@wenbin_wb/dsh-bridge 2.5.1 → 2.5.3

package/README.en.md

@@ -1,14 +1,36 @@
 # dsh-bridge
 
-[简体中文](README.md) | English
-
-![dsh-bridge banner](docs/banner.jpg)
-
-> Multi-channel remote access plugin for DeepSeek Harness
-
-Keep using your DeepSeek Harness on the go. Scan a QR code with your phone and keep working from your sofa, another room, or across the world — no need to sit at your desk, no need to be on the same network, and no need to set up your own public server.
-
-Seamlessly extend your local DeepSeek Harness to mobile phones, tablets, public networks, and WeChat / QQ. Access your AI assistant anytime, anywhere via QR code scanning, web browsers, or IM bots.
+<p align="center">
+  <img src="docs/banner.jpg" alt="dsh-bridge banner" width="100%" />
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@wenbin_wb/dsh-bridge"><img src="https://img.shields.io/npm/v/@wenbin_wb/dsh-bridge.svg?style=flat-square&color=38bdf8&logo=npm" alt="npm version" /></a>
+  <a href="https://www.npmjs.com/package/@wenbin_wb/dsh-bridge"><img src="https://img.shields.io/npm/dt/@wenbin_wb/dsh-bridge.svg?style=flat-square&color=fbbf24&logo=npm" alt="npm downloads" /></a>
+  <a href="https://github.com/wenbin-wb/dsh-bridge/releases"><img src="https://img.shields.io/github/v/release/wenbin-wb/dsh-bridge?style=flat-square&color=10b981&logo=github" alt="GitHub release" /></a>
+  <a href="https://github.com/wenbin-wb/dsh-bridge/stargazers"><img src="https://img.shields.io/github/stars/wenbin-wb/dsh-bridge?style=flat-square&color=f43f5e&logo=github" alt="GitHub stars" /></a>
+  <a href="https://nodejs.org/"><img src="https://img.shields.io/badge/Node.js-%E2%89%A522.19%20%7C%20%E2%89%A524-339933?style=flat-square&logo=node.js" alt="Node.js version" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/npm/l/@wenbin_wb/dsh-bridge?style=flat-square&color=a855f7" alt="license" /></a>
+</p>
+
+<p align="center">
+  <img src="https://img.shields.io/badge/Security-Access%20Auth%20%2B%20PBKDF2-6366f1?style=flat-square&logo=security" alt="Security" />
+  <img src="https://img.shields.io/badge/WeChat-ClawBot%20%7C%20iLink-07C160?style=flat-square&logo=wechat" alt="WeChat" />
+  <img src="https://img.shields.io/badge/QQ%20Bot-OpenAPI%20v2-12B7F5?style=flat-square&logo=tencentqq" alt="QQ" />
+  <img src="https://img.shields.io/badge/Feishu-WebSocket%202.0-00D6B9?style=flat-square&logo=lark" alt="Feishu" />
+  <img src="https://img.shields.io/badge/Telegram-Bot%20API-24A1DE?style=flat-square&logo=telegram" alt="Telegram" />
+  <img src="https://img.shields.io/badge/Cloudflare-Tunnel-F38020?style=flat-square&logo=cloudflare" alt="Cloudflare" />
+</p>
+
+<p align="center">
+  <a href="README.md">简体中文</a> | <b>English</b>
+</p>
+
+> **Multi-channel remote access & enterprise security guard plugin for DeepSeek Harness**
+> 
+> Keep using your DeepSeek Harness on the go. Scan a QR code with your phone and keep working from your sofa, another room, or across the world — no need to sit at your desk, no need to be on the same network, and no need to set up your own public server.
+> 
+> Seamlessly extend your local DeepSeek Harness to mobile phones, tablets, public networks, and WeChat / QQ / Feishu / Telegram. Access your AI assistant anytime, anywhere via QR code scanning, web browsers, or IM bots.
 
