@langify-org/dsh-code-server 0.1.1 → 0.1.2

package/README.ja.md

@@ -41,6 +41,7 @@ DSH の Web 版や Desktop 版では **Plugins** ページから追加できま
 
 - プラグインは必要になったときに DSH 用の code-server を1つ起動します。待ち受けは本人だけが開ける Unix socket（`0700` のディレクトリ内の `0600`）で、code-server 自身の認証は無効にしています。ネットワークのポートは開きません。
 - DSH は自分のオリジンの `/code-server` で code-server を配信します。すべてのリクエストと WebSocket は、先に DSH の認証とオリジンの検査を通ります。そのため code-server には、DSH に届く場所（Tailscale 経由など）からだけ届きます。
+- DSH Desktop のページは `dsh-app://app` にあり、code-server はその宛先に WebSocket をつなごうとします。中継は code-server のページに小さなスクリプトを差し込み、WebSocket を Desktop が示す Host の宛先（`__DSH_TRANSPORT__.streamBaseUrl`）に付け替えます。Desktop はそこへの接続に DSH の認証情報を付けます。ブラウザーではこのスクリプトは何もしません。
 - 起動のたびに、同梱の VS Code 拡張 **DSH Code Bridge**（`langify-org.dsh-code-bridge`）を code-server に入れ、古いものを置き換えます。
 - Code ページごとに専用の接続（binding）を作ります。ページは binding をエディターの URL の断片（サーバーには送られない部分）に入れ、そのエディター画面の拡張がそれを読み取って、別の非公開 socket でプラグインに接続します。同じフォルダーを複数のページで開いていても、ファイルはその画面にだけ開きます。
 

package/README.md

@@ -41,6 +41,7 @@ With the defaults, the editor shares settings and extensions with your own code-
 
 - The plugin starts one code-server for DSH on demand, listening on a Unix socket that only you can open (mode `0600` in a `0700` directory), with code-server's own authentication off. It never opens a network port.
 - DSH serves code-server under `/code-server` on its own origin. Every request and WebSocket passes DSH's authentication and origin check first, so code-server is reachable wherever DSH is, for example over Tailscale, and nowhere else.
+- In DSH Desktop the page lives at `dsh-app://app`, and code-server would dial its WebSockets at that host. The relay adds a small script to code-server's page that sends them to the address Desktop gives its Host (`__DSH_TRANSPORT__.streamBaseUrl`), where Desktop adds DSH's credentials. In a browser the script changes nothing.
 - Before each start, the plugin installs its bundled VS Code extension, **DSH Code Bridge** (`langify-org.dsh-code-bridge`), into code-server, replacing any older copy.
 - Each Code page gets its own connection ("binding"). The page puts the binding in the editor's URL fragment, which never reaches a server; the extension in that editor window reads it back and connects to the plugin over another private socket. Files open in that window only, even when several pages show the same folder.
 

package/README.zh.md

@@ -41,6 +41,7 @@ dsh plugin --profile <profile> add @langify-org/dsh-code-server
 
 - 插件在需要时为 DSH 启动一个 code-server，监听只有你能打开的 Unix 套接字（位于 `0700` 目录中，权限为 `0600`），并关闭 code-server 自身的认证。它不会打开任何网络端口。
 - DSH 在自己的源下通过 `/code-server` 提供 code-server。每个请求和 WebSocket 都会先经过 DSH 的认证和来源检查，因此只有能访问 DSH 的地方（例如通过 Tailscale）才能访问 code-server。
+- 在 DSH Desktop 中，页面位于 `dsh-app://app`，code-server 会向该地址建立 WebSocket。中继会向 code-server 的页面注入一段小脚本，把 WebSocket 改为发往 Desktop 提供的 Host 地址（`__DSH_TRANSPORT__.streamBaseUrl`），Desktop 会为发往该地址的连接附加 DSH 的凭据。在浏览器中，该脚本不做任何改动。
 - 每次启动前，插件都会把内置的 VS Code 扩展 **DSH Code Bridge**（`langify-org.dsh-code-bridge`）安装到 code-server 中，替换旧版本。
 - 每个 Code 页面都有自己的连接（binding）。页面把 binding 放在编辑器 URL 的片段中（这一部分不会发送到服务器），该编辑器窗口中的扩展读取它，并通过另一个私有套接字连接到插件。即使多个页面打开了同一个文件夹，文件也只会在对应的窗口中打开。
 

