@riceawa/dsh-lan-gateway 0.3.0

package/lib/client.js

@@ -0,0 +1,733 @@
+window.__ModuleLoader__.load({
+	id: "@riceawa/dsh-lan-gateway",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react = require("react");
+		let react_jsx_runtime = require("react/jsx-runtime");
+		//#region src/client/lan-gateway-card.tsx
+		/**
+		* The lan-gateway settings card shown in the official DSH Settings → Plugins
+		* page (the `settings.plugin.item` slot).
+		*
+		* ModLens-style: the card carries NO injected services. It reads and writes
+		* the loopback-only `/lan-gateway/config` host route (the browser never sees
+		* the settings seam or any secret), so the client bundle's only dependency is
+		* the `slots` service that every plugin already has.
+		*
+		* @module @riceawa/dsh-lan-gateway/client/card
+		*/
+		const LABELS = {
+			zh: {
+				title: "LAN 网关",
+				description: "远程访问开关、端口、TLS 证书、受信网段等网关设置",
+				unsaved: "未保存",
+				save: "保存",
+				saving: "保存中…",
+				discard: "放弃",
+				reset: "重置",
+				overridden: "已覆盖",
+				readOnly: "网关设置当前不可用（读不到配置路由）。",
+				saveFailed: "保存未生效，请检查输入后重试。",
+				loadFailed: "加载网关配置失败。",
+				emptyMeansClear: "留空 = 使用默认",
+				running: "运行中",
+				stopped: "已停止",
+				tls: "TLS",
+				lastError: "上次错误",
+				"field.enabled": "启用网关",
+				"hint.enabled": "启动时监听 0.0.0.0 网关端口",
+				"field.gatewayPort": "网关端口",
+				"hint.gatewayPort": "绑定到 0.0.0.0 的监听端口（默认 3081）",
+				"field.dshTargetPort": "dsh 目标端口",
+				"hint.dshTargetPort": "留空则自动跟随 dsh web 端口（默认 3080）",
+				"field.lanCidrs": "免密 LAN 网段",
+				"hint.lanCidrs": "逗号分隔的 CIDR，如 10.0.0.0/8, 192.168.0.0/16",
+				"field.authRequired": "非 LAN 访问需要密码",
+				"hint.authRequired": "公网来源必须登录后才能访问",
+				"field.cookieMaxAgeDays": "会话有效期（天）",
+				"hint.cookieMaxAgeDays": "登录 cookie 的存活天数（默认 7）",
+				"field.tlsEnabled": "启用 TLS（HTTPS）",
+				"hint.tlsEnabled": "以 HTTPS 提供网关服务",
+				"field.tlsMode": "证书来源",
+				"hint.tlsMode": "self-signed = 自动生成自签名证书；custom = 使用自己的证书",
+				"field.tlsSelfSignedHosts": "自签名证书域名/IP",
+				"hint.tlsSelfSignedHosts": "逗号分隔，写入证书 SAN，如 localhost, 192.168.1.5",
+				"field.tlsCertPath": "证书文件路径（custom）",
+				"hint.tlsCertPath": "PEM 格式证书（或证书链）的绝对路径",
+				"field.tlsKeyPath": "私钥文件路径（custom）",
+				"hint.tlsKeyPath": "与证书配套的 PEM 私钥绝对路径",
+				"field.tlsCertMaxAgeDays": "自签名证书有效期（天）",
+				"hint.tlsCertMaxAgeDays": "默认 825（约 27 个月）"
+			},
+			en: {
+				title: "LAN Gateway",
+				description: "Remote-access switch, port, TLS certificate, trusted CIDRs and more",
+				unsaved: "Unsaved",
+				save: "Save",
+				saving: "Saving…",
+				discard: "Discard",
+				reset: "Reset",
+				overridden: "overridden",
+				readOnly: "Gateway settings unavailable (config route unreachable).",
+				saveFailed: "The save did not land — check the inputs and retry.",
+				loadFailed: "Failed to load gateway configuration.",
+				emptyMeansClear: "Empty = default",
+				running: "Running",
+				stopped: "Stopped",
+				tls: "TLS",
+				lastError: "Last error",
+				"field.enabled": "Enable gateway",
+				"hint.enabled": "Listen on the gateway port at boot",
+				"field.gatewayPort": "Gateway port",
+				"hint.gatewayPort": "Port bound on 0.0.0.0 (default 3081)",
+				"field.dshTargetPort": "dsh target port",
+				"hint.dshTargetPort": "Leave empty to follow the dsh web port (default 3080)",
+				"field.lanCidrs": "Password-free LAN CIDRs",
+				"hint.lanCidrs": "Comma separated CIDRs, e.g. 10.0.0.0/8, 192.168.0.0/16",
+				"field.authRequired": "Password required for non-LAN",
+				"hint.authRequired": "Internet sources must sign in before reaching the GUI",
