@linxin666/dsh-remote-web-ui 0.1.19 → 0.1.20

package/lib/index.js

@@ -572,6 +572,32 @@ function makeGateListener(service, requirePairingForLan = true, enabled = true)
 	};
 }
 //#endregion
+//#region src/http.ts
+/** One JSON response. */
+function writeJson(res, status, body) {
+	const payload = JSON.stringify(body);
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"referrer-policy": "no-referrer"
+	});
+	res.end(payload);
+}
+/**
+* Read a request body up to maxBytes and parse it as JSON.
+* @throws 'body too large' beyond the cap, or the JSON.parse error.
+*/
+async function readBoundedJson(req, maxBytes) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of req) {
+		const buffer = chunk;
+		size += buffer.length;
+		if (size > maxBytes) throw new Error("body too large");
+		chunks.push(buffer);
+	}
+	return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+}
+//#endregion
 //#region src/routes.ts
 /**
 * Browser-trust fence for the /api/pair routes, mirroring the connection
@@ -663,27 +689,10 @@ function parsePairPayload(schema, body) {
 	const result = schema.safeParse(body ?? {});
 	return result.success ? result.data : void 0;
 }
-/** One JSON response. */
-function writeJson$1(res, status, body) {
-	const payload = JSON.stringify(body);
-	res.writeHead(status, {
-		"content-type": "application/json; charset=utf-8",
-		"referrer-policy": "no-referrer"
-	});
-	res.end(payload);
-}
-/** Read a request body up to MAX_BODY_BYTES and parse it as JSON. */
+/** Read a request body up to MAX_BODY_BYTES and parse it as JSON (undefined on failure). */
 async function readJsonBody$1(req) {
-	const chunks = [];
-	let size = 0;
-	for await (const chunk of req) {
-		const buffer = chunk;
-		size += buffer.length;
-		if (size > MAX_BODY_BYTES) return void 0;
-		chunks.push(buffer);
-	}
 	try {
-		const parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+		const parsed = await readBoundedJson(req, MAX_BODY_BYTES);
 		return typeof parsed === "object" && parsed !== null ? parsed : void 0;
 	} catch {
 		return;
@@ -766,6 +775,9 @@ function makeRoutes(deps) {
 	const rateLimitAccept = (req) => {
 		const ip = req.socket?.remoteAddress ?? "unknown";
 		const nowMs = Date.now();
+		if (acceptAttempts.size > 256) {
+			for (const [key, attempt] of acceptAttempts) if (nowMs - attempt.windowStart > ACCEPT_WINDOW_MS) acceptAttempts.delete(key);
+		}
 		const entry = acceptAttempts.get(ip);
 		if (entry === void 0 || nowMs - entry.windowStart > ACCEPT_WINDOW_MS) {
 			acceptAttempts.set(ip, {
@@ -780,7 +792,7 @@ function makeRoutes(deps) {
 	const handleIssue = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
 		if (!loopbackFence(req)) {
-			writeJson$1(res, 403, {
+			writeJson(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
@@ -789,7 +801,7 @@ function makeRoutes(deps) {
 		const body = await readJsonBody$1(req);
 		const payload = parsePairPayload(issuePayloadSchema, body);
 		if (payload === void 0) {
-			writeJson$1(res, 400, {
+			writeJson(res, 400, {
 				ok: false,
 				code: "bad-payload"
 			});
@@ -800,7 +812,7 @@ function makeRoutes(deps) {
 			const { token, expiresAt } = service.issue(workspaceId, address);
 			const base = address === void 0 ? service.publicBaseUrl ?? service.lanBaseUrl : service.lanBaseUrlFor(address);
 			if (base === void 0) throw new Error("remote-web-ui: base unavailable");
-			writeJson$1(res, 200, {
+			writeJson(res, 200, {
 				ok: true,
 				url: `${base}/?pair=${token}${workspaceId === void 0 ? "" : `&workspace=${encodeURIComponent(workspaceId)}`}`,
 				token,
@@ -810,7 +822,7 @@ function makeRoutes(deps) {
 			});
 		} catch (error) {
 			const unknownAddress = error instanceof UnknownLanAddressError;
-			writeJson$1(res, unknownAddress ? 400 : 409, {
+			writeJson(res, unknownAddress ? 400 : 409, {
 				ok: false,
 				code: unknownAddress ? "unknown-address" : "lan-required"
 			});
@@ -819,14 +831,14 @@ function makeRoutes(deps) {
 	const handleAccept = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
 		if (!lanFence(req)) {
-			writeJson$1(res, 403, {