 ---
 
@@ -30,11 +52,6 @@ Seamlessly extend your local DeepSeek Harness to mobile phones, tablets, public
 - **Fast Version Check & 1-Click Upgrade**: Dual-channel registry check (npmmirror + npmjs fallback in ~200ms) with seamless **1-click in-app upgrade**, no terminal copying required
 - **Dark Mode Support**: Deep integration with DeepSeek Harness Design Tokens (`--dsw-alias-*`), QR code background protection for safe dark mode scanning
 
-![npm](https://img.shields.io/npm/v/@wenbin_wb/dsh-bridge?label=npm)
-![npm downloads](https://img.shields.io/npm/dt/@wenbin_wb/dsh-bridge?label=downloads)
-![npm license](https://img.shields.io/npm/l/@wenbin_wb/dsh-bridge?label=license)
-![Node](https://img.shields.io/badge/node-%3E%3D22-brightgreen)
-
 ---
 
 ## Roadmap
@@ -146,6 +163,14 @@ Go to Settings -> "Remote Access" -> "**Security**" tab to enable enterprise-gra
   - 🎫 **Secure Token Only**: Only devices with valid QR codes or Token links can enter.
 - **1-Click Token Rotation**: Click "🔄 Reset Security Token" to immediately invalidate all previously shared QR codes and URLs.
 
+<details>
+  <summary>📱 Click to expand visitor access login page screenshot</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/remote-auth-login.jpg" width="600" alt="Visitor Access Login Page" />
+  </p>
+</details>
+
 #### 2. 🔒 2nd Line of Defense: Admin Console Anti-Tamper Guard (Protects Plugin Settings)
 - **Separated Admin Password**: Independent administrator password decoupled from visitor password; guests with access passwords cannot tamper with tunnels, bots, or tokens;
 - **Three Admin Policies**:
@@ -153,6 +178,14 @@ Go to Settings -> "Remote Access" -> "**Security**" tab to enable enterprise-gra
   - 🛡️ **Host Computer Only (Highest Security)**: Remote devices are strictly blocked from viewing or changing network/bot/security settings — management is only allowed from the physical host (`127.0.0.1`);
   - 🌐 **Open Mode**: Remote authenticated users can directly manage settings.
 
+<details>
+  <summary>🖥️ Click to expand remote admin console anti-tamper lock screenshot</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/admin-lock-screen.jpg" width="600" alt="Admin Console Anti-Tamper Lock" />
+  </p>
+</details>
+
 #### 3. 🛟 Fail-safe Recovery System (Never Locked Out)
 - **Physical Host Privileges**: Host computer running DSH (`127.0.0.1` / `localhost`) has permanent physical privileges — **never requires access password, settings panel is never locked**;
 - **Emergency Terminal Command**: On headless Linux servers or in case of forgotten passwords, run a single command in your terminal:
@@ -162,13 +195,15 @@ Go to Settings -> "Remote Access" -> "**Security**" tab to enable enterprise-gra
   The plugin instantly detects the marker, wipes all passwords and locks, deletes the marker, and restores default passwordless access;
 - **Built-in Recovery Guides**: Both visitor login pages and admin lock screens provide expandable `❓ Forgot Password?` help cards.
 
+![Access Auth Security Settings](docs/screenshots/security-auth-config.jpg)
+
 ---
 
 ### LAN Access
 
 Automatically active when the plugin starts, zero configuration needed. Open Settings -> "Remote Access", and scan the QR code with your phone.
 