+				"field.cookieMaxAgeDays": "Session lifetime (days)",
+				"hint.cookieMaxAgeDays": "Login cookie lifetime (default 7)",
+				"field.tlsEnabled": "Enable TLS (HTTPS)",
+				"hint.tlsEnabled": "Serve the gateway over HTTPS",
+				"field.tlsMode": "Certificate source",
+				"hint.tlsMode": "self-signed = auto-generated certificate; custom = your own files",
+				"field.tlsSelfSignedHosts": "Self-signed hosts (SANs)",
+				"hint.tlsSelfSignedHosts": "Comma separated DNS/IP names, e.g. localhost, 192.168.1.5",
+				"field.tlsCertPath": "Certificate path (custom)",
+				"hint.tlsCertPath": "Absolute path to a PEM certificate (or chain)",
+				"field.tlsKeyPath": "Private key path (custom)",
+				"hint.tlsKeyPath": "Absolute path to the matching PEM private key",
+				"field.tlsCertMaxAgeDays": "Self-signed validity (days)",
+				"hint.tlsCertMaxAgeDays": "Default 825 (about 27 months)"
+			}
+		};
+		function labels() {
+			return (typeof navigator !== "undefined" ? navigator.language : "en").toLowerCase().startsWith("zh") ? LABELS.zh : LABELS.en;
+		}
+		const FIELDS = [
+			{
+				field: "enabled",
+				kind: "boolean"
+			},
+			{
+				field: "gatewayPort",
+				kind: "number"
+			},
+			{
+				field: "dshTargetPort",
+				kind: "number",
+				optional: true
+			},
+			{
+				field: "lanCidrs",
+				kind: "cidrs"
+			},
+			{
+				field: "authRequired",
+				kind: "boolean"
+			},
+			{
+				field: "cookieMaxAgeDays",
+				kind: "number"
+			},
+			{
+				field: "tlsEnabled",
+				kind: "boolean"
+			},
+			{
+				field: "tlsMode",
+				kind: "select",
+				options: ["self-signed", "custom"]
+			},
+			{
+				field: "tlsSelfSignedHosts",
+				kind: "text"
+			},
+			{
+				field: "tlsCertPath",
+				kind: "text",
+				optional: true
+			},
+			{
+				field: "tlsKeyPath",
+				kind: "text",
+				optional: true
+			},
+			{
+				field: "tlsCertMaxAgeDays",
+				kind: "number"
+			}
+		];
+		function formatValue(def, value) {
+			switch (def.kind) {
+				case "boolean": return value === true ? "true" : "false";
+				case "number": return typeof value === "number" ? String(value) : "";
+				case "cidrs": return Array.isArray(value) ? value.join(", ") : "";
+				case "select": return typeof value === "string" ? value : def.options?.[0] ?? "";
+				case "text": return typeof value === "string" ? value : "";
+			}
+		}
+		/** Parse draft text into a value for the POST body; undefined blocks saving. */
+		function parseValue(def, text) {
+			const trimmed = text.trim();
+			switch (def.kind) {
+				case "boolean":
+					if (trimmed === "true") return {
+						kind: "set",
+						value: true
+					};
+					if (trimmed === "false") return {
+						kind: "set",
+						value: false
+					};
+					return;
+				case "number":
+					if (trimmed === "") return def.optional ? { kind: "clear" } : void 0;
+					if (!/^\d+$/.test(trimmed)) return void 0;
+					return {
+						kind: "set",
+						value: Number(trimmed)
+					};
+				case "cidrs": {
+					const cidrs = trimmed.split(",").map((s) => s.trim()).filter((s) => s !== "");
+					return cidrs.length === 0 ? { kind: "clear" } : {
+						kind: "set",
+						value: cidrs
+					};
+				}
+				case "select": return def.options?.includes(trimmed) ? {
+					kind: "set",
+					value: trimmed
+				} : void 0;
+				case "text": return trimmed === "" ? def.optional ? { kind: "clear" } : void 0 : {
+					kind: "set",
+					value: trimmed
+				};
+			}
+		}
+		/**
+		* Render the LAN gateway card. Self-loading: fetches the config route on
+		* mount, posts the edited config on save.
