@linxin666/dsh-remote-web-ui 0.1.16 → 0.1.18

package/lib/index.js

@@ -981,6 +981,10 @@ function makeRoutes(deps) {
 function mobileBundlePath() {
 	return fileURLToPath(new URL("../lib/mobile.js", import.meta.url));
 }
+/** The apple-touch-icon shipped with the package (iOS home-screen icon, 180x180 PNG). */
+function appleTouchIconPath() {
+	return fileURLToPath(new URL("../assets/apple-touch-icon.png", import.meta.url));
+}
 /** The mobile page shell: minimal, offline-safe, no external assets. */
 function pageHtml(bundleUrl) {
 	return [
@@ -991,6 +995,7 @@ function pageHtml(bundleUrl) {
 		"<meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no, viewport-fit=cover\">",
 		"<meta name=\"theme-color\" content=\"#f3f5f9\">",
 		"<meta name=\"referrer\" content=\"no-referrer\">",
+		"<link rel=\"apple-touch-icon\" href=\"/m/apple-touch-icon.png\">",
 		"<title>移动端远程控制</title>",
 		"</head>",
 		"<body>",
@@ -1009,6 +1014,15 @@ function writeStatic(res, status, type, body) {
 	});
 	res.end(body);
 }
+/** Send the PNG icon as a binary body (unlike text assets, the PNG must not be decoded to utf-8). */
+function writePng(res, status, body) {
+	res.writeHead(status, {
+		"content-type": "image/png",
+		"cache-control": "public, max-age=31536000, immutable",
+		"referrer-policy": "no-referrer"
+	});
+	res.end(body);
+}
 /**
 * Build the mobile page routes.
 * @returns the two exact routes to register on webServer.
@@ -1029,15 +1043,35 @@ function makeMobileRoutes() {
 			writeStatic(res, 500, "text/plain", "failed to read the mobile bundle");
 		}
 	};
-	return [{
-		kind: "exact",
-		path: "/m",
-		handler: handlePage
-	}, {
-		kind: "exact",
-		path: "/m/mobile.js",
-		handler: handleBundle
-	}];
+	const handleIcon = async (_req, res) => {
+		const path = appleTouchIconPath();
+		if (!existsSync(path)) {
+			writeStatic(res, 404, "text/plain", "apple-touch-icon not found");
+			return;
+		}
+		try {
+			writePng(res, 200, await readFile(path));
+		} catch {
+			writeStatic(res, 500, "text/plain", "failed to read the apple-touch-icon");
+		}
+	};
+	return [
+		{
+			kind: "exact",
+			path: "/m",
+			handler: handlePage
+		},
+		{
+			kind: "exact",
+			path: "/m/mobile.js",
+			handler: handleBundle
+		},
+		{
+			kind: "exact",
+			path: "/m/apple-touch-icon.png",
+			handler: handleIcon
+		}
+	];
 }
 //#endregion
 //#region src/mobile-api.ts
@@ -1096,10 +1130,22 @@ const MOBILE_API_METHOD_PREFIX = `${MOBILE_API_PREFIX}/`;
 function makeMobileApiRoutes(deps) {
 	const { service, apiProxy, mobileEnterToSend } = deps;
 	const eventsHeartbeatMs = deps.eventsHeartbeatMs ?? DEFAULT_EVENTS_HEARTBEAT_MS;
+	/**
+	* Refresh the paired device's presence and report whether it is live.
+	* The mobile surface (unlike the desktop Web UI) has no `/api/pair/heartbeat`
+	* sender, so any activity on the mobile channel — a gated RPC, or the live
+	* SSE stream staying open — must count as presence. Without this, an
+	* idle-but-connected phone ages past `offlineAfterMs` and the desktop panel
+	* wrongly reports it as disconnected.
+	*/
+	const touchDeviceFor = (req) => {
+		const deviceId = readCookie(req.headers.cookie, service.config.cookieName);
+		if (deviceId === void 0) return false;
+		return service.touchDevice(deviceId);
+	};
 	/** The phone gate: a live paired-device cookie, or nothing else proceeds. */
 	const gateOk = (req) => {
-		const deviceId = readCookie(req.headers.cookie, service.config.cookieName);
-		return deviceId !== void 0 && service.hasDevice(deviceId);
+		return touchDeviceFor(req);
 	};
 	const writeJson = (res, status, body) => {
 		res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
@@ -1219,6 +1265,7 @@ function makeMobileApiRoutes(deps) {
 		let closed = false;
 		const heartbeat = setInterval(() => {
 			if (closed) return;
+			touchDeviceFor(req);
 			try {
 				res.write(": ping\n\n");
 			} catch {}
@@ -1787,6 +1834,16 @@ const OUTPUT_CAP = 16 * 1024;
 */
 const WIN_CMD_MISSING_RE = /not recognized as an internal or external command/i;
 /**
+* Bypass for pnpm 11's supply-chain gate: `minimumReleaseAge` (default 24 h)
+* silently skips same-day releases — `pnpm update --latest` then exits 0
+* without moving anything and the post-run verification would misreport a
+* stale no-op. The update here is explicitly user-initiated and the panel
+* shows exactly which versions are being installed, so the gate only adds a
+* confusing silent no-op; override it per-invocation instead of asking every
+* user to edit the profile's pnpm-workspace.yaml.
+*/
+const MIN_RELEASE_AGE_OVERRIDE = "--config.minimumReleaseAge=0";
+/**
 * Run the update inside the profile directory. Tries pnpm first, falls back
 * to corepack and then npx when the previous command is missing (ENOENT);
 * all candidates share one hard timeout and keep accumulating output.
@@ -1813,6 +1870,7 @@ function runUpdate(deps) {
 				args: [
 					"update",
 					"--latest",
+					MIN_RELEASE_AGE_OVERRIDE,
 					...packages
 				]
 			},
@@ -1822,6 +1880,7 @@ function runUpdate(deps) {
 					"pnpm",
 					"update",
 					"--latest",
+					MIN_RELEASE_AGE_OVERRIDE,
 					...packages
 				]
 			},
@@ -1832,6 +1891,7 @@ function runUpdate(deps) {
 					"pnpm",
 					"update",
 					"--latest",
+					MIN_RELEASE_AGE_OVERRIDE,
 					...packages
 				]
 			}
@@ -1930,9 +1990,11 @@ function runUpdate(deps) {
 }
 /**
 * Run the update, then verify the installed versions actually moved. pnpm
-* exits 0 even when it silently kept the installed versions — the pnpm 11
-* `minimumReleaseAge` gate refuses same-day releases by default — so a green
-* exit alone would report a misleading "update complete". Re-read the
+* exits 0 even when it silently kept the installed versions — runUpdate
+* overrides pnpm 11's `minimumReleaseAge` gate (default 24 h) with
+* `--config.minimumReleaseAge=0`, but an older pnpm without the override or
+* another silent no-op can still keep versions in place — so a green exit
+* alone must not report a misleading "update complete". Re-read the
 * installed versions afterwards and surface a `stale` failure (with the
 * captured pnpm output) when nothing moved, so the panel can tell the user
 * how to unblock the gate instead of claiming success.