@linxin666/dsh-remote-web-ui 0.2.9 → 0.3.0

package/lib/types/paired-model-catalog.js

@@ -0,0 +1,252 @@
+import { z } from 'zod';
+import { readCookie } from "./gate.js";
+import { readBoundedJson, writeJson } from "./http.js";
+import { isTrustedApiRequest, publicHostOf } from "./routes.js";
+const MAX_BODY_BYTES = 16 * 1024;
+const MAX_IDENTIFIER_LENGTH = 160;
+const MAX_DISPLAY_NAME_LENGTH = 240;
+const MAX_TOKEN_LIMIT = 10_000_000;
+const REASONING_EFFORTS = ['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
+const stringField = (max) => z.string().trim().min(1).max(max).refine(value => !/[\r\n\0]/.test(value), 'must not contain a newline or NUL');
+const providerSchema = z.object({ provider: stringField(MAX_IDENTIFIER_LENGTH) }).strict();
+const modelSchema = z.object({
+    id: stringField(MAX_IDENTIFIER_LENGTH),
+    name: stringField(MAX_DISPLAY_NAME_LENGTH).optional(),
+    contextWindow: z.number().int().safe().positive().max(MAX_TOKEN_LIMIT).optional(),
+    maxTokens: z.number().int().safe().positive().max(MAX_TOKEN_LIMIT).optional(),
+    reasoningEfforts: z.array(z.enum(REASONING_EFFORTS)).min(1).refine(efforts => efforts.every((effort, index) => index === 0 || REASONING_EFFORTS.indexOf(efforts[index - 1]) < REASONING_EFFORTS.indexOf(effort)), 'reasoning efforts must be unique and in canonical order').optional(),
+}).strict();
+const upsertSchema = z.object({ provider: stringField(MAX_IDENTIFIER_LENGTH), model: modelSchema }).strict();
+export const PAIRED_MODEL_CATALOG_PATHS = {
+    catalog: '/api/pair/model-catalog',
+    discover: '/api/pair/model-catalog/discover',
+    upsert: '/api/pair/model-catalog/upsert',
+};
+let rpcSequence = 0;
+function request(payload) {
+    rpcSequence += 1;
+    return { rpcId: `paired-model-catalog-${Date.now().toString(36)}-${rpcSequence.toString(36)}`, payload };
+}
+function isRecord(value) { return typeof value === 'object' && value !== null && !Array.isArray(value); }
+function valueOf(response) { return response.result.ok ? response.result.value : undefined; }
+function errorCode(response) { return response.result.ok ? undefined : response.result.error.code; }
+function reject(res, status, error) { writeJson(res, status, { error }); }
+function publicProviderId(value) {
+    const normalized = value.replace(/[\r\n\0]/g, ' ').trim().slice(0, MAX_IDENTIFIER_LENGTH);
+    return normalized === '' ? 'unknown' : normalized;
+}
+function publicCatalog(value) {
+    return {
+        groups: value.groups.map(group => ({ id: group.id, name: group.name, models: group.models.map(model => ({
+                id: model.id, name: model.name,
+                ...model.description === undefined ? {} : { description: model.description },
+                ...model.reasoning === undefined ? {} : { reasoning: model.reasoning },
+            })) })),
+        failures: value.failures.map(failure => ({
+            id: failure.id,
+            name: failure.name,
+            message: `model catalog unavailable for provider ${publicProviderId(failure.id)}`,
+        })),
+    };
+}
+function publicCandidates(models) {
+    return models.map(model => ({ id: model.id,
+        ...model.name === undefined ? {} : { name: model.name },
+        ...model.contextWindow === undefined ? {} : { contextWindow: model.contextWindow },
+        ...model.maxTokens === undefined ? {} : { maxTokens: model.maxTokens },
+    }));
+}
+function fieldsOf(model, includeId) {
+    const fields = {
+        ...includeId ? { id: model.id } : {},
+        ...model.name === undefined ? {} : { name: model.name },
+        ...model.contextWindow === undefined ? {} : { contextWindow: model.contextWindow },
+        ...model.maxTokens === undefined ? {} : { maxTokens: model.maxTokens },
+    };
+    if (model.reasoningEfforts !== undefined)
+        fields.reasoningEfforts = Object.fromEntries(model.reasoningEfforts.map(effort => [effort, effort === 'off' ? null : effort]));
+    return fields;
+}
+function groupFor(catalog, provider) { return catalog.groups.find(group => group.id === provider); }
+async function readCatalog(apiProxy) {
+    try {
+        return valueOf(await apiProxy.llm.models(request({})));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Resolve one exact active llm-pi-ai provider address, never an input-supplied path. */
+async function eligibleProvider(apiProxy, requested) {
+    let providersResponse;
+    let settingsResponse;
+    try {
+        providersResponse = await apiProxy.llm.providers(request({}));
+        settingsResponse = await apiProxy.settings.describe(request({}));
+    }
+    catch {
+        return { status: 502, error: 'model catalog capability is unavailable' };
+    }
+    const providers = valueOf(providersResponse);
+    const settings = valueOf(settingsResponse);
+    if (providers === undefined || settings === undefined)
+        return { status: 502, error: 'model catalog capability is unavailable' };
+    const route = providers.providers.find(candidate => candidate.provider === requested);
+    if (route === undefined)
+        return { status: 404, error: `unknown provider ${requested}` };
+    if (!settings.writable || !route.active || route.settingsNs !== 'llm-pi-ai' || route.settingsPath.length !== 2
+        || route.settingsPath[0] !== 'providers' || route.settingsPath[1] !== requested)
+        return { status: 403, error: `provider ${requested} is not eligible for the paired model catalog` };
+    const namespace = settings.namespaces.find(candidate => candidate.ns === 'llm-pi-ai');
+    const root = namespace !== undefined && isRecord(namespace.value) ? namespace.value : undefined;
+    const providersValue = root !== undefined && isRecord(root.providers) ? root.providers : undefined;
+    const profile = providersValue !== undefined && isRecord(providersValue[requested]) ? providersValue[requested] : undefined;
+    if (namespace === undefined || profile === undefined)
+        return { status: 403, error: `provider ${requested} is not eligible for the paired model catalog` };
+    return { provider: { provider: requested, displayName: route.displayName, namespace, profile } };
+}
+function updatedModels(existing, model) {
+    const next = existing.map(entry => isRecord(entry) ? { ...entry } : entry);
+    const index = next.findIndex(entry => isRecord(entry) && entry.id === model.id);
+    const patch = fieldsOf(model, true);
+    if (index >= 0 && isRecord(next[index]))
+        next[index] = { ...next[index], ...patch };
+    else
+        next.push(patch);
+    return next;
+}
+function mutationPlan(profile, provider, model, catalog) {
+    if (Array.isArray(profile.models))
+        return { path: ['providers', provider, 'models'], value: updatedModels(profile.models, model) };
+    const group = groupFor(catalog, provider);
+    if (group?.models.some(entry => entry.id === model.id) === true) {
+        const overrides = isRecord(profile.modelOverrides) ? profile.modelOverrides : undefined;
