@lenorin/dsh-tauri-launcher 1.0.0 → 1.0.2

package/LICENSE

@@ -18,4 +18,4 @@ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,162 @@
+# DSH Tauri Launcher
+
+<div align="right">
+
+**[简体中文](./README.md)**
+
+</div>
+
+[![Platform - Windows](https://img.shields.io/badge/platform-Windows-0078d4?logo=windows&logoColor=white)](#platform-support)
+[![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
+
+Following DeepSeek Harness's "everything-is-a-plugin" architecture, this project
+abstracts desktop launch, exit confirmation, and desktop-shortcut management into a
+standard Web plugin. From **Settings → Desktop Launcher** you can bring up the Tauri
+desktop app in one click — enjoying both the deep integration of the plugin ecosystem
+and a native desktop experience. The repository also ships the full Tauri desktop-app
+source plus a GitHub Release automation pipeline.
+
+## Platform Support
+
+| Platform | Status                                |
+| -------- | ------------------------------------- |
+| Windows  | ✅ Supported (incl. `.lnk` shortcut)   |
+| Linux    | 🚧 Planned                            |
+| macOS    | 🚧 Planned                            |
+
+The Web plugin core (host/client JS) is cross-platform; the Windows-specific pieces are
+the desktop-shortcut creation and the loopback process-control implementation. Linux
+and macOS support are on the roadmap — feel free to open an issue with your use case.
+
+## Features
+
+- **Desktop launch toggle**: one-click start/stop of the desktop app, with instant status feedback;
+- **Shortcut integration**: auto-create a desktop shortcut on enable, auto-remove on disable; manual re-create is available while running;
+- **Shutdown confirmation dialog**: confirmation popup before exit (with a notice that the shortcut will be removed);
+- **Live status indicator**: running 🟢 / stopped ⚪ / unknown 🟡, plus diagnostic info on errors;
+- **Dark-mode aware**: all colors flow through DSH theme tokens and adapt to light/dark automatically;
+- **Custom settings icon**: replaces the default gear with a vector monitor icon (sharp at any size).
+
+## Screenshots
+
+<table>
+<tr>
+<td align="center" width="50%">
+
+**Web settings panel (plugin section)**
+
+![Desktop Launcher section in Harness settings](docs/screenshots/harness-settings.png)
+
+After install, DSH Settings → Desktop Launcher shows the launch toggle, runtime status, and shortcut-link indicator.
+
+</td>
+<td align="center" width="50%">
+
+**Desktop-app settings panel**
+
+![Tauri desktop-app settings](docs/screenshots/launcher-settings.png)
+
+The Tauri desktop app's own settings: login autostart, global hotkey, desktop shortcut, and exit policy.
+
+</td>
+</tr>
+</table>
+
+## How It Works (Summary)
+
+The Web plugin's host half talks to the browser half over `/api/dsh-tauri-launcher/*`
+loopback routes, and controls the desktop app via a sentinel-file protocol (see
+[docs/architecture.md](docs/architecture.md)):
+
+- `.dsh-heartbeat`: the desktop app writes a timestamp every second; the plugin uses it to detect liveness;
+- `.dsh-quit`: writing `1` makes the desktop app exit **only itself** (the Harness host process keeps running); the sentinel is self-deleting on consumption.
+
+## Directory Layout
+
+```
+dsh-tauri-launcher/
+├── README.md             # Chinese README
+├── README.en.md          # English README
+├── package.json          # dsh.bundle + dsh.client dual manifest
+├── cordis.patch.yml      # composition patch (inserts the plugin row)
+├── lib/
+│   ├── index.js          # host half: loopback routes + control logic (configurable)
+│   └── client.js         # browser half: settings section UI
+├── launcher/             # Tauri desktop-app project (source + one-shot build; Windows only for now)
+├── .github/workflows/    # CI: tag-driven Windows exe build + Release publish
+└── docs/                 # architecture & release docs (Chinese)
+    └── screenshots/      # screenshots referenced by the READMEs
+```
+
+## Install (Web Plugin)
+
+> **About `<profile>`**: it refers to a DSH **profile** — a launchable plugin composition,
+> located at `$DSH_HOME/profiles/<name>/`. `<profile>` is a placeholder; **replace it with
+> the actual profile name you want to install into**. On most local setups the relevant
+> profile is `web` (the profile that starts the DSH Web GUI). List existing profiles:
+> `dir %USERPROFILE%\.dsh\profiles` (or `ls ~/.dsh/profiles`).
