初始提交：terminalX 可运行态（M0/M1/M1.5 已真机验证）

- M0: libghostty SSH 终端（渲染/输入/连接）+ 白屏修复(OutputGate) + 会话状态机/自动重连
- M1: tsnet 用户态组网 + SSH-over-tsnet(fd 桥)，shell 级真机验证；R5(Go+gvisor+C+++Swift 同进程) retire
- M1.5: tmux -CC 原生 tab（MVP）
- 结构: packages/(TXCore·TXTransport), apps/TerminalX, vendor/(libghostty-spm/libssh2/mbedtls/tsnet-bridge), artifacts/
- 文档: CLAUDE.md + docs/HANDOFF.md（新会话入口）
- 环境: 认证代理→依赖 vendor 本地化；Go 在 ~/.local/go；仅模拟器/未签名
- 待续: M2 mosh, tmux 多 pane, M4 安全(host key/SE)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

vendor/libghostty-spm/Script/apply-patches.sh

@@ -0,0 +1,106 @@
+#!/bin/zsh
+
+set -euo pipefail
+
+cd "$(dirname "$0")/.."
+
+if [ ! -f .root ]; then
+    echo "[-] malformed project structure"
+    exit 1
+fi
+
+SOURCE_DIR=${1:-}
+PATCH_DIR=${2:-"$(pwd)/Patches/ghostty"}
+
+if [ -z "$SOURCE_DIR" ]; then
+    echo "Usage: $0 <source_dir> [patch_dir]"
+    exit 1
+fi
+
+if [ ! -d "$SOURCE_DIR" ]; then
+    echo "[-] ghostty source directory not found: $SOURCE_DIR"
+    exit 1
+fi
+
+if [ ! -d "$PATCH_DIR" ]; then
+    echo "[+] no patches directory found: $PATCH_DIR"
+    exit 0
+fi
+
+apply_unified_patch() {
+    local patch_file="$1"
+
+    if [ -d "$SOURCE_DIR/.git" ] && command -v git >/dev/null 2>&1; then
+        if git -C "$SOURCE_DIR" apply --check --reverse "$patch_file" >/dev/null 2>&1; then
+            echo "[+] patch already applied: $(basename "$patch_file")"
+            return
+        fi
+
+        if ! git -C "$SOURCE_DIR" apply --check "$patch_file" >/dev/null 2>&1; then
+            echo "[-] failed to validate patch: $patch_file"
+            exit 1
+        fi
+
+        git -C "$SOURCE_DIR" apply "$patch_file"
+        echo "[+] applied patch: $(basename "$patch_file")"
+        return
+    fi
+
+    if patch -p1 -R --dry-run -d "$SOURCE_DIR" <"$patch_file" >/dev/null 2>&1; then
+        echo "[+] patch already applied: $(basename "$patch_file")"
+        return
+    fi
+
+    if ! patch -p1 --dry-run -d "$SOURCE_DIR" <"$patch_file" >/dev/null 2>&1; then
+        echo "[-] failed to validate patch: $patch_file"
+        exit 1
+    fi
+
+    patch -p1 -d "$SOURCE_DIR" <"$patch_file" >/dev/null
+    echo "[+] applied patch: $(basename "$patch_file")"
+}
+
+modern_host_io=false
+if grep -q "ghostty_surface_foreground_pid" "$SOURCE_DIR/include/ghostty.h"; then
+    modern_host_io=true
+fi
+
+host_io_applied=false
+if grep -q "GHOSTTY_SURFACE_IO_BACKEND_HOST_MANAGED" "$SOURCE_DIR/include/ghostty.h"; then
+    host_io_applied=true
+fi
+
+for patch_file in "$PATCH_DIR"/*; do
+    [ -e "$patch_file" ] || continue
+
+    patch_name=$(basename "$patch_file")
+    case "$patch_name" in
+        0002-host-managed-io.patch)
+            [ "$modern_host_io" = false ] || continue
+            if [ "$host_io_applied" = true ]; then
+                echo "[+] patch already applied: $patch_name"
+                continue
+            fi
+            apply_unified_patch "$patch_file"
+            ;;
+        0002-host-managed-io-modern.patch)
+            [ "$modern_host_io" = true ] || continue
+            if [ "$host_io_applied" = true ]; then
+                echo "[+] patch already applied: $patch_name"
+                continue
+            fi
+            apply_unified_patch "$patch_file"
+            ;;
+        *.md) ;;
+        *.patch)
+            apply_unified_patch "$patch_file"
+            ;;
+        *.sh)
+            "$patch_file" "$SOURCE_DIR"
+            ;;
+        *)
+            echo "[-] unsupported patch file: $patch_file"
+            exit 1
+            ;;
+    esac
+done