+        const current = overrides?.[model.id];
+        const existing = isRecord(current) ? current : {};
+        return { path: ['providers', provider, 'modelOverrides', model.id], value: { ...existing, ...fieldsOf(model, false) } };
+    }
+    if (group === undefined || catalog.failures.some(failure => failure.id === provider))
+        return undefined;
+    return { path: ['providers', provider, 'models'], value: [...group.models.map(entry => ({ id: entry.id })), fieldsOf(model, true)] };
+}
+function paired(req, service) {
+    const deviceId = readCookie(req.headers.cookie, service.config.cookieName);
+    return deviceId !== undefined && service.touchDevice(deviceId);
+}
+async function bodyOf(req, schema) {
+    try {
+        return schema.parse(await readBoundedJson(req, MAX_BODY_BYTES));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Build the narrow paired-device model catalog routes. */
+export function makePairedModelCatalogRoutes(deps) {
+    const { service, apiProxy, lanAddresses } = deps;
+    /** Same fence as the /api/pair family: loopback, the advertised LAN literals, or the configured public host. */
+    const fence = (req) => {
+        const publicHost = publicHostOf(service.publicBaseUrl);
+        return isTrustedApiRequest(req, publicHost === undefined ? lanAddresses : [...lanAddresses, publicHost]);
+    };
+    const gate = (req, res) => {
+        if (!fence(req)) {
+            req.resume();
+            reject(res, 403, 'paired model catalog is not reachable for this origin');
+            return false;
+        }
+        if (!paired(req, service)) {
+            req.resume();
+            reject(res, 403, 'paired model catalog requires a live paired device');
+            return false;
+        }
+        return true;
+    };
+    const catalog = async (req, res) => {
+        if (!gate(req, res))
+            return;
+        if (req.method !== 'GET')
+            return reject(res, 405, 'method not allowed');
+        let providersResponse;
+        let settingsResponse;
+        try {
+            providersResponse = await apiProxy.llm.providers(request({}));
+            settingsResponse = await apiProxy.settings.describe(request({}));
+        }
+        catch {
+            return reject(res, 502, 'model catalog capability is unavailable');
+        }
+        const providers = valueOf(providersResponse);
+        const settings = valueOf(settingsResponse);
+        if (providers === undefined || settings === undefined)
+            return reject(res, 502, 'model catalog capability is unavailable');
+        const namespace = settings.namespaces.find(candidate => candidate.ns === 'llm-pi-ai');
+        const providerMap = namespace !== undefined && isRecord(namespace.value) && isRecord(namespace.value.providers) ? namespace.value.providers : undefined;
+        const eligible = settings.writable && providerMap !== undefined ? providers.providers.filter(candidate => candidate.active && candidate.settingsNs === 'llm-pi-ai'
+            && candidate.settingsPath.length === 2 && candidate.settingsPath[0] === 'providers' && candidate.settingsPath[1] === candidate.provider && isRecord(providerMap[candidate.provider]))
+            .map(candidate => ({ provider: candidate.provider, displayName: candidate.displayName })) : [];
+        writeJson(res, 200, { capability: 'paired-model-catalog', providers: eligible });
+    };
+    const discover = async (req, res) => {
+        if (!gate(req, res))
+            return;
+        if (req.method !== 'POST')
+            return reject(res, 405, 'method not allowed');
+        const body = await bodyOf(req, providerSchema);
+        if (body === undefined)
+            return reject(res, 400, 'invalid model catalog request');
+        const eligible = await eligibleProvider(apiProxy, body.provider);
+        if (eligible.provider === undefined)
+            return reject(res, eligible.status ?? 502, eligible.error ?? 'model catalog capability is unavailable');
+        try {
+            const result = valueOf(await apiProxy.llm.discoverModels(request({ settingsNs: 'llm-pi-ai', provider: eligible.provider.provider })));
+            if (result === undefined)
+                return reject(res, 502, `model discovery failed for provider ${eligible.provider.provider}`);
+            writeJson(res, 200, { models: publicCandidates(result.models) });
+        }
+        catch {
+            reject(res, 502, `model discovery failed for provider ${eligible.provider.provider}`);
+        }
+    };
+    const upsert = async (req, res) => {
+        if (!gate(req, res))
+            return;
+        if (req.method !== 'POST')
+            return reject(res, 405, 'method not allowed');
+        const body = await bodyOf(req, upsertSchema);
+        if (body === undefined)
+            return reject(res, 400, 'invalid model catalog request');
+        const eligible = await eligibleProvider(apiProxy, body.provider);
+        if (eligible.provider === undefined)
+            return reject(res, eligible.status ?? 502, eligible.error ?? 'model catalog capability is unavailable');
+        const before = await readCatalog(apiProxy);
+        if (before === undefined)
+            return reject(res, 502, `model catalog is unavailable for provider ${body.provider}`);
+        const plan = mutationPlan(eligible.provider.profile, body.provider, body.model, before);
+        if (plan === undefined)
+            return reject(res, 502, `model catalog is unavailable for provider ${body.provider}`);
+        let mutation;
+        try {
+            mutation = await apiProxy.settings.mutate(request({ ns: 'llm-pi-ai', expectedRevision: eligible.provider.namespace.revision, ops: [{ op: 'set', path: plan.path, value: plan.value }] }));
+        }
+        catch {
+            return reject(res, 502, `model update failed for provider ${body.provider}`);
+        }
+        const code = errorCode(mutation);
+        if (code === 'settings-conflict')
+            return reject(res, 409, `model update conflicted for provider ${body.provider}`);
+        if (code === 'settings-rejected')
+            return reject(res, 422, `model update was rejected for provider ${body.provider}`);
+        if (code !== undefined)
+            return reject(res, 502, `model update failed for provider ${body.provider}`);
+        const after = await readCatalog(apiProxy);
+        if (after === undefined)
+            return reject(res, 502, `model catalog is unavailable for provider ${body.provider}`);
+        writeJson(res, 200, publicCatalog(after));
+    };
+    return [
+        { kind: 'exact', path: PAIRED_MODEL_CATALOG_PATHS.catalog, handler: catalog },
+        { kind: 'exact', path: PAIRED_MODEL_CATALOG_PATHS.discover, handler: discover },
+        { kind: 'exact', path: PAIRED_MODEL_CATALOG_PATHS.upsert, handler: upsert },
+    ];
+}

