@mrrisega/dsh-remote 0.6.0-beta.2 → 0.6.0-beta.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrisega/dsh-remote",
-  "version": "0.6.0-beta.2",
+  "version": "0.6.0-beta.3",
   "description": "手机远程控制 DeepSeek Harness · Remote control DeepSeek Harness (dsh web) from any phone browser — 100% 全功能 App 级体验：发消息、看工具执行、审批权限、改设置、管凭据，含特权操作，免内网穿透。一条命令安装 npx @mrrisega/dsh-remote。Mobile remote control for DSH, self-host or SaaS, no server needed on LAN.",
   "keywords": [
     "deepseek-harness",

package/packages/dsh-remote-web/lib/client.js

@@ -320,6 +320,18 @@ window.__ModuleLoader__.load({
       return api(path, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(data || {}) });
     };
 
+    /** 一次性访问 url → 升级/续费页 url（带同一 auth，进入后即登录态到 /app/promo）。 */
+    function promoUrlOf(u) {
+      var s = String(u || "");
+      if (/\/app\/\?auth=/i.test(s)) return s.replace(/\/app\/\?auth=/i, "/app/promo?auth=");
+      try {
+        var m = /auth=([^&#]+)/.exec(s);
+        var origin = s.split("/app")[0];
+        if (m && origin) return origin + "/app/promo?auth=" + m[1];
+      } catch (e) { /* fallthrough */ }
+      return s;
+    }
+
     // ── 用户反馈模块：本地状态（thread 令牌 / 弹窗节流） ───────────────────
     var FB_THREADS_KEY = "dsh-feedback-threads";
     var FB_POPUP_KEY = "dsh-feedback-popup";
@@ -1093,12 +1105,13 @@ window.__ModuleLoader__.load({
         }).finally(function () { setDevBusy(""); });
       };
 
-      /** 升级/续费带登录态打开：先取一次性访问 url，再 window.open（node 半用账号 JWT 换 key）。 */
+      /** 升级/续费带登录态打开：取一次性访问 url，改写为 /app/promo?auth=… 后在手机端进入续费页。 */
       var openUpgradeAuth = function () {
         setBusy("upgrade");
         api("/dsh-remote/access-key").then(function (b) {
           if (!b || !b.ok || !b.url) throw new Error((b && b.error) || "生成访问链接失败");
-          try { window.open(b.url, "_blank", "noopener"); } catch (e2) {}
+          var promo = promoUrlOf(b.url);
+          try { window.open(promo, "_blank", "noopener"); } catch (e2) {}
           setMsg("ok", "✅ 升级/续费页已在新标签页打开（带登录态）");
         }).catch(function (e) {
           setMsg("err", "打开升级/续费页失败：" + e.message);
@@ -1206,6 +1219,8 @@ window.__ModuleLoader__.load({
         setBusy("logout");
         post("/dsh-remote/logout").then(function (body) {
           setSt(body); setAccount(null); setQuota(null);
+          // 清空一次性访问密钥/二维码/授权设备等本地状态（退出后不得残留可见）
+          setAkey(null); setAkeyMsg(null);
           // 退出登录：清除本机保存的用户反馈线程凭据（thread_token 见 FB_THREADS_KEY），
           // 反馈历史保留在服务端（按账号校验），账号身份变化后本机不再可见旧线程。
           fbClearThreads();

package/packages/dsh-remote-web/lib/index.js

@@ -762,13 +762,13 @@ async function proxyCreateAccessKey(relayDir, res) {
 }
 
 /**
- * GET /dsh-remote/mobile-sessions → 已授权设备列表（企业端 POST /api/mobile-sessions，Bearer）。
+ * GET /dsh-remote/mobile-sessions → 已授权设备列表（企业端 GET /api/mobile-sessions，Bearer）。
  */
 async function proxyMobileSessions(relayDir, res) {
   const token = await relayToken(relayDir).catch(() => "");
   if (!token) return sendJson(res, 401, notLoggedInJson());
   const r = await relayFetch(relayDir, "/api/mobile-sessions", {
-    method: "POST",
+    method: "GET",
     headers: { authorization: `Bearer ${token}` },
   });
   const d = flattenRelayBody(r);
@@ -946,7 +946,7 @@ const PLUGIN_ID = "dsh-remote-web";
 const PLUGIN_LEGACY_IDS = ["dsh-remote-ui"];
 const PLUGIN_ALL_IDS = [PLUGIN_ID, ...PLUGIN_LEGACY_IDS];
 /** 插件自身发布版本（与 dsh-remote 根包同步递增）。 */
-const PLUGIN_VERSION = "0.6.0-beta.2";
+const PLUGIN_VERSION = "0.6.0-beta.3";
 const UPDATE_LOG = ".dsh-update.log";
 const UPDATE_MARKER = ".dsh-update-running";
 

package/packages/dsh-remote-web/test/access-key-sessions.test.mjs

@@ -30,7 +30,7 @@ function startFakeRelay(opts = {}) {
       if (!opts.noQr) body.qr_data_url = QR;
       return send(200, body);
     }
-    if (req.method === "POST" && url.pathname === "/api/mobile-sessions") {
+    if ((req.method === "GET" || req.method === "POST") && url.pathname === "/api/mobile-sessions") {
       return send(200, {
         ok: true,
         sessions: [
@@ -117,7 +117,7 @@ test("mobile-sessions 路由：列表透传，Bearer 已带上", async () => {
     assert.equal(r.sessions[0].label, "iPhone 15");
     assert.equal(r.sessions[0].os, "iOS");
     const up = relay.seen.find((s) => s.path === "/api/mobile-sessions");
-    assert.equal(up.method, "POST");
+    assert.equal(up.method, "GET"); // 列表为 GET；POST 仅用于 auth-key/revoke
     assert.equal(up.authorization, "Bearer jwt-abc");
   } finally {
     host.close();