+		* @param _props - unused; the card needs no injected face.
+		* @returns the card, or nothing while the route is unreachable.
+		*/
+		function LanGatewayCard(_props) {
+			const t = labels();
+			const [open, setOpen] = (0, react.useState)(false);
+			const [route, setRoute] = (0, react.useState)(null);
+			const [loadFailed, setLoadFailed] = (0, react.useState)(false);
+			const [drafts, setDrafts] = (0, react.useState)({});
+			const [saving, setSaving] = (0, react.useState)(false);
+			const [failed, setFailed] = (0, react.useState)(null);
+			(0, react.useEffect)(() => {
+				let cancelled = false;
+				fetch("/lan-gateway/config").then(async (response) => {
+					if (cancelled) return;
+					if (!response.ok) throw new Error(`HTTP ${response.status}`);
+					setRoute(await response.json());
+				}).catch(() => {
+					if (!cancelled) setLoadFailed(true);
+				});
+				return () => {
+					cancelled = true;
+				};
+			}, []);
+			if (loadFailed) return null;
+			if (route === null) return null;
+			const { config } = route;
+			const draftOf = (field) => drafts[field] ?? formatValue(FIELDS.find((f) => f.field === field), config[field]);
+			const stage = (field, text) => {
+				setDrafts((prev) => ({
+					...prev,
+					[field]: text
+				}));
+				setFailed(null);
+			};
+			const resetField = (def) => {
+				setDrafts((prev) => {
+					const next = { ...prev };
+					delete next[def.field];
+					return next;
+				});
+			};
+			const discard = () => {
+				setDrafts({});
+				setFailed(null);
+			};
+			const invalid = () => Object.entries(drafts).some(([field, text]) => {
+				const def = FIELDS.find((f) => f.field === field);
+				return def === void 0 || parseValue(def, text ?? "") === void 0;
+			});
+			const dirty = Object.keys(drafts).length > 0;
+			const save = async () => {
+				if (!dirty || saving || invalid()) return;
+				setSaving(true);
+				setFailed(null);
+				try {
+					const next = {};
+					for (const def of FIELDS) {
+						const write = parseValue(def, drafts[def.field] ?? formatValue(def, config[def.field]));
+						if (write === void 0) continue;
+						next[def.field] = write.kind === "clear" ? null : write.value;
+					}
+					const response = await fetch("/lan-gateway/config", {
+						method: "POST",
+						headers: { "content-type": "application/json" },
+						body: JSON.stringify(next)
+					});
+					const body = await response.json().catch(() => ({}));
+					if (!response.ok) {
+						setFailed(body.error ?? `HTTP ${response.status}`);
+						return;
+					}
+					if (body.config !== void 0) setRoute({
+						config: body.config,
+						running: body.running ?? false,
+						port: body.port ?? 0,
+						tls: body.tls ?? "",
+						lastError: body.lastError ?? null
+					});
+					setDrafts({});
+				} catch {
+					setFailed(t.saveFailed);
+				} finally {
+					setSaving(false);
+				}
+			};
+			const renderControl = (def) => {
+				const field = def.field;
+				const label = t[`field.${field}`];
+				const hint = t[`hint.${field}`];
+				const text = draftOf(field);
+				switch (def.kind) {
+					case "boolean": return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: styles.field,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+							style: styles.checkRow,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "checkbox",
+									checked: text === "true",
+									disabled: saving,
+									onChange: (e) => stage(field, e.target.checked ? "true" : "false")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: styles.label,
+									children: label
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: styles.reset,
+									disabled: saving || !drafts[field],
+									onClick: () => resetField(def),
+									children: t.reset
+								})
+							]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							style: styles.hint,
+							children: hint
+						})]
+					});
+					case "select": return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: styles.field,
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+								style: styles.label,