package/lib/types/pairing.d.ts

@@ -147,10 +147,13 @@ export interface PairingClock {
 /** Real clock/entropy: 32 random hex chars per token. */
 export declare const defaultClock: PairingClock;
 /**
- * The pairing state machine. All mutations notify state listeners after the
- * commit point that makes them true, and notification dedupes against the
- * last emitted snapshot — time-driven transitions (a device aging offline)
- * surface on the next sweep without any mutation.
+ * The pairing state machine. Structural mutations issue/accept/stop/revoke
+ * and config updates (LAN bases, tunnel, posture) notify state listeners
+ * after the commit point that makes them true, and notification dedupes
+ * against the last emitted snapshot. Presence-only updates (touchDevice /
+ * heartbeat) just mark the store dirty and broadcast on the next sweep,
+ * which also surfaces time-driven transitions (a device aging offline)
+ * without any mutation.
  */
 export declare class PairingService {
     config: PairingConfig;
@@ -259,6 +262,12 @@ export declare class PairingService {
      * The api/gate path: record activity for a device id and report whether
      * the request may proceed. Unknown or revoked ids (including any device
      * after stop() or idle expiry) are refused.
+     *
+     * Presence refreshes are throttled on purpose: every gated request (and
+     * the mobile SSE keepalive) lands here, so a broadcast per call would fan
+     * a full snapshot out to every status stream on the hot path. The refresh
+     * only updates lastSeenAt and marks the store dirty; the snapshot reaches
+     * listeners at the next sweep() (structural changes notify immediately).
      * @param deviceId - the cookie value of the requesting device.
      * @returns true when the device session is live and was refreshed.
      */

