@wenbin_wb/dsh-bridge 2.9.0 → 2.10.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. package/CHANGELOG.md +320 -295
  2. package/client/client.js +370 -124
  3. package/client/index.js +4244 -4073
  4. package/client/unlock-manager.js +142 -0
  5. package/docs/release-process.md +40 -0
  6. package/lib/auth/manager.js +545 -532
  7. package/lib/bridge-rpc.js +455 -436
  8. package/lib/index.js +1831 -1765
  9. package/package.json +106 -106
package/package.json CHANGED
@@ -1,106 +1,106 @@
1
- {
2
- "name": "@wenbin_wb/dsh-bridge",
3
- "version": "2.9.0",
4
- "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
5
- "releaseNotes": "⚠️ 本次更新量较大，可能存在未知问题，建议升级前备份配置并阅读完整说明：https://github.com/wenbin-wb/dsh-bridge/blob/main/CHANGELOG.md\n\n【v2.9.0 全面安全加固与代码质量大修】\n• 🔐 密码哈希 PBKDF2 升级至 600,000 次迭代（存量旧哈希登录时透明升级，无需重设密码）；管理密码解锁防爆破；未设密码时高危操作强制先设密码；loopback-token CORS 收敛；隧道令牌掩码不再覆盖真实值\n• 🐞 修复十余个稳定性问题：低版本 Node / iOS 16 浏览器发送消息报 AbortSignal 错误（自动兼容垫片）、微信收图必崩、QQ 流式兜底崩溃、面板升级命令渲染崩溃、IM 端收不到审批卡片（approval 瀑布归属模型重建，飞书按钮卡片同步修复）、/list 报 without inject 错误、卸载监听器泄漏、工具调用协议标记泄漏到聊天等\n• 🚦 出站消息串行队列消除乱序与 QQ msgSeq 竞态；审批发起者校验（群成员不可代批）；群聊授权改显式配置（默认关闭）；配置持久化事务化防丢失更新；解锁后自动续办被拦截操作；断开后重连不再强制扫码\n• 🧹 引入 eslint + CI 全矩阵测试（Node 22/24 × Linux/Windows）；conversation-bridge 按职责拆分四模块；平台装配工厂化；清理废弃端点与死代码；提交 package-lock.json",
6
- "type": "module",
7
- "main": "lib/index.js",
8
- "exports": {
9
- ".": {
10
- "default": "./lib/index.js"
11
- },
12
- "./client": "./client/client.js",
13
- "./package.json": "./package.json"
14
- },
15
- "files": [
16
- "lib",
17
- "client",
18
- "cordis.patch.yml",
19
- "README.md",
20
- "README.en.md",
21
- "CHANGELOG.md",
22
- "LICENSE",
23
- "docs"
24
- ],
25
- "scripts": {
26
- "build:client": "node client/build.mjs",
27
- "build:lark": "node scripts/bundle-lark.mjs",
28
- "build:banner": "node scripts/generate-banner.mjs",
29
- "prepack": "npm run build:lark && npm run build:client",
30
- "release:github": "node scripts/create-github-release.mjs",
31
- "lint": "eslint .",
32
- "test": "node --test test/*.test.mjs"
33
- },
34
- "dependencies": {
35
- "qrcode": "^1.5.3",
36
- "ws": "^8.18.0"
37
- },
38
- "devDependencies": {
39
- "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
40
- "@eslint/js": "^10.0.1",
41
- "@larksuiteoapi/node-sdk": "^1.73.0",
42
- "esbuild": "^0.25.9",
43
- "eslint": "^10.9.1",
44
- "globals": "^17.11.0",
45
- "puppeteer-core": "^25.8.0"
46
- },
47
- "peerDependencies": {
48
- "@deepseek-ai/cordis": "^4.0.1",
49
- "@deepseek-ai/dsh-llm": ">=0.1.0-rc.6"
50
- },
51
- "peerDependenciesMeta": {
52
- "@deepseek-ai/dsh-llm": {
53
- "optional": true
54
- }
55
- },
56
- "engines": {
57
- "node": "^22.19.0 || >=24.0.0"
58
- },
59
- "license": "MIT",
60
- "keywords": [
61
- "deepseek-harness",
62
- "dsh",
63
- "dsh-plugin",
64
- "remote",
65
- "remote-access",
66
- "tunnel",
67
- "cloudflare",
68
- "mobile",
69
- "smartphone",
70
- "tablet",
71
- "qr-code",
72
- "qrcode",
73
- "websocket",
74
- "bot",
75
- "wechat",
76
- "qq",
77
- "feishu",
78
- "telegram"
79
- ],
80
- "dsh": {
81
- "bundle": {
82
- "patch": "./cordis.patch.yml"
83
- },
84
- "client": {
85
- "inject": [
86
- "@deepseek-ai/dsh-client-connection",
87
- "@deepseek-ai/dsh-client-ui-slots",
88
- "@deepseek-ai/dsh-client-ui-layout",
