@linxin666/dsh-remote-web-ui 0.2.9 → 0.3.0

package/lib/index.js

@@ -24,7 +24,7 @@ import { spawn } from "node:child_process";
 * @module @deepseek-ai/dsh-settings/redact
 */
 /** Whether a value is a plain data object the walker may recurse into. */
-function isRecord(value) {
+function isRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function walk(node, value, path, secrets) {
@@ -39,7 +39,7 @@ function walk(node, value, path, secrets) {
 	switch (node.type) {
 		case "object": {
 			const properties = node.dict ?? {};
-			const source = isRecord(value) ? value : void 0;
+			const source = isRecord$1(value) ? value : void 0;
 			const rebuilt = {};
 			if (source !== void 0) for (const [key, entry] of Object.entries(source)) {
 				if (key in properties) continue;
@@ -52,7 +52,7 @@ function walk(node, value, path, secrets) {
 			return source === void 0 && Object.keys(rebuilt).length === 0 ? value : rebuilt;
 		}
 		case "dict": {
-			if (!isRecord(value)) return value;
+			if (!isRecord$1(value)) return value;
 			const rebuilt = {};
 			for (const [key, entry] of Object.entries(value)) {
 				const stripped = walk(node.inner, entry, [...path, key], secrets);
@@ -250,10 +250,13 @@ const defaultClock = {
 	randomToken: () => randomBytes(16).toString("hex")
 };
 /**
-* The pairing state machine. All mutations notify state listeners after the
-* commit point that makes them true, and notification dedupes against the
-* last emitted snapshot — time-driven transitions (a device aging offline)
-* surface on the next sweep without any mutation.
+* The pairing state machine. Structural mutations issue/accept/stop/revoke
+* and config updates (LAN bases, tunnel, posture) notify state listeners
+* after the commit point that makes them true, and notification dedupes
+* against the last emitted snapshot. Presence-only updates (touchDevice /
+* heartbeat) just mark the store dirty and broadcast on the next sweep,
+* which also surfaces time-driven transitions (a device aging offline)
+* without any mutation.
 */
 var PairingService = class {
 	config;
@@ -491,6 +494,12 @@ var PairingService = class {
 	* The api/gate path: record activity for a device id and report whether
 	* the request may proceed. Unknown or revoked ids (including any device
 	* after stop() or idle expiry) are refused.
+	*
+	* Presence refreshes are throttled on purpose: every gated request (and
+	* the mobile SSE keepalive) lands here, so a broadcast per call would fan
+	* a full snapshot out to every status stream on the hot path. The refresh
+	* only updates lastSeenAt and marks the store dirty; the snapshot reaches
+	* listeners at the next sweep() (structural changes notify immediately).
 	* @param deviceId - the cookie value of the requesting device.
 	* @returns true when the device session is live and was refreshed.
 	*/
@@ -499,7 +508,6 @@ var PairingService = class {
 		if (session === void 0) return false;
 		session.lastSeenAt = this.clock.now();
 		this.dirty = true;
-		this.notify();
 		return true;
 	}
 	/** Explicit presence heartbeat (the phone's client sends these). */
@@ -793,18 +801,18 @@ var RemoteWebUiPairing = class extends Service {
 };
 //#endregion
 //#region src/http.ts
-/** One JSON response. */
-function writeJson(res, status, body) {
-	const payload = JSON.stringify(body);
-	res.writeHead(status, {
-		"content-type": "application/json; charset=utf-8",
-		"referrer-policy": "no-referrer"
-	});
-	res.end(payload);
-}
+/** Default body cap for readJsonBody: 64 KiB. */
+const DEFAULT_JSON_BODY_MAX_BYTES = 64 * 1024;
+/** Family-default JSON response headers; callers may append or override. */
+const JSON_HEADERS = {
+	"content-type": "application/json; charset=utf-8",
+	"referrer-policy": "no-referrer"
+};
 /**
-* Read a request body up to maxBytes and parse it as JSON.
-* @throws 'body too large' beyond the cap, or the JSON.parse error.
+* Strict bounded body reader: parse a request body of at most maxBytes as
+* JSON.
+* @throws 'body too large' past the cap, or the JSON.parse error for an
+*   invalid or empty payload.
 */
 async function readBoundedJson(req, maxBytes) {
 	const chunks = [];
@@ -817,6 +825,54 @@ async function readBoundedJson(req, maxBytes) {
 	}
 	return JSON.parse(Buffer.concat(chunks).toString("utf8"));
 }
+/**
+* Lenient bounded body reader: parse a request body as JSON, or null on an
+* empty body, invalid JSON, or a body past maxBytes (default 64 KiB).
+* Overflow destroys the request instead of draining the remainder (no drain
+* call, matching the current repo-wide behavior); callers must not keep
+* reading the request afterwards. With objectOnly, non-JSON-object payloads
+* also yield null.
+*/
+async function readJsonBody(req, opts = {}) {
+	const maxBytes = opts.maxBytes ?? DEFAULT_JSON_BODY_MAX_BYTES;
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of req) {
+		const buffer = chunk;
+		size += buffer.length;
+		if (size > maxBytes) {
+			req.destroy();
+			return null;
+		}
+		chunks.push(buffer);
+	}
+	const text = Buffer.concat(chunks).toString("utf8");
+	if (text === "") return null;
+	try {
+		const parsed = JSON.parse(text);
+		if (opts.objectOnly && !isJsonObject(parsed)) return null;
+		return parsed;
+	} catch {
+		return null;
+	}
+}
+/** Whether a value is a JSON object: typeof object, not null, not an array. */
+function isJsonObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+* Write one JSON response. Default headers are the family defaults
+* (content-type and referrer-policy); caller headers are appended or
+* override them.
