@jingyi0605/codingns4dsh 0.1.0

package/data/build/dist/host/features/lan-access-dsh.js

@@ -0,0 +1,45 @@
+import { createLanAccessDshRpcHandler, createNodeLanAccessDshRuntime, FileLanAccessDshLoginStore, LanAccessDshProxy } from '../lan-access-dsh.js';
+/** Host 侧“局域网访问 DSH”模块，只管理一条 DSH Web 监听映射。 */
+export function createLanAccessDshFeature(options = {}) {
+    return {
+        descriptor: {
+            name: 'lanAccessDsh',
+            version: '0.2.0',
+            enabledByDefault: true,
+            dependencies: [],
+            runtime: 'host',
+        },
+        async start(context) {
+            const runtime = options.runtime ?? createNodeLanAccessDshRuntime(context.services.dshWebPort);
+            const proxy = new LanAccessDshProxy(runtime, context.services.dshWebAuthenticatedUrl);
+            const settings = context.services.settings;
+            const loginStore = new FileLanAccessDshLoginStore();
+            const loginConfig = await loginStore.read();
+            proxy.setLoginConfig(loginConfig);
+            context.resources.add(context.services.rpc.register('lanAccessDsh', createLanAccessDshRpcHandler(proxy, settings, loginStore)));
+            if (settings !== undefined) {
+                const autoStart = async (value) => {
+                    if (!value.lanAccessDsh.autoStart)
+                        return;
+                    try {
+                        await proxy.start({ ...toStartInput(value.lanAccessDsh), ...(loginConfig === null ? {} : { login: loginConfig }) });
+                    }
+                    catch (error) {
+                        // 自动启动失败不能阻断 DSH，其它功能仍应正常可用；用户仍可在卡片中手动重试。
+                        console.error('codingns4dsh: 局域网访问 DSH 自动启动失败', error);
+                    }
+                };
+                await autoStart(settings.get());
+            }
+            context.resources.add(() => proxy.close());
+        },
+    };
+}
+function toStartInput(value) {
+    return {
+        listenHost: value.listenHost,
+        listenPort: value.listenPort,
+        ...(value.dshPort > 0 ? { dshPort: value.dshPort } : {}),
+    };
+}
+//# sourceMappingURL=lan-access-dsh.js.map

package/data/build/dist/host/features/terminal-process.d.ts

@@ -0,0 +1,5 @@
+import type { FeatureModule } from '../../shared/contracts/feature.js';
+import type { CodingNsHostServices } from './types.js';
+/** 为后续 Debug 面板提供终端 PTY 启动项和进程实例的 Host RPC。 */
+export declare function createTerminalProcessFeature(): FeatureModule<CodingNsHostServices>;
+//# sourceMappingURL=terminal-process.d.ts.map