package/lib/types/pairing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEnD,uDAAuD;AACvD,MAAM,MAAM,YAAY;AACtB,mEAAmE;AACjE,cAAc;AAChB,oEAAoE;GAClE,SAAS;AACX,4DAA4D;GAC1D,SAAS;AACX,sDAAsD;GACpD,WAAW;AACb,6EAA6E;GAC3E,cAAc,CAAA;AAElB,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;IAChB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,QAAQ,EAAE,OAAO,CAAA;IACjB,sFAAsF;IACtF,EAAE,EAAE,MAAM,CAAA;IACV,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,QAA0B,CAAA;AAK7D,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAA;IAClB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAA;IAClB,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAA;IACf,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;IACxC,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAA;IACnB,yEAAyE;IACzE,YAAY,EAAE,OAAO,CAAA;IACrB,oEAAoE;IACpE,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mEAAmE;IACnE,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,OAAO,EAAE,cAAc,EAAE,CAAA;CAC1B;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAA;IACtB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,sCAAsC;AACtC,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAAA;CAAE,CAAA;AAE3C,yEAAyE;AACzE,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C;;OAEG;gBACS,OAAO,EAAE,MAAM;CAI5B;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,GAAG,IAAI,MAAM,CAAA;IACb,WAAW,IAAI,MAAM,CAAA;CACtB;AAED,yDAAyD;AACzD,eAAO,MAAM,YAAY,EAAE,YAG1B,CAAA;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IAwBhB,MAAM,EAAE,aAAa;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAxBxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiD;IAC3E,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,WAAW,CAAI;IACvB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAA4B;IAC5C,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAoB;IACtC,mEAAmE;IACnE,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,OAAO,CAA6B;IAC5C,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAQ;IAErB;;;;;OAKG;gBAEM,MAAM,EAAE,aAAa,EACX,KAAK,GAAE,YAA2B;IAKrD;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA6BrB,8EAA8E;IAC9E,OAAO,CAAC,iBAAiB;IAOzB,iEAAiE;IACjE,OAAO,CAAC,SAAS;IAajB;;;;;;;;;OASG;IACH,OAAO,CAAC,OAAO;IAgBf,wFAAwF;IACxF,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED,oFAAoF;IACpF,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIlD,wEAAwE;IACxE,IAAI,YAAY,IAAI,MAAM,EAAE,CAE3B;IAED,6EAA6E;IAC7E,WAAW,CAAC,OAAO,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI;IAKxE,+DAA+D;IAC/D,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,2EAA2E;IAC3E,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAK/C,qFAAqF;IACrF,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,IAAI;IAKvD,iEAAiE;IACjE,UAAU,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI;IAKvD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAwBnF;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY;IA2BvD;;;;OAIG;IACH,IAAI,IAAI,IAAI;IAQZ;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQjC;;;;;;OAMG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAStC,oEAAoE;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC;;;;;OAKG;IACH,KAAK,IAAI,IAAI;IAMb,2EAA2E;IAC3E,QAAQ,IAAI,eAAe;IAqB3B,+EAA+E;IAC/E,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC,yEAAyE;IACzE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI;IAKlE,OAAO,CAAC,WAAW;IASnB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,MAAM;CAaf;AAwCD,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK7E"}
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEnD,uDAAuD;AACvD,MAAM,MAAM,YAAY;AACtB,mEAAmE;AACjE,cAAc;AAChB,oEAAoE;GAClE,SAAS;AACX,4DAA4D;GAC1D,SAAS;AACX,sDAAsD;GACpD,WAAW;AACb,6EAA6E;GAC3E,cAAc,CAAA;AAElB,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;IAChB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,QAAQ,EAAE,OAAO,CAAA;IACjB,sFAAsF;IACtF,EAAE,EAAE,MAAM,CAAA;IACV,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,QAA0B,CAAA;AAK7D,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAA;IAClB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAA;IAClB,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAA;IACf,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;IACxC,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAA;IACnB,yEAAyE;IACzE,YAAY,EAAE,OAAO,CAAA;IACrB,oEAAoE;IACpE,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mEAAmE;IACnE,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,OAAO,EAAE,cAAc,EAAE,CAAA;CAC1B;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAA;IACtB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,sCAAsC;AACtC,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAAA;CAAE,CAAA;AAE3C,yEAAyE;AACzE,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C;;OAEG;gBACS,OAAO,EAAE,MAAM;CAI5B;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,GAAG,IAAI,MAAM,CAAA;IACb,WAAW,IAAI,MAAM,CAAA;CACtB;AAED,yDAAyD;AACzD,eAAO,MAAM,YAAY,EAAE,YAG1B,CAAA;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAc;IAwBhB,MAAM,EAAE,aAAa;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAxBxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiD;IAC3E,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,WAAW,CAAI;IACvB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAA4B;IAC5C,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAoB;IACtC,mEAAmE;IACnE,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,OAAO,CAA6B;IAC5C,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAQ;IAErB;;;;;OAKG;gBAEM,MAAM,EAAE,aAAa,EACX,KAAK,GAAE,YAA2B;IAKrD;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA6BrB,8EAA8E;IAC9E,OAAO,CAAC,iBAAiB;IAOzB,iEAAiE;IACjE,OAAO,CAAC,SAAS;IAajB;;;;;;;;;OASG;IACH,OAAO,CAAC,OAAO;IAgBf,wFAAwF;IACxF,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED,oFAAoF;IACpF,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIlD,wEAAwE;IACxE,IAAI,YAAY,IAAI,MAAM,EAAE,CAE3B;IAED,6EAA6E;IAC7E,WAAW,CAAC,OAAO,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI;IAKxE,+DAA+D;IAC/D,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,2EAA2E;IAC3E,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAK/C,qFAAqF;IACrF,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,IAAI;IAKvD,iEAAiE;IACjE,UAAU,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI;IAKvD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAwBnF;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY;IA2BvD;;;;OAIG;IACH,IAAI,IAAI,IAAI;IAQZ;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQjC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQtC,oEAAoE;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC;;;;;OAKG;IACH,KAAK,IAAI,IAAI;IAMb,2EAA2E;IAC3E,QAAQ,IAAI,eAAe;IAqB3B,+EAA+E;IAC/E,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC,yEAAyE;IACzE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI;IAKlE,OAAO,CAAC,WAAW;IASnB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,MAAM;CAaf;AAwCD,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK7E"}