-![QR Scan Access](docs/screenshots/qr-scan.jpg)
+![LAN Access QR Scan](docs/screenshots/lan-access.jpg)
 
 ### Cloudflare Tunnel
 
@@ -177,6 +212,16 @@ Automatically active when the plugin starts, zero configuration needed. Open Set
 3. Once downloaded, it starts automatically and displays a public URL and QR code within seconds
 4. The URL changes on each restart; click "Reset URL" to request a new URL
 
+![Public Tunnel Settings](docs/screenshots/tunnel-access.jpg)
+
+<details>
+  <summary>📱 Click to expand mobile browser public access screenshot</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/remote-web-mobile.jpg" width="340" alt="Mobile Public Access Demo" />
+  </p>
+</details>
+
 ### Custom Tunnel
 
 Requires a server with a public IP (server environment requires Node.js >= 18, recommended Node.js 22 LTS). See the [Custom Tunnel Setup Guide](docs/custom-tunnel.md) for detailed steps.
@@ -191,7 +236,15 @@ Configurations persist across restarts.
 
 Powered by Tencent's official WeChat ClawBot feature (iLink Bot API). Log in with your personal WeChat account by scanning a QR code, then chat with, control, and approve your DeepSeek Harness agents directly in WeChat — fully routed through Tencent's official servers, no public server or tunnel needed.
 
-![WeChat Chat Example](docs/screenshots/wechat-chat.jpg)
+![WeChat Bot Configuration](docs/screenshots/wechat-bot-config.jpg)
+
+<details>
+  <summary>📱 Click to expand mobile WeChat chat screenshot</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/wechat-chat.jpg" width="380" alt="WeChat Chat Example" />
+  </p>
+</details>
 
 **Key Highlights**
 
@@ -241,9 +294,16 @@ Powered by Tencent's official WeChat ClawBot feature (iLink Bot API). Log in wit
 
 Integrates Tencent's official QQ Bot platform. Supports private chat, group chat (@bot trigger), streaming output, Markdown rendering, message buttons, and rich media (images/files). Driven by Tencent's official QQ Bot OpenAPI v2 with real-time WebSocket push, automatic token refresh, and auto-reconnection.
 
-![QQ Private Chat](docs/screenshots/qq-chat.jpg)
+![QQ Bot Configuration](docs/screenshots/qq-bot-config.jpg)
 
-![QQ Group Chat](docs/screenshots/qq-group.jpg)
+<details>
+  <summary>📱 Click to expand mobile QQ private and group chat screenshots</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/qq-chat.jpg" width="48%" alt="QQ Private Chat" />
+    <img src="docs/screenshots/qq-group.jpg" width="48%" alt="QQ Group Chat" />
+  </p>
+</details>
 
 **Key Highlights**
 
@@ -288,6 +348,16 @@ Integrates Tencent's official QQ Bot platform. Supports private chat, group chat
 
 Connect your enterprise self-built app via Feishu's official WebSocket protocol. Supports private chat and group mentions without public IP, domain name, or webhook configuration.
 
+![Feishu Bot Configuration](docs/screenshots/feishu-bot-config.jpg)
+
+<details>
+  <summary>📱 Click to expand mobile Feishu chat & card approval screenshot</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/feishu-chat.jpg" width="380" alt="Feishu Chat & Card Approval" />
+  </p>
+</details>
+
 **Key Highlights**
 
 - ⚡ **100% No Public IP Required**: Direct duplex WebSocket connection to Feishu Open Platform
@@ -325,6 +395,8 @@ Connect your enterprise self-built app via Feishu's official WebSocket protocol.
 
 Connect official Telegram Bot API for real-time private and group interactions. Powered by official Long Polling (`getUpdates`), **no public IP / no Webhook required**, built-in **zero-dependency HTTP/HTTPS CONNECT proxy tunnel**, ready to use in any network environment.
 
+![Telegram Bot Configuration](docs/screenshots/telegram-bot-config.jpg)
+
 **Key Features**
 
 - ⚡ **100% No Public IP Needed**: Official Long Polling mechanism allows local machines or private servers to connect directly
@@ -388,6 +460,37 @@ dsh plugin --profile web add .
 