package/data/build/dist/host/features/terminal-process.js

@@ -0,0 +1,110 @@
+import { CodingNsRpcError } from '../rpc-table.js';
+/** 为后续 Debug 面板提供终端 PTY 启动项和进程实例的 Host RPC。 */
+export function createTerminalProcessFeature() {
+    return {
+        descriptor: {
+            name: 'terminalProcess',
+            version: '0.1.0',
+            enabledByDefault: true,
+            dependencies: [],
+            runtime: 'host',
+        },
+        start(context) {
+            const service = context.services.terminalProcesses;
+            context.resources.add(context.services.rpc.register('terminalProcess', (action, payload) => {
+                if (service === undefined)
+                    throw new CodingNsRpcError('CODINGNS_TERMINAL_PROCESS_UNAVAILABLE', '终端进程服务未装配');
+                switch (action) {
+                    case 'profile/list': {
+                        const input = optionalWorkspaceId(payload);
+                        return service.listProfiles(input);
+                    }
+                    case 'profile/create':
+                        return service.createProfile(parseProfileInput(payload));
+                    case 'profile/delete': {
+                        const input = objectFields(payload, ['workspaceId', 'profileId']);
+                        return service.deleteProfile(requiredString(input.workspaceId, 'workspaceId'), requiredString(input.profileId, 'profileId'));
+                    }
+                    case 'launch':
+                        return service.launch(parseLaunchRequest(payload));
+                    case 'runtime/list':
+                        return service.listInstances(optionalWorkspaceId(payload));
+                    case 'runtime/get':
+                        return service.getInstance(requiredString(objectFields(payload, ['instanceId']).instanceId, 'instanceId')) ?? null;
+                    case 'runtime/stop':
+                        return service.stop(requiredString(objectFields(payload, ['instanceId']).instanceId, 'instanceId'));
+                    default:
+                        throw new CodingNsRpcError('CODINGNS_RPC_NOT_FOUND', `未知终端进程 RPC: terminalProcess/${action}`);
+                }
+            }));
+        },
+    };
+}
+function parseProfileInput(value) {
+    const input = objectFields(value, ['id', 'workspaceId', 'name', 'cwdRelative', 'command', 'shell', 'runtimeType']);
+    const shell = objectFields(input.shell, ['profileId', 'path', 'args', 'name']);
+    if (!Array.isArray(shell.args) || shell.args.some((item) => typeof item !== 'string'))
+        throw new TypeError('shell.args 无效');
+    if (input.runtimeType !== 'local-pty' && input.runtimeType !== 'tmux' && input.runtimeType !== 'conpty-powershell' && input.runtimeType !== 'conpty-cmd' && input.runtimeType !== 'conpty-git-bash')
+        throw new TypeError('runtimeType 无效');
+    const args = input.args === undefined ? [] : input.args;
+    if (!Array.isArray(args) || args.some((item) => typeof item !== 'string'))
+        throw new TypeError('args 无效');
+    const env = input.env === undefined ? {} : input.env;
+    if (!isRecord(env) || Object.values(env).some((item) => typeof item !== 'string'))
+        throw new TypeError('env 无效');
+    return {
+        id: requiredString(input.id, 'id'),
+        workspaceId: requiredString(input.workspaceId, 'workspaceId'),
+        name: requiredString(input.name, 'name'),
+        cwdRelative: requiredString(input.cwdRelative, 'cwdRelative'),
+        command: requiredString(input.command, 'command'),
+        args,
+        env,
+        shell: {
+            profileId: shell.profileId,
+            path: requiredString(shell.path, 'shell.path'),
+            args: shell.args,
+            name: requiredString(shell.name, 'shell.name'),
+        },
+        runtimeType: input.runtimeType,
+        runtimeMode: 'pty',
+    };
+}
+function parseLaunchRequest(value) {
+    const input = objectFields(value, ['workspaceId', 'profileId', 'cols', 'rows']);
+    return {
+        workspaceId: requiredString(input.workspaceId, 'workspaceId'),
+        profileId: requiredString(input.profileId, 'profileId'),
+        ...(input.dshSessionId === undefined ? {} : { dshSessionId: requiredString(input.dshSessionId, 'dshSessionId') }),
+        ...(input.terminalId === undefined ? {} : { terminalId: requiredString(input.terminalId, 'terminalId') }),
+        cols: requiredInteger(input.cols, 'cols'),
+        rows: requiredInteger(input.rows, 'rows'),
+    };
+}
+function optionalWorkspaceId(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    const input = objectFields(value, ['workspaceId']);
+    return input.workspaceId === undefined ? undefined : requiredString(input.workspaceId, 'workspaceId');
+}
+function objectFields(value, fields) {
+    if (!isRecord(value))
+        throw new TypeError('终端进程 RPC 参数必须是对象');
+    for (const field of fields)
+        if (!(field in value))
+            throw new TypeError(`终端进程 RPC 缺少字段: ${field}`);
+    return value;
+}
+function requiredString(value, field) {
+    if (typeof value !== 'string' || value.trim() === '')
+        throw new TypeError(`${field} 必须是非空字符串`);
+    return value.trim();
+}
+function requiredInteger(value, field) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value))
+        throw new TypeError(`${field} 必须是整数`);
+    return value;
+}
+function isRecord(value) { return typeof value === 'object' && value !== null && !Array.isArray(value); }
+//# sourceMappingURL=terminal-process.js.map

package/data/build/dist/host/features/terminal-status.d.ts

@@ -0,0 +1,18 @@
+import type { FeatureModule } from '../../shared/contracts/feature.js';
+import type { CodingNsTerminalStatus } from '../../shared/contracts/terminal.js';
+import { type DetectedTerminalShell } from '../terminal/shell-detection.js';
+import type { CodingNsHostServices } from './types.js';
+export interface TerminalStatusFeatureOptions {
+    readonly platform?: string;
+    readonly controllerMode?: CodingNsTerminalStatus['controllerMode'];
+    readonly effectiveEnabled?: boolean;
+    readonly detectShells?: () => readonly DetectedTerminalShell[];
+}
+/**
+ * 向设置页报告 Host 的真实平台能力和当前 controller 模式。
+ *
+ * 基线与强化模式都由插件自有 controller 提供 webTerminals；该状态描述的是
+ * 当前进程实际采用的 backend，不能用设置里下次启动的目标值冒充生效状态。
+ */
+export declare function createTerminalStatusFeature(options?: TerminalStatusFeatureOptions): FeatureModule<CodingNsHostServices>;
+//# sourceMappingURL=terminal-status.d.ts.map