+*/
+function writeJson(res, status, body, headers = {}) {
+	const payload = JSON.stringify(body);
+	res.writeHead(status, {
+		...JSON_HEADERS,
+		...headers
+	});
+	res.end(payload);
+}
 //#endregion
 //#region src/routes.ts
 /**
@@ -857,7 +913,7 @@ function isTrustedApiRequest(request, trustedHosts) {
 	}
 }
 /** Cap on pairing request bodies (tokens and workspace ids are tiny). */
-const MAX_BODY_BYTES = 4096;
+const MAX_BODY_BYTES$1 = 4096;
 /**
 * The host authority of a configured public base URL, e.g. `foo.trycloudflare.com`
 * from `https://foo.trycloudflare.com`. Undefined when the URL does not parse —
@@ -902,24 +958,16 @@ const acceptPayloadSchema = z$1.object({ token: z$1.string().default("") });
 const revokePayloadSchema = z$1.object({ deviceId: z$1.string().min(1) });
 const pairActionPayloadSchema = z$1.object({}).passthrough();
 /**
-* Parse a pair request body through schema. A missing/empty or non-object
-* body is treated as an empty object (the same way the previous manual reads
-* yielded absent fields), and a value that fails the schema returns
-* `undefined` so the caller can answer with the existing error shape.
+* Parse a pair request body through schema. A missing/empty, unparseable
+* or non-object body (shared readJsonBody with objectOnly yields null for
+* all of them) is treated as an empty object — the desktop stop/heartbeat
+* send no body — and a value that fails the schema returns `undefined` so
+* the caller can answer with the existing error shape.
 */
 function parsePairPayload(schema, body) {
 	const result = schema.safeParse(body ?? {});
 	return result.success ? result.data : void 0;
 }
-/** Read a request body up to MAX_BODY_BYTES and parse it as JSON (undefined on failure). */
-async function readJsonBody$1(req) {
-	try {
-		const parsed = await readBoundedJson(req, MAX_BODY_BYTES);
-		return typeof parsed === "object" && parsed !== null ? parsed : void 0;
-	} catch {
-		return;
-	}
-}
 /** The SSE fan-out for desktop panel status. */
 var PairingEventsStream = class {
 	streams = /* @__PURE__ */ new Set();
@@ -1023,7 +1071,10 @@ function makeRoutes(deps) {
 			});
 			return;
 		}
-		const body = await readJsonBody$1(req);
+		const body = await readJsonBody(req, {
+			maxBytes: MAX_BODY_BYTES$1,
+			objectOnly: true
+		});
 		const payload = parsePairPayload(issuePayloadSchema, body);
 		if (payload === void 0) {
 			writeJson(res, 400, {
@@ -1069,7 +1120,10 @@ function makeRoutes(deps) {
 			});
 			return;
 		}
-		const body = await readJsonBody$1(req);
+		const body = await readJsonBody(req, {
+			maxBytes: MAX_BODY_BYTES$1,
+			objectOnly: true
+		});
 		const payload = parsePairPayload(acceptPayloadSchema, body);
 		if (payload === void 0) {
 			writeJson(res, 400, {
@@ -1087,14 +1141,10 @@ function makeRoutes(deps) {
 			});
 			return;
 		}
-		res.writeHead(200, {
-			"content-type": "application/json; charset=utf-8",
-			"set-cookie": [`${service.config.cookieName}=${result.deviceId}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${String(COOKIE_MAX_AGE_SEC)}`]
-		});
-		res.end(JSON.stringify({
+		writeJson(res, 200, {
 			ok: true,
 			deviceId: result.deviceId
-		}));
+		}, { "set-cookie": [`${service.config.cookieName}=${result.deviceId}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${String(COOKIE_MAX_AGE_SEC)}`] });
 	};
 	const handleStop = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
@@ -1105,7 +1155,10 @@ function makeRoutes(deps) {
 			});
 			return;
 		}
-		const body = await readJsonBody$1(req);
+		const body = await readJsonBody(req, {
+			maxBytes: MAX_BODY_BYTES$1,
+			objectOnly: true
+		});
 		if (parsePairPayload(pairActionPayloadSchema, body) === void 0) {
 			writeJson(res, 400, {
 				ok: false,
@@ -1125,7 +1178,10 @@ function makeRoutes(deps) {
 			});
 			return;
 		}
-		const body = await readJsonBody$1(req);
+		const body = await readJsonBody(req, {
+			maxBytes: MAX_BODY_BYTES$1,
+			objectOnly: true
+		});
 		const payload = parsePairPayload(revokePayloadSchema, body);
 		if (payload === void 0) {
 			writeJson(res, 400, {
@@ -1152,7 +1208,10 @@ function makeRoutes(deps) {
 			});
 			return;
 		}
-		const body = await readJsonBody$1(req);
+		const body = await readJsonBody(req, {
+			maxBytes: MAX_BODY_BYTES$1,
+			objectOnly: true
+		});
 		if (parsePairPayload(pairActionPayloadSchema, body) === void 0) {
 			writeJson(res, 400, {
 				ok: false,
@@ -1487,6 +1546,8 @@ function makeMobileRoutes() {
 * device at a time.
 */
 const MOBILE_ALLOWLIST = /* @__PURE__ */ new Set([
+	"host.listDirectory",
+	"workspace.create",
 	"workspace.list",
 	"agentPreset.list",
 	"session.create",
@@ -1504,6 +1565,8 @@ const MOBILE_ALLOWLIST = /* @__PURE__ */ new Set([
 * settings-domain write).