package/lib/types/pairing.js

@@ -39,10 +39,13 @@ export const defaultClock = {
     randomToken: () => randomBytes(16).toString('hex'),
 };
 /**
- * The pairing state machine. All mutations notify state listeners after the
- * commit point that makes them true, and notification dedupes against the
- * last emitted snapshot — time-driven transitions (a device aging offline)
- * surface on the next sweep without any mutation.
+ * The pairing state machine. Structural mutations issue/accept/stop/revoke
+ * and config updates (LAN bases, tunnel, posture) notify state listeners
+ * after the commit point that makes them true, and notification dedupes
+ * against the last emitted snapshot. Presence-only updates (touchDevice /
+ * heartbeat) just mark the store dirty and broadcast on the next sweep,
+ * which also surfaces time-driven transitions (a device aging offline)
+ * without any mutation.
  */
 export class PairingService {
     config;
@@ -297,6 +300,12 @@ export class PairingService {
      * The api/gate path: record activity for a device id and report whether
      * the request may proceed. Unknown or revoked ids (including any device
      * after stop() or idle expiry) are refused.
+     *
+     * Presence refreshes are throttled on purpose: every gated request (and
+     * the mobile SSE keepalive) lands here, so a broadcast per call would fan
+     * a full snapshot out to every status stream on the hot path. The refresh
+     * only updates lastSeenAt and marks the store dirty; the snapshot reaches
+     * listeners at the next sweep() (structural changes notify immediately).
      * @param deviceId - the cookie value of the requesting device.
      * @returns true when the device session is live and was refreshed.
      */
@@ -306,7 +315,6 @@ export class PairingService {
             return false;
         session.lastSeenAt = this.clock.now();
         this.dirty = true;
-        this.notify();
         return true;
     }
     /** Explicit presence heartbeat (the phone's client sends these). */

package/lib/types/remote-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-api.d.ts","sourceRoot":"","sources":["../../src/remote-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAclD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAgBvD,iCAAiC;AACjC,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,OAAO,EAAE,cAAc,CAAA;IACvB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;CACjD;AAWD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUhE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAsBxE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,EAAE,CA2CnE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAWzF;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,EAAE,CA2BjF"}
+{"version":3,"file":"remote-api.d.ts","sourceRoot":"","sources":["../../src/remote-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAalD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAgBvD,iCAAiC;AACjC,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,OAAO,EAAE,cAAc,CAAA;IACvB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;CACjD;AAWD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUhE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAsBxE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,EAAE,CA2CnE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAWzF;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,EAAE,CA2BjF"}

package/lib/types/remote-channel-boot.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Parse-time remote-channel boot patch (issue #987): the browser-half patch
+ * (client/remote-channel.ts) installs when this plugin's boot entry runs,
+ * but `dsh-client-connection` boots earlier and opens its event streams
+ * unrewritten — on a non-loopback origin the SDK fence rejects them and the
+ * workspace list never loads. The host therefore inlines this classic script
+ * right after the opening <head> tag (webserver/index-inject), so the
+ * fetch/WebSocket/EventSource/src rewrite is active before ANY boot entry
+ * executes. The plugin's client apply later adopts the installed seat
+ * (hooks + pending unpaired signal) instead of patching twice.
+ *
+ * The rewrite decisions are generated from REMOTE_CHANNEL_RULES, the same
+ * data the browser patch consumes — the two cannot drift apart. The script
+ * self-skips on loopback origins and never throws.
+ * @module @linxin666/dsh-remote-web-ui/remote-channel-boot
+ */
+import { type RemoteChannelRules } from './remote-channel-rules.ts';
+/**
+ * Build the inline boot script. The result contains no `</script` sequence
+ * (the injection contract) and installs a {@link RemoteChannelBootSeat} on
+ * the window global.
+ */
+export declare function buildRemoteChannelBootScript(rules?: RemoteChannelRules): string;
+/** The script this plugin contributes; built once from the live rules. */
+export declare const REMOTE_CHANNEL_BOOT_SCRIPT: string;
+//# sourceMappingURL=remote-channel-boot.d.ts.map