+> In the commands below, swap `<profile>` for `web` — e.g. `dsh plugin --profile web add ...`.
+
+Pick one of the three installation methods:
+
+```bash
+# 1) npm (after publish)
+dsh plugin --profile web add @lenorin/dsh-tauri-launcher
+
+# 2) GitHub (git install; pure JS, zero build, no allowBuilds grant required)
+dsh plugin --profile web add github:cilis/dsh-tauri-launcher
+
+# 3) Local checkout / tarball
+dsh plugin --profile web add ./dsh-tauri-launcher
+dsh plugin --profile web add ./dsh-tauri-launcher-1.0.1.tgz
+```
+
+> If you have multiple profiles, replace `web` in the commands with the target profile name.
+
+Verify the plugin layer is active (you should see the `dsh-tauri-launcher` row):
+
+```bash
+dsh --profile web --dump-config
+```
+
+Restart the DSH Web process and the "Desktop Launcher" section appears under Settings.
+Uninstall (replace `web` with your profile name):
+
+```bash
+dsh plugin --profile web remove @lenorin/dsh-tauri-launcher
+```
+
+## Configuration
+
+The plugin row supports the following configuration keys (no hard-coded tunables; defaults
+fit common deployments):
+
+```yaml
+- id: desktop-launcher
+  name: '@lenorin/dsh-tauri-launcher'
+  config:
+    launcherExe: ''            # absolute path to the desktop-app exe; empty = auto-detect
+    launcherDirs: []           # candidate exe directories; empty = built-in defaults
+    freshSecs: 4               # heartbeat "freshness window" in seconds (must be > write interval)
+    shortcutName: 'DeepSeek Harness.lnk'   # desktop-shortcut file name
+```
+
+## Desktop App Build & Release
+
+- The npm package ships a pre-built exe (`launcher/bin/dsh-launcher.exe`); the plugin auto-detects it on install — ready to use out of the box;
+- Local build: `pwsh -File launcher/build.ps1` (optional `-Offline -CargoHome <dir>`);
+- ⚠️ Maintenance rule: **after editing Rust sources under `launcher/src-tauri`, you must
+  rebuild and re-sync `launcher/bin/dsh-launcher.exe`** (see [docs/release.md](docs/release.md)),
+  or the shipped exe will drift from the sources; keep the version in `package.json` /
+  `Cargo.toml` / `tauri.conf.json` in sync.
+- GitHub Release: push a `v*` tag; CI auto-builds the Windows exe and publishes it
+  (Linux/macOS builds are not enabled yet — see [docs/release.md](docs/release.md)).
+
+## Documentation
+
+- [docs/architecture.md](docs/architecture.md) — architecture & sentinel-file protocol (Chinese)
+- [docs/release.md](docs/release.md) — install, build, release, uninstall & configuration reference (Chinese)
+
+## License
+
+[MIT](LICENSE)

package/README.md

@@ -1,102 +1,155 @@
-# dsh-tauri-launcher
-
-一个可安装的 DeepSeek Harness Web 插件：在 **设置 → 桌面启动** 中启动/退出本机
-**DeepSeek Harness Tauri 桌面应用**，并联动桌面快捷方式。配套提供桌面应用
-（Tauri）的完整源码与 GitHub Release 自动构建。
-
-## 功能
-
-- **桌面端启动开关**：一键启动/退出桌面应用（点击即反馈，秒级状态同步）；
-- **快捷方式联动**：开启时自动创建桌面快捷方式、关闭时自动删除；运行中可手动补建；
-- **关闭确认弹窗**：关闭前弹窗确认（含快捷方式将被删除的提示）；