+			writeJson(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
 			return;
 		}
 		if (rateLimitAccept(req)) {
-			writeJson$1(res, 429, {
+			writeJson(res, 429, {
 				ok: false,
 				code: "rate-limited"
 			});
@@ -835,7 +847,7 @@ function makeRoutes(deps) {
 		const body = await readJsonBody$1(req);
 		const payload = parsePairPayload(acceptPayloadSchema, body);
 		if (payload === void 0) {
-			writeJson$1(res, 400, {
+			writeJson(res, 400, {
 				ok: false,
 				code: "bad-payload"
 			});
@@ -843,7 +855,7 @@ function makeRoutes(deps) {
 		}
 		const result = service.accept(payload.token);
 		if (!result.ok) {
-			writeJson$1(res, result.code === "used" ? 409 : 404, {
+			writeJson(res, result.code === "used" ? 409 : 404, {
 				ok: false,
 				code: result.code
 			});
@@ -861,7 +873,7 @@ function makeRoutes(deps) {
 	const handleStop = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
 		if (!loopbackFence(req)) {
-			writeJson$1(res, 403, {
+			writeJson(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
@@ -869,19 +881,19 @@ function makeRoutes(deps) {
 		}
 		const body = await readJsonBody$1(req);
 		if (parsePairPayload(pairActionPayloadSchema, body) === void 0) {
-			writeJson$1(res, 400, {
+			writeJson(res, 400, {
 				ok: false,
 				code: "bad-payload"
 			});
 			return;
 		}
 		service.stop();
-		writeJson$1(res, 200, { ok: true });
+		writeJson(res, 200, { ok: true });
 	};
 	const handleHeartbeat = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
 		if (!lanFence(req)) {
-			writeJson$1(res, 403, {
+			writeJson(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
@@ -889,7 +901,7 @@ function makeRoutes(deps) {
 		}
 		const body = await readJsonBody$1(req);
 		if (parsePairPayload(pairActionPayloadSchema, body) === void 0) {
-			writeJson$1(res, 400, {
+			writeJson(res, 400, {
 				ok: false,
 				code: "bad-payload"
 			});
@@ -897,25 +909,25 @@ function makeRoutes(deps) {
 		}
 		const deviceId = readCookie(req.headers.cookie, service.config.cookieName);
 		if (deviceId === void 0 || !service.heartbeat(deviceId)) {
-			writeJson$1(res, 401, {
+			writeJson(res, 401, {
 				ok: false,
 				code: "unpaired"
 			});
 			return;
 		}
-		writeJson$1(res, 200, { ok: true });
+		writeJson(res, 200, { ok: true });
 	};
 	const handleStatus = async (req, res) => {
 		if (!requireMethod(req, res, "GET")) return;
 		if (!lanFence(req)) {
-			writeJson$1(res, 403, {
+			writeJson(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
 			return;
 		}
 		const deviceId = readCookie(req.headers.cookie, service.config.cookieName);
-		writeJson$1(res, 200, {
+		writeJson(res, 200, {
 			ok: true,
 			paired: deviceId !== void 0 && service.hasDevice(deviceId),
 			...service.snapshot()
@@ -924,7 +936,7 @@ function makeRoutes(deps) {
 	const handleEvents = (req, res) => {
 		if (!requireMethod(req, res, "GET")) return;
 		if (!loopbackFence(req)) {
-			writeJson$1(res, 403, {
+			writeJson(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
@@ -1031,17 +1043,22 @@ function makeMobileRoutes() {
 	const handlePage = (_req, res) => {
 		writeStatic(res, 200, "text/html", pageHtml("/m/mobile.js"));
 	};
+	let bundleBody;
 	const handleBundle = async (_req, res) => {
-		const path = mobileBundlePath();
-		if (!existsSync(path)) {
-			writeStatic(res, 503, "text/plain", "mobile bundle not built: run pnpm --filter @linxin666/dsh-remote-web-ui build");
-			return;
-		}
-		try {
-			writeStatic(res, 200, "text/javascript", await readFile(path, "utf8"));
-		} catch {
-			writeStatic(res, 500, "text/plain", "failed to read the mobile bundle");
+		if (bundleBody === void 0) {
+			const path = mobileBundlePath();
+			if (!existsSync(path)) {
+				writeStatic(res, 503, "text/plain", "mobile bundle not built: run pnpm --filter @linxin666/dsh-remote-web-ui build");
+				return;
+			}
+			try {
+				bundleBody = await readFile(path, "utf8");
+			} catch {
+				writeStatic(res, 500, "text/plain", "failed to read the mobile bundle");
+				return;
+			}
 		}
+		writeStatic(res, 200, "text/javascript", bundleBody);
 	};