package/lib/types/remote-channel-boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-channel-boot.d.ts","sourceRoot":"","sources":["../../src/remote-channel-boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAoD,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAErH;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,GAAE,kBAAyC,GAAG,MAAM,CAuGrG;AAED,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B,EAAE,MAAuC,CAAA"}

package/lib/types/remote-channel-boot.js

@@ -0,0 +1,128 @@
+/**
+ * Parse-time remote-channel boot patch (issue #987): the browser-half patch
+ * (client/remote-channel.ts) installs when this plugin's boot entry runs,
+ * but `dsh-client-connection` boots earlier and opens its event streams
+ * unrewritten — on a non-loopback origin the SDK fence rejects them and the
+ * workspace list never loads. The host therefore inlines this classic script
+ * right after the opening <head> tag (webserver/index-inject), so the
+ * fetch/WebSocket/EventSource/src rewrite is active before ANY boot entry
+ * executes. The plugin's client apply later adopts the installed seat
+ * (hooks + pending unpaired signal) instead of patching twice.
+ *
+ * The rewrite decisions are generated from REMOTE_CHANNEL_RULES, the same
+ * data the browser patch consumes — the two cannot drift apart. The script
+ * self-skips on loopback origins and never throws.
+ * @module @linxin666/dsh-remote-web-ui/remote-channel-boot
+ */
+import { REMOTE_CHANNEL_BOOT_GLOBAL, REMOTE_CHANNEL_RULES } from "./remote-channel-rules.js";
+/**
+ * Build the inline boot script. The result contains no `</script` sequence
+ * (the injection contract) and installs a {@link RemoteChannelBootSeat} on
+ * the window global.
+ */
+export function buildRemoteChannelBootScript(rules = REMOTE_CHANNEL_RULES) {
+    const json = JSON.stringify(rules);
+    const seat = JSON.stringify(REMOTE_CHANNEL_BOOT_GLOBAL);
+    // Modern syntax is fine: module scripts already gate the GUI to current
+    // browsers. Keep everything inside the IIFE and fail closed.
+    return '(function(){' +
+        'try{' +
+        'var w=window,loc=w.location,h=loc.hostname;' +
+        // Loopback origins keep the original paths (mirrors isLoopbackHostname).
+        "if(h==='localhost'||h==='::1'||/^127(\\.\\d{1,3}){3}$/.test(h))return;" +
+        'var R=' + json + ';' +
+        'function sf(p){' +
+        'if(p.indexOf(R.pairPrefix)===0)return false;' +
+        'if(p.indexOf(R.updatePrefix)===0)return false;' +
+        'if(p===R.desktopLauncherPrefix||p.indexOf(R.desktopLauncherPrefix+"/")===0)return false;' +
+        'if(p===R.settingsBridgePrefix||p.indexOf(R.settingsBridgePrefix+"/")===0)return false;' +
+        'if(p.indexOf(R.apiPrefix)===0)return true;' +
+        'if(p.indexOf(R.sidebarPrefix)===0||p==="/sidebar")return true;' +
+        'if(p.indexOf(R.gitPrefix)===0||p==="/git")return true;' +
+        'if(p.indexOf(R.petPrefix)===0||p==="/pet")return true;' +
+        'return false}' +
+        'function sw(p){return R.wsPaths.indexOf(p)!==-1}' +
+        'function rp(p){return R.remotePrefix+p}' +
+        'function so(u){return u.origin===loc.origin}' +
+        'function rr(raw){var u;try{u=new URL(raw,loc.href)}catch(e){return raw}' +
+        'if(u.origin!==loc.origin)return raw;' +
+        'if(!sf(u.pathname))return raw;' +
+        'u.pathname=rp(u.pathname);' +
+        'if(raw.charAt(0)==="/"&&raw.charAt(1)!=="/")return u.pathname+u.search+u.hash;' +
+        'return u.href}' +
+        // The unpaired code reader mirrors isUnpairedDenied's envelope shapes.
+        'function uc(v){' +
+        'if(typeof v!=="object"||v===null)return undefined;' +
+        'var n=v.result;' +
+        'if(typeof n==="object"&&n!==null){' +
+        'var e=n.error;' +
+        'if(typeof e==="object"&&e!==null&&typeof e.code==="string")return e.code}' +
+        'var t=v.error;' +
+        'if(typeof t==="object"&&t!==null&&typeof t.code==="string")return t.code;' +
+        'return undefined}' +
+        'var seat={onUnpaired:null,onPaired:null,pendingUnpaired:false,restore:function(){}};' +
+        'function denied(res){' +
+        'if(res.status!==403)return false;' +
+        'return res.clone().json().then(function(b){return uc(b)==="unpaired"}).catch(function(){return false})}' +
+        'function signal(unpaired){' +
+        'if(unpaired){' +
+        'if(seat.onUnpaired)seat.onUnpaired();else seat.pendingUnpaired=true' +
+        '}else{' +
+        'seat.pendingUnpaired=false;' +
+        'if(seat.onPaired)seat.onPaired()}}' +
+        'var of=w.fetch;' +
+        'w.fetch=function(input,init){' +
+        'var raw=typeof input==="string"||input instanceof URL?input.toString():input.url;' +
+        'var url=new URL(raw,loc.href);' +
+        'if(so(url)&&sf(url.pathname)){' +
+        'var next=new URL(url);' +
+        'next.pathname=rp(url.pathname);' +
+        'var target=typeof input==="string"||input instanceof URL?next.toString():new Request(next,input);' +
+        'return Promise.resolve(of.call(w,target,init)).then(function(res){' +
+        // denied() is sync-false for non-403 and a promise otherwise.
+        'void Promise.resolve(denied(res)).then(signal);' +
+        'return res})}' +
+        'return of.call(w,input,init)};' +
+        'var OW=w.WebSocket;' +
+        'w.WebSocket=function(url,protocols){' +
+        'var p=new URL(url.toString(),loc.href);' +
+        'var o=p.protocol==="wss:"?"https://"+p.host:p.protocol==="ws:"?"http://"+p.host:"";' +
+        'if(o!==""&&o===loc.origin&&sw(p.pathname)){' +
+        'var nx=new URL(p);' +
+        'nx.pathname=rp(p.pathname);' +
+        'return protocols!==undefined?new OW(nx,protocols):new OW(nx)}' +
+        'return protocols!==undefined?new OW(url,protocols):new OW(url)};' +
+        'w.WebSocket.prototype=OW.prototype;' +
+        'w.WebSocket.CONNECTING=OW.CONNECTING;w.WebSocket.OPEN=OW.OPEN;w.WebSocket.CLOSING=OW.CLOSING;w.WebSocket.CLOSED=OW.CLOSED;' +
+        'var OE=w.EventSource;' +
+        'if(OE!==undefined){' +
+        'w.EventSource=function(url,cfg){' +
+        'var p=new URL(url.toString(),loc.href);' +
+        'if(so(p)&&sf(p.pathname)){' +
+        'var nx=new URL(p);' +
+        'nx.pathname=rp(p.pathname);' +
+        'return new OE(nx,cfg)}' +
+        'return new OE(url,cfg)};' +
+        'w.EventSource.prototype=OE.prototype}' +
+        // Resource src accessors (img/script/iframe), mirroring patchSrcAccessor.
+        'var restores=[];' +
+        'function patchSrc(C){' +
+        'if(C===undefined)return;' +
+        'var d=Object.getOwnPropertyDescriptor(C.prototype,"src");' +
+        'if(d===undefined||d.configurable===false||d.set===undefined)return;' +
+        'var os=d.set;' +
+        'Object.defineProperty(C.prototype,"src",{configurable:true,enumerable:d.enumerable!==false,get:d.get,set:function(v){os.call(this,rr(String(v)))}});' +
+        'restores.push(function(){Object.defineProperty(C.prototype,"src",d)})}' +
+        'patchSrc(w.HTMLImageElement);patchSrc(w.HTMLScriptElement);patchSrc(w.HTMLIFrameElement);' +
+        'seat.restore=function(){' +
+        'w.fetch=of;' +
+        'w.WebSocket=OW;' +
+        'if(OE!==undefined)w.EventSource=OE;' +
+        'for(var i=0;i<restores.length;i++)restores[i]();' +
+        'try{delete w[' + seat + ']}catch(e){w[' + seat + ']=undefined}};' +
+        'w[' + seat + ']=seat' +
+        '}catch(e){}' +
+        '})();';
+}
+/** The script this plugin contributes; built once from the live rules. */
+export const REMOTE_CHANNEL_BOOT_SCRIPT = buildRemoteChannelBootScript();