package/dist/index.mjs

@@ -11,6 +11,7 @@ import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { clientRequestSchema } from "@deepseek-ai/dsh-client-connection";
 import { SessionId } from "@deepseek-ai/dsh-session/types";
 import { parseFileAddress } from "@deepseek-ai/dsh-util-workspace-path";
+import { buffer } from "node:stream/consumers";
 // src/rpc.ts
 /** DSH's shared RPC channel, and the prefix of the endpoints this plugin owns on it. */
 const RPC_CHANNEL = "/api";
@@ -584,9 +585,36 @@ function healthy(socketPath) {
 		}).on("error", () => resolve(false));
 	});
 }
+// src/host/desktop-websocket.ts
+/** Self-contained: it is serialized into {@link DESKTOP_WEBSOCKET_SCRIPT}. */
+function retargetWebSockets(page) {
+	let base;
+	try {
+		base = page.parent.__DSH_TRANSPORT__?.streamBaseUrl;
+	} catch {
+		return;
+	}
+	if (typeof base !== "string") return;
+	const host = new URL(base);
+	const scheme = host.protocol === "https:" ? "wss:" : "ws:";
+	const Native = page.WebSocket;
+	page.WebSocket = class extends Native {
+		constructor(url, protocols) {
+			const target = new URL(url, page.location.href);
+			if (target.hostname === page.location.hostname) {
+				target.protocol = scheme;
+				target.host = host.host;
+			}
+			super(target, protocols);
+		}
+	};
+}
+const DESKTOP_WEBSOCKET_SCRIPT = `(${retargetWebSockets.toString()})(window)\n`;
 // src/host/relay.ts
 /** Path prefix code-server is served under, relative to the DSH page. */
 const RELAY_PREFIX = "/code-server";
+/** Served by the relay itself, below the prefix; code-server has no such route. */
+const SCRIPT_PATH = "/_dsh/desktop-websocket.js";
 /** DSH's credentials are not code-server's business. */
 const PRIVATE_HEADERS = /* @__PURE__ */ new Set(["cookie", "authorization"]);
 function upstreamHeaders(headers) {
@@ -612,12 +640,28 @@ function relayRequests(admission, start) {
 			res.end(error instanceof Error ? error.message : "code-server is unavailable");
 			return;
 		}
+		const path = upstreamPath(req.url);
+		const pathname = new URL(path, "http://code-server").pathname;
+		if (req.method === "GET" && pathname === SCRIPT_PATH) {
+			res.writeHead(200, { "content-type": "text/javascript; charset=utf-8" });
+			res.end(DESKTOP_WEBSOCKET_SCRIPT);
+			return;
+		}
+		const page = req.method === "GET" && pathname === "/";
+		const headers = upstreamHeaders(req.headers);
 		const upstream = request({
 			socketPath: server.socketPath,
 			method: req.method,
-			path: upstreamPath(req.url),
-			headers: upstreamHeaders(req.headers)
+			path,
+			headers: page ? {
+				...headers,
+				"accept-encoding": "identity"
+			} : headers
 		}, (response) => {
+			if (page && response.headers["content-type"]?.startsWith("text/html") === true) {
+				sendPage(response, res).catch(() => res.destroy());
+				return;
+			}
 			res.writeHead(response.statusCode ?? 502, response.statusMessage, response.headers);
 			response.pipe(res);
 		});
@@ -629,6 +673,12 @@ function relayRequests(admission, start) {
 		req.pipe(upstream);
 	};
 }
+/** Send code-server's page with the script ahead of code-server's own. */
+async function sendPage(response, res) {
+	const html = (await buffer(response)).toString("utf8").replace(/<head[^>]*>/i, (head) => `${head}<script src=".${SCRIPT_PATH}"><\/script>`);
+	const { "content-length": _length, ...headers } = response.headers;
+	res.writeHead(response.statusCode ?? 502, response.statusMessage, headers).end(html);
+}
 /** Handler for code-server's WebSocket upgrades, which arrive on one exact path. */
 function relayUpgrades(admission, socketPath) {
 	return (req, socket, head) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@langify-org/dsh-code-server",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Edit the session's working folder in code-server inside DeepSeek Harness, served through DSH's authenticated web server",
   "keywords": [
     "code-server",