package/data/build/dist/host/features/terminal-status.js

@@ -0,0 +1,56 @@
+import { detectTerminalShells, resolveTerminalShell, } from '../terminal/shell-detection.js';
+import { CodingNsRpcError } from '../rpc-table.js';
+/**
+ * 向设置页报告 Host 的真实平台能力和当前 controller 模式。
+ *
+ * 基线与强化模式都由插件自有 controller 提供 webTerminals；该状态描述的是
+ * 当前进程实际采用的 backend，不能用设置里下次启动的目标值冒充生效状态。
+ */
+export function createTerminalStatusFeature(options = {}) {
+    const platform = options.platform ?? process.platform;
+    const controllerMode = options.controllerMode ?? 'baseline';
+    const effectiveEnabled = options.effectiveEnabled ?? controllerMode === 'enhanced';
+    const detectShells = options.detectShells ?? (() => detectTerminalShells({ platform }));
+    return {
+        descriptor: {
+            name: 'terminalStatus',
+            version: '0.1.0',
+            enabledByDefault: true,
+            dependencies: [],
+            runtime: 'host',
+        },
+        start(context) {
+            context.resources.add(context.services.rpc.register('terminal', (action) => {
+                if (action !== 'status') {
+                    throw new CodingNsRpcError('CODINGNS_RPC_NOT_FOUND', `未知 Codingns4DSH RPC: terminal/${action}`);
+                }
+                const shells = detectShells();
+                const requested = context.services.settings?.get().terminalEnhancement.defaultProfile ?? 'system';
+                const available = shells.filter((shell) => shell.available && shell.path !== null);
+                let resolved = null;
+                try {
+                    resolved = resolveTerminalShell(requested, shells, platform);
+                }
+                catch {
+                    // 没有可用 shell 时仍返回诊断快照，让设置页能明确显示空列表。
+                }
+                return {
+                    platform: normalizePlatform(platform),
+                    controllerMode,
+                    effectiveEnabled,
+                    profiles: available.map((shell) => ({
+                        profileId: shell.profileId,
+                        name: shell.displayName,
+                        path: shell.path,
+                    })),
+                    resolvedProfileId: resolved?.resolvedProfileId ?? null,
+                    ...(resolved?.fallbackReason === undefined ? {} : { fallbackReason: resolved.fallbackReason }),
+                };
+            }));
+        },
+    };
+}
+function normalizePlatform(platform) {
+    return platform === 'darwin' || platform === 'linux' || platform === 'win32' ? platform : 'unsupported';
+}
+//# sourceMappingURL=terminal-status.js.map