 	const handleIcon = async (_req, res) => {
 		const path = appleTouchIconPath();
@@ -1147,10 +1164,6 @@ function makeMobileApiRoutes(deps) {
 	const gateOk = (req) => {
 		return touchDeviceFor(req);
 	};
-	const writeJson = (res, status, body) => {
-		res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
-		res.end(JSON.stringify(body));
-	};
 	const handleMethod = async (req, res) => {
 		if (req.method !== "POST") {
 			res.writeHead(405);
@@ -1227,10 +1240,12 @@ function makeMobileApiRoutes(deps) {
 			return;
 		}
 		try {
-			const response = await dispatch(apiProxy, method, parsed?.payload, rpcId);
-			writeJson(res, 200, response);
+			const abort = new AbortController();
+			res.on("close", () => {
+				if (!res.writableEnded) abort.abort();
+			});
+			writeJson(res, 200, await dispatch(apiProxy, method, parsed?.payload, rpcId, abort.signal));
 		} catch (error) {
-			const message = error instanceof Error ? error.message : String(error);
 			writeJson(res, 200, {
 				type: "server-response",
 				rpcId,
@@ -1238,7 +1253,7 @@ function makeMobileApiRoutes(deps) {
 					ok: false,
 					error: {
 						code: "internal",
-						message
+						message: error instanceof Error ? error.message : String(error)
 					}
 				}
 			});
@@ -1305,18 +1320,10 @@ function makeMobileApiRoutes(deps) {
 }
 /** Read a request body as JSON (bounded). */
 async function readJsonBody(req) {
-	const chunks = [];
-	let size = 0;
-	for await (const chunk of req) {
-		const buffer = chunk;
-		size += buffer.length;
-		if (size > 64 * 1024) throw new Error("body too large");
-		chunks.push(buffer);
-	}
-	return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+	return readBoundedJson(req, 64 * 1024);
 }
 /** Dispatch one allowlisted method through the host ApiProxy. */
-async function dispatch(apiProxy, method, payload, rpcId) {
+async function dispatch(apiProxy, method, payload, rpcId, signal) {
 	const request = {
 		rpcId: RpcId(rpcId),
 		payload
@@ -1354,7 +1361,7 @@ async function dispatch(apiProxy, method, payload, rpcId) {
 	if (method === "workspace.list") return wrap(await apiProxy.workspace.list(request));
 	if (method === "session.create") return wrap(await apiProxy.sessions.create(request));
 	if (method === "session.history") return wrap(await apiProxy.sessions.history(request));
-	if (method === "session.search") return wrap(await apiProxy.sessions.search(request, new AbortController().signal));
+	if (method === "session.search") return wrap(await apiProxy.sessions.search(request, signal ?? new AbortController().signal));
 	if (method === "session.prompt") return wrap(await apiProxy.sessions.prompt(request));
 	if (method === "session.models") return wrap(await apiProxy.sessions.models(request));
 	if (method === "session.selectModel") return wrap(await apiProxy.sessions.selectModel(request));
@@ -1802,10 +1809,11 @@ async function checkUpdates(deps) {
 		outdated: false
 	};
 	const names = [anchor, ...familyChildren(manifest)];
+	const latestList = await Promise.all(names.map((name) => deps.fetchLatest(name)));
 	const packages = [];
 	let probeFailures = 0;
-	for (const name of names) {
-		const latest = await deps.fetchLatest(name);
+	names.forEach((name, index) => {
+		const latest = latestList[index];
 		if (latest === void 0) probeFailures++;
 		const current = readInstalledVersion(deps.resolve, name);
 		packages.push({
@@ -1814,7 +1822,7 @@ async function checkUpdates(deps) {
 			latest,
 			outdated: latest !== void 0 && latest !== current && compareVersions(latest, current) > 0
 		});
-	}
+	});
 	const error = probeFailures === names.length && names.length > 0 ? "registry-unreachable" : void 0;
 	return {
 		mode: linked ? "link" : "npm",
@@ -2061,15 +2069,6 @@ const UPDATE_PATHS = {
 	status: "/api/update/status",
 	run: "/api/update/run"
 };
-/** One JSON response. */
-function writeJson(res, status, body) {
-	const payload = JSON.stringify(body);
-	res.writeHead(status, {
-		"content-type": "application/json; charset=utf-8",
-		"referrer-policy": "no-referrer"
-	});
-	res.end(payload);
-}
 /**
 * Build the /api/update route family.