 */
 const MOBILE_PREFERENCES_METHOD = "mobile.preferences";
+const MOBILE_PENDING_METHOD = "mobile.pending";
+const MOBILE_RESPOND_METHOD = "mobile.respond";
 /** One session.list page (thin phones load incrementally). */
 const SESSION_PAGE_SIZE = 20;
 /** SSE keep-alive ping cadence for the live mux stream (single connection). */
@@ -1586,7 +1649,7 @@ function makeMobileApiRoutes(deps) {
 			return;
 		}
 		const method = pathname.slice(MOBILE_API_METHOD_PREFIX.length);
-		const local = method === MOBILE_PREFERENCES_METHOD;
+		const local = method === MOBILE_PREFERENCES_METHOD || method === MOBILE_PENDING_METHOD || method === MOBILE_RESPOND_METHOD;
 		if (!MOBILE_ALLOWLIST.has(method) && !local) {
 			writeJson(res, 403, {
 				ok: false,
@@ -1599,7 +1662,7 @@ function makeMobileApiRoutes(deps) {
 		}
 		let envelope;
 		try {
-			envelope = await readJsonBody(req);
+			envelope = await readBoundedJson(req, 64 * 1024);
 		} catch {
 			writeJson(res, 400, {
 				ok: false,
@@ -1623,7 +1686,7 @@ function makeMobileApiRoutes(deps) {
 			return;
 		}
 		if (local) {
-			writeJson(res, 200, {
+			if (method === MOBILE_PREFERENCES_METHOD) writeJson(res, 200, {
 				type: "server-response",
 				rpcId,
 				result: {
@@ -1631,6 +1694,48 @@ function makeMobileApiRoutes(deps) {
 					value: { mobileEnterToSend: mobileEnterToSend() }
 				}
 			});
+			else if (method === MOBILE_PENDING_METHOD) {
+				const payload = parsed.payload;
+				writeJson(res, 200, {
+					type: "server-response",
+					rpcId,
+					result: {
+						ok: true,
+						value: deps.pendingTracker.pending(payload?.sessionId)
+					}
+				});
+			} else if (method === MOBILE_RESPOND_METHOD) {
+				const payload = parsed.payload;
+				try {
+					writeJson(res, 200, {
+						type: "server-response",
+						rpcId,
+						result: {
+							ok: true,
+							value: await apiProxy.respond({
+								type: "client-response",
+								rpcId: RpcId(payload.rpcId),
+								result: {
+									ok: true,
+									value: payload.response
+								}
+							})
+						}
+					});
+				} catch (error) {
+					writeJson(res, 200, {
+						type: "server-response",
+						rpcId,
+						result: {
+							ok: false,
+							error: {
+								code: "internal",
+								message: error instanceof Error ? error.message : String(error)
+							}
+						}
+					});
+				}
+			}
 			return;
 		}
 		try {
@@ -1661,8 +1766,13 @@ function makeMobileApiRoutes(deps) {
 			return;
 		}
 		if (!gateOk(req)) {
-			res.writeHead(403);
-			res.end("forbidden");
+			writeJson(res, 403, {
+				ok: false,
+				error: {
+					code: "unpaired",
+					message: "mobile session is not paired"
+				}
+			});
 			return;
 		}
 		res.writeHead(200, {
@@ -1694,6 +1804,7 @@ function makeMobileApiRoutes(deps) {
 			}, controller.signal);
 			for await (const frame of frames) {
 				if (closed) break;
+				deps.pendingTracker.onFrame(frame);
 				res.write(`data: ${JSON.stringify(frame)}\n\n`);
 			}
 		} catch {} finally {
@@ -1712,10 +1823,6 @@ function makeMobileApiRoutes(deps) {
 		handler: handleEvents
 	}];
 }
-/** Read a request body as JSON (bounded). */
-async function readJsonBody(req) {
-	return readBoundedJson(req, 64 * 1024);
-}
 /** Dispatch one allowlisted method through the host ApiProxy. */
 async function dispatch(apiProxy, method, payload, rpcId, signal) {
 	const request = {
@@ -1757,6 +1864,8 @@ async function dispatch(apiProxy, method, payload, rpcId, signal) {
 		result: response.result
 	});
 	if (method === "workspace.list") return wrap(await apiProxy.workspace.list(request));
+	if (method === "workspace.create") return wrap(await apiProxy.workspace.create(request));
+	if (method === "host.listDirectory") return wrap(await apiProxy.host.listDirectory(request, signal ?? new AbortController().signal));
 	if (method === "agentPreset.list") return wrap(await apiProxy.agentPresets.list(request));
 	if (method === "session.create") return wrap(await apiProxy.sessions.create(request));
 	if (method === "session.history") return wrap(await apiProxy.sessions.history(request));
@@ -1768,6 +1877,379 @@ async function dispatch(apiProxy, method, payload, rpcId, signal) {
 	throw new Error(`unhandled allowlisted method ${method}`);
 }
 //#endregion
+//#region src/mobile-pending.ts
+var PendingTracker = class {
+	sessions = /* @__PURE__ */ new Map();
+	/** Process one mux frame and update the pending state. */
+	onFrame(frame) {
+		const payload = frame.payload;
+		if (payload.type === "approval/requested") this._getOrInit(payload.sessionId).approvals.set(payload.approvalId, {
+			rpcId: frame.rpcId,
+			approvalId: payload.approvalId,
+			toolName: payload.toolName,
+			callId: payload.callId,