+								htmlFor: `lan-gw-${field}`,
+								children: label
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
+								id: `lan-gw-${field}`,
+								style: styles.input,
+								value: text,
+								disabled: saving,
+								onChange: (e) => stage(field, e.target.value),
+								children: def.options?.map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+									value: option,
+									children: option
+								}, option))
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: styles.hint,
+								children: hint
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								style: styles.reset,
+								disabled: saving || !drafts[field],
+								onClick: () => resetField(def),
+								children: t.reset
+							})
+						]
+					});
+					default: return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: styles.field,
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+								style: styles.label,
+								htmlFor: `lan-gw-${field}`,
+								children: label
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								id: `lan-gw-${field}`,
+								style: styles.input,
+								type: def.kind === "number" ? "number" : "text",
+								value: text,
+								disabled: saving,
+								placeholder: def.optional ? t.emptyMeansClear : void 0,
+								onChange: (e) => stage(field, e.target.value)
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: styles.hint,
+								children: hint
+							})
+						]
+					});
+				}
+			};
+			const statusLine = `${route.running ? t.running : t.stopped} · ${t.tls}: ${route.tls} · :${route.port}`;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+				style: open ? {
+					...styles.card,
+					...styles.cardOpen
+				} : styles.card,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+					type: "button",
+					style: styles.header,
+					"aria-expanded": open,
+					onClick: () => {
+						setOpen(!open);
+					},
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							style: styles.headText,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: styles.name,
+								children: t.title
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: styles.description,
+								children: t.description
+							})]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							style: styles.status,
+							children: statusLine
+						}),
+						dirty ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							style: styles.pending,
+							children: t.unsaved
+						}) : null,
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							style: open ? {
+								...styles.chevron,
+								...styles.chevronOpen
+							} : styles.chevron,
+							children: open ? "▾" : "▸"
+						})
+					]
+				}), open ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					style: styles.body,
+					children: [
+						route.lastError ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+							style: styles.error,
+							role: "status",
+							children: [
+								t.lastError,
+								": ",
+								route.lastError
+							]
+						}) : null,
+						FIELDS.map((def) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: renderControl(def) }, def.field)),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles.footer,
+							children: [
+								failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: styles.error,
+									role: "status",
+									children: failed
+								}) : null,
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: styles.discard,
+									disabled: !dirty || saving,
+									onClick: discard,
+									children: t.discard
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: styles.save,
+									disabled: !dirty || invalid() || saving,
+									onClick: () => {
+										save();
+									},
+									children: saving ? t.saving : t.save
+								})
+							]
+						})
+					]
+				}) : null]
+			});
+		}
+		/** Theme token with a fallback for token-less environments. */
+		function tk(token, fallback) {
+			return `var(${token}, ${fallback})`;
+		}
+		const L = {
+			border: tk("--dsw-alias-border-l2", "rgba(127,127,127,0.35)"),
