@mrrisega/dsh-remote 0.6.0-beta.3 → 0.6.0-beta.4

package/clients/dsh-remote/dsh-bridge.mjs

@@ -41,6 +41,7 @@
  *   DSH_BRIDGE_API         账号 API 地址(默认云端服务地址;自建模式无需设置)
  *   DSH_BRIDGE_LOCAL_KEY   开源自部署:访问密钥(设后经 router POST /_login 换本地 JWT,免账号体系)
  *   DSH_BRIDGE_HEARTBEAT_MS 隧道心跳间隔(默认 15000ms)
+ *   DSH_MOBILE_ADAPTER   经隧道访问的官方 dsh web 移动端适配注入开关:0 关闭(默认开启,仅 ≤820px 生效)
  */
 
 import WebSocket from "ws";
@@ -52,6 +53,8 @@ import { randomBytes, generateKeyPairSync, createHash } from "node:crypto";
 import { pathToFileURL, fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 import { gzip as gzipCb } from "node:zlib";
+// 移动端适配层(经隧道访问的官方 dsh web 窄屏注入;DSH_MOBILE_ADAPTER=0 可关闭,默认开启)
+import { maybeInjectMobileAdapter } from "./mobile-adapter.mjs";
 
 // ---------- 强制直连:清除代理环境变量 ----------
 // 家庭网络常配 Clash 等代理(127.0.0.1:7890),node 的 ws/fetch 会继承
@@ -404,12 +407,22 @@ async function doHttp(method, path, reqHeaders, body, isB64) {
   }
   const res = await fetch(url, { ...init, signal: AbortSignal.timeout(HTTP_TIMEOUT_MS) });
   let buf = Buffer.from(await res.arrayBuffer());
+  // 移动端适配层:text/html(含 </head> 且匹配官方特征)在 gzip 前注入响应式 <style>/<script>;
+  // 非 html / SSE / 二进制 / 上游已压缩等其余响应一律原样(env DSH_MOBILE_ADAPTER=0 关闭)。
   // sanitizeResponseHeaders 会剥 content-encoding(undici 已解压,原头会误导浏览器);
   // 若我们自行 gzip,必须在 sanitize 之后把 content-encoding: gzip 补回,手机才能正确解压。
   const headers = sanitizeResponseHeaders(Object.fromEntries(res.headers.entries()));
+  const contentType = res.headers.get("content-type") || "";
+  if (!contentType.includes("text/event-stream")) { // SSE 长连不缓冲不注入(见模块注释)
+    const m = maybeInjectMobileAdapter({ buf, contentType });
+    if (m.injected) {
+      console.log(`[bridge] mobile-adapter 注入 ${path}: ${(buf.length / 1024).toFixed(0)}KB → ${(m.buf.length / 1024).toFixed(0)}KB`);
+      buf = m.buf;
+    }
+  }
   const compressed = await maybeCompressResponse({
     buf,
-    contentType: res.headers.get("content-type") || "",
+    contentType,
     contentEncoding: res.headers.get("content-encoding") || "",
     acceptEncoding: headerValue(reqHeaders, "accept-encoding"),
     status: res.status,

package/clients/dsh-remote/mobile-adapter.mjs

@@ -0,0 +1,291 @@
+/**
+ * mobile-adapter.mjs — bridge 侧注入的“经隧道访问的官方 dsh web”移动端适配层。
+ *
+ * 注入目标(仅经隧道回传的手机页面;官方包 / 桌面宽屏不受影响):
+ *   - 官方 dsh web(dsh-web-frontend 0.1.2-rc.1)index.html 的 </head> 前,由 dsh-bridge.mjs
+ *     对 content-type 含 text/html 的上游响应注入 <style id="dsh-mobile-adapter-css"> 与
+ *     <script id="dsh-mobile-adapter-js">。
+ *
+ * 设计依据(实测 390×844 DOM,非猜测):
+ *   - 布局外壳:官方 .pI_x6G_frame 为三列 grid(内联 gridTemplateColumns),侧栏/详情列通过
+ *     data-sidebar-collapsed / data-details-collapsed 表达状态;官方在 <1024px 时把侧栏自动
+ *     收成 56px 图标 rail,再手动展开(narrowExpanded)时却把中心列挤到 ~110px(实测 grid
+ *     "280px 110px 0px")——这就是“侧栏挤压/设置内容可视区不足”的根因。
+ *   - 适配策略:
+ *     1) ≤820px 强制三列轨宽为 0 / 1fr / 0,内容区全宽;侧栏/详情改造成离屏浮层(off-canvas),
+ *        顶部放一个小鲸鱼/菜单按钮,点击 = 程序化点击官方 toggle(aria-label 打开/关闭侧边栏),
+ *        不复制官方状态,数据属性仍是唯一真源;
+ *     2) 设置面板(实测 .VOzbGW_overlay 是 z-index:1000 的 fixed 全屏,panel 内 nav 188px +
+ *        content 154px 左右并排)→ 手机改为上下堆叠:顶部固定 tab 行(横向滚动),下面全高滚动内容;