-- **状态可视**：运行中 🟢 / 已停止 ⚪ / 状态未知 🟡 + 出错时显示诊断信息；
-- **深色模式适配**：全部颜色走 DSH 主题令牌，深浅色自动适配；
-- **设置导航显示器图标**：替换默认齿轮图标（矢量绘制，任意缩放锐利）。
-
-## 工作原理（摘要）
-
-Web 插件（宿主半）通过 `/api/dsh-tauri-launcher/*` 回环路由与浏览器半通信，
-并使用标记文件协议控制桌面应用（详见 [docs/architecture.md](docs/architecture.md)）：
-
-- `.dsh-heartbeat`：桌面应用每秒写入时间戳，插件以此探测运行状态；
-- `.dsh-quit`：写入 `1` 后桌面应用仅退出自身（保留 Harness 进程），消费时自删。
-
-## 目录结构
-
-```
-dsh-tauri-launcher/
-├── package.json          # dsh.bundle + dsh.client 双 manifest
-├── cordis.patch.yml      # 组合补丁（插入插件行）
-├── lib/
-│   ├── index.js          # 宿主半：回环路由 + 控制逻辑（可配置）
-│   └── client.js         # 浏览器半：设置分区 UI
-├── launcher/             # Tauri 桌面应用工程（源码 + 一键构建）
-├── .github/workflows/    # CI：打 tag 自动构建 exe 并发布 Release
-└── docs/                 # 架构与发布文档
-```
-
-## 安装（Web 插件）
-
-> **关于 `<profile>`**：它指 DSH 的**配置档（profile）**——一套可启动的插件组合，
-> 位于 `$DSH_HOME/profiles/<名字>/`。`<profile>` 是占位符，**需要替换成你实际
-> 要装进的 profile 名**。本机常见配置档名为 `web`（启动 DSH Web GUI 的档）；
-> 查看已有档：`dir %USERPROFILE%\.dsh\profiles`（或 `ls ~/.dsh/profiles`）。
-> 下面的命令示例中，把 `<profile>` 换成 `web` 即可，例如 `dsh plugin --profile web add ...`。
-
-三种方式任选（任选其一）：
-
-```bash
-# 1) npm（发布后）
-dsh plugin --profile web add @lenorin/dsh-tauri-launcher
-
-# 2) GitHub（git 安装；纯 JS 零构建，无需 allowBuilds 授权）
-dsh plugin --profile web add github:you/dsh-tauri-launcher
-
-# 3) 本地 checkout / tarball
-dsh plugin --profile web add ./dsh-tauri-launcher
-dsh plugin --profile web add ./dsh-tauri-launcher-1.0.0.tgz
-```
-
-> 如果你有多个 profile，把命令里的 `web` 换成目标 profile 名即可。
-
-验证层已生效（应能看到 `dsh-tauri-launcher` 层）：
-
-```bash
-dsh --profile web --dump-config
-```
-
-重启 DSH Web 进程后，设置面板即出现「桌面启动」分区。卸载（`web` 换成你的 profile 名）：
-
-```bash
-dsh plugin --profile web remove @lenorin/dsh-tauri-launcher
-```
-
-## 配置
-
-插件行支持以下配置（无硬编码可调参数；默认值适配常见部署）：
-
-```yaml
-- id: desktop-launcher
-  name: '@lenorin/dsh-tauri-launcher'
-  config:
-    launcherExe: ''            # 桌面应用 exe 绝对路径；空 = 自动探测
-    launcherDirs: []           # 候选 exe 目录列表；空 = 内置默认候选
-    freshSecs: 4               # 心跳“新鲜窗口”（秒），须大于心跳写入周期
-    shortcutName: 'DeepSeek Harness.lnk'   # 桌面快捷方式文件名
-```
-
-## 桌面应用构建与发布
-
-- npm 包自带预编译 exe（`launcher/bin/dsh-launcher.exe`），插件安装后自动探测、装上即用；
-- 本地自行构建：`pwsh -File launcher/build.ps1`（可选 `-Offline -CargoHome <dir>`）；
-- GitHub Release：推送 `v*` tag，CI 自动构建 Windows exe 并发布（见
-  [docs/release.md](docs/release.md)）。
-
-## 文档
-
-- [docs/architecture.md](docs/architecture.md) — 架构与标记文件协议
-- [docs/release.md](docs/release.md) — 安装、构建、发布、卸载与配置参考
-
-## License
-
-[MIT](LICENSE)
+# DSH Tauri Launcher
+
+<div align="right">
+
+**[English](./README.en.md)**
+
+</div>
+
+[![Platform - Windows](https://img.shields.io/badge/platform-Windows-0078d4?logo=windows&logoColor=white)](#平台支持)
+[![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
+
+沿用 DeepSeek Harness「一切皆插件」的架构哲学，把桌面端启停、退出确认、桌面快捷方式联动
+全部抽象为标准 Web 插件——用户在 **设置 → 桌面启动** 中即可一键唤起 Tauri 桌面应用，既
+享受插件生态的深度集成，也保留原生桌面体验。本仓库同时附带 Tauri 桌面应用完整源码与