+			bg: tk("--dsw-alias-bg-layer-3", "transparent"),
+			bgOpen: tk("--dsw-alias-bg-layer-2", "transparent"),
+			labelPrimary: tk("--dsw-alias-label-primary", "inherit"),
+			labelSecondary: tk("--dsw-alias-label-secondary", "inherit"),
+			labelTertiary: tk("--dsw-alias-label-tertiary", "rgba(127,127,127,0.8)"),
+			labelDimmed: tk("--dsw-alias-label-dimmed", "rgba(127,127,127,0.6)"),
+			error: tk("--dsw-alias-label-error", "#d1242f"),
+			brand: tk("--dsw-alias-brand-primary", "#4f6ef7"),
+			badgeBg: tk("--dsw-alias-bg-module-platform", "rgba(127,127,127,0.14)")
+		};
+		const styles = {
+			card: {
+				listStyle: "none",
+				border: `1px solid ${L.border}`,
+				borderRadius: "12px",
+				background: L.bg,
+				transition: "border-color .16s, background .16s",
+				overflow: "hidden"
+			},
+			cardOpen: {
+				background: L.bgOpen,
+				borderColor: L.labelDimmed
+			},
+			header: {
+				display: "flex",
+				alignItems: "center",
+				gap: "12px",
+				width: "100%",
+				padding: "14px 16px",
+				border: 0,
+				background: "none",
+				font: "inherit",
+				color: "inherit",
+				textAlign: "left",
+				cursor: "pointer"
+			},
+			headText: {
+				display: "flex",
+				flexDirection: "column",
+				gap: "4px",
+				flex: 1,
+				minWidth: 0
+			},
+			name: {
+				fontSize: "15px",
+				fontWeight: 600,
+				lineHeight: 1.4,
+				color: L.labelPrimary
+			},
+			description: {
+				fontSize: "13px",
+				lineHeight: 1.5,
+				color: L.labelTertiary
+			},
+			status: {
+				fontSize: "11px",
+				color: L.labelTertiary,
+				whiteSpace: "nowrap"
+			},
+			pending: {
+				flex: "none",
+				borderRadius: "999px",
+				padding: "1px 8px",
+				fontSize: "11px",
+				lineHeight: "17px",
+				fontWeight: 500,
+				whiteSpace: "nowrap",
+				background: L.badgeBg,
+				color: L.labelSecondary
+			},
+			chevron: {
+				flex: "none",
+				color: L.labelTertiary,
+				fontSize: "12px",
+				transition: "transform .16s"
+			},
+			chevronOpen: { transform: "rotate(180deg)" },
+			body: {
+				borderTop: `1px solid ${L.border}`,
+				margin: "0 16px",
+				paddingBottom: "8px",
+				display: "flex",
+				flexDirection: "column"
+			},
+			field: {
+				display: "flex",
+				flexDirection: "column",
+				gap: "6px",
+				padding: "12px 0"
+			},
+			label: {
+				fontSize: "13px",
+				fontWeight: 500,
+				lineHeight: 1.5,
+				color: L.labelPrimary
+			},
+			hint: {
+				margin: 0,
+				fontSize: "12px",
+				lineHeight: 1.5,
+				color: L.labelTertiary
+			},
+			checkRow: {
+				display: "flex",
+				alignItems: "center",
+				gap: "8px",
+				cursor: "pointer"
+			},
+			reset: {
+				border: "none",
+				background: "none",
+				padding: 0,
+				font: "inherit",
+				fontSize: "12px",
+				lineHeight: 1.5,
+				color: L.labelSecondary,
+				cursor: "pointer",
+				alignSelf: "flex-start"
+			},
+			input: {
+				height: "34px",
+				padding: "0 12px",
+				border: `1px solid ${L.border}`,
+				borderRadius: "8px",
+				background: L.bg,
+				font: "inherit",
+				fontSize: "13px",
+				lineHeight: 1.5,
+				color: L.labelPrimary
+			},
+			footer: {
+				display: "flex",
+				alignItems: "center",
+				justifyContent: "flex-end",
+				gap: "8px",
+				padding: "12px 0 4px",
+				borderTop: `1px solid ${L.border}`
+			},
+			error: {
+				flex: 1,
+				minWidth: 0,
+				margin: 0,
+				fontSize: "12px",
+				lineHeight: 1.5,
+				color: L.error
+			},
+			discard: {
+				appearance: "none",
+				border: `1px solid ${L.border}`,
+				borderRadius: "8px",
+				padding: "5px 14px",
+				font: "inherit",
+				fontSize: "13px",
+				lineHeight: 1.5,
+				background: "none",
+				color: L.labelSecondary,
+				cursor: "pointer"
+			},
+			save: {
+				appearance: "none",
+				border: "1px solid transparent",
+				borderRadius: "8px",
+				padding: "5px 14px",
+				font: "inherit",
+				fontSize: "13px",
+				lineHeight: 1.5,
+				background: L.labelPrimary,
+				color: L.bg,
+				cursor: "pointer"
+			}
+		};
+		//#endregion
+		//#region src/client/index.ts
+		/**
+		* @riceawa/dsh-lan-gateway — browser half.