 * @param deps - fence + check/run seams.
@@ -2117,6 +2116,47 @@ function makeUpdateRoutes(deps) {
 	}];
 }
 //#endregion
+//#region src/mount-once.ts
+/**
+* Host single-instance guard shared by the plugin family. The family bundle
+* (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+* the loader accepts a standalone install of the same package side by side;
+* without this guard the second instance would still re-register the same
+* webserver routes, tools, settings namespaces, and system-prompt sections
+* and fail the boot. mountOnce makes the second host apply a no-op for the
+* lifetime of the first instance (the browser half is already deduped by
+* package name in the client module host).
+*
+* The registry rides a global symbol so two module instances of the same
+* package (npm copy vs repository link) still share one verdict. cordis
+* `ctx.effect` runs its callback immediately and treats the callback's
+* return value as the fiber disposer, so the unmarker is returned, not run.
+*/
+const MOUNTED = Symbol.for("dsh-web-ui.mounted-plugins");
+function mountedSet() {
+	const registry = globalThis;
+	return registry[MOUNTED] ??= /* @__PURE__ */ new Set();
+}
+/**
+* Wrap a cordis plugin apply so the package runs at most once per process.
+* The first mount registers normally and unmarks when its fiber disposes;
+* any later mount of the same package name is a no-op.
+* @param packageName - npm package identity shared by every install source.
+* @param fn - the original plugin apply.
+* @returns an apply of the same shape.
+*/
+function mountOnce(packageName, fn) {
+	return ((...args) => {
+		const mounted = mountedSet();
+		if (mounted.has(packageName)) return;
+		mounted.add(packageName);
+		args[0]?.effect?.(() => () => {
+			mounted.delete(packageName);
+		});
+		return fn(...args);
+	});
+}
+//#endregion
 //#region src/index.ts
 /**
 * Mobile remote control for the dsh web GUI — host half. Mounts the pairing
@@ -2167,7 +2207,8 @@ const DEFAULTS = {
 * @param ctx - host plugin context carrying webServer.
 * @param config - resolved plugin config (schema defaults applied by the loader).
 */
-function apply(ctx, config) {
+const apply = mountOnce("@linxin666/dsh-remote-web-ui", applyImpl);
+function applyImpl(ctx, config) {
 	const resolved = {
 		tokenTtlMs: config?.tokenTtlMs ?? DEFAULTS.tokenTtlMs,
 		offlineAfterMs: config?.offlineAfterMs ?? DEFAULTS.offlineAfterMs,

package/lib/mobile.js

@@ -13429,7 +13429,17 @@ function foldEvents(events, existing) {
 		if (event.seq <= watermark) continue;
 		applyEvent(state, event);
 	}
-	return [...state.messages].sort((a, b) => a.seq - b.seq || (a.id < b.id ? -1 : 1));
+	const out = state.messages;
+	let ordered = true;
+	for (let index = 1; index < out.length; index += 1) {
+		const prev = out[index - 1];
+		const current = out[index];
+		if (prev.seq > current.seq || prev.seq === current.seq && prev.id >= current.id) {
+			ordered = false;
+			break;
+		}
+	}
+	return ordered ? out : [...out].sort((a, b) => a.seq - b.seq || (a.id < b.id ? -1 : 1));
 }
 //#endregion
 //#region src/mobile/markdown.ts
@@ -13450,15 +13460,18 @@ function escapeHtml(text) {
 }
 /**
 * Guard a raw link/image target against dangerous protocols. Returns the
-* (trimmed) raw string when safe, else null. Only http:, https:, mailto:
-* and fragment anchors (#...) are allowed; anything with another scheme
-* — javascript:, data:, vbscript:, etc. — is rejected so the value never
-* reaches dangerouslySetInnerHTML.
+* (trimmed) raw string when safe, else null. Only http:, https:, mailto:,
+* fragment anchors (#...) and strictly relative paths are allowed; anything
+* with another scheme — javascript:, data:, vbscript:, etc. — or a
+* protocol-relative //host target (the browser resolves it against the
+* current scheme, reaching an arbitrary origin) is rejected so the value
+* never reaches dangerouslySetInnerHTML.
 */
 function safeUrl(raw) {
 	const trimmed = raw.trim();
 	if (trimmed === "") return null;
 	if (trimmed.startsWith("#")) return trimmed;
+	if (trimmed.startsWith("//")) return null;
 	const scheme = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(trimmed);
 	if (scheme === null) return trimmed;
 	const name = scheme[1].toLowerCase();