@nones/dsh-session-mcp 1.0.2 → 1.1.0

package/README.md

@@ -49,11 +49,18 @@ Restart the harness (or reload the profile) and the endpoint starts with it.
 
 ## Get your config
 
-The harness writes everything to:
+Open **Settings → MCP** in the harness. The page shows the live endpoint, the bearer
+token (masked until you reveal it), and three copy-ready blocks:
 
-```
-$DSH_HOME/state/dsh-session-mcp.json
-```
+| Block | For |
+|---|---|
+| JSON — `mcpServers` | Claude Desktop, Cursor, and any JSON-configured client |
+| Codex — `~/.codex/config.toml` | Codex CLI / IDE |
+| Claude Code — CLI | One `claude mcp add …` command |
+
+Each block has its own **Copy** button; the endpoint and the token have one too.
+
+The same data is on disk at `$DSH_HOME/state/dsh-session-mcp.json`:
 
 ```json
 {
@@ -71,7 +78,7 @@ $DSH_HOME/state/dsh-session-mcp.json
 }
 ```
 
-Copy the `client` block into your MCP client. Per client:
+Per client:
 
 **Claude Code**
 
@@ -144,12 +151,20 @@ Written in TypeScript, compiled to `dist/` (committed, so installs need no build
 
 | Source | Role |
 |---|---|
-| `src/index.ts` | Cordis plugin: reads/creates the bearer, starts the listener, publishes the state file, closes the listener on unload |
+| `src/index.ts` | Cordis plugin: reads/creates the bearer, starts the listener, publishes the state file, serves the Settings config route, closes the listener on unload |
 | `src/server.ts` | `node:http` listener with the bearer gate in front of the official SDK's `createMcpHandler` + `toNodeHandler` |
 | `src/tools.ts` | The five tools, backed directly by `ctx.sessionController` |
-| `src/config.ts` | Token persistence, constant-time bearer comparison, client snippet |
+| `src/config.ts` | Token persistence, constant-time bearer comparison, client snippets |
+| `src/client.ts` | The **Settings → MCP** page (classic script for `window.__ModuleLoader__`) |
 | `src/types.ts` | The narrow structural slice of Harness types this package needs |
 