+ *     3) 输入控件字号 ≥16px 防 iOS 聚焦缩放;hero 的工作区/模式座位行允许换行,防 212px 座位
+ *        右缘伸出视口(实测 cubgiG_seat right=409 > 390);
+ *     4) html/body overflow-x 防护、safe-area inset、触控目标友好;配色只用官方 CSS 变量。
+ *
+ * 宿主特征门(防误注入其它 html):
+ *   - 注入前:content-type 必须 text/html 且含 </head> 且原文含官方标记
+ *     (__ModuleLoader__ / @deepseek-ai/dsh-client-* / <title>DeepSeek Harness</title>);
+ *   - 运行时:注入脚本在 window.innerWidth ≤ 820 且 DOM 出现官方 frame/overlay 特征时才动作。
+ *
+ * 类名变化退化策略(官方升级重打包导致 pI_x6G_* / hHd-Xa_* / VOzbGW_* 等前缀改变时):
+ *   - 结构优先用官方固定输出的 data-* 属性与 aria-label;
+ *   - JS 用结构探测(frame → 子列 → 打 dsh-ma-* 稳定类)承载布局,不以 hashed 类为唯一钩子;
+ *   - 命中不到 frame 时静默跳过,页面保持官方默认,绝不报错/破坏。
+ *
+ * 开关:环境变量 DSH_MOBILE_ADAPTER=0 整体关闭(默认开启)。
+ */
+
+const ADAPTER_ID = "dsh-mobile-adapter";
+
+/* 注入前 raw HTML 层官方特征(0.1.2-rc.1 index.html 原文稳定存在)。 */
+const HOST_FEATURE_RE =
+  /(__ModuleLoader__|@deepseek-ai\/dsh-client-modules|@deepseek-ai\/dsh-client-connection|<title>\s*DeepSeek Harness)/i;
+
+/* 运行时 DOM 特征(注入脚本内再次校验;data-* 由官方组件固定输出,不随 CSS modules 改名)。 */
+const RUNTIME_HOST_RE =
+  /(data-sidebar-collapsed|data-details-collapsed|data-shell-overlay)|(pI_x6G_frame|hHd-Xa_root|hHd-Xa_toggle)/;
+
+const STYLE = `
+/* ===== dsh-remote mobile adapter (bridge 注入;仅 ≤820px 生效,桌面宽屏无任何规则) ===== */
+@media (max-width: 820px) {
+  html, body { max-width: 100%; overflow-x: hidden; }
+  html { -webkit-text-size-adjust: 100%; text-size-adjust: 100%; }
+
+  /* --- 三列 frame → 内容区全宽(官方内联 gridTemplateColumns 用 !important 覆盖) --- */
+  div.pI_x6G_frame, div.dsh-ma-frame { grid-template-columns: 0 minmax(0, 1fr) 0 !important; min-width: 0; }
+  /* 侧栏/详情已移出 grid 流(fixed),唯一在流的中心列须显式落到 1fr 轨道,否则自动放置会被塞进 0px 轨 */
+  div.pI_x6G_centerCol, div.dsh-ma-center { grid-column: 2; min-width: 0; width: auto; }
+
+  /* --- 侧栏 / 详情:离屏浮层(off-canvas),展开态滑入 --- */
+  div.pI_x6G_sidebarCol, div.dsh-ma-sidebar {
+    position: fixed; left: 0; top: 0; bottom: 0; margin: 0;
+    width: min(84vw, 340px); max-width: 92vw;
+    z-index: 300; overflow: hidden;
+    border-right: .5px solid var(--dsw-alias-border-l3, rgba(127,127,127,.25));
+    box-shadow: 0 10px 44px rgba(0,0,0,.26);
+    transform: translateX(-103%);
+    transition: transform .22s var(--ds-ease-in-out, ease);
+    will-change: transform;
+  }
+  html.dsh-ma-sidebar-open div.pI_x6G_sidebarCol,
+  html.dsh-ma-sidebar-open div.dsh-ma-sidebar { transform: none; }
+
+  div.pI_x6G_detailsCol, div.dsh-ma-details {
+    position: fixed; right: 0; top: 0; bottom: 0; margin: 0;
+    width: min(92vw, 400px); max-width: 96vw;
+    z-index: 300; overflow: hidden;
+    border-left: .5px solid var(--dsw-alias-border-l3, rgba(127,127,127,.25));
+    box-shadow: 0 10px 44px rgba(0,0,0,.26);
+    transform: translateX(103%);
+    transition: transform .22s var(--ds-ease-in-out, ease);
+    will-change: transform;
+  }
+  html.dsh-ma-details-open div.pI_x6G_detailsCol,
+  html.dsh-ma-details-open div.dsh-ma-details { transform: none; }
+
+  /* --- 展开遮罩(在浮层下、在官方弹层下) --- */
+  div.dsh-ma-scrim {
+    position: fixed; inset: 0; z-index: 290;
+    background: rgba(0,0,0,.32);
+    opacity: 0; pointer-events: none;
+    transition: opacity .22s ease;
+  }
+  html.dsh-ma-sidebar-open div.dsh-ma-scrim,