89
- "@deepseek-ai/dsh-client-locale"
90
- ],
91
- "platform": "web"
92
- }
93
- },
94
- "repository": {
95
- "type": "git",
96
- "url": "git+https://github.com/wenbin-wb/dsh-bridge.git"
97
- },
98
- "bugs": {
99
- "url": "https://github.com/wenbin-wb/dsh-bridge/issues"
100
- },
101
- "homepage": "https://github.com/wenbin-wb/dsh-bridge",
102
- "publishConfig": {
103
- "access": "public",
104
- "registry": "https://registry.npmjs.org/"
105
- }
106
- }
1
+ {
2
+ "name": "@wenbin_wb/dsh-bridge",
3
+ "version": "2.10.1",
4
+ "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
5
+ "releaseNotes": "【v2.10.1】\n• 🧹 与 v2.10.0 代码一致：修正升级提示措辞，与发布说明对齐\n\n【v2.10.0】\n• 🆕 新增「管理保护」独立开关：与访问认证解耦，远程设备管理权限始终受管理保护约束，仅凭管理密码可解锁\n• 🆕 面板版本条新增 DSH 宿主版本显示\n• 🐞 修复远程锁屏/解锁流程多处问题（会话失效后自动回登录页、锁屏可正常解锁、关闭访问认证后锁屏仍生效、首次进入即显示锁屏等）\n• 🧹 内部：统一 adminToken 缓存，清理死代码与重复实现",
6
+ "type": "module",
7
+ "main": "lib/index.js",
8
+ "exports": {
9
+ ".": {
10
+ "default": "./lib/index.js"
11
+ },
12
+ "./client": "./client/client.js",
13
+ "./package.json": "./package.json"
14
+ },
15
+ "files": [
16
+ "lib",
17
+ "client",
18
+ "cordis.patch.yml",
19
+ "README.md",
20
+ "README.en.md",
21
+ "CHANGELOG.md",
22
+ "LICENSE",
23
+ "docs"
24
+ ],
25
+ "scripts": {
26
+ "build:client": "node client/build.mjs",
27
+ "build:lark": "node scripts/bundle-lark.mjs",
28
+ "build:banner": "node scripts/generate-banner.mjs",
29
+ "prepack": "npm run build:lark && npm run build:client",
30
+ "release:github": "node scripts/create-github-release.mjs",
31
+ "lint": "eslint .",
32
+ "test": "node --test test/*.test.mjs"
33
+ },
34
+ "dependencies": {
35
+ "qrcode": "^1.5.3",
36
+ "ws": "^8.18.0"
37
+ },
38
+ "devDependencies": {
39
+ "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
40
+ "@eslint/js": "^10.0.1",
41
+ "@larksuiteoapi/node-sdk": "^1.73.0",
42
+ "esbuild": "^0.25.9",
43
+ "eslint": "^10.9.1",
44
+ "globals": "^17.11.0",
45
+ "puppeteer-core": "^25.8.0"
46
+ },
47
+ "peerDependencies": {
48
+ "@deepseek-ai/cordis": "^4.0.1",
49
+ "@deepseek-ai/dsh-llm": ">=0.1.0-rc.6"
50
+ },
51
+ "peerDependenciesMeta": {
52
+ "@deepseek-ai/dsh-llm": {
53
+ "optional": true
54
+ }
55
+ },
56
+ "engines": {
57
+ "node": "^22.19.0 || >=24.0.0"
58
+ },
59
+ "license": "MIT",
60
+ "keywords": [
61
+ "deepseek-harness",
62
+ "dsh",
63
+ "dsh-plugin",
64
+ "remote",
65
+ "remote-access",
66
+ "tunnel",
67
+ "cloudflare",
68
+ "mobile",
69
+ "smartphone",
70
+ "tablet",
71
+ "qr-code",
72
+ "qrcode",
73
+ "websocket",
74
+ "bot",
75
+ "wechat",
76
+ "qq",
77
+ "feishu",
78
+ "telegram"
79
+ ],
80
+ "dsh": {
81
+ "bundle": {
82
+ "patch": "./cordis.patch.yml"
83
+ },
84
+ "client": {
85
+ "inject": [
86
+ "@deepseek-ai/dsh-client-connection",
87
+ "@deepseek-ai/dsh-client-ui-slots",
88
+ "@deepseek-ai/dsh-client-ui-layout",
89
+ "@deepseek-ai/dsh-client-locale"
90
+ ],
91
+ "platform": "web"
92
+ }
93
+ },
94
+ "repository": {
95
+ "type": "git",
96
+ "url": "git+https://github.com/wenbin-wb/dsh-bridge.git"
97
+ },
98
+ "bugs": {
99
+ "url": "https://github.com/wenbin-wb/dsh-bridge/issues"
100
+ },
101
+ "homepage": "https://github.com/wenbin-wb/dsh-bridge",
102
+ "publishConfig": {
103
+ "access": "public",
104
+ "registry": "https://registry.npmjs.org/"
105
+ }
106
+ }