = "${{ needs.prepare.outputs.version }}"
           $arch = "${{ matrix.arch }}"
-          $selfContained = "${{ matrix.self_contained }}" -eq "true"
           $suffix = "${{ matrix.suffix }}"
-          $publishDir = if ($selfContained) { "publish\windows-$arch" } else { "publish\windows-$arch-lite" }
-          $installerScript = "LanMountainDesktop\installer\LanMountainDesktop.iss"
+          $selfContained = "${{ matrix.self_contained }}" -eq "true"
+          $publishDir = if ($selfContained) { "publish/windows-$arch" } else { "publish/windows-$arch-lite" }
           $outputDir = "build-installer"
-
-          if (-not (Test-Path -Path $publishDir)) {
-            Write-Error "Publish directory not found: $publishDir"
-            Get-ChildItem -Path "publish" -Directory -ErrorAction SilentlyContinue | Select-Object Name
-            exit 1
-          }
+          $installerScript = "LanMountainDesktop/installer/LanMountainDesktop.iss"
 
           New-Item -ItemType Directory -Path $outputDir -Force | Out-Null
 
-          if (-not (Test-Path -Path $installerScript)) {
-            Write-Error "Installer script not found: $installerScript"
-            exit 1
-          }
-
-          $isccPath = $null
-          $isccCommand = Get-Command ISCC.exe -ErrorAction SilentlyContinue
-          if ($isccCommand) {
-            $isccPath = $isccCommand.Source
-          }
-
           $candidatePaths = @(
-            "C:\Program Files (x86)\Inno Setup 6\ISCC.exe",
-            "C:\Program Files\Inno Setup 6\ISCC.exe",
-            "$env:ChocolateyInstall\bin\ISCC.exe",
+            (Get-Command iscc.exe -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Source -ErrorAction SilentlyContinue),
+            "$env:ProgramFiles(x86)\Inno Setup 6\ISCC.exe",
+            "$env:ProgramFiles\Inno Setup 6\ISCC.exe",
             "$env:ChocolateyInstall\lib\innosetup\tools\ISCC.exe"
-          )
+          ) | Where-Object { $_ -and (Test-Path $_) }
 
+          $isccPath = $candidatePaths | Select-Object -First 1
           if (-not $isccPath) {
-            foreach ($candidate in $candidatePaths) {
-              if ($candidate -and (Test-Path -Path $candidate)) {
-                $isccPath = $candidate
-                break
-              }
-            }
-          }
-
-          if (-not $isccPath) {
-            Write-Host "ISCC.exe was not found in PATH or known locations."
-            Write-Host "Checked locations:"
-            $candidatePaths | ForEach-Object { Write-Host " - $_" }
-            Write-Host "Chocolatey bin listing (if exists):"
-            Get-ChildItem "$env:ChocolateyInstall\bin" -Filter "*iscc*" -ErrorAction SilentlyContinue | Select-Object FullName
             Write-Error "Inno Setup compiler not found."
             exit 1
           }
 
-          Write-Host "Found Inno Setup at: $isccPath"
-
-          Write-Host "Building installer for Windows $arch with version $version..."
+          if (-not (Test-Path $installerScript)) {
+            Write-Error "Installer script not found: $(Join-Path $PWD $installerScript)"
+            exit 1
+          }
 
           $publishDir = (Resolve-Path $publishDir).Path
           $outputDir = (Resolve-Path $outputDir).Path
@@ -296,8 +270,6 @@ jobs:
             $installerScript
           )
 
-          Write-Host "Compile command: `"$isccPath`" $($compileArgs -join ' ')"
-
           & $isccPath @compileArgs
           if ($LASTEXITCODE -ne 0) {
             Write-Error "Inno Setup compiler exited with code $LASTEXITCODE"
@@ -309,217 +281,53 @@ jobs:
             Write-Error "Failed to create installer"
             exit 1
           }
-
-          Write-Host "Successfully created: $($installerFile.Name)"
-          Write-Host "Installer size: $([Math]::Round($installerFile.Length / 1MB, 2)) MB"
         shell: pwsh
 
-      - name: Generate Delta Package
-        if: matrix.self_contained == true && matrix.arch == 'x64'
+      - name: Package Payload Zip
         run: |
           $version = "${{ needs.prepare.outputs.version }}"
-          $publishDir = "publish/windows-${{ matrix.arch }}"
-          $appDir = "app-$version"
-          $currentAppPath = Join-Path $publishDir $appDir
-          $outputDir = "delta-output"
-
-          New-Item -ItemType Directory -Path $outputDir -Force | Out-Null
-
-          # --- Determine previous version and download its update.zip for diff ---
-          $previousVersion = $null
-          $previousAppPath = $null
-          try {
-            $headers = @{ "User-Agent" = "LanMountainDesktop-CI"; "Authorization" = "token ${{ secrets.GITHUB_TOKEN }}" }
-            $releases = Invoke-RestMethod -Uri "https://api.github.com/repos/${{ github.repository }}/releases?per_page=10" -Headers $headers
-            $previousRelease = $releases | Where-Object { -not $_.prerelease -and -not $_.draft } | Select-Object -First 1
-            if ($previousRelease) {
-              $previousVersion = $previousRelease.tag_name.TrimStart('v','V')
-              Write-Host "Previous release version: $previousVersion"
-
-              # Try to download update.zip from previous release for diff
-              $prevUpdateZip = $previousRelease.assets | Where-Object { $_.name -eq "update.zip" } | Select-Object -First 1
-              if ($prevUpdateZip) {
-                Write-Host "Found update.zip in previous release - extracting for diff..."
-                $prevZipDest = Join-Path $outputDir "prev-update.zip"
-                Invoke-WebRequest -Uri $prevUpdateZip.browser_download_url -OutFile $prevZipDest -Headers $headers
-
-                $previousAppPath = Join-Path $outputDir "prev-app"
-                New-Item -ItemType Directory -Path $previousAppPath -Force | Out-Null
-                Expand-Archive -Path $prevZipDest -DestinationPath $previousAppPath -Force
-                Remove-Item -Path $prevZipDest -Force
-
-                $prevFileCount = (Get-ChildItem -Path $previousAppPath -Recurse -File).Count
-                Write-Host "Extracted $prevFileCount files from previous version for diff"
-              } else {
-                Write-Host "No update.zip found in previous release - will generate full package"
-              }
-            }
-          } catch {
-            Write-Host "Could not fetch previous release: $_"
-          }
-
-          # --- Generate file manifest with diff against previous version ---
-          Write-Host "Generating update package for version $version..."
-          $files = Get-ChildItem -Path $currentAppPath -Recurse -File
-          $fileEntries = [System.Collections.ArrayList]::new()
-          $changedFiles = [System.Collections.ArrayList]::new()
-          $reusedCount = 0
-          $addedCount = 0
-          $replacedCount = 0
-          $deletedCount = 0
-
-          # Build hash map of previous version files for quick lookup
-          $prevHashMap = @{}
-          if ($previousAppPath -and (Test-Path $previousAppPath)) {
-            $prevFiles = Get-ChildItem -Path $previousAppPath -Recurse -File
-            foreach ($pf in $prevFiles) {
-              $relPath = $pf.FullName.Substring($previousAppPath.Length).TrimStart('\', '/').Replace('\', '/')
-              if ($relPath -match '^\.(current|partial|destroy)$') { continue }
-              $prevHashMap[$relPath] = (Get-FileHash -Path $pf.FullName -Algorithm SHA256).Hash.ToLower()
-            }
-            Write-Host "Previous version has $($prevHashMap.Count) files for comparison"
-          }
-
-          foreach ($file in $files) {
-            $relativePath = $file.FullName.Substring($currentAppPath.Length).TrimStart('\', '/')
-            $relativePath = $relativePath.Replace('\', '/')
-
-            # Skip deployment marker files
-            if ($relativePath -match '^\.(current|partial|destroy)$') {
-              continue
-            }
-
-            $hash = (Get-FileHash -Path $file.FullName -Algorithm SHA256).Hash.ToLower()
-
-            if ($prevHashMap.ContainsKey($relativePath)) {
-              $prevHash = $prevHashMap[$relativePath]
-              if ($hash -eq $prevHash) {
-                $fileEntries += @{ Path = $relativePath; Action = "reuse"; Sha256 = $hash }
-                $reusedCount++
-              } else {
-                $fileEntries += @{ Path = $relativePath; Action = "replace"; Sha256 = $hash; ArchivePath = $relativePath }
-                $changedFiles += $file
-                $replacedCount++
-              }
-              $prevHashMap.Remove($relativePath)
-            } else {
-              $fileEntries += @{ Path = $relativePath; Action = "add"; Sha256 = $hash; ArchivePath = $relativePath }
-              $changedFiles += $file
-              $addedCount++
-            }
-          }
-
-          # Files in previous version but not in current = deleted
-          foreach ($deletedPath in $prevHashMap.Keys) {
-            $fileEntries += @{ Path = $deletedPath; Action = "delete" }
-            $deletedCount++
-          }
-
-          Write-Host "Delta summary: $reusedCount reused, $replacedCount replaced, $addedCount added, $deletedCount deleted"
-          Write-Host "Changed files to include in update.zip: $($changedFiles.Count)"
-
-          $filesJson = @{
-            FromVersion = $previousVersion
-            ToVersion = $version
-            Platform = "windows"
-            Arch = "x64"
-            Files = $fileEntries
-          } | ConvertTo-Json -Depth 10
-
-          $filesJsonPath = Join-Path $outputDir "files.json"
-          $filesJson | Set-Content -Path $filesJsonPath -Encoding UTF8
-          Write-Host "Generated files.json with $($fileEntries.Count) entries"
-
-          # Create update.zip with only changed files
-          $tempDir = Join-Path $outputDir "temp_staging"
-          New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
-          foreach ($file in $changedFiles) {
-            $relativePath = $file.FullName.Substring($currentAppPath.Length).TrimStart('\', '/')
-            $destPath = Join-Path $tempDir $relativePath
-            $destDir = Split-Path -Parent $destPath
-            if (-not (Test-Path $destDir)) { New-Item -ItemType Directory -Path $destDir -Force | Out-Null }
-            Copy-Item -Path $file.FullName -Destination $destPath -Force
-          }
-
-          $updateZipPath = Join-Path $outputDir "update.zip"
-          if ($changedFiles.Count -gt 0) {
-            Compress-Archive -Path "$tempDir\*" -DestinationPath $updateZipPath -CompressionLevel Optimal
-          } else {
-            # No changed files - create a minimal zip
-            $emptyMarker = Join-Path $tempDir ".no-changes"
-            Set-Content -Path $emptyMarker -Value ""
-            Compress-Archive -Path "$tempDir\*" -DestinationPath $updateZipPath -CompressionLevel Optimal
-          }
-          Remove-Item -Path $tempDir -Recurse -Force
-
-          Write-Host "Created update.zip: $([Math]::Round((Get-Item $updateZipPath).Length / 1MB, 2)) MB"
-
-          # Clean up previous version extraction
-          if ($previousAppPath -and (Test-Path $previousAppPath)) {
-            Remove-Item -Path $previousAppPath -Recurse -Force -ErrorAction SilentlyContinue
-          }
-        shell: pwsh
-
-      - name: Sign File Map
-        if: matrix.self_contained == true && matrix.arch == 'x64'
-        run: |
-          $outputDir = "delta-output"
-          $filesJsonPath = Join-Path $outputDir "files.json"
-          $signaturePath = Join-Path $outputDir "files.json.sig"
-
-          if (-not (Test-Path $filesJsonPath)) {
-            Write-Error "files.json not found at $filesJsonPath"
+          $arch = "${{ matrix.arch }}"
+          $payloadRoot = Join-Path (Join-Path $PWD "publish/windows-$arch") "app-$version"
+          if (-not (Test-Path $payloadRoot)) {
+            Write-Error "Payload root not found: $payloadRoot"
             exit 1
           }
 
-          $privateKeyPem = "${{ secrets.UPDATE_PRIVATE_KEY_PEM }}"
-          if ([string]::IsNullOrWhiteSpace($privateKeyPem)) {
-            Write-Warning "UPDATE_PRIVATE_KEY_PEM secret not configured - generating unsigned placeholder"
-            Set-Content -Path $signaturePath -Value "" -Encoding ASCII
-            exit 0
+          $stageDir = Join-Path $PWD "payload-stage/windows-$arch"
+          $releaseDir = Join-Path $PWD "release-assets"
+          Remove-Item -Path $stageDir -Recurse -Force -ErrorAction SilentlyContinue
+          New-Item -ItemType Directory -Path $stageDir -Force | Out-Null
+          New-Item -ItemType Directory -Path $releaseDir -Force | Out-Null
+
+          Get-ChildItem -Path $payloadRoot -Recurse -File | ForEach-Object {
+            $relative = [System.IO.Path]::GetRelativePath($payloadRoot, $_.FullName).Replace('\', '/')
+            if ($relative -eq '.current' -or $relative -eq '.partial' -or $relative -eq '.destroy' -or $relative.StartsWith('.current/') -or $relative.StartsWith('.partial/') -or $relative.StartsWith('.destroy/')) {
+              return
+            }
+
+            $destination = Join-Path $stageDir ($relative -replace '/', [System.IO.Path]::DirectorySeparatorChar)
+            $destinationDir = Split-Path -Path $destination -Parent
+            if (-not [string]::IsNullOrWhiteSpace($destinationDir)) {
+              New-Item -ItemType Directory -Path $destinationDir -Force | Out-Null
+            }
+
+            Copy-Item -Path $_.FullName -Destination $destination -Force
           }
 
-          $privateKeyPath = Join-Path $env:RUNNER_TEMP "signing-key.pem"
-          Set-Content -Path $privateKeyPath -Value $privateKeyPem -Encoding ASCII
-
-          Add-Type -ReferencedAssemblies @("System.Security.Cryptography", "System.IO") -TypeDefinition @"
-          using System;
-          using System.IO;
-          using System.Security.Cryptography;
-          public class RsaSigner {
-              public static void Sign(string jsonPath, string keyPath, string sigPath) {
-                  var jsonBytes = File.ReadAllBytes(jsonPath);
-                  var rsa = RSA.Create();
-                  rsa.ImportFromPem(File.ReadAllText(keyPath));
-                  var sig = rsa.SignData(jsonBytes, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1);
-                  File.WriteAllText(sigPath, Convert.ToBase64String(sig));
-              }
+          $payloadZip = Join-Path $releaseDir "files-windows-$arch.zip"
+          if (Test-Path $payloadZip) {
+            Remove-Item $payloadZip -Force
           }
-          "@
-
-          [RsaSigner]::Sign($filesJsonPath, $privateKeyPath, $signaturePath)
-          Remove-Item -Path $privateKeyPath -Force
-
-          Write-Host "Signed files.json -> files.json.sig"
+          Compress-Archive -Path (Join-Path $stageDir '*') -DestinationPath $payloadZip -Force
         shell: pwsh
 
-      - name: Upload Delta Package
-        if: matrix.self_contained == true && matrix.arch == 'x64'
+      - name: Upload Release Assets
         uses: actions/upload-artifact@v4
         with:
-          name: release-delta-windows-x64
+          name: release-windows-${{ matrix.arch }}
           path: |
-            delta-output/files.json
-            delta-output/files.json.sig
-            delta-output/update.zip
-          if-no-files-found: error
-          retention-days: 90
-
-      - name: Upload Installer
-        uses: actions/upload-artifact@v4
-        with:
-          name: release-windows-${{ matrix.arch }}${{ matrix.suffix }}
-          path: build-installer/*.exe
+            release-assets/files-windows-${{ matrix.arch }}.zip
+            build-installer/*.exe
           if-no-files-found: error
           retention-days: 30
 
@@ -544,12 +352,17 @@ jobs:
             libx11-6 libxrandr2 libxinerama1 \
             libxi6 libxcursor1 libxext6 \
             libxrender1 libxkbcommon-x11-0 \
-            clang zlib1g-dev
+            clang zlib1g-dev zip rsync
+
+          sudo apt-get install -y libasound2t64 || sudo apt-get install -y libasound2
+          sudo apt-get install -y libportaudio2t64 || sudo apt-get install -y libportaudio2
+          sudo apt-get install -y libwebkit2gtk-4.1-dev || sudo apt-get install -y libwebkit2gtk-4.0-dev
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: 'preview'
 
       - name: Restore
         run: dotnet restore ${{ env.Solution_Name }}
@@ -564,8 +377,6 @@ jobs:
 
       - name: Publish Launcher (AOT)
         run: |
-          echo "Publishing Launcher with AOT for Linux x64..."
-          
           dotnet publish LanMountainDesktop.Launcher/LanMountainDesktop.Launcher.csproj \
             -c Release \
             -o ./publish/launcher-linux-x64 \
@@ -576,15 +387,11 @@ jobs:
             -p:IncludeNativeLibrariesForSelfExtract=true \
             -p:EnableCompressionInSingleFile=true \
             -p:DebugType=none \
-            -p:DebugSymbols=false
-          
-          if [ $? -ne 0 ]; then
-            echo "Launcher AOT publish failed"
-            exit 1
-          fi
-          
-          echo "Launcher published to: ./publish/launcher-linux-x64"
-          ls -lh ./publish/launcher-linux-x64/
+            -p:DebugSymbols=false \
+            -p:Version=${{ needs.prepare.outputs.version }} \
+            -p:AssemblyVersion=${{ needs.prepare.outputs.assembly_version }} \
+            -p:FileVersion=${{ needs.prepare.outputs.assembly_version }} \
+            -p:InformationalVersion=${{ needs.prepare.outputs.informational_version }}
 
       - name: Publish Main App
         run: |
@@ -611,25 +418,15 @@ jobs:
           appDir="app-$version"
           launcherDir="publish/launcher-linux-x64"
 
-          echo "Restructuring for Launcher mode..."
-          echo "Version: $version"
-
           mkdir -p "$publishDir"
           mv "publish/linux-x64-app" "$publishDir/$appDir"
 
           if [ -d "$launcherDir" ]; then
-            echo "Copying Launcher to root..."
             cp -r "$launcherDir"/* "$publishDir/"
             chmod +x "$publishDir/LanMountainDesktop.Launcher" 2>/dev/null || true
-          else
-            echo "Warning: Launcher publish dir not found: $launcherDir"
           fi
 
           touch "$publishDir/$appDir/.current"
-
-          echo "New directory structure:"
-          find "$publishDir" -maxdepth 2 | head -50
-
           rm -rf "$launcherDir"
 
       - name: Package as DEB
@@ -642,12 +439,6 @@ jobs:
           desktop_template="LanMountainDesktop/packaging/linux/LanMountainDesktop.desktop"
           icon_source="LanMountainDesktop/packaging/linux/lanmountaindesktop.png"
 
-          if [ ! -d "$source" ]; then
-            echo "Error: Source directory not found: $source"
-            ls -la publish/ || echo "publish directory not found"
-            exit 1
-          fi
-
           mkdir -p "build-deb/DEBIAN"
           mkdir -p "build-deb/usr/local/bin"
           mkdir -p "build-deb/usr/share/applications"
@@ -656,20 +447,6 @@ jobs:
 
           cp -r "$source"/* "build-deb/usr/local/bin/"
 
-          item_count=$(find build-deb/usr/local/bin -type f 2>/dev/null | wc -l)
-          echo "DEB package contains $item_count files"
-
-          if [ "$item_count" -eq 0 ]; then
-            echo "Error: DEB package is empty after copy"
-            exit 1
-          fi
-
-          if [ ! -f "$desktop_template" ] || [ ! -f "$icon_source" ]; then
-            echo "Error: Linux desktop resources are missing"
-            ls -la "LanMountainDesktop/packaging/linux" || true
-            exit 1
-          fi
-
           sed \
             -e "s|@@EXEC@@|/usr/local/bin/LanMountainDesktop.Launcher|g" \
             -e "s|@@ICON@@|lanmountaindesktop|g" \
@@ -693,9 +470,9 @@ jobs:
             printf '%s\n' "Package: $package_name"
             printf '%s\n' "Version: $package_version"
             printf '%s\n' "Architecture: $arch"
-            printf '%s\n' "Maintainer: LanMountain Team <dev@example.com>"
-            printf '%s\n' "Description: LanMountain Desktop Application"
-            printf '%s\n' " A desktop application for LanMountain."
+            printf '%s\n' 'Maintainer: LanMountain Team <dev@example.com>'
+            printf '%s\n' 'Description: LanMountain Desktop Application'
+            printf '%s\n' ' A desktop application for LanMountain.'
           } > "build-deb/DEBIAN/control"
 
           chmod 755 "build-deb/usr/local/bin/LanMountainDesktop.Launcher" 2>/dev/null || chmod 755 "build-deb/usr/local/bin"/*
@@ -704,26 +481,49 @@ jobs:
           chmod 644 "build-deb/usr/share/icons/hicolor/256x256/apps/lanmountaindesktop.png"
           chmod 755 "build-deb/DEBIAN/postinst"
 
-          if dpkg-deb --build "build-deb" "${package_name}_${package_version}_${arch}.deb"; then
-            echo "Successfully created: ${package_name}_${package_version}_${arch}.deb"
-            ls -lh "${package_name}_${package_version}_${arch}.deb"
-          else
-            echo "Error: Failed to build DEB package"
+          dpkg-deb --build "build-deb" "${package_name}_${package_version}_${arch}.deb"
+
+      - name: Package Payload Zip
+        run: |
+          version="${{ needs.prepare.outputs.version }}"
+          payload_root="publish/linux-x64/app-$version"
+          release_dir="$PWD/release-assets"
+          stage_dir="$PWD/payload-stage/linux-x64"
+
+          if [ ! -d "$payload_root" ]; then
+            echo "Payload root not found: $payload_root"
             exit 1
           fi
 
-      - name: Upload
+          rm -rf "$stage_dir"
+          mkdir -p "$stage_dir" "$release_dir"
+          rsync -a \
+            --exclude '.current' \
+            --exclude '.partial' \
+            --exclude '.destroy' \
+            "$payload_root/" "$stage_dir/"
+
+          (
+            cd "$stage_dir"
+            zip -qr "$release_dir/files-linux-x64.zip" .
+          )
+
+      - name: Upload Release Assets
         uses: actions/upload-artifact@v4
         with:
-          name: release-linux
-          path: "*.deb"
+          name: release-linux-x64
+          path: |
+            release-assets/files-linux-x64.zip
+            *.deb
           if-no-files-found: error
           retention-days: 30
 
   build-macos:
     needs: prepare
     runs-on: macos-latest
+    continue-on-error: true
     strategy:
+      fail-fast: false
       matrix:
         arch: [x64, arm64]
     name: Build_macOS_${{ matrix.arch }}
@@ -736,10 +536,14 @@ jobs:
           submodules: recursive
           ref: ${{ needs.prepare.outputs.checkout_ref }}
 
+      - name: Install dependencies
+        run: brew install portaudio
+
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          dotnet-quality: 'preview'
 
       - name: Restore
         run: dotnet restore ${{ env.Solution_Name }}
@@ -754,8 +558,6 @@ jobs:
 
       - name: Publish Launcher (AOT)
         run: |
-          echo "Publishing Launcher with AOT for macOS ${{ matrix.arch }}..."
-          
           dotnet publish LanMountainDesktop.Launcher/LanMountainDesktop.Launcher.csproj \
             -c Release \
             -o ./publish/launcher-macos-${{ matrix.arch }} \
@@ -766,15 +568,11 @@ jobs:
             -p:IncludeNativeLibrariesForSelfExtract=true \
             -p:EnableCompressionInSingleFile=true \
             -p:DebugType=none \
-            -p:DebugSymbols=false
-          
-          if [ $? -ne 0 ]; then
-            echo "Launcher AOT publish failed"
-            exit 1
-          fi
-          
-          echo "Launcher published to: ./publish/launcher-macos-${{ matrix.arch }}"
-          ls -lh ./publish/launcher-macos-${{ matrix.arch }}/
+            -p:DebugSymbols=false \
+            -p:Version=${{ needs.prepare.outputs.version }} \
+            -p:AssemblyVersion=${{ needs.prepare.outputs.assembly_version }} \
+            -p:FileVersion=${{ needs.prepare.outputs.assembly_version }} \
+            -p:InformationalVersion=${{ needs.prepare.outputs.informational_version }}
 
       - name: Publish Main App
         run: |
@@ -794,7 +592,22 @@ jobs:
             -p:FileVersion=${{ needs.prepare.outputs.assembly_version }} \
             -p:InformationalVersion=${{ needs.prepare.outputs.informational_version }}
 
+      - name: Package Payload Zip
+        run: |
+          release_dir="$PWD/release-assets"
+          stage_dir="$PWD/payload-stage/macos-${{ matrix.arch }}"
+          payload_root="publish/macos-${{ matrix.arch }}-app"
+
+          rm -rf "$stage_dir"
+          mkdir -p "$stage_dir" "$release_dir"
+          rsync -a "$payload_root/" "$stage_dir/"
+          (
+            cd "$stage_dir"
+            zip -qr "$release_dir/files-macos-${{ matrix.arch }}.zip" .
+          )
+
       - name: Restructure and Package as DMG
+        continue-on-error: true
         run: |
           version="${{ needs.prepare.outputs.version }}"
           arch="${{ matrix.arch }}"
@@ -803,41 +616,19 @@ jobs:
           launcherDir="publish/launcher-macos-$arch"
           appSourceDir="publish/macos-$arch-app"
 
-          echo "Restructuring for Launcher mode..."
-          echo "Version: $version"
-
           mkdir -p "${app_name}.app/Contents/MacOS"
-
           appDir="app-$version"
           mkdir -p "${app_name}.app/Contents/MacOS/$appDir"
 
-          if [ -d "$appSourceDir" ]; then
-            cp -r "$appSourceDir"/* "${app_name}.app/Contents/MacOS/$appDir/"
-          else
-            echo "Error: Main app source directory not found: $appSourceDir"
-            exit 1
-          fi
-
+          cp -r "$appSourceDir"/* "${app_name}.app/Contents/MacOS/$appDir/"
           if [ -d "$launcherDir" ]; then
-            echo "Copying Launcher to root..."
             cp -r "$launcherDir"/* "${app_name}.app/Contents/MacOS/"
             chmod +x "${app_name}.app/Contents/MacOS/LanMountainDesktop.Launcher" 2>/dev/null || true
-          else
-            echo "Warning: Launcher publish dir not found: $launcherDir"
           fi
 
           touch "${app_name}.app/Contents/MacOS/$appDir/.current"
-
           mkdir -p "${app_name}.app/Contents/Resources"
 
-          item_count=$(find "${app_name}.app/Contents/MacOS" -type f | wc -l)
-          echo "App bundle contains $item_count files"
-
-          if [ "$item_count" -eq 0 ]; then
-            echo "Error: App bundle is empty after copy"
-            exit 1
-          fi
-
           {
             printf '%s\n' '<?xml version="1.0" encoding="UTF-8"?>'
             printf '%s\n' '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">'
@@ -861,103 +652,96 @@ jobs:
 
           mkdir -p dmg-temp
           cp -r "${app_name}.app" dmg-temp/
+          hdiutil create -volname "${app_name}" -srcfolder dmg-temp -ov -format UDZO "${package_name}.dmg"
 
-          if hdiutil create -volname "${app_name}" -srcfolder dmg-temp -ov -format UDZO "${package_name}.dmg" 2>&1; then
-            echo "Successfully created: ${package_name}.dmg"
-            ls -lh "${package_name}.dmg"
-          else
-            echo "Error: Failed to create DMG"
-            exit 1
-          fi
-
-          rm -rf dmg-temp "${app_name}.app"
-
-      - name: Upload
+      - name: Upload Release Assets
+        if: always()
         uses: actions/upload-artifact@v4
         with:
           name: release-macos-${{ matrix.arch }}
-          path: "*.dmg"
-          if-no-files-found: error
+          path: |
+            release-assets/files-macos-${{ matrix.arch }}.zip
+            *.dmg
+          if-no-files-found: ignore
           retention-days: 30
 
   github-release:
-    needs: [ prepare, build-windows, build-linux, build-macos ]
+    needs: [prepare, build-windows, build-linux]
     runs-on: ubuntu-latest
     permissions:
       contents: write
 
     steps:
-      - name: Download artifacts
+      - name: Download release artifacts
         uses: actions/download-artifact@v4
         with:
-          path: artifacts
+          path: release-files
           pattern: release-*
+          merge-multiple: true
 
-      - name: List artifacts structure
+      - name: Normalize release files
         run: |
-          echo "Artifact directory structure:"
-          find artifacts -type f -o -type d | sort
-          echo ""
-          echo "Files found:"
-          find artifacts -type f -exec ls -lh {} \;
-          echo ""
-          echo "Full tree:"
-          tree artifacts || find artifacts -print | sed -e 's;[^/]*/;|____;g;s;____|; |;g'
+          mkdir -p release-bundle
 
-      - name: Flatten artifacts for release
-        run: |
-          echo "Organizing artifacts..."
-          mkdir -p release-files
-          # Copy installers and packages
-          find artifacts -type f \( -name "*.exe" -o -name "*.deb" -o -name "*.dmg" \) -exec cp -v {} release-files/ \;
-          # Copy delta update files (files.json, files.json.sig, update.zip)
-          find artifacts -type f \( -name "files.json" -o -name "files.json.sig" -o -name "update.zip" \) -exec cp -v {} release-files/ \;
-          echo ""
-          echo "Files ready for release:"
-          ls -lh release-files/ || echo "No files found in release-files"
-          echo ""
-          echo "Total files:"
-          file_count=$(find release-files -type f | wc -l)
-          echo "$file_count"
-          if [ "$file_count" -eq 0 ]; then
-            echo "Error: No release files found"
+          mapfile -t downloaded_files < <(find release-files -type f)
+          if [ "${#downloaded_files[@]}" -eq 0 ]; then
+            echo "No downloaded release artifacts were found."
             exit 1
           fi
 
-      - name: Create Release
+          for file in "${downloaded_files[@]}"; do
+            base_name="$(basename "$file")"
+            target_path="release-bundle/$base_name"
+
+            if [ -e "$target_path" ]; then
+              echo "Duplicate release asset name detected: $base_name"
+              echo "Conflicting file: $file"
+              exit 1
+            fi
+
+            cp "$file" "$target_path"
+          done
+
+      - name: Validate release files
+        run: |
+          echo "Release files:"
+          find release-bundle -maxdepth 1 -type f -exec ls -lh {} \;
+
+          if [ ! -f release-bundle/files-windows-x64.zip ] || [ ! -f release-bundle/files-windows-x86.zip ] || [ ! -f release-bundle/files-linux-x64.zip ]; then
+            echo "Required payload zips are missing."
+            exit 1
+          fi
+
+          file_count=$(find release-bundle -maxdepth 1 -type f | wc -l)
+          if [ "$file_count" -eq 0 ]; then
+            echo "No release files were produced."
+            exit 1
+          fi
+
+      - name: Create or Update Release
         uses: ncipollo/release-action@v1
         with:
           tag: ${{ needs.prepare.outputs.tag }}
           name: ${{ needs.prepare.outputs.tag }}
-          commit: ${{ github.sha }}
           allowUpdates: true
           draft: false
-          prerelease: ${{ github.event.inputs.is_prerelease == 'true' }}
-          artifacts: "release-files/**"
+          prerelease: ${{ needs.prepare.outputs.is_prerelease == 'true' }}
+          artifacts: 'release-bundle/*'
           body: |
             ## Release ${{ needs.prepare.outputs.version }}
 
-            ### Windows
-            - **LanMountainDesktop-Setup-${{ needs.prepare.outputs.version }}-x64.exe** - 64-bit installer (includes .NET runtime)
-            - **LanMountainDesktop-Setup-${{ needs.prepare.outputs.version }}-x86.exe** - 32-bit installer (includes .NET runtime)
+            ### Installers
+            - `LanMountainDesktop-Setup-${{ needs.prepare.outputs.version }}-x64.exe`
+            - `LanMountainDesktop-Setup-${{ needs.prepare.outputs.version }}-x86.exe`
+            - `LanMountainDesktop_${{ needs.prepare.outputs.version }}_amd64.deb`
 
-            **Note:** The Launcher is now built with AOT (Ahead-of-Time) compilation as a single executable file for faster startup and smaller footprint.
-
-            Installation: Double-click the .exe file and follow the wizard.
-
-            ### Incremental Update (Windows x64)
-            - **files.json** - Update manifest listing changed files
-            - **files.json.sig** - RSA signature of the manifest
-            - **update.zip** - Archive containing changed files
-
-            Existing users: The app will automatically detect and apply the incremental update on next launch.
-
-            ### Linux
-            - **LanMountainDesktop-${{ needs.prepare.outputs.version }}-linux-x64.deb** - Debian package (x64)
+            ### Payload Archives
+            - `files-windows-x64.zip`
+            - `files-windows-x86.zip`
+            - `files-linux-x64.zip`
 
             ### macOS
-            - **LanMountainDesktop-${{ needs.prepare.outputs.version }}-macos-x64.dmg** - Intel processor
-            - **LanMountainDesktop-${{ needs.prepare.outputs.version }}-macos-arm64.dmg** - Apple Silicon (M1/M2/M3)
+            - macOS assets are best-effort and will not block the release.
 
-            See commits for changes.
+            Release keeps only the stable installer and payload outputs. PLONDS delta assets and external mirror metadata are generated by follow-up workflows.
           token: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -512,3 +512,5 @@ nul
 /*.deb
 /*.dmg
 /*.AppImage
+/velopack-output-local-verify
+/velopack-output-local

.trae/specs/pdc-incremental-migration/checklist.md

@@ -0,0 +1,13 @@
+# Checklist
+
+- [ ] `release.yml` includes PDCC publish flow and does not invoke Velopack.
+- [ ] `release.yml` uploads app payload artifacts for PDCC.
+- [ ] S3 output path is rooted at `lanmountain/update/` (no system version prefix).
+- [ ] S3 has `repo/`, `meta/`, and `installers/` outputs after a release run.
+- [ ] Host update source default is `stcn` and old `pdc` values are auto-normalized.
+- [ ] Host can persist PDC payload into launcher incoming directory.
+- [ ] Launcher can apply PDC FileMap payload with signature/hash verification.
+- [ ] Legacy signed `files.json + update.zip` path still works as compatibility fallback.
+- [ ] CI run attached proving all release matrix jobs pass.
+- [ ] N-1 -> N incremental update verified on Windows x64/x86 and Linux x64.
+- [ ] Rollback verification report attached.

.trae/specs/pdc-incremental-migration/spec.md

@@ -0,0 +1,44 @@
+# PDC Incremental Update Migration
+
+## Goal
+
+Replace VeloPack-based incremental packaging with a unified PDC FileMap + object-repo pipeline, while keeping Launcher installation, rollback, and update orchestration ownership unchanged.
+
+## Stage 1 (Completed)
+
+- Release workflow removed VeloPack-based release packaging.
+- Signed FileMap path was restored as an interim release mechanism.
+- Host/Launcher fallback behavior stayed compatible with `files.json + files.json.sig + update.zip`.
+
+## Stage 2 (Current Implementation Target)
+
+- Move release publishing to PDCC + `phainon.yml` (ClassIsland-style).
+- Promote PDC-distributed FileMap/object-repo as the primary incremental path.
+- Keep GitHub Release installers and metadata as parallel distribution.
+- Keep Launcher state machine ownership (`.current/.partial/.destroy` + snapshots).
+- Update source defaults to `stcn` (S3/PDC), with GitHub fallback.
+- S3 object root is fixed to `lanmountain/update/` with no update-system version prefix.
+
+Expected S3 layout:
+  - `lanmountain/update/repo/<hash-prefix>/<hash-object>`
+  - `lanmountain/update/meta/channels/<channel>/<subchannel>/latest.json`
+  - `lanmountain/update/meta/distributions/<distributionId>/*.json`
+  - `lanmountain/update/installers/<platform>/<arch>/*`
+
+## Acceptance
+
+- `release.yml` includes PDCC publish steps and no Velopack steps.
+- Release jobs keep building installers for Windows x64/x86, Linux x64, and macOS.
+- PDC metadata + FileMap + object repo are published under `lanmountain/update/`.
+- Host can consume PDC payload (`stcn` source) and fallback to GitHub when unavailable.
+- Launcher can apply both:
+  - legacy signed `files.json + update.zip`
+  - PDC FileMap object-repo payload.
+- Rollback semantics remain unchanged.
+
+## Deprecated Notes
+
+- The following interim outputs are compatibility-only (not the long-term primary path):
+  - `files-windows-x64.json` / `.sig` / `update-windows-x64.zip`
+  - `files-windows-x86.json` / `.sig` / `update-windows-x86.zip`
+  - `files-linux-x64.json` / `.sig` / `update-linux-x64.zip`

.trae/specs/pdc-incremental-migration/tasks.md

@@ -0,0 +1,15 @@
+# Tasks
+
+- [x] Remove VeloPack packaging from release workflow.
+- [x] Keep signed FileMap path as interim compatibility fallback.
+- [x] Remove launcher/runtime Velopack branching.
+- [ ] Add `phainon.yml` for PDCC publish configuration.
+- [ ] Add PDCC installation + publish steps in `release.yml`.
+- [ ] Upload app payload artifacts for PDCC consumption in release build jobs.
+- [ ] Publish PDC metadata + object repo to S3 path root `lanmountain/update/`.
+- [ ] Mirror installers to `lanmountain/update/installers/<platform>/<arch>/`.
+- [ ] Replace update source canonical value with `stcn` (keep legacy `pdc` compatibility).
+- [ ] Add PDC payload model into host update check result.
+- [ ] Add host download path for PDC payload (`pdc-filemap.json` + signature + metadata).
+- [ ] Add launcher PDC FileMap apply path with rollback-compatible semantics.
+- [ ] Keep old `files.json + update.zip` path behind compatibility fallback.

.trae/specs/velopack-update-integration/checklist.md

@@ -0,0 +1,5 @@
+# Checklist (Deprecated)
+
+- [x] Spec marked as deprecated.
+- [x] Active implementation ownership moved to `pdc-incremental-migration`.
+- [x] No release workflow dependency remains on VeloPack.

.trae/specs/velopack-update-integration/spec.md

@@ -0,0 +1,15 @@
+# VeloPack Update Integration (Deprecated)
+
+## Status
+
+This spec is deprecated and superseded by `.trae/specs/pdc-incremental-migration/`.
+
+## Deprecation Reason
+
+- VeloPack native package generation introduced unstable release blocking (version format coupling and platform divergence).
+- The project has switched back to signed FileMap incremental assets as the primary update path.
+- Launcher remains the update installer/rollback authority; packaging and distribution are being migrated to PDC/S3-compatible flows.
+
+## Migration Note
+
+Use `.trae/specs/pdc-incremental-migration/spec.md` as the active authority for incremental update implementation and acceptance.

.trae/specs/velopack-update-integration/tasks.md

@@ -0,0 +1,6 @@
+# Tasks (Deprecated)
+
+- [x] Mark VeloPack integration spec as deprecated.
+- [x] Remove VeloPack runtime branches from launcher/host update path.
+- [x] Remove VeloPack release workflow packaging steps.
+- [ ] Keep archive for historical context only (no new implementation tasks here).