 ---
 
+## FAQ (Frequently Asked Questions)
+
+<details>
+  <summary><b>Q1: Getting "Failed to load provider directory: settings are unavailable in this browser" when accessing remotely?</b></summary>
+  <br/>
+
+  - **Reason**: This is an upstream security feature in DeepSeek Harness (DSH). To prevent malicious network devices from intercepting API keys and model credentials, DSH restricts the provider catalog & credential modification API exclusively to loopback (`127.0.0.1`).
+  - **Recommendations**:
+    1. **Recommended Workflow**: Configure your LLM models & API keys once on your desktop computer (`127.0.0.1:3080`). Afterward, you can create sessions, chat, and control agents from your mobile device with 100% full functionality;
+    2. **Cloudflare Tunnel**: Accessing through the built-in Cloudflare Tunnel (`https://*.trycloudflare.com`) provides a secure HTTPS context for maximum mobile browser compatibility;
+    3. **SSH Port Forwarding**: If you must modify API keys remotely from a phone, use SSH local port forwarding (`ssh -L 3082:127.0.0.1:3082 user@ip`) to map the connection to localhost.
+</details>
+
+<details>
+  <summary><b>Q2: Prompted with "Admin permission required" or settings locked when modifying config remotely?</b></summary>
+  <br/>
+
+  - **Reason**: The plugin incorporates an Anti-Tamper Guard to prevent unauthorized visitors from viewing or tampering with tunnels and bot tokens.
+  - **Solution**:
+    1. Enter your admin password in the interactive **"🔒 Unlock Admin Console"** dialog to unlock the session (if you haven't set a separate admin password, enter your initial access password);
+    2. **Host computer (127.0.0.1) access has permanent physical privileges** and is never locked;
+    3. In case of forgotten passwords, execute a single emergency command in your host terminal:
+       ```bash
+       touch ~/.dsh/dsh-bridge/reset-auth
+       ```
+       The plugin will instantly clear passwords and restore default passwordless access.
+</details>
+
+---
+
 ## License
 