+The Settings page reads `/api/dsh-session-mcp/config` over the authenticated browser
+channel, so the token never enters the served HTML.
+
+> **After installing**, restart the harness once: the browser module roster is composed
+> from the packages present at boot, so a newly installed Client half appears on the next
+> start.
+
 ## Development
 
 ```bash

package/dist/client.js

@@ -0,0 +1,198 @@
+"use strict";
+/**
+ * dsh-session-mcp — Client half.
+ *
+ * Registers the MCP settings page: the live endpoint, the bearer token, and
+ * copy-ready configuration blocks for every client this harness can serve.
+ *
+ * The page reads the config over the authenticated `/api` channel, so the token
+ * never appears in the served HTML.
+ *
+ * This file is a classic script on purpose: the Web shell loads it through
+ * `window.__ModuleLoader__`, and React arrives from the browser module table.
+ * Every binding lives inside the factory so re-evaluating the script (HMR)
+ * cannot redeclare a global.
+ *
+ * @module dsh-session-mcp/client
+ */
+;
+globalThis.__ModuleLoader__.load({
+    id: '@nones/dsh-session-mcp',
+    factory(require) {
+        const g = globalThis;
+        const React = require('react');
+        const h = React.createElement;
+        /** Locale namespace owned by this page. */
+        const NS = 'dsh-session-mcp';
+        /** Where the Host publishes the live config. */
+        const CONFIG_URL = '/api/dsh-session-mcp/config';
+        const EN = {
+            title: 'MCP',
+            heading: 'MCP endpoint',
+            description: 'Connect Claude Code, Codex, Cursor or any other MCP client to this harness. The endpoint starts together with the harness and requires the bearer token below.',
+            endpoint: 'Endpoint',
+            bearer: 'Bearer token',
+            show: 'Show',
+            hide: 'Hide',
+            copy: 'Copy',
+            copied: 'Copied',
+            jsonTitle: 'JSON — mcpServers',
+            codexTitle: 'Codex — ~/.codex/config.toml',
+            claudeTitle: 'Claude Code — CLI',
+            note: 'Paste any block into your client. The token is stable across restarts; it rotates only when you delete $DSH_HOME/state/dsh-session-mcp.json and restart the harness.',
+            loading: 'Loading…',
+            error: 'Could not read the endpoint config: ',
+        };
+        const RU = {
+            title: 'MCP',
+            heading: 'MCP-эндпоинт',
+            description: 'Подключите Claude Code, Codex, Cursor или любой другой MCP-клиент к этому харнесу. Эндпоинт поднимается вместе с харнесом и требует Bearer-токен ниже.',
+            endpoint: 'Эндпоинт',
+            bearer: 'Bearer-токен',
+            show: 'Показать',
+            hide: 'Скрыть',
+            copy: 'Копировать',
+            copied: 'Скопировано',
+            jsonTitle: 'JSON — mcpServers',
+            codexTitle: 'Codex — ~/.codex/config.toml',
+            claudeTitle: 'Claude Code — CLI',
+            note: 'Вставьте любой блок в свой клиент. Токен не меняется между перезапусками; он обновится только если удалить $DSH_HOME/state/dsh-session-mcp.json и перезапустить харнес.',
+            loading: 'Загрузка…',
+            error: 'Не удалось прочитать конфиг эндпоинта: ',
+        };
+        /** Theme-bound inline styles; no colors are hardcoded. */
+        const styles = {
+            page: {
+                display: 'grid',
+                gap: '16px',
+                maxWidth: '760px',
+                fontSize: '13px',
+                lineHeight: 1.5,
+                color: 'var(--dsw-alias-label-primary)',
+            },
+            heading: { margin: 0, fontSize: '16px', fontWeight: 600 },
+            description: { margin: 0, color: 'var(--dsw-alias-label-secondary)' },
+            card: {
+                display: 'grid',
+                gap: '10px',
+                padding: '14px 16px',
+                border: '1px solid var(--dsw-alias-border-l1)',
+                borderRadius: '12px',
+                background: 'var(--dsw-alias-bg-layer-1)',
+            },
+            cardHead: {
+                display: 'flex',
+                alignItems: 'center',
+                justifyContent: 'space-between',
+                gap: '12px',
+            },
+            cardTitle: { fontSize: '12px', fontWeight: 600, color: 'var(--dsw-alias-label-secondary)' },
+            row: {
+                display: 'flex',
+                alignItems: 'center',
+                justifyContent: 'space-between',
+                gap: '12px',
+            },
+            rowLabel: { color: 'var(--dsw-alias-label-secondary)', whiteSpace: 'nowrap' },
+            rowValue: {
+                fontFamily: 'ui-monospace, SFMono-Regular, Menlo, monospace',
+                fontSize: '12px',
+                wordBreak: 'break-all',
+                flex: '1 1 auto',
+                textAlign: 'right',
+            },
+            actions: { display: 'flex', gap: '6px', flex: '0 0 auto' },
+            button: {
+                font: 'inherit',
+                fontSize: '12px',
+                padding: '3px 10px',
+                borderRadius: '8px',
+                border: '1px solid var(--dsw-alias-border-l2)',
+                background: 'var(--dsw-alias-bg-layer-2)',
+                color: 'var(--dsw-alias-label-primary)',
+                cursor: 'pointer',
+            },
+            pre: {
+                margin: 0,
+                padding: '12px',
+                borderRadius: '8px',
+                background: 'var(--dsw-alias-bg-layer-2)',