LanMountainDesktop.Launcher/App.axaml.cs

@@ -13,6 +13,10 @@ public partial class App : Application
 {
     public override void Initialize()
     {
+        // 初始化日志记录器
+        Logger.Initialize();
+        Logger.Info("Launcher starting...");
+        
         AvaloniaXamlLoader.Load(this);
     }
 
@@ -50,27 +54,12 @@ public partial class App : Application
             }
             else
             {
-                // 正常启动流程
-                var appRoot = Commands.ResolveAppRoot(context);
-                var deploymentLocator = new DeploymentLocator(appRoot);
-                
-                // TODO: 从配置读取 GitHub 仓库信息
-                var updateCheckService = new UpdateCheckService("ClassIsland", "LanMountainDesktop");
-                
-                var coordinator = new LauncherFlowCoordinator(
-                    context,
-                    deploymentLocator,
-                    new OobeStateService(appRoot),
-                    new UpdateEngineService(deploymentLocator),
-                    updateCheckService,
-                    new PluginInstallerService());
-
                 // 先显示 Splash 窗口，确保应用程序不会立即退出
                 var splashWindow = new SplashWindow();
                 splashWindow.Show();
                 
-                // 启动协调器流程
-                _ = RunCoordinatorWithSplashAsync(desktop, coordinator, splashWindow);
+                // 在 try-catch 块中实例化所有服务，确保任何异常都能被捕获
+                _ = RunCoordinatorWithSplashAsync(desktop, context, splashWindow);
             }
         }
 
@@ -211,14 +200,28 @@ public partial class App : Application
     
     private static async Task RunCoordinatorWithSplashAsync(
         IClassicDesktopStyleApplicationLifetime desktop,
-        LauncherFlowCoordinator coordinator,
+        CommandContext context,
         SplashWindow splashWindow)
     {
         LauncherResult result;
         ErrorWindow? errorWindow = null;
+        LauncherFlowCoordinator? coordinator = null;
         
         try
         {
+            // 在 try-catch 块中实例化所有服务，确保异常被捕获
+            var appRoot = Commands.ResolveAppRoot(context);
+            var deploymentLocator = new DeploymentLocator(appRoot);
+            
+            // TODO: 从配置读取 GitHub 仓库信息
+            
+            coordinator = new LauncherFlowCoordinator(
+                context,
+                deploymentLocator,
+                new OobeStateService(appRoot),
+                new UpdateEngineService(deploymentLocator),
+                new PluginInstallerService());
+
             result = await coordinator.RunAsync(splashWindow).ConfigureAwait(false);
         }
         catch (Exception ex)
@@ -344,11 +347,11 @@ public partial class App : Application
                 }
             }
 
-            // 3. 清理旧版本
+            // 3. 清理旧版本，保留至少3个版本以支持回滚
             if (success)
             {
                 await Dispatcher.UIThread.InvokeAsync(() => window.Report("cleanup", "正在清理...", 90));
-                deploymentLocator.CleanupDestroyedDeployments();
+                deploymentLocator.CleanupOldDeployments(minVersionsToKeep: 3);
             }
         }
         catch (Exception ex)

LanMountainDesktop.Launcher/AppJsonContext.cs

@@ -0,0 +1,28 @@
+using System.Text.Json;
+using System.Text.Json.Serialization;
+using LanMountainDesktop.Launcher.Models;
+using LanMountainDesktop.Launcher.Services;
+using LanMountainDesktop.Shared.Contracts.Launcher;
+
+namespace LanMountainDesktop.Launcher;
+
+[JsonSourceGenerationOptions(WriteIndented = true, PropertyNamingPolicy = JsonKnownNamingPolicy.CamelCase)]
+[JsonSerializable(typeof(SignedFileMap))]
+[JsonSerializable(typeof(UpdateFileEntry))]
+[JsonSerializable(typeof(PlondsUpdateMetadata))]
+[JsonSerializable(typeof(PlondsFileMap))]
+[JsonSerializable(typeof(PlondsComponentEntry))]
+[JsonSerializable(typeof(PlondsFileEntry))]
+[JsonSerializable(typeof(PlondsHashDescriptor))]
+[JsonSerializable(typeof(SnapshotMetadata))]
+[JsonSerializable(typeof(AppVersionInfo))]
+[JsonSerializable(typeof(StartupProgressMessage))]
+[JsonSerializable(typeof(LauncherResult))]
+[JsonSerializable(typeof(HostDiscoveryConfig))]
+[JsonSerializable(typeof(PluginManifest))]
+[JsonSerializable(typeof(PendingUpgrade))]
+[JsonSerializable(typeof(List<PendingUpgrade>))]
+[JsonSerializable(typeof(GitHubRelease))]
+[JsonSerializable(typeof(GitHubAsset))]
+[JsonSerializable(typeof(List<GitHubRelease>))]
+internal sealed partial class AppJsonContext : JsonSerializerContext;

LanMountainDesktop.Launcher/Assets/public-key.pem

@@ -1,8 +1,11 @@
 -----BEGIN RSA PUBLIC KEY-----
-MIIBCgKCAQEAxPqgXsrnG8Re0kV4HBb+x61HQpjCahJoilzKvvlnXanuGtGxbjZT
-B+kMzmPUwyx8gt1fcaBNoKPwpwP0UZRWjvJDZQ++5ex7LGGw0YRWtJmeeigS17YI
-90vEfX3xQ5InJoBKnndsRy2a742chE6YwHGrJ4b107ZJ+zd26FmokQS47Uzay3go
-msbQHdehwCdCiW1mh8YFDm0xny+PYoYZkGXiDOYY0nvg4yJ/BG2fQkkC5TNizr0l
-YcE3RrMRcyJB7zU3jN1QnjHIvIvwfCOXaLdcXtxgQFRv45sYpmj9amNjuurM5iUa
-20Mk1ilYBuLxqe6P9C8DakZY/akVxpzxrQIDAQAB
------END RSA PUBLIC KEY-----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+-----END RSA PUBLIC KEY-----

LanMountainDesktop.Launcher/LanMountainDesktop.Launcher.AOT.props

@@ -56,7 +56,11 @@
     <!-- 允许 IL 警告 -->
     <TrimmerSingleWarn>false</TrimmerSingleWarn>
     
-    <!-- FluentAvaloniaUI 需要：启用反射序列化（AOT 兼容模式） -->
-    <JsonSerializerIsReflectionEnabledByDefault>true</JsonSerializerIsReflectionEnabledByDefault>
+    <!-- AOT 模式下禁用反射式 JSON 序列化，强制使用 Source Generator -->
+    <!-- 之前设置为 true 与 AOT 矛盾，导致 IL2026/IL3050 警告和运行时失败 -->
+    <JsonSerializerIsReflectionEnabledByDefault>false</JsonSerializerIsReflectionEnabledByDefault>
+    
+    <!-- 启用 ISerializable 支持（部分库需要） -->
+    <IsAotCompatible>true</IsAotCompatible>
   </PropertyGroup>
 </Project>

LanMountainDesktop.Launcher/Models/UpdateModels.cs

@@ -53,3 +53,92 @@ internal sealed class UpdateApplyResult
 
     public string? RolledBackTo { get; init; }
 }
+
+internal sealed class PlondsUpdateMetadata
+{
+    public string? DistributionId { get; set; }
+
+    public string? Channel { get; set; }
+
+    public string? SubChannel { get; set; }
+
+    public string? FromVersion { get; set; }
+
+    public string? ToVersion { get; set; }
+
+    public string? FileMapPath { get; set; }
+
+    public string? FileMapSignaturePath { get; set; }
+
+    public Dictionary<string, string> Metadata { get; set; } = [];
+}
+
+internal sealed class PlondsFileMap
+{
+    public string? DistributionId { get; set; }
+
+    public string? FromVersion { get; set; }
+
+    public string? ToVersion { get; set; }
+
+    public string? Version { get; set; }
+
+    public string? Platform { get; set; }
+
+    public string? Arch { get; set; }
+
+    public Dictionary<string, string> Metadata { get; set; } = [];
+
+    public List<PlondsComponentEntry> Components { get; set; } = [];
+
+    public List<PlondsFileEntry> Files { get; set; } = [];
+}
+
+internal sealed class PlondsComponentEntry
+{
+    public string Name { get; set; } = string.Empty;
+
+    public string? Version { get; set; }
+
+    public Dictionary<string, string> Metadata { get; set; } = [];
+
+    public List<PlondsFileEntry> Files { get; set; } = [];
+}
+
+internal sealed class PlondsFileEntry
+{
+    public string Path { get; set; } = string.Empty;
+
+    public string? Action { get; set; } = "replace";
+
+    public string? Url { get; set; }
+
+    public string? ObjectUrl { get; set; }
+
+    public string? ObjectPath { get; set; }
+
+    public string? ObjectKey { get; set; }
+
+    public string? ArchivePath { get; set; }
+
+    public string? Sha256 { get; set; }
+
+    public string? Sha512 { get; set; }
+
+    public string? Sha512Base64 { get; set; }
+
+    public byte[]? Sha512Bytes { get; set; }
+
+    public PlondsHashDescriptor? Hash { get; set; }
+
+    public Dictionary<string, string> Metadata { get; set; } = [];
+}
+
+internal sealed class PlondsHashDescriptor
+{
+    public string? Algorithm { get; set; }
+
+    public string? Value { get; set; }
+
+    public byte[]? Bytes { get; set; }
+}

LanMountainDesktop.Launcher/Services/Commands.cs

@@ -91,11 +91,7 @@ internal static class Commands
             "check" => updateEngine.CheckPendingUpdate(),
             "apply" => await updateEngine.ApplyPendingUpdateAsync().ConfigureAwait(false),
             "rollback" => updateEngine.RollbackLatest(),
-            "download" => await updateEngine.DownloadAsync(
-                context.GetOption("manifest-url") ?? throw new InvalidOperationException("Missing --manifest-url."),
-                context.GetOption("signature-url") ?? throw new InvalidOperationException("Missing --signature-url."),
-                context.GetOption("archive-url") ?? throw new InvalidOperationException("Missing --archive-url."),
-                CancellationToken.None).ConfigureAwait(false),
+            "download" => await DownloadUpdatePayloadAsync(context, updateEngine).ConfigureAwait(false),
             _ => new LauncherResult
             {
                 Success = false,
@@ -106,6 +102,15 @@ internal static class Commands
         };
     }
 
+    private static async Task<LauncherResult> DownloadUpdatePayloadAsync(CommandContext context, UpdateEngineService updateEngine)
+    {
+        return await updateEngine.DownloadAsync(
+            context.GetOption("manifest-url") ?? throw new InvalidOperationException("Missing --manifest-url."),
+            context.GetOption("signature-url") ?? throw new InvalidOperationException("Missing --signature-url."),
+            context.GetOption("archive-url") ?? throw new InvalidOperationException("Missing --archive-url."),
+            CancellationToken.None).ConfigureAwait(false);
+    }
+
     private static LauncherResult ExecutePluginCommand(
         CommandContext context,
         PluginInstallerService pluginInstaller,
@@ -149,10 +154,7 @@ internal static class Commands
             Directory.CreateDirectory(dir);
         }
 
-        var json = JsonSerializer.Serialize(result, new JsonSerializerOptions
-        {
-            WriteIndented = true
-        });
+        var json = JsonSerializer.Serialize(result, AppJsonContext.Default.LauncherResult);
         await File.WriteAllTextAsync(fullPath, json, Encoding.UTF8).ConfigureAwait(false);
     }
 

LanMountainDesktop.Launcher/Services/DeploymentLocator.cs

@@ -1,5 +1,6 @@
 using System.Globalization;
 using System.Text.Json;
+using LanMountainDesktop.Launcher.Models;
 using LanMountainDesktop.Shared.Contracts.Launcher;
 
 namespace LanMountainDesktop.Launcher.Services;
@@ -17,44 +18,65 @@ internal sealed class DeploymentLocator
 
     public string? FindCurrentDeploymentDirectory()
     {
-        var candidates = Directory.Exists(_appRoot)
-            ? Directory.GetDirectories(_appRoot, "app-*", SearchOption.TopDirectoryOnly)
-            : [];
+        Console.WriteLine("[DeploymentLocator] Searching for deployment directories (ClassIsland style)...");
 
-        // 过滤掉无效的部署目录
-        var validCandidates = candidates
-            .Where(path => 
-                !File.Exists(Path.Combine(path, ".destroy")) &&    // 排除待删除
-                !File.Exists(Path.Combine(path, ".partial")))      // 排除未完成
-            .ToList();
-
-        // 优先选择带 .current 标记的版本
-        var withMarkers = validCandidates
-            .Where(path => File.Exists(Path.Combine(path, ".current")))
-            .Select(path => new
-            {
-                Path = path,
-                Version = ParseVersionFromDirectory(path)
-            })
-            .OrderByDescending(item => item.Version)
-            .ToList();
-
-        if (withMarkers.Count > 0)
+        if (!Directory.Exists(_appRoot))
         {
-            return withMarkers[0].Path;
+            Console.WriteLine("[DeploymentLocator] App root directory does not exist");
+            return null;
         }
 
-        // 如果没有 .current 标记,选择最新版本
-        var byVersion = validCandidates
-            .Select(path => new
-            {
-                Path = path,
-                Version = ParseVersionFromDirectory(path)
-            })
-            .OrderByDescending(item => item.Version)
-            .ToList();
+        var executable = OperatingSystem.IsWindows() ? "LanMountainDesktop.exe" : "LanMountainDesktop";
 
-        return byVersion.Count > 0 ? byVersion[0].Path : null;
+        try
+        {
+            var candidates = Directory.GetDirectories(_appRoot, "app-*", SearchOption.TopDirectoryOnly);
+            Console.WriteLine($"[DeploymentLocator] Found {candidates.Length} app-* directories");
+
+            // ClassIsland 风格的查询：先筛选，后排序
+            var validInstallations = candidates
+                .Where(path =>
+                {
+                    var hasDestroy = File.Exists(Path.Combine(path, ".destroy"));
+                    var hasPartial = File.Exists(Path.Combine(path, ".partial"));
+                    var hasExe = File.Exists(Path.Combine(path, executable));
+                    var hasCurrent = File.Exists(Path.Combine(path, ".current"));
+                    var version = ParseVersionFromDirectory(path);
+
+                    Console.WriteLine($"[DeploymentLocator] Candidate: {Path.GetFileName(path)} | " +
+                        $"Version={version} | " +
+                        $"Current={hasCurrent} | " +
+                        $"Destroy={hasDestroy} | " +
+                        $"Partial={hasPartial} | " +
+                        $"HasExe={hasExe}");
+
+                    return !hasDestroy && !hasPartial && hasExe;
+                })
+                .Select(path => new
+                {
+                    Path = path,
+                    Version = ParseVersionFromDirectory(path),
+                    HasCurrentMarker = File.Exists(Path.Combine(path, ".current"))
+                })
+                .OrderBy(x => x.HasCurrentMarker ? 0 : 1)  // .current 标记的排前面
+                .ThenByDescending(x => x.Version)  // 然后按版本号降序
+                .ToList();
+
+            if (validInstallations.Count == 0)
+            {
+                Console.WriteLine("[DeploymentLocator] No valid deployment directories found");
+                return null;
+            }
+
+            var best = validInstallations[0];
+            Console.WriteLine($"[DeploymentLocator] Selected: {Path.GetFileName(best.Path)} (current={best.HasCurrentMarker}, version={best.Version})");
+            return best.Path;
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[DeploymentLocator] Error searching for deployments: {ex}");
+            return null;
+        }
     }
 
     public string? ResolveHostExecutablePath()
@@ -233,35 +255,159 @@ internal sealed class DeploymentLocator
         }
     }
 
-    public void CleanupDestroyedDeployments()
+    /// <summary>
+    /// 清理旧版本部署，保留最近的N个版本
+    /// </summary>
+    /// <param name="minVersionsToKeep">最少保留版本数，默认3个</param>
+    public void CleanupOldDeployments(int minVersionsToKeep = 3)
     {
         try
         {
-            var candidates = Directory.Exists(_appRoot)
-                ? Directory.GetDirectories(_appRoot, "app-*", SearchOption.TopDirectoryOnly)
-                : [];
+            Console.WriteLine($"[DeploymentLocator] Starting cleanup with retention policy: keep at least {minVersionsToKeep} versions");
 
-            var destroyedDirs = candidates
-                .Where(path => File.Exists(Path.Combine(path, ".destroy")));
+            if (!Directory.Exists(_appRoot))
+            {
+                return;
+            }
 
-            foreach (var dir in destroyedDirs)
+            var candidates = Directory.GetDirectories(_appRoot, "app-*", SearchOption.TopDirectoryOnly);
+
+            // 过滤掉无效部署目录（排除partial），按版本排序
+            var validDeployments = candidates
+                .Where(path => !File.Exists(Path.Combine(path, ".partial")))
+                .Select(path => new
+                {
+                    Path = path,
+                    Version = ParseVersionFromDirectory(path),
+                    IsDestroyed = File.Exists(Path.Combine(path, ".destroy")),
+                    IsCurrent = File.Exists(Path.Combine(path, ".current"))
+                })
+                .OrderByDescending(item => item.Version)
+                .ToList();
+
+            Console.WriteLine($"[DeploymentLocator] Found {validDeployments.Count} valid deployments");
+
+            // 确定要保留的版本
+            var versionsToKeep = new HashSet<string>();
+
+            // 1. 总是保留当前版本
+            var currentVersion = validDeployments.FirstOrDefault(d => d.IsCurrent);
+            if (currentVersion != null)
+            {
+                versionsToKeep.Add(currentVersion.Path);
+                Console.WriteLine($"[DeploymentLocator] Keep current version: {currentVersion.Path}");
+            }
+
+            // 2. 保留最近的N个有效版本（不包括已标记destroy的）
+            var activeVersions = validDeployments
+                .Where(d => !d.IsDestroyed)
+                .Take(minVersionsToKeep)
+                .ToList();
+
+            foreach (var ver in activeVersions)
+            {
+                versionsToKeep.Add(ver.Path);
+                Console.WriteLine($"[DeploymentLocator] Keep recent version: {ver.Path}");
+            }
+
+            // 3. 保留有快照的版本（用于回滚）
+            var snapshotDir = Path.Combine(_appRoot, ".launcher", "snapshots");
+            if (Directory.Exists(snapshotDir))
             {
                 try
                 {
-                    Directory.Delete(dir, recursive: true);
+                    var snapshotFiles = Directory.GetFiles(snapshotDir, "*.json", SearchOption.TopDirectoryOnly);
+                    foreach (var snapshotFile in snapshotFiles)
+                    {
+                        try
+                        {
+                            var json = File.ReadAllText(snapshotFile);
+                            var snapshot = System.Text.Json.JsonSerializer.Deserialize(json, AppJsonContext.Default.SnapshotMetadata);
+                            if (snapshot != null && !string.IsNullOrEmpty(snapshot.SourceDirectory))
+                            {
+                                if (Directory.Exists(snapshot.SourceDirectory))
+                                {
+                                    versionsToKeep.Add(snapshot.SourceDirectory);
+                                    Console.WriteLine($"[DeploymentLocator] Keep version for rollback: {snapshot.SourceDirectory}");
+                                }
+                            }
+                        }
+                        catch
+                        {
+                            // 忽略快照解析错误
+                        }
+                    }
+                }
+                catch
+                {
+                    // 忽略快照目录访问错误
+                }
+            }
+
+            // 清理不需要的版本
+            foreach (var deployment in validDeployments)
+            {
+                if (versionsToKeep.Contains(deployment.Path))
+                {
+                    // 保留此版本，如果之前标记了destroy则取消标记
+                    if (deployment.IsDestroyed)
+                    {
+                        try
+                        {
+                            File.Delete(Path.Combine(deployment.Path, ".destroy"));
+                            Console.WriteLine($"[DeploymentLocator] Unmarked for deletion (kept): {deployment.Path}");
+                        }
+                        catch
+                        {
+                            // 忽略取消标记失败
+                        }
+                    }
+                    continue;
+                }
+
+                // 如果还没标记destroy的，先标记
+                if (!deployment.IsDestroyed)
+                {
+                    try
+                    {
+                        File.WriteAllText(Path.Combine(deployment.Path, ".destroy"), string.Empty);
+                        Console.WriteLine($"[DeploymentLocator] Marked for deletion: {deployment.Path}");
+                    }
+                    catch
+                    {
+                        // 忽略标记失败
+                    }
+                }
+
+                // 尝试删除
+                try
+                {
+                    Directory.Delete(deployment.Path, recursive: true);
+                    Console.WriteLine($"[DeploymentLocator] Deleted: {deployment.Path}");
                 }
                 catch
                 {
                     // 忽略删除失败(可能文件被占用),下次启动再试
+                    Console.WriteLine($"[DeploymentLocator] Failed to delete (will retry later): {deployment.Path}");
                 }
             }
         }
-        catch
+        catch (Exception ex)
         {
+            Console.Error.WriteLine($"[DeploymentLocator] Cleanup failed: {ex.Message}");
             // 忽略清理失败
         }
     }
 
+    /// <summary>
+    /// 仅清理已标记为.destroy的部署（兼容旧方法）
+    /// </summary>
+    [Obsolete("Use CleanupOldDeployments instead")]
+    public void CleanupDestroyedDeployments()
+    {
+        CleanupOldDeployments(3);
+    }
+
     public static Version ParseVersionFromDirectory(string path)
     {
         var text = ParseVersionTextFromDirectory(path);
@@ -299,7 +445,7 @@ internal sealed class DeploymentLocator
                 try
                 {
                     var json = File.ReadAllText(versionFile);
-                    var info = JsonSerializer.Deserialize<AppVersionInfo>(json);
+                    var info = JsonSerializer.Deserialize(json, AppJsonContext.Default.AppVersionInfo);
                     if (info is not null)
                     {
                         return info;

LanMountainDesktop.Launcher/Services/FlexibleHostLocator.cs

@@ -4,50 +4,67 @@ using System.Text.Json;
 namespace LanMountainDesktop.Launcher.Services;
 
 /// <summary>
-/// 灵活的主程序定位器
-/// </summary>
-internal sealed class FlexibleHostLocator
-{
-    private readonly HostDiscoveryOptions _options;
-    private readonly string _appRoot;
-
-    public FlexibleHostLocator(string appRoot, HostDiscoveryOptions? options = null)
-    {
-        _appRoot = appRoot;
-        _options = options ?? new HostDiscoveryOptions();
-    }
-
-    /// <summary>
-    /// 解析主程序可执行文件路径
+    /// 灵活的主程序定位器
     /// </summary>
-    public string? ResolveHostExecutablePath()
+    internal sealed class FlexibleHostLocator
     {
-        var executable = GetExecutableName();
-        var searchContext = new SearchContext
-        {
-            ExecutableName = executable,
-            AppRoot = _appRoot,
-            Options = _options
-        };
+        private readonly HostDiscoveryOptions _options;
+        private readonly string _appRoot;
+        private readonly DeploymentLocator _deploymentLocator;
 
-        // ========== 第一阶段：标准路径查找（快速路径）==========
-        
-        // 1. 检查环境变量指定的路径（最高优先级 - 用于调试和特殊场景）
-        var envPath = GetPathFromEnvironment();
-        if (!string.IsNullOrWhiteSpace(envPath))
+        public FlexibleHostLocator(string appRoot, HostDiscoveryOptions? options = null)
         {
-            var validated = ValidateAndReturn(envPath, "environment variable");
-            if (validated != null) return validated;
+            _appRoot = appRoot;
+            _options = options ?? new HostDiscoveryOptions();
+            _deploymentLocator = new DeploymentLocator(appRoot);
         }
 
-        // 2. 搜索部署目录（app-*）- 生产环境标准路径
-        var deploymentPath = SearchDeploymentDirectories(searchContext);
-        if (!string.IsNullOrWhiteSpace(deploymentPath))
+        /// <summary>
+        /// 解析主程序可执行文件路径
+        /// </summary>
+        public string? ResolveHostExecutablePath()
         {
-            return deploymentPath;
-        }
+            var executable = GetExecutableName();
+            var searchContext = new SearchContext
+            {
+                ExecutableName = executable,
+                AppRoot = _appRoot,
+                Options = _options
+            };
 
-        // 3. 检查 Launcher 同级目录（便携模式）
+            // ========== 第一阶段：标准路径查找（快速路径）==========
+            
+            // 1. 检查环境变量指定的路径（最高优先级 - 用于调试和特殊场景）
+            var envPath = GetPathFromEnvironment();
+            if (!string.IsNullOrWhiteSpace(envPath))
+            {
+                var validated = ValidateAndReturn(envPath, "environment variable");
+                if (validated != null) return validated;
+            }
+
+            // 2. 使用 DeploymentLocator（ClassIsland 风格的简洁查询 - 优先）
+            Console.WriteLine("[FlexibleHostLocator] Trying quick path: DeploymentLocator.FindCurrentDeploymentDirectory()");
+            var deploymentDir = _deploymentLocator.FindCurrentDeploymentDirectory();
+            if (!string.IsNullOrWhiteSpace(deploymentDir))
+            {
+                var deploymentExePath = Path.Combine(deploymentDir, executable);
+                if (File.Exists(deploymentExePath))
+                {
+                    Console.WriteLine($"[FlexibleHostLocator] Quick path found: {deploymentExePath}");
+                    return deploymentExePath;
+                }
+                Console.WriteLine($"[FlexibleHostLocator] Quick path found dir but no exe: {deploymentExePath}");
+            }
+
+            // 3. 快速路径失败，尝试旧的 SearchDeploymentDirectories 作为 fallback
+            Console.WriteLine("[FlexibleHostLocator] Quick path failed, falling back to SearchDeploymentDirectories");
+            var deploymentPath = SearchDeploymentDirectories(searchContext);
+            if (!string.IsNullOrWhiteSpace(deploymentPath))
+            {
+                return deploymentPath;
+            }
+
+        // 4. 检查 Launcher 同级目录（便携模式）
         var portablePath = SearchPortableLocation(searchContext);
         if (!string.IsNullOrWhiteSpace(portablePath))
         {
@@ -56,7 +73,7 @@ internal sealed class FlexibleHostLocator
 
         // ========== 第二阶段：灵活查找（标准路径找不到时）==========
         
-        // 4. 检查配置文件中的路径 - 用户自定义配置
+        // 5. 检查配置文件中的路径 - 用户自定义配置
         var configPath = GetPathFromConfigFile();
         if (!string.IsNullOrWhiteSpace(configPath))
         {
@@ -71,7 +88,7 @@ internal sealed class FlexibleHostLocator
             return nearbyPath;
         }
 
-        // 6. 开发模式：检查保存的自定义路径
+        // 7. 开发模式：检查保存的自定义路径
         if (_options.PreferDevModeConfig && Views.ErrorWindow.CheckDevModeEnabled())
         {
             var savedPath = Views.ErrorWindow.GetSavedCustomHostPath();
@@ -82,21 +99,21 @@ internal sealed class FlexibleHostLocator
             }
         }
 
-        // 7. 搜索标准开发路径
+        // 8. 搜索标准开发路径
         var devPath = SearchDevelopmentPaths(searchContext);
         if (!string.IsNullOrWhiteSpace(devPath))
         {
             return devPath;
         }
 
-        // 8. 搜索额外的配置路径
+        // 9. 搜索额外的配置路径
         var additionalPath = SearchAdditionalPaths(searchContext);
         if (!string.IsNullOrWhiteSpace(additionalPath))
         {
             return additionalPath;
         }
 
-        // 9. 递归搜索（如果启用）
+        // 10. 递归搜索（如果启用）
         if (_options.RecursiveSearch)
         {
             var recursivePath = SearchRecursively(searchContext);
@@ -142,7 +159,7 @@ internal sealed class FlexibleHostLocator
         try
         {
             var json = File.ReadAllText(configPath);
-            var config = JsonSerializer.Deserialize<HostDiscoveryConfig>(json);
+            var config = JsonSerializer.Deserialize(json, AppJsonContext.Default.HostDiscoveryConfig);
             if (config?.HostPath != null && File.Exists(config.HostPath))
             {
                 return config.HostPath;
@@ -600,13 +617,13 @@ internal sealed class FlexibleHostLocator
         public required string AppRoot { get; set; }
         public required HostDiscoveryOptions Options { get; set; }
     }
-
-    /// <summary>
-    /// 发现配置文件
-    /// </summary>
-    private class HostDiscoveryConfig
-    {
-        public string? HostPath { get; set; }
-        public List<string>? AdditionalPaths { get; set; }
-    }
+}
+
+/// <summary>
+/// 发现配置文件
+/// </summary>
+internal class HostDiscoveryConfig
+{
+    public string? HostPath { get; set; }
+    public List<string>? AdditionalPaths { get; set; }
 }

LanMountainDesktop.Launcher/Services/Ipc/LauncherIpcServer.cs

@@ -143,7 +143,7 @@ public class LauncherIpcServer : IDisposable
 
                     // 3. 反序列化并回调
                     var json = System.Text.Encoding.UTF8.GetString(payloadBuffer, 0, payloadLength);
-                    var message = JsonSerializer.Deserialize<StartupProgressMessage>(json);
+                    var message = JsonSerializer.Deserialize(json, AppJsonContext.Default.StartupProgressMessage);
                     if (message is not null)
                     {
                         _onProgress(message);

LanMountainDesktop.Launcher/Services/LauncherFlowCoordinator.cs

@@ -9,11 +9,19 @@ namespace LanMountainDesktop.Launcher.Services;
 
 internal sealed class LauncherFlowCoordinator
 {
+    private static readonly string[] LauncherOnlyOptions =
+    [
+        "debug", "show-loading-details", "plugins-dir", "source", "result",
+        LauncherIpcConstants.LauncherPidEnvVar,
+        LauncherIpcConstants.PackageRootEnvVar,
+        LauncherIpcConstants.VersionEnvVar,
+        LauncherIpcConstants.CodenameEnvVar
+    ];
+
     private readonly CommandContext _context;
     private readonly DeploymentLocator _deploymentLocator;
     private readonly OobeStateService _oobeStateService;
     private readonly UpdateEngineService _updateEngine;
-    private readonly UpdateCheckService _updateCheckService;
     private readonly PluginInstallerService _pluginInstallerService;
     private readonly IReadOnlyList<IOobeStep> _oobeSteps;
 
@@ -22,14 +30,12 @@ internal sealed class LauncherFlowCoordinator
         DeploymentLocator deploymentLocator,
         OobeStateService oobeStateService,
         UpdateEngineService updateEngine,
-        UpdateCheckService updateCheckService,
         PluginInstallerService pluginInstallerService)
     {
         _context = context;
         _deploymentLocator = deploymentLocator;
         _oobeStateService = oobeStateService;
         _updateEngine = updateEngine;
-        _updateCheckService = updateCheckService;
         _pluginInstallerService = pluginInstallerService;
         _oobeSteps = [new WelcomeOobeStep(_oobeStateService)];
     }
@@ -38,8 +44,20 @@ internal sealed class LauncherFlowCoordinator
     {
         try
         {
-            // 清理待删除的旧版本
-            _deploymentLocator.CleanupDestroyedDeployments();
+            // 清理旧版本，保留至少3个版本
+            _deploymentLocator.CleanupOldDeployments(minVersionsToKeep: 3);
+
+            // 检测老版本安装（首次运行时）
+            if (_oobeStateService.IsFirstRun())
+            {
+                var legacyInfo = LegacyVersionDetector.DetectLegacyInstallation();
+                if (legacyInfo != null)
+                {
+                    var migrationResult = await ShowMigrationPromptAsync(legacyInfo);
+                    // 无论用户选择什么，都继续启动流程
+                    Console.WriteLine($"[LauncherFlowCoordinator] Migration prompt result: {migrationResult}");
+                }
+            }
 
             // 使用传入的 Splash 窗口或创建新的
             var splashWindow = existingSplashWindow ?? await Dispatcher.UIThread.InvokeAsync(() =>
@@ -51,9 +69,23 @@ internal sealed class LauncherFlowCoordinator
 
             var reporter = (ISplashStageReporter)splashWindow;
             
+            // 创建加载详情窗口（可选，用于显示详细加载状态）
+            LoadingDetailsWindow? loadingDetailsWindow = null;
+            if (_context.IsDebugMode || _context.GetOption("show-loading-details") == "true")
+            {
+                await Dispatcher.UIThread.InvokeAsync(() =>
+                {
+                    loadingDetailsWindow = new LoadingDetailsWindow();
+                    loadingDetailsWindow.Show();
+                });
+            }
+            
             // 跟踪主程序是否已就绪，就绪后自动关闭 Splash 窗口
             var hostReadyTcs = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
             
+            // 加载状态管理
+            var loadingState = new LoadingStateMessage();
+            
             // 启动 IPC 服务端监听主程序进度
             using var ipcServer = new LauncherIpcServer(msg =>
             {
@@ -61,12 +93,29 @@ internal sealed class LauncherFlowCoordinator
                 {
                     try
                     {
+                        // 更新加载状态
+                        loadingState = loadingState with
+                        {
+                            Stage = msg.Stage,
+                            OverallProgressPercent = msg.ProgressPercent,
+                            Message = msg.Message,
+                            Timestamp = DateTimeOffset.UtcNow
+                        };
+                        
+                        // 报告到 Splash 窗口
                         reporter.Report(msg.Stage.ToString().ToLower(), msg.Message ?? "");
                         
-                        // 主程序报告就绪后，关闭 Splash 窗口
-                        if (msg.Stage == StartupStage.Ready && splashWindow.IsVisible && splashWindow.IsLoaded)
+                        // 更新加载详情窗口
+                        loadingDetailsWindow?.UpdateLoadingState(loadingState);
+                        
+                        // 主程序报告就绪后，关闭 Splash 窗口和加载详情窗口
+                        if (msg.Stage == StartupStage.Ready)
                         {
-                            splashWindow.Close();
+                            if (splashWindow.IsVisible && splashWindow.IsLoaded)
+                            {
+                                splashWindow.Close();
+                            }
+                            loadingDetailsWindow?.Close();
                             hostReadyTcs.TrySetResult();
                         }
                     }
@@ -121,20 +170,62 @@ internal sealed class LauncherFlowCoordinator
                 // 维持 IPC 管道服务端供主程序报告启动进度。
                 if (hostProcess is not null)
                 {
-                    // 等待主程序就绪或进程退出（取先发生者）
-                    // 如果主程序在 60 秒内未报告 Ready，也关闭 Splash 窗口作为超时保护
-                    var readyOrTimeout = Task.WhenAny(
-                        hostReadyTcs.Task,
-                        Task.Delay(TimeSpan.FromSeconds(60)));
-                    
                     var processExitTask = hostProcess.WaitForExitAsync();
                     
-                    // 先等待就绪/超时，然后等待进程退出
-                    await readyOrTimeout;
+                    // 等待主程序就绪或进程退出（取先发生者）
+                    // 30 秒超时，宿主端有 10 秒兜底机制确保 Ready 信号发送
+                    var readyOrTimeoutOrExit = Task.WhenAny(
+                        hostReadyTcs.Task,
+                        processExitTask,
+                        Task.Delay(TimeSpan.FromSeconds(30)));
+                    
+                    var completedTask = await readyOrTimeoutOrExit;
+                    
+                    // Host process exited before reporting Ready.
+                    if (completedTask == processExitTask)
+                    {
+                        var exitCode = hostProcess.ExitCode;
+                        Console.Error.WriteLine($"[LauncherFlowCoordinator] Host process exited before Ready. ExitCode={exitCode}.");
+
+                        var recoveryResult = await TryRecoverFromEarlyHostExitAsync(
+                            exitCode,
+                            hostReadyTcs,
+                            splashWindow,
+                            loadingDetailsWindow).ConfigureAwait(false);
+                        if (recoveryResult is not null)
+                        {
+                            return recoveryResult;
+                        }
+
+                        // Close Splash window for unrecoverable early exits.
+                        await Dispatcher.UIThread.InvokeAsync(() =>
+                        {
+                            try
+                            {
+                                if (splashWindow.IsVisible && splashWindow.IsLoaded)
+                                {
+                                    splashWindow.Close();
+                                }
+                            }
+                            catch (Exception ex)
+                            {
+                                Console.Error.WriteLine($"[LauncherFlowCoordinator] Error closing splash window: {ex.Message}");
+                            }
+                        });
+                            
+                        return new LauncherResult
+                        {
+                            Success = false,
+                            Stage = "launch",
+                            Code = "host_crashed",
+                            Message = $"主程序异常退出，退出代码: {exitCode}"
+                        };
+                    }
                     
                     // 如果 Splash 窗口仍然打开（超时情况），关闭它
                     if (splashWindow.IsVisible)
                     {
+                        Console.WriteLine("[LauncherFlowCoordinator] Timeout waiting for Ready signal, closing splash window...");
                         await Dispatcher.UIThread.InvokeAsync(() =>
                         {
                             try
@@ -151,7 +242,11 @@ internal sealed class LauncherFlowCoordinator
                         });
                     }
                     
-                    await processExitTask;
+                    // 继续等待主程序进程退出（如果它还在运行）
+                    if (!hostProcess.HasExited)
+                    {
+                        await processExitTask;
+                    }
                 }
                 else
                 {
@@ -200,6 +295,133 @@ internal sealed class LauncherFlowCoordinator
         }
     }
 
+    private async Task<LauncherResult?> TryRecoverFromEarlyHostExitAsync(
+        int exitCode,
+        TaskCompletionSource hostReadyTcs,
+        SplashWindow splashWindow,
+        LoadingDetailsWindow? loadingDetailsWindow)
+    {
+        if (exitCode == HostExitCodes.SecondaryActivationSucceeded)
+        {
+            Console.WriteLine("[LauncherFlowCoordinator] Host redirected activation to an existing primary instance.");
+            await CloseWindowsAsync(splashWindow, loadingDetailsWindow).ConfigureAwait(false);
+            return new LauncherResult
+            {
+                Success = true,
+                Stage = "launch",
+                Code = "activated_existing_instance",
+                Message = "Detected existing running instance and activation was acknowledged."
+            };
+        }
+
+        if (exitCode is not HostExitCodes.SecondaryActivationFailed and not HostExitCodes.RestartLockNotAcquired)
+        {
+            return null;
+        }
+
+        Console.Error.WriteLine(
+            $"[LauncherFlowCoordinator] Activation handshake failed with exit code {exitCode}. Retrying explicit activation once...");
+
+        var (retryLaunchResult, retryProcess) = await LaunchHostWithIpcAsync(splashWindow).ConfigureAwait(false);
+        if (!retryLaunchResult.Success)
+        {
+            return retryLaunchResult;
+        }
+
+        if (retryProcess is null)
+        {
+            return new LauncherResult
+            {
+                Success = false,
+                Stage = "launch",
+                Code = "activation_retry_start_failed",
+                Message = "Explicit activation retry failed because no host process was created."
+            };
+        }
+
+        Console.WriteLine($"[LauncherFlowCoordinator] Explicit activation retry started. RetryPid={retryProcess.Id}.");
+        var retryExitTask = retryProcess.WaitForExitAsync();
+        var retryCompleted = await Task.WhenAny(
+            hostReadyTcs.Task,
+            retryExitTask,
+            Task.Delay(TimeSpan.FromSeconds(15))).ConfigureAwait(false);
+
+        if (retryCompleted == hostReadyTcs.Task)
+        {
+            Console.WriteLine("[LauncherFlowCoordinator] Host reported Ready after explicit activation retry.");
+            await CloseWindowsAsync(splashWindow, loadingDetailsWindow).ConfigureAwait(false);
+            return new LauncherResult
+            {
+                Success = true,
+                Stage = "launch",
+                Code = "activation_retry_ready",
+                Message = "Explicit activation retry succeeded and host reported Ready."
+            };
+        }
+
+        if (retryCompleted == retryExitTask)
+        {
+            var retryExitCode = retryProcess.ExitCode;
+            if (retryExitCode == HostExitCodes.SecondaryActivationSucceeded)
+            {
+                await CloseWindowsAsync(splashWindow, loadingDetailsWindow).ConfigureAwait(false);
+                return new LauncherResult
+                {
+                    Success = true,
+                    Stage = "launch",
+                    Code = "activation_retry_redirected",
+                    Message = "Explicit activation retry redirected to the existing primary instance."
+                };
+            }
+
+            return new LauncherResult
+            {
+                Success = false,
+                Stage = "launch",
+                Code = "activation_retry_failed",
+                Message = $"Explicit activation retry failed. ExitCode={retryExitCode}. 请结束残留后台进程后重试。"
+            };
+        }
+
+        return new LauncherResult
+        {
+            Success = false,
+            Stage = "launch",
+            Code = "activation_retry_timeout",
+            Message = "Explicit activation retry timed out before host became ready. 请结束残留后台进程后重试。"
+        };
+    }
+
+    private static async Task CloseWindowsAsync(SplashWindow splashWindow, LoadingDetailsWindow? loadingDetailsWindow)
+    {
+        await Dispatcher.UIThread.InvokeAsync(() =>
+        {
+            try
+            {
+                if (splashWindow.IsVisible && splashWindow.IsLoaded)
+                {
+                    splashWindow.Close();
+                }
+            }
+            catch (Exception ex)
+            {
+                Console.Error.WriteLine($"[LauncherFlowCoordinator] Failed to close splash window: {ex.Message}");
+            }
+
+            try
+            {
+                if (loadingDetailsWindow is not null && loadingDetailsWindow.IsVisible)
+                {
+                    loadingDetailsWindow.Close();
+                }
+            }
+            catch (Exception ex)
+            {
+                Console.Error.WriteLine($"[LauncherFlowCoordinator] Failed to close loading details window: {ex.Message}");
+            }
+        });
+    }
+
     private async Task<(LauncherResult Result, Process? Process)> LaunchHostWithIpcAsync(SplashWindow? splashWindow = null, string? customHostPath = null)
     {
         // 优先使用自定义路径（调试模式选择的路径）
@@ -236,36 +458,62 @@ internal sealed class LauncherFlowCoordinator
             EnsureExecutable(hostPath);
         }
 
+        var hostWorkingDir = Path.GetDirectoryName(hostPath) ?? _deploymentLocator.GetAppRoot();
+        var versionInfo = _deploymentLocator.GetVersionInfo();
+
+        // 构建命令行参数：转发用户参数 + IPC 环境信息通过命令行传递
+        // UseShellExecute = true 确保 Shell 启动子进程，使其正确关联到交互式桌面窗口站(WinSta0)，
+        // 避免子进程窗口创建成功但不可见的问题。
+        var arguments = new System.Text.StringBuilder();
+
+        // 转发命令行参数给主程序（排除 Launcher 自己的命令和选项）
+        // 只过滤 Launcher 专属的选项，保留宿主程序需要的参数（如 --restart-parent-pid）
+        foreach (var arg in _context.RawArgs)
+        {
+            if (arg == _context.Command || arg == _context.SubCommand)
+                continue;
+            
+            if (arg.StartsWith("--"))
+            {
+                var key = arg[2..];
+                var equalsIndex = key.IndexOf('=');
+                if (equalsIndex >= 0) key = key[..equalsIndex];
+                
+                if (LauncherOnlyOptions.Contains(key, StringComparer.OrdinalIgnoreCase))
+                    continue;
+            }
+            
+            if (arguments.Length > 0) arguments.Append(' ');
+            arguments.Append(QuoteArgument(arg));
+        }
+
+        // 通过命令行参数传递 IPC 连接信息（UseShellExecute=true 时不支持 EnvironmentVariables）
+        if (arguments.Length > 0) arguments.Append(' ');
+        arguments.Append($"--{LauncherIpcConstants.LauncherPidEnvVar}={Environment.ProcessId}");
+        arguments.Append($" --{LauncherIpcConstants.PackageRootEnvVar}={QuoteArgument(_deploymentLocator.GetAppRoot())}");
+        arguments.Append($" --{LauncherIpcConstants.VersionEnvVar}={versionInfo.Version}");
+        arguments.Append($" --{LauncherIpcConstants.CodenameEnvVar}={versionInfo.Codename}");
+
         var processStartInfo = new ProcessStartInfo
         {
             FileName = hostPath,
-            UseShellExecute = false,
-            WorkingDirectory = Path.GetDirectoryName(hostPath) ?? _deploymentLocator.GetAppRoot()
+            UseShellExecute = true,
+            WorkingDirectory = hostWorkingDir,
+            Arguments = arguments.ToString()
         };
 
-        // 转发命令行参数给主程序（排除 Launcher 自己的命令和选项）
-        foreach (var arg in _context.RawArgs)
-        {
-            // 跳过 Launcher 自己的命令和选项，只传递用户原始参数
-            if (arg == _context.Command || arg == _context.SubCommand || arg.StartsWith("--"))
-            {
-                continue;
-            }
-            processStartInfo.ArgumentList.Add(arg);
-        }
-
-        // 传递环境变量供 IPC 使用
+        // 同时设置环境变量作为备选（当 UseShellExecute=true 时 EnvironmentVariables 仍会被子进程继承）
         processStartInfo.EnvironmentVariables[LauncherIpcConstants.LauncherPidEnvVar] = 
             Environment.ProcessId.ToString();
         processStartInfo.EnvironmentVariables[LauncherIpcConstants.PackageRootEnvVar] = 
             _deploymentLocator.GetAppRoot();
-        
-        // 传递版本信息
-        var versionInfo = _deploymentLocator.GetVersionInfo();
         processStartInfo.EnvironmentVariables[LauncherIpcConstants.VersionEnvVar] = versionInfo.Version;
         processStartInfo.EnvironmentVariables[LauncherIpcConstants.CodenameEnvVar] = versionInfo.Codename;
 
         var hostProcess = Process.Start(processStartInfo);
+        Console.WriteLine(
+            $"[LauncherFlowCoordinator] Host launch requested. Path='{hostPath}'; WorkingDir='{hostWorkingDir}'; " +
+            $"Pid={(hostProcess is null ? -1 : hostProcess.Id)}; Args='{processStartInfo.Arguments}'.");
         return (new LauncherResult
         {
             Success = true,
@@ -341,6 +589,99 @@ internal sealed class LauncherFlowCoordinator
         return (result, customPath);
     }
 
+    /// <summary>
+    /// 显示迁移提示窗口
+    /// </summary>
+    private async Task<MigrationResult> ShowMigrationPromptAsync(LegacyVersionInfo legacyInfo)
+    {
+        MigrationPromptWindow? migrationWindow = null;
+
+        // 在 UI 线程创建并显示迁移提示窗口
+        await Dispatcher.UIThread.InvokeAsync(() =>
+        {
+            try
+            {
+                migrationWindow = new MigrationPromptWindow();
+                migrationWindow.SetLegacyInfo(legacyInfo);
+                migrationWindow.Show();
+                Console.WriteLine("[LauncherFlowCoordinator] MigrationPromptWindow shown");
+            }
+            catch (Exception ex)
+            {
+                Console.Error.WriteLine($"[LauncherFlowCoordinator] Failed to show MigrationPromptWindow: {ex.Message}");
+            }
+        });
+
+        if (migrationWindow is null)
+        {
+            Console.Error.WriteLine("[LauncherFlowCoordinator] MigrationPromptWindow is null, skipping migration prompt");
+            return MigrationResult.Skipped;
+        }
+
+        // 等待用户选择
+        MigrationResult result;
+
+        try
+        {
+            result = await migrationWindow.WaitForChoiceAsync();
+            Console.WriteLine($"[LauncherFlowCoordinator] MigrationPromptWindow result: {result}");
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[LauncherFlowCoordinator] Error waiting for migration choice: {ex.Message}");
+            result = MigrationResult.Skipped;
+        }
+
+        // 安全关闭窗口
+        await Dispatcher.UIThread.InvokeAsync(() =>
+        {
+            try
+            {
+                if (migrationWindow.IsVisible && migrationWindow.IsLoaded)
+                {
+                    migrationWindow.Close();
+                    Console.WriteLine("[LauncherFlowCoordinator] MigrationPromptWindow closed successfully");
+                }
+            }
+            catch (Exception ex)
+            {
+                Console.Error.WriteLine($"[LauncherFlowCoordinator] Error closing MigrationPromptWindow: {ex.Message}");
+            }
+        });
+
+        return result;
+    }
+
+    private static string QuoteArgument(string value)
+    {
+        if (string.IsNullOrEmpty(value))
+        {
+            return "\"\"";
+        }
+
+        if (!value.Contains('"') && !value.Contains(' ') && !value.Contains('\t'))
+        {
+            return value;
+        }
+
+        var builder = new System.Text.StringBuilder();
+        builder.Append('"');
+        foreach (var ch in value)
+        {
+            if (ch == '"')
+            {
+                builder.Append("\\\"");
+            }
+            else
+            {
+                builder.Append(ch);
+            }
+        }
+
+        builder.Append('"');
+        return builder.ToString();
+    }
+
     private static void EnsureExecutable(string path)
     {
         if (OperatingSystem.IsWindows())

