fix(desktop): allow public world before account login

product-source/hololake-native-desktop/src-tauri/src/direct_local_broker.rs

@@ -30,7 +30,7 @@ use std::os::unix::net::{UnixListener, UnixStream};
 use std::path::{Path, PathBuf};
 use std::sync::{
     atomic::{AtomicBool, AtomicUsize, Ordering},
-    mpsc, Arc,
+    mpsc, Arc, Mutex,
 };
 use std::thread;
 use std::time::Duration;
@@ -48,6 +48,51 @@ pub struct DirectLocalBrokerHandle {
     worker: Option<thread::JoinHandle<()>>,
 }
 
+/// Broker 在账号登录前保持休眠；登录后的状态刷新会按账号隔离根幂等启动。
+/// 这避免为了展示公共五域首页而提前打开任何私人存储目录。
+#[derive(Default)]
+pub struct DirectLocalBrokerState {
+    handle: Mutex<Option<DirectLocalBrokerHandle>>,
+}
+
+impl DirectLocalBrokerState {
+    pub fn ensure_started(&self, app: &AppHandle) -> Result<bool, String> {
+        let mut handle = self
+            .handle
+            .lock()
+            .map_err(|_| "HOLOLAKE_BROKER_STATE_LOCK_FAILED".to_string())?;
+        if handle.is_some() {
+            return Ok(true);
+        }
+        match start(app) {
+            Ok(started) => {
+                *handle = Some(started);
+                Ok(true)
+            }
+            Err(error)
+                if error
+                    .to_string()
+                    .contains("HOLOLAKE_AUTHENTICATED_ACCOUNT_REQUIRED") =>
+            {
+                Ok(false)
+            }
+            Err(error) => Err(error.to_string()),
+        }
+    }
+
+    pub fn active_connection_count(&self) -> usize {
+        self.handle
+            .lock()
+            .ok()
+            .and_then(|handle| {
+                handle
+                    .as_ref()
+                    .map(DirectLocalBrokerHandle::active_connection_count)
+            })
+            .unwrap_or(0)
+    }
+}
+
 impl DirectLocalBrokerHandle {
     pub fn active_connection_count(&self) -> usize {
         self.authenticated_connections.load(Ordering::Acquire)

product-source/hololake-native-desktop/src-tauri/src/home_status.rs

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: AGPL-3.0-or-later
 
-use crate::direct_local_broker::DirectLocalBrokerHandle;
+use crate::direct_local_broker::DirectLocalBrokerState;
 use crate::direct_local_session::{active_session_count_at, direct_session_root};
 use crate::pncc_receipt_projection::{pncc_projection_root, projection_event_count_at};
 use crate::pncc_repository_binding::{mounted_repository_count_at, pncc_repository_mount_root};
@@ -26,8 +26,23 @@ pub struct HoloLakeHomeStatus {
 #[tauri::command]
 pub fn get_hololake_home_status(
     app: AppHandle,
-    broker: State<'_, DirectLocalBrokerHandle>,
+    broker: State<'_, DirectLocalBrokerState>,
 ) -> Result<HoloLakeHomeStatus, String> {
+    let broker_ready = broker.ensure_started(&app)?;
+    if !broker_ready {
+        return Ok(HoloLakeHomeStatus {
+            schema: "hololake.home-status/v1",
+            direct_local_broker_state: "WAITING_FOR_LOGIN",
+            direct_connection_count: 0,
+            resumable_session_count: 0,
+            code_repository_mount_count: 0,
+            pncc_receipt_count: 0,
+            update_state: release_trust_state()?,
+            release_recovery_state: crate::release_update::release_recovery_state(&app)?,
+            automatic_upstream_updates: false,
+            mcp_role: "DISCOVERY_RECOVERY_COMPATIBILITY_ONLY",
+        });
+    }
     let session_root = direct_session_root(&app)?;
     let mount_root = pncc_repository_mount_root(&app)?;
     let projection_root = pncc_projection_root(&app)?;

product-source/hololake-native-desktop/src-tauri/src/lib.rs

@@ -96,7 +96,9 @@ pub fn run() {
                     eprintln!("HoloLake zero-point protocol sync was not completed: {error}");
                 }
             });
-            let broker = direct_local_broker::start(app.handle())?;
+            let broker = direct_local_broker::DirectLocalBrokerState::default();
+            // 公共五域首页必须能在未登录时启动；私人 broker 只在已有账号会话时启动。
+            broker.ensure_started(app.handle())?;
             app.manage(broker);
             release_trust::install_updater_if_provisioned(app.handle())?;
             if let Err(error) = release_update::observe_release_startup(app.handle()) {