+                border: '1px solid var(--dsw-alias-border-l1)',
+                fontFamily: 'ui-monospace, SFMono-Regular, Menlo, monospace',
+                fontSize: '12px',
+                lineHeight: 1.45,
+                overflow: 'auto',
+                maxHeight: '220px',
+                whiteSpace: 'pre',
+            },
+            note: { margin: 0, color: 'var(--dsw-alias-label-secondary)', fontSize: '12px' },
+            error: { margin: 0, color: 'var(--dsw-alias-state-error-primary)' },
+        };
+        return {
+            inject: ['slots', 'locale'],
+            apply(ctx) {
+                ctx.effect(() => ctx.locale.register(NS, 'en', EN));
+                ctx.effect(() => ctx.locale.register(NS, 'ru', RU));
+                const t = ctx.locale.bind(NS);
+                /** Re-render on locale switches so the page follows the active language. */
+                function useLocaleRevision() {
+                    const [, bump] = React.useState(0);
+                    React.useEffect(() => ctx.locale.subscribe(() => bump((n) => n + 1)), []);
+                }
+                function CopyButton(props) {
+                    const [copied, setCopied] = React.useState(false);
+                    const onCopy = React.useCallback(() => {
+                        const clipboard = g.navigator?.clipboard;
+                        if (clipboard === undefined)
+                            return;
+                        clipboard.writeText(props.text).then(() => {
+                            setCopied(true);
+                            g.setTimeout(() => setCopied(false), 1600);
+                        }, () => undefined);
+                    }, [props.text]);
+                    return h('button', { type: 'button', style: styles.button, onClick: onCopy }, copied ? t('copied') : t('copy'));
+                }
+                function Snippet(props) {
+                    return h('section', { style: styles.card }, h('div', { style: styles.cardHead }, h('span', { style: styles.cardTitle }, props.title), h(CopyButton, { text: props.text })), h('pre', { style: styles.pre }, props.text));
+                }
+                function Section() {
+                    useLocaleRevision();
+                    const [state, setState] = React.useState({ status: 'loading' });
+                    const [revealed, setRevealed] = React.useState(false);
+                    React.useEffect(() => {
+                        let alive = true;
+                        g.fetch(CONFIG_URL, { headers: { accept: 'application/json' }, credentials: 'same-origin' })
+                            .then((response) => response.ok ? response.json() : Promise.reject(new Error(`HTTP ${String(response.status)}`)))
+                            .then((data) => {
+                            if (alive)
+                                setState({ status: 'ready', data });
+                        })
+                            .catch((error) => {
+                            if (alive)
+                                setState({ status: 'error', message: String(error?.message ?? error) });
+                        });
+                        return () => {
+                            alive = false;
+                        };
+                    }, []);
+                    const header = h('div', { style: { display: 'grid', gap: '4px' } }, h('h2', { style: styles.heading }, t('heading')), h('p', { style: styles.description }, t('description')));
+                    if (state.status === 'loading') {
+                        return h('div', { style: styles.page }, header, h('p', { style: styles.note }, t('loading')));
+                    }
+                    if (state.status === 'error') {
+                        return h('div', { style: styles.page }, header, h('p', { style: styles.error }, `${t('error')}${String(state.message)}`));
+                    }
+                    const data = state.data;
+                    const token = String(data.token);
+                    const masked = `${token.slice(0, 6)}…${token.slice(-4)}`;
+                    return h('div', { style: styles.page }, header, h('section', { style: styles.card }, h('div', { style: styles.row }, h('span', { style: styles.rowLabel }, t('endpoint')), h('span', { style: styles.rowValue }, data.url), h('div', { style: styles.actions }, h(CopyButton, { text: data.url }))), h('div', { style: styles.row }, h('span', { style: styles.rowLabel }, t('bearer')), h('span', { style: styles.rowValue }, revealed ? token : masked), h('div', { style: styles.actions }, h('button', {
+                        type: 'button',
+                        style: styles.button,
+                        onClick: () => setRevealed((value) => !value),
+                    }, revealed ? t('hide') : t('show')), h(CopyButton, { text: token })))), h(Snippet, { title: t('jsonTitle'), text: data.snippets.json }), h(Snippet, { title: t('codexTitle'), text: data.snippets.codexToml }), h(Snippet, { title: t('claudeTitle'), text: data.snippets.claudeCode }), h('p', { style: styles.note }, t('note')));
+                }
+                ctx.slots.inject('settings.section', () => ctx.slots.register({ name: 'settings.section', id: NS, order: 30, label: () => t('title') }, Section));
+            },
+        };
+    },
+});

package/dist/config.d.ts

@@ -75,3 +75,31 @@ export declare function bearerMatches(expected: string, header: string | undefin
  * @returns an `mcpServers` fragment accepted by most MCP clients.
  */