LanMountainDesktop.Launcher/Services/LegacyVersionDetector.cs

@@ -0,0 +1,341 @@
+using System.Diagnostics;
+using Microsoft.Win32;
+
+namespace LanMountainDesktop.Launcher.Services;
+
+/// <summary>
+/// 老版本检测器 - 检测 0.8.x 及更早的单应用模式安装
+/// </summary>
+internal sealed class LegacyVersionDetector
+{
+    private const string LegacyAppName = "LanMountainDesktop";
+    private const string LegacyExeName = "LanMountainDesktop.exe";
+
+    /// <summary>
+    /// 检测是否存在老版本安装
+    /// </summary>
+    public static LegacyVersionInfo? DetectLegacyInstallation()
+    {
+        // 1. 检查注册表（安装版）
+        var registryInfo = DetectFromRegistry();
+        if (registryInfo != null)
+        {
+            return registryInfo;
+        }
+
+        // 2. 检查常见安装目录
+        var commonPaths = DetectFromCommonPaths();
+        if (commonPaths != null)
+        {
+            return commonPaths;
+        }
+
+        // 3. 检查便携版位置
+        var portableInfo = DetectPortableInstallation();
+        if (portableInfo != null)
+        {
+            return portableInfo;
+        }
+
+        return null;
+    }
+
+    /// <summary>
+    /// 从注册表检测安装信息
+    /// </summary>
+    private static LegacyVersionInfo? DetectFromRegistry()
+    {
+        try
+        {
+            // 检查 HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall
+            using var key = Registry.LocalMachine.OpenSubKey(
+                @$"Software\Microsoft\Windows\CurrentVersion\Uninstall\{LegacyAppName}");
+            
+            if (key != null)
+            {
+                var installLocation = key.GetValue("InstallLocation") as string;
+                var displayVersion = key.GetValue("DisplayVersion") as string;
+                var uninstallString = key.GetValue("UninstallString") as string;
+
+                if (!string.IsNullOrWhiteSpace(installLocation) && 
+                    File.Exists(Path.Combine(installLocation, LegacyExeName)))
+                {
+                    return new LegacyVersionInfo
+                    {
+                        Version = displayVersion ?? "0.8.x",
+                        InstallPath = installLocation,
+                        UninstallCommand = uninstallString,
+                        InstallType = LegacyInstallType.Registry
+                    };
+                }
+            }
+
+            // 检查 HKCU（用户级安装）
+            using var userKey = Registry.CurrentUser.OpenSubKey(
+                @$"Software\Microsoft\Windows\CurrentVersion\Uninstall\{LegacyAppName}");
+            
+            if (userKey != null)
+            {
+                var installLocation = userKey.GetValue("InstallLocation") as string;
+                var displayVersion = userKey.GetValue("DisplayVersion") as string;
+                var uninstallString = userKey.GetValue("UninstallString") as string;
+
+                if (!string.IsNullOrWhiteSpace(installLocation) && 
+                    File.Exists(Path.Combine(installLocation, LegacyExeName)))
+                {
+                    return new LegacyVersionInfo
+                    {
+                        Version = displayVersion ?? "0.8.x",
+                        InstallPath = installLocation,
+                        UninstallCommand = uninstallString,
+                        InstallType = LegacyInstallType.Registry
+                    };
+                }
+            }
+        }
+        catch (Exception ex)
+        {
+            Console.WriteLine($"[LegacyVersionDetector] Registry detection failed: {ex.Message}");
+        }
+
+        return null;
+    }
+
+    /// <summary>
+    /// 从常见安装路径检测
+    /// </summary>
+    private static LegacyVersionInfo? DetectFromCommonPaths()
+    {
+        var commonPaths = new[]
+        {
+            Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles), LegacyAppName),
+            Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFilesX86), LegacyAppName),
+            Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData), LegacyAppName),
+            Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData), LegacyAppName),
+        };
+
+        foreach (var path in commonPaths)
+        {
+            try
+            {
+                if (Directory.Exists(path))
+                {
+                    // 检查是否存在老版本的特征文件（没有 app-* 目录）
+                    var exePath = Path.Combine(path, LegacyExeName);
+                    var hasAppDirs = Directory.GetDirectories(path, "app-*").Length > 0;
+
+                    if (File.Exists(exePath) && !hasAppDirs)
+                    {
+                        // 尝试读取版本信息
+                        var version = TryGetFileVersion(exePath);
+                        
+                        return new LegacyVersionInfo
+                        {
+                            Version = version ?? "0.8.x",
+                            InstallPath = path,
+                            UninstallCommand = FindUninstaller(path),
+                            InstallType = LegacyInstallType.CommonPath
+                        };
+                    }
+                }
+            }
+            catch (Exception ex)
+            {
+                Console.WriteLine($"[LegacyVersionDetector] Path detection failed for {path}: {ex.Message}");
+            }
+        }
+
+        return null;
+    }
+
+    /// <summary>
+    /// 检测便携版安装
+    /// </summary>
+    private static LegacyVersionInfo? DetectPortableInstallation()
+    {
+        try
+        {
+            // 检查启动器所在目录的父目录（便携版常见布局）
+            var launcherDir = AppContext.BaseDirectory;
+            var parentDir = Path.GetFullPath(Path.Combine(launcherDir, ".."));
+
+            if (Directory.Exists(parentDir))
+            {
+                var exePath = Path.Combine(parentDir, LegacyExeName);
+                var hasAppDirs = Directory.GetDirectories(parentDir, "app-*").Length > 0;
+
+                // 如果存在 exe 且没有 app-* 目录，可能是老版本
+                if (File.Exists(exePath) && !hasAppDirs)
+                {
+                    var version = TryGetFileVersion(exePath);
+                    
+                    // 检查是否真的是老版本（通过文件版本或特定标记）
+                    if (IsLegacyVersion(version))
+                    {
+                        return new LegacyVersionInfo
+                        {
+                            Version = version ?? "0.8.x",
+                            InstallPath = parentDir,
+                            UninstallCommand = null, // 便携版没有卸载程序
+                            InstallType = LegacyInstallType.Portable
+                        };
+                    }
+                }
+            }
+        }
+        catch (Exception ex)
+        {
+            Console.WriteLine($"[LegacyVersionDetector] Portable detection failed: {ex.Message}");
+        }
+
+        return null;
+    }
+
+    /// <summary>
+    /// 查找卸载程序
+    /// </summary>
+    private static string? FindUninstaller(string installPath)
+    {
+        try
+        {
+            // 常见的卸载程序命名
+            var uninstallerNames = new[] { "unins000.exe", "uninstall.exe", "Uninstall.exe" };
+            
+            foreach (var name in uninstallerNames)
+            {
+                var path = Path.Combine(installPath, name);
+                if (File.Exists(path))
+                {
+                    return path;
+                }
+            }
+        }
+        catch { }
+
+        return null;
+    }
+
+    /// <summary>
+    /// 获取文件版本
+    /// </summary>
+    private static string? TryGetFileVersion(string filePath)
+    {
+        try
+        {
+            var versionInfo = FileVersionInfo.GetVersionInfo(filePath);
+            return versionInfo.FileVersion;
+        }
+        catch
+        {
+            return null;
+        }
+    }
+
+    /// <summary>
+    /// 判断是否为老版本（版本号 < 1.0.0）
+    /// </summary>
+    private static bool IsLegacyVersion(string? version)
+    {
+        if (string.IsNullOrWhiteSpace(version))
+        {
+            return true; // 无法确定版本时，保守认为是老版本
+        }
+
+        if (Version.TryParse(version.Split(' ')[0], out var v))
+        {
+            return v.Major < 1;
+        }
+
+        return true;
+    }
+
+    /// <summary>
+    /// 打开卸载界面
+    /// </summary>
+    public static void OpenUninstallInterface(LegacyVersionInfo info)
+    {
+        try
+        {
+            if (!string.IsNullOrWhiteSpace(info.UninstallCommand))
+            {
+                // 有卸载命令，直接执行
+                var parts = info.UninstallCommand.Split(new[] { ' ' }, 2);
+                var fileName = parts[0].Trim('"');
+                var arguments = parts.Length > 1 ? parts[1] : "";
+
+                Process.Start(new ProcessStartInfo
+                {
+                    FileName = fileName,
+                    Arguments = arguments,
+                    UseShellExecute = true,
+                    Verb = "runas" // 请求管理员权限
+                });
+            }
+            else
+            {
+                // 没有卸载命令，打开系统卸载面板
+                Process.Start(new ProcessStartInfo
+                {
+                    FileName = "appwiz.cpl",
+                    UseShellExecute = true
+                });
+            }
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[LegacyVersionDetector] Failed to open uninstall: {ex.Message}");
+            
+            // 兜底：打开系统卸载面板
+            try
+            {
+                Process.Start(new ProcessStartInfo
+                {
+                    FileName = "appwiz.cpl",
+                    UseShellExecute = true
+                });
+            }
+            catch { }
+        }
+    }
+
+    /// <summary>
+    /// 在资源管理器中显示老版本位置
+    /// </summary>
+    public static void ShowInExplorer(string path)
+    {
+        try
+        {
+            Process.Start(new ProcessStartInfo
+            {
+                FileName = "explorer.exe",
+                Arguments = $"/select,\"{path}\"",
+                UseShellExecute = false
+            });
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[LegacyVersionDetector] Failed to show in explorer: {ex.Message}");
+        }
+    }
+}
+
+/// <summary>
+/// 老版本信息
+/// </summary>
+public class LegacyVersionInfo
+{
+    public string Version { get; set; } = "0.8.x";
+    public string InstallPath { get; set; } = "";
+    public string? UninstallCommand { get; set; }
+    public LegacyInstallType InstallType { get; set; }
+}
+
+/// <summary>
+/// 老版本安装类型
+/// </summary>
+public enum LegacyInstallType
+{
+    Registry,    // 注册表安装版
+    CommonPath,  // 常见路径安装
+    Portable     // 便携版
+}

LanMountainDesktop.Launcher/Services/Logger.cs

@@ -0,0 +1,138 @@
+using System.Text;
+
+namespace LanMountainDesktop.Launcher.Services;
+
+/// <summary>
+/// 简单的日志记录器 - 同时输出到控制台和文件
+/// </summary>
+internal static class Logger
+{
+    private static readonly object _lock = new();
+    private static string? _logFilePath;
+    private static bool _initialized;
+
+    /// <summary>
+    /// 初始化日志记录器
+    /// </summary>
+    public static void Initialize()
+    {
+        if (_initialized)
+        {
+            return;
+        }
+
+        try
+        {
+            var logDir = GetLogDirectory();
+            if (!string.IsNullOrEmpty(logDir))
+            {
+                Directory.CreateDirectory(logDir);
+                var timestamp = DateTime.Now.ToString("yyyyMMdd_HHmmss");
+                _logFilePath = Path.Combine(logDir, $"launcher_{timestamp}.log");
+                Console.WriteLine($"[Logger] Log file initialized: {_logFilePath}");
+            }
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[Logger] Failed to initialize log file: {ex.Message}");
+        }
+
+        _initialized = true;
+    }
+
+    /// <summary>
+    /// 获取日志文件路径
+    /// </summary>
+    public static string? GetLogFilePath()
+    {
+        return _logFilePath;
+    }
+
+    /// <summary>
+    /// 获取日志目录
+    /// </summary>
+    private static string? GetLogDirectory()
+    {
+        try
+        {
+            var appData = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData);
+            if (!string.IsNullOrEmpty(appData))
+            {
+                return Path.Combine(appData, "LanMountainDesktop", ".launcher", "logs");
+            }
+        }
+        catch
+        {
+        }
+
+        try
+        {
+            var launcherDir = AppContext.BaseDirectory;
+            return Path.Combine(launcherDir, ".launcher", "logs");
+        }
+        catch
+        {
+        }
+
+        return null;
+    }
+
+    /// <summary>
+    /// 记录信息日志
+    /// </summary>
+    public static void Info(string message)
+    {
+        WriteLog("INFO", message);
+    }
+
+    /// <summary>
+    /// 记录警告日志
+    /// </summary>
+    public static void Warn(string message)
+    {
+        WriteLog("WARN", message);
+    }
+
+    /// <summary>
+    /// 记录错误日志
+    /// </summary>
+    public static void Error(string message)
+    {
+        WriteLog("ERROR", message);
+    }
+
+    /// <summary>
+    /// 记录错误日志（带异常）
+    /// </summary>
+    public static void Error(string message, Exception exception)
+    {
+        WriteLog("ERROR", $"{message}\n{exception}");
+    }
+
+    /// <summary>
+    /// 写入日志
+    /// </summary>
+    private static void WriteLog(string level, string message)
+    {
+        var timestamp = DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss.fff");
+        var logLine = $"[{timestamp}] [{level}] {message}";
+
+        Console.WriteLine(logLine);
+
+        if (string.IsNullOrEmpty(_logFilePath))
+        {
+            return;
+        }
+
+        try
+        {
+            lock (_lock)
+            {
+                File.AppendAllText(_logFilePath, logLine + Environment.NewLine, Encoding.UTF8);
+            }
+        }
+        catch
+        {
+        }
+    }
+}

LanMountainDesktop.Launcher/Services/OobeStateService.cs

@@ -6,29 +6,99 @@ internal sealed class OobeStateService
 
     public OobeStateService(string appRoot)
     {
-        // 将 OOBE 状态文件存储在用户可写的 LocalApplicationData 目录中，
-        // 而不是安装目录（Program Files 下普通用户没有写入权限）。
-        var appDataDir = Path.Combine(
-            Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
-            "LanMountainDesktop");
-        var stateDir = Path.Combine(appDataDir, ".launcher", "state");
-        Directory.CreateDirectory(stateDir);
+        // 优先使用 LocalApplicationData（用户目录，普通用户一定有权限）
+        string? stateDir = null;
+        Exception? lastException = null;
+
+        // 策略1: LocalApplicationData（首选，用户目录，普通用户一定有写权限）
+        try
+        {
+            var appDataDir = Path.Combine(
+                Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
+                "LanMountainDesktop");
+            stateDir = Path.Combine(appDataDir, ".launcher", "state");
+            Directory.CreateDirectory(stateDir);
+            Console.WriteLine($"[OobeStateService] Using LocalApplicationData: {stateDir}");
+        }
+        catch (Exception ex)
+        {
+            lastException = ex;
+            Console.Error.WriteLine($"[OobeStateService] LocalApplicationData failed: {ex.Message}");
+            stateDir = null;
+        }
+
+        // 策略2: 如果LocalApplicationData不行，使用用户的临时目录
+        if (stateDir == null)
+        {
+            try
+            {
+                var tempDir = Path.Combine(Path.GetTempPath(), "LanMountainDesktop", ".launcher", "state");
+                Directory.CreateDirectory(tempDir);
+                stateDir = tempDir;
+                Console.WriteLine($"[OobeStateService] Using TempPath: {stateDir}");
+            }
+            catch (Exception ex)
+            {
+                lastException = ex;
+                Console.Error.WriteLine($"[OobeStateService] TempPath failed: {ex.Message}");
+                stateDir = null;
+            }
+        }
+
+        // 策略3: 最后的兜底：使用当前用户的应用程序数据目录（和Launcher同目录
+        if (stateDir == null)
+        {
+            try
+            {
+                var launcherDir = AppContext.BaseDirectory;
+                stateDir = Path.Combine(launcherDir, ".launcher", "state");
+                Directory.CreateDirectory(stateDir);
+                Console.WriteLine($"[OobeStateService] Using Launcher directory: {stateDir}");
+            }
+            catch (Exception ex)
+            {
+                lastException = ex;
+                Console.Error.WriteLine($"[OobeStateService] All strategies failed! Last error: {ex.Message}");
+                // 如果所有策略都失败，抛出异常让上层处理
+                throw new InvalidOperationException("无法创建 OOBE 状态存储目录失败", lastException);
+            }
+        }
+
         _markerPath = Path.Combine(stateDir, "first_run_completed");
+        Console.WriteLine($"[OobeStateService] Initialized successfully, marker path: {_markerPath}");
     }
 
     public bool IsFirstRun()
     {
-        return !File.Exists(_markerPath);
+        try
+        {
+            return !File.Exists(_markerPath);
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[OobeStateService] Failed to check first run: {ex.Message}");
+            // 如果无法检查，默认视为首次运行，确保OOBE能显示
+            return true;
+        }
     }
 
     public void MarkCompleted()
     {
-        var dir = Path.GetDirectoryName(_markerPath);
-        if (!string.IsNullOrWhiteSpace(dir))
+        try
         {
-            Directory.CreateDirectory(dir);
-        }
+            var dir = Path.GetDirectoryName(_markerPath);
+            if (!string.IsNullOrWhiteSpace(dir))
+            {
+                Directory.CreateDirectory(dir);
+            }
 
-        File.WriteAllText(_markerPath, DateTimeOffset.UtcNow.ToString("O"));
+            File.WriteAllText(_markerPath, DateTimeOffset.UtcNow.ToString("O"));
+            Console.WriteLine("[OobeStateService] Marked first run as completed");
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[OobeStateService] Failed to mark completed: {ex.Message}");
+            // 如果无法写入也没关系，下次启动还会显示OOBE
+        }
     }
 }

LanMountainDesktop.Launcher/Services/PluginInstallerService.cs

@@ -73,7 +73,7 @@ internal sealed class PluginInstallerService
         using var stream = entries[0].Open();
         using var reader = new StreamReader(stream);
         var json = reader.ReadToEnd();
-        var manifest = JsonSerializer.Deserialize<PluginManifest>(json);
+        var manifest = JsonSerializer.Deserialize(json, AppJsonContext.Default.PluginManifest);
         if (manifest == null)
         {
             throw new InvalidOperationException($"Failed to deserialize manifest from '{packagePath}'.");

LanMountainDesktop.Launcher/Services/PluginUpgradeQueueService.cs

@@ -29,7 +29,7 @@ internal sealed class PluginUpgradeQueueService
         }
 
         var text = File.ReadAllText(pendingPath);
-        var pending = JsonSerializer.Deserialize<List<PendingUpgrade>>(text) ?? [];
+        var pending = JsonSerializer.Deserialize(text, AppJsonContext.Default.ListPendingUpgrade) ?? [];
         var failures = new List<string>();
         var succeeded = new List<PendingUpgrade>();
 
@@ -63,10 +63,7 @@ internal sealed class PluginUpgradeQueueService
         }
         else
         {
-            File.WriteAllText(pendingPath, JsonSerializer.Serialize(remaining, new JsonSerializerOptions
-            {
-                WriteIndented = true
-            }));
+            File.WriteAllText(pendingPath, JsonSerializer.Serialize(remaining, AppJsonContext.Default.ListPendingUpgrade));
         }
 
         return new LauncherResult
@@ -79,19 +76,19 @@ internal sealed class PluginUpgradeQueueService
                 : $"Applied {succeeded.Count} upgrades, failed: {string.Join(", ", failures)}."
         };
     }
+}
 
-    private sealed record PendingUpgrade(
-        string PluginId,
-        string SourcePackagePath,
-        string TargetVersion,
-        DateTimeOffset CreatedAt)
+internal sealed record PendingUpgrade(
+    string PluginId,
+    string SourcePackagePath,
+    string TargetVersion,
+    DateTimeOffset CreatedAt)
+{
+    public bool IsValid()
     {
-        public bool IsValid()
-        {
-            return !string.IsNullOrWhiteSpace(PluginId) &&
-                   !string.IsNullOrWhiteSpace(SourcePackagePath) &&
-                   !string.IsNullOrWhiteSpace(TargetVersion) &&
-                   File.Exists(SourcePackagePath);
-        }
+        return !string.IsNullOrWhiteSpace(PluginId) &&
+               !string.IsNullOrWhiteSpace(SourcePackagePath) &&
+               !string.IsNullOrWhiteSpace(TargetVersion) &&
+               File.Exists(SourcePackagePath);
     }
 }

LanMountainDesktop.Launcher/Services/UpdateCheckService.cs

@@ -15,7 +15,6 @@ internal sealed class UpdateCheckService
     private readonly string _repoOwner;
     private readonly string _repoName;
     private readonly HttpClient _httpClient;
-    private readonly JsonSerializerOptions _jsonOptions;
 
     public UpdateCheckService(string repoOwner, string repoName)
     {
@@ -24,12 +23,6 @@ internal sealed class UpdateCheckService
         _httpClient = new HttpClient();
         _httpClient.DefaultRequestHeaders.Add("User-Agent", "LanMountainDesktop-Launcher");
         _httpClient.DefaultRequestHeaders.Add("Accept", "application/vnd.github+json");
-
-        _jsonOptions = new JsonSerializerOptions
-        {
-            PropertyNameCaseInsensitive = true,
-            PropertyNamingPolicy = JsonNamingPolicy.SnakeCaseLower
-        };
     }
 
     /// <summary>
@@ -97,7 +90,7 @@ internal sealed class UpdateCheckService
         response.EnsureSuccessStatusCode();
 
         var json = await response.Content.ReadAsStringAsync(cancellationToken);
-        var releases = JsonSerializer.Deserialize<List<GitHubRelease>>(json, _jsonOptions);
+        var releases = JsonSerializer.Deserialize(json, AppJsonContext.Default.ListGitHubRelease);
 
         return releases?.Select(r => new ReleaseInfo
         {
@@ -131,38 +124,38 @@ internal sealed class UpdateCheckService
         var cleaned = ParseVersionString(versionString);
         return Version.TryParse(cleaned, out var version) ? version : new Version(0, 0, 0);
     }
-
-    // GitHub API 响应模型
-    private sealed class GitHubRelease
-    {
-        [JsonPropertyName("tag_name")]
-        public string? TagName { get; set; }
-
-        [JsonPropertyName("name")]
-        public string? Name { get; set; }
-
-        [JsonPropertyName("prerelease")]
-        public bool Prerelease { get; set; }
-
-        [JsonPropertyName("published_at")]
-        public DateTime PublishedAt { get; set; }
-
-        [JsonPropertyName("body")]
-        public string? Body { get; set; }
-
-        [JsonPropertyName("assets")]
-        public List<GitHubAsset>? Assets { get; set; }
-    }
-
-    private sealed class GitHubAsset
-    {
-        [JsonPropertyName("name")]
-        public string? Name { get; set; }
-
-        [JsonPropertyName("browser_download_url")]
-        public string? BrowserDownloadUrl { get; set; }
-
-        [JsonPropertyName("size")]
-        public long Size { get; set; }
-    }
+}
+
+// GitHub API 响应模型
+internal sealed class GitHubRelease
+{
+    [JsonPropertyName("tag_name")]
+    public string? TagName { get; set; }
+
+    [JsonPropertyName("name")]
+    public string? Name { get; set; }
+
+    [JsonPropertyName("prerelease")]
+    public bool Prerelease { get; set; }
+
+    [JsonPropertyName("published_at")]
+    public DateTime PublishedAt { get; set; }
+
+    [JsonPropertyName("body")]
+    public string? Body { get; set; }
+
+    [JsonPropertyName("assets")]
+    public List<GitHubAsset>? Assets { get; set; }
+}
+
+internal sealed class GitHubAsset
+{
+    [JsonPropertyName("name")]
+    public string? Name { get; set; }
+
+    [JsonPropertyName("browser_download_url")]
+    public string? BrowserDownloadUrl { get; set; }
+
+    [JsonPropertyName("size")]
+    public long Size { get; set; }
 }

LanMountainDesktop.Launcher/Views/ErrorWindow.axaml

@@ -76,21 +76,30 @@
     <Border Grid.Row="1"
             Background="{DynamicResource CardBackgroundFillColorDefaultBrush}"
             Padding="24,16">
-      <StackPanel Orientation="Horizontal" 
-                  HorizontalAlignment="Right" 
-                  Spacing="8">
-        <Button x:Name="ExitButton"
-                Content="退出"
-                Width="80"
-                Height="32"
-                FontSize="13"/>
-        <Button x:Name="RetryButton"
-                Content="重试"
-                Width="80"
+      <Grid ColumnDefinitions="*,Auto">
+        <Button x:Name="OpenLogButton"
+                Grid.Column="0"
+                Content="打开日志"
+                Width="100"
                 Height="32"
                 FontSize="13"
-                Theme="{DynamicResource AccentButtonTheme}"/>
-      </StackPanel>
+                HorizontalAlignment="Left"/>
+        <StackPanel Grid.Column="1"
+                    Orientation="Horizontal" 
+                    Spacing="8">
+          <Button x:Name="ExitButton"
+                  Content="退出"
+                  Width="80"
+                  Height="32"
+                  FontSize="13"/>
+          <Button x:Name="RetryButton"
+                  Content="重试"
+                  Width="80"
+                  Height="32"
+                  FontSize="13"
+                  Theme="{DynamicResource AccentButtonTheme}"/>
+        </StackPanel>
+      </Grid>
     </Border>
   </Grid>
 </Window>

LanMountainDesktop.Launcher/Views/ErrorWindow.axaml.cs

@@ -2,6 +2,8 @@ using Avalonia.Controls;
 using Avalonia.Interactivity;
 using Avalonia.Markup.Xaml;
 using Avalonia.Platform.Storage;
+using LanMountainDesktop.Launcher.Services;
+using System.Diagnostics;
 
 namespace LanMountainDesktop.Launcher.Views;
 
@@ -66,6 +68,7 @@ public partial class ErrorWindow : Window
         // 按钮事件
         var retryButton = this.FindControl<Button>("RetryButton");
         var exitButton = this.FindControl<Button>("ExitButton");
+        var openLogButton = this.FindControl<Button>("OpenLogButton");
 
         if (retryButton is not null)
         {
@@ -86,6 +89,16 @@ public partial class ErrorWindow : Window
         {
             Console.Error.WriteLine("[ErrorWindow] Failed to find ExitButton!");
         }
+
+        if (openLogButton is not null)
+        {
+            openLogButton.Click += OnOpenLogClick;
+            Console.WriteLine("[ErrorWindow] OpenLogButton event bound");
+        }
+        else
+        {
+            Console.Error.WriteLine("[ErrorWindow] Failed to find OpenLogButton!");
+        }
         
         Console.WriteLine("[ErrorWindow] Components initialization completed");
     }
@@ -210,6 +223,61 @@ public partial class ErrorWindow : Window
         }
     }
 
+    /// <summary>
+    /// 获取配置存储的基础目录
+    /// </summary>
+    private static string GetConfigBaseDirectory()
+    {
+        try
+        {
+            // 优先使用 LocalApplicationData（用户状态）
+            var appData = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData);
+            if (!string.IsNullOrEmpty(appData))
+            {
+                var configDir = Path.Combine(appData, "LanMountainDesktop", ".launcher");
+                return configDir;
+            }
+        }
+        catch
+        {
+            // LocalApplicationData 不可用，回退到 Launcher 所在目录
+        }
+
+        // 回退方案：使用 Launcher 所在目录
+        try
+        {
+            var launcherDir = AppContext.BaseDirectory;
+            var configDir = Path.Combine(launcherDir, ".launcher");
+            return configDir;
+        }
+        catch
+        {
+            // 最后的兜底：使用当前目录
+            return Path.Combine(Directory.GetCurrentDirectory(), ".launcher");
+        }
+    }
+
+    /// <summary>
+    /// 确保配置目录存在
+    /// </summary>
+    private static bool EnsureConfigDirectory(string dirPath)
+    {
+        try
+        {
+            if (!Directory.Exists(dirPath))
+            {
+                Directory.CreateDirectory(dirPath);
+                Console.WriteLine($"[ErrorWindow] Created config directory: {dirPath}");
+            }
+            return true;
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[ErrorWindow] Failed to create config directory: {ex.Message}");
+            return false;
+        }
+    }
+
     /// <summary>
     /// 保存开发模式状态（内部方法）
     /// </summary>
@@ -217,17 +285,20 @@ public partial class ErrorWindow : Window
     {
         try
         {
-            var devModeFile = GetDevModeFilePath();
-            var dir = Path.GetDirectoryName(devModeFile);
-            if (!string.IsNullOrEmpty(dir) && !Directory.Exists(dir))
+            var configDir = GetConfigBaseDirectory();
+            if (!EnsureConfigDirectory(configDir))
             {
-                Directory.CreateDirectory(dir);
+                Console.Error.WriteLine("[ErrorWindow] Cannot save dev mode: config directory unavailable");
+                return;
             }
+
+            var devModeFile = Path.Combine(configDir, "devmode.config");
             File.WriteAllText(devModeFile, enabled ? "1" : "0");
+            Console.WriteLine($"[ErrorWindow] Dev mode state saved: {enabled}");
         }
         catch (Exception ex)
         {
-            Console.Error.WriteLine($"Failed to save dev mode state: {ex.Message}");
+            Console.Error.WriteLine($"[ErrorWindow] Failed to save dev mode state: {ex.Message}");
         }
     }
 
@@ -238,29 +309,24 @@ public partial class ErrorWindow : Window
     {
         try
         {
-            var devModeFile = GetDevModeFilePath();
+            var configDir = GetConfigBaseDirectory();
+            var devModeFile = Path.Combine(configDir, "devmode.config");
+
             if (File.Exists(devModeFile))
             {
                 var content = File.ReadAllText(devModeFile).Trim();
-                return content == "1";
+                var enabled = content == "1";
+                Console.WriteLine($"[ErrorWindow] Dev mode state loaded: {enabled}");
+                return enabled;
             }
         }
         catch (Exception ex)
         {
-            Console.Error.WriteLine($"Failed to load dev mode state: {ex.Message}");
+            Console.Error.WriteLine($"[ErrorWindow] Failed to load dev mode state: {ex.Message}");
         }
         return false;
     }
 
-    /// <summary>
-    /// 获取开发模式状态文件路径
-    /// </summary>
-    private static string GetDevModeFilePath()
-    {
-        var appData = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData);
-        return Path.Combine(appData, "LanMountainDesktop", ".launcher", "devmode.config");
-    }
-
     /// <summary>
     /// 保存自定义主程序路径（内部方法）
     /// </summary>
@@ -268,17 +334,20 @@ public partial class ErrorWindow : Window
     {
         try
         {
-            var hostPathFile = GetCustomHostPathFilePath();
-            var dir = Path.GetDirectoryName(hostPathFile);
-            if (!string.IsNullOrEmpty(dir) && !Directory.Exists(dir))
+            var configDir = GetConfigBaseDirectory();
+            if (!EnsureConfigDirectory(configDir))
             {
-                Directory.CreateDirectory(dir);
+                Console.Error.WriteLine("[ErrorWindow] Cannot save custom path: config directory unavailable");
+                return;
             }
+
+            var hostPathFile = Path.Combine(configDir, "custom-host-path.config");
             File.WriteAllText(hostPathFile, path ?? string.Empty);
+            Console.WriteLine($"[ErrorWindow] Custom host path saved: {path}");
         }
         catch (Exception ex)
         {
-            Console.Error.WriteLine($"Failed to save custom host path: {ex.Message}");
+            Console.Error.WriteLine($"[ErrorWindow] Failed to save custom host path: {ex.Message}");
         }
     }
 
@@ -289,43 +358,42 @@ public partial class ErrorWindow : Window
     {
         try
         {
-            var hostPathFile = GetCustomHostPathFilePath();
+            var configDir = GetConfigBaseDirectory();
+            var hostPathFile = Path.Combine(configDir, "custom-host-path.config");
+
             if (File.Exists(hostPathFile))
             {
                 var content = File.ReadAllText(hostPathFile).Trim();
                 // 验证路径是否仍然有效
                 if (!string.IsNullOrEmpty(content) && File.Exists(content))
                 {
+                    Console.WriteLine($"[ErrorWindow] Custom host path loaded: {content}");
                     return content;
                 }
+
                 // 路径已失效，清理配置文件
-                try
+                if (!string.IsNullOrEmpty(content))
                 {
-                    File.Delete(hostPathFile);
-                    Console.WriteLine("Custom host path is no longer valid, cleared saved path.");
-                }
-                catch (Exception clearEx)
-                {
-                    Console.Error.WriteLine($"Failed to clear invalid host path: {clearEx.Message}");
+                    Console.WriteLine($"[ErrorWindow] Custom host path is no longer valid: {content}");
+                    try
+                    {
+                        File.Delete(hostPathFile);
+                        Console.WriteLine("[ErrorWindow] Cleared invalid custom host path");
+                    }
+                    catch (Exception clearEx)
+                    {
+                        Console.Error.WriteLine($"[ErrorWindow] Failed to clear invalid host path: {clearEx.Message}");
+                    }
                 }
             }
         }
         catch (Exception ex)
         {
-            Console.Error.WriteLine($"Failed to load custom host path: {ex.Message}");
+            Console.Error.WriteLine($"[ErrorWindow] Failed to load custom host path: {ex.Message}");
         }
         return null;
     }
 
-    /// <summary>
-    /// 获取自定义主程序路径文件路径
-    /// </summary>
-    private static string GetCustomHostPathFilePath()
-    {
-        var appData = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData);
-        return Path.Combine(appData, "LanMountainDesktop", ".launcher", "custom-host-path.config");
-    }
-
     /// <summary>
     /// 检查是否启用了开发模式（静态方法，启动时调用）
     /// </summary>
@@ -351,6 +419,110 @@ public partial class ErrorWindow : Window
     {
         _completionSource.TrySetResult(ErrorWindowResult.Exit);
     }
+
+    /// <summary>
+    /// 打开日志文件
+    /// </summary>
+    private async void OnOpenLogClick(object? sender, RoutedEventArgs e)
+    {
+        try
+        {
+            var logFilePath = Logger.GetLogFilePath();
+
+            if (string.IsNullOrEmpty(logFilePath) || !File.Exists(logFilePath))
+            {
+                // 如果没有日志文件，打开日志目录
+                var logDir = Path.GetDirectoryName(logFilePath);
+                if (!string.IsNullOrEmpty(logDir) && Directory.Exists(logDir))
+                {
+                    OpenFolder(logDir);
+                }
+                else
+                {
+                    // 尝试打开配置目录
+                    var configDir = GetConfigBaseDirectory();
+                    if (Directory.Exists(configDir))
+                    {
+                        OpenFolder(configDir);
+                    }
+                    else
+                    {
+                        Console.WriteLine("[ErrorWindow] No log file or directory available");
+                    }
+                }
+                return;
+            }
+
+            Console.WriteLine($"[ErrorWindow] Opening log file: {logFilePath}");
+            OpenFile(logFilePath);
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[ErrorWindow] Failed to open log: {ex.Message}");
+        }
+    }
+
+    /// <summary>
+    /// 打开文件
+    /// </summary>
+    private static void OpenFile(string filePath)
+    {
+        try
+        {
+            if (OperatingSystem.IsWindows())
+            {
+                Process.Start(new ProcessStartInfo
+                {
+                    FileName = "explorer.exe",
+                    Arguments = $"\"{filePath}\"",
+                    UseShellExecute = true
+                });
+            }
+            else if (OperatingSystem.IsMacOS())
+            {
+                Process.Start("open", filePath);
+            }
+            else if (OperatingSystem.IsLinux())
+            {
+                Process.Start("xdg-open", filePath);
+            }
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[ErrorWindow] Failed to open file: {ex.Message}");
+        }
+    }
+
+    /// <summary>
+    /// 打开文件夹
+    /// </summary>
+    private static void OpenFolder(string folderPath)
+    {
+        try
+        {
+            if (OperatingSystem.IsWindows())
+            {
+                Process.Start(new ProcessStartInfo
+                {
+                    FileName = "explorer.exe",
+                    Arguments = $"\"{folderPath}\"",
+                    UseShellExecute = true
+                });
+            }
+            else if (OperatingSystem.IsMacOS())
+            {
+                Process.Start("open", folderPath);
+            }
+            else if (OperatingSystem.IsLinux())
+            {
+                Process.Start("xdg-open", folderPath);
+            }
+        }
+        catch (Exception ex)
+        {
+            Console.Error.WriteLine($"[ErrorWindow] Failed to open folder: {ex.Message}");
+        }
+    }
 }
 
 /// <summary>

LanMountainDesktop.Launcher/Views/LoadingDetailsWindow.axaml

@@ -0,0 +1,234 @@
+<Window xmlns="https://github.com/avaloniaui"
+        xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
+        xmlns:d="http://schemas.microsoft.com/expression/blend/2008"
+        xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
+        xmlns:views="clr-namespace:LanMountainDesktop.Launcher.Views"
+        mc:Ignorable="d"
+        d:DesignWidth="600"
+        d:DesignHeight="500"
+        x:Class="LanMountainDesktop.Launcher.Views.LoadingDetailsWindow"
+        Title="LanMountain Desktop - Loading Details"
+        Width="600"
+        Height="500"
+        WindowStartupLocation="CenterScreen"
+        CanResize="True"
+        MinWidth="500"
+        MinHeight="400"
+        Background="{DynamicResource SolidBackgroundFillColorBaseBrush}"
+        Icon="/Assets/logo.ico">
+
+  <Grid RowDefinitions="Auto,*,Auto,Auto">
+    <Border Grid.Row="0"
+            Background="{DynamicResource CardBackgroundFillColorDefaultBrush}"
+            Padding="20,16">
+      <Grid ColumnDefinitions="*,Auto">
+        <StackPanel Grid.Column="0" Spacing="4">
+          <TextBlock Text="Starting LanMountain Desktop"
+                     FontSize="18"
+                     FontWeight="SemiBold"
+                     Foreground="{DynamicResource TextFillColorPrimaryBrush}"/>
+          <TextBlock x:Name="SubtitleText"
+                     Text="Initializing..."
+                     FontSize="13"
+                     Foreground="{DynamicResource TextFillColorSecondaryBrush}"/>
+        </StackPanel>
+        <Border Grid.Column="1"
+                Background="{DynamicResource AccentFillColorDefaultBrush}"
+                CornerRadius="12"
+                Padding="12,6"
+                VerticalAlignment="Center">
+          <TextBlock x:Name="PercentText"
+                     Text="0%"
+                     FontSize="16"
+                     FontWeight="Bold"
+                     Foreground="White"/>
+        </Border>
+      </Grid>
+    </Border>
+
+    <Grid Grid.Row="1" Margin="16,12">
+      <Grid.RowDefinitions>
+        <RowDefinition Height="Auto"/>
+        <RowDefinition Height="Auto"/>
+        <RowDefinition Height="*"/>
+      </Grid.RowDefinitions>
+
+      <ProgressBar x:Name="OverallProgressBar"
+                   Grid.Row="0"
+                   Height="8"
+                   Minimum="0"
+                   Maximum="100"
+                   Value="0"
+                   CornerRadius="4"
+                   Margin="0,0,0,16"/>
+
+      <Border Grid.Row="1"
+              Background="{DynamicResource CardBackgroundFillColorSecondaryBrush}"
+              CornerRadius="8"
+              Padding="16,12"
+              Margin="0,0,0,12">
+        <Grid RowDefinitions="Auto,Auto,Auto" ColumnDefinitions="Auto,*">
+          <Border Grid.Row="0" Grid.RowSpan="3" Grid.Column="0"
+                  Width="40"
+                  Height="40"
+                  CornerRadius="20"
+                  Background="{DynamicResource AccentFillColorDefaultBrush}"
+                  Margin="0,0,12,0"
+                  VerticalAlignment="Center">
+            <TextBlock x:Name="CurrentItemIcon"
+                       Text="&#xE768;"
+                       FontSize="20"
+                       FontFamily="{DynamicResource SymbolThemeFontFamily}"
+                       Foreground="White"
+                       HorizontalAlignment="Center"
+                       VerticalAlignment="Center"/>
+          </Border>
+
+          <TextBlock x:Name="CurrentItemName"
+                     Grid.Row="0" Grid.Column="1"
+                     Text="Initializing..."
+                     FontSize="15"
+                     FontWeight="SemiBold"
+                     Foreground="{DynamicResource TextFillColorPrimaryBrush}"/>
+
+          <TextBlock x:Name="CurrentItemDescription"
+                     Grid.Row="1" Grid.Column="1"
+                     Text="Preparing components"
+                     FontSize="13"
+                     Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                     Margin="0,4,0,0"/>
+
+          <Grid Grid.Row="2" Grid.Column="1" Margin="0,8,0,0">
+            <ProgressBar x:Name="CurrentItemProgress"
+                         Height="4"
+                         Minimum="0"
+                         Maximum="100"
+                         Value="0"
+                         CornerRadius="2"/>
+          </Grid>
+        </Grid>
+      </Border>
+
+      <Border Grid.Row="2"
+              Background="{DynamicResource CardBackgroundFillColorDefaultBrush}"
+              CornerRadius="8">
+        <Grid RowDefinitions="Auto,*">
+          <Grid Grid.Row="0" Margin="12,8" ColumnDefinitions="*,Auto,Auto">
+            <TextBlock Grid.Column="0"
+                       Text="Loading Items"
+                       FontSize="12"
+                       FontWeight="SemiBold"
+                       Foreground="{DynamicResource TextFillColorTertiaryBrush}"/>
+            <TextBlock x:Name="CompletedCountText"
+                       Grid.Column="1"
+                       Text="0"
+                       FontSize="12"
+                       Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                       Margin="0,0,4,0"/>
+            <TextBlock Grid.Column="2"
+                       Text="Done"
+                       FontSize="12"
+                       Foreground="{DynamicResource TextFillColorTertiaryBrush}"/>
+          </Grid>
+
+          <ScrollViewer Grid.Row="1"
+                        VerticalScrollBarVisibility="Auto"
+                        Margin="8,0,8,8">
+            <ItemsControl x:Name="LoadingItemsList">
+              <ItemsControl.ItemTemplate>
+                <DataTemplate DataType="views:LoadingItemViewModel">
+                  <Grid ColumnDefinitions="Auto,*,Auto,Auto"
+                        Margin="4,3"
+                        Opacity="{Binding Opacity}">
+                    <TextBlock Grid.Column="0"
+                               Text="{Binding StatusIcon}"
+                               FontSize="14"
+                               FontFamily="{DynamicResource SymbolThemeFontFamily}"
+                               Foreground="{Binding StatusColor}"
+                               Margin="0,0,8,0"
+                               VerticalAlignment="Center"/>
+
+                    <TextBlock Grid.Column="1"
+                               Text="{Binding Name}"
+                               FontSize="13"
+                               Foreground="{DynamicResource TextFillColorPrimaryBrush}"
+                               TextTrimming="CharacterEllipsis"
+                               VerticalAlignment="Center"/>
+
+                    <TextBlock Grid.Column="2"
+                               Text="{Binding ProgressText}"
+                               FontSize="12"
+                               Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                               Margin="8,0"
+                               VerticalAlignment="Center"/>
+
+                    <Border Grid.Column="3"
+                            Background="{Binding TypeBackground}"
+                            CornerRadius="4"
+                            Padding="6,2"
+                            VerticalAlignment="Center">
+                      <TextBlock Text="{Binding TypeLabel}"
+                                 FontSize="11"
+                                 Foreground="{Binding TypeForeground}"/>
+                    </Border>
+                  </Grid>
+                </DataTemplate>
+              </ItemsControl.ItemTemplate>
+            </ItemsControl>
+          </ScrollViewer>
+        </Grid>
+      </Border>
+    </Grid>
+
+    <Border x:Name="ErrorPanel"
+            Grid.Row="2"
+            Background="{DynamicResource SystemFillColorCriticalBackgroundBrush}"
+            BorderBrush="{DynamicResource SystemFillColorCriticalBrush}"
+            BorderThickness="1"
+            CornerRadius="8"
+            Padding="12,10"
+            Margin="16,0,16,12"
+            IsVisible="False">
+      <Grid ColumnDefinitions="Auto,*">
+        <TextBlock Grid.Column="0"
+                   Text="&#xE783;"
+                   FontSize="16"
+                   FontFamily="{DynamicResource SymbolThemeFontFamily}"
+                   Foreground="{DynamicResource SystemFillColorCriticalBrush}"
+                   Margin="0,0,8,0"
+                   VerticalAlignment="Center"/>
+        <TextBlock x:Name="ErrorText"
+                   Grid.Column="1"
+                   Text="An error occurred while loading."
+                   FontSize="13"
+                   Foreground="{DynamicResource SystemFillColorCriticalBrush}"
+                   TextWrapping="Wrap"/>
+      </Grid>
+    </Border>
+
+    <Border Grid.Row="3"
+            Background="{DynamicResource CardBackgroundFillColorDefaultBrush}"
+            Padding="16,12">
+      <Grid ColumnDefinitions="*,Auto">
+        <TextBlock x:Name="VersionText"
+                   Grid.Column="0"
+                   Text="v1.0.0"
+                   FontSize="12"
+                   Foreground="{DynamicResource TextFillColorTertiaryBrush}"
+                   VerticalAlignment="Center"/>
+        <StackPanel Grid.Column="1" Orientation="Horizontal" Spacing="8">
+          <Button x:Name="DetailsButton"
+                  Content="Details"
+                  Width="90"
+                  Height="32"
+                  FontSize="13"/>
+          <Button x:Name="CancelButton"
+                  Content="Cancel"
+                  Width="90"
+                  Height="32"
+                  FontSize="13"/>
+        </StackPanel>
+      </Grid>
+    </Border>
+  </Grid>
+</Window>