+			reason: payload.reason
+		});
+		else if (payload.type === "approval/resolved") {
+			const state = this.sessions.get(payload.sessionId);
+			if (state) state.approvals.delete(payload.approvalId);
+		} else if (payload.type === "question/requested") this._getOrInit(payload.sessionId).questions.push({
+			rpcId: frame.rpcId,
+			questions: payload.questions
+		});
+		else if (payload.type === "question/resolved") {
+			const state = this.sessions.get(payload.sessionId);
+			if (state) state.questions = state.questions.filter((q) => q.rpcId !== payload.questionRpcId);
+		}
+	}
+	_getOrInit(sessionId) {
+		let state = this.sessions.get(sessionId);
+		if (!state) {
+			state = {
+				approvals: /* @__PURE__ */ new Map(),
+				questions: []
+			};
+			this.sessions.set(sessionId, state);
+		}
+		return state;
+	}
+	/** Query pending items for a session. */
+	pending(sessionId) {
+		const state = this.sessions.get(sessionId);
+		if (!state) return {
+			approvals: [],
+			questions: []
+		};
+		return {
+			approvals: Array.from(state.approvals.values()),
+			questions: state.questions
+		};
+	}
+	/** Clear all pending state for a session. */
+	clear(sessionId) {
+		this.sessions.delete(sessionId);
+	}
+};
+//#endregion
+//#region src/paired-model-catalog.ts
+const MAX_BODY_BYTES = 16 * 1024;
+const MAX_IDENTIFIER_LENGTH = 160;
+const MAX_DISPLAY_NAME_LENGTH = 240;
+const MAX_TOKEN_LIMIT = 1e7;
+const REASONING_EFFORTS = [
+	"off",
+	"minimal",
+	"low",
+	"medium",
+	"high",
+	"xhigh",
+	"max"
+];
+const stringField = (max) => z$1.string().trim().min(1).max(max).refine((value) => !/[\r\n\0]/.test(value), "must not contain a newline or NUL");
+const providerSchema = z$1.object({ provider: stringField(MAX_IDENTIFIER_LENGTH) }).strict();
+const modelSchema = z$1.object({
+	id: stringField(MAX_IDENTIFIER_LENGTH),
+	name: stringField(MAX_DISPLAY_NAME_LENGTH).optional(),
+	contextWindow: z$1.number().int().safe().positive().max(MAX_TOKEN_LIMIT).optional(),
+	maxTokens: z$1.number().int().safe().positive().max(MAX_TOKEN_LIMIT).optional(),
+	reasoningEfforts: z$1.array(z$1.enum(REASONING_EFFORTS)).min(1).refine((efforts) => efforts.every((effort, index) => index === 0 || REASONING_EFFORTS.indexOf(efforts[index - 1]) < REASONING_EFFORTS.indexOf(effort)), "reasoning efforts must be unique and in canonical order").optional()
+}).strict();
+const upsertSchema = z$1.object({
+	provider: stringField(MAX_IDENTIFIER_LENGTH),
+	model: modelSchema
+}).strict();
+const PAIRED_MODEL_CATALOG_PATHS = {
+	catalog: "/api/pair/model-catalog",
+	discover: "/api/pair/model-catalog/discover",
+	upsert: "/api/pair/model-catalog/upsert"
+};
+let rpcSequence = 0;
+function request$1(payload) {
+	rpcSequence += 1;
+	return {
+		rpcId: `paired-model-catalog-${Date.now().toString(36)}-${rpcSequence.toString(36)}`,
+		payload
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function valueOf(response) {
+	return response.result.ok ? response.result.value : void 0;
+}
+function errorCode(response) {
+	return response.result.ok ? void 0 : response.result.error.code;
+}
+function reject(res, status, error) {
+	writeJson(res, status, { error });
+}
+function publicProviderId(value) {
+	const normalized = value.replace(/[\r\n\0]/g, " ").trim().slice(0, MAX_IDENTIFIER_LENGTH);
+	return normalized === "" ? "unknown" : normalized;
+}
+function publicCatalog(value) {
+	return {
+		groups: value.groups.map((group) => ({
+			id: group.id,
+			name: group.name,
+			models: group.models.map((model) => ({
+				id: model.id,
+				name: model.name,
+				...model.description === void 0 ? {} : { description: model.description },
+				...model.reasoning === void 0 ? {} : { reasoning: model.reasoning }
+			}))
+		})),
+		failures: value.failures.map((failure) => ({
+			id: failure.id,
+			name: failure.name,
+			message: `model catalog unavailable for provider ${publicProviderId(failure.id)}`
+		}))
+	};
+}
+function publicCandidates(models) {
+	return models.map((model) => ({
+		id: model.id,
+		...model.name === void 0 ? {} : { name: model.name },
+		...model.contextWindow === void 0 ? {} : { contextWindow: model.contextWindow },
+		...model.maxTokens === void 0 ? {} : { maxTokens: model.maxTokens }
+	}));
+}
+function fieldsOf(model, includeId) {
+	const fields = {
+		...includeId ? { id: model.id } : {},
+		...model.name === void 0 ? {} : { name: model.name },
+		...model.contextWindow === void 0 ? {} : { contextWindow: model.contextWindow },
+		...model.maxTokens === void 0 ? {} : { maxTokens: model.maxTokens }
+	};
+	if (model.reasoningEfforts !== void 0) fields.reasoningEfforts = Object.fromEntries(model.reasoningEfforts.map((effort) => [effort, effort === "off" ? null : effort]));