package/lib/types/remote-channel-rules.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The remote-channel rewrite contract as pure data (issue #987): both the
+ * browser patch (client/remote-channel.ts) and the parse-time boot patch
+ * (remote-channel-boot.ts, inlined into index.html by the host) decide from
+ * these tables, so the two can never drift apart.
+ * @module @linxin666/dsh-remote-web-ui/remote-channel-rules
+ */
+/** The gated mirror prefix (must match src/remote-methods.ts). */
+export declare const REMOTE_PREFIX = "/remote";
+/** Connection-plugin method prefix under the gated channel. */
+export declare const REMOTE_API_PREFIX = "/remote/api";
+/** Every decision input of the remote-channel rewrite, JSON-serializable. */
+export interface RemoteChannelRules {
+    readonly remotePrefix: string;
+    readonly apiPrefix: string;
+    readonly pairPrefix: string;
+    readonly updatePrefix: string;
+    readonly desktopLauncherPrefix: string;
+    readonly settingsBridgePrefix: string;
+    readonly sidebarPrefix: string;
+    readonly gitPrefix: string;
+    readonly petPrefix: string;
+    readonly wsPaths: readonly string[];
+}
+/** The live rule set. */
+export declare const REMOTE_CHANNEL_RULES: RemoteChannelRules;
+/** The window global the boot patch publishes its seat under. */
+export declare const REMOTE_CHANNEL_BOOT_GLOBAL = "__DSH_REMOTE_CHANNEL_BOOT__";
+/**
+ * The seat the parse-time boot patch installs: hook seats the plugin's
+ * client apply adopts, a pending-unpaired flag for signals raised before
+ * adoption, and restore() retiring the patch (also removes the global).
+ */
+export interface RemoteChannelBootSeat {
+    onUnpaired: (() => void) | null;
+    onPaired: (() => void) | null;
+    pendingUnpaired: boolean;
+    restore(): void;
+}
+//# sourceMappingURL=remote-channel-rules.d.ts.map