LanMountainDesktop.Launcher/Views/LoadingDetailsWindow.axaml.cs

@@ -0,0 +1,396 @@
+using Avalonia.Controls;
+using Avalonia.Interactivity;
+using Avalonia.Markup.Xaml;
+using Avalonia.Media;
+using Avalonia.Threading;
+using LanMountainDesktop.Launcher.Services;
+using LanMountainDesktop.Shared.Contracts.Launcher;
+using System.Collections.ObjectModel;
+using System.ComponentModel;
+
+namespace LanMountainDesktop.Launcher.Views;
+
+/// <summary>
+/// 加载详情窗口 - 显示详细的加载状态和进度
+/// </summary>
+public partial class LoadingDetailsWindow : Window
+{
+    private readonly ObservableCollection<LoadingItemViewModel> _items = new();
+    private readonly DispatcherTimer _updateTimer;
+    private DateTimeOffset _startTime;
+
+    public LoadingDetailsWindow()
+    {
+        AvaloniaXamlLoader.Load(this);
+
+        // 初始化列表
+        var itemsList = this.FindControl<ItemsControl>("LoadingItemsList");
+        if (itemsList != null)
+        {
+            itemsList.ItemsSource = _items;
+        }
+
+        // 创建更新定时器
+        _updateTimer = new DispatcherTimer
+        {
+            Interval = TimeSpan.FromMilliseconds(100)
+        };
+        _updateTimer.Tick += OnUpdateTimerTick;
+
+        _startTime = DateTimeOffset.UtcNow;
+    }
+
+    /// <summary>
+    /// 窗口加载完成
+    /// </summary>
+    protected override void OnLoaded(RoutedEventArgs e)
+    {
+        base.OnLoaded(e);
+        _updateTimer.Start();
+    }
+
+    /// <summary>
+    /// 窗口关闭
+    /// </summary>
+    protected override void OnClosing(WindowClosingEventArgs e)
+    {
+        _updateTimer.Stop();
+        base.OnClosing(e);
+    }
+
+    /// <summary>
+    /// 更新加载状态
+    /// </summary>
+    public void UpdateLoadingState(LoadingStateMessage state)
+    {
+        Dispatcher.UIThread.Post(() =>
+        {
+            try
+            {
+                // 更新标题和副标题
+                UpdateHeader(state);
+
+                // 更新整体进度
+                UpdateOverallProgress(state);
+
+                // 更新当前活动项
+                UpdateCurrentItem(state);
+
+                // 更新列表
+                UpdateItemsList(state);
+
+                // 更新错误信息
+                UpdateErrorPanel(state);
+
+                // 更新完成计数
+                UpdateCompletedCount(state);
+            }
+            catch (Exception ex)
+            {
+                Console.Error.WriteLine($"[LoadingDetailsWindow] Error updating state: {ex.Message}");
+            }
+        });
+    }
+
+    /// <summary>
+    /// 更新标题
+    /// </summary>
+    private void UpdateHeader(LoadingStateMessage state)
+    {
+        var subtitleText = this.FindControl<TextBlock>("SubtitleText");
+        if (subtitleText != null)
+        {
+            subtitleText.Text = GetStageDescription(state.Stage);
+        }
+    }
+
+    /// <summary>
+    /// 更新整体进度
+    /// </summary>
+    private void UpdateOverallProgress(LoadingStateMessage state)
+    {
+        var progressBar = this.FindControl<ProgressBar>("OverallProgressBar");
+        var percentText = this.FindControl<TextBlock>("PercentText");
+
+        if (progressBar != null)
+        {
+            progressBar.Value = state.OverallProgressPercent;
+        }
+
+        if (percentText != null)
+        {
+            percentText.Text = $"{state.OverallProgressPercent}%";
+        }
+    }
+
+    /// <summary>
+    /// 更新当前活动项
+    /// </summary>
+    private void UpdateCurrentItem(LoadingStateMessage state)
+    {
+        var currentItem = state.ActiveItems.FirstOrDefault();
+        if (currentItem == null) return;
+
+        var nameText = this.FindControl<TextBlock>("CurrentItemName");
+        var descText = this.FindControl<TextBlock>("CurrentItemDescription");
+        var progressBar = this.FindControl<ProgressBar>("CurrentItemProgress");
+        var iconText = this.FindControl<TextBlock>("CurrentItemIcon");
+
+        if (nameText != null)
+        {
+            nameText.Text = currentItem.Name;
+        }
+
+        if (descText != null)
+        {
+            descText.Text = currentItem.Message ?? GetItemDescription(currentItem);
+        }
+
+        if (progressBar != null)
+        {
+            progressBar.Value = currentItem.ProgressPercent;
+        }
+
+        if (iconText != null)
+        {
+            iconText.Text = GetItemIcon(currentItem.Type);
+        }
+    }
+
+    /// <summary>
+    /// 更新列表
+    /// </summary>
+    private void UpdateItemsList(LoadingStateMessage state)
+    {
+        // 同步列表项
+        foreach (var item in state.ActiveItems)
+        {
+            var existing = _items.FirstOrDefault(i => i.Id == item.Id);
+            if (existing != null)
+            {
+                existing.UpdateFrom(item);
+            }
+            else
+            {
+                _items.Add(new LoadingItemViewModel(item));
+            }
+        }
+
+        // 移除已完成的项（保留最近完成的5个）
+        var completedItems = _items.Where(i => i.State == LoadingState.Completed).ToList();
+        if (completedItems.Count > 5)
+        {
+            var itemsToRemove = completedItems.OrderBy(i => i.CompletedTime).Take(completedItems.Count - 5);
+            foreach (var item in itemsToRemove)
+            {
+                _items.Remove(item);
+            }
+        }
+
+        // 按状态排序：进行中 -> 等待中 -> 已完成 -> 失败
+        var sortedItems = _items.OrderBy(i => GetStatePriority(i.State)).ToList();
+        _items.Clear();
+        foreach (var item in sortedItems)
+        {
+            _items.Add(item);
+        }
+    }
+
+    /// <summary>
+    /// 更新错误面板
+    /// </summary>
+    private void UpdateErrorPanel(LoadingStateMessage state)
+    {
+        var errorPanel = this.FindControl<Border>("ErrorPanel");
+        var errorText = this.FindControl<TextBlock>("ErrorText");
+
+        if (errorPanel != null)
+        {
+            errorPanel.IsVisible = state.HasErrors;
+        }
+
+        if (errorText != null && state.ErrorMessages?.Any() == true)
+        {
+            errorText.Text = string.Join("\n", state.ErrorMessages.Take(3));
+        }
+    }
+
+    /// <summary>
+    /// 更新完成计数
+    /// </summary>
+    private void UpdateCompletedCount(LoadingStateMessage state)
+    {
+        var countText = this.FindControl<TextBlock>("CompletedCountText");
+        if (countText != null)
+        {
+            countText.Text = state.CompletedCount.ToString();
+        }
+    }
+
+    /// <summary>
+    /// 定时更新
+    /// </summary>
+    private void OnUpdateTimerTick(object? sender, EventArgs e)
+    {
+        // 可以在这里添加时间显示等实时更新
+    }
+
+    /// <summary>
+    /// 获取阶段描述
+    /// </summary>
+    private static string GetStageDescription(StartupStage stage) => stage switch
+    {
+        StartupStage.Initializing => "正在初始化系统...",
+        StartupStage.LoadingSettings => "正在加载设置...",
+        StartupStage.LoadingPlugins => "正在加载插件...",
+        StartupStage.InitializingUI => "正在初始化界面...",
+        StartupStage.Ready => "加载完成",
+        _ => "正在加载..."
+    };
+
+    /// <summary>
+    /// 获取项描述
+    /// </summary>
+    private static string GetItemDescription(LoadingItem item)
+    {
+        if (!string.IsNullOrEmpty(item.Description))
+            return item.Description;
+
+        return item.Type switch
+        {
+            LoadingItemType.Plugin => "正在加载插件...",
+            LoadingItemType.Component => "正在加载组件...",
+            LoadingItemType.Resource => "正在加载资源...",
+            LoadingItemType.Data => "正在加载数据...",
+            LoadingItemType.Network => "正在下载...",
+            _ => "正在处理..."
+        };
+    }
+
+    /// <summary>
+    /// 获取项图标
+    /// </summary>
+    private static string GetItemIcon(LoadingItemType type) => type switch
+    {
+        LoadingItemType.Plugin => "\uE768",
+        LoadingItemType.Component => "\uE7C4",
+        LoadingItemType.Resource => "\uE7C5",
+        LoadingItemType.Data => "\uE7C6",
+        LoadingItemType.Network => "\uE774",
+        LoadingItemType.Settings => "\uE713",
+        LoadingItemType.System => "\uE7C7",
+        _ => "\uE768"
+    };
+
+    /// <summary>
+    /// 获取状态优先级
+    /// </summary>
+    private static int GetStatePriority(LoadingState state) => state switch
+    {
+        LoadingState.InProgress => 0,
+        LoadingState.Pending => 1,
+        LoadingState.Completed => 2,
+        LoadingState.Failed => 3,
+        LoadingState.Timeout => 4,
+        LoadingState.Cancelled => 5,
+        _ => 6
+    };
+}
+
+/// <summary>
+/// 加载项视图模型
+/// </summary>
+public class LoadingItemViewModel : INotifyPropertyChanged
+{
+    public string Id { get; }
+    public string Name { get; private set; }
+    public LoadingItemType Type { get; private set; }
+    public LoadingState State { get; private set; }
+    public int ProgressPercent { get; private set; }
+    public DateTimeOffset? CompletedTime { get; private set; }
+
+    public string StatusIcon => GetStatusIcon(State);
+    public IBrush StatusColor => GetStatusColor(State);
+    public string ProgressText => State == LoadingState.Completed ? "完成" : $"{ProgressPercent}%";
+    public string TypeLabel => GetTypeLabel(Type);
+    public IBrush TypeBackground => GetTypeBackground(Type);
+    public IBrush TypeForeground => GetTypeForeground(Type);
+    public double Opacity => State == LoadingState.Completed ? 0.6 : 1.0;
+
+    public event PropertyChangedEventHandler? PropertyChanged;
+
+    public LoadingItemViewModel(LoadingItem item)
+    {
+        Id = item.Id;
+        UpdateFrom(item);
+    }
+
+    public void UpdateFrom(LoadingItem item)
+    {
+        Name = item.Name;
+        Type = item.Type;
+        State = item.State;
+        ProgressPercent = item.ProgressPercent;
+
+        if (State == LoadingState.Completed && !CompletedTime.HasValue)
+        {
+            CompletedTime = DateTimeOffset.UtcNow;
+        }
+
+        PropertyChanged?.Invoke(this, new PropertyChangedEventArgs(string.Empty));
+    }
+
+    private static string GetStatusIcon(LoadingState state) => state switch
+    {
+        LoadingState.Pending => "\uE7C3",
+        LoadingState.InProgress => "\uE768",
+        LoadingState.Completed => "\uE73E",
+        LoadingState.Failed => "\uE783",
+        LoadingState.Timeout => "\uE71A",
+        LoadingState.Cancelled => "\uE711",
+        _ => "\uE7C3"
+    };
+
+    private static IBrush GetStatusColor(LoadingState state) => state switch
+    {
+        LoadingState.Pending => new SolidColorBrush(Colors.Gray),
+        LoadingState.InProgress => new SolidColorBrush(Colors.DodgerBlue),
+        LoadingState.Completed => new SolidColorBrush(Colors.Green),
+        LoadingState.Failed => new SolidColorBrush(Colors.Red),
+        LoadingState.Timeout => new SolidColorBrush(Colors.Orange),
+        LoadingState.Cancelled => new SolidColorBrush(Colors.Gray),
+        _ => new SolidColorBrush(Colors.Gray)
+    };
+
+    private static string GetTypeLabel(LoadingItemType type) => type switch
+    {
+        LoadingItemType.Plugin => "插件",
+        LoadingItemType.Component => "组件",
+        LoadingItemType.Resource => "资源",
+        LoadingItemType.Data => "数据",
+        LoadingItemType.Network => "网络",
+        LoadingItemType.Settings => "设置",
+        LoadingItemType.System => "系统",
+        _ => "其他"
+    };
+
+    private static IBrush GetTypeBackground(LoadingItemType type) => type switch
+    {
+        LoadingItemType.Plugin => new SolidColorBrush(Color.Parse("#E3F2FD")),
+        LoadingItemType.Component => new SolidColorBrush(Color.Parse("#F3E5F5")),
+        LoadingItemType.Resource => new SolidColorBrush(Color.Parse("#E8F5E9")),
+        LoadingItemType.Data => new SolidColorBrush(Color.Parse("#FFF3E0")),
+        LoadingItemType.Network => new SolidColorBrush(Color.Parse("#E0F7FA")),
+        _ => new SolidColorBrush(Color.Parse("#F5F5F5"))
+    };
+
+    private static IBrush GetTypeForeground(LoadingItemType type) => type switch
+    {
+        LoadingItemType.Plugin => new SolidColorBrush(Color.Parse("#1976D2")),
+        LoadingItemType.Component => new SolidColorBrush(Color.Parse("#7B1FA2")),
+        LoadingItemType.Resource => new SolidColorBrush(Color.Parse("#388E3C")),
+        LoadingItemType.Data => new SolidColorBrush(Color.Parse("#F57C00")),
+        LoadingItemType.Network => new SolidColorBrush(Color.Parse("#0097A7")),
+        _ => new SolidColorBrush(Color.Parse("#616161"))
+    };
+}

LanMountainDesktop.Launcher/Views/MigrationPromptWindow.axaml

@@ -0,0 +1,149 @@
+<Window xmlns="https://github.com/avaloniaui"
+        xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
+        xmlns:d="http://schemas.microsoft.com/expression/blend/2008"
+        xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
+        xmlns:views="clr-namespace:LanMountainDesktop.Launcher.Views"
+        mc:Ignorable="d"
+        d:DesignWidth="520"
+        d:DesignHeight="360"
+        x:Class="LanMountainDesktop.Launcher.Views.MigrationPromptWindow"
+        x:DataType="views:MigrationPromptWindow"
+        Title="阑山桌面 - 版本迁移"
+        Width="520"
+        Height="360"
+        CanResize="False"
+        WindowStartupLocation="CenterScreen"
+        Background="{DynamicResource SolidBackgroundFillColorBaseBrush}"
+        TransparencyLevelHint="None"
+        Icon="/Assets/logo.ico">
+  <Design.DataContext>
+    <views:MigrationPromptWindow />
+  </Design.DataContext>
+
+  <Grid RowDefinitions="*,Auto">
+    <!-- 主内容区域 -->
+    <Grid Grid.Row="0" Margin="24,24,24,16" ColumnDefinitions="Auto,*">
+
+      <!-- 左侧：信息图标 -->
+      <Border Grid.Column="0"
+              Width="48"
+              Height="48"
+              Margin="0,4,16,0"
+              Background="{DynamicResource SystemFillColorCautionBackgroundBrush}"
+              CornerRadius="24"
+              VerticalAlignment="Top">
+        <TextBlock Text="&#xE7BA;"
+                   FontSize="24"
+                   FontFamily="{DynamicResource SymbolThemeFontFamily}"
+                   Foreground="{DynamicResource SystemFillColorCautionBrush}"
+                   HorizontalAlignment="Center"
+                   VerticalAlignment="Center"/>
+      </Border>
+
+      <!-- 右侧：内容 -->
+      <StackPanel Grid.Column="1" Spacing="12">
+        <!-- 标题 -->
+        <TextBlock Text="检测到旧版本"
+                   FontSize="18"
+                   FontWeight="SemiBold"
+                   Foreground="{DynamicResource TextFillColorPrimaryBrush}"
+                   TextWrapping="Wrap"/>
+
+        <!-- 说明文字 -->
+        <TextBlock x:Name="DescriptionText"
+                   Text="检测到您的系统中安装了旧版本的阑山桌面（0.8.4）。新版本采用了全新的架构，建议卸载旧版本以获得更好的体验。"
+                   FontSize="14"
+                   Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                   TextWrapping="Wrap"
+                   LineHeight="20"/>
+
+        <!-- 老版本信息卡片 -->
+        <Border Margin="0,8,0,0"
+                Background="{DynamicResource CardBackgroundFillColorDefaultBrush}"
+                CornerRadius="8"
+                Padding="16,12">
+          <Grid RowDefinitions="Auto,Auto,Auto" ColumnDefinitions="Auto,*">
+            <!-- 版本号 -->
+            <TextBlock Grid.Row="0" Grid.Column="0"
+                       Text="版本："
+                       FontSize="12"
+                       Foreground="{DynamicResource TextFillColorTertiaryBrush}"/>
+            <TextBlock x:Name="VersionText"
+                       Grid.Row="0" Grid.Column="1"
+                       Text="0.8.4"
+                       FontSize="12"
+                       Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                       Margin="8,0,0,0"/>
+
+            <!-- 安装路径 -->
+            <TextBlock Grid.Row="1" Grid.Column="0"
+                       Text="位置："
+                       FontSize="12"
+                       Foreground="{DynamicResource TextFillColorTertiaryBrush}"
+                       Margin="0,4,0,0"/>
+            <TextBlock x:Name="PathText"
+                       Grid.Row="1" Grid.Column="1"
+                       Text="C:\Program Files\LanMountainDesktop"
+                       FontSize="12"
+                       Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                       TextTrimming="CharacterEllipsis"
+                       Margin="8,4,0,0"/>
+
+            <!-- 安装类型 -->
+            <TextBlock Grid.Row="2" Grid.Column="0"
+                       Text="类型："
+                       FontSize="12"
+                       Foreground="{DynamicResource TextFillColorTertiaryBrush}"
+                       Margin="0,4,0,0"/>
+            <TextBlock x:Name="TypeText"
+                       Grid.Row="2" Grid.Column="1"
+                       Text="安装版"
+                       FontSize="12"
+                       Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                       Margin="8,4,0,0"/>
+          </Grid>
+        </Border>
+
+        <!-- 提示信息 -->
+        <TextBlock Text="卸载旧版本不会影响新版本的使用，您的个人数据将保留。"
+                   FontSize="12"
+                   Foreground="{DynamicResource TextFillColorTertiaryBrush}"
+                   TextWrapping="Wrap"
+                   Margin="0,4,0,0"/>
+      </StackPanel>
+    </Grid>
+
+    <!-- 底部：按钮区域 -->
+    <Border Grid.Row="1"
+            Background="{DynamicResource CardBackgroundFillColorDefaultBrush}"
+            Padding="24,16">
+      <Grid ColumnDefinitions="*,Auto">
+        <!-- 左侧：查看位置按钮 -->
+        <Button x:Name="ShowLocationButton"
+                Grid.Column="0"
+                Content="查看位置"
+                Width="100"
+                Height="32"
+                FontSize="13"
+                HorizontalAlignment="Left"/>
+
+        <!-- 右侧：操作按钮 -->
+        <StackPanel Grid.Column="1"
+                    Orientation="Horizontal"
+                    Spacing="8">
+          <Button x:Name="SkipButton"
+                  Content="暂不处理"
+                  Width="100"
+                  Height="32"
+                  FontSize="13"/>
+          <Button x:Name="UninstallButton"
+                  Content="卸载旧版本"
+                  Width="100"
+                  Height="32"
+                  FontSize="13"
+                  Theme="{DynamicResource AccentButtonTheme}"/>
+        </StackPanel>
+      </Grid>
+    </Border>
+  </Grid>
+</Window>

LanMountainDesktop.Launcher/Views/MigrationPromptWindow.axaml.cs

@@ -0,0 +1,157 @@
+using Avalonia.Controls;
+using Avalonia.Interactivity;
+using Avalonia.Markup.Xaml;
+using LanMountainDesktop.Launcher.Services;
+
+namespace LanMountainDesktop.Launcher.Views;
+
+/// <summary>
+/// 迁移提示窗口 - 提示用户卸载旧版本
+/// </summary>
+public partial class MigrationPromptWindow : Window
+{
+    private readonly TaskCompletionSource<MigrationResult> _completionSource = new();
+    private LegacyVersionInfo? _legacyInfo;
+
+    public MigrationPromptWindow()
+    {
+        AvaloniaXamlLoader.Load(this);
+        InitializeEventHandlers();
+    }
+
+    /// <summary>
+    /// 设置老版本信息
+    /// </summary>
+    public void SetLegacyInfo(LegacyVersionInfo info)
+    {
+        _legacyInfo = info;
+
+        // 更新 UI
+        var versionText = this.FindControl<TextBlock>("VersionText");
+        var pathText = this.FindControl<TextBlock>("PathText");
+        var typeText = this.FindControl<TextBlock>("TypeText");
+        var descriptionText = this.FindControl<TextBlock>("DescriptionText");
+
+        if (versionText != null)
+        {
+            versionText.Text = info.Version;
+        }
+
+        if (pathText != null)
+        {
+            pathText.Text = info.InstallPath;
+        }
+
+        if (typeText != null)
+        {
+            typeText.Text = info.InstallType switch
+            {
+                LegacyInstallType.Registry => "安装版",
+                LegacyInstallType.Portable => "便携版",
+                _ => "未知"
+            };
+        }
+
+        if (descriptionText != null)
+        {
+            descriptionText.Text = $"检测到您的系统中安装了旧版本的阑山桌面（{info.Version}）。新版本采用了全新的架构，建议卸载旧版本以获得更好的体验。";
+        }
+    }
+
+    /// <summary>
+    /// 初始化事件处理程序
+    /// </summary>
+    private void InitializeEventHandlers()
+    {
+        var showLocationButton = this.FindControl<Button>("ShowLocationButton");
+        var skipButton = this.FindControl<Button>("SkipButton");
+        var uninstallButton = this.FindControl<Button>("UninstallButton");
+
+        if (showLocationButton != null)
+        {
+            showLocationButton.Click += OnShowLocationClick;
+        }
+
+        if (skipButton != null)
+        {
+            skipButton.Click += OnSkipClick;
+        }
+
+        if (uninstallButton != null)
+        {
+            uninstallButton.Click += OnUninstallClick;
+        }
+    }
+
+    /// <summary>
+    /// 查看位置按钮点击
+    /// </summary>
+    private void OnShowLocationClick(object? sender, RoutedEventArgs e)
+    {
+        if (_legacyInfo != null)
+        {
+            LegacyVersionDetector.ShowInExplorer(_legacyInfo.InstallPath);
+        }
+    }
+
+    /// <summary>
+    /// 跳过按钮点击
+    /// </summary>
+    private void OnSkipClick(object? sender, RoutedEventArgs e)
+    {
+        _completionSource.TrySetResult(MigrationResult.Skipped);
+        Close();
+    }
+
+    /// <summary>
+    /// 卸载按钮点击
+    /// </summary>
+    private void OnUninstallClick(object? sender, RoutedEventArgs e)
+    {
+        if (_legacyInfo != null)
+        {
+            LegacyVersionDetector.OpenUninstallInterface(_legacyInfo);
+        }
+
+        _completionSource.TrySetResult(MigrationResult.UninstallOpened);
+        Close();
+    }
+
+    /// <summary>
+    /// 等待用户选择
+    /// </summary>
+    public Task<MigrationResult> WaitForChoiceAsync()
+    {
+        return _completionSource.Task;
+    }
+
+    /// <summary>
+    /// 窗口关闭事件
+    /// </summary>
+    protected override void OnClosing(WindowClosingEventArgs e)
+    {
+        // 如果还没有完成，标记为跳过
+        if (!_completionSource.Task.IsCompleted)
+        {
+            _completionSource.TrySetResult(MigrationResult.Skipped);
+        }
+
+        base.OnClosing(e);
+    }
+}
+
+/// <summary>
+/// 迁移结果
+/// </summary>
+public enum MigrationResult
+{
+    /// <summary>
+    /// 用户选择跳过
+    /// </summary>
+    Skipped,
+
+    /// <summary>
+    /// 已打开卸载界面
+    /// </summary>
+    UninstallOpened
+}

LanMountainDesktop.Launcher/Views/UpdateWindow.axaml

@@ -4,13 +4,13 @@
         xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
         xmlns:views="clr-namespace:LanMountainDesktop.Launcher.Views"
         mc:Ignorable="d"
-        d:DesignWidth="400"
-        d:DesignHeight="220"
+        d:DesignWidth="480"
+        d:DesignHeight="320"
         x:Class="LanMountainDesktop.Launcher.Views.UpdateWindow"
         x:DataType="views:UpdateWindow"
         Title="阑山桌面 - 更新"
-        Width="400"
-        Height="220"
+        Width="480"
+        Height="320"
         CanResize="False"
         WindowStartupLocation="CenterScreen"
         SystemDecorations="None"
@@ -21,48 +21,88 @@
     <views:UpdateWindow />
   </Design.DataContext>
 
-  <Grid RowDefinitions="Auto,*,Auto,Auto">
-    <!-- 应用名称 -->
-    <TextBlock x:Name="TitleText"
-               Text="阑山桌面"
-               FontSize="36"
-               FontWeight="Light"
-               VerticalAlignment="Center"
-               HorizontalAlignment="Center"
-               Grid.Row="0"
-               Margin="0,30,0,0"
-               Foreground="{DynamicResource TextFillColorPrimaryBrush}" />
+  <Grid>
+    <!-- 顶部：应用名称和最小化按钮 -->
+    <Grid VerticalAlignment="Top" Margin="24,24,24,0">
+      <StackPanel Orientation="Horizontal" HorizontalAlignment="Left" VerticalAlignment="Center" Spacing="8">
+        <TextBlock x:Name="TitleText"
+                   Text="阑山桌面"
+                   FontSize="24"
+                   FontWeight="SemiBold"
+                   Foreground="{DynamicResource TextFillColorPrimaryBrush}" />
+        <Border Background="{DynamicResource AccentFillColorDefaultBrush}"
+                CornerRadius="4"
+                Padding="6,2"
+                VerticalAlignment="Center">
+          <TextBlock Text="Update"
+                     FontSize="11"
+                     FontWeight="SemiBold"
+                     Foreground="{DynamicResource TextOnAccentFillColorPrimaryBrush}" />
+        </Border>
+      </StackPanel>
 
-    <!-- 状态文本 -->
-    <TextBlock x:Name="StatusText"
-               Grid.Row="1"
-               FontSize="13"
-               Foreground="{DynamicResource TextFillColorSecondaryBrush}"
-               HorizontalAlignment="Center"
-               VerticalAlignment="Center"
-               Margin="0,16,0,0"
-               Text="正在更新，请稍候..." />
+      <!-- 最小化按钮 -->
+      <Button x:Name="MinimizeButton"
+              HorizontalAlignment="Right"
+              VerticalAlignment="Center"
+              Width="32"
+              Height="32"
+              Background="Transparent"
+              BorderThickness="0">
+        <TextBlock Text="&#xE921;"
+                   FontSize="12"
+                   FontFamily="{DynamicResource SymbolThemeFontFamily}"
+                   Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                   HorizontalAlignment="Center"
+                   VerticalAlignment="Center"/>
+      </Button>
+    </Grid>
 
-    <!-- 进度条 -->
-    <ProgressBar x:Name="ProgressIndicator"
-                 Grid.Row="2"
-                 Minimum="0"
-                 Maximum="100"
-                 Value="0"
-                 Height="3"
-                 Width="200"
-                 Margin="0,16,0,0"
-                 IsIndeterminate="True"
-                 Foreground="{DynamicResource AccentFillColorDefaultBrush}"
-                 Background="{DynamicResource ControlStrokeColorDefaultBrush}" />
-
-    <!-- 底部提示 -->
-    <TextBlock x:Name="DetailText"
-               Grid.Row="3"
-               FontSize="11"
-               Foreground="{DynamicResource TextFillColorTertiaryBrush}"
-               HorizontalAlignment="Center"
-               Margin="0,12,0,24"
-               Text="" />
+    <!-- 底部区域：进度条和状态 -->
+    <Grid VerticalAlignment="Bottom" Margin="24,0,24,24">
+      <Grid.RowDefinitions>
+        <RowDefinition Height="Auto"/>
+        <RowDefinition Height="Auto"/>
+      </Grid.RowDefinitions>
+      
+      <!-- 第一行：左下角状态，右下角百分比 -->
+      <Grid Grid.Row="0" Margin="0,0,0,8">
+        <Grid.ColumnDefinitions>
+          <ColumnDefinition Width="*"/>
+          <ColumnDefinition Width="Auto"/>
+        </Grid.ColumnDefinitions>
+        
+        <!-- 左下角：状态文字 -->
+        <TextBlock x:Name="StatusText"
+                   Grid.Column="0"
+                   FontSize="11"
+                   Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                   Opacity="0.8"
+                   HorizontalAlignment="Left"
+                   VerticalAlignment="Bottom"
+                   Text="正在更新，请稍候..." />
+        
+        <!-- 右下角：百分比 -->
+        <TextBlock x:Name="PercentText"
+                   Grid.Column="1"
+                   FontSize="11"
+                   Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                   Opacity="0.8"
+                   HorizontalAlignment="Right"
+                   VerticalAlignment="Bottom"
+                   Text="0%" />
+      </Grid>
+      
+      <!-- 底部：进度条 -->
+      <ProgressBar x:Name="ProgressIndicator"
+                   Grid.Row="1"
+                   Minimum="0"
+                   Maximum="100"
+                   Value="0"
+                   Height="4"
+                   IsIndeterminate="True"
+                   Foreground="{DynamicResource AccentFillColorDefaultBrush}"
+                   Background="{DynamicResource ControlStrokeColorDefaultBrush}" />
+    </Grid>
   </Grid>
 </Window>

LanMountainDesktop.Launcher/Views/UpdateWindow.axaml.cs

@@ -12,6 +12,22 @@ public partial class UpdateWindow : Window
     public UpdateWindow()
     {
         AvaloniaXamlLoader.Load(this);
+        InitializeEventHandlers();
+    }
+
+    /// <summary>
+    /// 初始化事件处理程序
+    /// </summary>
+    private void InitializeEventHandlers()
+    {
+        var minimizeButton = this.FindControl<Button>("MinimizeButton");
+        if (minimizeButton != null)
+        {
+            minimizeButton.Click += (s, e) =>
+            {
+                this.WindowState = WindowState.Minimized;
+            };
+        }
     }
 
     /// <summary>
@@ -23,11 +39,11 @@ public partial class UpdateWindow : Window
         {
             var statusText = this.FindControl<TextBlock>("StatusText");
             var progressIndicator = this.FindControl<ProgressBar>("ProgressIndicator");
-            var detailText = this.FindControl<TextBlock>("DetailText");
+            var percentText = this.FindControl<TextBlock>("PercentText");
 
-            if (statusText is null || progressIndicator is null || detailText is null)
+            if (statusText is null || progressIndicator is null || percentText is null)
             {
-                Console.Error.WriteLine($"[UpdateWindow] Controls not found in Report: StatusText={statusText != null}, ProgressIndicator={progressIndicator != null}, DetailText={detailText != null}");
+                Console.Error.WriteLine($"[UpdateWindow] Controls not found in Report: StatusText={statusText != null}, ProgressIndicator={progressIndicator != null}, PercentText={percentText != null}");
                 return;
             }
 
@@ -37,23 +53,13 @@ public partial class UpdateWindow : Window
             {
                 progressIndicator.IsIndeterminate = false;
                 progressIndicator.Value = progressPercent;
+                percentText.Text = $"{progressPercent}%";
             }
             else
             {
                 progressIndicator.IsIndeterminate = true;
+                percentText.Text = "";
             }
-
-            // 根据阶段显示不同的底部提示
-            detailText.Text = stage.ToLowerInvariant() switch
-            {
-                "verify" => "正在验证更新完整性...",
-                "extract" => "正在解压更新包...",
-                "apply" => "正在应用更新文件...",
-                "plugins" => "正在升级插件...",
-                "cleanup" => "正在清理...",
-                "done" => "",
-                _ => ""
-            };
         });
     }
 
@@ -66,10 +72,10 @@ public partial class UpdateWindow : Window
         {
             var statusText = this.FindControl<TextBlock>("StatusText");
             var progressIndicator = this.FindControl<ProgressBar>("ProgressIndicator");
-            var detailText = this.FindControl<TextBlock>("DetailText");
+            var percentText = this.FindControl<TextBlock>("PercentText");
             var titleText = this.FindControl<TextBlock>("TitleText");
 
-            if (statusText is null || progressIndicator is null || detailText is null || titleText is null)
+            if (statusText is null || progressIndicator is null || percentText is null || titleText is null)
             {
                 Console.Error.WriteLine($"[UpdateWindow] Controls not found in ReportComplete");
                 return;
@@ -77,7 +83,7 @@ public partial class UpdateWindow : Window
 
             progressIndicator.IsIndeterminate = false;
             progressIndicator.Value = 100;
-            detailText.Text = "";
+            percentText.Text = "100%";
 
             if (success)
             {

LanMountainDesktop.Shared.Contracts/Launcher/HostExitCodes.cs

@@ -0,0 +1,18 @@
+namespace LanMountainDesktop.Shared.Contracts.Launcher;
+
+/// <summary>
+/// Standardized host process exit codes consumed by the launcher.
+/// </summary>
+public static class HostExitCodes
+{
+    public const int Success = 0;
+
+    // Secondary instance activated the existing primary instance successfully.
+    public const int SecondaryActivationSucceeded = 12;
+
+    // Secondary instance failed to activate the existing primary instance.
+    public const int SecondaryActivationFailed = 13;
+
+    // Restart relaunch couldn't acquire the single-instance lock in time.
+    public const int RestartLockNotAcquired = 14;
+}

LanMountainDesktop.Shared.Contracts/Launcher/LoadingState.cs

@@ -0,0 +1,231 @@
+namespace LanMountainDesktop.Shared.Contracts.Launcher;
+
+/// <summary>
+/// 加载项类型
+/// </summary>
+public enum LoadingItemType
+{
+    /// <summary>
+    /// 系统初始化
+    /// </summary>
+    System,
+    
+    /// <summary>
+    /// 设置加载
+    /// </summary>
+    Settings,
+    
+    /// <summary>
+    /// 插件
+    /// </summary>
+    Plugin,
+    
+    /// <summary>
+    /// 组件
+    /// </summary>
+    Component,
+    
+    /// <summary>
+    /// 资源
+    /// </summary>
+    Resource,
+    
+    /// <summary>
+    /// 数据
+    /// </summary>
+    Data,
+    
+    /// <summary>
+    /// 网络请求
+    /// </summary>
+    Network,
+    
+    /// <summary>
+    /// 其他
+    /// </summary>
+    Other
+}
+
+/// <summary>
+/// 加载状态
+/// </summary>
+public enum LoadingState
+{
+    /// <summary>
+    /// 等待中
+    /// </summary>
+    Pending,
+    
+    /// <summary>
+    /// 进行中
+    /// </summary>
+    InProgress,
+    
+    /// <summary>
+    /// 已完成
+    /// </summary>
+    Completed,
+    
+    /// <summary>
+    /// 失败
+    /// </summary>
+    Failed,
+    
+    /// <summary>
+    /// 已取消
+    /// </summary>
+    Cancelled,
+    
+    /// <summary>
+    /// 超时
+    /// </summary>
+    Timeout
+}
+
+/// <summary>
+/// 加载项信息
+/// </summary>
+public record LoadingItem
+{
+    /// <summary>
+    /// 加载项唯一标识
+    /// </summary>
+    public required string Id { get; init; }
+    
+    /// <summary>
+    /// 加载项类型
+    /// </summary>
+    public LoadingItemType Type { get; init; }
+    
+    /// <summary>
+    /// 加载项名称
+    /// </summary>
+    public required string Name { get; init; }
+    
+    /// <summary>
+    /// 加载项描述
+    /// </summary>
+    public string? Description { get; init; }
+    
+    /// <summary>
+    /// 当前状态
+    /// </summary>
+    public LoadingState State { get; init; }
+    
+    /// <summary>
+    /// 进度百分比 (0-100)
+    /// </summary>
+    public int ProgressPercent { get; init; }
+    
+    /// <summary>
+    /// 状态消息
+    /// </summary>
+    public string? Message { get; init; }
+    
+    /// <summary>
+    /// 错误信息（当 State 为 Failed 时）
+    /// </summary>
+    public string? ErrorMessage { get; init; }
+    
+    /// <summary>
+    /// 开始时间
+    /// </summary>
+    public DateTimeOffset? StartTime { get; init; }
+    
+    /// <summary>
+    /// 结束时间
+    /// </summary>
+    public DateTimeOffset? EndTime { get; init; }
+    
+    /// <summary>
+    /// 预计剩余时间（秒）
+    /// </summary>
+    public int? EstimatedRemainingSeconds { get; init; }
+    
+    /// <summary>
+    /// 子加载项
+    /// </summary>
+    public List<LoadingItem>? Children { get; init; }
+    
+    /// <summary>
+    /// 额外数据
+    /// </summary>
+    public Dictionary<string, string>? Metadata { get; init; }
+    
+    /// <summary>
+    /// 时间戳
+    /// </summary>
+    public DateTimeOffset Timestamp { get; init; } = DateTimeOffset.UtcNow;
+}
+
+/// <summary>
+/// 加载状态更新消息
+/// </summary>
+public record LoadingStateMessage
+{
+    /// <summary>
+    /// 当前启动阶段
+    /// </summary>
+    public StartupStage Stage { get; init; }
+    
+    /// <summary>
+    /// 整体进度百分比 (0-100)
+    /// </summary>
+    public int OverallProgressPercent { get; init; }
+    
+    /// <summary>
+    /// 当前活动的加载项
+    /// </summary>
+    public List<LoadingItem> ActiveItems { get; init; } = new();
+    
+    /// <summary>
+    /// 已完成的加载项数量
+    /// </summary>
+    public int CompletedCount { get; init; }
+    
+    /// <summary>
+    /// 总加载项数量
+    /// </summary>
+    public int TotalCount { get; init; }
+    
+    /// <summary>
+    /// 状态消息
+    /// </summary>
+    public string? Message { get; init; }
+    
+    /// <summary>
+    /// 是否有错误
+    /// </summary>
+    public bool HasErrors { get; init; }
+    
+    /// <summary>
+    /// 错误消息列表
+    /// </summary>
+    public List<string>? ErrorMessages { get; init; }
+    
+    /// <summary>
+    /// 时间戳
+    /// </summary>
+    public DateTimeOffset Timestamp { get; init; } = DateTimeOffset.UtcNow;
+}
+
+/// <summary>
+/// 详细的加载进度消息（用于实时更新）
+/// </summary>
+public record DetailedProgressMessage : StartupProgressMessage
+{
+    /// <summary>
+    /// 当前加载项
+    /// </summary>
+    public LoadingItem? CurrentItem { get; init; }
+    
+    /// <summary>
+    /// 所有加载项
+    /// </summary>
+    public List<LoadingItem>? AllItems { get; init; }
+    
+    /// <summary>
+    /// 是否为主要更新
+    /// </summary>
+    public bool IsMajorUpdate { get; init; }
+}

LanMountainDesktop.Tests/SingleInstanceServiceTests.cs

@@ -0,0 +1,102 @@
+using System;
+using System.Reflection;
+using System.Threading;
+using System.Threading.Tasks;
+using LanMountainDesktop.Services;
+using Xunit;
+
+namespace LanMountainDesktop.Tests;
+
+public sealed class SingleInstanceServiceTests
+{
+    [Fact]
+    public async Task TryNotifyPrimaryInstance_ReturnsTrue_WhenPrimaryAcknowledges()
+    {
+        var mutexName = $"Local\\LanMountainDesktop.Tests.SingleInstance.{Guid.NewGuid():N}";
+        var pipeName = $"LanMountainDesktop.Tests.Activate.{Guid.NewGuid():N}";
+
+        using var primary = CreateService(mutexName, pipeName);
+        using var secondary = CreateSecondaryService(mutexName, pipeName);
+        Assert.True(primary.IsPrimaryInstance);
+        MarkAsSecondaryForTest(secondary);
+
+        var activated = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+        primary.StartActivationListener(() => activated.TrySetResult());
+
+        var acknowledged = secondary.TryNotifyPrimaryInstance(TimeSpan.FromSeconds(2), out var failureReason);
+
+        Assert.True(acknowledged);
+        Assert.Null(failureReason);
+
+        var completed = await Task.WhenAny(activated.Task, Task.Delay(TimeSpan.FromSeconds(2)));
+        Assert.Same(activated.Task, completed);
+    }
+
+    [Fact]
+    public void TryNotifyPrimaryInstance_ReturnsFalse_WhenListenerIsNotRunning()
+    {
+        var mutexName = $"Local\\LanMountainDesktop.Tests.SingleInstance.{Guid.NewGuid():N}";
+        var pipeName = $"LanMountainDesktop.Tests.Activate.{Guid.NewGuid():N}";
+
+        using var primary = CreateService(mutexName, pipeName);
+        using var secondary = CreateSecondaryService(mutexName, pipeName);
+        Assert.True(primary.IsPrimaryInstance);
+        MarkAsSecondaryForTest(secondary);
+
+        var acknowledged = secondary.TryNotifyPrimaryInstance(TimeSpan.FromMilliseconds(300), out var failureReason);
+
+        Assert.False(acknowledged);
+        Assert.False(string.IsNullOrWhiteSpace(failureReason));
+    }
+
+    private static SingleInstanceService CreateService(string mutexName, string pipeName)
+    {
+        var ctor = typeof(SingleInstanceService).GetConstructor(
+            BindingFlags.Instance | BindingFlags.NonPublic,
+            binder: null,
+            [typeof(string), typeof(string)],
+            modifiers: null);
+
+        Assert.NotNull(ctor);
+        return (SingleInstanceService)ctor!.Invoke([mutexName, pipeName]);
+    }
+
+    private static SingleInstanceService CreateSecondaryService(string mutexName, string pipeName)
+    {
+        SingleInstanceService? created = null;
+        Exception? creationError = null;
+        var thread = new Thread(() =>
+        {
+            try
+            {
+                created = CreateService(mutexName, pipeName);
+            }
+            catch (Exception ex)
+            {
+                creationError = ex;
+            }
+        });
+
+        thread.IsBackground = true;
+        thread.Start();
+        thread.Join();
+
+        if (creationError is not null)
+        {
+            throw new InvalidOperationException("Failed to create secondary SingleInstanceService.", creationError);
+        }
+
+        Assert.NotNull(created);
+        return created!;
+    }
+
+    private static void MarkAsSecondaryForTest(SingleInstanceService service)
+    {
+        var ownsMutexField = typeof(SingleInstanceService).GetField(
+            "_ownsMutex",
+            BindingFlags.Instance | BindingFlags.NonPublic);
+        Assert.NotNull(ownsMutexField);
+        ownsMutexField!.SetValue(service, false);
+        Assert.False(service.IsPrimaryInstance);
+    }
+}

LanMountainDesktop/App.axaml.cs

@@ -20,6 +20,7 @@ using LanMountainDesktop.Models;
 using LanMountainDesktop.PluginSdk;
 using LanMountainDesktop.Services;
 using LanMountainDesktop.Services.Launcher;
+using LanMountainDesktop.Services.Loading;
 using LanMountainDesktop.Services.Settings;
 using LanMountainDesktop.Shared.Contracts.Launcher;
 using LanMountainDesktop.Theme;
@@ -74,6 +75,10 @@ public partial class App : Application
     private bool _uiUnhandledExceptionHooked;
     private DesktopShellHost? _desktopShellHost;
     private LauncherIpcClient? _launcherIpcClient;
+    private LoadingStateManager? _loadingStateManager;
+    private LoadingStateReporter? _loadingStateReporter;
+    private bool _singleInstanceReleased;
+    private int _forcedExitScheduled;
 
     internal static SingleInstanceService? CurrentSingleInstanceService { get; set; }
     internal static IHostApplicationLifecycle? CurrentHostApplicationLifecycle =>
@@ -139,7 +144,7 @@ public partial class App : Application
         EnsureNotificationService();
     }
 
