@linxin666/dsh-remote-web-ui 0.1.19 → 0.2.0

package/lib/mobile.js

@@ -11958,7 +11958,7 @@ function superRefine(fn, params) {
 	return /* @__PURE__ */ _superRefine(fn, params);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.6_8335eca05d5647f26dcc0c8fd5a39ec0/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/rpc.schema.js
+//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.7_36988429fa7c61ceeac966dddad3597f/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/rpc.schema.js
 /**
 * Message-layer zod schemas: the four wire full forms + error body +
 * carrier receipt. The payload slot is unknown in the full-form schemas — business payloads
@@ -12139,11 +12139,6 @@ const rpcErrorSchema = discriminatedUnion("code", [
 		message: string(),
 		details: object({ ns: string() })
 	}),
-	object({
-		code: literal("settings-not-exposed"),
-		message: string(),
-		details: object({ ns: string() })
-	}),
 	object({
 		code: literal("settings-conflict"),
 		message: string(),
@@ -12272,7 +12267,7 @@ union([object({ accepted: literal(true) }), object({
 	reason: union([literal("not-pending"), literal("bad-response")])
 })]);
 //#endregion
-//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.6_8335eca05d5647f26dcc0c8fd5a39ec0/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/session-search.js
+//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.7_36988429fa7c61ceeac966dddad3597f/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/session-search.js
 /**
 * Return the longest prefix containing at most `maximum` Unicode code points.
 * @param value - text to bound.
@@ -12290,7 +12285,7 @@ function truncateUnicodeCodePoints(value, maximum) {
 	return value;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.6_8335eca05d5647f26dcc0c8fd5a39ec0/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/sessions.schema.js
+//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.7_36988429fa7c61ceeac966dddad3597f/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/sessions.schema.js
 /**
 * sessions domain zod schemas (names derived from map keys: sessionListRequestSchema /
 * sessionListValueSchema). SessionEvent passthrough = strict envelope (type/seq/time) + wide
@@ -12526,7 +12521,7 @@ object({ accepted: literal(true) });
 object({ sessionId: sessionIdSchema });
 object({ accepted: literal(true) });
 //#endregion
-//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.6_8335eca05d5647f26dcc0c8fd5a39ec0/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/approvals.schema.js
+//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.7_36988429fa7c61ceeac966dddad3597f/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/approvals.schema.js
 /**
 * approvals domain zod schemas (respond is a client-response; the payload schema serves
 * the /api/respond endpoint's second parse after routing via the pending table).
@@ -12560,7 +12555,7 @@ const taskViewSchema = object({
 	finishedAt: number().int().nonnegative().optional()
 });
 //#endregion
-//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.6_8335eca05d5647f26dcc0c8fd5a39ec0/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/workspace.schema.js
+//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.7_36988429fa7c61ceeac966dddad3597f/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/workspace.schema.js
 /**
 * workspace domain zod schemas (names derived from map keys). The
 * WorkspaceId brand cast lives in sessions.schema (see the note there) and
@@ -12606,7 +12601,7 @@ object({ workspace: workspaceViewSchema });
 object({ sessionId: sessionIdSchema });
 object({ archivedSessionIds: array(sessionIdSchema) });
 //#endregion
-//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.6_8335eca05d5647f26dcc0c8fd5a39ec0/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/events.schema.js
+//#region ../../node_modules/.pnpm/@deepseek-ai+dsh-host-apiproxy@0.1.0-rc.7_36988429fa7c61ceeac966dddad3597f/node_modules/@deepseek-ai/dsh-host-apiproxy/lib/types/api/events.schema.js
 /**
 * events domain zod schemas: MuxFrame / HostFrame unions (discriminatedUnion('type')).