package/lib/types/remote-channel-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-channel-rules.d.ts","sourceRoot":"","sources":["../../src/remote-channel-rules.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,kEAAkE;AAClE,eAAO,MAAM,aAAa,YAAY,CAAA;AAEtC,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,gBAAyB,CAAA;AAEvD,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,yBAAyB;AACzB,eAAO,MAAM,oBAAoB,EAAE,kBAiBlC,CAAA;AAED,iEAAiE;AACjE,eAAO,MAAM,0BAA0B,gCAAgC,CAAA;AAEvE;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAA;IAC/B,QAAQ,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAA;IAC7B,eAAe,EAAE,OAAO,CAAA;IACxB,OAAO,IAAI,IAAI,CAAA;CAChB"}

package/lib/types/remote-channel-rules.js

@@ -0,0 +1,32 @@
+/**
+ * The remote-channel rewrite contract as pure data (issue #987): both the
+ * browser patch (client/remote-channel.ts) and the parse-time boot patch
+ * (remote-channel-boot.ts, inlined into index.html by the host) decide from
+ * these tables, so the two can never drift apart.
+ * @module @linxin666/dsh-remote-web-ui/remote-channel-rules
+ */
+/** The gated mirror prefix (must match src/remote-methods.ts). */
+export const REMOTE_PREFIX = '/remote';
+/** Connection-plugin method prefix under the gated channel. */
+export const REMOTE_API_PREFIX = `${REMOTE_PREFIX}/api`;
+/** The live rule set. */
+export const REMOTE_CHANNEL_RULES = {
+    remotePrefix: REMOTE_PREFIX,
+    apiPrefix: '/api/',
+    pairPrefix: '/api/pair/',
+    updatePrefix: '/api/update/',
+    desktopLauncherPrefix: '/api/dsh-desktop-launcher',
+    settingsBridgePrefix: '/api/dsh-web-ui-settings',
+    sidebarPrefix: '/sidebar/',
+    gitPrefix: '/git/',
+    petPrefix: '/pet/',
+    wsPaths: [
+        '/api/events.mux',
+        '/api/events.host',
+        '/sidebar/ws/terminal',
+        '/sidebar/ws/agent-terminals',
+        '/api/dsh-ssh/terminal',
+    ],
+};
+/** The window global the boot patch publishes its seat under. */
+export const REMOTE_CHANNEL_BOOT_GLOBAL = '__DSH_REMOTE_CHANNEL_BOOT__';

package/lib/types/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAgB,MAAM,KAAK,CAAA;AACrC,OAAO,EAA0B,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AAIhG;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CA6BtG;AAKD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAOxE;AAKD,8CAA8C;AAC9C,eAAO,MAAM,UAAU;;;;;;;;CAQb,CAAA;AAEV;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAA;AACF,eAAO,MAAM,mBAAmB;;iBAE9B,CAAA;AACF,eAAO,MAAM,mBAAmB;;iBAE9B,CAAA;AACF,eAAO,MAAM,uBAAuB,gCAA6B,CAAA;AA6BjE,gDAAgD;AAChD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAElD;;OAEG;gBACS,OAAO,EAAE,cAAc;IAInC,4DAA4D;IAC5D,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI;IAiBrD,kEAAkE;IAClE,IAAI,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAYrC,wCAAwC;IACxC,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAED,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,OAAO,EAAE,cAAc,CAAA;IACvB,0EAA0E;IAC1E,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IAC/B,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;CACjD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,QAAQ,EAAE,CAoO3D"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAgB,MAAM,KAAK,CAAA;AACrC,OAAO,EAA0B,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AAIhG;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CA6BtG;AAKD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAOxE;AAKD,8CAA8C;AAC9C,eAAO,MAAM,UAAU;;;;;;;;CAQb,CAAA;AAEV;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAA;AACF,eAAO,MAAM,mBAAmB;;iBAE9B,CAAA;AACF,eAAO,MAAM,mBAAmB;;iBAE9B,CAAA;AACF,eAAO,MAAM,uBAAuB,gCAA6B,CAAA;AAoBjE,gDAAgD;AAChD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAElD;;OAEG;gBACS,OAAO,EAAE,cAAc;IAInC,4DAA4D;IAC5D,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI;IAiBrD,kEAAkE;IAClE,IAAI,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAYrC,wCAAwC;IACxC,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAED,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,OAAO,EAAE,cAAc,CAAA;IACvB,0EAA0E;IAC1E,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IAC/B,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;CACjD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,QAAQ,EAAE,CAkO3D"}