+  html.dsh-ma-details-open div.dsh-ma-scrim { opacity: 1; pointer-events: auto; }
+
+  /* --- 顶部小鲸鱼/菜单按钮(侧栏收起时可见) --- */
+  button.dsh-ma-hamburger {
+    position: fixed;
+    top: max(10px, env(safe-area-inset-top));
+    left: max(10px, env(safe-area-inset-left));
+    z-index: 260;
+    width: 42px; height: 42px; padding: 0;
+    display: flex; align-items: center; justify-content: center;
+    border-radius: 12px;
+    background: var(--dsw-alias-button-elevated-fill, rgba(255,255,255,.96));
+    border: .5px solid var(--dsw-alias-border-l3, rgba(127,127,127,.3));
+    box-shadow: 0 1px 6px rgba(0,0,0,.16);
+    color: var(--dsw-alias-label-primary, #111);
+    cursor: pointer; touch-action: manipulation;
+  }
+  button.dsh-ma-hamburger:active { transform: scale(.92); }
+
+  /* --- 输入字号 ≥16px(防 iOS 聚焦自动缩放) --- */
+  textarea,
+  input:not([type]), input[type="text"], input[type="search"], input[type="email"],
+  input[type="url"], input[type="tel"], input[type="number"], input[type="password"],
+  [contenteditable="true"] { font-size: 16px !important; }
+  select, button, a, [role="button"], [role="menuitem"], [role="option"], [role="tab"] { touch-action: manipulation; }
+
+  /* --- hero 工作区/模式座位行:可换行,防右缘被裁(实测 cubgiG_seat right=409>390) --- */
+  div.wSkVaW_heroWorkspaceRow { flex-wrap: wrap; row-gap: 8px; column-gap: 8px; justify-content: center; min-width: 0; }
+  div.wSkVaW_heroWorkspaceRow > * { max-width: calc(100vw - 32px); }
+  div.wSkVaW_composerStack, div.wSkVaW_composerHero, div.uV2eYG_card { min-width: 0; }
+
+  /* --- 设置面板(实测 .VOzbGW_overlay fixed z-index:1000,panel 内 nav 188 + content 154 并排)
+        手机改为上下堆叠:顶部 tab 行固定/横向滚动,下方内容区最大化滚动 --- */
+  div.VOzbGW_overlay { justify-content: center; align-items: stretch; }
+  div.VOzbGW_panel {
+    width: 100%; max-width: 100%;
+    height: 100%; max-height: 100%;
+    border-radius: 0;
+    flex-direction: column;
+  }
+  div.VOzbGW_nav {
+    box-sizing: border-box;
+    width: 100% !important; height: auto; flex: none;
+    flex-direction: row; align-items: center;
+    gap: 8px; padding: 8px 10px 4px;
+    overflow-x: auto; overflow-y: hidden;
+  }
+  div.VOzbGW_navTitle { flex: none; }
+  div.VOzbGW_navList {
+    box-sizing: border-box;
+    flex: 1 1 auto; min-width: 0;
+    flex-direction: row !important;
+    gap: 6px; overflow-x: auto; overflow-y: hidden;
+    padding-bottom: 2px;
+  }
+  div.VOzbGW_navList > button, button.VOzbGW_navCell {
+    flex: none; min-width: max-content; padding: 10px 14px;
+  }
+  div.VOzbGW_content { width: 100% !important; min-width: 0; flex: 1 1 auto; min-height: 0; }
+  div.VOzbGW_options {
+    flex: 1 1 auto; min-height: 0; overflow-y: auto;
+    -webkit-overflow-scrolling: touch;
+    padding-bottom: env(safe-area-inset-bottom);
+  }
+}
+
+/* 桌面宽屏(>820px):本文件无任何规则 → 对直连/桌面零影响。 */
+`;
+
+const SCRIPT = `(() => {
+  "use strict";
+  try {
+    const HOST_RE = new RegExp(${JSON.stringify(RUNTIME_HOST_RE.source)});
+    const NARROW = () => window.innerWidth <= 820;
+    const HOSTISH = () =>
+      HOST_RE.test(document.documentElement.outerHTML.slice(0, 200000)) ||
+      !!document.querySelector("[data-shell-overlay], [data-sidebar-collapsed], [data-details-collapsed]");