+	return fields;
+}
+function groupFor(catalog, provider) {
+	return catalog.groups.find((group) => group.id === provider);
+}
+async function readCatalog(apiProxy) {
+	try {
+		return valueOf(await apiProxy.llm.models(request$1({})));
+	} catch {
+		return;
+	}
+}
+/** Resolve one exact active llm-pi-ai provider address, never an input-supplied path. */
+async function eligibleProvider(apiProxy, requested) {
+	let providersResponse;
+	let settingsResponse;
+	try {
+		providersResponse = await apiProxy.llm.providers(request$1({}));
+		settingsResponse = await apiProxy.settings.describe(request$1({}));
+	} catch {
+		return {
+			status: 502,
+			error: "model catalog capability is unavailable"
+		};
+	}
+	const providers = valueOf(providersResponse);
+	const settings = valueOf(settingsResponse);
+	if (providers === void 0 || settings === void 0) return {
+		status: 502,
+		error: "model catalog capability is unavailable"
+	};
+	const route = providers.providers.find((candidate) => candidate.provider === requested);
+	if (route === void 0) return {
+		status: 404,
+		error: `unknown provider ${requested}`
+	};
+	if (!settings.writable || !route.active || route.settingsNs !== "llm-pi-ai" || route.settingsPath.length !== 2 || route.settingsPath[0] !== "providers" || route.settingsPath[1] !== requested) return {
+		status: 403,
+		error: `provider ${requested} is not eligible for the paired model catalog`
+	};
+	const namespace = settings.namespaces.find((candidate) => candidate.ns === "llm-pi-ai");
+	const root = namespace !== void 0 && isRecord(namespace.value) ? namespace.value : void 0;
+	const providersValue = root !== void 0 && isRecord(root.providers) ? root.providers : void 0;
+	const profile = providersValue !== void 0 && isRecord(providersValue[requested]) ? providersValue[requested] : void 0;
+	if (namespace === void 0 || profile === void 0) return {
+		status: 403,
+		error: `provider ${requested} is not eligible for the paired model catalog`
+	};
+	return { provider: {
+		provider: requested,
+		displayName: route.displayName,
+		namespace,
+		profile
+	} };
+}
+function updatedModels(existing, model) {
+	const next = existing.map((entry) => isRecord(entry) ? { ...entry } : entry);
+	const index = next.findIndex((entry) => isRecord(entry) && entry.id === model.id);
+	const patch = fieldsOf(model, true);
+	if (index >= 0 && isRecord(next[index])) next[index] = {
+		...next[index],
+		...patch
+	};
+	else next.push(patch);
+	return next;
+}
+function mutationPlan(profile, provider, model, catalog) {
+	if (Array.isArray(profile.models)) return {
+		path: [
+			"providers",
+			provider,
+			"models"
+		],
+		value: updatedModels(profile.models, model)
+	};
+	const group = groupFor(catalog, provider);
+	if (group?.models.some((entry) => entry.id === model.id) === true) {
+		const current = (isRecord(profile.modelOverrides) ? profile.modelOverrides : void 0)?.[model.id];
+		const existing = isRecord(current) ? current : {};
+		return {
+			path: [
+				"providers",
+				provider,
+				"modelOverrides",
+				model.id
+			],
+			value: {
+				...existing,
+				...fieldsOf(model, false)
+			}
+		};
+	}
+	if (group === void 0 || catalog.failures.some((failure) => failure.id === provider)) return void 0;
+	return {
+		path: [
+			"providers",
+			provider,
+			"models"
+		],
+		value: [...group.models.map((entry) => ({ id: entry.id })), fieldsOf(model, true)]
+	};
+}
+function paired(req, service) {
+	const deviceId = readCookie(req.headers.cookie, service.config.cookieName);
+	return deviceId !== void 0 && service.touchDevice(deviceId);
+}
+async function bodyOf(req, schema) {
+	try {
+		return schema.parse(await readBoundedJson(req, MAX_BODY_BYTES));
+	} catch {
+		return;
+	}
+}
+/** Build the narrow paired-device model catalog routes. */
+function makePairedModelCatalogRoutes(deps) {
+	const { service, apiProxy, lanAddresses } = deps;
+	/** Same fence as the /api/pair family: loopback, the advertised LAN literals, or the configured public host. */
+	const fence = (req) => {
+		const publicHost = publicHostOf(service.publicBaseUrl);
+		return isTrustedApiRequest(req, publicHost === void 0 ? lanAddresses : [...lanAddresses, publicHost]);
+	};
+	const gate = (req, res) => {
+		if (!fence(req)) {
+			req.resume();
+			reject(res, 403, "paired model catalog is not reachable for this origin");
+			return false;
+		}
+		if (!paired(req, service)) {
+			req.resume();
+			reject(res, 403, "paired model catalog requires a live paired device");
+			return false;
+		}
+		return true;
+	};
+	const catalog = async (req, res) => {
+		if (!gate(req, res)) return;