 MIT © [wenbin-wb](https://github.com/wenbin-wb)
+

package/README.md

@@ -1,14 +1,36 @@
 # dsh-bridge
 
-简体中文 | [English](README.en.md)
-
-![dsh-bridge banner](docs/banner.jpg)
-
-> DeepSeek Harness 多通道远程访问插件
-
-手机扫个码，人不在电脑前也能继续用 DeepSeek Harness。躺在沙发上、出差在外、跨网访问——都不用守着电脑，也不用自己搭公网服务器，扫码就能在手机/平板或任意设备上接着干。
-
-把你本地的 DeepSeek Harness 无缝延伸到手机、平板、公网、甚至微信 / QQ。无论你在哪，都能通过扫码、网页或 IM 机器人，随时调用你的 AI 助手。
+<p align="center">
+  <img src="docs/banner.jpg" alt="dsh-bridge banner" width="100%" />
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@wenbin_wb/dsh-bridge"><img src="https://img.shields.io/npm/v/@wenbin_wb/dsh-bridge.svg?style=flat-square&color=38bdf8&logo=npm" alt="npm version" /></a>
+  <a href="https://www.npmjs.com/package/@wenbin_wb/dsh-bridge"><img src="https://img.shields.io/npm/dt/@wenbin_wb/dsh-bridge.svg?style=flat-square&color=fbbf24&logo=npm" alt="npm downloads" /></a>
+  <a href="https://github.com/wenbin-wb/dsh-bridge/releases"><img src="https://img.shields.io/github/v/release/wenbin-wb/dsh-bridge?style=flat-square&color=10b981&logo=github" alt="GitHub release" /></a>
+  <a href="https://github.com/wenbin-wb/dsh-bridge/stargazers"><img src="https://img.shields.io/github/stars/wenbin-wb/dsh-bridge?style=flat-square&color=f43f5e&logo=github" alt="GitHub stars" /></a>
+  <a href="https://nodejs.org/"><img src="https://img.shields.io/badge/Node.js-%E2%89%A522.19%20%7C%20%E2%89%A524-339933?style=flat-square&logo=node.js" alt="Node.js version" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/npm/l/@wenbin_wb/dsh-bridge?style=flat-square&color=a855f7" alt="license" /></a>
+</p>
+
+<p align="center">
+  <img src="https://img.shields.io/badge/Security-Access%20Auth%20%2B%20PBKDF2-6366f1?style=flat-square&logo=security" alt="Security" />
+  <img src="https://img.shields.io/badge/WeChat-ClawBot%20%7C%20iLink-07C160?style=flat-square&logo=wechat" alt="WeChat" />
+  <img src="https://img.shields.io/badge/QQ%20Bot-OpenAPI%20v2-12B7F5?style=flat-square&logo=tencentqq" alt="QQ" />
+  <img src="https://img.shields.io/badge/Feishu-WebSocket%202.0-00D6B9?style=flat-square&logo=lark" alt="Feishu" />
+  <img src="https://img.shields.io/badge/Telegram-Bot%20API-24A1DE?style=flat-square&logo=telegram" alt="Telegram" />
+  <img src="https://img.shields.io/badge/Cloudflare-Tunnel-F38020?style=flat-square&logo=cloudflare" alt="Cloudflare" />
+</p>
+
+<p align="center">
+  <b>简体中文</b> | <a href="README.en.md">English</a>
+</p>
+
+> **DeepSeek Harness 多通道远程访问与全域安全门禁插件**
+> 
+> 手机扫个码，人不在电脑前也能继续用 DeepSeek Harness。躺在沙发上、出差在外、跨网访问——都不用守着电脑，也不用自己搭公网服务器，扫码就能在手机/平板或任意设备上接着干。
+> 
+> 把你本地的 DeepSeek Harness 无缝延伸到手机、平板、公网、甚至微信 / QQ / 飞书 / Telegram。无论你在哪，都能通过扫码、网页或 IM 机器人，随时调用你的 AI 助手。
 
 ---
 
@@ -30,11 +52,6 @@
 - **极速版本检查与一键升级**：国内高速镜像（npmmirror）优先 + 官方源毫秒级双通道检查，检测到新版本支持**界面一键直接升级**，无需手动打开终端
 - **深色模式深度适配**：完美适配 DeepSeek Harness 设计系统明暗主题切换，二维码自带白底安全垫，暗光下手机扫码 100% 极速识别
 
-![npm](https://img.shields.io/npm/v/@wenbin_wb/dsh-bridge?label=npm)
-![npm downloads](https://img.shields.io/npm/dt/@wenbin_wb/dsh-bridge?label=downloads)
-![npm license](https://img.shields.io/npm/l/@wenbin_wb/dsh-bridge?label=license)
-![Node](https://img.shields.io/badge/node-%3E%3D22-brightgreen)
-
 ---
 
 ## 开发路线图
@@ -146,6 +163,14 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
   - 🎫 **仅专属 Token 免密**：仅允许通过控制台生成的二维码或带 Token 的专属链接进入。
 - **一键轮换凭据**：点击「🔄 重置安全 Token」即可使之前分享的旧二维码和链接立即全部失效。
 
+<details>
+  <summary>📱 点击展开外部访问安全认证登录页截图</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/remote-auth-login.jpg" width="600" alt="外部访问安全认证登录页" />
+  </p>
+</details>
+
 #### 2. 🔒 第二道防线：管理后台防篡改（保护谁能改插件设置）
 - **独立管理员密码**：访客访问密码与管理控制密码彻底分离，即使将访问密码告诉外部朋友，对方也无法查看或篡改您的插件设置；
 - **三种后台权限策略**：
@@ -153,6 +178,14 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
   - 🛡️ **仅限电脑本机管理 (最高安全)**：远程设备一律禁止查看与修改任何网络、机器人配置与 Token，仅允许在电脑本机（`127.0.0.1`）操作；
   - 🌐 **宽松模式**：允许通过访客认证的远程设备直接管理。
 