 * A frame is the payload slot of the ServerRequest full form; the SessionEvent inside
@@ -13429,7 +13424,17 @@ function foldEvents(events, existing) {
 		if (event.seq <= watermark) continue;
 		applyEvent(state, event);
 	}
-	return [...state.messages].sort((a, b) => a.seq - b.seq || (a.id < b.id ? -1 : 1));
+	const out = state.messages;
+	let ordered = true;
+	for (let index = 1; index < out.length; index += 1) {
+		const prev = out[index - 1];
+		const current = out[index];
+		if (prev.seq > current.seq || prev.seq === current.seq && prev.id >= current.id) {
+			ordered = false;
+			break;
+		}
+	}
+	return ordered ? out : [...out].sort((a, b) => a.seq - b.seq || (a.id < b.id ? -1 : 1));
 }
 //#endregion
 //#region src/mobile/markdown.ts
@@ -13450,15 +13455,18 @@ function escapeHtml(text) {
 }
 /**
 * Guard a raw link/image target against dangerous protocols. Returns the
-* (trimmed) raw string when safe, else null. Only http:, https:, mailto:
-* and fragment anchors (#...) are allowed; anything with another scheme
-* — javascript:, data:, vbscript:, etc. — is rejected so the value never
-* reaches dangerouslySetInnerHTML.
+* (trimmed) raw string when safe, else null. Only http:, https:, mailto:,
+* fragment anchors (#...) and strictly relative paths are allowed; anything
+* with another scheme — javascript:, data:, vbscript:, etc. — or a
+* protocol-relative //host target (the browser resolves it against the
+* current scheme, reaching an arbitrary origin) is rejected so the value
+* never reaches dangerouslySetInnerHTML.
 */
 function safeUrl(raw) {
 	const trimmed = raw.trim();
 	if (trimmed === "") return null;
 	if (trimmed.startsWith("#")) return trimmed;
+	if (trimmed.startsWith("//")) return null;
 	const scheme = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(trimmed);
 	if (scheme === null) return trimmed;
 	const name = scheme[1].toLowerCase();
@@ -15123,6 +15131,154 @@ function WorkspaceView({ initialWorkspaceId, onPick }) {
 	});
 }
 //#endregion
+//#region src/mobile/pairing.ts
+const MOBILE_ROOT = "/m/";
+/** Parse a pairing token or a copied pairing link without following its origin. */
+function parseMobilePairInput(value) {
+	const trimmed = value.trim();
+	if (trimmed === "") return void 0;
+	try {
+		const url = new URL(trimmed);
+		const token = url.searchParams.get("pair");
+		if (token === null || token === "") return void 0;
+		const workspaceId = url.searchParams.get("workspace");
+		return {
+			token,
+			...workspaceId !== null && workspaceId !== "" ? { workspaceId } : {}
+		};
+	} catch {
+		return { token: trimmed };
+	}
+}
+/** Build the safe, token-free mobile destination after successful pairing. */
+function mobilePairPath(workspaceId) {
+	return workspaceId === void 0 ? MOBILE_ROOT : "/m/?workspace=" + encodeURIComponent(workspaceId);
+}
+/** Accept one pairing token on this exact browser or installed-web-app context. */
+async function acceptMobilePair(token, fetcher = fetch) {
+	try {
+		const response = await fetcher("/api/pair/accept", {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({ token })
+		});
+		if (response.ok) return { ok: true };
+		if (response.status === 404) return {
+			ok: false,
+			message: "配对链接无效或已过期。"
+		};
+		if (response.status === 409) return {
+			ok: false,
+			message: "配对链接已被使用。"
+		};
+		return {
+			ok: false,
+			message: "此设备无法使用该配对链接。"
+		};
+	} catch {
+		return {
+			ok: false,
+			message: "无法连接到配对服务。"
+		};
+	}
+}
+/** Consume a QR pairing token before the mobile application starts making RPC calls. */
+async function consumeMobilePairUrl(href, fetcher = fetch) {
+	let url;
+	try {
+		url = new URL(href);
+	} catch {
+		return { kind: "none" };
+	}
+	const token = url.searchParams.get("pair");
+	if (token === null || token === "") return { kind: "none" };
+	const workspaceId = url.searchParams.get("workspace");
+	const path = mobilePairPath(workspaceId === null || workspaceId === "" ? void 0 : workspaceId);
+	const result = await acceptMobilePair(token, fetcher);
+	return result.ok ? {