+		if (req.method !== "GET") return reject(res, 405, "method not allowed");
+		let providersResponse;
+		let settingsResponse;
+		try {
+			providersResponse = await apiProxy.llm.providers(request$1({}));
+			settingsResponse = await apiProxy.settings.describe(request$1({}));
+		} catch {
+			return reject(res, 502, "model catalog capability is unavailable");
+		}
+		const providers = valueOf(providersResponse);
+		const settings = valueOf(settingsResponse);
+		if (providers === void 0 || settings === void 0) return reject(res, 502, "model catalog capability is unavailable");
+		const namespace = settings.namespaces.find((candidate) => candidate.ns === "llm-pi-ai");
+		const providerMap = namespace !== void 0 && isRecord(namespace.value) && isRecord(namespace.value.providers) ? namespace.value.providers : void 0;
+		writeJson(res, 200, {
+			capability: "paired-model-catalog",
+			providers: settings.writable && providerMap !== void 0 ? providers.providers.filter((candidate) => candidate.active && candidate.settingsNs === "llm-pi-ai" && candidate.settingsPath.length === 2 && candidate.settingsPath[0] === "providers" && candidate.settingsPath[1] === candidate.provider && isRecord(providerMap[candidate.provider])).map((candidate) => ({
+				provider: candidate.provider,
+				displayName: candidate.displayName
+			})) : []
+		});
+	};
+	const discover = async (req, res) => {
+		if (!gate(req, res)) return;
+		if (req.method !== "POST") return reject(res, 405, "method not allowed");
+		const body = await bodyOf(req, providerSchema);
+		if (body === void 0) return reject(res, 400, "invalid model catalog request");
+		const eligible = await eligibleProvider(apiProxy, body.provider);
+		if (eligible.provider === void 0) return reject(res, eligible.status ?? 502, eligible.error ?? "model catalog capability is unavailable");
+		try {
+			const result = valueOf(await apiProxy.llm.discoverModels(request$1({
+				settingsNs: "llm-pi-ai",
+				provider: eligible.provider.provider
+			})));
+			if (result === void 0) return reject(res, 502, `model discovery failed for provider ${eligible.provider.provider}`);
+			writeJson(res, 200, { models: publicCandidates(result.models) });
+		} catch {
+			reject(res, 502, `model discovery failed for provider ${eligible.provider.provider}`);
+		}
+	};
+	const upsert = async (req, res) => {
+		if (!gate(req, res)) return;
+		if (req.method !== "POST") return reject(res, 405, "method not allowed");
+		const body = await bodyOf(req, upsertSchema);
+		if (body === void 0) return reject(res, 400, "invalid model catalog request");
+		const eligible = await eligibleProvider(apiProxy, body.provider);
+		if (eligible.provider === void 0) return reject(res, eligible.status ?? 502, eligible.error ?? "model catalog capability is unavailable");
+		const before = await readCatalog(apiProxy);
+		if (before === void 0) return reject(res, 502, `model catalog is unavailable for provider ${body.provider}`);
+		const plan = mutationPlan(eligible.provider.profile, body.provider, body.model, before);
+		if (plan === void 0) return reject(res, 502, `model catalog is unavailable for provider ${body.provider}`);
+		let mutation;
+		try {
+			mutation = await apiProxy.settings.mutate(request$1({
+				ns: "llm-pi-ai",
+				expectedRevision: eligible.provider.namespace.revision,
+				ops: [{
+					op: "set",
+					path: plan.path,
+					value: plan.value
+				}]
+			}));
+		} catch {
+			return reject(res, 502, `model update failed for provider ${body.provider}`);
+		}
+		const code = errorCode(mutation);
+		if (code === "settings-conflict") return reject(res, 409, `model update conflicted for provider ${body.provider}`);
+		if (code === "settings-rejected") return reject(res, 422, `model update was rejected for provider ${body.provider}`);
+		if (code !== void 0) return reject(res, 502, `model update failed for provider ${body.provider}`);
+		const after = await readCatalog(apiProxy);
+		if (after === void 0) return reject(res, 502, `model catalog is unavailable for provider ${body.provider}`);
+		writeJson(res, 200, publicCatalog(after));
+	};
+	return [
+		{
+			kind: "exact",
+			path: PAIRED_MODEL_CATALOG_PATHS.catalog,
+			handler: catalog
+		},
+		{
+			kind: "exact",
+			path: PAIRED_MODEL_CATALOG_PATHS.discover,
+			handler: discover
+		},
+		{
+			kind: "exact",
+			path: PAIRED_MODEL_CATALOG_PATHS.upsert,
+			handler: upsert
+		}
+	];
+}
+//#endregion
 //#region src/loopback-proxy.ts
 /** WebSocket handshake headers forwarded to the loopback upstream. */
 const WS_FORWARD_HEADERS = [
@@ -1881,13 +2363,13 @@ function proxyLoopbackUpgrade(req, socket, head, port, upstreamPath) {
 * client half can pin them without importing the host SDK graph.