 export declare function clientConfig(url: string, token: string): ClientConfig;
+/** Path of the authenticated config route the Settings page reads. */
+export declare const CONFIG_ROUTE_PATH = "/api/dsh-session-mcp/config";
+/** Every snippet the Settings page offers for copying. */
+export interface ConfigSnippets {
+    /** `mcpServers` JSON for Claude Desktop, Cursor and other JSON clients. */
+    readonly json: string;
+    /** `~/.codex/config.toml` block. */
+    readonly codexToml: string;
+    /** One `claude mcp add` command. */
+    readonly claudeCode: string;
+}
+/**
+ * Render the copy-paste snippets for one endpoint.
+ * @param url - full MCP endpoint URL.
+ * @param token - bearer token.
+ * @returns the three snippets the Settings page shows.
+ */
+export declare function snippetsFor(url: string, token: string): ConfigSnippets;
+/** What the Settings page receives from the Host. */
+export interface ConfigPayload {
+    readonly name: string;
+    readonly url: string;
+    readonly host: string;
+    readonly port: number;
+    readonly token: string;
+    readonly updatedAt: string;
+    readonly snippets: ConfigSnippets;
+}

package/dist/config.js

@@ -120,3 +120,24 @@ export function clientConfig(url, token) {
         },
     };
 }
+/** Path of the authenticated config route the Settings page reads. */
+export const CONFIG_ROUTE_PATH = '/api/dsh-session-mcp/config';
+/**
+ * Render the copy-paste snippets for one endpoint.
+ * @param url - full MCP endpoint URL.
+ * @param token - bearer token.
+ * @returns the three snippets the Settings page shows.
+ */
+export function snippetsFor(url, token) {
+    return {
+        json: JSON.stringify(clientConfig(url, token), null, 2),
+        codexToml: [
+            `[mcp_servers.${CLIENT_KEY}]`,
+            `url = "${url}"`,
+            '',
+            `[mcp_servers.${CLIENT_KEY}.http_headers]`,
+            `Authorization = "Bearer ${token}"`,
+        ].join('\n'),
+        claudeCode: `claude mcp add --transport http ${CLIENT_KEY} ${url} --header "Authorization: Bearer ${token}"`,
+    };
+}

package/dist/index.js

@@ -13,7 +13,7 @@
  * @module dsh-session-mcp
  */
 import { readFileSync } from 'node:fs';
-import { clientConfig, createToken, DEFAULT_HOST, DEFAULT_PORT, readState, SERVER_NAME, writeState, } from './config.js';
+import { clientConfig, CONFIG_ROUTE_PATH, createToken, DEFAULT_HOST, DEFAULT_PORT, readState, SERVER_NAME, snippetsFor, writeState, } from './config.js';
 import { startEndpoint } from './server.js';
 /** Stable Cordis plugin name. */
 export const name = 'dsh-session-mcp';
@@ -85,6 +85,31 @@ export async function apply(ctx, config) {
     ctx.logger?.info?.(`dsh-session-mcp: bearer token and client config in ${file}`);
     console.log(`dsh-session-mcp: ${endpoint.url} (bearer in ${file})`);
     console.log(JSON.stringify(state.client, null, 2));
+    // The Settings page reads the live config over the authenticated `/api`
+    // channel, so the token never enters the served HTML.
+    const payload = {
+        name: SERVER_NAME,
+        url: endpoint.url,
+        host,
+        port: endpoint.port,
+        token,
+        updatedAt: state.updatedAt,
+        snippets: snippetsFor(endpoint.url, token),
+    };
+    ctx.inject(['connection'], (connectionCtx) => {
+        connectionCtx.connection.fetch.register({
+            path: CONFIG_ROUTE_PATH,
+            methods: ['GET'],
+            requestBody: 'buffered',
+            fetch: async () => new Response(JSON.stringify(payload), {
+                status: 200,
+                headers: {
+                    'content-type': 'application/json; charset=utf-8',
+                    'cache-control': 'no-store',
+                },
+            }),
+        });
+    });
     ctx.effect(() => () => {
         void endpoint.close();
     }, 'dsh-session-mcp: endpoint lifetime');

package/dist/types.d.ts

@@ -79,4 +79,20 @@ export interface PluginContext {
     readonly sessionController: SessionController;
     readonly logger?: PluginLogger;
     effect(setup: () => () => void, label?: string): void;
+    inject(deps: readonly string[], callback: (ctx: ConnectionContext) => void): void;
+}
+/** One exact Fetch route on the authenticated `/api` channel. */
+export interface FetchRoute {
+    readonly path: string;
+    readonly methods: readonly string[];
+    readonly requestBody: 'buffered' | 'streaming';
+    readonly fetch: (request: Request) => Promise<Response>;
+}
+/** The slice of the Client Connection service a Host plugin can use. */
+export interface ConnectionContext {
+    readonly connection: {
+        readonly fetch: {
+            register(route: FetchRoute): unknown;
+        };
+    };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nones/dsh-session-mcp",
-  "version": "1.0.2",
+  "version": "1.1.0",
   "description": "MCP server for DeepSeek Harness sessions — list, read and prompt live conversations from any MCP client",
   "type": "module",
   "license": "MIT",
@@ -45,7 +45,11 @@
       "default": "./dist/config.js"
     },
     "./locale/*.json": "./locale/*.json",
-    "./icon": "./icon.svg"
+    "./icon": "./icon.svg",
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    }
   },
   "files": [
     "dist",
@@ -56,8 +60,8 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "build": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
     "prepublishOnly": "npm run build"
   },
   "publishConfig": {
@@ -76,6 +80,13 @@
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings"
+      ]
     }
   }
 }