+
+    let done = false;
+    const boot = () => {
+      if (done || !NARROW() || !HOSTISH()) return;
+      const frame = document.querySelector(".pI_x6G_frame, [data-sidebar-collapsed], [data-details-collapsed]");
+      if (!frame || !frame.querySelector) return;
+      done = true;
+      frame.classList.add("dsh-ma-frame");
+
+      /* 给 frame 子列打稳定标记(dsh-ma-*),规避官方类名前缀随构建变化 */
+      let sidebar = null, details = null, center = null;
+      const cols = [...frame.children].filter((c) => c instanceof HTMLElement);
+      for (const col of cols) {
+        const cls = typeof col.className === "string" ? col.className : "";
+        if (/sidebar/i.test(cls) || col.querySelector(".hHd-Xa_root, [aria-label*='侧边栏'], [aria-label*='sidebar' i]")) {
+          col.classList.add("dsh-ma-sidebar"); sidebar = sidebar || col;
+        } else if (/details/i.test(cls)) {
+          col.classList.add("dsh-ma-details"); details = details || col;
+        } else if (/center/i.test(cls)) {
+          col.classList.add("dsh-ma-center"); center = center || col;
+        }
+      }
+      if (!sidebar && cols[0]) { cols[0].classList.add("dsh-ma-sidebar"); sidebar = sidebar || cols[0]; }
+      if (!center && cols[1]) { cols[1].classList.add("dsh-ma-center"); center = center || cols[1]; }
+      if (!details && cols[cols.length - 1] && cols[cols.length - 1] !== sidebar && cols[cols.length - 1] !== center) {
+        cols[cols.length - 1].classList.add("dsh-ma-details"); details = details || cols[cols.length - 1];
+      }
+
+      const toggleSel = '[aria-label="打开侧边栏"], [aria-label="关闭侧边栏"], [aria-label="Open sidebar"], [aria-label="Close sidebar"]';
+      const toggleOf = () => document.querySelector(toggleSel) || document.querySelector(".hHd-Xa_toggle");
+      const expanded = () => !frame.hasAttribute("data-sidebar-collapsed");
+
+      /* 遮罩:点击 = 点官方 toggle(走官方 store,无私有状态) */
+      const scrim = document.createElement("div");
+      scrim.className = "dsh-ma-scrim";
+      document.body.appendChild(scrim);
+      scrim.addEventListener("click", (e) => { e.stopPropagation(); const t = toggleOf(); if (t) t.click(); });
+
+      /* 顶部小鲸鱼/菜单按钮 */
+      const hamburger = document.createElement("button");
+      hamburger.type = "button";
+      hamburger.className = "dsh-ma-hamburger";
+      hamburger.setAttribute("aria-label", "打开菜单");
+      hamburger.innerHTML = '<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" aria-hidden="true"><path d="M4 6h16M4 12h16M4 18h10"/></svg>';
+      document.body.appendChild(hamburger);
+      hamburger.addEventListener("click", (e) => {
+        e.stopPropagation(); e.preventDefault();
+        const t = toggleOf();
+        if (t) t.click();
+        else document.documentElement.classList.add("dsh-ma-sidebar-open"); /* 兜底 */
+      });
+
+      /* 状态唯一真源 = 官方 frame 的 data 属性 */
+      const sync = () => {
+        const open = expanded();
+        document.documentElement.classList.toggle("dsh-ma-sidebar-open", open);
+        if (hamburger) hamburger.style.display = open ? "none" : "";
+        const dOpen = !frame.hasAttribute("data-details-collapsed") && !!details;