package/data/build/dist/host/features/types.d.ts

@@ -0,0 +1,41 @@
+import type { CodingNsRpcTable } from '../rpc-table.js';
+import type { SettingsProvider, SettingsScope } from '@deepseek-ai/dsh-settings';
+import type { CodingNsSettings } from '../../shared/contracts/config.js';
+import type { CodingNsNativeSessionBridge } from '../native-session-bridge.js';
+import type { TerminalProcessService } from '../terminal/terminal-process-service.js';
+import type { DebugWorkspaceService } from '../debug.js';
+export interface CodingNsHostEvents {
+    on(name: string, listener: (...args: any[]) => any): unknown;
+}
+/**
+ * Host 侧功能模块可用的服务集合。
+ *
+ * 模块在 start 中通过 context.services 取用；未来接入工作区、终端或进程能力时
+ * 在这里增加字段，模块数量本身不改变这个契约的形状。
+ */
+export interface CodingNsHostServices {
+    readonly rpc: CodingNsRpcTable;
+    /** 当前 DSH 宿主的真实版本；由 Host 入口启动门禁解析并向功能模块传递。 */
+    readonly dshVersion?: string;
+    /** 持久化设置；测试或嵌入式调用未提供时，局域网映射仍可手动启动。 */
+    readonly settings?: SettingsScope<CodingNsSettings>;
+    /** Host 设置提供器，供远程设置 RPC 做版本校验和持久化写入。 */
+    readonly settingsProvider?: SettingsProvider;
+    /** 当前 DSH Web 服务实际监听端口，用于自动定位本机 DSH。 */
+    readonly dshWebPort?: number;
+    /** DSH 官方生成的一次性 Web 认证 URL；只留在 Host 内部完成 Cookie 交换。 */
+    readonly dshWebAuthenticatedUrl?: string;
+    /** DSH 事件总线；CLI 模块用它接入 llm/stream，测试环境可以不提供。 */
+    readonly events?: CodingNsHostEvents;
+    /** DSH 原生会话桥接；不可用时为 undefined，插件不因此阻断启动。 */
+    readonly nativeSessions?: CodingNsNativeSessionBridge;
+    /** 终端启动项和 PTY 进程服务；只由 Host RPC 使用。 */
+    readonly terminalProcesses?: TerminalProcessService;
+    /** Workspace 级调试服务；只使用 Host 解析出的根目录。 */
+    readonly debug?: DebugWorkspaceService;
+    /** Debug 模块启用时注册其专属 Fetch 路由，停用时由模块资源注销。 */
+    readonly registerDebugProxyRoute?: (handler: (request: Request) => Promise<Response>) => () => Promise<void>;
+    /** 由 Host 权威解析 Workspace ID，Client 不可覆盖。 */
+    readonly resolveWorkspaceRoot?: (workspaceId: string) => string | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/data/build/dist/host/features/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/data/build/dist/host/index.d.ts