+<details>
+  <summary>🖥️ 点击展开远程设备管理控制台防篡改锁定截图</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/admin-lock-screen.jpg" width="600" alt="管理控制台防篡改锁定" />
+  </p>
+</details>
+
 #### 3. 🛟 三重容灾保命体系（永不自锁）
 - **物理机免密直通**：运行 DSH 的宿主电脑（`127.0.0.1` / `localhost`）享有全局最高物理特权，**永不要求输入访问密码，设置面板永不会被锁定**；
 - **服务器一键救急指令**：无头 Linux 服务器或极端忘记密码时，在宿主电脑终端执行单行命令：
@@ -162,13 +195,15 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
   插件将在毫秒级自动清空密码与策略并删除标记，瞬间恢复初始免密状态；
 - **全界面忘记密码指引**：访客登录页与锁屏页均提供 `❓ 忘记密码？` 救助展开卡片。
 
+![安全认证配置](docs/screenshots/security-auth-config.jpg)
+
 ---
 
 ### 局域网访问
 
 插件启动后自动开启，无需任何配置。打开设置页「远程访问」，用手机扫描二维码即可访问。
 
-![扫码访问](docs/screenshots/qr-scan.jpg)
+![局域网扫码访问](docs/screenshots/lan-access.jpg)
 
 ### Cloudflare 隧道
 
@@ -177,6 +212,16 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
 3. 下载完成后自动启动，几秒内显示公网 URL 和二维码
 4. 每次重启后 URL 会变化；点「重置链接」可主动获取新 URL
 
+![公网隧道配置](docs/screenshots/tunnel-access.jpg)
+
+<details>
+  <summary>📱 点击展开手机公网访问 DeepSeek Harness 效果截图</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/remote-web-mobile.jpg" width="340" alt="手机公网访问 DeepSeek Harness 效果" />
+  </p>
+</details>
+
 ### 自建隧道
 
 需要一台有公网 IP 的服务器（服务端环境要求 Node.js >= 18，推荐 Node.js 22 LTS）。详细搭建步骤见 [自建隧道教程](docs/custom-tunnel.md)。
@@ -191,7 +236,15 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
 
 基于腾讯官方开放的微信 ClawBot 插件功能（底层 iLink Bot API），扫码登录微信个人号后，即可在微信里直接与你的 DeepSeek Harness agent 对话、控制和审批，全程走腾讯官方服务器，无需公网与隧道。
 
-![微信对话示例](docs/screenshots/wechat-chat.jpg)
+![微信 Bot 配置](docs/screenshots/wechat-bot-config.jpg)
+
+<details>
+  <summary>📱 点击展开手机微信对话与交互截图</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/wechat-chat.jpg" width="380" alt="微信对话示例" />
+  </p>
+</details>
 
 **功能亮点**
 
@@ -241,9 +294,16 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
 
 接入 QQ 官方机器人，支持单聊/群聊（群聊需 @机器人）、流式输出、Markdown 渲染、消息按钮、富媒体消息（图片/文件）。走腾讯官方 QQ Bot OpenAPI v2，WebSocket 实时推送，Token 自动刷新，断线自动重连。
 
-![QQ 单聊对话](docs/screenshots/qq-chat.jpg)
+![QQ Bot 配置](docs/screenshots/qq-bot-config.jpg)
 
-![QQ 群聊对话](docs/screenshots/qq-group.jpg)
+<details>
+  <summary>📱 点击展开手机 QQ 单聊与群聊对话截图</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/qq-chat.jpg" width="48%" alt="QQ 单聊对话" />
+    <img src="docs/screenshots/qq-group.jpg" width="48%" alt="QQ 群聊对话" />
+  </p>
+</details>
 