+        document.documentElement.classList.toggle("dsh-ma-details-open", dOpen);
+      };
+      try {
+        new MutationObserver(sync).observe(frame, { attributes: true, attributeFilter: ["data-sidebar-collapsed", "data-details-collapsed"] });
+      } catch (e2) { /* 退化:仅在下次 boot 同步 */ }
+      sync();
+    };
+
+    if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", boot); else boot();
+    /* 官方模块系统异步挂载 UI,晚一点再补几次(幂等,done 守卫) */
+    [700, 1600, 3200, 7000, 12000].forEach((ms) => setTimeout(boot, ms));
+  } catch (e) { if (window.console) console.warn("[dsh-mobile-adapter]", e && e.message); }
+})();`;
+
+/**
+ * 纯函数:把适配层注入到上游 HTML 的 </head> 之前。
+ * @param {string} html
+ * @returns {{html:string, injected:boolean}}
+ */
+export function injectMobileAdapter(html) {
+  const src = String(html);
+  const headIdx = src.toLowerCase().lastIndexOf("</head>");
+  if (headIdx === -1) return { html: src, injected: false };
+  const block =
+    `\n<style id="${ADAPTER_ID}-css" data-dsh-mobile-adapter>${STYLE}</style>` +
+    `\n<script id="${ADAPTER_ID}-js" data-dsh-mobile-adapter>${SCRIPT}</script>\n`;
+  return { html: src.slice(0, headIdx) + block + src.slice(headIdx), injected: true };
+}
+
+/** 环境开关:DSH_MOBILE_ADAPTER=0 关闭(默认开启)。 */
+export function mobileAdapterEnabled() {
+  return process.env.DSH_MOBILE_ADAPTER !== "0";
+}
+
+/**
+ * 判断上游响应是否应注入(仅官方 dsh web 的 text/html)。
+ * @param {{contentType?:string, html?:string}} opts
+ */
+export function shouldInjectHtml({ contentType, html }) {
+  const ct = String(contentType || "");
+  if (!/text\/html/i.test(ct)) return false;
+  const src = String(html || "");
+  if (!/<\/head>/i.test(src)) return false;
+  if (/\uFFFD/.test(src)) return false; // 非 UTF-8,不冒险改写
+  return HOST_FEATURE_RE.test(src);
+}
+
+/**
+ * bridge 接线主入口:开关 + 类型/特征 gate + 注入,一步完成。
+ * @param {{buf:Buffer, contentType?:string}} args
+ * @returns {{buf:Buffer, injected:boolean}}
+ */
+export function maybeInjectMobileAdapter({ buf, contentType }) {
+  if (!mobileAdapterEnabled() || !Buffer.isBuffer(buf) || buf.length === 0) {
+    return { buf, injected: false };
+  }
+  const text = buf.toString("utf8");
+  if (!shouldInjectHtml({ contentType, html: text })) return { buf, injected: false };
+  const out = injectMobileAdapter(text);
+  return { buf: Buffer.from(out.html, "utf8"), injected: out.injected };
+}
+
+export const ADAPTER_TAG = ADAPTER_ID;
+export default { injectMobileAdapter, maybeInjectMobileAdapter, shouldInjectHtml, mobileAdapterEnabled };

package/clients/dsh-remote/test/bridge-html-inject.test.mjs

@@ -0,0 +1,110 @@
+#!/usr/bin/env node
+/**
+ * bridge HTML 注入集成测试(经 doHttp/handleHttpFrame 全链路):
+ *   - 官方特征 html 响应 → reply body 含注入的 <style data-dsh-mobile-adapter>;
+ *   - 同时请求带 gzip Accept-Encoding → 仍是 gzip 且解压后含注入块(注入发生在 gzip 前);
+ *   - DSH_MOBILE_ADAPTER=0 → 原样回传;
+ *   - 非 html(SSE/json/二进制)不动。
+ */
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import http from "node:http";
+import os from "node:os";
+import path from "node:path";
+import test, { after } from "node:test";
+import { gunzipSync } from "node:zlib";
+
+const OFFICIAL_HTML = `<!doctype html><html><head>