@@ -0,0 +1,43 @@
+/**
+ * DSH Host 入口。
+ *
+ * Host 侧能力全部以功能模块形式交给 FeatureRegistry 管理：依赖顺序、启停和
+ * 资源释放由注册表负责，设置里的模块开关通过 watch 驱动 reconcile。入口本身
+ * 只负责装配，不承载任何具体业务逻辑，因此新增模块不需要修改这个文件。
+ */
+import type { Context } from '@deepseek-ai/cordis';
+export declare function apply(ctx?: Context): void;
+export { HOST_FEATURES, createAuthFeature, createLanAccessDshFeature, createTerminalStatusFeature, createHostFeatures, createCliAdaptersFeature, createTerminalProcessFeature, } from './features/index.js';
+export type { CodingNsHostServices } from './features/index.js';
+export { CodingNsSettingsSchema, registerCodingNsSettings } from './settings.js';
+export { createCodingNsRpcHandler, createCodingNsSettingsRpcHandler, registerCodingNsRpc } from './rpc.js';
+export { DebugWorkspaceService, NodeDebugPortInspector, type DebugPortCheck, type DebugPortInspector, type DebugPortProcess, type DebugProxyBinding, } from './debug.js';
+export { CodingNsRpcError, CodingNsRpcTable, type CodingNsRpcHandler, type CodingNsRpcTarget, } from './rpc-table.js';
+export { CodingNsAuthSession } from './auth-session.js';
+export { createCodingNsNativeSessionBridge, type CodingNsNativeSessionBridge, type CodingNsNativeSessionController, type CodingNsNativeSessionStore, type CodingNsNativeWorkspaceController, type CodingNsNativeRequestContext, } from './native-session-bridge.js';
+export { CommandCodeDriver } from './cli-adapters/command-code-driver.js';
+export { CommandCodeSubscriptionService, readCommandCodeApiKey } from './cli-adapters/command-code-subscription.js';
+export { ProviderSubscriptionService, CodexSubscriptionService, ClaudeCodeSubscriptionService, Sub2ApiUsageService, OpenCodeSubscriptionService, type Sub2ApiSource, type Sub2ApiUsageOptions, } from './cli-adapters/provider-subscription.js';
+export { ClaudeCodeDriver } from './cli-adapters/claude-driver.js';
+export { KimiCliDriver } from './cli-adapters/kimi-driver.js';
+export { GeminiCliDriver } from './cli-adapters/gemini-driver.js';
+export { PiAgentDriver } from './cli-adapters/pi-driver.js';
+export { CodexAppServerDriver } from './cli-adapters/codex-driver.js';
+export { OpenCodeDriver } from './cli-adapters/opencode-driver.js';
+export { GrokBuildDriver } from './cli-adapters/grok-driver.js';
+export { StandardStreamDriver } from './cli-adapters/standard-stream-driver.js';
+export { JsonRpcProcess } from './cli-adapters/json-rpc-process.js';
+export { HttpSseClient } from './cli-adapters/http-sse-client.js';
+export { CodingNsCliAdapterRegistry } from './cli-adapters/registry.js';
+export { CodingNsCliSessionStore, type CodingNsCliSessionPersistence, type CodingNsCliSessionPatch, type CodingNsCliProviderStatePatch, type CodingNsCliSessionStoreOptions, } from './cli-adapters/session-store.js';
+export type { CodingNsCliDriver, CodingNsCliSessionProbeInput, CodingNsCliSessionProbeResult, CodingNsCliSessionProbeState, } from './cli-adapters/driver.js';
+export { CODINGNS_CONTROL_API_PATHS, CodingNsControlApiError, HttpCodingNsControlApiClient, type CodingNsControlApiClient, type CodingNsControlClient, type HttpCodingNsControlApiClientOptions, } from './control-api-client.js';
+export { InMemoryCodingNsCredentialStore, FileCodingNsCredentialStore, InMemoryDshDeviceCredentialStore, FileDshDeviceCredentialStore, type CodingNsCredentialStore, type HostCredentialRecord, type DshDeviceCredentialStore, } from './credential-store.js';
+export { startDshHostDeviceRuntime, type DshHostDeviceRuntime, type DshHostDeviceRuntimeOptions, } from './dsh-device-runtime.js';
+export { createDshRpcGatewayFeature } from './dsh-gateway-feature.js';
+export { createLocalDshWebRuntimeProvider, createRemoteWebRuntimeFeature, type DshWebAsset, type DshWebBoot, type DshWebRuntimeProvider, type DshWebSession, type DshWebSocketLike, type LocalDshWebRuntimeProviderOptions, type RemoteWebRuntimeFeatureOptions, } from './remote-web-runtime.js';
+export type { LoginByEmailResponse, RefreshTokenRequest, RefreshTokenResponse, } from './control-api-client.js';
+export { LanAccessDshError, LanAccessDshProxy, FileLanAccessDshLoginStore, InMemoryLanAccessDshLoginStore, createLanAccessDshRpcHandler, createNodeLanAccessDshRuntime, normalizeLanAccessDshConfig, openLoginProtectionSession, verifyLoginProtectionSession, type LanAccessDshRuntime, type LanAccessDshStream, type LanAccessDshLoginRecord, type LanAccessDshLoginStore, } from './lan-access-dsh.js';
+export { CODINGNS_TUNNEL_DATA_CHANNEL_LABEL, FileHostDtlsIdentityStore, createRegisteredHostSignalingSocket, createWeriftPeerConnectionFactory, ensureHostDtlsIdentity, formatHostDtlsFingerprint, generateHostDtlsIdentity, startHostRelayRuntime, type HostDtlsIdentityMaterial, type HostDtlsIdentityStore, type HostRelayRuntime, type HostRelayRuntimeOptions, type HostRelaySession, type HostSignalingSocket, } from './relay-tunnel-runtime.js';
+export * from './terminal/index.js';
+//# sourceMappingURL=index.d.ts.map