 **功能亮点**
 
@@ -288,6 +348,16 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
 
 接入飞书开放平台企业自建应用，支持单聊与群聊（群聊需 @机器人）。走飞书官方最新 WebSocket 长连接协议，无需公网 IP、无需域名、免配置 Webhook。
 
+![飞书 Bot 配置](docs/screenshots/feishu-bot-config.jpg)
+
+<details>
+  <summary>📱 点击展开手机飞书对话与卡片审批截图</summary>
+  <br/>
+  <p align="center">
+    <img src="docs/screenshots/feishu-chat.jpg" width="380" alt="飞书对话与卡片审批示例" />
+  </p>
+</details>
+
 **功能亮点**
 
 - ⚡ **100% 免公网 IP**：官方 WebSocket 全双工长连接，本地电脑即可直连飞书开放平台
@@ -325,6 +395,8 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
 
 接入 Telegram 官方 Bot API，单聊与群聊实时交互。采用官方 Long Polling（长轮询）机制，**无需公网 IP / 免 Webhook**，内置**零依赖 HTTP/HTTPS CONNECT 代理隧道**，国内网络即开即连。
 
+![Telegram Bot 配置](docs/screenshots/telegram-bot-config.jpg)
+
 **功能亮点**
 
 - ⚡ **100% 免公网 IP**：官方 Long Polling 长轮询，本地电脑或内网服务器即可直连通信
@@ -377,8 +449,6 @@ dsh plugin --profile web add @wenbin_wb/dsh-bridge@latest
 ```bash
 git clone https://github.com/wenbin-wb/dsh-bridge.git
 cd dsh-bridge
-npm install
-
 # 修改 client/index.js 后重新构建
 npm run build:client
 
@@ -388,6 +458,37 @@ dsh plugin --profile web add .
 
 ---
 
+## 常见问题 (FAQ)
+
+<details>
+  <summary><b>Q1: 远程或局域网访问时提示「加载提供方目录失败: settings are unavailable in this browser」？</b></summary>
+  <br/>
+
+  - **原因**：这是 DeepSeek Harness (DSH) 官方底层的安全机制。为了防止网络上的恶意设备窃取用户的 API Key 与模型凭据，DSH 将模型 Provider/Credentials 配置接口严格限制为仅限本地回环（`127.0.0.1`）调用。
+  - **建议**：
+    1. **推荐使用方式**：在电脑本机（`127.0.0.1:3080`）一次性配置好模型与 API Key，之后在手机端/远程设备可以 100% 正常创建会话、聊天与指挥 Agent 干活；
+    2. **公网隧道访问**：使用插件自带的 Cloudflare 隧道（`https://*.trycloudflare.com`，自带 HTTPS 安全上下文）可获得最好的兼容性；
+    3. **SSH 端口转发**：如需在手机端修改 API 配置，可通过 SSH 隧道（`ssh -L 3082:127.0.0.1:3082 user@ip`）映射为本地 localhost 访问。
+</details>
+
+<details>
+  <summary><b>Q2: 远程访问时修改配置提示「需要管理员权限」或被锁定？</b></summary>
+  <br/>
+
+  - **原因**：插件内置了「管理后台防篡改」安全保护，防止外部访客窥探或篡改您的公网隧道和机器人 Token。
+  - **解决方法**：
+    1. 在弹出的「🔒 解锁后台管理权限」对话框中输入您设置的后台管理密码即可解锁（若未单独设置管理密码，请输入初始访问密码）；
+    2. **电脑本机（127.0.0.1）访问享有物理免锁特权**，自动免密直通；
+    3. 若极端情况下忘记密码，在服务器/宿主电脑终端执行单行救急指令：
+       ```bash
+       touch ~/.dsh/dsh-bridge/reset-auth
+       ```
+       插件将在毫秒级自动清空密码恢复初始免密状态。
+</details>
+
+---
+
 ## 许可证
 
 MIT © [wenbin-wb](https://github.com/wenbin-wb)
+