+		kind: "accepted",
+		path
+	} : {
+		kind: "failed",
+		path,
+		message: result.message
+	};
+}
+//#endregion
+//#region src/mobile/PairRequiredView.tsx
+/** Device-pairing gate for installed mobile web-app contexts with isolated storage. */
+/** Collect a fresh desktop-issued pairing link when this client has no paired cookie. */
+function PairRequiredView({ initialError, onPaired }) {
+	const [value, setValue] = (0, import_react.useState)("");
+	const [error, setError] = (0, import_react.useState)(initialError);
+	const [submitting, setSubmitting] = (0, import_react.useState)(false);
+	const submit = async (event) => {
+		event.preventDefault();
+		const input = parseMobilePairInput(value);
+		if (input === void 0) {
+			setError("请输入有效的配对链接。");
+			return;
+		}
+		setSubmitting(true);
+		setError(void 0);
+		const result = await acceptMobilePair(input.token);
+		setSubmitting(false);
+		if (!result.ok) {
+			setError(result.message);
+			return;
+		}
+		onPaired(mobilePairPath(input.workspaceId));
+	};
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("main", {
+		className: "mobile mobile-pair",
+		"aria-labelledby": "mobile-pair-title",
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("form", {
+			className: "mobile-pairCard",
+			onSubmit: (event) => {
+				submit(event);
+			},
+			children: [
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)("h1", {
+					id: "mobile-pair-title",
+					className: "mobile-title",
+					children: "设备配对"
+				}),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+					className: "mobile-muted",
+					children: "粘贴桌面端复制的配对链接以连接此设备。"
+				}),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)("label", {
+					className: "mobile-pairLabel",
+					htmlFor: "mobile-pair-link",
+					children: "配对链接"
+				}),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)("input", {
+					id: "mobile-pair-link",
+					className: "mobile-pairInput",
+					value,
+					onChange: (event) => {
+						setValue(event.target.value);
+					},
+					autoComplete: "off",
+					autoCapitalize: "off",
+					spellCheck: false
+				}),
+				error === void 0 ? null : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+					className: "mobile-error",
+					role: "alert",
+					children: error
+				}),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+					className: "mobile-new mobile-pairSubmit",
+					type: "submit",
+					disabled: submitting,
+					children: submitting ? "正在配对" : "配对"
+				})
+			]
+		})
+	});
+}
+//#endregion
 //#region src/mobile/views/App.tsx
 /**
 * Mobile surface root: the view state machine (workspaces → sessions →
@@ -15159,11 +15315,60 @@ function formatTime(epochMs) {
 	if (date.toDateString() === yesterday.toDateString()) return `昨天 ${clock}`;
 	return `${String(date.getMonth() + 1)}月${String(date.getDate())}日 ${clock}`;
 }
-/**
-* The surface root.
-* @returns the app tree.
-*/
-function App() {
+/** Whether the mobile gateway rejected this browser for lack of a paired cookie. */
+function isUnpairedMobileError(error) {
+	return error instanceof RpcTransportError && error.message === "HTTP 403";
+}
+/** Classify an initial mobile preference failure without treating outage as authorization. */
+function mobilePairStateForError(error) {
+	return isUnpairedMobileError(error) ? "unpaired" : "unavailable";
+}
+/** Gate the independent mobile bundle until its own browser context is paired. */
+function App({ initialPairError }) {
+	const [pairState, setPairState] = (0, import_react.useState)("checking");
+	(0, import_react.useEffect)(() => {
+		let current = true;
+		fetchMobilePreferences().then(() => {
+			if (current) setPairState("paired");
+		}, (error) => {
+			if (current) setPairState(mobilePairStateForError(error));
+		});
+		return () => {
+			current = false;
+		};
+	}, []);
+	if (pairState === "checking") return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("main", {
+		className: "mobile mobile-empty",
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+			className: "mobile-muted",
+			children: "正在连接..."