+<script>window.__ModuleLoader__ = { mode: "queue" }</script>
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>DeepSeek Harness</title>
+</head><body><div id="root"></div></body></html>`;
+
+const upstream = http.createServer((req, res) => {
+  if (req.url === "/page") {
+    res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+    res.end(OFFICIAL_HTML);
+    return;
+  }
+  if (req.url === "/events") {
+    res.writeHead(200, { "content-type": "text/event-stream" });
+    res.end("data: hi\n\n"); // 结束的 SSE 帧(便于缓冲测试)
+    return;
+  }
+  if (req.url === "/app.js") {
+    res.writeHead(200, { "content-type": "application/javascript" });
+    res.end("console.log(1)");
+    return;
+  }
+  res.writeHead(404);
+  res.end("nope");
+});
+
+const tmpDir = mkdtempSync(path.join(os.tmpdir(), "dsh-html-inject-"));
+process.env.DSH_BRIDGE_DEVICE_ID = "dev-htmltest0001";
+process.env.DSH_BRIDGE_CONFIG = path.join(tmpDir, "config.json");
+delete process.env.DSH_MOBILE_ADAPTER; // 默认开启
+
+const { handleHttpFrame } = await new Promise((resolve, reject) => {
+  upstream.listen(0, "127.0.0.1", () => {
+    process.env.DSH_BRIDGE_UPSTREAM = `http://127.0.0.1:${upstream.address().port}`;
+    import("../dsh-bridge.mjs").then(resolve, reject);
+  });
+});
+
+after(() => {
+  try { upstream.close(); } catch {}
+  try { rmSync(tmpDir, { recursive: true, force: true }); } catch {}
+});
+
+async function request(frame) {
+  let reply;
+  const sender = (obj) => { reply = obj; return true; };
+  await handleHttpFrame(sender, { type: "http", ...frame });
+  return reply;
+}
+const decode = (reply) => {
+  const buf = Buffer.from(reply.body, "base64");
+  if (reply.headers["content-encoding"] === "gzip") return gunzipSync(buf).toString("utf8");
+  return buf.toString("utf8");
+};
+
+test("集成:官方特征 html 经 doHttp 回传时注入适配层", async () => {
+  const reply = await request({ id: "h1", method: "GET", path: "/page", headers: { "accept-encoding": "gzip", "user-agent": "phone" } });
+  assert.equal(reply.status, 200);
+  const text = decode(reply);
+  assert.ok(text.includes('data-dsh-mobile-adapter'), "应注入 style/script");
+  const headIdx = text.toLowerCase().lastIndexOf("</head>");
+  assert.ok(text.indexOf("dsh-mobile-adapter-css") < headIdx, "注入块应位于 </head> 前");
+  // 原文其余部分保持(仅 splice)
+  const oi = OFFICIAL_HTML.toLowerCase().lastIndexOf("</head>");
+  assert.ok(text.startsWith(OFFICIAL_HTML.slice(0, oi)));
+  assert.ok(text.endsWith(OFFICIAL_HTML.slice(oi)));
+});
+
+test("集成:注入在 gzip 前发生,回包仍可 gzip 解压且含注入块", async () => {
+  const reply = await request({ id: "h2", method: "GET", path: "/page", headers: { "accept-encoding": "gzip, deflate", "user-agent": "phone" } });
+  assert.equal(reply.headers["content-encoding"], "gzip", "压缩后应带 content-encoding");
+  const text = decode(reply);
+  assert.ok(text.includes("dsh-mobile-adapter-js"));
+});
+
+test("集成:DSH_MOBILE_ADAPTER=0 关闭注入,原样回传", async () => {
+  process.env.DSH_MOBILE_ADAPTER = "0";
+  try {
+    const reply = await request({ id: "h3", method: "GET", path: "/page", headers: { "user-agent": "phone" } });
+    const text = decode(reply);
+    assert.ok(!text.includes("data-dsh-mobile-adapter"), "关闭时应原样");