-    public override async void OnFrameworkInitializationCompleted()
+    public override void OnFrameworkInitializationCompleted()
     {
         if (Design.IsDesignMode)
         {
@@ -149,12 +154,8 @@ public partial class App : Application
 
         AppLogger.Info("App", "Framework initialization completed.");
         
-        // 初始化 Launcher IPC 客户端（如果从 Launcher 启动）
-        await InitializeLauncherIpcAsync();
-        
         RegisterUiUnhandledExceptionGuard();
         LinuxDesktopEntryInstaller.EnsureInstalled();
-        ReportStartupProgress(StartupStage.LoadingSettings, 20, "正在加载设置...");
         DesktopBootstrap.InitializeApplication(this, InitializeDesktopShell);
 
         if (!Design.IsDesignMode && OperatingSystem.IsWindows())
@@ -163,6 +164,10 @@ public partial class App : Application
         }
 
         base.OnFrameworkInitializationCompleted();
+        
+        // IPC 初始化移到窗口创建之后，避免 async void 中的 await 导致窗口创建延迟
+        // 使用 fire-and-forget 模式，不阻塞主流程
+        _ = InitializeLauncherIpcAsync();
     }
     
     private async Task InitializeLauncherIpcAsync()
@@ -178,7 +183,18 @@ public partial class App : Application
             if (connected)
             {
                 AppLogger.Info("LauncherIpc", "Connected to Launcher IPC server.");
+                
+                // 初始化加载状态管理器
+                _loadingStateManager = new LoadingStateManager();
+                _loadingStateReporter = new LoadingStateReporter(_loadingStateManager, _launcherIpcClient);
+                _loadingStateReporter.Start();
+                
+                // 注册系统初始化加载项
+                _loadingStateManager.RegisterItem("system.init", LoadingItemType.System, "系统初始化", "初始化系统核心组件");
+                _loadingStateManager.StartItem("system.init", "已连接启动器");
+                
                 ReportStartupProgress(StartupStage.Initializing, 10, "正在初始化...");
+                ReportStartupProgress(StartupStage.LoadingSettings, 20, "正在加载设置...");
             }
         }
         catch (Exception ex)
@@ -213,6 +229,41 @@ public partial class App : Application
         });
     }
 
+    /// <summary>
+    /// 向 Launcher 报告关键启动进度，使用后台线程避免阻塞 UI
+    /// 用于 Ready 等关键状态报告
+    /// </summary>
+    private void ReportStartupProgressSync(StartupStage stage, int percent, string message)
+    {
+        if (_launcherIpcClient is null)
+            return;
+
+        try
+        {
+            _ = Task.Run(async () =>
+            {
+                try
+                {
+                    await _launcherIpcClient.ReportProgressAsync(new StartupProgressMessage
+                    {
+                        Stage = stage,
+                        ProgressPercent = percent,
+                        Message = message
+                    });
+                    AppLogger.Info("LauncherIpc", $"Successfully reported stage: {stage}");
+                }
+                catch (Exception ex)
+                {
+                    AppLogger.Warn("LauncherIpc", $"Failed to report progress: {ex.Message}");
+                }
+            });
+        }
+        catch (Exception ex)
+        {
+            AppLogger.Warn("LauncherIpc", $"Failed to launch progress report task: {ex.Message}");
+        }
+    }
+
     private void ApplyDesignTimeTheme()
     {
         RequestedThemeVariant = ThemeVariant.Light;
@@ -241,16 +292,20 @@ public partial class App : Application
                 ReportStartupProgress(StartupStage.InitializingUI, 60, "正在初始化界面...");
                 CreateAndAssignMainWindow(desktop, "FrameworkInitialization");
             },
-            () =>
-            {
-                AppLogger.Info("App", "Desktop lifetime exit triggered.");
-                PerformExitCleanup();
-            },
+            OnDesktopLifetimeExit,
             () => CurrentSingleInstanceService?.StartActivationListener(ActivateMainWindow),
             StartWeatherLocationRefreshIfNeeded);
         _desktopShellHost.Initialize(this);
     }
 
+    private void OnDesktopLifetimeExit()
+    {
+        AppLogger.Info("App", "Desktop lifetime exit triggered.");
+        PerformExitCleanup();
+        ReleaseSingleInstanceAfterExit("DesktopLifetimeExit");
+        ScheduleForcedProcessTermination("DesktopLifetimeExit");
+    }
+
     private void OnTrayExitClick(object? sender, EventArgs e)
     {
         _ = _hostApplicationLifecycle.TryExit(new HostApplicationLifecycleRequest(
@@ -610,70 +665,102 @@ public partial class App : Application
 
     private void ActivateMainWindow()
     {
-        RestoreOrCreateMainWindow(showSingleInstanceNotice: true, source: "SingleInstance");
+        AppLogger.Info("SingleInstance", $"Activation callback received. Pid={Environment.ProcessId}.");
+
+        try
+        {
+            var restored = Dispatcher.UIThread.CheckAccess()
+                ? RestoreOrCreateMainWindowCore(showSingleInstanceNotice: true, source: "SingleInstance")
+                : Dispatcher.UIThread.InvokeAsync(
+                    () => RestoreOrCreateMainWindowCore(showSingleInstanceNotice: true, source: "SingleInstance"),
+                    DispatcherPriority.Send).GetAwaiter().GetResult();
+
+            if (!restored)
+            {
+                throw new InvalidOperationException("Main window restore failed in activation callback.");
+            }
+
+            AppLogger.Info("SingleInstance", "Activation callback completed successfully.");
+        }
+        catch (Exception ex)
+        {
+            AppLogger.Warn("SingleInstance", "Activation callback failed while restoring the desktop shell.", ex);
+            throw;
+        }
     }
 
     private void RestoreOrCreateMainWindow(bool showSingleInstanceNotice, string source)
     {
         Dispatcher.UIThread.Post(() =>
         {
-            if (ApplicationLifetime is not IClassicDesktopStyleApplicationLifetime desktop)
-            {
-                return;
-            }
-
-            try
-            {
-                if (_transparentOverlayWindow is not null && _transparentOverlayWindow.IsVisible)
-                {
-                    _transparentOverlayWindow.Hide();
-                }
-
-                var mainWindow = GetOrCreateMainWindow(desktop, source);
-                mainWindow.PrepareEnterAnimation();
-
-                mainWindow.ShowInTaskbar = true;
-
-                if (!mainWindow.IsVisible)
-                {
-                    mainWindow.Show();
-                }
-
-                if (mainWindow.WindowState == WindowState.Minimized)
-                {
-                    mainWindow.WindowState = WindowState.Normal;
-                }
-
-                if (mainWindow.WindowState != WindowState.FullScreen)
-                {
-                    mainWindow.WindowState = WindowState.FullScreen;
-                }
-
-                mainWindow.Activate();
-                mainWindow.Topmost = true;
-                mainWindow.Topmost = false;
-
-                Dispatcher.UIThread.Post(() =>
-                {
-                    mainWindow.PlayEnterAnimation();
-                }, DispatcherPriority.Background);
-
-                SetDesktopShellState(DesktopShellState.ForegroundDesktop, $"Restore:{source}");
-                AppLogger.Info(
-                    "DesktopShell",
-                    $"Desktop restored. Source='{source}'; MainWindowClosed={_mainWindowClosed}; ShowSingleInstanceNotice={showSingleInstanceNotice}; WindowState='{mainWindow.WindowState}'.");
-
-                if (showSingleInstanceNotice)
-                {
-                    mainWindow.ShowSingleInstanceNotice();
-                }
-            }
-            catch (Exception ex)
-            {
-                AppLogger.Warn("DesktopShell", $"Failed to restore desktop shell. Source='{source}'.", ex);
-            }
+            _ = RestoreOrCreateMainWindowCore(showSingleInstanceNotice, source);
         }, DispatcherPriority.Send);
     }
+
+    private bool RestoreOrCreateMainWindowCore(bool showSingleInstanceNotice, string source)
+    {
+        if (ApplicationLifetime is not IClassicDesktopStyleApplicationLifetime desktop)
+        {
+            AppLogger.Warn("DesktopShell", $"Restore skipped because desktop lifetime is unavailable. Source='{source}'.");
+            return false;
+        }
+
+        try
+        {
+            AppLogger.Info("DesktopShell", $"Restoring desktop shell started. Source='{source}'.");
+
+            if (_transparentOverlayWindow is not null && _transparentOverlayWindow.IsVisible)
+            {
+                _transparentOverlayWindow.Hide();
+            }
+
+            var mainWindow = GetOrCreateMainWindow(desktop, source);
+            mainWindow.PrepareEnterAnimation();
+
+            mainWindow.ShowInTaskbar = true;
+
+            if (!mainWindow.IsVisible)
+            {
+                mainWindow.Show();
+            }
+
+            if (mainWindow.WindowState == WindowState.Minimized)
+            {
+                mainWindow.WindowState = WindowState.Normal;
+            }
+
+            if (mainWindow.WindowState != WindowState.FullScreen)
+            {
+                mainWindow.WindowState = WindowState.FullScreen;
+            }
+
+            mainWindow.Activate();
+            mainWindow.Topmost = true;
+            mainWindow.Topmost = false;
+
+            Dispatcher.UIThread.Post(() =>
+            {
+                mainWindow.PlayEnterAnimation();
+            }, DispatcherPriority.Background);
+
+            SetDesktopShellState(DesktopShellState.ForegroundDesktop, $"Restore:{source}");
+            AppLogger.Info(
+                "DesktopShell",
+                $"Desktop restored. Source='{source}'; MainWindowClosed={_mainWindowClosed}; ShowSingleInstanceNotice={showSingleInstanceNotice}; WindowState='{mainWindow.WindowState}'.");
+
+            if (showSingleInstanceNotice)
+            {
+                mainWindow.ShowSingleInstanceNotice();
+            }
+
+            return true;
+        }
+        catch (Exception ex)
+        {
+            AppLogger.Warn("DesktopShell", $"Failed to restore desktop shell. Source='{source}'.", ex);
+            return false;
+        }
+    }
     
     private void EnsureTransparentOverlayWindow()
     {
@@ -836,6 +923,57 @@ public partial class App : Application
                stackTrace.Contains("AvaloniaWebView.WebView.OnAttachedToVisualTree", StringComparison.Ordinal);
     }
 
+    private void ReleaseSingleInstanceAfterExit(string source)
+    {
+        if (_singleInstanceReleased)
+        {
+            return;
+        }
+
+        _singleInstanceReleased = true;
+        var singleInstance = CurrentSingleInstanceService;
+        CurrentSingleInstanceService = null;
+        if (singleInstance is null)
+        {
+            AppLogger.Info("SingleInstance", $"No single-instance handle to release. Source='{source}'.");
+            return;
+        }
+
+        try
+        {
+            singleInstance.Dispose();
+            AppLogger.Info("SingleInstance", $"Released single-instance handle. Source='{source}'.");
+        }
+        catch (Exception ex)
+        {
+            AppLogger.Warn("SingleInstance", $"Failed to release single-instance handle. Source='{source}'.", ex);
+        }
+    }
+
+    private void ScheduleForcedProcessTermination(string source)
+    {
+        if (Interlocked.Exchange(ref _forcedExitScheduled, 1) != 0)
+        {
+            return;
+        }
+
+        _ = Task.Run(async () =>
+        {
+            try
+            {
+                await Task.Delay(TimeSpan.FromSeconds(8)).ConfigureAwait(false);
+                AppLogger.Warn(
+                    "DesktopShell",
+                    $"Process did not terminate after desktop exit cleanup. Forcing process exit. Source='{source}'; ShutdownIntent='{_shutdownIntent}'.");
+                Environment.Exit(0);
+            }
+            catch (Exception ex)
+            {
+                AppLogger.Warn("DesktopShell", $"Forced process termination scheduler failed. Source='{source}'.", ex);
+            }
+        });
+    }
+
     private void PerformExitCleanup()
     {
         if (_exitCleanupCompleted)
@@ -886,6 +1024,22 @@ public partial class App : Application
             disposableRegistry.Dispose();
         }
 
+        if (_transparentOverlayWindow is not null)
+        {
+            try
+            {
+                _transparentOverlayWindow.Close();
+            }
+            catch (Exception ex)
+            {
+                AppLogger.Warn("DesktopShell", "Failed to close transparent overlay during exit cleanup.", ex);
+            }
+            finally
+            {
+                _transparentOverlayWindow = null;
+            }
+        }
+
         AudioRecorderServiceFactory.DisposeSharedServices();
         StudyAnalyticsServiceFactory.DisposeSharedService();
         DisposeTrayIcon();
@@ -927,10 +1081,63 @@ public partial class App : Application
         AppLogger.Info("App", $"Main window created. Reason='{reason}'. LogFile={AppLogger.LogFilePath}");
         LogBrowserStartupDiagnostics();
         SetDesktopShellState(DesktopShellState.ForegroundDesktop, $"MainWindowCreated:{reason}");
-        ReportStartupProgress(StartupStage.Ready, 100, "就绪");
+        
+        // 延迟报告 Ready 直到窗口实际打开并可见
+        // 使用 Opened 事件确保所有资源已加载完毕
+        mainWindow.Opened += OnMainWindowOpened;
+
+        // 手动显示窗口，因为在 ShutdownMode.OnExplicitShutdown 模式下框架不会自动调用 Show
+        if (!mainWindow.IsVisible)
+        {
+            mainWindow.Show();
+        }
+        
+        // 兜底机制：如果 Opened 事件 10 秒内未触发，强制发送 Ready 信号
+        // 防止因渲染问题导致 Opened 不触发，启动器 Splash 窗口一直显示
+        _ = Task.Run(async () =>
+        {
+            await Task.Delay(TimeSpan.FromSeconds(10));
+            if (_launcherIpcClient is not null && _launcherIpcClient.IsConnected)
+            {
+                try
+                {
+                    await _launcherIpcClient.ReportProgressAsync(new StartupProgressMessage
+                    {
+                        Stage = StartupStage.Ready,
+                        ProgressPercent = 100,
+                        Message = "就绪"
+                    });
+                    AppLogger.Warn("App", "Ready signal sent via fallback (Opened event did not fire within 10s)");
+                }
+                catch { }
+            }
+        });
+        
         return mainWindow;
     }
 
+    /// <summary>
+    /// 主窗口打开完成事件 - 此时所有组件、资源及功能模块均已完全加载
+    /// </summary>
+    private void OnMainWindowOpened(object? sender, EventArgs e)
+    {
+        if (sender is MainWindow mainWindow)
+        {
+            mainWindow.Opened -= OnMainWindowOpened;
+            
+            AppLogger.Info("App", "Main window opened and ready. Reporting Ready to Launcher...");
+            
+            // 完成系统初始化加载项
+            _loadingStateManager?.CompleteItem("system.init", "系统初始化完成");
+            
+            // 报告 Ready 状态，启动器可以安全关闭 Splash 窗口
+            ReportStartupProgressSync(StartupStage.Ready, 100, "就绪");
+            
+            // 停止加载状态上报
+            _loadingStateReporter?.Stop();
+        }
+    }
+
     private MainWindow GetOrCreateMainWindow(
         IClassicDesktopStyleApplicationLifetime desktop,
         string reason)
@@ -1058,11 +1265,9 @@ public partial class App : Application
                 "DesktopShell",
                 $"Main window hidden to tray. Source='{source}'; WindowState='{mainWindow.WindowState}'.");
             
-            // 检查三指滑动功能是否启用
             var appSnapshot = _settingsFacade.Settings.LoadSnapshot<AppSettingsSnapshot>(SettingsScope.App);
-            if (appSnapshot.EnableThreeFingerSwipe)
+            if (appSnapshot.EnableThreeFingerSwipe && appSnapshot.EnableFusedDesktop)
             {
-                // 显示透明覆盖层窗口
                 EnsureTransparentOverlayWindow();
                 _transparentOverlayWindow?.Show();
             }

LanMountainDesktop/Models/AppSettingsSnapshot.cs

@@ -85,7 +85,7 @@ public sealed class AppSettingsSnapshot
 
     public string UpdateMode { get; set; } = "download_then_confirm";
 
-    public string UpdateDownloadSource { get; set; } = "github";
+    public string UpdateDownloadSource { get; set; } = "stcn";
 
     public int UpdateDownloadThreads { get; set; } = 4;
 

LanMountainDesktop/Program.cs

@@ -9,6 +9,7 @@ using LanMountainDesktop.Models;
 using LanMountainDesktop.Plugins;
 using LanMountainDesktop.Services;
 using LanMountainDesktop.Services.Settings;
+using LanMountainDesktop.Shared.Contracts.Launcher;
 
 namespace LanMountainDesktop;
 
@@ -32,11 +33,26 @@ public sealed class Program
                 AppLogger.Warn(
                     "Startup",
                     $"Restart relaunch could not acquire the single-instance lock. pid={restartParentProcessId.Value}. Suppressing multi-open activation prompt.");
+                Environment.ExitCode = HostExitCodes.RestartLockNotAcquired;
                 return;
             }
 
-            AppLogger.Warn("Startup", "A secondary launch was blocked because another instance is already running.");
-            _ = singleInstance.TryNotifyPrimaryInstance(TimeSpan.FromSeconds(2));
+            var activationAcknowledged = singleInstance.TryNotifyPrimaryInstance(TimeSpan.FromSeconds(2), out var failureReason);
+            if (activationAcknowledged)
+            {
+                AppLogger.Info(
+                    "Startup",
+                    $"Secondary launch forwarded to primary instance successfully. Acked={activationAcknowledged}; Pid={Environment.ProcessId}.");
+                Environment.ExitCode = HostExitCodes.SecondaryActivationSucceeded;
+            }
+            else
+            {
+                AppLogger.Warn(
+                    "Startup",
+                    $"Secondary launch failed to activate the primary instance. Acked={activationAcknowledged}; Reason='{failureReason ?? "unknown"}'; Pid={Environment.ProcessId}.");
+                Environment.ExitCode = HostExitCodes.SecondaryActivationFailed;
+            }
+
             return;
         }
 

LanMountainDesktop/Services/AppRestartService.cs

@@ -100,12 +100,15 @@ public static class AppRestartService
         var startInfo = new ProcessStartInfo
         {
             FileName = executablePath,
-            UseShellExecute = false,
+            UseShellExecute = true,
             WorkingDirectory = ResolveWorkingDirectory(executablePath, entryAssemblyPath)
         };
 
-        AppendArguments(startInfo, commandLineArgs);
-        AppendRestartParentProcessArgument(startInfo);
+        // UseShellExecute=true 时使用 Arguments 字符串而非 ArgumentList
+        var args = new System.Text.StringBuilder();
+        AppendArgumentsToString(args, commandLineArgs);
+        AppendRestartParentProcessArgumentToString(args);
+        startInfo.Arguments = args.ToString();
         return startInfo;
     }
 
@@ -122,13 +125,16 @@ public static class AppRestartService
         var startInfo = new ProcessStartInfo
         {
             FileName = dotnetHostPath,
-            UseShellExecute = false,
+            UseShellExecute = true,
             WorkingDirectory = ResolveWorkingDirectory(dotnetHostPath, entryAssemblyPath)
         };
 
-        startInfo.ArgumentList.Add(entryAssemblyPath);
-        AppendArguments(startInfo, commandLineArgs);
-        AppendRestartParentProcessArgument(startInfo);
+        // UseShellExecute=true 时使用 Arguments 字符串
+        var args = new System.Text.StringBuilder();
+        args.Append(QuoteArgument(entryAssemblyPath));
+        AppendArgumentsToString(args, commandLineArgs);
+        AppendRestartParentProcessArgumentToString(args);
+        startInfo.Arguments = args.ToString();
         return startInfo;
     }
 
@@ -145,11 +151,61 @@ public static class AppRestartService
         }
     }
 
+    private static void AppendArgumentsToString(System.Text.StringBuilder builder, IReadOnlyList<string> commandLineArgs)
+    {
+        for (var i = 1; i < commandLineArgs.Count; i++)
+        {
+            if (TryParseRestartParentProcessId(commandLineArgs[i], out _))
+            {
+                continue;
+            }
+
+            if (builder.Length > 0) builder.Append(' ');
+            builder.Append(QuoteArgument(commandLineArgs[i]));
+        }
+    }
+
     private static void AppendRestartParentProcessArgument(ProcessStartInfo startInfo)
     {
         startInfo.ArgumentList.Add($"{RestartParentPidArgumentPrefix}{Environment.ProcessId}");
     }
 
+    private static void AppendRestartParentProcessArgumentToString(System.Text.StringBuilder builder)
+    {
+        if (builder.Length > 0) builder.Append(' ');
+        builder.Append($"{RestartParentPidArgumentPrefix}{Environment.ProcessId}");
+    }
+
+    private static string QuoteArgument(string value)
+    {
+        if (string.IsNullOrEmpty(value))
+        {
+            return "\"\"";
+        }
+
+        if (!value.Contains('"') && !value.Contains(' ') && !value.Contains('\t'))
+        {
+            return value;
+        }
+
+        var builder = new System.Text.StringBuilder();
+        builder.Append('"');
+        foreach (var ch in value)
+        {
+            if (ch == '"')
+            {
+                builder.Append("\\\"");
+            }
+            else
+            {
+                builder.Append(ch);
+            }
+        }
+
+        builder.Append('"');
+        return builder.ToString();
+    }
+
     private static bool TryParseRestartParentProcessId(string? argument, out int processId)
     {
         processId = 0;

LanMountainDesktop/Services/FusedDesktopManagerService.cs

@@ -117,8 +117,9 @@ internal sealed class FusedDesktopManagerService : IFusedDesktopManagerService
             
             if (_widgetWindows.TryGetValue(placement.PlacementId, out var existingWindow))
             {
-                // 已存在，可能只更新位置或尺寸
+                // 编辑完成后，已有小窗也要同步尺寸，否则会出现“布局已保存但窗口没变”的假象。
                 existingWindow.Position = new Avalonia.PixelPoint((int)placement.X, (int)placement.Y);
+                existingWindow.UpdateComponentLayout(placement.Width, placement.Height);
                 if (existingWindow.IsVisible == false)
                 {
                     existingWindow.Show();

LanMountainDesktop/Services/GitHubReleaseUpdateService.cs

@@ -34,7 +34,20 @@ public sealed record UpdateCheckResult(
     GitHubReleaseInfo? Release,
     GitHubReleaseAsset? PreferredAsset,
     string? ErrorMessage,
-    bool ForceMode = false);
+    bool ForceMode = false,
+    PlondsUpdatePayload? PlondsPayload = null);
+
+public sealed record PlondsUpdatePayload(
+    string DistributionId,
+    string ChannelId,
+    string SubChannel,
+    string? FileMapJson,
+    string? FileMapSignature,
+    string? FileMapJsonUrl,
+    string? FileMapSignatureUrl,
+    string? UpdateArchiveUrl = null,
+    string? UpdateArchiveSha256 = null,
+    long? UpdateArchiveSizeBytes = null);
 
 public sealed record UpdateDownloadResult(
     bool Success,
@@ -149,6 +162,9 @@ public sealed class GitHubReleaseUpdateService : IDisposable
             var preferredAsset = isUpdateAvailable
                 ? SelectPreferredInstallerAsset(release.Assets)
                 : null;
+            var plondsPayload = isUpdateAvailable
+                ? TryResolvePlondsPayload(release)
+                : null;
 
             return new UpdateCheckResult(
                 Success: true,
@@ -157,7 +173,8 @@ public sealed class GitHubReleaseUpdateService : IDisposable
                 LatestVersionText: latestVersionText,
                 Release: release,
                 PreferredAsset: preferredAsset,
-                ErrorMessage: null);
+                ErrorMessage: null,
+                PlondsPayload: plondsPayload);
         }
         catch (OperationCanceledException)
         {
@@ -222,6 +239,7 @@ public sealed class GitHubReleaseUpdateService : IDisposable
                 : release.TagName;
 
             var preferredAsset = SelectPreferredInstallerAsset(release.Assets);
+            var plondsPayload = TryResolvePlondsPayload(release);
 
             return new UpdateCheckResult(
                 Success: true,
@@ -231,7 +249,8 @@ public sealed class GitHubReleaseUpdateService : IDisposable
                 Release: release,
                 PreferredAsset: preferredAsset,
                 ErrorMessage: null,
-                ForceMode: true);
+                ForceMode: true,
+                PlondsPayload: plondsPayload);
         }
         catch (OperationCanceledException)
         {
@@ -642,7 +661,7 @@ public sealed class GitHubReleaseUpdateService : IDisposable
 
     private static GitHubReleaseAsset? SelectPreferredInstallerAsset(IReadOnlyList<GitHubReleaseAsset> assets)
     {
-        if (assets is null || assets.Count == 0 || !OperatingSystem.IsWindows())
+        if (assets is null || assets.Count == 0)
         {
             return null;
         }
@@ -654,12 +673,95 @@ public sealed class GitHubReleaseUpdateService : IDisposable
             _ => "x64"
         };
 
-        var ranked = assets
-            .Select(asset => (Asset: asset, Score: ScoreWindowsInstallerAsset(asset.Name, architectureToken)))
-            .OrderByDescending(x => x.Score)
-            .ToList();
+        if (OperatingSystem.IsWindows())
+        {
+            return assets
+                .Select(asset => (Asset: asset, Score: ScoreWindowsInstallerAsset(asset.Name, architectureToken)))
+                .OrderByDescending(x => x.Score)
+                .FirstOrDefault(x => x.Score > 0)
+                .Asset;
+        }
 
-        return ranked.FirstOrDefault(x => x.Score > 0).Asset;
+        if (OperatingSystem.IsLinux())
+        {
+            return assets
+                .Select(asset => (Asset: asset, Score: ScoreLinuxInstallerAsset(asset.Name, architectureToken)))
+                .OrderByDescending(x => x.Score)
+                .FirstOrDefault(x => x.Score > 0)
+                .Asset;
+        }
+
+        if (OperatingSystem.IsMacOS())
+        {
+            return assets
+                .Select(asset => (Asset: asset, Score: ScoreMacInstallerAsset(asset.Name, architectureToken)))
+                .OrderByDescending(x => x.Score)
+                .FirstOrDefault(x => x.Score > 0)
+                .Asset;
+        }
+
+        return null;
+    }
+
+    private static PlondsUpdatePayload? TryResolvePlondsPayload(GitHubReleaseInfo release)
+    {
+        if (release.Assets is null || release.Assets.Count == 0)
+        {
+            return null;
+        }
+
+        var platformSuffix = GetPlatformAssetSuffix();
+        var fileMapAsset = FindAsset(release.Assets, $"plonds-filemap-{platformSuffix}.json");
+        var signatureAsset = FindAsset(release.Assets, $"plonds-filemap-{platformSuffix}.json.sig")
+                             ?? FindAsset(release.Assets, $"plonds-filemap-{platformSuffix}.sig");
+        var archiveAsset = FindAsset(release.Assets, $"update-{platformSuffix}.zip");
+        if (fileMapAsset is null || signatureAsset is null || archiveAsset is null)
+        {
+            return null;
+        }
+
+        var distributionId = $"plonds-{release.TagName.Trim().TrimStart('v')}-{platformSuffix}";
+        var channelId = release.IsPrerelease
+            ? UpdateSettingsValues.ChannelPreview
+            : UpdateSettingsValues.ChannelStable;
+
+        return new PlondsUpdatePayload(
+            DistributionId: distributionId,
+            ChannelId: channelId,
+            SubChannel: platformSuffix,
+            FileMapJson: null,
+            FileMapSignature: null,
+            FileMapJsonUrl: fileMapAsset.BrowserDownloadUrl,
+            FileMapSignatureUrl: signatureAsset.BrowserDownloadUrl,
+            UpdateArchiveUrl: archiveAsset.BrowserDownloadUrl,
+            UpdateArchiveSha256: archiveAsset.Sha256,
+            UpdateArchiveSizeBytes: archiveAsset.SizeBytes > 0 ? archiveAsset.SizeBytes : null);
+    }
+
+    private static GitHubReleaseAsset? FindAsset(IReadOnlyList<GitHubReleaseAsset> assets, string assetName)
+    {
+        return assets.FirstOrDefault(asset => string.Equals(asset.Name, assetName, StringComparison.OrdinalIgnoreCase));
+    }
+
+    private static string GetPlatformAssetSuffix()
+    {
+        var os = OperatingSystem.IsWindows()
+            ? "windows"
+            : OperatingSystem.IsLinux()
+                ? "linux"
+                : OperatingSystem.IsMacOS()
+                    ? "macos"
+                    : "unknown";
+
+        var arch = RuntimeInformation.OSArchitecture switch
+        {
+            Architecture.X86 => "x86",
+            Architecture.Arm => "arm",
+            Architecture.Arm64 => "arm64",
+            _ => "x64"
+        };
+
+        return $"{os}-{arch}";
     }
 
     private static int ScoreWindowsInstallerAsset(string assetName, string architectureToken)
@@ -709,6 +811,94 @@ public sealed class GitHubReleaseUpdateService : IDisposable
         return score;
     }
 
+    private static int ScoreLinuxInstallerAsset(string assetName, string architectureToken)
+    {
+        if (string.IsNullOrWhiteSpace(assetName))
+        {
+            return 0;
+        }
+
+        var score = 0;
+
+        if (assetName.EndsWith(".deb", StringComparison.OrdinalIgnoreCase))
+        {
+            score += 220;
+        }
+        else if (assetName.EndsWith(".rpm", StringComparison.OrdinalIgnoreCase))
+        {
+            score += 180;
+        }
+        else if (assetName.EndsWith(".AppImage", StringComparison.OrdinalIgnoreCase))
+        {
+            score += 160;
+        }
+        else
+        {
+            return 0;
+        }
+
+        if (assetName.Contains("linux", StringComparison.OrdinalIgnoreCase))
+        {
+            score += 40;
+        }
+
+        if (assetName.Contains(architectureToken, StringComparison.OrdinalIgnoreCase) ||
+            (architectureToken == "x64" && assetName.Contains("amd64", StringComparison.OrdinalIgnoreCase)))
+        {
+            score += 40;
+        }
+        else if (assetName.Contains("x64", StringComparison.OrdinalIgnoreCase) ||
+                 assetName.Contains("amd64", StringComparison.OrdinalIgnoreCase) ||
+                 assetName.Contains("x86", StringComparison.OrdinalIgnoreCase) ||
+                 assetName.Contains("arm64", StringComparison.OrdinalIgnoreCase))
+        {
+            score -= 30;
+        }
+
+        return score;
+    }
+
+    private static int ScoreMacInstallerAsset(string assetName, string architectureToken)
+    {
+        if (string.IsNullOrWhiteSpace(assetName))
+        {
+            return 0;
+        }
+
+        var score = 0;
+
+        if (assetName.EndsWith(".dmg", StringComparison.OrdinalIgnoreCase))
+        {
+            score += 220;
+        }
+        else if (assetName.EndsWith(".pkg", StringComparison.OrdinalIgnoreCase))
+        {
+            score += 180;
+        }
+        else
+        {
+            return 0;
+        }
+
+        if (assetName.Contains("mac", StringComparison.OrdinalIgnoreCase) ||
+            assetName.Contains("osx", StringComparison.OrdinalIgnoreCase))
+        {
+            score += 40;
+        }
+
+        if (assetName.Contains(architectureToken, StringComparison.OrdinalIgnoreCase))
+        {
+            score += 40;
+        }
+        else if (assetName.Contains("x64", StringComparison.OrdinalIgnoreCase) ||
+                 assetName.Contains("arm64", StringComparison.OrdinalIgnoreCase))
+        {
+            score -= 30;
+        }
+
+        return score;
+    }
+
     private static bool TryParseVersion(string? value, out Version? version)
     {
         version = null;

LanMountainDesktop/Services/Launcher/LauncherIpcClient.cs

@@ -17,6 +17,11 @@ public class LauncherIpcClient : IDisposable
     private bool _isConnected;
     private readonly object _writeLock = new();
 
+    /// <summary>
+    /// 是否已连接到 Launcher
+    /// </summary>
+    public bool IsConnected => _isConnected && _pipeClient?.IsConnected == true;
+
     /// <summary>
     /// 协议：每条消息以 4 字节小端 int32 长度前缀开头，后跟 UTF-8 JSON 正文。
     /// </summary>
@@ -92,11 +97,28 @@ public class LauncherIpcClient : IDisposable
 
     /// <summary>
     /// 检查是否从 Launcher 启动
+    /// 优先检查环境变量，回退到命令行参数（UseShellExecute=true 时环境变量仍可继承，
+    /// 命令行参数作为备选确保兼容性）
     /// </summary>
     public static bool IsLaunchedByLauncher()
     {
-        return !string.IsNullOrEmpty(
-            Environment.GetEnvironmentVariable(LauncherIpcConstants.LauncherPidEnvVar));
+        // 优先检查环境变量
+        if (!string.IsNullOrEmpty(
+            Environment.GetEnvironmentVariable(LauncherIpcConstants.LauncherPidEnvVar)))
+        {
+            return true;
+        }
+
+        // 回退到命令行参数检查（格式: --LMD_LAUNCHER_PID=<value>）
+        foreach (var arg in Environment.GetCommandLineArgs())
+        {
+            if (arg.StartsWith($"--{LauncherIpcConstants.LauncherPidEnvVar}=", StringComparison.OrdinalIgnoreCase))
+            {
+                return true;
+            }
+        }
+
+        return false;
     }
 
     public void Dispose()

LanMountainDesktop/Services/Loading/LoadingStateManager.cs

@@ -0,0 +1,380 @@
+using System.Collections.Concurrent;
+using LanMountainDesktop.Shared.Contracts.Launcher;
+
+namespace LanMountainDesktop.Services.Loading;
+
+/// <summary>
+/// 加载状态管理器 - 管理所有加载项的状态
+/// </summary>
+public class LoadingStateManager : IDisposable
+{
+    private readonly ConcurrentDictionary<string, LoadingItem> _items = new();
+    private readonly ConcurrentDictionary<string, DateTimeOffset> _startTimes = new();
+    private readonly object _lock = new();
+    private readonly CancellationTokenSource _cts = new();
+    
+    /// <summary>
+    /// 状态变更事件
+    /// </summary>
+    public event EventHandler<LoadingStateChangedEventArgs>? StateChanged;
+    
+    /// <summary>
+    /// 整体进度变更事件
+    /// </summary>
+    public event EventHandler<OverallProgressChangedEventArgs>? OverallProgressChanged;
+    
+    /// <summary>
+    /// 当前启动阶段
+    /// </summary>
+    public StartupStage CurrentStage { get; private set; } = StartupStage.Initializing;
+    
+    /// <summary>
+    /// 整体进度百分比
+    /// </summary>
+    public int OverallProgressPercent { get; private set; }
+    
+    /// <summary>
+    /// 是否正在加载
+    /// </summary>
+    public bool IsLoading => _items.Values.Any(i => i.State == LoadingState.InProgress);
+    
+    /// <summary>
+    /// 是否有错误
+    /// </summary>
+    public bool HasErrors => _items.Values.Any(i => i.State == LoadingState.Failed);
+    
+    /// <summary>
+    /// 获取所有加载项
+    /// </summary>
+    public IReadOnlyCollection<LoadingItem> GetAllItems() => _items.Values.ToList();
+    
+    /// <summary>
+    /// 获取活动的加载项
+    /// </summary>
+    public IReadOnlyCollection<LoadingItem> GetActiveItems() => 
+        _items.Values.Where(i => i.State is LoadingState.InProgress or LoadingState.Pending).ToList();
+    
+    /// <summary>
+    /// 注册加载项
+    /// </summary>
+    public LoadingItem RegisterItem(
+        string id, 
+        LoadingItemType type, 
+        string name, 
+        string? description = null,
+        Dictionary<string, string>? metadata = null)
+    {
+        var item = new LoadingItem
+        {
+            Id = id,
+            Type = type,
+            Name = name,
+            Description = description,
+            State = LoadingState.Pending,
+            ProgressPercent = 0,
+            Metadata = metadata,
+            Timestamp = DateTimeOffset.UtcNow
+        };
+        
+        _items[id] = item;
+        
+        StateChanged?.Invoke(this, new LoadingStateChangedEventArgs 
+        { 
+            Item = item, 
+            PreviousState = null, 
+            CurrentState = item.State 
+        });
+        
+        return item;
+    }
+    
+    /// <summary>
+    /// 开始加载
+    /// </summary>
+    public void StartItem(string id, string? message = null)
+    {
+        if (!_items.TryGetValue(id, out var item))
+            return;
+        
+        var previousState = item.State;
+        var startTime = DateTimeOffset.UtcNow;
+        
+        _startTimes[id] = startTime;
+        
+        var updatedItem = item with
+        {
+            State = LoadingState.InProgress,
+            StartTime = startTime,
+            Message = message ?? $"正在加载 {item.Name}...",
+            Timestamp = DateTimeOffset.UtcNow
+        };
+        
+        _items[id] = updatedItem;
+        
+        StateChanged?.Invoke(this, new LoadingStateChangedEventArgs 
+        { 
+            Item = updatedItem, 
+            PreviousState = previousState, 
+            CurrentState = updatedItem.State 
+        });
+        
+        UpdateOverallProgress();
+    }
+    
+    /// <summary>
+    /// 更新进度
+    /// </summary>
+    public void UpdateProgress(string id, int percent, string? message = null, int? estimatedRemainingSeconds = null)
+    {
+        if (!_items.TryGetValue(id, out var item))
+            return;
+        
+        var updatedItem = item with
+        {
+            ProgressPercent = Math.Clamp(percent, 0, 100),
+            Message = message ?? item.Message,
+            EstimatedRemainingSeconds = estimatedRemainingSeconds,
+            Timestamp = DateTimeOffset.UtcNow
+        };
+        
+        _items[id] = updatedItem;
+        
+        StateChanged?.Invoke(this, new LoadingStateChangedEventArgs 
+        { 
+            Item = updatedItem, 
+            PreviousState = item.State, 
+            CurrentState = updatedItem.State,
+            IsProgressUpdate = true
+        });
+        
+        UpdateOverallProgress();
+    }
+    
+    /// <summary>
+    /// 完成加载
+    /// </summary>
+    public void CompleteItem(string id, string? message = null)
+    {
+        if (!_items.TryGetValue(id, out var item))
+            return;
+        
+        var previousState = item.State;
+        var endTime = DateTimeOffset.UtcNow;
+        
+        _startTimes.TryRemove(id, out _);
+        
+        var updatedItem = item with
+        {
+            State = LoadingState.Completed,
+            ProgressPercent = 100,
+            EndTime = endTime,
+            Message = message ?? $"{item.Name} 加载完成",
+            Timestamp = DateTimeOffset.UtcNow
+        };
+        
+        _items[id] = updatedItem;
+        
+        StateChanged?.Invoke(this, new LoadingStateChangedEventArgs 
+        { 
+            Item = updatedItem, 
+            PreviousState = previousState, 
+            CurrentState = updatedItem.State 
+        });
+        
+        UpdateOverallProgress();
+    }
+    
+    /// <summary>
+    /// 标记失败
+    /// </summary>
+    public void FailItem(string id, string errorMessage, string? details = null)
+    {
+        if (!_items.TryGetValue(id, out var item))
+            return;
+        
+        var previousState = item.State;
+        var endTime = DateTimeOffset.UtcNow;
+        
+        _startTimes.TryRemove(id, out _);
+        
+        var fullErrorMessage = string.IsNullOrEmpty(details) 
+            ? errorMessage 
+            : $"{errorMessage}: {details}";
+        
+        var updatedItem = item with
+        {
+            State = LoadingState.Failed,
+            ErrorMessage = fullErrorMessage,
+            EndTime = endTime,
+            Message = $"{item.Name} 加载失败",
+            Timestamp = DateTimeOffset.UtcNow
+        };
+        
+        _items[id] = updatedItem;
+        
+        StateChanged?.Invoke(this, new LoadingStateChangedEventArgs 
+        { 
+            Item = updatedItem, 
+            PreviousState = previousState, 
+            CurrentState = updatedItem.State 
+        });
+        
+        UpdateOverallProgress();
+    }
+    
+    /// <summary>
+    /// 标记超时
+    /// </summary>
+    public void TimeoutItem(string id, string? message = null)
+    {
+        if (!_items.TryGetValue(id, out var item))
+            return;
+        
+        var previousState = item.State;
+        var endTime = DateTimeOffset.UtcNow;
+        
+        _startTimes.TryRemove(id, out _);
+        
+        var updatedItem = item with
+        {
+            State = LoadingState.Timeout,
+            EndTime = endTime,
+            Message = message ?? $"{item.Name} 加载超时",
+            Timestamp = DateTimeOffset.UtcNow
+        };
+        
+        _items[id] = updatedItem;
+        
+        StateChanged?.Invoke(this, new LoadingStateChangedEventArgs 
+        { 
+            Item = updatedItem, 
+            PreviousState = previousState, 
+            CurrentState = updatedItem.State 
+        });
+        
+        UpdateOverallProgress();
+    }
+    
+    /// <summary>
+    /// 设置当前启动阶段
+    /// </summary>
+    public void SetStage(StartupStage stage, string? message = null)
+    {
+        CurrentStage = stage;
+        
+        OverallProgressChanged?.Invoke(this, new OverallProgressChangedEventArgs
+        {
+            Stage = stage,
+            OverallProgressPercent = OverallProgressPercent,
+            Message = message
+        });
+    }
+    
+    /// <summary>
+    /// 更新整体进度
+    /// </summary>
+    private void UpdateOverallProgress()
+    {
+        lock (_lock)
+        {
+            var items = _items.Values.ToList();
+            if (items.Count == 0)
+            {
+                OverallProgressPercent = 0;
+                return;
+            }
+            
+            // 计算加权进度
+            var totalWeight = items.Count;
+            var completedWeight = items.Count(i => i.State == LoadingState.Completed);
+            var inProgressWeight = items
+                .Where(i => i.State == LoadingState.InProgress)
+                .Sum(i => i.ProgressPercent / 100.0);
+            
+            var progress = (int)((completedWeight + inProgressWeight) / totalWeight * 100);
+            OverallProgressPercent = Math.Clamp(progress, 0, 100);
+            
+            OverallProgressChanged?.Invoke(this, new OverallProgressChangedEventArgs
+            {
+                Stage = CurrentStage,
+                OverallProgressPercent = OverallProgressPercent
+            });
+        }
+    }
+    
+    /// <summary>
+    /// 获取加载状态消息
+    /// </summary>
+    public LoadingStateMessage GetLoadingStateMessage()
+    {
+        var items = _items.Values.ToList();
+        var activeItems = items.Where(i => i.State is LoadingState.InProgress or LoadingState.Pending).ToList();
+        var errorItems = items.Where(i => i.State == LoadingState.Failed).ToList();
+        
+        return new LoadingStateMessage
+        {
+            Stage = CurrentStage,
+            OverallProgressPercent = OverallProgressPercent,
+            ActiveItems = activeItems,
+            CompletedCount = items.Count(i => i.State == LoadingState.Completed),
+            TotalCount = items.Count,
+            HasErrors = errorItems.Any(),
+            ErrorMessages = errorItems.Select(i => $"{i.Name}: {i.ErrorMessage}").ToList()
+        };
+    }
+    
+    /// <summary>
+    /// 清理所有加载项
+    /// </summary>
+    public void Clear()
+    {
+        _items.Clear();
+        _startTimes.Clear();
+        OverallProgressPercent = 0;
+    }
+    
+    /// <summary>
+    /// 检查超时项
+    /// </summary>
+    public void CheckTimeouts(TimeSpan timeout)
+    {
+        var now = DateTimeOffset.UtcNow;
+        var timeoutItems = _items.Values
+            .Where(i => i.State == LoadingState.InProgress && i.StartTime.HasValue)
+            .Where(i => now - i.StartTime.Value > timeout)
+            .ToList();
+        
+        foreach (var item in timeoutItems)
+        {
+            TimeoutItem(item.Id, $"{item.Name} 加载超时（超过 {timeout.TotalSeconds} 秒）");
+        }
+    }
+    
+    public void Dispose()
+    {
+        _cts.Cancel();
+        _items.Clear();
+        _startTimes.Clear();
+    }
+}
+
+/// <summary>
+/// 加载状态变更事件参数
+/// </summary>
+public class LoadingStateChangedEventArgs : EventArgs
+{
+    public required LoadingItem Item { get; init; }
+    public LoadingState? PreviousState { get; init; }
+    public required LoadingState CurrentState { get; init; }
+    public bool IsProgressUpdate { get; init; }
+}
+
+/// <summary>
+/// 整体进度变更事件参数
+/// </summary>
+public class OverallProgressChangedEventArgs : EventArgs
+{
+    public StartupStage Stage { get; init; }
+    public int OverallProgressPercent { get; init; }
+    public string? Message { get; init; }
+}