+		})
+	});
+	if (pairState === "unpaired") return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(PairRequiredView, {
+		initialError: initialPairError,
+		onPaired: (path) => {
+			window.location.replace(path);
+		}
+	});
+	if (pairState === "unavailable") return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("main", {
+		className: "mobile mobile-empty",
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+			className: "mobile-error",
+			role: "alert",
+			children: "无法连接到运行中的 DSH host。"
+		}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+			className: "mobile-new",
+			type: "button",
+			onClick: () => {
+				window.location.reload();
+			},
+			children: "重试"
+		})]
+	});
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(PairedApp, {});
+}
+/** The existing remote mobile surface, mounted only after device pairing succeeds. */
+function PairedApp() {
 	const [route, setRoute] = (0, import_react.useState)({ kind: "workspaces" });
 	const [initialWorkspaceId, setInitialWorkspaceId] = (0, import_react.useState)(() => mobileWorkspaceTarget(window.location.search));
 	const muxRef = (0, import_react.useRef)(void 0);
@@ -16270,7 +16475,66 @@ body {
     transition: none;
   }
 }
+
+/* ── installed-app pairing ───────────────────────────────────────────── */
+
+.mobile-pair {
+  min-height: 100dvh;
+  display: grid;
+  place-items: center;
+  padding: 24px;
+}
+
+.mobile-pairCard {
+  display: grid;
+  width: min(100%, 420px);
+  gap: 12px;
+  padding: 24px;
+  border: 1px solid var(--m-border);
+  border-radius: 12px;
+  background: var(--m-bg-raised);
+  box-shadow: var(--m-shadow-raise);
+}
+
+.mobile-pairLabel {
+  color: var(--m-text-secondary);
+  font-size: 13px;
+  font-weight: 600;
+}
+
+.mobile-pairInput {
+  width: 100%;
+  min-height: 42px;
+  box-sizing: border-box;
+  padding: 9px 12px;
+  border: 1px solid var(--m-border);
+  border-radius: 8px;
+  background: var(--m-bg-input);
+  color: var(--m-text);
+  font: inherit;
+  outline: none;
+}
+
+.mobile-pairInput:focus-visible {
+  border-color: var(--m-accent);
+  box-shadow: 0 0 0 2px var(--m-bg), 0 0 0 4px var(--m-accent);
+}
+
+.mobile-pairSubmit {
+  width: 100%;
+}
 `;
+const MOBILE_SERVICE_WORKER_URL = "/m/service-worker.js";
+/** Register the mobile shell worker when the current browser supports it. */
+async function registerMobilePwa(serviceWorker = typeof navigator === "undefined" ? void 0 : navigator.serviceWorker) {
+	if (serviceWorker === void 0) return;
+	try {
+		await serviceWorker.register(MOBILE_SERVICE_WORKER_URL, {
+			scope: "/m/",
+			updateViaCache: "none"
+		});
+	} catch {}
+}
 //#endregion
 //#region src/mobile/index.tsx
 /**
@@ -16288,7 +16552,17 @@ style.textContent = mobileCss;
 document.head.appendChild(style);
 const root = document.getElementById("root");
 if (root === null) throw new Error("mobile: #root missing");
-(0, import_client.createRoot)(root).render(/* @__PURE__ */ (0, import_jsx_runtime.jsx)(App, {}));
+bootMobile(root);
+async function bootMobile(mount) {
+	const pair = await consumeMobilePairUrl(window.location.href);
+	if (pair.kind === "accepted") {
+		window.location.replace(pair.path);
+		return;
+	}
+	if (pair.kind === "failed") window.history.replaceState(null, "", pair.path);
+	registerMobilePwa();
+	(0, import_client.createRoot)(mount).render(/* @__PURE__ */ (0, import_jsx_runtime.jsx)(App, { initialPairError: pair.kind === "failed" ? pair.message : void 0 }));
+}
 //#endregion
 
 //# sourceMappingURL=mobile.js.map