+GitHub Release 自动构建流程。
+
+## 平台支持
+
+| 平台     | 状态                          |
+| -------- | ----------------------------- |
+| Windows  | ✅ 已支持（含桌面快捷方式 .lnk） |
+| Linux    | 🚧 规划中                     |
+| macOS    | 🚧 规划中                     |
+
+Web 插件本体（host/client JS）跨平台；目前 Windows 专属的实现集中在桌面快捷方式创建与
+回环进程控制上。Linux/macOS 适配已在路线图中，欢迎在 issue 里提出你的需求与场景。
+
+## 功能
+
+- **桌面端启动开关**：一键启动/退出桌面应用（点击即反馈，秒级状态同步）；
+- **快捷方式联动**：开启时自动创建桌面快捷方式、关闭时自动删除；运行中可手动补建；
+- **关闭确认弹窗**：关闭前弹窗确认（含快捷方式将被删除的提示）；
+- **状态可视**：运行中 🟢 / 已停止 ⚪ / 状态未知 🟡 + 出错时显示诊断信息；
+- **深色模式适配**：全部颜色走 DSH 主题令牌，深浅色自动适配；
+- **设置导航显示器图标**：替换默认齿轮图标（矢量绘制，任意缩放锐利）。
+
+## 界面截图
+
+<table>
+<tr>
+<td align="center" width="50%">
+
+**Web 设置面板（插件分区）**
+
+![Harness 设置中的桌面启动分区](docs/screenshots/harness-settings.png)
+
+安装后，DSH 设置 → 桌面启动 即可看到启动开关、运行状态、快捷方式联动提示。
+
+</td>
+<td align="center" width="50%">
+
+**桌面应用设置面板**
+
+![Tauri 桌面应用设置](docs/screenshots/launcher-settings.png)
+
+Tauri 桌面应用自身设置：开机启动、全局快捷键、桌面快捷方式、退出策略。
+
+</td>
+</tr>
+</table>
+
+## 工作原理（摘要）
+
+Web 插件（宿主半）通过 `/api/dsh-tauri-launcher/*` 回环路由与浏览器半通信，
+并使用标记文件协议控制桌面应用（详见 [docs/architecture.md](docs/architecture.md)）：
+
+- `.dsh-heartbeat`：桌面应用每秒写入时间戳，插件以此探测运行状态；
+- `.dsh-quit`：写入 `1` 后桌面应用仅退出自身（保留 Harness 进程），消费时自删。
+
+## 目录结构
+
+```
+dsh-tauri-launcher/
+├── README.md             # 中文 README
+├── README.en.md          # 英文 README
+├── package.json          # dsh.bundle + dsh.client 双 manifest
+├── cordis.patch.yml      # 组合补丁（插入插件行）
+├── lib/
+│   ├── index.js          # 宿主半：回环路由 + 控制逻辑（可配置）
+│   └── client.js         # 浏览器半：设置分区 UI
+├── launcher/             # Tauri 桌面应用工程（源码 + 一键构建；当前仅 Windows）
+├── .github/workflows/    # CI：打 tag 自动构建 Windows exe 并发布 Release
+└── docs/                 # 架构与发布文档
+    └── screenshots/      # README 引用的界面截图
+```
+
+## 安装（Web 插件）
+
+> **关于 `<profile>`**：它指 DSH 的**配置档（profile）**——一套可启动的插件组合，
+> 位于 `$DSH_HOME/profiles/<名字>/`。`<profile>` 是占位符，**需要替换成你实际
+> 要装进的 profile 名**。本机常见配置档名为 `web`（启动 DSH Web GUI 的档）；
+> 查看已有档：`dir %USERPROFILE%\.dsh\profiles`（或 `ls ~/.dsh/profiles`）。
+> 下面的命令示例中，把 `<profile>` 换成 `web` 即可，例如 `dsh plugin --profile web add ...`。
+
+三种方式任选（任选其一）：
+
+```bash
+# 1) npm（发布后）
+dsh plugin --profile web add @lenorin/dsh-tauri-launcher
+
+# 2) GitHub（git 安装；纯 JS 零构建，无需 allowBuilds 授权）
+dsh plugin --profile web add github:cilis/dsh-tauri-launcher
+
+# 3) 本地 checkout / tarball
+dsh plugin --profile web add ./dsh-tauri-launcher
+dsh plugin --profile web add ./dsh-tauri-launcher-1.0.1.tgz
+```
+
+> 如果你有多个 profile，把命令里的 `web` 换成目标 profile 名即可。
+
+验证层已生效（应能看到 `dsh-tauri-launcher` 层）：
+
+```bash
+dsh --profile web --dump-config
+```
+
+重启 DSH Web 进程后，设置面板即出现「桌面启动」分区。卸载（`web` 换成你的 profile 名）：
+
+```bash
+dsh plugin --profile web remove @lenorin/dsh-tauri-launcher
+```
+
+## 配置
+
+插件行支持以下配置（无硬编码可调参数；默认值适配常见部署）：
+
+```yaml
+- id: desktop-launcher
+  name: '@lenorin/dsh-tauri-launcher'
+  config:
+    launcherExe: ''            # 桌面应用 exe 绝对路径；空 = 自动探测