LanMountainDesktop/Services/Loading/LoadingStateReporter.cs

@@ -0,0 +1,360 @@
+using System.Timers;
+using LanMountainDesktop.Services.Launcher;
+using LanMountainDesktop.Shared.Contracts.Launcher;
+
+namespace LanMountainDesktop.Services.Loading;
+
+/// <summary>
+/// 加载状态上报器 - 将加载状态实时上报给 Launcher
+/// </summary>
+public class LoadingStateReporter : IDisposable
+{
+    private readonly LoadingStateManager _manager;
+    private readonly LauncherIpcClient? _ipcClient;
+    private readonly System.Timers.Timer _reportTimer;
+    private readonly object _lock = new();
+    private bool _isDisposed;
+    
+    /// <summary>
+    /// 上报间隔（毫秒）
+    /// </summary>
+    public int ReportIntervalMs { get; set; } = 100;
+    
+    /// <summary>
+    /// 是否启用批量上报优化
+    /// </summary>
+    public bool EnableBatching { get; set; } = true;
+    
+    /// <summary>
+    /// 最小上报间隔（毫秒），用于限制高频更新
+    /// </summary>
+    public int MinReportIntervalMs { get; set; } = 50;
+    
+    private DateTimeOffset _lastReportTime = DateTimeOffset.MinValue;
+    private DetailedProgressMessage? _pendingMessage;
+    private bool _hasPendingMessage;
+
+    public LoadingStateReporter(
+        LoadingStateManager manager, 
+        LauncherIpcClient? ipcClient = null)
+    {
+        _manager = manager ?? throw new ArgumentNullException(nameof(manager));
+        _ipcClient = ipcClient;
+        
+        // 创建定时上报定时器
+        _reportTimer = new System.Timers.Timer(ReportIntervalMs);
+        _reportTimer.Elapsed += OnReportTimerElapsed;
+        _reportTimer.AutoReset = true;
+        
+        // 订阅状态变更事件
+        _manager.StateChanged += OnStateChanged;
+        _manager.OverallProgressChanged += OnOverallProgressChanged;
+    }
+
+    /// <summary>
+    /// 启动上报
+    /// </summary>
+    public void Start()
+    {
+        if (_isDisposed) return;
+        
+        _reportTimer.Start();
+        AppLogger.Info("LoadingStateReporter", "Loading state reporter started");
+    }
+
+    /// <summary>
+    /// 停止上报
+    /// </summary>
+    public void Stop()
+    {
+        _reportTimer.Stop();
+        
+        // 发送任何待处理的消息
+        FlushPendingMessage();
+        
+        AppLogger.Info("LoadingStateReporter", "Loading state reporter stopped");
+    }
+
+    /// <summary>
+    /// 立即上报当前状态
+    /// </summary>
+    public async Task ReportImmediatelyAsync()
+    {
+        if (_isDisposed || _ipcClient == null) return;
+        
+        var message = CreateDetailedProgressMessage();
+        await SendMessageAsync(message);
+    }
+
+    /// <summary>
+    /// 上报单个加载项的进度
+    /// </summary>
+    public async Task ReportItemProgressAsync(string itemId, int percent, string? message = null)
+    {
+        if (_isDisposed || _ipcClient == null) return;
+        
+        var item = _manager.GetAllItems().FirstOrDefault(i => i.Id == itemId);
+        if (item == null) return;
+        
+        var updatedItem = item with
+        {
+            ProgressPercent = percent,
+            Message = message ?? item.Message,
+            Timestamp = DateTimeOffset.UtcNow
+        };
+        
+        var progressMessage = new DetailedProgressMessage
+        {
+            Stage = _manager.CurrentStage,
+            ProgressPercent = _manager.OverallProgressPercent,
+            CurrentItem = updatedItem,
+            AllItems = _manager.GetAllItems().ToList(),
+            Message = message,
+            IsMajorUpdate = false
+        };
+        
+        await SendMessageAsync(progressMessage);
+    }
+
+    /// <summary>
+    /// 上报阶段变更
+    /// </summary>
+    public async Task ReportStageChangeAsync(StartupStage stage, string? message = null)
+    {
+        if (_isDisposed || _ipcClient == null) return;
+        
+        var progressMessage = new DetailedProgressMessage
+        {
+            Stage = stage,
+            ProgressPercent = _manager.OverallProgressPercent,
+            AllItems = _manager.GetAllItems().ToList(),
+            Message = message ?? $"进入阶段: {stage}",
+            IsMajorUpdate = true
+        };
+        
+        await SendMessageAsync(progressMessage);
+    }
+
+    /// <summary>
+    /// 上报错误
+    /// </summary>
+    public async Task ReportErrorAsync(string errorMessage, string? details = null)
+    {
+        if (_isDisposed || _ipcClient == null) return;
+        
+        var fullMessage = string.IsNullOrEmpty(details) 
+            ? errorMessage 
+            : $"{errorMessage}: {details}";
+        
+        var progressMessage = new DetailedProgressMessage
+        {
+            Stage = _manager.CurrentStage,
+            ProgressPercent = _manager.OverallProgressPercent,
+            AllItems = _manager.GetAllItems().ToList(),
+            Message = fullMessage,
+            IsMajorUpdate = true
+        };
+        
+        await SendMessageAsync(progressMessage);
+    }
+
+    /// <summary>
+    /// 状态变更事件处理
+    /// </summary>
+    private void OnStateChanged(object? sender, LoadingStateChangedEventArgs e)
+    {
+        if (_isDisposed) return;
+        
+        // 重要状态变更立即上报
+        if (e.CurrentState is LoadingState.Completed or LoadingState.Failed or LoadingState.Timeout)
+        {
+            _ = Task.Run(async () =>
+            {
+                try
+                {
+                    await ReportImmediatelyAsync();
+                }
+                catch (Exception ex)
+                {
+                    AppLogger.Warn("LoadingStateReporter", $"Failed to report state change: {ex.Message}");
+                }
+            });
+        }
+        else
+        {
+            // 其他状态变更标记为待处理
+            QueueMessage(CreateDetailedProgressMessage());
+        }
+    }
+
+    /// <summary>
+    /// 整体进度变更事件处理
+    /// </summary>
+    private void OnOverallProgressChanged(object? sender, OverallProgressChangedEventArgs e)
+    {
+        if (_isDisposed) return;
+        
+        QueueMessage(CreateDetailedProgressMessage(e.Message));
+    }
+
+    /// <summary>
+    /// 定时上报处理
+    /// </summary>
+    private void OnReportTimerElapsed(object? sender, ElapsedEventArgs e)
+    {
+        FlushPendingMessage();
+    }
+
+    /// <summary>
+    /// 将消息加入待处理队列
+    /// </summary>
+    private void QueueMessage(DetailedProgressMessage message)
+    {
+        if (!EnableBatching)
+        {
+            // 如果不启用批量，立即发送
+            _ = Task.Run(async () => await SendMessageAsync(message));
+            return;
+        }
+        
+        lock (_lock)
+        {
+            _pendingMessage = message;
+            _hasPendingMessage = true;
+        }
+    }
+
+    /// <summary>
+    /// 刷新待处理消息
+    /// </summary>
+    private void FlushPendingMessage()
+    {
+        DetailedProgressMessage? message;
+        
+        lock (_lock)
+        {
+            if (!_hasPendingMessage) return;
+            
+            message = _pendingMessage;
+            _pendingMessage = null;
+            _hasPendingMessage = false;
+        }
+        
+        if (message != null)
+        {
+            _ = Task.Run(async () =>
+            {
+                try
+                {
+                    await SendMessageAsync(message);
+                }
+                catch (Exception ex)
+                {
+                    AppLogger.Warn("LoadingStateReporter", $"Failed to flush pending message: {ex.Message}");
+                }
+            });
+        }
+    }
+
+    /// <summary>
+    /// 创建详细的进度消息
+    /// </summary>
+    private DetailedProgressMessage CreateDetailedProgressMessage(string? message = null)
+    {
+        var activeItems = _manager.GetActiveItems().ToList();
+        var currentItem = activeItems.FirstOrDefault();
+        
+        return new DetailedProgressMessage
+        {
+            Stage = _manager.CurrentStage,
+            ProgressPercent = _manager.OverallProgressPercent,
+            CurrentItem = currentItem,
+            AllItems = _manager.GetAllItems().ToList(),
+            Message = message ?? currentItem?.Message,
+            IsMajorUpdate = false
+        };
+    }
+
+    /// <summary>
+    /// 发送消息
+    /// </summary>
+    private async Task SendMessageAsync(DetailedProgressMessage message)
+    {
+        if (_ipcClient == null) return;
+        
+        // 检查最小上报间隔
+        var now = DateTimeOffset.UtcNow;
+        var elapsed = now - _lastReportTime;
+        if (elapsed.TotalMilliseconds < MinReportIntervalMs)
+        {
+            await Task.Delay(MinReportIntervalMs - (int)elapsed.TotalMilliseconds);
+        }
+        
+        try
+        {
+            // 转换为 StartupProgressMessage 以保持兼容性
+            var baseMessage = new StartupProgressMessage
+            {
+                Stage = message.Stage,
+                ProgressPercent = message.ProgressPercent,
+                Message = FormatMessage(message),
+                Timestamp = DateTimeOffset.UtcNow
+            };
+            
+            await _ipcClient.ReportProgressAsync(baseMessage);
+            _lastReportTime = DateTimeOffset.UtcNow;
+        }
+        catch (Exception ex)
+        {
+            AppLogger.Warn("LoadingStateReporter", $"Failed to send message: {ex.Message}");
+        }
+    }
+
+    /// <summary>
+    /// 格式化消息
+    /// </summary>
+    private string FormatMessage(DetailedProgressMessage message)
+    {
+        var parts = new List<string>();
+        
+        if (message.CurrentItem != null)
+        {
+            parts.Add($"[{message.CurrentItem.Type}] {message.CurrentItem.Name}");
+            
+            if (message.CurrentItem.ProgressPercent > 0)
+            {
+                parts.Add($"{message.CurrentItem.ProgressPercent}%");
+            }
+        }
+        
+        if (!string.IsNullOrEmpty(message.Message))
+        {
+            parts.Add(message.Message);
+        }
+        
+        var completedCount = message.AllItems?.Count(i => i.State == LoadingState.Completed) ?? 0;
+        var totalCount = message.AllItems?.Count ?? 0;
+        
+        if (totalCount > 0)
+        {
+            parts.Add($"({completedCount}/{totalCount})");
+        }
+        
+        return string.Join(" - ", parts);
+    }
+
+    public void Dispose()
+    {
+        if (_isDisposed) return;
+        
+        _isDisposed = true;
+        
+        Stop();
+        
+        _reportTimer.Elapsed -= OnReportTimerElapsed;
+        _reportTimer.Dispose();
+        
+        _manager.StateChanged -= OnStateChanged;
+        _manager.OverallProgressChanged -= OnOverallProgressChanged;
+    }
+}

LanMountainDesktop/Services/Loading/LoadingStateUsageExample.cs

@@ -0,0 +1,201 @@
+using LanMountainDesktop.Shared.Contracts.Launcher;
+
+namespace LanMountainDesktop.Services.Loading;
+
+/// <summary>
+/// 加载状态管理使用示例
+/// </summary>
+public static class LoadingStateUsageExample
+{
+    /// <summary>
+    /// 示例：插件加载
+    /// </summary>
+    public static async Task LoadPluginsExample(LoadingStateManager manager)
+    {
+        // 注册插件加载项
+        var pluginItem = manager.RegisterItem(
+            "plugins.core",
+            LoadingItemType.Plugin,
+            "核心插件",
+            "加载系统核心插件",
+            new Dictionary<string, string> { { "version", "1.0.0" } });
+
+        // 开始加载
+        manager.StartItem("plugins.core", "正在下载插件...");
+
+        try
+        {
+            // 模拟下载进度
+            for (int i = 0; i <= 100; i += 10)
+            {
+                manager.UpdateProgress(
+                    "plugins.core",
+                    i,
+                    $"正在下载... {i}%",
+                    estimatedRemainingSeconds: (100 - i) / 10);
+
+                await Task.Delay(100);
+            }
+
+            // 完成加载
+            manager.CompleteItem("plugins.core", "核心插件加载完成");
+        }
+        catch (Exception ex)
+        {
+            // 标记失败
+            manager.FailItem("plugins.core", "插件加载失败", ex.Message);
+        }
+    }
+
+    /// <summary>
+    /// 示例：组件加载
+    /// </summary>
+    public static async Task LoadComponentsExample(LoadingStateManager manager)
+    {
+        var components = new[]
+        {
+            ("comp.weather", "天气组件"),
+            ("comp.clock", "时钟组件"),
+            ("comp.calendar", "日历组件")
+        };
+
+        foreach (var (id, name) in components)
+        {
+            // 注册组件
+            manager.RegisterItem(id, LoadingItemType.Component, name);
+
+            // 开始加载
+            manager.StartItem(id, $"正在加载 {name}...");
+
+            // 模拟加载过程
+            for (int i = 0; i <= 100; i += 20)
+            {
+                manager.UpdateProgress(id, i);
+                await Task.Delay(50);
+            }
+
+            // 完成
+            manager.CompleteItem(id, $"{name} 加载完成");
+        }
+    }
+
+    /// <summary>
+    /// 示例：网络资源加载
+    /// </summary>
+    public static async Task LoadNetworkResourcesExample(LoadingStateManager manager)
+    {
+        // 注册网络加载项
+        manager.RegisterItem(
+            "network.config",
+            LoadingItemType.Network,
+            "配置数据",
+            "从服务器获取最新配置");
+
+        manager.StartItem("network.config", "正在连接服务器...");
+
+        try
+        {
+            // 模拟网络请求
+            await Task.Delay(1000);
+
+            manager.UpdateProgress("network.config", 50, "正在下载数据...");
+
+            await Task.Delay(1000);
+
+            manager.CompleteItem("network.config", "配置数据已更新");
+        }
+        catch (Exception ex)
+        {
+            manager.FailItem("network.config", "网络请求失败", ex.Message);
+        }
+    }
+
+    /// <summary>
+    /// 示例：带超时的加载
+    /// </summary>
+    public static async Task LoadWithTimeoutExample(
+        LoadingStateManager manager,
+        LoadingTimeoutHandler timeoutHandler)
+    {
+        // 设置超时时间为 10 秒
+        timeoutHandler.SetItemTimeout("data.heavy", TimeSpan.FromSeconds(10));
+
+        // 注册加载项
+        manager.RegisterItem(
+            "data.heavy",
+            LoadingItemType.Data,
+            "大数据处理",
+            "处理大量数据，可能需要较长时间");
+
+        // 订阅超时事件
+        timeoutHandler.ItemTimeout += (s, e) =>
+        {
+            Console.WriteLine($"加载项 '{e.ItemName}' 超时！");
+        };
+
+        timeoutHandler.ItemRetry += (s, e) =>
+        {
+            Console.WriteLine($"正在重试 '{e.ItemName}' ({e.RetryCount}/{e.MaxRetryCount})...");
+        };
+
+        // 开始加载
+        manager.StartItem("data.heavy", "正在处理数据...");
+
+        // 模拟长时间操作
+        await Task.Delay(15000);
+
+        // 完成
+        manager.CompleteItem("data.heavy", "数据处理完成");
+    }
+
+    /// <summary>
+    /// 示例：完整启动流程
+    /// </summary>
+    public static async Task FullStartupExample(
+        LoadingStateManager manager,
+        LoadingStateReporter reporter,
+        LoadingTimeoutHandler timeoutHandler)
+    {
+        // 启动超时处理器
+        timeoutHandler.Start();
+
+        // 设置阶段
+        manager.SetStage(StartupStage.Initializing, "开始初始化...");
+
+        // 1. 系统初始化
+        manager.RegisterItem("system.init", LoadingItemType.System, "系统初始化");
+        manager.StartItem("system.init");
+        await Task.Delay(500);
+        manager.CompleteItem("system.init");
+
+        // 2. 加载设置
+        manager.SetStage(StartupStage.LoadingSettings, "正在加载设置...");
+        manager.RegisterItem("settings.load", LoadingItemType.Settings, "用户设置");
+        manager.StartItem("settings.load");
+        await Task.Delay(800);
+        manager.CompleteItem("settings.load");
+
+        // 3. 加载插件
+        manager.SetStage(StartupStage.LoadingPlugins, "正在加载插件...");
+        await LoadPluginsExample(manager);
+
+        // 4. 加载组件
+        await LoadComponentsExample(manager);
+
+        // 5. 加载网络资源
+        await LoadNetworkResourcesExample(manager);
+
+        // 6. 初始化界面
+        manager.SetStage(StartupStage.InitializingUI, "正在初始化界面...");
+        manager.RegisterItem("ui.init", LoadingItemType.System, "界面初始化");
+        manager.StartItem("ui.init");
+        await Task.Delay(600);
+        manager.CompleteItem("ui.init");
+
+        // 完成
+        manager.SetStage(StartupStage.Ready, "加载完成");
+
+        // 停止超时处理器
+        timeoutHandler.Stop();
+    }
+}

LanMountainDesktop/Services/Loading/LoadingTimeoutHandler.cs

@@ -0,0 +1,275 @@
+using System.Timers;
+using LanMountainDesktop.Shared.Contracts.Launcher;
+
+namespace LanMountainDesktop.Services.Loading;
+
+/// <summary>
+/// 加载超时处理器 - 监控加载项超时并执行相应处理
+/// </summary>
+public class LoadingTimeoutHandler : IDisposable
+{
+    private readonly LoadingStateManager _manager;
+    private readonly System.Timers.Timer _checkTimer;
+    private readonly Dictionary<string, TimeSpan> _itemTimeouts = new();
+    private readonly Dictionary<string, int> _retryCounts = new();
+    private readonly object _lock = new();
+    private bool _isDisposed;
+
+    /// <summary>
+    /// 默认超时时间
+    /// </summary>
+    public TimeSpan DefaultTimeout { get; set; } = TimeSpan.FromSeconds(30);
+
+    /// <summary>
+    /// 最大重试次数
+    /// </summary>
+    public int MaxRetryCount { get; set; } = 3;
+
+    /// <summary>
+    /// 检查间隔
+    /// </summary>
+    public TimeSpan CheckInterval { get; set; } = TimeSpan.FromSeconds(5);
+
+    /// <summary>
+    /// 超时事件
+    /// </summary>
+    public event EventHandler<LoadingTimeoutEventArgs>? ItemTimeout;
+
+    /// <summary>
+    /// 重试事件
+    /// </summary>
+    public event EventHandler<LoadingRetryEventArgs>? ItemRetry;
+
+    /// <summary>
+    /// 最终失败事件（超过最大重试次数）
+    /// </summary>
+    public event EventHandler<LoadingTimeoutEventArgs>? ItemFailed;
+
+    public LoadingTimeoutHandler(LoadingStateManager manager)
+    {
+        _manager = manager ?? throw new ArgumentNullException(nameof(manager));
+
+        _checkTimer = new System.Timers.Timer(CheckInterval.TotalMilliseconds);
+        _checkTimer.Elapsed += OnCheckTimerElapsed;
+        _checkTimer.AutoReset = true;
+
+        // 订阅状态变更事件
+        _manager.StateChanged += OnStateChanged;
+    }
+
+    /// <summary>
+    /// 启动监控
+    /// </summary>
+    public void Start()
+    {
+        if (_isDisposed) return;
+        _checkTimer.Start();
+        AppLogger.Info("LoadingTimeoutHandler", "Timeout handler started");
+    }
+
+    /// <summary>
+    /// 停止监控
+    /// </summary>
+    public void Stop()
+    {
+        _checkTimer.Stop();
+        AppLogger.Info("LoadingTimeoutHandler", "Timeout handler stopped");
+    }
+
+    /// <summary>
+    /// 为特定加载项设置超时
+    /// </summary>
+    public void SetItemTimeout(string itemId, TimeSpan timeout)
+    {
+        lock (_lock)
+        {
+            _itemTimeouts[itemId] = timeout;
+        }
+    }
+
+    /// <summary>
+    /// 获取加载项的超时时间
+    /// </summary>
+    public TimeSpan GetItemTimeout(string itemId)
+    {
+        lock (_lock)
+        {
+            return _itemTimeouts.TryGetValue(itemId, out var timeout) ? timeout : DefaultTimeout;
+        }
+    }
+
+    /// <summary>
+    /// 重置重试计数
+    /// </summary>
+    public void ResetRetryCount(string itemId)
+    {
+        lock (_lock)
+        {
+            _retryCounts[itemId] = 0;
+        }
+    }
+
+    /// <summary>
+    /// 定时检查超时
+    /// </summary>
+    private void OnCheckTimerElapsed(object? sender, ElapsedEventArgs e)
+    {
+        if (_isDisposed) return;
+
+        try
+        {
+            var activeItems = _manager.GetActiveItems().ToList();
+            var now = DateTimeOffset.UtcNow;
+
+            foreach (var item in activeItems)
+            {
+                if (!item.StartTime.HasValue) continue;
+
+                var timeout = GetItemTimeout(item.Id);
+                var elapsed = now - item.StartTime.Value;
+
+                if (elapsed > timeout)
+                {
+                    HandleTimeout(item.Id, elapsed);
+                }
+            }
+        }
+        catch (Exception ex)
+        {
+            AppLogger.Warn("LoadingTimeoutHandler", $"Error checking timeouts: {ex.Message}");
+        }
+    }
+
+    /// <summary>
+    /// 处理超时
+    /// </summary>
+    private void HandleTimeout(string itemId, TimeSpan elapsed)
+    {
+        lock (_lock)
+        {
+            var retryCount = _retryCounts.GetValueOrDefault(itemId, 0);
+
+            if (retryCount < MaxRetryCount)
+            {
+                // 重试
+                _retryCounts[itemId] = retryCount + 1;
+
+                var item = _manager.GetAllItems().FirstOrDefault(i => i.Id == itemId);
+                if (item != null)
+                {
+                    AppLogger.Warn("LoadingTimeoutHandler",
+                        $"Item '{item.Name}' timed out after {elapsed.TotalSeconds}s, retrying ({retryCount + 1}/{MaxRetryCount})...");
+
+                    ItemRetry?.Invoke(this, new LoadingRetryEventArgs
+                    {
+                        ItemId = itemId,
+                        ItemName = item.Name,
+                        RetryCount = retryCount + 1,
+                        MaxRetryCount = MaxRetryCount,
+                        ElapsedTime = elapsed
+                    });
+
+                    // 重新启动该项
+                    _manager.StartItem(itemId, $"第 {retryCount + 1} 次重试...");
+                }
+            }
+            else
+            {
+                // 最终失败
+                _retryCounts.Remove(itemId);
+
+                var item = _manager.GetAllItems().FirstOrDefault(i => i.Id == itemId);
+                if (item != null)
+                {
+                    AppLogger.Error("LoadingTimeoutHandler",
+                        $"Item '{item.Name}' failed after {MaxRetryCount} retries ({elapsed.TotalSeconds}s)");
+
+                    var args = new LoadingTimeoutEventArgs
+                    {
+                        ItemId = itemId,
+                        ItemName = item.Name,
+                        ElapsedTime = elapsed,
+                        RetryCount = MaxRetryCount,
+                        IsFinalFailure = true
+                    };
+
+                    ItemTimeout?.Invoke(this, args);
+                    ItemFailed?.Invoke(this, args);
+
+                    // 标记为失败
+                    _manager.FailItem(itemId,
+                        $"加载超时（超过 {elapsed.TotalSeconds:F0} 秒）",
+                        $"已重试 {MaxRetryCount} 次但仍失败");
+                }
+            }
+        }
+    }
+
+    /// <summary>
+    /// 状态变更事件处理
+    /// </summary>
+    private void OnStateChanged(object? sender, LoadingStateChangedEventArgs e)
+    {
+        // 当项完成或失败时，清除重试计数
+        if (e.CurrentState is LoadingState.Completed or LoadingState.Failed or LoadingState.Cancelled)
+        {
+            lock (_lock)
+            {
+                _retryCounts.Remove(e.Item.Id);
+            }
+        }
+
+        // 当项开始时，如果是第一次开始，初始化重试计数
+        if (e.CurrentState == LoadingState.InProgress &&
+            (e.PreviousState == null || e.PreviousState == LoadingState.Pending))
+        {
+            lock (_lock)
+            {
+                if (!_retryCounts.ContainsKey(e.Item.Id))
+                {
+                    _retryCounts[e.Item.Id] = 0;
+                }
+            }
+        }
+    }
+
+    public void Dispose()
+    {
+        if (_isDisposed) return;
+        _isDisposed = true;
+
+        Stop();
+
+        _checkTimer.Elapsed -= OnCheckTimerElapsed;
+        _checkTimer.Dispose();
+
+        _manager.StateChanged -= OnStateChanged;
+
+        _itemTimeouts.Clear();
+        _retryCounts.Clear();
+    }
+}
+
+/// <summary>
+/// 加载超时事件参数
+/// </summary>
+public class LoadingTimeoutEventArgs : EventArgs
+{
+    public required string ItemId { get; init; }
+    public required string ItemName { get; init; }
+    public required TimeSpan ElapsedTime { get; init; }
+    public int RetryCount { get; init; }
+    public bool IsFinalFailure { get; init; }
+}
+
+/// <summary>
+/// 加载重试事件参数
+/// </summary>
+public class LoadingRetryEventArgs : EventArgs
+{
+    public required string ItemId { get; init; }
+    public required string ItemName { get; init; }
+    public required int RetryCount { get; init; }
+    public required int MaxRetryCount { get; init; }
+    public required TimeSpan ElapsedTime { get; init; }
+}

LanMountainDesktop/Services/PlondsReleaseUpdateService.cs

@@ -0,0 +1,80 @@
+using System;
+using System.Threading;
+using System.Threading.Tasks;
+
+namespace LanMountainDesktop.Services;
+
+/// <summary>
+/// Release-backed PLONDS checker.
+/// It only succeeds when the latest GitHub Release already exposes platform PLONDS assets.
+/// If those assets are not ready yet, callers can fall back to the normal GitHub installer flow.
+/// </summary>
+public sealed class PlondsReleaseUpdateService : IDisposable
+{
+    private readonly GitHubReleaseUpdateService _githubReleaseUpdateService = new("wwiinnddyy", "LanMountainDesktop");
+
+    public Task<UpdateCheckResult> CheckForUpdatesAsync(
+        Version currentVersion,
+        bool includePrerelease,
+        CancellationToken cancellationToken = default)
+    {
+        return CheckForUpdatesCoreAsync(currentVersion, includePrerelease, isForce: false, cancellationToken);
+    }
+
+    public Task<UpdateCheckResult> ForceCheckForUpdatesAsync(
+        Version currentVersion,
+        bool includePrerelease,
+        CancellationToken cancellationToken = default)
+    {
+        return CheckForUpdatesCoreAsync(currentVersion, includePrerelease, isForce: true, cancellationToken);
+    }
+
+    public void Dispose()
+    {
+        _githubReleaseUpdateService.Dispose();
+    }
+
+    private async Task<UpdateCheckResult> CheckForUpdatesCoreAsync(
+        Version currentVersion,
+        bool includePrerelease,
+        bool isForce,
+        CancellationToken cancellationToken)
+    {
+        var releaseResult = isForce
+            ? await _githubReleaseUpdateService.ForceCheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken)
+            : await _githubReleaseUpdateService.CheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken);
+
+        if (!releaseResult.Success)
+        {
+            return releaseResult;
+        }
+
+        if (!isForce && !releaseResult.IsUpdateAvailable)
+        {
+            return releaseResult with { ForceMode = false };
+        }
+
+        if (releaseResult.PlondsPayload is not null)
+        {
+            return releaseResult with { ForceMode = isForce };
+        }
+
+        var latestVersion = string.IsNullOrWhiteSpace(releaseResult.LatestVersionText)
+            ? "-"
+            : releaseResult.LatestVersionText;
+        var message = releaseResult.Release is null
+            ? "GitHub Release data is unavailable for PLONDS."
+            : $"Release {latestVersion} does not expose platform PLONDS assets yet.";
+
+        return new UpdateCheckResult(
+            Success: false,
+            IsUpdateAvailable: releaseResult.IsUpdateAvailable,
+            CurrentVersionText: releaseResult.CurrentVersionText,
+            LatestVersionText: latestVersion,
+            Release: releaseResult.Release,
+            PreferredAsset: releaseResult.PreferredAsset,
+            ErrorMessage: message,
+            ForceMode: isForce,
+            PlondsPayload: null);
+    }
+}

LanMountainDesktop/Services/Settings/SettingsContracts.cs

@@ -356,6 +356,7 @@ public interface IUpdateSettingsService
     void Save(UpdateSettingsState state);
     Task<UpdateCheckResult> CheckForUpdatesAsync(Version currentVersion, bool includePrerelease, CancellationToken cancellationToken = default);
     Task<UpdateCheckResult> ForceCheckForUpdatesAsync(Version currentVersion, bool includePrerelease, CancellationToken cancellationToken = default);
+    Task<PlondsUpdatePayload?> GetPlondsUpdatePayloadAsync(Version currentVersion, bool includePrerelease, bool isForce = false, CancellationToken cancellationToken = default);
     Task<UpdateDownloadResult> DownloadAssetAsync(
         GitHubReleaseAsset asset,
         string destinationFilePath,

LanMountainDesktop/Services/Settings/SettingsDomainServices.cs

@@ -751,7 +751,8 @@ internal sealed class PrivacySettingsService : IPrivacySettingsService
 internal sealed class UpdateSettingsService : IUpdateSettingsService, IDisposable
 {
     private readonly ISettingsService _settingsService;
-    private readonly GitHubReleaseUpdateService _releaseUpdateService = new("wwiinnddyy", "LanMountainDesktop");
+    private readonly GitHubReleaseUpdateService _githubReleaseUpdateService = new("wwiinnddyy", "LanMountainDesktop");
+    private readonly PlondsReleaseUpdateService _plondsReleaseUpdateService = new();
 
     public UpdateSettingsService(ISettingsService settingsService)
     {
@@ -830,7 +831,7 @@ internal sealed class UpdateSettingsService : IUpdateSettingsService, IDisposabl
         bool includePrerelease,
         CancellationToken cancellationToken = default)
     {
-        return _releaseUpdateService.CheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken);
+        return CheckForUpdatesCoreAsync(currentVersion, includePrerelease, isForce: false, cancellationToken);
     }
 
     public Task<UpdateCheckResult> ForceCheckForUpdatesAsync(
@@ -838,7 +839,19 @@ internal sealed class UpdateSettingsService : IUpdateSettingsService, IDisposabl
         bool includePrerelease,
         CancellationToken cancellationToken = default)
     {
-        return _releaseUpdateService.ForceCheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken);
+        return CheckForUpdatesCoreAsync(currentVersion, includePrerelease, isForce: true, cancellationToken);
+    }
+
+    public async Task<PlondsUpdatePayload?> GetPlondsUpdatePayloadAsync(
+        Version currentVersion,
+        bool includePrerelease,
+        bool isForce = false,
+        CancellationToken cancellationToken = default)
+    {
+        var result = isForce
+            ? await _plondsReleaseUpdateService.ForceCheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken)
+            : await _plondsReleaseUpdateService.CheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken);
+        return result.Success ? result.PlondsPayload : null;
     }
 
     public Task<UpdateDownloadResult> DownloadAssetAsync(
@@ -849,7 +862,7 @@ internal sealed class UpdateSettingsService : IUpdateSettingsService, IDisposabl
         IProgress<double>? progress = null,
         CancellationToken cancellationToken = default)
     {
-        return _releaseUpdateService.DownloadAssetAsync(
+        return _githubReleaseUpdateService.DownloadAssetAsync(
             asset,
             destinationFilePath,
             downloadSource,
@@ -866,7 +879,7 @@ internal sealed class UpdateSettingsService : IUpdateSettingsService, IDisposabl
         IProgress<double>? progress = null,
         CancellationToken cancellationToken = default)
     {
-        return _releaseUpdateService.RedownloadAssetAsync(
+        return _githubReleaseUpdateService.RedownloadAssetAsync(
             asset,
             destinationFilePath,
             downloadSource,
@@ -877,7 +890,55 @@ internal sealed class UpdateSettingsService : IUpdateSettingsService, IDisposabl
 
     public void Dispose()
     {
-        _releaseUpdateService.Dispose();
+        _githubReleaseUpdateService.Dispose();
+        _plondsReleaseUpdateService.Dispose();
+    }
+
+    private async Task<UpdateCheckResult> CheckForUpdatesCoreAsync(
+        Version currentVersion,
+        bool includePrerelease,
+        bool isForce,
+        CancellationToken cancellationToken)
+    {
+        var source = UpdateSettingsValues.NormalizeDownloadSource(_settingsService.Load().UpdateDownloadSource);
+        if (string.Equals(source, UpdateSettingsValues.DownloadSourcePlonds, StringComparison.OrdinalIgnoreCase))
+        {
+            var plondsResult = isForce
+                ? await _plondsReleaseUpdateService.ForceCheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken)
+                : await _plondsReleaseUpdateService.CheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken);
+
+            if (plondsResult.Success)
+            {
+                return plondsResult;
+            }
+
+            AppLogger.Warn(
+                "UpdateSettings",
+                $"PLONDS update check failed and will fallback to GitHub. Error: {plondsResult.ErrorMessage}");
+
+            var githubFallbackResult = isForce
+                ? await _githubReleaseUpdateService.ForceCheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken)
+                : await _githubReleaseUpdateService.CheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken);
+
+            if (githubFallbackResult.Success)
+            {
+                AppLogger.Info(
+                    "UpdateSettings",
+                    $"GitHub fallback succeeded after PLONDS failure. Original PLONDS error: {plondsResult.ErrorMessage}");
+            }
+            else
+            {
+                AppLogger.Warn(
+                    "UpdateSettings",
+                    $"GitHub fallback also failed after PLONDS failure. PLONDS error: {plondsResult.ErrorMessage}; GitHub error: {githubFallbackResult.ErrorMessage}");
+            }
+
+            return githubFallbackResult;
+        }
+
+        return isForce
+            ? await _githubReleaseUpdateService.ForceCheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken)
+            : await _githubReleaseUpdateService.CheckForUpdatesAsync(currentVersion, includePrerelease, cancellationToken);
     }
 }
 
@@ -1229,14 +1290,14 @@ internal sealed class ApplicationInfoService : IApplicationInfoService
 
     public string GetAppVersionText()
     {
-        // 优先从环境变量读取（Launcher 传递）
+        // 浼樺厛浠庣幆澧冨彉閲忚鍙栵紙Launcher 浼犻€掞級
         var envVersion = Environment.GetEnvironmentVariable(LanMountainDesktop.Shared.Contracts.Launcher.LauncherIpcConstants.VersionEnvVar);
         if (!string.IsNullOrWhiteSpace(envVersion))
         {
             return envVersion;
         }
 
-        // 回退：从程序集读取
+        // Fallback: read from application assembly.
         var assembly = typeof(App).Assembly;
         var informationalVersion = assembly
             .GetCustomAttribute<AssemblyInformationalVersionAttribute>()?
@@ -1276,14 +1337,14 @@ internal sealed class ApplicationInfoService : IApplicationInfoService
 
     public string GetAppCodenameText()
     {
-        // 优先从环境变量读取（Launcher 传递）
+        // 浼樺厛浠庣幆澧冨彉閲忚鍙栵紙Launcher 浼犻€掞級
         var envCodename = Environment.GetEnvironmentVariable(LanMountainDesktop.Shared.Contracts.Launcher.LauncherIpcConstants.CodenameEnvVar);
         if (!string.IsNullOrWhiteSpace(envCodename))
         {
             return envCodename;
         }
 
-        // 回退：使用默认开发代号
+        // Fallback: use default codename.
         return DefaultCodename;
     }
 

LanMountainDesktop/Services/SingleInstanceService.cs

@@ -9,6 +9,10 @@ namespace LanMountainDesktop.Services;
 
 public sealed class SingleInstanceService : IDisposable
 {
+    private const byte ActivationRequestCode = 0x41; // 'A'
+    private const byte ActivationAckCode = 0x4B; // 'K'
+    private const byte ActivationNackCode = 0x4E; // 'N'
+
     private readonly Mutex _mutex;
     private readonly string _pipeName;
     private readonly CancellationTokenSource _listenCts = new();
@@ -56,13 +60,24 @@ public sealed class SingleInstanceService : IDisposable
             return;
         }
 
+        AppLogger.Info(
+            "SingleInstance",
+            $"Starting activation listener. Pipe='{_pipeName}'; Pid={Environment.ProcessId}; OwnsMutex={_ownsMutex}.");
         _listenTask = Task.Run(() => ListenForActivationAsync(onActivationRequested, _listenCts.Token));
     }
 
     public bool TryNotifyPrimaryInstance(TimeSpan timeout)
+    {
+        return TryNotifyPrimaryInstance(timeout, out _);
+    }
+
+    public bool TryNotifyPrimaryInstance(TimeSpan timeout, out string? failureReason)
     {
         if (_ownsMutex || _disposed)
         {
+            failureReason = _ownsMutex
+                ? "current_instance_is_primary"
+                : "single_instance_service_disposed";
             return false;
         }
 
@@ -71,16 +86,38 @@ public sealed class SingleInstanceService : IDisposable
             using var client = new NamedPipeClientStream(
                 serverName: ".",
                 pipeName: _pipeName,
-                direction: PipeDirection.Out,
+                direction: PipeDirection.InOut,
                 options: PipeOptions.Asynchronous);
 
             client.Connect((int)Math.Max(1, timeout.TotalMilliseconds));
-            client.WriteByte(1);
+            client.WriteByte(ActivationRequestCode);
             client.Flush();
+
+            var ack = client.ReadByte();
+            var acknowledged = ack == ActivationAckCode;
+            if (!acknowledged)
+            {
+                failureReason = ack switch
+                {
+                    ActivationNackCode => "primary_rejected_activation",
+                    -1 => "ack_not_received",
+                    _ => $"unexpected_ack_code_{ack}"
+                };
+                AppLogger.Warn(
+                    "SingleInstance",
+                    $"Primary activation handshake failed. AckCode={ack}; Reason='{failureReason}'; Pipe='{_pipeName}'; Pid={Environment.ProcessId}.");
+                return false;
+            }
+
+            failureReason = null;
+            AppLogger.Info(
+                "SingleInstance",
+                $"Primary activation acknowledged. Pipe='{_pipeName}'; Pid={Environment.ProcessId}.");
             return true;
         }
         catch (Exception ex)
         {
+            failureReason = "primary_activation_handshake_exception";
             AppLogger.Warn("SingleInstance", "Failed to notify the primary instance.", ex);
             return false;
         }
@@ -128,14 +165,40 @@ public sealed class SingleInstanceService : IDisposable
             {
                 using var server = new NamedPipeServerStream(
                     _pipeName,
-                    PipeDirection.In,
+                    PipeDirection.InOut,
                     1,
                     PipeTransmissionMode.Byte,
                     PipeOptions.Asynchronous);
 
                 await server.WaitForConnectionAsync(cancellationToken).ConfigureAwait(false);
-                await server.ReadAsync(new byte[1], cancellationToken).ConfigureAwait(false);
-                onActivationRequested();
+                var buffer = new byte[1];
+                var readBytes = await server.ReadAsync(buffer, cancellationToken).ConfigureAwait(false);
+                var isActivationRequest = readBytes == 1 && buffer[0] == ActivationRequestCode;
+                var ackCode = ActivationAckCode;
+
+                if (!isActivationRequest)
+                {
+                    ackCode = ActivationNackCode;
+                    AppLogger.Warn(
+                        "SingleInstance",
+                        $"Received malformed activation request. ReadBytes={readBytes}; Value={(readBytes == 1 ? buffer[0] : -1)}; Pipe='{_pipeName}'.");
+                }
+                else
+                {
+                    try
+                    {
+                        onActivationRequested();
+                    }
+                    catch (Exception ex)
+                    {
+                        ackCode = ActivationNackCode;
+                        AppLogger.Warn("SingleInstance", "Activation callback failed.", ex);
+                    }
+                }
+
+                var ackBuffer = new[] { ackCode };
+                await server.WriteAsync(ackBuffer, cancellationToken).ConfigureAwait(false);
+                await server.FlushAsync(cancellationToken).ConfigureAwait(false);
             }
             catch (OperationCanceledException)
             {

LanMountainDesktop/Services/UpdateSettingsValues.cs

@@ -11,6 +11,12 @@ public static class UpdateSettingsValues
     public const string ModeDownloadThenConfirm = "download_then_confirm";
     public const string ModeSilentOnExit = "silent_on_exit";
 
+    // NOTE: keep constant name for compatibility with existing call sites.
+    public const string DownloadSourcePlonds = "stcn";
+    public const string DownloadSourcePdc = DownloadSourcePlonds;
+    public const string DownloadSourceStcn = DownloadSourcePlonds;
+    public const string LegacyDownloadSourcePlonds = "pdc";
+    public const string LegacyDownloadSourcePdc = LegacyDownloadSourcePlonds;
     public const string DownloadSourceGitHub = "github";
     public const string DownloadSourceGhProxy = "gh-proxy";
 
@@ -51,9 +57,28 @@ public static class UpdateSettingsValues
 
     public static string NormalizeDownloadSource(string? value)
     {
-        return string.Equals(value, DownloadSourceGhProxy, StringComparison.OrdinalIgnoreCase)
-            ? DownloadSourceGhProxy
-            : DownloadSourceGitHub;
+        if (string.Equals(value, LegacyDownloadSourcePlonds, StringComparison.OrdinalIgnoreCase))
+        {
+            return DownloadSourceStcn;
+        }
+
+        if (string.Equals(value, DownloadSourcePlonds, StringComparison.OrdinalIgnoreCase))
+        {
+            return DownloadSourcePlonds;
+        }
+
+        if (string.Equals(value, DownloadSourceGhProxy, StringComparison.OrdinalIgnoreCase))
+        {
+            return DownloadSourceGhProxy;
+        }
+
+        if (string.Equals(value, DownloadSourceGitHub, StringComparison.OrdinalIgnoreCase))
+        {
+            return DownloadSourceGitHub;
+        }
+
+        // Default to STCN(PLONDS/S3). Runtime will fallback to GitHub if STCN is unavailable.
+        return DownloadSourceStcn;
     }
 
     public static int NormalizeDownloadThreads(int value)

LanMountainDesktop/ViewModels/SettingsViewModels.cs

@@ -1496,7 +1496,7 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
     private string _selectedUpdateChannelValue = UpdateSettingsValues.ChannelStable;
 
     [ObservableProperty]
-    private string _selectedUpdateSourceValue = UpdateSettingsValues.DownloadSourceGitHub;
+    private string _selectedUpdateSourceValue = UpdateSettingsValues.DownloadSourcePdc;
 
     [ObservableProperty]
     private string _selectedUpdateModeValue = UpdateSettingsValues.ModeDownloadThenConfirm;
@@ -1630,6 +1630,9 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
     [ObservableProperty]
     private string _previewChannelText = string.Empty;
 
+    [ObservableProperty]
+    private string _pdcSourceText = string.Empty;
+
     [ObservableProperty]
     private string _gitHubSourceText = string.Empty;
 
@@ -1666,6 +1669,9 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
     public bool IsPreviewChannelSelected =>
         string.Equals(SelectedUpdateChannelValue, UpdateSettingsValues.ChannelPreview, StringComparison.OrdinalIgnoreCase);
 