 */
 /** Gated mirror of same-origin fenced paths (`/remote` + original pathname). */
-const REMOTE_PREFIX = "/remote";
+const REMOTE_PREFIX$1 = "/remote";
 /** Connection-plugin method prefix under the gated channel. */
-const REMOTE_API_PREFIX = `${REMOTE_PREFIX}/api`;
+const REMOTE_API_PREFIX$1 = `${REMOTE_PREFIX$1}/api`;
 /** WebSocket event-stream paths served by the channel (client rewrites to these). */
 const REMOTE_API_PATHS = {
-	mux: `${REMOTE_API_PREFIX}/events.mux`,
-	host: `${REMOTE_API_PREFIX}/events.host`
+	mux: `${REMOTE_API_PREFIX$1}/events.mux`,
+	host: `${REMOTE_API_PREFIX$1}/events.host`
 };
 /**
 * Exact upgrade paths registered on webServer (the SDK matches upgrades by
@@ -1896,9 +2378,9 @@ const REMOTE_API_PATHS = {
 const REMOTE_UPGRADE_PATHS = [
 	REMOTE_API_PATHS.mux,
 	REMOTE_API_PATHS.host,
-	`${REMOTE_PREFIX}/sidebar/ws/terminal`,
-	`${REMOTE_PREFIX}/sidebar/ws/agent-terminals`,
-	`${REMOTE_API_PREFIX}/dsh-ssh/terminal`
+	`${REMOTE_PREFIX$1}/sidebar/ws/terminal`,
+	`${REMOTE_PREFIX$1}/sidebar/ws/agent-terminals`,
+	`${REMOTE_API_PREFIX$1}/dsh-ssh/terminal`
 ];
 /**
 * Loopback-only methods of the host API surface, mirrored from
@@ -2026,7 +2508,7 @@ function makeRemoteApiRoutes(deps) {
 	};
 	return [{
 		kind: "prefix",
-		path: REMOTE_PREFIX,
+		path: REMOTE_PREFIX$1,
 		handler
 	}];
 }
@@ -2993,6 +3475,86 @@ function mountOnce(packageName, fn) {
 		return fn(...args);
 	});
 }
+/** The live rule set. */
+const REMOTE_CHANNEL_RULES = {
+	remotePrefix: "/remote",
+	apiPrefix: "/api/",
+	pairPrefix: "/api/pair/",
+	updatePrefix: "/api/update/",
+	desktopLauncherPrefix: "/api/dsh-desktop-launcher",
+	settingsBridgePrefix: "/api/dsh-web-ui-settings",
+	sidebarPrefix: "/sidebar/",
+	gitPrefix: "/git/",
+	petPrefix: "/pet/",
+	wsPaths: [
+		"/api/events.mux",
+		"/api/events.host",
+		"/sidebar/ws/terminal",
+		"/sidebar/ws/agent-terminals",
+		"/api/dsh-ssh/terminal"
+	]
+};
+/** The window global the boot patch publishes its seat under. */
+const REMOTE_CHANNEL_BOOT_GLOBAL = "__DSH_REMOTE_CHANNEL_BOOT__";
+//#endregion
+//#region src/remote-channel-boot.ts
+/**
+* Parse-time remote-channel boot patch (issue #987): the browser-half patch
+* (client/remote-channel.ts) installs when this plugin's boot entry runs,
+* but `dsh-client-connection` boots earlier and opens its event streams
+* unrewritten — on a non-loopback origin the SDK fence rejects them and the
+* workspace list never loads. The host therefore inlines this classic script
+* right after the opening <head> tag (webserver/index-inject), so the
+* fetch/WebSocket/EventSource/src rewrite is active before ANY boot entry
+* executes. The plugin's client apply later adopts the installed seat
+* (hooks + pending unpaired signal) instead of patching twice.
+*
+* The rewrite decisions are generated from REMOTE_CHANNEL_RULES, the same
+* data the browser patch consumes — the two cannot drift apart. The script
+* self-skips on loopback origins and never throws.
+* @module @linxin666/dsh-remote-web-ui/remote-channel-boot
+*/
+/**
+* Build the inline boot script. The result contains no `<\/script` sequence
+* (the injection contract) and installs a {@link RemoteChannelBootSeat} on
+* the window global.
+*/
+function buildRemoteChannelBootScript(rules = REMOTE_CHANNEL_RULES) {
+	const json = JSON.stringify(rules);
+	const seat = JSON.stringify(REMOTE_CHANNEL_BOOT_GLOBAL);
+	return "(function(){try{var w=window,loc=w.location,h=loc.hostname;if(h==='localhost'||h==='::1'||/^127(\\.\\d{1,3}){3}$/.test(h))return;var R=" + json + ";function sf(p){if(p.indexOf(R.pairPrefix)===0)return false;if(p.indexOf(R.updatePrefix)===0)return false;if(p===R.desktopLauncherPrefix||p.indexOf(R.desktopLauncherPrefix+\"/\")===0)return false;if(p===R.settingsBridgePrefix||p.indexOf(R.settingsBridgePrefix+\"/\")===0)return false;if(p.indexOf(R.apiPrefix)===0)return true;if(p.indexOf(R.sidebarPrefix)===0||p===\"/sidebar\")return true;if(p.indexOf(R.gitPrefix)===0||p===\"/git\")return true;if(p.indexOf(R.petPrefix)===0||p===\"/pet\")return true;return false}function sw(p){return R.wsPaths.indexOf(p)!==-1}function rp(p){return R.remotePrefix+p}function so(u){return u.origin===loc.origin}function rr(raw){var u;try{u=new URL(raw,loc.href)}catch(e){return raw}if(u.origin!==loc.origin)return raw;if(!sf(u.pathname))return raw;u.pathname=rp(u.pathname);if(raw.charAt(0)===\"/\"&&raw.charAt(1)!==\"/\")return u.pathname+u.search+u.hash;return u.href}function uc(v){if(typeof v!==\"object\"||v===null)return undefined;var n=v.result;if(typeof n===\"object\"&&n!==null){var e=n.error;if(typeof e===\"object\"&&e!==null&&typeof e.code===\"string\")return e.code}var t=v.error;if(typeof t===\"object\"&&t!==null&&typeof t.code===\"string\")return t.code;return undefined}var seat={onUnpaired:null,onPaired:null,pendingUnpaired:false,restore:function(){}};function denied(res){if(res.status!