+    assert.equal(text, OFFICIAL_HTML);
+  } finally {
+    delete process.env.DSH_MOBILE_ADAPTER;
+  }
+});
+
+test("集成:非 html(SSE / js / json)不动", async () => {
+  const ev = await request({ id: "h4", method: "GET", path: "/events", headers: { "accept-encoding": "gzip", "user-agent": "phone" } });
+  assert.equal(decode(ev), "data: hi\n\n");
+  const js = await request({ id: "h5", method: "GET", path: "/app.js", headers: { "accept-encoding": "gzip", "user-agent": "phone" } });
+  assert.equal(decode(js), "console.log(1)");
+  assert.ok(!decode(js).includes("dsh-mobile-adapter"));
+});

package/clients/dsh-remote/test/mobile-adapter.test.mjs

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+/**
+ * mobile-adapter 注入契约测试:
+ *   injectMobileAdapter          纯函数:含 </head> 才注入、注入块出现在 <head> 内;
+ *   shouldInjectHtml             只注入 text/html 且带官方特征的官方 dsh web 页面;
+ *   maybeInjectMobileAdapter     整段 gate(env 开关 / 非 html / 非 UTF-8 不动);
+ *   env DSH_MOBILE_ADAPTER=0     关闭。
+ * 注意:doHttp 集成(经 handleHttpFrame → 本地上游的 html 注入 + gzip 兼容)见 bridge-html 集成用例。
+ */
+import assert from "node:assert/strict";
+import test from "node:test";
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { after } from "node:test";
+
+// 官方 dsh web 特征片段(与真实 index.html 同源):__ModuleLoader__ + DeepSeek Harness title
+const OFFICIAL_HTML = `<!doctype html>
+<html lang="en">
+<head><base href="/"><script>window.__ModuleLoader__ = { mode: "queue" }</script>
+<link rel="preload" as="script" href="/plugins/??@deepseek-ai/dsh-client-modules/client.js">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>DeepSeek Harness</title></head>
+<body><div id="root"></div></body></html>`;
+
+const tmpDir = mkdtempSync(path.join(os.tmpdir(), "dsh-mobile-adapter-"));
+process.env.DSH_BRIDGE_DEVICE_ID = "dev-mobiletest0001";
+process.env.DSH_BRIDGE_CONFIG = path.join(tmpDir, "config.json");
+
+const mod = await import("../mobile-adapter.mjs");
+const { injectMobileAdapter, shouldInjectHtml, maybeInjectMobileAdapter, mobileAdapterEnabled } = mod;
+
+after(() => {
+  try { rmSync(tmpDir, { recursive: true, force: true }); } catch {}
+});
+
+test("injectMobileAdapter:含 </head> 的 html 注入 <style>/<script>,且位于 <head> 内", () => {
+  const r = injectMobileAdapter(OFFICIAL_HTML);
+  assert.equal(r.injected, true);
+  const headEnd = r.html.toLowerCase().lastIndexOf("</head>");
+  const cssAt = r.html.indexOf("dsh-mobile-adapter-css");
+  const jsAt = r.html.indexOf("dsh-mobile-adapter-js");
+  assert.ok(cssAt > 0 && cssAt < headEnd, "style 应在 </head> 之前");
+  assert.ok(jsAt > 0 && jsAt < headEnd, "script 应在 </head> 之前");
+  // 只做 splice:注入块前后字节应与原文一致
+  const headIdx = OFFICIAL_HTML.toLowerCase().lastIndexOf("</head>");
+  assert.ok(r.html.startsWith(OFFICIAL_HTML.slice(0, headIdx)), "head 前缀原样");
+  assert.ok(r.html.endsWith(OFFICIAL_HTML.slice(headIdx)), "head 之后原样");
+  // 内容含窄屏 media query 与基础规则
+  assert.match(r.html, /@media \(max-width: 820px\)/);
+  assert.match(r.html, /overflow-x: hidden/);
+});
+
+test("injectMobileAdapter:无 </head> 的 html 原样返回", () => {
+  const r = injectMobileAdapter("<div>partial stream, no head</div>");
+  assert.equal(r.injected, false);