package/data/build/dist/host/index.js

@@ -0,0 +1,135 @@
+import { FeatureRegistry } from '../features/registry.js';
+import { captureRestartFeatureStates, enabledFeatureNames } from '../shared/contracts/config.js';
+import { HOST_FEATURES, createHostFeatures } from './features/index.js';
+import { registerCodingNsRpc } from './rpc.js';
+import { CodingNsRpcTable } from './rpc-table.js';
+import { registerCodingNsSettings } from './settings.js';
+import { createCodingNsNativeSessionBridge } from './native-session-bridge.js';
+import { installTerminalController } from './terminal/startup.js';
+import { DebugWorkspaceService } from './debug.js';
+import { detectRuntimeDshVersion, DSH_VERSION_INJECTION_NAME } from './dsh-runtime-version.js';
+export function apply(ctx) {
+    if (ctx === undefined)
+        return;
+    const dshVersion = detectRuntimeDshVersion();
+    console.error('codingns4dsh: host apply entered');
+    ctx.inject(['settings', 'connection', 'webServer'], async (hostCtx) => {
+        console.error('codingns4dsh: host inject ready', {
+            hasConnection: hostCtx.connection !== undefined,
+        });
+        const webServerPort = hostCtx.webServer.port;
+        // LAN 入口和中继 Web 页面可能使用非 loopback URL，但它们都已经经过
+        // DSH Host 的认证边界并回到本机 Host。通过启动页注入 transport 所有权，
+        // 让 DSH 原生 ui-settings 保持 host 模式，而不是错误降级为 memory 模式。
+        const indexInjectionEvents = hostCtx;
+        indexInjectionEvents.on('webserver/index-inject', (table) => {
+            table.push({ kind: 'global', name: '__DSH_TRANSPORT__', value: { ownsHost: true } });
+            table.push({ kind: 'global', name: DSH_VERSION_INJECTION_NAME, value: dshVersion });
+        });
+        const settings = registerCodingNsSettings(hostCtx);
+        // controller 必须在功能模块和浏览器 Client 开始消费状态前完成装配。
+        // 工厂在本次启动只读取一次开关，设置 watcher 不会热切同名 service。
+        const terminal = await installTerminalController(hostCtx, settings, hostCtx.settings, {
+            resolveWorkspaceRoot: (workspaceId) => resolveWorkspaceRoot(hostCtx, workspaceId),
+        });
+        const services = {
+            rpc: new CodingNsRpcTable(),
+            dshVersion,
+            settings,
+            settingsProvider: hostCtx.settings,
+            dshWebPort: webServerPort,
+            dshWebAuthenticatedUrl: hostCtx.connection.authenticatedUrl(`http://127.0.0.1:${String(webServerPort)}`),
+            events: { on: hostCtx.on.bind(hostCtx) },
+            nativeSessions: createCodingNsNativeSessionBridge(hostCtx),
+            terminalProcesses: terminal.processService,
+            resolveWorkspaceRoot: (workspaceId) => resolveWorkspaceRoot(hostCtx, workspaceId),
+            registerDebugProxyRoute: (handler) => hostCtx.connection.fetch.register({
+                path: '/api/codingns/debug-proxy',
+                methods: ['GET', 'HEAD', 'POST'],
+                requestBody: 'streaming',
+                fetch: handler,
+            }),
+        };
+        const debug = new DebugWorkspaceService({
+            resolveWorkspaceRoot: (workspaceId) => resolveWorkspaceRoot(hostCtx, workspaceId),
+            terminalProcesses: terminal.processService,
+        });
+        const servicesWithDebug = { ...services, debug };
+        const registry = new FeatureRegistry(servicesWithDebug);
+        registry.registerMany(createHostFeatures({
+            terminalStatus: {
+                controllerMode: terminal.mode,
+                effectiveEnabled: terminal.mode === 'enhanced',
+            },
+        }));
+        registry.validate();
+        const restartStates = captureRestartFeatureStates(registry.descriptors(), settings.get(), dshVersion);
+        try {
+            registerCodingNsRpc(hostCtx, services.rpc, services.settingsProvider);
+            console.error('codingns4dsh: host RPC registration requested');
+        }
+        catch (error) {
+            console.error('codingns4dsh: host RPC registration failed', error);
+            throw error;
+        }
+        hostCtx.effect(() => {
+            const sync = () => {