+		*
+		* Two jobs:
+		* 1. Insecure-origin UUID shim: the gateway can serve the GUI over plain HTTP
+		*    on LAN addresses, where browsers lack `crypto.randomUUID()`. This bundle
+		*    installs a getRandomValues-backed `randomUUID` on the Crypto prototype at
+		*    module scope. With TLS enabled the origin is secure and the shim is a
+		*    no-op.
+		* 2. Settings card: registers the LAN gateway card into the official
+		*    Settings → Plugins page (`settings.plugin.item` slot), editing the
+		*    `lan-gateway` settings namespace so port, CIDRs, auth, and TLS are
+		*    adjustable from the GUI.
+		*/
+		/** RFC 4122 v4 UUID from crypto.getRandomValues (available on insecure origins). */
+		function uuidFromRandomValues() {
+			const bytes = globalThis.crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
+			const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+			view.setUint8(6, view.getUint8(6) & 15 | 64);
+			view.setUint8(8, view.getUint8(8) & 63 | 128);
+			const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+			return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+		}
+		/**
+		* Install `randomUUID` on the browser Crypto prototype when the platform
+		* lacks it. Idempotent; re-checks every call.
+		* @returns `true` when the shim was installed by this call.
+		*/
+		function installRandomUuidShim() {
+			const cryptoObj = globalThis.crypto;
+			if (cryptoObj === void 0) return false;
+			if (typeof cryptoObj.randomUUID === "function") return false;
+			if (typeof cryptoObj.getRandomValues !== "function") return false;
+			try {
+				const proto = Object.getPrototypeOf(cryptoObj);
+				if (proto !== null && typeof proto.randomUUID !== "function") {
+					Object.defineProperty(proto, "randomUUID", {
+						value: uuidFromRandomValues,
+						writable: true,
+						configurable: true
+					});
+					return true;
+				}
+				Object.defineProperty(cryptoObj, "randomUUID", {
+					value: uuidFromRandomValues,
+					writable: true,
+					configurable: true
+				});
+				return true;
+			} catch {
+				return false;
+			}
+		}
+		installRandomUuidShim();
+		const name = "dsh-lan-gateway";
+		/** Only the slots service: the card itself is self-loading (ModLens-style). */
+		const inject = ["slots"];
+		/**
+		* Mount the settings card and the UUID shim.
+		* @param ctx - the browser plugin context.
+		*/
+		function apply(ctx) {
+			installRandomUuidShim();
+			ctx.slots.inject("settings.plugin.item", function* () {
+				yield ctx.slots.register({
+					name: "settings.plugin.item",
+					id: "lan-gateway",
+					order: 30
+				}, LanGatewayCard);
+			});
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		exports.installRandomUuidShim = installRandomUuidShim;
+		exports.name = name;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map