==403)return false;return res.clone().json().then(function(b){return uc(b)===\"unpaired\"}).catch(function(){return false})}function signal(unpaired){if(unpaired){if(seat.onUnpaired)seat.onUnpaired();else seat.pendingUnpaired=true}else{seat.pendingUnpaired=false;if(seat.onPaired)seat.onPaired()}}var of=w.fetch;w.fetch=function(input,init){var raw=typeof input===\"string\"||input instanceof URL?input.toString():input.url;var url=new URL(raw,loc.href);if(so(url)&&sf(url.pathname)){var next=new URL(url);next.pathname=rp(url.pathname);var target=typeof input===\"string\"||input instanceof URL?next.toString():new Request(next,input);return Promise.resolve(of.call(w,target,init)).then(function(res){void Promise.resolve(denied(res)).then(signal);return res})}return of.call(w,input,init)};var OW=w.WebSocket;w.WebSocket=function(url,protocols){var p=new URL(url.toString(),loc.href);var o=p.protocol===\"wss:\"?\"https://\"+p.host:p.protocol===\"ws:\"?\"http://\"+p.host:\"\";if(o!==\"\"&&o===loc.origin&&sw(p.pathname)){var nx=new URL(p);nx.pathname=rp(p.pathname);return protocols!==undefined?new OW(nx,protocols):new OW(nx)}return protocols!==undefined?new OW(url,protocols):new OW(url)};w.WebSocket.prototype=OW.prototype;w.WebSocket.CONNECTING=OW.CONNECTING;w.WebSocket.OPEN=OW.OPEN;w.WebSocket.CLOSING=OW.CLOSING;w.WebSocket.CLOSED=OW.CLOSED;var OE=w.EventSource;if(OE!==undefined){w.EventSource=function(url,cfg){var p=new URL(url.toString(),loc.href);if(so(p)&&sf(p.pathname)){var nx=new URL(p);nx.pathname=rp(p.pathname);return new OE(nx,cfg)}return new OE(url,cfg)};w.EventSource.prototype=OE.prototype}var restores=[];function patchSrc(C){if(C===undefined)return;var d=Object.getOwnPropertyDescriptor(C.prototype,\"src\");if(d===undefined||d.configurable===false||d.set===undefined)return;var os=d.set;Object.defineProperty(C.prototype,\"src\",{configurable:true,enumerable:d.enumerable!==false,get:d.get,set:function(v){os.call(this,rr(String(v)))}});restores.push(function(){Object.defineProperty(C.prototype,\"src\",d)})}patchSrc(w.HTMLImageElement);patchSrc(w.HTMLScriptElement);patchSrc(w.HTMLIFrameElement);seat.restore=function(){w.fetch=of;w.WebSocket=OW;if(OE!==undefined)w.EventSource=OE;for(var i=0;i<restores.length;i++)restores[i]();try{delete w[" + seat + "]}catch(e){w[" + seat + "]=undefined}};w[" + seat + "]=seat}catch(e){}})();";
+}
+/** The script this plugin contributes; built once from the live rules. */
+const REMOTE_CHANNEL_BOOT_SCRIPT = buildRemoteChannelBootScript();
+//#endregion
+//#region src/uuid-polyfill.ts
+/**
+* Polyfill for crypto.randomUUID for non-secure contexts (LAN HTTP)
+* where the browser does not expose crypto.randomUUID.
+*
+* The script string is injected as an inline <script> in the desktop HTML
+* head so the SDK's mintRpcId() sees a working randomUUID even on plain
+* http:// origins (#1024).
+*/
+const UUID_POLYFILL_SCRIPT = [
+	"(function(){",
+	"var g=typeof globalThis!==\"undefined\"?globalThis:typeof window!==\"undefined\"?window:self;",
+	"if(typeof g.crypto===\"undefined\"){g.crypto={};}",
+	"if(typeof g.crypto.randomUUID!==\"function\"){",
+	"g.crypto.randomUUID=function(){",
+	"var a=new Uint8Array(16);",
+	"if(g.crypto.getRandomValues){g.crypto.getRandomValues(a);}",
+	"else{for(var j=0;j<16;j++){a[j]=Math.random()*256|0;}}",
+	"a[6]=(a[6]&0x0f)|0x40;",
+	"a[8]=(a[8]&0x3f)|0x80;",
+	"var h=\"\",x=\"0123456789abcdef\";",
+	"for(var i=0;i<16;i++){h+=x[a[i]>>4]+x[a[i]&0x0f];",
+	"if(i===3||i===5||i===7||i===9)h+=\"-\";}",
+	"return h;",
+	"};",
+	"}",
+	"})();"
+].join("");
 //#endregion
 //#region src/index.ts
 /**
@@ -3198,8 +3760,14 @@ function applyImpl(ctx, config) {
 		...apiProxy !== void 0 ? makeMobileApiRoutes({
 			service,
 			apiProxy,
+			pendingTracker: new PendingTracker(),
 			mobileEnterToSend: () => resolve().mobileEnterToSend
 		}) : [],
+		...apiProxy !== void 0 ? makePairedModelCatalogRoutes({
+			service,
+			apiProxy,
+			lanAddresses
+		}) : [],
 		...makeRemoteApiRoutes({
 			service,
 			port: ctx.webServer.port,
@@ -3294,6 +3862,22 @@ function applyImpl(ctx, config) {
 		}
 		runPostureProbe();
 	};
+	ctx.effect(() => ctx.on("webserver/index-inject", (table) => {
+		table.push({
+			kind: "script",
+			placement: "head",
+			text: UUID_POLYFILL_SCRIPT
+		});
+	}), "remote-web-ui: uuid polyfill");
+	ctx.effect(() => ctx.on("webserver/index-inject", (table) => {
+		const value = resolve();
+		if (!value.enabled || !value.requirePairingForLan) return;
+		table.push({
+			kind: "script",
+			placement: "head",
+			text: REMOTE_CHANNEL_BOOT_SCRIPT
+		});
+	}), "remote-web-ui: remote channel boot patch");
 	installSettingsSection(ctx, REMOTE_WEB_UI_SETTINGS_NAMESPACE, Config, config ?? {}, {
 		setSource: (source) => {
 			current = source;