+                void registry
+                    .reconcile(enabledFeatureNames(registry.descriptors(), settings.get(), restartStates, dshVersion))
+                    .catch((error) => {
+                    console.error('codingns4dsh: 功能模块状态同步失败', error);
+                });
+            };
+            sync();
+            return settings.watch(sync);
+        }, 'codingns4dsh: 功能模块启停同步');
+    });
+}
+function resolveWorkspaceRoot(ctx, workspaceId) {
+    try {
+        const registry = ctx.get('workspaceRegistry');
+        const entry = registry?.list?.().find((candidate) => candidate.id === workspaceId);
+        if (entry === undefined)
+            return null;
+        for (const key of ['rootPath', 'path', 'cwd', 'directory']) {
+            const value = entry[key];
+            if (typeof value === 'string' && value.trim() !== '')
+                return value;
+        }
+    }
+    catch {
+        // Workspace Registry 还未装配时由启动服务返回可读的不可用错误。
+    }
+    return null;
+}
+export { HOST_FEATURES, createAuthFeature, createLanAccessDshFeature, createTerminalStatusFeature, createHostFeatures, createCliAdaptersFeature, createTerminalProcessFeature, } from './features/index.js';
+export { CodingNsSettingsSchema, registerCodingNsSettings } from './settings.js';
+export { createCodingNsRpcHandler, createCodingNsSettingsRpcHandler, registerCodingNsRpc } from './rpc.js';
+export { DebugWorkspaceService, NodeDebugPortInspector, } from './debug.js';
+export { CodingNsRpcError, CodingNsRpcTable, } from './rpc-table.js';
+export { CodingNsAuthSession } from './auth-session.js';
+export { createCodingNsNativeSessionBridge, } from './native-session-bridge.js';
+export { CommandCodeDriver } from './cli-adapters/command-code-driver.js';
+export { CommandCodeSubscriptionService, readCommandCodeApiKey } from './cli-adapters/command-code-subscription.js';
+export { ProviderSubscriptionService, CodexSubscriptionService, ClaudeCodeSubscriptionService, Sub2ApiUsageService, OpenCodeSubscriptionService, } from './cli-adapters/provider-subscription.js';
+export { ClaudeCodeDriver } from './cli-adapters/claude-driver.js';
+export { KimiCliDriver } from './cli-adapters/kimi-driver.js';
+export { GeminiCliDriver } from './cli-adapters/gemini-driver.js';
+export { PiAgentDriver } from './cli-adapters/pi-driver.js';
+export { CodexAppServerDriver } from './cli-adapters/codex-driver.js';
+export { OpenCodeDriver } from './cli-adapters/opencode-driver.js';
+export { GrokBuildDriver } from './cli-adapters/grok-driver.js';
+export { StandardStreamDriver } from './cli-adapters/standard-stream-driver.js';
+export { JsonRpcProcess } from './cli-adapters/json-rpc-process.js';
+export { HttpSseClient } from './cli-adapters/http-sse-client.js';
+export { CodingNsCliAdapterRegistry } from './cli-adapters/registry.js';
+export { CodingNsCliSessionStore, } from './cli-adapters/session-store.js';
+export { CODINGNS_CONTROL_API_PATHS, CodingNsControlApiError, HttpCodingNsControlApiClient, } from './control-api-client.js';
+export { InMemoryCodingNsCredentialStore, FileCodingNsCredentialStore, InMemoryDshDeviceCredentialStore, FileDshDeviceCredentialStore, } from './credential-store.js';
+export { startDshHostDeviceRuntime, } from './dsh-device-runtime.js';
+export { createDshRpcGatewayFeature } from './dsh-gateway-feature.js';
+export { createLocalDshWebRuntimeProvider, createRemoteWebRuntimeFeature, } from './remote-web-runtime.js';
+export { LanAccessDshError, LanAccessDshProxy, FileLanAccessDshLoginStore, InMemoryLanAccessDshLoginStore, createLanAccessDshRpcHandler, createNodeLanAccessDshRuntime, normalizeLanAccessDshConfig, openLoginProtectionSession, verifyLoginProtectionSession, } from './lan-access-dsh.js';
+export { CODINGNS_TUNNEL_DATA_CHANNEL_LABEL, FileHostDtlsIdentityStore, createRegisteredHostSignalingSocket, createWeriftPeerConnectionFactory, ensureHostDtlsIdentity, formatHostDtlsFingerprint, generateHostDtlsIdentity, startHostRelayRuntime, } from './relay-tunnel-runtime.js';
+export * from './terminal/index.js';
+//# sourceMappingURL=index.js.map