+  assert.equal(r.html, "<div>partial stream, no head</div>");
+});
+
+test("shouldInjectHtml:只接受 text/html + </head> + 官方特征", () => {
+  assert.equal(shouldInjectHtml({ contentType: "text/html; charset=utf-8", html: OFFICIAL_HTML }), true);
+  // 非官方 html(无 __ModuleLoader__/DeepSeek Harness 特征)
+  assert.equal(shouldInjectHtml({ contentType: "text/html", html: "<html><head><title>x</title></head><body>x</body></html>" }), false);
+  // 非 html
+  assert.equal(shouldInjectHtml({ contentType: "application/json", html: OFFICIAL_HTML }), false);
+  assert.equal(shouldInjectHtml({ contentType: "text/event-stream", html: OFFICIAL_HTML }), false);
+  // 无 </head>
+  assert.equal(shouldInjectHtml({ contentType: "text/html", html: "<html><title>x</title>" }), false);
+});
+
+test("maybeInjectMobileAdapter:Buffer 级入口(默认开启时注入)", () => {
+  const { buf, injected } = maybeInjectMobileAdapter({ buf: Buffer.from(OFFICIAL_HTML, "utf8"), contentType: "text/html; charset=utf-8" });
+  assert.equal(injected, true);
+  assert.ok(Buffer.isBuffer(buf));
+  assert.ok(buf.toString("utf8").includes("data-dsh-mobile-adapter"));
+});
+
+test("maybeInjectMobileAdapter:env DSH_MOBILE_ADAPTER=0 时关闭", () => {
+  process.env.DSH_MOBILE_ADAPTER = "0";
+  try {
+    assert.equal(mobileAdapterEnabled(), false);
+    const { buf, injected } = maybeInjectMobileAdapter({ buf: Buffer.from(OFFICIAL_HTML, "utf8"), contentType: "text/html; charset=utf-8" });
+    assert.equal(injected, false);
+    assert.equal(buf.toString("utf8"), OFFICIAL_HTML);
+  } finally {
+    delete process.env.DSH_MOBILE_ADAPTER;
+  }
+  assert.equal(mobileAdapterEnabled(), true);
+});
+
+test("maybeInjectMobileAdapter:非 html / 空 body / 非 UTF-8 原样", () => {
+  assert.equal(maybeInjectMobileAdapter({ buf: Buffer.from(OFFICIAL_HTML, "utf8"), contentType: "image/png" }).injected, false);
+  assert.equal(maybeInjectMobileAdapter({ buf: Buffer.alloc(0), contentType: "text/html" }).injected, false);
+  const latin1 = Buffer.from("\x80\x81\x82\xfe\xff" + "<html><head></head></html>", "latin1");
+  const r = maybeInjectMobileAdapter({ buf: latin1, contentType: "text/html" });
+  assert.equal(r.injected, false);
+  assert.deepEqual(r.buf, latin1);
+});
+
+test("适配层文本不含口令类敏感标记(仅结构提示)", () => {
+  assert.ok(!/password|secret|token\s*=/i.test(mod.ADAPTER_TAG + "")); // ADAPTER_TAG 只是 id 常量
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrisega/dsh-remote",
-  "version": "0.6.0-beta.3",
+  "version": "0.6.0-beta.4",
   "description": "手机远程控制 DeepSeek Harness · Remote control DeepSeek Harness (dsh web) from any phone browser — 100% 全功能 App 级体验：发消息、看工具执行、审批权限、改设置、管凭据，含特权操作，免内网穿透。一条命令安装 npx @mrrisega/dsh-remote。Mobile remote control for DSH, self-host or SaaS, no server needed on LAN.",
   "keywords": [
     "deepseek-harness",

package/packages/dsh-remote-web/lib/index.js

@@ -946,7 +946,7 @@ const PLUGIN_ID = "dsh-remote-web";
 const PLUGIN_LEGACY_IDS = ["dsh-remote-ui"];
 const PLUGIN_ALL_IDS = [PLUGIN_ID, ...PLUGIN_LEGACY_IDS];
 /** 插件自身发布版本（与 dsh-remote 根包同步递增）。 */
-const PLUGIN_VERSION = "0.6.0-beta.3";
+const PLUGIN_VERSION = "0.6.0-beta.4";
 const UPDATE_LOG = ".dsh-update.log";
 const UPDATE_MARKER = ".dsh-update-running";