+    public bool IsPdcSourceSelected =>
+        string.Equals(SelectedUpdateSourceValue, UpdateSettingsValues.DownloadSourcePdc, StringComparison.OrdinalIgnoreCase);
+
     public bool IsGitHubSourceSelected =>
         string.Equals(SelectedUpdateSourceValue, UpdateSettingsValues.DownloadSourceGitHub, StringComparison.OrdinalIgnoreCase);
 
@@ -1858,6 +1864,12 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
         SelectedUpdateChannelValue = UpdateSettingsValues.ChannelPreview;
     }
 
+    [RelayCommand]
+    private void SelectPdcSource()
+    {
+        SelectedUpdateSourceValue = UpdateSettingsValues.DownloadSourcePdc;
+    }
+
     [RelayCommand]
     private void SelectGitHubSource()
     {
@@ -1929,8 +1941,8 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
             DownloadProgressValue = 0;
             DownloadProgressText = L("settings.update.download_progress_idle", "Download progress: -");
             UpdateStatus = isForce
-                ? L("settings.update.status_force_checking", "Force checking GitHub releases...")
-                : L("settings.update.status_checking", "Checking GitHub releases...");
+                ? L("settings.update.status_force_checking", "Force checking update source...")
+                : L("settings.update.status_checking", "Checking update source...");
 
             var result = await _updateWorkflowService.CheckForUpdatesAsync(_currentVersion, isForce);
             _lastCheckResult = result.Success ? result : null;
@@ -1953,7 +1965,7 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
                 return;
             }
 
-            if (result.PreferredAsset is null)
+            if (result.PreferredAsset is null && !UpdateWorkflowService.IsDeltaUpdateAvailable(result))
             {
                 UpdateStatus = isForce
                     ? L("settings.update.status_force_no_asset", "Release found but no compatible installer available.")
@@ -2038,7 +2050,10 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
     [RelayCommand(CanExecute = nameof(CanRedownloadUpdate))]
     private async Task RedownloadUpdateAsync()
     {
-        if (_lastCheckResult is null || !_lastCheckResult.Success || !_lastCheckResult.IsUpdateAvailable || _lastCheckResult.PreferredAsset is null)
+        if (_lastCheckResult is null ||
+            !_lastCheckResult.Success ||
+            !_lastCheckResult.IsUpdateAvailable ||
+            (_lastCheckResult.PreferredAsset is null && !UpdateWorkflowService.IsDeltaUpdateAvailable(_lastCheckResult)))
         {
             UpdateStatus = L("settings.update.status_redownload_no_check", "Please check for updates first before redownloading.");
             return;
@@ -2100,7 +2115,7 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
         DownloadThreadsLabel = L("settings.update.download_threads_label", "Download Threads");
         DownloadThreadsDescription = L("settings.update.download_threads_desc", "Choose how many parallel download threads are used for application updates.");
         ForceCheckUpdateLabel = L("settings.update.force_check_label", "Force Check Update");
-        ForceCheckUpdateDescription = L("settings.update.force_check_desc", "Force check for updates from GitHub, ignoring version comparison.");
+        ForceCheckUpdateDescription = L("settings.update.force_check_desc", "Force check for updates, ignoring version comparison.");
         CheckForUpdatesButtonText = L("settings.update.check_button", "Check for Updates");
         DownloadButtonText = L("settings.update.download_install_button", "Download & Install");
         InstallNowButtonText = L("settings.update.install_now_button", "Install Now");
@@ -2112,6 +2127,7 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
         UpdateTypeLabel = L("settings.update.type_label", "Update Type");
         StableChannelText = L("settings.update.channel_stable", "Stable");
         PreviewChannelText = L("settings.update.channel_preview", "Preview");
+        PdcSourceText = L("settings.update.source_pdc", "PDC");
         GitHubSourceText = L("settings.update.source_github", "GitHub");
         GhProxySourceText = L("settings.update.source_ghproxy", "gh-proxy");
         ManualModeText = L("settings.update.mode_manual", "Manual Update");
@@ -2220,11 +2236,11 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
             UpdateDownloadResult downloadResult;
 
             // Prefer delta update if available (smaller download, faster)
-            if (result.Release is not null && UpdateWorkflowService.IsDeltaUpdateAvailable(result.Release))
+            if (UpdateWorkflowService.IsDeltaUpdateAvailable(result))
             {
                 UpdateStatus = L("settings.update.status_downloading_delta", "Downloading incremental update...");
                 downloadResult = await _updateWorkflowService.DownloadDeltaUpdateAsync(result, progress);
-                if (!downloadResult.Success)
+                if (!downloadResult.Success && result.PlondsPayload is null)
                 {
                     // Delta download failed, fall back to full installer
                     AppLogger.Warn("UpdateSettings", $"Delta update download failed: {downloadResult.ErrorMessage}. Falling back to full installer.");
@@ -2309,6 +2325,9 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
     {
         return UpdateSettingsValues.NormalizeDownloadSource(value) switch
         {
+            UpdateSettingsValues.DownloadSourcePdc => L(
+                "settings.update.source_pdc_desc",
+                "Prefer PDC metadata and distribution endpoints, then automatically fallback to GitHub."),
             UpdateSettingsValues.DownloadSourceGhProxy => L(
                 "settings.update.source_ghproxy_desc",
                 "Use the gh-proxy mirror when downloading GitHub release assets."),
@@ -2360,6 +2379,7 @@ public sealed partial class UpdateSettingsPageViewModel : ViewModelBase
     {
         return
         [
+            new SelectionOption(UpdateSettingsValues.DownloadSourcePdc, PdcSourceText),
             new SelectionOption(UpdateSettingsValues.DownloadSourceGitHub, GitHubSourceText),
             new SelectionOption(UpdateSettingsValues.DownloadSourceGhProxy, GhProxySourceText)
         ];

LanMountainDesktop/Views/DesktopWidgetWindow.axaml.cs

@@ -25,6 +25,23 @@ public partial class DesktopWidgetWindow : Window
         ComponentContainer.Child = componentContent;
     }
 
+    public void UpdateComponentLayout(double width, double height)
+    {
+        ComponentContainer.Width = width;
+        ComponentContainer.Height = height;
+
+        if (ComponentContainer.Child is Control child)
+        {
+            child.Width = width;
+            child.Height = height;
+        }
+
+        if (OperatingSystem.IsWindows() && IsVisible)
+        {
+            Dispatcher.UIThread.Post(UpdateInteractiveRegion, DispatcherPriority.Render);
+        }
+    }
+
     protected override void OnOpened(EventArgs e)
     {
         base.OnOpened(e);

LanMountainDesktop/Views/TransparentOverlayWindow.axaml.cs

@@ -23,6 +23,8 @@ namespace LanMountainDesktop.Views;
 public partial class TransparentOverlayWindow : Window
 {
     private readonly IFusedDesktopLayoutService _layoutService = FusedDesktopLayoutServiceProvider.GetOrCreate();
+    private readonly IWindowBottomMostService _bottomMostService = WindowBottomMostServiceFactory.GetOrCreate();
+    private readonly IRegionPassthroughService _regionPassthroughService = RegionPassthroughServiceFactory.GetOrCreate();
     
     // 滑动状态
     private bool _isSwipeActive;
@@ -77,6 +79,11 @@ public partial class TransparentOverlayWindow : Window
         _weatherDataService = facade.Weather.GetWeatherInfoService();
         _timeZoneService = facade.Region.GetTimeZoneService();
         _settingsFacade = facade;
+
+        if (OperatingSystem.IsWindows())
+        {
+            _bottomMostService.SetupBottomMost(this);
+        }
     }
     
     private readonly ISettingsFacadeService _settingsFacade;
@@ -84,6 +91,7 @@ public partial class TransparentOverlayWindow : Window
     public void SaveLayoutAndHide()
     {
         SaveLayout();
+        _regionPassthroughService.ClearInteractiveRegions(this);
         Hide();
         
         // Remove all components so that next time we open it builds fresh from snapshot
@@ -131,6 +139,11 @@ public partial class TransparentOverlayWindow : Window
         RenderAllComponents();
         
         AppLogger.Info("TransparentOverlay", $"Opened with {_layout.ComponentPlacements.Count} components.");
+
+        if (OperatingSystem.IsWindows())
+        {
+            _bottomMostService.SendToBottom(this);
+        }
     }
     
     /// <summary>
@@ -185,7 +198,25 @@ public partial class TransparentOverlayWindow : Window
     /// </summary>
     private void UpdateInteractiveRegions()
     {
-        // 编辑模式下不再需要底层穿透功能计算，这里留空或移除
+        _interactiveRegions.Clear();
+
+        foreach (var host in _componentHosts.Values)
+        {
+            var left = Canvas.GetLeft(host);
+            var top = Canvas.GetTop(host);
+            var width = host.Width > 0 ? host.Width : host.Bounds.Width;
+            var height = host.Height > 0 ? host.Height : host.Bounds.Height;
+
+            if (width <= 0 || height <= 0)
+            {
+                continue;
+            }
+
+            // 稍微向外扩一圈，确保拖拽和右下角缩放手柄也能命中。
+            _interactiveRegions.Add(new Rect(left - 12, top - 12, width + 24, height + 24));
+        }
+
+        _regionPassthroughService.SetInteractiveRegions(this, _interactiveRegions);
     }
     
     /// <summary>

LanMountainDesktop/app.manifest

@@ -5,13 +5,18 @@
        For more details visit https://learn.microsoft.com/en-us/windows/win32/sbscs/application-manifests -->
   <assemblyIdentity version="1.0.0.0" name="LanMountainDesktop.Desktop"/>
 
+  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
+    <security>
+      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
+        <!-- 明确指定不需要管理员权限，以调用者权限运行 -->
+        <requestedExecutionLevel level="asInvoker" uiAccess="false" />
+      </requestedPrivileges>
+    </security>
+  </trustInfo>
+
   <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
     <application>
-      <!-- A list of the Windows versions that this application has been tested on
-           and is designed to work with. Uncomment the appropriate elements
-           and Windows will automatically select the most compatible environment. -->
-
-      <!-- Windows 10 -->
+      <!-- Windows 10/11 -->
       <supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />
     </application>
   </compatibility>

PenguinLogisticsOnlineNetworkDistributionSystem/Directory.Build.props

@@ -0,0 +1,14 @@
+<Project>
+  <PropertyGroup>
+    <Version>0.1.0</Version>
+    <VersionPrefix>0.1.0</VersionPrefix>
+    <PackageVersion>0.1.0</PackageVersion>
+    <AssemblyVersion>0.1.0.0</AssemblyVersion>
+    <FileVersion>0.1.0.0</FileVersion>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <TreatWarningsAsErrors>false</TreatWarningsAsErrors>
+    <IsPackable>false</IsPackable>
+  </PropertyGroup>
+</Project>

PenguinLogisticsOnlineNetworkDistributionSystem/README.md

@@ -0,0 +1,93 @@
+# PLONDS 骨架
+
+Penguin Logistics Online Network Distribution System（企鹅物流在线网络分发系统），简称 PLONDS，是 LanMountainDesktop 的独立更新分发骨架。
+
+本目录有意与主应用和启动器隔离，仅包含新的分发协议、一个轻量级的只读 API，以及示例 S3 风格的元数据文件。
+
+## 目录结构
+
+```text
+PenguinLogisticsOnlineNetworkDistributionSystem/
+  README.md
+  src/
+    Plonds.Shared/
+    Plonds.Api/
+  sample-data/
+    meta/
+      channels/
+        stable/
+          windows-x64/
+          windows-x86/
+          linux-x64/
+      distributions/
+```
+
+## 项目说明
+
+- `Plonds.Shared` 提供协议常量和数据模型。
+- `Plonds.Core` 负责哈希计算、差异生成、对象仓库生成、清单生成、签名和发布编排。
+- `Plonds.Tool` 是面向 CI 的命令行入口。PowerShell 脚本应保持为围绕此工具的薄包装层。
+- `Plonds.Api` 是一个轻量级只读 API，从类似 S3 布局的本地文件夹中读取元数据。
+
+## 架构设计
+
+PLONDS 有意围绕单一的 C# 实现栈构建，以确保协议和发布行为不会在不同语言之间产生偏差。
+
+```text
+宿主应用
+  -> 检查更新、下载对象、暂存传入的负载
+启动器
+  -> 验证签名、应用文件映射、切换部署、回滚
+
+PLONDS.Api
+  -> 面向客户端的只读元数据投影
+PLONDS.Tool
+  -> CI/发布命令界面
+PLONDS.Core
+  -> 哈希/差异/对象仓库/签名/发布实现
+PLONDS.Shared
+  -> 协议常量和 DTO
+```
+
+## v1 规则
+
+- 核心协议行为应位于 `Plonds.Core` 中，而非 PowerShell 脚本。
+- `scripts/*.ps1` 仅可作为 GitHub Actions 和本地便利的薄包装层保留。
+- 宿主应用保留下载职责。
+- 启动器保留应用、原子切换、快照和回滚职责。
+
+## 存储布局
+
+第一版本保持固定的对象根目录：
+
+```text
+lanmountain/update/
+  repo/sha256/<前缀>/<哈希>
+  meta/channels/<频道>/<平台>/latest.json
+  meta/distributions/<分发ID>.json
+  installers/<平台>/<版本>/...
+```
+
+已规划但 v1 中未启用：
+
+```text
+lanmountain/update/repo-compressed/<算法>/<前缀>/<哈希>
+lanmountain/update/patches/<算法>/<基础哈希>/<目标哈希>
+```
+
+## 公共接口
+
+API 基础路径为 `/api/plonds/v1`。
+
+- `GET /healthz` - 健康检查
+- `GET /api/plonds/v1/metadata` - 获取元数据目录
+- `GET /api/plonds/v1/channels/{channel}/{platform}/latest?currentVersion=...` - 获取指定频道和平台的最新版本
+- `GET /api/plonds/v1/distributions/{distributionId}` - 获取指定分发版本的完整信息
+
+## 本地运行
+
+```powershell
+dotnet run --project src/Plonds.Api
+```
+
+默认情况下，API 从 `sample-data` 读取元数据。

PenguinLogisticsOnlineNetworkDistributionSystem/sample-data/meta/channels/stable/linux-x64/latest.json

@@ -0,0 +1,10 @@
+{
+  "channel": "stable",
+  "platform": "linux-x64",
+  "distributionId": "plonds-0.8.5.2-linux-x64",
+  "version": "0.8.5.2",
+  "publishedAt": "2026-04-20T00:00:00Z",
+  "distributionPath": "meta/distributions/plonds-0.8.5.2-linux-x64.json",
+  "fileMapPath": "meta/distributions/plonds-0.8.5.2-linux-x64.json"
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/sample-data/meta/channels/stable/windows-x64/latest.json

@@ -0,0 +1,10 @@
+{
+  "channel": "stable",
+  "platform": "windows-x64",
+  "distributionId": "plonds-0.8.5.2-windows-x64",
+  "version": "0.8.5.2",
+  "publishedAt": "2026-04-20T00:00:00Z",
+  "distributionPath": "meta/distributions/plonds-0.8.5.2-windows-x64.json",
+  "fileMapPath": "meta/distributions/plonds-0.8.5.2-windows-x64.json"
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/sample-data/meta/channels/stable/windows-x86/latest.json

@@ -0,0 +1,10 @@
+{
+  "channel": "stable",
+  "platform": "windows-x86",
+  "distributionId": "plonds-0.8.5.2-windows-x86",
+  "version": "0.8.5.2",
+  "publishedAt": "2026-04-20T00:00:00Z",
+  "distributionPath": "meta/distributions/plonds-0.8.5.2-windows-x86.json",
+  "fileMapPath": "meta/distributions/plonds-0.8.5.2-windows-x86.json"
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/sample-data/meta/distributions/plonds-0.8.5.2-linux-x64.json

@@ -0,0 +1,66 @@
+{
+  "distributionId": "plonds-0.8.5.2-linux-x64",
+  "version": "0.8.5.2",
+  "channel": "stable",
+  "platform": "linux-x64",
+  "publishedAt": "2026-04-20T00:00:00Z",
+  "components": [
+    {
+      "id": "app",
+      "root": "app-0.8.5.2/",
+      "mode": "file-object",
+      "metadata": {
+        "allowDiffUpdate": "true"
+      },
+      "files": [
+        {
+          "path": "LanMountainDesktop",
+          "op": "replace",
+          "contentHash": "sha256-placeholder-lanmountain-linux",
+          "size": 2048000,
+          "mode": "file-object",
+          "objectKey": "repo/sha256/sha256-placeholder-lanmountain-linux"
+        }
+      ]
+    },
+    {
+      "id": "installers",
+      "root": "installers/linux-x64/",
+      "mode": "file-object",
+      "files": [
+        {
+          "path": "LanMountainDesktop-0.8.5.2-linux-x64.deb",
+          "op": "add",
+          "contentHash": "sha256-placeholder-linux-x64-installer",
+          "size": 3096576,
+          "mode": "file-object",
+          "objectKey": "installers/linux-x64/LanMountainDesktop-0.8.5.2-linux-x64.deb"
+        }
+      ]
+    }
+  ],
+  "installerMirrors": [
+    {
+      "platform": "linux",
+      "arch": "x64",
+      "url": "https://downloads.example.invalid/lanmountain/linux-x64/LanMountainDesktop-0.8.5.2-linux-x64.deb",
+      "fileName": "LanMountainDesktop-0.8.5.2-linux-x64.deb"
+    }
+  ],
+  "capabilities": [
+    "file-object",
+    "compressed-object",
+    "binary-patch"
+  ],
+  "signatures": [
+    {
+      "algorithm": "rsa-sha256",
+      "keyId": "lanmountain-main",
+      "signature": "placeholder-signature"
+    }
+  ],
+  "metadata": {
+    "notes": "sample distribution for PLONDS skeleton"
+  }
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/sample-data/meta/distributions/plonds-0.8.5.2-windows-x64.json

@@ -0,0 +1,66 @@
+{
+  "distributionId": "plonds-0.8.5.2-windows-x64",
+  "version": "0.8.5.2",
+  "channel": "stable",
+  "platform": "windows-x64",
+  "publishedAt": "2026-04-20T00:00:00Z",
+  "components": [
+    {
+      "id": "app",
+      "root": "app-0.8.5.2/",
+      "mode": "file-object",
+      "metadata": {
+        "allowDiffUpdate": "true"
+      },
+      "files": [
+        {
+          "path": "LanMountainDesktop.exe",
+          "op": "replace",
+          "contentHash": "sha256-placeholder-lanmountain-exe",
+          "size": 1024000,
+          "mode": "file-object",
+          "objectKey": "repo/sha256/sha256-placeholder-lanmountain-exe"
+        }
+      ]
+    },
+    {
+      "id": "installers",
+      "root": "installers/windows-x64/",
+      "mode": "file-object",
+      "files": [
+        {
+          "path": "LanMountainDesktop-Setup-0.8.5.2-x64.exe",
+          "op": "add",
+          "contentHash": "sha256-placeholder-windows-x64-installer",
+          "size": 2048000,
+          "mode": "file-object",
+          "objectKey": "installers/windows-x64/LanMountainDesktop-Setup-0.8.5.2-x64.exe"
+        }
+      ]
+    }
+  ],
+  "installerMirrors": [
+    {
+      "platform": "windows",
+      "arch": "x64",
+      "url": "https://downloads.example.invalid/lanmountain/windows-x64/LanMountainDesktop-Setup-0.8.5.2-x64.exe",
+      "fileName": "LanMountainDesktop-Setup-0.8.5.2-x64.exe"
+    }
+  ],
+  "capabilities": [
+    "file-object",
+    "compressed-object",
+    "binary-patch"
+  ],
+  "signatures": [
+    {
+      "algorithm": "rsa-sha256",
+      "keyId": "lanmountain-main",
+      "signature": "placeholder-signature"
+    }
+  ],
+  "metadata": {
+    "notes": "sample distribution for PLONDS skeleton"
+  }
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/sample-data/meta/distributions/plonds-0.8.5.2-windows-x86.json

@@ -0,0 +1,66 @@
+{
+  "distributionId": "plonds-0.8.5.2-windows-x86",
+  "version": "0.8.5.2",
+  "channel": "stable",
+  "platform": "windows-x86",
+  "publishedAt": "2026-04-20T00:00:00Z",
+  "components": [
+    {
+      "id": "app",
+      "root": "app-0.8.5.2/",
+      "mode": "file-object",
+      "metadata": {
+        "allowDiffUpdate": "true"
+      },
+      "files": [
+        {
+          "path": "LanMountainDesktop.exe",
+          "op": "replace",
+          "contentHash": "sha256-placeholder-lanmountain-exe-x86",
+          "size": 983040,
+          "mode": "file-object",
+          "objectKey": "repo/sha256/sha256-placeholder-lanmountain-exe-x86"
+        }
+      ]
+    },
+    {
+      "id": "installers",
+      "root": "installers/windows-x86/",
+      "mode": "file-object",
+      "files": [
+        {
+          "path": "LanMountainDesktop-Setup-0.8.5.2-x86.exe",
+          "op": "add",
+          "contentHash": "sha256-placeholder-windows-x86-installer",
+          "size": 1982464,
+          "mode": "file-object",
+          "objectKey": "installers/windows-x86/LanMountainDesktop-Setup-0.8.5.2-x86.exe"
+        }
+      ]
+    }
+  ],
+  "installerMirrors": [
+    {
+      "platform": "windows",
+      "arch": "x86",
+      "url": "https://downloads.example.invalid/lanmountain/windows-x86/LanMountainDesktop-Setup-0.8.5.2-x86.exe",
+      "fileName": "LanMountainDesktop-Setup-0.8.5.2-x86.exe"
+    }
+  ],
+  "capabilities": [
+    "file-object",
+    "compressed-object",
+    "binary-patch"
+  ],
+  "signatures": [
+    {
+      "algorithm": "rsa-sha256",
+      "keyId": "lanmountain-main",
+      "signature": "placeholder-signature"
+    }
+  ],
+  "metadata": {
+    "notes": "sample distribution for PLONDS skeleton"
+  }
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Api/Configuration/PlondsApiOptions.cs

@@ -0,0 +1,11 @@
+namespace Plonds.Api.Configuration;
+
+public sealed class PlondsApiOptions
+{
+    public string StorageRoot { get; set; } = Plonds.Shared.PlondsConstants.DefaultStorageRoot;
+
+    public string MetaRoot { get; set; } = Plonds.Shared.PlondsConstants.DefaultMetaRoot;
+
+    public string ApiBasePath { get; set; } = Plonds.Shared.PlondsConstants.DefaultApiBasePath;
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Api/Plonds.Api.csproj

@@ -0,0 +1,10 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <RootNamespace>Plonds.Api</RootNamespace>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\Plonds.Shared\Plonds.Shared.csproj" />
+  </ItemGroup>
+</Project>
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Api/Program.cs

@@ -0,0 +1,86 @@
+using Microsoft.Extensions.Options;
+using Plonds.Api.Configuration;
+using Plonds.Api.Services;
+using Plonds.Shared;
+
+var builder = WebApplication.CreateBuilder(args);
+
+builder.Services.Configure<PlondsApiOptions>(builder.Configuration.GetSection("Plonds"));
+builder.Services.AddSingleton(sp =>
+{
+    var options = sp.GetRequiredService<IOptions<PlondsApiOptions>>().Value;
+    return options;
+});
+builder.Services.AddSingleton<IPlondsManifestStore>(sp =>
+{
+    var options = sp.GetRequiredService<PlondsApiOptions>();
+    return new FileSystemPlondsManifestStore(options);
+});
+
+var app = builder.Build();
+
+var apiBasePath = app.Configuration["Plonds:ApiBasePath"];
+if (string.IsNullOrWhiteSpace(apiBasePath))
+{
+    apiBasePath = PlondsConstants.DefaultApiBasePath;
+}
+
+if (!apiBasePath.StartsWith('/'))
+{
+    apiBasePath = "/" + apiBasePath;
+}
+
+app.MapGet("/healthz", () => Results.Ok(new { status = "ok", protocol = PlondsConstants.ProtocolName, version = PlondsConstants.ProtocolVersion }));
+
+app.MapGet($"{apiBasePath}/metadata", async (IPlondsManifestStore store, CancellationToken cancellationToken) =>
+{
+    var catalog = await store.GetCatalogAsync(cancellationToken);
+    return Results.Ok(catalog);
+});
+
+app.MapGet($"{apiBasePath}/channels/{{channel}}/{{platform}}/latest", async (
+    string channel,
+    string platform,
+    string? currentVersion,
+    IPlondsManifestStore store,
+    CancellationToken cancellationToken) =>
+{
+    var latest = await store.GetLatestAsync(channel, platform, cancellationToken);
+    if (latest is null)
+    {
+        return Results.NotFound(new
+        {
+            error = "latest_pointer_not_found",
+            channel,
+            platform
+        });
+    }
+
+    if (!string.IsNullOrWhiteSpace(currentVersion) &&
+        Version.TryParse(currentVersion, out var current) &&
+        Version.TryParse(latest.Version, out var target) &&
+        target <= current)
+    {
+        return Results.NoContent();
+    }
+
+    return Results.Ok(latest);
+});
+
+app.MapGet($"{apiBasePath}/distributions/{{distributionId}}", async (string distributionId, IPlondsManifestStore store, CancellationToken cancellationToken) =>
+{
+    var distribution = await store.GetDistributionAsync(distributionId, cancellationToken);
+    if (distribution is null)
+    {
+        return Results.NotFound(new
+        {
+            error = "distribution_not_found",
+            distributionId
+        });
+    }
+
+    return Results.Ok(distribution);
+});
+
+app.Run();
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Api/Services/FileSystemPlondsManifestStore.cs

@@ -0,0 +1,138 @@
+using System.Text.Json;
+using Plonds.Api.Configuration;
+using Plonds.Shared;
+using Plonds.Shared.Models;
+
+namespace Plonds.Api.Services;
+
+public sealed class FileSystemPlondsManifestStore : IPlondsManifestStore
+{
+    private static readonly JsonSerializerOptions JsonOptions = new(JsonSerializerDefaults.Web)
+    {
+        WriteIndented = true
+    };
+
+    private readonly PlondsApiOptions _options;
+    private readonly string _storageRootFullPath;
+    private readonly string _metaRootFullPath;
+
+    public FileSystemPlondsManifestStore(PlondsApiOptions options)
+    {
+        _options = options;
+        _storageRootFullPath = ResolveRootPath(options.StorageRoot);
+        _metaRootFullPath = Path.Combine(_storageRootFullPath, options.MetaRoot);
+    }
+
+    public Task<PlondsMetadataCatalog> GetCatalogAsync(CancellationToken cancellationToken = default)
+    {
+        _ = cancellationToken;
+
+        var channelsRoot = Path.Combine(_metaRootFullPath, "channels");
+        var latest = new List<PlondsChannelPointer>();
+        if (Directory.Exists(channelsRoot))
+        {
+            foreach (var latestPath in Directory.EnumerateFiles(channelsRoot, "latest.json", SearchOption.AllDirectories))
+            {
+                var pointer = ReadLatestPointer(latestPath);
+                if (pointer is not null)
+                {
+                    latest.Add(pointer);
+                }
+            }
+        }
+
+        var catalog = new PlondsMetadataCatalog(
+            ProtocolName: PlondsConstants.ProtocolName,
+            ProtocolVersion: PlondsConstants.ProtocolVersion,
+            StorageRoot: _storageRootFullPath,
+            MetaRoot: _metaRootFullPath,
+            Latest: latest.OrderBy(x => x.Channel, StringComparer.OrdinalIgnoreCase)
+                .ThenBy(x => x.Platform, StringComparer.OrdinalIgnoreCase)
+                .ToArray(),
+            Metadata: new Dictionary<string, string>
+            {
+                ["apiBasePath"] = PlondsConstants.DefaultApiBasePath
+            });
+
+        return Task.FromResult(catalog);
+    }
+
+    public Task<PlondsChannelPointer?> GetLatestAsync(string channel, string platform, CancellationToken cancellationToken = default)
+    {
+        _ = cancellationToken;
+        return Task.FromResult(ReadLatestPointer(GetLatestPath(channel, platform)));
+    }
+
+    public Task<PlondsDistributionInfo?> GetDistributionAsync(string distributionId, CancellationToken cancellationToken = default)
+    {
+        _ = cancellationToken;
+
+        var path = GetDistributionPath(distributionId);
+        if (!File.Exists(path))
+        {
+            return Task.FromResult<PlondsDistributionInfo?>(null);
+        }
+
+        var json = File.ReadAllText(path);
+        var distribution = JsonSerializer.Deserialize<PlondsDistributionInfo>(json, JsonOptions);
+        return Task.FromResult(distribution);
+    }
+
+    private PlondsChannelPointer? ReadLatestPointer(string path)
+    {
+        if (!File.Exists(path))
+        {
+            return null;
+        }
+
+        var json = File.ReadAllText(path);
+        var pointer = JsonSerializer.Deserialize<PlondsChannelPointer>(json, JsonOptions);
+        return pointer;
+    }
+
+    private string GetLatestPath(string channel, string platform)
+    {
+        return Path.Combine(_metaRootFullPath, "channels", channel, platform, "latest.json");
+    }
+
+    private string GetDistributionPath(string distributionId)
+    {
+        return Path.Combine(_metaRootFullPath, "distributions", $"{distributionId}.json");
+    }
+
+    private static string ResolveRootPath(string root)
+    {
+        if (Path.IsPathRooted(root))
+        {
+            return Path.GetFullPath(root);
+        }
+
+        var candidates = new List<string>();
+
+        AddCandidateChain(candidates, Directory.GetCurrentDirectory(), root);
+        AddCandidateChain(candidates, AppContext.BaseDirectory, root);
+
+        foreach (var candidate in candidates.Distinct(StringComparer.OrdinalIgnoreCase))
+        {
+            if (Directory.Exists(candidate))
+            {
+                return candidate;
+            }
+        }
+
+        return candidates.FirstOrDefault() ?? Path.GetFullPath(Path.Combine(AppContext.BaseDirectory, root));
+    }
+
+    private static void AddCandidateChain(ICollection<string> candidates, string? startDirectory, string relativeRoot)
+    {
+        var current = string.IsNullOrWhiteSpace(startDirectory)
+            ? null
+            : Path.GetFullPath(startDirectory);
+
+        while (!string.IsNullOrWhiteSpace(current))
+        {
+            candidates.Add(Path.GetFullPath(Path.Combine(current, relativeRoot)));
+            current = Directory.GetParent(current)?.FullName;
+        }
+    }
+}

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Api/Services/IPlondsManifestStore.cs

@@ -0,0 +1,13 @@
+using Plonds.Shared.Models;
+
+namespace Plonds.Api.Services;
+
+public interface IPlondsManifestStore
+{
+    Task<PlondsMetadataCatalog> GetCatalogAsync(CancellationToken cancellationToken = default);
+
+    Task<PlondsChannelPointer?> GetLatestAsync(string channel, string platform, CancellationToken cancellationToken = default);
+
+    Task<PlondsDistributionInfo?> GetDistributionAsync(string distributionId, CancellationToken cancellationToken = default);
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Api/appsettings.json

@@ -0,0 +1,8 @@
+{
+  "Plonds": {
+    "StorageRoot": "sample-data",
+    "MetaRoot": "meta",
+    "ApiBasePath": "/api/plonds/v1"
+  }
+}
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Plonds.Core.csproj

@@ -0,0 +1,5 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\Plonds.Shared\Plonds.Shared.csproj" />
+  </ItemGroup>
+</Project>

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/DdssBuildOptions.cs

@@ -0,0 +1,9 @@
+namespace Plonds.Core.Publishing;
+
+public sealed record DdssBuildOptions(
+    string ReleaseTag,
+    string AssetsDirectory,
+    string OutputRoot,
+    string PrivateKeyPath,
+    string Repository,
+    string? S3BaseUrl = null);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/DdssManifestBuilder.cs

@@ -0,0 +1,68 @@
+using Plonds.Core.Security;
+using Plonds.Shared.Models;
+
+namespace Plonds.Core.Publishing;
+
+public sealed class DdssManifestBuilder
+{
+    private readonly RsaFileSigner _signer = new();
+
+    public string Build(DdssBuildOptions options)
+    {
+        ArgumentNullException.ThrowIfNull(options);
+
+        var assetsDirectory = Path.GetFullPath(options.AssetsDirectory);
+        if (!Directory.Exists(assetsDirectory))
+        {
+            throw new DirectoryNotFoundException($"DDSS assets directory not found: {assetsDirectory}");
+        }
+
+        var assetEntries = Directory
+            .EnumerateFiles(assetsDirectory, "*", SearchOption.TopDirectoryOnly)
+            .Where(static path =>
+            {
+                var name = Path.GetFileName(path);
+                return !name.Equals("ddss.json", StringComparison.OrdinalIgnoreCase)
+                       && !name.Equals("ddss.json.sig", StringComparison.OrdinalIgnoreCase);
+            })
+            .OrderBy(static path => Path.GetFileName(path), StringComparer.OrdinalIgnoreCase)
+            .Select(path => BuildAssetEntry(path, options.Repository, options.ReleaseTag, options.S3BaseUrl))
+            .ToArray();
+
+        var manifest = new DdssManifest(
+            FormatVersion: "1.0",
+            ReleaseTag: options.ReleaseTag,
+            GeneratedAt: DateTimeOffset.UtcNow,
+            Assets: assetEntries);
+
+        var outputRoot = Path.GetFullPath(options.OutputRoot);
+        Directory.CreateDirectory(outputRoot);
+        var manifestPath = Path.Combine(outputRoot, "ddss.json");
+        PayloadUtilities.WriteJson(manifestPath, manifest);
+        _signer.SignFile(manifestPath, options.PrivateKeyPath, manifestPath + ".sig");
+        return manifestPath;
+    }
+
+    private static DdssAssetEntry BuildAssetEntry(string assetPath, string repository, string releaseTag, string? s3BaseUrl)
+    {
+        var fileName = Path.GetFileName(assetPath);
+        var mirrors = new List<DdssMirrorEntry>
+        {
+            new("github", $"https://github.com/{repository}/releases/download/{releaseTag}/{Uri.EscapeDataString(fileName)}")
+        };
+
+        if (!string.IsNullOrWhiteSpace(s3BaseUrl))
+        {
+            mirrors.Add(new DdssMirrorEntry(
+                "s3",
+                $"{s3BaseUrl.TrimEnd('/')}/{Uri.EscapeDataString(fileName)}"));
+        }
+
+        return new DdssAssetEntry(
+            AssetId: fileName,
+            FileName: fileName,
+            Sha256: PayloadUtilities.ComputeSha256(assetPath),
+            Size: new FileInfo(assetPath).Length,
+            Mirrors: mirrors);
+    }
+}

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PayloadUtilities.cs

@@ -0,0 +1,235 @@
+using System.IO.Compression;
+using System.Security.Cryptography;
+using System.Text;
+using System.Text.Json;
+
+namespace Plonds.Core.Publishing;
+
+public static class PayloadUtilities
+{
+    public static readonly JsonSerializerOptions JsonOptions = new()
+    {
+        PropertyNamingPolicy = JsonNamingPolicy.CamelCase,
+        WriteIndented = true
+    };
+
+    public static void CreatePayloadZip(string sourceDirectory, string outputZipPath)
+    {
+        var resolvedSourceDirectory = Path.GetFullPath(sourceDirectory);
+        if (!Directory.Exists(resolvedSourceDirectory))
+        {
+            throw new DirectoryNotFoundException($"Payload source directory not found: {resolvedSourceDirectory}");
+        }
+
+        var resolvedOutputZipPath = Path.GetFullPath(outputZipPath);
+        var outputDirectory = Path.GetDirectoryName(resolvedOutputZipPath);
+        if (!string.IsNullOrWhiteSpace(outputDirectory))
+        {
+            Directory.CreateDirectory(outputDirectory);
+        }
+
+        if (File.Exists(resolvedOutputZipPath))
+        {
+            File.Delete(resolvedOutputZipPath);
+        }
+
+        using var archive = ZipFile.Open(resolvedOutputZipPath, ZipArchiveMode.Create);
+        foreach (var filePath in Directory.EnumerateFiles(resolvedSourceDirectory, "*", SearchOption.AllDirectories))
+        {
+            var relativePath = NormalizeRelativePath(Path.GetRelativePath(resolvedSourceDirectory, filePath));
+            if (ShouldIgnore(relativePath))
+            {
+                continue;
+            }
+
+            archive.CreateEntryFromFile(filePath, relativePath, CompressionLevel.Optimal);
+        }
+    }
+
+    internal static void ExtractZip(string zipPath, string destinationDirectory)
+    {
+        var resolvedZipPath = Path.GetFullPath(zipPath);
+        if (!File.Exists(resolvedZipPath))
+        {
+            throw new FileNotFoundException("Payload archive not found.", resolvedZipPath);
+        }
+
+        EnsureCleanDirectory(destinationDirectory);
+        ZipFile.ExtractToDirectory(resolvedZipPath, destinationDirectory, overwriteFiles: true);
+    }
+
+    internal static Dictionary<string, FileFingerprint> ScanDirectory(string? root)
+    {
+        var manifest = new Dictionary<string, FileFingerprint>(StringComparer.OrdinalIgnoreCase);
+        if (string.IsNullOrWhiteSpace(root) || !Directory.Exists(root))
+        {
+            return manifest;
+        }
+
+        var resolvedRoot = Path.GetFullPath(root);
+        foreach (var filePath in Directory.EnumerateFiles(resolvedRoot, "*", SearchOption.AllDirectories))
+        {
+            var relativePath = NormalizeRelativePath(Path.GetRelativePath(resolvedRoot, filePath));
+            if (ShouldIgnore(relativePath))
+            {
+                continue;
+            }
+
+            var fileInfo = new FileInfo(filePath);
+            manifest[relativePath] = new FileFingerprint(
+                relativePath,
+                filePath,
+                ComputeSha256(filePath),
+                fileInfo.Length,
+                ResolveUnixFileMode(filePath));
+        }
+
+        return manifest;
+    }
+
+    internal static string CopyObject(string sourcePath, string objectsRoot, string sha256)
+    {
+        var normalizedSha256 = sha256.Trim().ToLowerInvariant();
+        var prefix = normalizedSha256[..Math.Min(2, normalizedSha256.Length)];
+        var relativePath = NormalizeRelativePath(Path.Combine(prefix, normalizedSha256));
+        var destinationPath = Path.Combine(objectsRoot, prefix, normalizedSha256);
+        Directory.CreateDirectory(Path.GetDirectoryName(destinationPath)!);
+        if (!File.Exists(destinationPath))
+        {
+            File.Copy(sourcePath, destinationPath, overwrite: true);
+        }
+
+        return relativePath;
+    }
+
+    internal static void EnsureCleanDirectory(string path)
+    {
+        var resolvedPath = Path.GetFullPath(path);
+        if (Directory.Exists(resolvedPath))
+        {
+            Directory.Delete(resolvedPath, recursive: true);
+        }
+
+        Directory.CreateDirectory(resolvedPath);
+    }
+
+    internal static string ComputeSha256(string filePath)
+    {
+        using var stream = File.OpenRead(filePath);
+        return Convert.ToHexString(SHA256.HashData(stream)).ToLowerInvariant();
+    }
+
+    internal static void WriteJson<T>(string path, T value)
+    {
+        var directory = Path.GetDirectoryName(Path.GetFullPath(path));
+        if (!string.IsNullOrWhiteSpace(directory))
+        {
+            Directory.CreateDirectory(directory);
+        }
+
+        var json = JsonSerializer.Serialize(value, JsonOptions);
+        File.WriteAllText(path, json, new UTF8Encoding(false));
+    }
+
+    internal static string NormalizeRelativePath(string value)
+    {
+        return value.Replace('\\', '/').TrimStart('/');
+    }
+
+    internal static string ResolveArch(string platform)
+    {
+        if (platform.EndsWith("-x86", StringComparison.OrdinalIgnoreCase))
+        {
+            return "x86";
+        }
+
+        if (platform.EndsWith("-arm64", StringComparison.OrdinalIgnoreCase))
+        {
+            return "arm64";
+        }
+
+        return "x64";
+    }
+
+    internal static bool ShouldIgnore(string relativePath)
+    {
+        var normalized = NormalizeRelativePath(relativePath.Trim());
+        if (string.IsNullOrWhiteSpace(normalized))
+        {
+            return true;
+        }
+
+        return normalized.Equals(".current", StringComparison.OrdinalIgnoreCase)
+               || normalized.Equals(".partial", StringComparison.OrdinalIgnoreCase)
+               || normalized.Equals(".destroy", StringComparison.OrdinalIgnoreCase)
+               || normalized.StartsWith(".current/", StringComparison.OrdinalIgnoreCase)
+               || normalized.StartsWith(".partial/", StringComparison.OrdinalIgnoreCase)
+               || normalized.StartsWith(".destroy/", StringComparison.OrdinalIgnoreCase)
+               || normalized.StartsWith("logs/", StringComparison.OrdinalIgnoreCase)
+               || normalized.StartsWith("cache/", StringComparison.OrdinalIgnoreCase)
+               || normalized.StartsWith("snapshots/", StringComparison.OrdinalIgnoreCase)
+               || normalized.StartsWith("snapshot/", StringComparison.OrdinalIgnoreCase);
+    }
+
+    private static string? ResolveUnixFileMode(string path)
+    {
+        if (OperatingSystem.IsWindows())
+        {
+            return null;
+        }
+
+        try
+        {
+            var mode = File.GetUnixFileMode(path);
+            return Convert.ToString((int)mode, 8);
+        }
+        catch
+        {
+            return InferUnixFileMode(path);
+        }
+    }
+
+    private static string? InferUnixFileMode(string path)
+    {
+        if (!LooksExecutable(path))
+        {
+            return null;
+        }
+
+        return "755";
+    }
+
+    private static bool LooksExecutable(string path)
+    {
+        try
+        {
+            using var stream = File.OpenRead(path);
+            Span<byte> header = stackalloc byte[4];
+            var read = stream.Read(header);
+            if (read >= 4 &&
+                header[0] == 0x7F &&
+                header[1] == (byte)'E' &&
+                header[2] == (byte)'L' &&
+                header[3] == (byte)'F')
+            {
+                return true;
+            }
+
+            if (read >= 2 && header[0] == (byte)'#' && header[1] == (byte)'!')
+            {
+                return true;
+            }
+        }
+        catch
+        {
+            return false;
+        }
+
+        var extension = Path.GetExtension(path);
+        return string.IsNullOrWhiteSpace(extension) &&
+               !OperatingSystem.IsWindows() &&
+               Path.GetFileName(path).Contains("LanMountainDesktop", StringComparison.OrdinalIgnoreCase);
+    }
+
+    internal sealed record FileFingerprint(string RelativePath, string FullPath, string Sha256, long Size, string? UnixFileMode);
+}

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlatformPublishResult.cs

@@ -0,0 +1,13 @@
+namespace Plonds.Core.Publishing;
+
+public sealed record PlatformPublishResult(
+    string Platform,
+    string DistributionId,
+    string CurrentAppDirectory,
+    string? PreviousDirectory,
+    string PreviousVersion,
+    string FileMapPath,
+    string SignaturePath,
+    string DistributionPath,
+    string LatestPath,
+    IReadOnlyList<string> InstallerFiles);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsDeltaBuildOptions.cs

@@ -0,0 +1,14 @@
+namespace Plonds.Core.Publishing;
+
+public sealed record PlondsDeltaBuildOptions(
+    string Platform,
+    string CurrentVersion,
+    string CurrentTag,
+    string CurrentPayloadZip,
+    string OutputRoot,
+    string PrivateKeyPath,
+    string Channel = "stable",
+    string? BaselineVersion = null,
+    string? BaselineTag = null,
+    string? BaselinePayloadZip = null,
+    bool IsFullPayload = false);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsDeltaBuildResult.cs

@@ -0,0 +1,13 @@
+namespace Plonds.Core.Publishing;
+
+public sealed record PlondsDeltaBuildResult(
+    string Platform,
+    string DistributionId,
+    string UpdateArchivePath,
+    string FileMapPath,
+    string FileMapSignaturePath,
+    string SummaryPath,
+    bool IsFullPayload,
+    string? BaselineTag,
+    string? BaselineVersion,
+    string TargetVersion);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsDeltaBuilder.cs