+    launcherDirs: []           # 候选 exe 目录列表；空 = 内置默认候选
+    freshSecs: 4               # 心跳“新鲜窗口”（秒），须大于心跳写入周期
+    shortcutName: 'DeepSeek Harness.lnk'   # 桌面快捷方式文件名
+```
+
+## 桌面应用构建与发布
+
+- npm 包自带预编译 exe（`launcher/bin/dsh-launcher.exe`），插件安装后自动探测、装上即用；
+- 本地自行构建：`pwsh -File launcher/build.ps1`（可选 `-Offline -CargoHome <dir>`）；
+- ⚠️ 维护纪律：**修改 `launcher/src-tauri` 下的 Rust 源码后，必须重新构建并同步
+  `launcher/bin/dsh-launcher.exe`**（发布流程见 [docs/release.md](docs/release.md)），
+  否则 npm 包内 exe 与源码漂移；版本号需在 `package.json` / `Cargo.toml` /
+  `tauri.conf.json` 三处同步。
+- GitHub Release：推送 `v*` tag，CI 自动构建 Windows exe 并发布（Linux/macOS 构建
+  尚未启用，见 [docs/release.md](docs/release.md)）。
+
+## 文档
+
+- [docs/architecture.md](docs/architecture.md) — 架构与标记文件协议
+- [docs/release.md](docs/release.md) — 安装、构建、发布、卸载与配置参考
+
+## License
+
+[MIT](LICENSE)

package/lib/client.js

@@ -64,22 +64,28 @@ window.__ModuleLoader__.load({
 `
 
     const API_BASE = '/api/dsh-tauri-launcher'
+    /** 自定义请求头：同源 fetch 可带，跨站 form POST 无法伪造（CSRF 防线）。 */
+    const CSRF_HEADERS = { 'x-requested-with': 'dsh-tauri-launcher' }
 
     const api = {
       async state() {
-        const response = await fetch(API_BASE + '/state')
+        const response = await fetch(API_BASE + '/state', { headers: CSRF_HEADERS })
         return response.json()
       },
       async setDesktop(enabled) {
         const response = await fetch(API_BASE + '/set-desktop', {
           method: 'POST',
-          headers: { 'content-type': 'application/json' },
+          headers: { ...CSRF_HEADERS, 'content-type': 'application/json' },
           body: JSON.stringify({ enabled }),
         })
         return response.json()
       },
       async setShortcut() {
-        const response = await fetch(API_BASE + '/set-shortcut', { method: 'POST' })
+        const response = await fetch(API_BASE + '/set-shortcut', { method: 'POST', headers: CSRF_HEADERS })
+        return response.json()
+      },
+      async diagnose() {
+        const response = await fetch(API_BASE + '/diagnose', { headers: CSRF_HEADERS })
         return response.json()
       },
     }
@@ -105,9 +111,14 @@ window.__ModuleLoader__.load({
       async function fetchState() {
         try {
           const state = await api.state()
-          return { desktop: state.desktop, shortcut: Boolean(state.shortcut), error: '', diag: state.diag || '' }
+          return { desktop: state.desktop, shortcut: Boolean(state.shortcut), error: '', diag: '' }
         } catch (error) {
-          return { desktop: null, shortcut: false, error: '读取状态失败：' + errText(error), diag: '' }
+          let diag = ''
+          try {
+            const diagnosed = await api.diagnose()
+            diag = (diagnosed && diagnosed.diag) || ''
+          } catch { /* 诊断失败不影响错误展示 */ }
+          return { desktop: null, shortcut: false, error: '读取状态失败：' + errText(error), diag }
         }
       }