package/data/build/dist/host/lan-access-dsh.d.ts

@@ -0,0 +1,83 @@
+import type { SettingsScope } from '@deepseek-ai/dsh-settings';
+import type { CodingNsSettings, LanAccessDshLoginSettings, LoginProtectionScopes } from '../shared/contracts/config.js';
+import type { LanAccessDshConfig, LanAccessDshLoginConfig, LanAccessDshSnapshot } from '../shared/contracts/lan-access-dsh.js';
+export interface LanAccessDshStream {
+    pipe(destination: LanAccessDshStream): LanAccessDshStream;
+    destroy(error?: Error): void;
+    once(event: 'error' | 'close' | 'connect', listener: (...args: unknown[]) => void): LanAccessDshStream;
+}
+export interface LanAccessDshRuntime {
+    listListenHosts(): readonly string[];
+    detectDshPorts(): Promise<readonly number[]>;
+    listen(config: LanAccessDshConfig, onConnection: (socket: LanAccessDshStream) => void): Promise<{
+        actualPort: number;
+        close: () => Promise<void>;
+    }>;
+    connect(dshPort: number, onConnect: (socket: LanAccessDshStream) => void, onError: (error: Error) => void): void;
+}
+export interface LanAccessDshLoginRecord extends LanAccessDshLoginConfig {
+}
+export interface LanAccessDshLoginStore {
+    read(): Promise<LanAccessDshLoginRecord | null>;
+    write(record: LanAccessDshLoginRecord): Promise<void>;
+    clear(): Promise<void>;
+}
+/** 浏览器中继只携带短期签名票据，密码哈希和签名密钥始终留在 Host。 */
+export declare function openLoginProtectionSession(store: LanAccessDshLoginStore, username: string, password: string, scope: keyof LoginProtectionScopes): Promise<{
+    token: string;
+    expiresAt: string;
+}>;
+/** 校验中继票据；配置关闭或未覆盖该范围时保持向后兼容，直接放行。 */
+export declare function verifyLoginProtectionSession(store: LanAccessDshLoginStore, token: string | undefined, scope: keyof LoginProtectionScopes): Promise<boolean>;
+/** 测试和嵌入式宿主使用的内存凭据存储。 */
+export declare class InMemoryLanAccessDshLoginStore implements LanAccessDshLoginStore {
+    private value;
+    read(): Promise<LanAccessDshLoginRecord | null>;
+    write(record: LanAccessDshLoginRecord): Promise<void>;
+    clear(): Promise<void>;
+}
+/** 登录保护凭据与 Codingns4DSH refresh token 分离保存，文件权限限制为当前用户。 */
+export declare class FileLanAccessDshLoginStore implements LanAccessDshLoginStore {
+    private readonly filePath;
+    constructor(filePath?: string);
+    read(): Promise<LanAccessDshLoginRecord | null>;
+    write(record: LanAccessDshLoginRecord): Promise<void>;
+    clear(): Promise<void>;
+}
+/** Host 侧默认运行时：枚举网卡、读取 DSH 启动参数并建立 TCP 转发。 */
+export declare function createNodeLanAccessDshRuntime(dshWebPort?: number): LanAccessDshRuntime;
+/** 管理唯一一条“监听地址/端口 -> 当前 DSH Web 端口”的映射。 */
+export declare class LanAccessDshProxy {
+    private readonly runtime;
+    private readonly authenticatedUrl?;
+    private active;
+    private detectedDshPorts;
+    private loginConfig;
+    /** 当前进程内主动退出的会话；正常会话由签名令牌承载，可跨代理重建复用。 */
+    private readonly revokedSessions;
+    private upstreamCookie;
+    constructor(runtime?: LanAccessDshRuntime, authenticatedUrl?: string | undefined);
+    listenHosts(): readonly string[];
+    detect(): Promise<readonly number[]>;
+    start(input: Partial<LanAccessDshConfig>): Promise<LanAccessDshSnapshot>;
+    stop(): Promise<void>;
+    close(): Promise<void>;
+    get(): LanAccessDshSnapshot | null;
+    setLoginConfig(config: LanAccessDshLoginConfig | null): void;
+    loginSettings(): LanAccessDshLoginSettings;
+    private resolveDetectedPort;
+    private accept;
+    private snapshot;
+    private authorize;
+    /** DSH 启动时的认证 URL 只在 Host 内交换一次 Cookie，绝不下发到浏览器。 */
+    private takeOverDshWebToken;
+}
+/** 改写请求中的 Host、Origin，并关闭普通 HTTP 上游连接。 */
+export declare function rewriteLanAccessDshRequestHeaders(input: Uint8Array, targetAuthority: string, upstreamCookie?: string): Uint8Array;
+export declare class LanAccessDshError extends Error {
+    readonly code: 'LAN_ACCESS_DSH_INVALID' | 'DSH_PORT_NOT_FOUND' | 'DSH_PORT_AMBIGUOUS';
+    constructor(code: 'LAN_ACCESS_DSH_INVALID' | 'DSH_PORT_NOT_FOUND' | 'DSH_PORT_AMBIGUOUS', message: string);
+}
+export declare function normalizeLanAccessDshConfig(value: Partial<LanAccessDshConfig>, allowedListenHosts?: readonly string[]): LanAccessDshConfig;
+export declare function createLanAccessDshRpcHandler(proxy: LanAccessDshProxy, settings?: SettingsScope<CodingNsSettings>, loginStore?: LanAccessDshLoginStore): (action: string, payload: unknown) => unknown | Promise<unknown>;
+//# sourceMappingURL=lan-access-dsh.d.ts.map