@@ -0,0 +1,228 @@
+using Plonds.Core.Security;
+using Plonds.Shared.Models;
+
+namespace Plonds.Core.Publishing;
+
+public sealed class PlondsDeltaBuilder
+{
+    private readonly RsaFileSigner _signer = new();
+
+    public PlondsDeltaBuildResult Build(PlondsDeltaBuildOptions options)
+    {
+        ArgumentNullException.ThrowIfNull(options);
+
+        var currentPayloadZip = Path.GetFullPath(options.CurrentPayloadZip);
+        if (!File.Exists(currentPayloadZip))
+        {
+            throw new FileNotFoundException("Current payload zip not found.", currentPayloadZip);
+        }
+
+        var baselinePayloadZip = string.IsNullOrWhiteSpace(options.BaselinePayloadZip)
+            ? null
+            : Path.GetFullPath(options.BaselinePayloadZip);
+        if (!string.IsNullOrWhiteSpace(baselinePayloadZip) && !File.Exists(baselinePayloadZip))
+        {
+            throw new FileNotFoundException("Baseline payload zip not found.", baselinePayloadZip);
+        }
+
+        var outputRoot = Path.GetFullPath(options.OutputRoot);
+        var workRoot = Path.Combine(outputRoot, "work", options.Platform);
+        var currentExtractRoot = Path.Combine(workRoot, "current");
+        var baselineExtractRoot = Path.Combine(workRoot, "baseline");
+        var objectsRoot = Path.Combine(workRoot, "objects");
+        var releaseAssetsRoot = Path.Combine(outputRoot, "release-assets");
+        var summaryRoot = Path.Combine(outputRoot, "platform-summaries");
+
+        Directory.CreateDirectory(releaseAssetsRoot);
+        Directory.CreateDirectory(summaryRoot);
+        PayloadUtilities.ExtractZip(currentPayloadZip, currentExtractRoot);
+
+        var useFullPayload = options.IsFullPayload || string.IsNullOrWhiteSpace(baselinePayloadZip);
+        if (useFullPayload)
+        {
+            PayloadUtilities.EnsureCleanDirectory(baselineExtractRoot);
+        }
+        else
+        {
+            PayloadUtilities.ExtractZip(baselinePayloadZip!, baselineExtractRoot);
+        }
+
+        PayloadUtilities.EnsureCleanDirectory(objectsRoot);
+
+        var previousManifest = useFullPayload
+            ? new Dictionary<string, PayloadUtilities.FileFingerprint>(StringComparer.OrdinalIgnoreCase)
+            : PayloadUtilities.ScanDirectory(baselineExtractRoot);
+        var currentManifest = PayloadUtilities.ScanDirectory(currentExtractRoot);
+        var fileEntries = BuildFileEntries(previousManifest, currentManifest, objectsRoot);
+
+        var updateAssetName = $"update-{options.Platform}.zip";
+        var fileMapAssetName = $"plonds-filemap-{options.Platform}.json";
+        var fileMapSignatureAssetName = fileMapAssetName + ".sig";
+        var distributionId = $"plonds-{options.CurrentVersion}-{options.Platform}";
+        var updateArchivePath = Path.Combine(releaseAssetsRoot, updateAssetName);
+        var fileMapPath = Path.Combine(releaseAssetsRoot, fileMapAssetName);
+        var fileMapSignaturePath = Path.Combine(releaseAssetsRoot, fileMapSignatureAssetName);
+
+        PayloadUtilities.CreatePayloadZip(objectsRoot, updateArchivePath);
+
+        var metadata = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase)
+        {
+            ["protocol"] = "PLONDS",
+            ["channel"] = options.Channel,
+            ["releaseTag"] = options.CurrentTag,
+            ["baselineTag"] = options.BaselineTag ?? string.Empty,
+            ["baselineVersion"] = options.BaselineVersion ?? "0.0.0",
+            ["targetVersion"] = options.CurrentVersion,
+            ["isFullPayload"] = useFullPayload ? "true" : "false"
+        };
+
+        var component = new ComponentDocument(
+            Name: "app",
+            Version: options.CurrentVersion,
+            Metadata: new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase)
+            {
+                ["component"] = "app",
+                ["mode"] = "file-object"
+            },
+            Files: fileEntries);
+
+        var fileMap = new FileMapDocument(
+            FormatVersion: "1.0",
+            DistributionId: distributionId,
+            FromVersion: options.BaselineVersion ?? "0.0.0",
+            ToVersion: options.CurrentVersion,
+            Version: options.CurrentVersion,
+            Platform: options.Platform,
+            Arch: PayloadUtilities.ResolveArch(options.Platform),
+            Channel: options.Channel,
+            GeneratedAt: DateTimeOffset.UtcNow,
+            Metadata: metadata,
+            Components: [component],
+            Files: fileEntries);
+
+        PayloadUtilities.WriteJson(fileMapPath, fileMap);
+        _signer.SignFile(fileMapPath, options.PrivateKeyPath, fileMapSignaturePath);
+
+        var summary = new PlondsReleasePlatformEntry(
+            Platform: options.Platform,
+            DistributionId: distributionId,
+            BaselineTag: options.BaselineTag,
+            BaselineVersion: options.BaselineVersion ?? "0.0.0",
+            TargetVersion: options.CurrentVersion,
+            IsFullPayload: useFullPayload,
+            FilesZipAsset: $"files-{options.Platform}.zip",
+            UpdateZipAsset: updateAssetName,
+            FileMapAsset: fileMapAssetName,
+            FileMapSignatureAsset: fileMapSignatureAssetName,
+            Sha256: PayloadUtilities.ComputeSha256(updateArchivePath));
+
+        var summaryPath = Path.Combine(summaryRoot, $"platform-summary-{options.Platform}.json");
+        PayloadUtilities.WriteJson(summaryPath, summary);
+
+        return new PlondsDeltaBuildResult(
+            options.Platform,
+            distributionId,
+            updateArchivePath,
+            fileMapPath,
+            fileMapSignaturePath,
+            summaryPath,
+            useFullPayload,
+            options.BaselineTag,
+            options.BaselineVersion,
+            options.CurrentVersion);
+    }
+
+    private static List<FileEntryDocument> BuildFileEntries(
+        IReadOnlyDictionary<string, PayloadUtilities.FileFingerprint> previousManifest,
+        IReadOnlyDictionary<string, PayloadUtilities.FileFingerprint> currentManifest,
+        string objectsRoot)
+    {
+        var result = new List<FileEntryDocument>();
+
+        foreach (var path in currentManifest.Keys.OrderBy(static x => x, StringComparer.OrdinalIgnoreCase))
+        {
+            var current = currentManifest[path];
+            if (previousManifest.TryGetValue(path, out var previous) &&
+                string.Equals(current.Sha256, previous.Sha256, StringComparison.OrdinalIgnoreCase))
+            {
+                result.Add(new FileEntryDocument(
+                    Path: path,
+                    Action: "reuse",
+                    Sha256: current.Sha256,
+                    Size: current.Size,
+                    ObjectPath: null,
+                    ObjectKey: null,
+                    Metadata: null));
+                continue;
+            }
+
+            var action = previousManifest.ContainsKey(path) ? "replace" : "add";
+            var objectPath = PayloadUtilities.CopyObject(current.FullPath, objectsRoot, current.Sha256);
+            var metadata = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase)
+            {
+                ["mode"] = "file-object"
+            };
+            if (!string.IsNullOrWhiteSpace(current.UnixFileMode))
+            {
+                metadata["unixFileMode"] = current.UnixFileMode!;
+            }
+
+            result.Add(new FileEntryDocument(
+                Path: path,
+                Action: action,
+                Sha256: current.Sha256,
+                Size: current.Size,
+                ObjectPath: objectPath,
+                ObjectKey: objectPath,
+                Metadata: metadata));
+        }
+
+        foreach (var path in previousManifest.Keys.OrderBy(static x => x, StringComparer.OrdinalIgnoreCase))
+        {
+            if (currentManifest.ContainsKey(path))
+            {
+                continue;
+            }
+
+            result.Add(new FileEntryDocument(
+                Path: path,
+                Action: "delete",
+                Sha256: string.Empty,
+                Size: 0,
+                ObjectPath: null,
+                ObjectKey: null,
+                Metadata: null));
+        }
+
+        return result;
+    }
+
+    private sealed record FileMapDocument(
+        string FormatVersion,
+        string DistributionId,
+        string FromVersion,
+        string ToVersion,
+        string Version,
+        string Platform,
+        string Arch,
+        string Channel,
+        DateTimeOffset GeneratedAt,
+        IReadOnlyDictionary<string, string> Metadata,
+        IReadOnlyList<ComponentDocument> Components,
+        IReadOnlyList<FileEntryDocument> Files);
+
+    private sealed record ComponentDocument(
+        string Name,
+        string Version,
+        IReadOnlyDictionary<string, string>? Metadata,
+        IReadOnlyList<FileEntryDocument> Files);
+
+    private sealed record FileEntryDocument(
+        string Path,
+        string Action,
+        string Sha256,
+        long Size,
+        string? ObjectPath,
+        string? ObjectKey,
+        IReadOnlyDictionary<string, string>? Metadata);
+}

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsGenerateOptions.cs

@@ -0,0 +1,23 @@
+namespace Plonds.Core.Publishing;
+
+public sealed record PlondsGenerateOptions(
+    string CurrentVersion,
+    string CurrentDirectory,
+    string Platform,
+    string OutputRoot,
+    string PreviousVersion = "0.0.0",
+    string? PreviousDirectory = null,
+    string Channel = "stable",
+    string? DistributionId = null,
+    string? RepoBaseUrl = null,
+    string? FileMapUrl = null,
+    string? FileMapSignatureUrl = null,
+    string? InstallerDirectory = null,
+    string? InstallerBaseUrl = null,
+    string IncrementalStrategy = "release-payload",
+    string? BaselineVersion = null,
+    string? BaselineRef = null,
+    string? SourceCommit = null,
+    bool IsFullPayloadRelease = false,
+    string? CommitRangeStart = null,
+    string? CommitRangeEnd = null);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsGenerator.cs

@@ -0,0 +1,375 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Text.Json;
+
+namespace Plonds.Core.Publishing;
+
+public sealed class PlondsGenerator
+{
+    private static readonly JsonSerializerOptions JsonOptions = new()
+    {
+        PropertyNamingPolicy = JsonNamingPolicy.CamelCase,
+        WriteIndented = true
+    };
+
+    public PlatformPublishResult Generate(PlondsGenerateOptions options)
+    {
+        ArgumentNullException.ThrowIfNull(options);
+
+        var currentDirectory = Path.GetFullPath(options.CurrentDirectory);
+        if (!Directory.Exists(currentDirectory))
+        {
+            throw new DirectoryNotFoundException($"Current directory not found: {currentDirectory}");
+        }
+
+        var previousDirectory = string.IsNullOrWhiteSpace(options.PreviousDirectory)
+            ? null
+            : Path.GetFullPath(options.PreviousDirectory);
+
+        var distributionId = string.IsNullOrWhiteSpace(options.DistributionId)
+            ? $"plonds-{options.CurrentVersion}-{options.Platform}"
+            : options.DistributionId.Trim();
+
+        var outputRoot = Path.GetFullPath(options.OutputRoot);
+        var repoRoot = Path.Combine(outputRoot, "repo", "sha256");
+        var manifestsRoot = Path.Combine(outputRoot, "manifests", distributionId);
+        var metaDistributionRoot = Path.Combine(outputRoot, "meta", "distributions");
+        var metaChannelRoot = Path.Combine(outputRoot, "meta", "channels", options.Channel, options.Platform);
+        var installerMirrorRoot = Path.Combine(outputRoot, "installers", options.Platform, options.CurrentVersion);
+
+        Directory.CreateDirectory(repoRoot);
+        Directory.CreateDirectory(manifestsRoot);
+        Directory.CreateDirectory(metaDistributionRoot);
+        Directory.CreateDirectory(metaChannelRoot);
+
+        var previousManifest = options.IsFullPayloadRelease
+            ? new Dictionary<string, FileFingerprint>(StringComparer.OrdinalIgnoreCase)
+            : ScanDirectory(previousDirectory);
+        var currentManifest = ScanDirectory(currentDirectory);
+        var fileEntries = BuildFileEntries(previousManifest, currentManifest, repoRoot, options.RepoBaseUrl);
+        var installerMirrors = BuildInstallerMirrors(options.Platform, installerMirrorRoot, options.InstallerDirectory, options.InstallerBaseUrl);
+        var publishedAt = DateTimeOffset.UtcNow;
+        var baselineVersion = string.IsNullOrWhiteSpace(options.BaselineVersion)
+            ? options.PreviousVersion
+            : options.BaselineVersion;
+
+        var fileMap = new FileMapDocument(
+            FormatVersion: "1.0",
+            DistributionId: distributionId,
+            FromVersion: options.PreviousVersion,
+            ToVersion: options.CurrentVersion,
+            Platform: options.Platform,
+            Channel: options.Channel,
+            PublishedAt: publishedAt,
+            Capabilities: ["file-object"],
+            Components:
+            [
+                new ComponentDocument(
+                    Id: "app",
+                    Root: "/",
+                    Mode: "file-object",
+                    Files: fileEntries,
+                    Metadata: new Dictionary<string, string> { ["component"] = "app" })
+            ],
+            Metadata: new Dictionary<string, string>
+            {
+                ["protocol"] = "PLONDS",
+                ["mode"] = "file-object",
+                ["baselineVersion"] = baselineVersion,
+                ["incrementalStrategy"] = options.IncrementalStrategy,
+                ["isFullPayloadRelease"] = options.IsFullPayloadRelease ? "true" : "false",
+                ["sourceCommit"] = options.SourceCommit ?? string.Empty,
+                ["baselineRef"] = options.BaselineRef ?? string.Empty,
+                ["commitRangeStart"] = options.CommitRangeStart ?? string.Empty,
+                ["commitRangeEnd"] = options.CommitRangeEnd ?? string.Empty
+            });
+
+        var distribution = new DistributionDocument(
+            DistributionId: distributionId,
+            Version: options.CurrentVersion,
+            Channel: options.Channel,
+            Platform: options.Platform,
+            PublishedAt: publishedAt,
+            FileMapUrl: options.FileMapUrl,
+            FileMapSignatureUrl: options.FileMapSignatureUrl,
+            Components: fileMap.Components,
+            InstallerMirrors: installerMirrors,
+            Capabilities: ["file-object"],
+            Metadata: new Dictionary<string, string>
+            {
+                ["protocol"] = "PLONDS",
+                ["baselineVersion"] = baselineVersion,
+                ["incrementalStrategy"] = options.IncrementalStrategy,
+                ["isFullPayloadRelease"] = options.IsFullPayloadRelease ? "true" : "false",
+                ["sourceCommit"] = options.SourceCommit ?? string.Empty,
+                ["baselineRef"] = options.BaselineRef ?? string.Empty,
+                ["commitRangeStart"] = options.CommitRangeStart ?? string.Empty,
+                ["commitRangeEnd"] = options.CommitRangeEnd ?? string.Empty
+            });
+
+        var latest = new LatestPointerDocument(
+            DistributionId: distributionId,
+            Version: options.CurrentVersion,
+            Channel: options.Channel,
+            Platform: options.Platform,
+            PublishedAt: publishedAt);
+
+        var fileMapPath = Path.Combine(manifestsRoot, "plonds-filemap.json");
+        var distributionPath = Path.Combine(metaDistributionRoot, distributionId + ".json");
+        var latestPath = Path.Combine(metaChannelRoot, "latest.json");
+
+        WriteJson(fileMapPath, fileMap);
+        WriteJson(distributionPath, distribution);
+        WriteJson(latestPath, latest);
+
+        return new PlatformPublishResult(
+            options.Platform,
+            distributionId,
+            currentDirectory,
+            previousDirectory,
+            options.PreviousVersion,
+            fileMapPath,
+            fileMapPath + ".sig",
+            distributionPath,
+            latestPath,
+            installerMirrors.Select(x => x.FileName ?? string.Empty).Where(x => !string.IsNullOrWhiteSpace(x)).ToArray());
+    }
+
+    private static Dictionary<string, FileFingerprint> ScanDirectory(string? root)
+    {
+        var manifest = new Dictionary<string, FileFingerprint>(StringComparer.OrdinalIgnoreCase);
+        if (string.IsNullOrWhiteSpace(root) || !Directory.Exists(root))
+        {
+            return manifest;
+        }
+
+        var resolvedRoot = Path.GetFullPath(root);
+        foreach (var filePath in Directory.EnumerateFiles(resolvedRoot, "*", SearchOption.AllDirectories))
+        {
+            var relativePath = Path.GetRelativePath(resolvedRoot, filePath).Replace('\\', '/');
+            if (ShouldIgnore(relativePath))
+            {
+                continue;
+            }
+
+            var fileInfo = new FileInfo(filePath);
+            manifest[relativePath] = new FileFingerprint(relativePath, filePath, ComputeSha256(filePath), fileInfo.Length);
+        }
+
+        return manifest;
+    }
+
+    private static List<FileEntryDocument> BuildFileEntries(
+        Dictionary<string, FileFingerprint> previousManifest,
+        Dictionary<string, FileFingerprint> currentManifest,
+        string repoRoot,
+        string? repoBaseUrl)
+    {
+        var entries = new List<FileEntryDocument>();
+
+        foreach (var path in currentManifest.Keys.OrderBy(x => x, StringComparer.OrdinalIgnoreCase))
+        {
+            var current = currentManifest[path];
+            if (previousManifest.TryGetValue(path, out var previous) &&
+                string.Equals(current.Sha256, previous.Sha256, StringComparison.OrdinalIgnoreCase))
+            {
+                entries.Add(new FileEntryDocument(
+                    Path: path,
+                    Action: "reuse",
+                    Sha256: current.Sha256,
+                    Size: current.Size,
+                    Mode: "file-object",
+                    ObjectKey: null,
+                    ObjectUrl: null,
+                    Metadata: null));
+                continue;
+            }
+
+            var action = previousManifest.ContainsKey(path) ? "replace" : "add";
+            var objectKey = CopyContentObject(current.FullPath, repoRoot, current.Sha256);
+            var objectUrl = string.IsNullOrWhiteSpace(repoBaseUrl)
+                ? null
+                : $"{repoBaseUrl.TrimEnd('/')}/{objectKey}";
+
+            entries.Add(new FileEntryDocument(
+                Path: path,
+                Action: action,
+                Sha256: current.Sha256,
+                Size: current.Size,
+                Mode: "file-object",
+                ObjectKey: objectKey,
+                ObjectUrl: objectUrl,
+                Metadata: new Dictionary<string, string> { ["mode"] = "file-object" }));
+        }
+
+        foreach (var path in previousManifest.Keys.OrderBy(x => x, StringComparer.OrdinalIgnoreCase))
+        {
+            if (!currentManifest.ContainsKey(path))
+            {
+                entries.Add(new FileEntryDocument(
+                    Path: path,
+                    Action: "delete",
+                    Sha256: string.Empty,
+                    Size: 0,
+                    Mode: "file-object",
+                    ObjectKey: null,
+                    ObjectUrl: null,
+                    Metadata: null));
+            }
+        }
+
+        return entries;
+    }
+
+    private static List<InstallerMirrorDocument> BuildInstallerMirrors(
+        string platform,
+        string installerMirrorRoot,
+        string? installerSourceDirectory,
+        string? installerBaseUrl)
+    {
+        var result = new List<InstallerMirrorDocument>();
+        if (string.IsNullOrWhiteSpace(installerSourceDirectory) || !Directory.Exists(installerSourceDirectory))
+        {
+            return result;
+        }
+
+        Directory.CreateDirectory(installerMirrorRoot);
+        foreach (var sourceFile in Directory.EnumerateFiles(installerSourceDirectory))
+        {
+            var fileName = Path.GetFileName(sourceFile);
+            var destinationPath = Path.Combine(installerMirrorRoot, fileName);
+            File.Copy(sourceFile, destinationPath, overwrite: true);
+
+            var url = string.IsNullOrWhiteSpace(installerBaseUrl)
+                ? null
+                : $"{installerBaseUrl.TrimEnd('/')}/{Uri.EscapeDataString(fileName)}";
+            result.Add(new InstallerMirrorDocument(
+                Platform: platform,
+                Arch: ResolveArch(platform),
+                Url: url,
+                Name: fileName,
+                FileName: fileName,
+                Sha256: ComputeSha256(destinationPath),
+                Size: new FileInfo(destinationPath).Length));
+        }
+
+        return result;
+    }
+
+    private static string ResolveArch(string platform)
+    {
+        if (platform.EndsWith("-x86", StringComparison.OrdinalIgnoreCase))
+        {
+            return "x86";
+        }
+
+        if (platform.EndsWith("-arm64", StringComparison.OrdinalIgnoreCase))
+        {
+            return "arm64";
+        }
+
+        return "x64";
+    }
+
+    private static bool ShouldIgnore(string relativePath)
+    {
+        var normalized = relativePath.Trim().Replace('\\', '/');
+        if (string.IsNullOrWhiteSpace(normalized))
+        {
+            return true;
+        }
+
+        return normalized.Equals(".current", StringComparison.OrdinalIgnoreCase) ||
+               normalized.Equals(".partial", StringComparison.OrdinalIgnoreCase) ||
+               normalized.Equals(".destroy", StringComparison.OrdinalIgnoreCase) ||
+               normalized.StartsWith(".current/", StringComparison.OrdinalIgnoreCase) ||
+               normalized.StartsWith(".partial/", StringComparison.OrdinalIgnoreCase) ||
+               normalized.StartsWith(".destroy/", StringComparison.OrdinalIgnoreCase);
+    }
+
+    private static string CopyContentObject(string sourcePath, string repoRoot, string sha256)
+    {
+        var prefix = sha256[..Math.Min(2, sha256.Length)];
+        var relativeKey = $"{prefix}/{sha256}";
+        var destinationPath = Path.Combine(repoRoot, prefix, sha256);
+        Directory.CreateDirectory(Path.GetDirectoryName(destinationPath)!);
+        if (!File.Exists(destinationPath))
+        {
+            File.Copy(sourcePath, destinationPath, overwrite: true);
+        }
+
+        return relativeKey.Replace('\\', '/');
+    }
+
+    private static string ComputeSha256(string filePath)
+    {
+        using var stream = File.OpenRead(filePath);
+        return Convert.ToHexString(SHA256.HashData(stream)).ToLowerInvariant();
+    }
+
+    private static void WriteJson<T>(string path, T value)
+    {
+        var json = JsonSerializer.Serialize(value, JsonOptions);
+        File.WriteAllText(path, json, new UTF8Encoding(false));
+    }
+
+    private sealed record FileFingerprint(string RelativePath, string FullPath, string Sha256, long Size);
+
+    private sealed record FileMapDocument(
+        string FormatVersion,
+        string DistributionId,
+        string FromVersion,
+        string ToVersion,
+        string Platform,
+        string Channel,
+        DateTimeOffset PublishedAt,
+        IReadOnlyList<string> Capabilities,
+        IReadOnlyList<ComponentDocument> Components,
+        IReadOnlyDictionary<string, string>? Metadata);
+
+    private sealed record DistributionDocument(
+        string DistributionId,
+        string Version,
+        string Channel,
+        string Platform,
+        DateTimeOffset PublishedAt,
+        string? FileMapUrl,
+        string? FileMapSignatureUrl,
+        IReadOnlyList<ComponentDocument> Components,
+        IReadOnlyList<InstallerMirrorDocument> InstallerMirrors,
+        IReadOnlyList<string> Capabilities,
+        IReadOnlyDictionary<string, string>? Metadata);
+
+    private sealed record LatestPointerDocument(
+        string DistributionId,
+        string Version,
+        string Channel,
+        string Platform,
+        DateTimeOffset PublishedAt);
+
+    private sealed record ComponentDocument(
+        string Id,
+        string Root,
+        string Mode,
+        IReadOnlyList<FileEntryDocument> Files,
+        IReadOnlyDictionary<string, string>? Metadata);
+
+    private sealed record FileEntryDocument(
+        string Path,
+        string Action,
+        string Sha256,
+        long Size,
+        string Mode,
+        string? ObjectKey,
+        string? ObjectUrl,
+        IReadOnlyDictionary<string, string>? Metadata);
+
+    private sealed record InstallerMirrorDocument(
+        string Platform,
+        string Arch,
+        string? Url,
+        string? Name,
+        string? FileName,
+        string? Sha256,
+        long Size);
+}

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsPublishOptions.cs

@@ -0,0 +1,19 @@
+namespace Plonds.Core.Publishing;
+
+public sealed record PlondsPublishOptions(
+    string Version,
+    string AppArtifactsRoot,
+    string InstallerArtifactsRoot,
+    string OutputRoot,
+    string PrivateKeyPath,
+    string Channel = "stable",
+    string? BaselineRoot = null,
+    string? RepoBaseUrl = null,
+    string? InstallerBaseUrl = null,
+    string IncrementalStrategy = "release-payload",
+    string? BaselineVersion = null,
+    string? BaselineRef = null,
+    string? SourceCommit = null,
+    bool IsFullPayloadRelease = false,
+    string? CommitRangeStart = null,
+    string? CommitRangeEnd = null);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsPublisher.cs

@@ -0,0 +1,237 @@
+using System.Text;
+using System.Text.Json;
+using Plonds.Core.Security;
+using Plonds.Shared;
+using Plonds.Shared.Models;
+
+namespace Plonds.Core.Publishing;
+
+public sealed class PlondsPublisher
+{
+    private static readonly PlatformConfig[] SupportedPlatforms =
+    [
+        new("windows-x64", "app-payload-windows-x64", [".exe"], ["x64"]),
+        new("windows-x86", "app-payload-windows-x86", [".exe"], ["x86"]),
+        new("linux-x64", "app-payload-linux-x64", [".deb"], ["linux", "x64"])
+    ];
+
+    private static readonly JsonSerializerOptions JsonOptions = new()
+    {
+        PropertyNamingPolicy = JsonNamingPolicy.CamelCase,
+        WriteIndented = true
+    };
+
+    private readonly PlondsGenerator _generator = new();
+    private readonly RsaFileSigner _signer = new();
+
+    public IReadOnlyList<PlatformPublishResult> Publish(PlondsPublishOptions options)
+    {
+        ArgumentNullException.ThrowIfNull(options);
+
+        var results = new List<PlatformPublishResult>();
+        var releaseAssetsRoot = Path.Combine(Path.GetFullPath(options.OutputRoot), "release-assets");
+        Directory.CreateDirectory(releaseAssetsRoot);
+
+        foreach (var config in SupportedPlatforms)
+        {
+            var artifactRoot = Path.Combine(Path.GetFullPath(options.AppArtifactsRoot), config.ArtifactName);
+            if (!Directory.Exists(artifactRoot))
+            {
+                throw new DirectoryNotFoundException($"App payload artifact root not found for {config.Platform}: {artifactRoot}");
+            }
+
+            var currentAppDirectory = FindCurrentAppDirectory(artifactRoot, options.Version);
+            if (currentAppDirectory is null)
+            {
+                throw new DirectoryNotFoundException($"Unable to locate app payload directory for {config.Platform} under {artifactRoot}");
+            }
+
+            var baselineRoot = string.IsNullOrWhiteSpace(options.BaselineRoot)
+                ? Path.Combine(Path.GetFullPath(options.OutputRoot), "_baselines")
+                : Path.GetFullPath(options.BaselineRoot);
+            var platformBaselineRoot = Path.Combine(baselineRoot, config.Platform);
+            var previousDirectory = Path.Combine(platformBaselineRoot, "current");
+            var previousVersionPath = Path.Combine(platformBaselineRoot, "version.txt");
+            Directory.CreateDirectory(platformBaselineRoot);
+            if (!Directory.Exists(previousDirectory))
+            {
+                Directory.CreateDirectory(previousDirectory);
+            }
+
+            var previousVersion = File.Exists(previousVersionPath)
+                ? File.ReadAllText(previousVersionPath).Trim()
+                : "0.0.0";
+
+            var installerSourceDirectory = PrepareInstallerMirrorInput(
+                config,
+                options.InstallerArtifactsRoot,
+                Path.Combine(platformBaselineRoot, "installers"));
+
+            var distributionId = $"plonds-{options.Version}-{config.Platform}";
+            var repoBaseUrl = options.RepoBaseUrl;
+            var fileMapUrl = repoBaseUrl is null
+                ? null
+                : $"{repoBaseUrl.TrimEnd('/').Replace("/repo/sha256", "/manifests")}/{distributionId}/plonds-filemap.json";
+            var fileMapSignatureUrl = fileMapUrl is null ? null : fileMapUrl + ".sig";
+            var installerBaseUrl = string.IsNullOrWhiteSpace(options.InstallerBaseUrl)
+                ? null
+                : $"{options.InstallerBaseUrl.TrimEnd('/')}/{config.Platform}/{options.Version}";
+
+            var result = _generator.Generate(new PlondsGenerateOptions(
+                CurrentVersion: options.Version,
+                CurrentDirectory: currentAppDirectory,
+                Platform: config.Platform,
+                OutputRoot: options.OutputRoot,
+                PreviousVersion: string.IsNullOrWhiteSpace(options.BaselineVersion) ? previousVersion : options.BaselineVersion,
+                PreviousDirectory: previousDirectory,
+                Channel: options.Channel,
+                DistributionId: distributionId,
+                RepoBaseUrl: repoBaseUrl,
+                FileMapUrl: fileMapUrl,
+                FileMapSignatureUrl: fileMapSignatureUrl,
+                InstallerDirectory: installerSourceDirectory,
+                InstallerBaseUrl: installerBaseUrl,
+                IncrementalStrategy: options.IncrementalStrategy,
+                BaselineVersion: string.IsNullOrWhiteSpace(options.BaselineVersion) ? previousVersion : options.BaselineVersion,
+                BaselineRef: options.BaselineRef,
+                SourceCommit: options.SourceCommit,
+                IsFullPayloadRelease: options.IsFullPayloadRelease,
+                CommitRangeStart: options.CommitRangeStart,
+                CommitRangeEnd: options.CommitRangeEnd));
+
+            _signer.SignFile(result.FileMapPath, options.PrivateKeyPath, result.SignaturePath);
+
+            CopyReleaseAsset(result.FileMapPath, Path.Combine(releaseAssetsRoot, $"plonds-filemap-{config.Platform}.json"));
+            CopyReleaseAsset(result.SignaturePath, Path.Combine(releaseAssetsRoot, $"plonds-filemap-{config.Platform}.json.sig"));
+            CopyReleaseAsset(result.DistributionPath, Path.Combine(releaseAssetsRoot, $"plonds-distribution-{config.Platform}.json"));
+            CopyReleaseAsset(result.LatestPath, Path.Combine(releaseAssetsRoot, $"plonds-latest-{config.Platform}.json"));
+
+            MirrorBaseline(currentAppDirectory, previousDirectory, previousVersionPath, options.Version);
+            results.Add(result);
+        }
+
+        WriteMetadataCatalog(options, results);
+        return results;
+    }
+
+    private static void WriteMetadataCatalog(PlondsPublishOptions options, IReadOnlyList<PlatformPublishResult> results)
+    {
+        var outputRoot = Path.GetFullPath(options.OutputRoot);
+        var metadataRoot = Path.Combine(outputRoot, "meta");
+        Directory.CreateDirectory(metadataRoot);
+
+        var generatedAt = DateTimeOffset.UtcNow;
+        var latestPointers = results
+            .Select(result => new PlondsChannelPointer(
+                Channel: options.Channel,
+                Platform: result.Platform,
+                DistributionId: result.DistributionId,
+                Version: options.Version,
+                PublishedAt: generatedAt,
+                DistributionPath: $"distributions/{result.DistributionId}.json",
+                FileMapPath: $"../manifests/{result.DistributionId}/plonds-filemap.json"))
+            .OrderBy(pointer => pointer.Channel, StringComparer.OrdinalIgnoreCase)
+            .ThenBy(pointer => pointer.Platform, StringComparer.OrdinalIgnoreCase)
+            .ToArray();
+
+        var catalog = new PlondsMetadataCatalog(
+            ProtocolName: PlondsConstants.ProtocolName,
+            ProtocolVersion: PlondsConstants.ProtocolVersion,
+            StorageRoot: outputRoot,
+            MetaRoot: metadataRoot,
+            Latest: latestPointers,
+            Metadata: new Dictionary<string, string>
+            {
+                ["generatedBy"] = "Plonds.Tool",
+                ["channel"] = options.Channel,
+                ["generatedAt"] = generatedAt.ToString("O")
+            });
+
+        var metadataPath = Path.Combine(metadataRoot, "metadata.json");
+        File.WriteAllText(metadataPath, JsonSerializer.Serialize(catalog, JsonOptions), new UTF8Encoding(false));
+    }
+
+    private static void MirrorBaseline(string currentAppDirectory, string previousDirectory, string previousVersionPath, string version)
+    {
+        if (Directory.Exists(previousDirectory))
+        {
+            Directory.Delete(previousDirectory, recursive: true);
+        }
+
+        CopyDirectory(currentAppDirectory, previousDirectory);
+        File.WriteAllText(previousVersionPath, version);
+    }
+
+    private static string? FindCurrentAppDirectory(string artifactRoot, string version)
+    {
+        var preferred = Directory.EnumerateDirectories(artifactRoot, $"app-{version}", SearchOption.AllDirectories).FirstOrDefault();
+        if (preferred is not null)
+        {
+            return preferred;
+        }
+
+        return Directory.EnumerateDirectories(artifactRoot, "app-*", SearchOption.AllDirectories)
+            .OrderBy(x => x, StringComparer.OrdinalIgnoreCase)
+            .FirstOrDefault();
+    }
+
+    private static string PrepareInstallerMirrorInput(PlatformConfig config, string installerArtifactsRoot, string destinationRoot)
+    {
+        var installerFiles = FindInstallerFiles(config, installerArtifactsRoot);
+        if (Directory.Exists(destinationRoot))
+        {
+            Directory.Delete(destinationRoot, recursive: true);
+        }
+        Directory.CreateDirectory(destinationRoot);
+
+        foreach (var file in installerFiles)
+        {
+            File.Copy(file, Path.Combine(destinationRoot, Path.GetFileName(file)), overwrite: true);
+        }
+
+        return destinationRoot;
+    }
+
+    private static List<string> FindInstallerFiles(PlatformConfig config, string installerArtifactsRoot)
+    {
+        var files = Directory.EnumerateFiles(Path.GetFullPath(installerArtifactsRoot), "*", SearchOption.AllDirectories);
+        return files
+            .Where(file => config.InstallerExtensions.Contains(Path.GetExtension(file), StringComparer.OrdinalIgnoreCase))
+            .Where(file =>
+            {
+                var fileName = Path.GetFileName(file);
+                return config.FileNameTokens.All(token => fileName.Contains(token, StringComparison.OrdinalIgnoreCase));
+            })
+            .ToList();
+    }
+
+    private static void CopyReleaseAsset(string sourcePath, string destinationPath)
+    {
+        Directory.CreateDirectory(Path.GetDirectoryName(destinationPath)!);
+        File.Copy(sourcePath, destinationPath, overwrite: true);
+    }
+
+    private static void CopyDirectory(string sourceDir, string destinationDir)
+    {
+        Directory.CreateDirectory(destinationDir);
+        foreach (var directory in Directory.EnumerateDirectories(sourceDir, "*", SearchOption.AllDirectories))
+        {
+            var relativePath = Path.GetRelativePath(sourceDir, directory);
+            Directory.CreateDirectory(Path.Combine(destinationDir, relativePath));
+        }
+
+        foreach (var file in Directory.EnumerateFiles(sourceDir, "*", SearchOption.AllDirectories))
+        {
+            var relativePath = Path.GetRelativePath(sourceDir, file);
+            var destinationPath = Path.Combine(destinationDir, relativePath);
+            Directory.CreateDirectory(Path.GetDirectoryName(destinationPath)!);
+            File.Copy(file, destinationPath, overwrite: true);
+        }
+    }
+
+    private sealed record PlatformConfig(
+        string Platform,
+        string ArtifactName,
+        IReadOnlyList<string> InstallerExtensions,
+        IReadOnlyList<string> FileNameTokens);
+}

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsReleaseIndexBuilder.cs

@@ -0,0 +1,57 @@
+using System.Text.Json;
+using Plonds.Core.Security;
+using Plonds.Shared.Models;
+
+namespace Plonds.Core.Publishing;
+
+public sealed class PlondsReleaseIndexBuilder
+{
+    private readonly RsaFileSigner _signer = new();
+
+    public string Build(PlondsReleaseIndexOptions options)
+    {
+        ArgumentNullException.ThrowIfNull(options);
+
+        var summariesDirectory = Path.GetFullPath(options.PlatformSummariesDirectory);
+        if (!Directory.Exists(summariesDirectory))
+        {
+            throw new DirectoryNotFoundException($"Platform summary directory not found: {summariesDirectory}");
+        }
+
+        var summaries = Directory
+            .EnumerateFiles(summariesDirectory, "platform-summary-*.json", SearchOption.TopDirectoryOnly)
+            .OrderBy(static path => path, StringComparer.OrdinalIgnoreCase)
+            .Select(ReadSummary)
+            .OrderBy(static entry => entry.Platform, StringComparer.OrdinalIgnoreCase)
+            .ToArray();
+
+        var manifest = new PlondsReleaseManifest(
+            FormatVersion: "1.0",
+            ReleaseTag: options.ReleaseTag,
+            Version: options.Version,
+            Channel: options.Channel,
+            GeneratedAt: DateTimeOffset.UtcNow,
+            Platforms: summaries);
+
+        var outputRoot = Path.GetFullPath(options.OutputRoot);
+        var releaseAssetsRoot = Path.Combine(outputRoot, "release-assets");
+        Directory.CreateDirectory(releaseAssetsRoot);
+
+        var manifestPath = Path.Combine(releaseAssetsRoot, "plonds.json");
+        PayloadUtilities.WriteJson(manifestPath, manifest);
+        _signer.SignFile(manifestPath, options.PrivateKeyPath, manifestPath + ".sig");
+        return manifestPath;
+    }
+
+    private static PlondsReleasePlatformEntry ReadSummary(string path)
+    {
+        var json = File.ReadAllText(path);
+        var summary = JsonSerializer.Deserialize<PlondsReleasePlatformEntry>(json, PayloadUtilities.JsonOptions);
+        if (summary is null)
+        {
+            throw new InvalidOperationException($"Unable to deserialize PLONDS platform summary: {path}");
+        }
+
+        return summary;
+    }
+}

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Publishing/PlondsReleaseIndexOptions.cs

@@ -0,0 +1,9 @@
+namespace Plonds.Core.Publishing;
+
+public sealed record PlondsReleaseIndexOptions(
+    string ReleaseTag,
+    string Version,
+    string Channel,
+    string PlatformSummariesDirectory,
+    string OutputRoot,
+    string PrivateKeyPath);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Core/Security/RsaFileSigner.cs

@@ -0,0 +1,38 @@
+using System.Security.Cryptography;
+using System.Text;
+
+namespace Plonds.Core.Security;
+
+public sealed class RsaFileSigner
+{
+    public string SignFile(string filePath, string privateKeyPath, string? outputPath = null)
+    {
+        ArgumentException.ThrowIfNullOrWhiteSpace(filePath);
+        ArgumentException.ThrowIfNullOrWhiteSpace(privateKeyPath);
+
+        if (!File.Exists(filePath))
+        {
+            throw new FileNotFoundException("Manifest file not found.", filePath);
+        }
+
+        if (!File.Exists(privateKeyPath))
+        {
+            throw new FileNotFoundException("Private key PEM file not found.", privateKeyPath);
+        }
+
+        outputPath ??= filePath + ".sig";
+
+        var payload = File.ReadAllBytes(filePath);
+        var privateKeyPem = File.ReadAllText(privateKeyPath, Encoding.ASCII);
+        if (string.IsNullOrWhiteSpace(privateKeyPem))
+        {
+            throw new InvalidOperationException("Private key PEM is empty.");
+        }
+
+        using var rsa = RSA.Create();
+        rsa.ImportFromPem(privateKeyPem);
+        var signature = rsa.SignData(payload, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1);
+        File.WriteAllText(outputPath, Convert.ToBase64String(signature), Encoding.ASCII);
+        return outputPath;
+    }
+}

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/DdssAssetEntry.cs

@@ -0,0 +1,8 @@
+namespace Plonds.Shared.Models;
+
+public sealed record DdssAssetEntry(
+    string AssetId,
+    string FileName,
+    string Sha256,
+    long Size,
+    IReadOnlyList<DdssMirrorEntry> Mirrors);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/DdssManifest.cs

@@ -0,0 +1,7 @@
+namespace Plonds.Shared.Models;
+
+public sealed record DdssManifest(
+    string FormatVersion,
+    string ReleaseTag,
+    DateTimeOffset GeneratedAt,
+    IReadOnlyList<DdssAssetEntry> Assets);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/DdssMirrorEntry.cs

@@ -0,0 +1,5 @@
+namespace Plonds.Shared.Models;
+
+public sealed record DdssMirrorEntry(
+    string Type,
+    string Url);

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/PlondsChannelPointer.cs

@@ -0,0 +1,11 @@
+namespace Plonds.Shared.Models;
+
+public sealed record PlondsChannelPointer(
+    string Channel,
+    string Platform,
+    string DistributionId,
+    string Version,
+    DateTimeOffset PublishedAt,
+    string? DistributionPath = null,
+    string? FileMapPath = null);
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/PlondsComponent.cs

@@ -0,0 +1,9 @@
+namespace Plonds.Shared.Models;
+
+public sealed record PlondsComponent(
+    string Id,
+    string Root,
+    string Mode,
+    IReadOnlyList<PlondsFileEntry> Files,
+    IReadOnlyDictionary<string, string>? Metadata = null);
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/PlondsDistributionInfo.cs

@@ -0,0 +1,14 @@
+namespace Plonds.Shared.Models;
+
+public sealed record PlondsDistributionInfo(
+    string DistributionId,
+    string Version,
+    string Channel,
+    string Platform,
+    DateTimeOffset PublishedAt,
+    IReadOnlyList<PlondsComponent> Components,
+    IReadOnlyList<PlondsMirrorAsset> InstallerMirrors,
+    IReadOnlyList<string> Capabilities,
+    IReadOnlyList<PlondsSignatureDescriptor> Signatures,
+    IReadOnlyDictionary<string, string>? Metadata = null);
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/PlondsFileEntry.cs

@@ -0,0 +1,13 @@
+namespace Plonds.Shared.Models;
+
+public sealed record PlondsFileEntry(
+    string Path,
+    string Op,
+    string ContentHash,
+    long Size,
+    string Mode,
+    string? ObjectKey = null,
+    string? Compression = null,
+    string? PatchBaseHash = null,
+    string? PatchObjectKey = null);
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/PlondsFileMap.cs

@@ -0,0 +1,13 @@
+namespace Plonds.Shared.Models;
+
+public sealed record PlondsFileMap(
+    string FormatVersion,
+    string DistributionId,
+    string SourceVersion,
+    string TargetVersion,
+    string Platform,
+    IReadOnlyList<PlondsComponent> Components,
+    IReadOnlyList<string> Capabilities,
+    IReadOnlyList<PlondsSignatureDescriptor> Signatures,
+    IReadOnlyDictionary<string, string>? Metadata = null);
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/PlondsMetadataCatalog.cs

@@ -0,0 +1,10 @@
+namespace Plonds.Shared.Models;
+
+public sealed record PlondsMetadataCatalog(
+    string ProtocolName,
+    string ProtocolVersion,
+    string StorageRoot,
+    string MetaRoot,
+    IReadOnlyList<PlondsChannelPointer> Latest,
+    IReadOnlyDictionary<string, string>? Metadata = null);
+

PenguinLogisticsOnlineNetworkDistributionSystem/src/Plonds.Shared/Models/PlondsMirrorAsset.cs

@@ -0,0 +1,9 @@
+namespace Plonds.Shared.Models;
+
+public sealed record PlondsMirrorAsset(
+    string Platform,
+    string Arch,
+    string Url,
+    string? FileName = null,
+    string? Sha256 = null,
+    long Size = 0);