dsh-chat-embed 0.0.0-stage → 0.6.0

package/index.js

@@ -0,0 +1,335 @@
+/**
+ * dsh-chat-embed — Host half.
+ *
+ * The feature itself lives in the Client half (`client.js`): the desktop
+ * webview, the lease handshake, the panel UI. This half exists for two
+ * reasons, and nothing else:
+ *
+ *   1. the loader row named by `cordis.patch.yml` needs a Node-side export;
+ *   2. the optional shell patch needs a **Host-side** answer, because the
+ *      patched archive lives on the Host's disk and only the Host can read
+ *      and test it. The panel asks over the exposed channel, so a user can
+ *      see why cross-restart login is off without being told to run a
+ *      command and read its output.
+ *
+ * Keep this module inert beyond that probe. It must not import browser
+ * globals, and anything it registers must be cleaned up through `ctx.effect`
+ * so uninstalling the bundle leaves the Host process exactly as it was.
+ */
+
+import { createHash } from 'node:crypto'
+import { accessSync, constants, existsSync, readFileSync, statSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { createRequire } from 'node:module'
+
+export const name = 'dsh-chat-embed'
+
+/** Route the panel fetches for the read-only shell probe. */
+const PROBE_PATH = '/dsh-chat-embed/patch-check'
+
+/** Strings that identify the patch in a rebuilt archive. */
+const PATCH_MARK = 'persist:dsh-sidebar-'
+const CACHE_MARK = '{ cache: false }'
+
+/** Strings that identify an unpatched archive's patch sites. */
+const PATCH_SITE_MARK = 'partition = `dsh-sidebar-browser-'
+const CACHE_SITE_MARK = 'this.configureSession(session.fromPartition(partition))'
+
+/**
+ * Candidate `resources` directories. `DSH_RESOURCES` wins so a custom install
+ * or a non-Windows layout can be pointed at explicitly.
+ *
+ * @returns {string[]} absolute candidates, most specific first
+ */
+function resourcesCandidates() {
+  const candidates = []
+  // Electron hands the running app its own resources directory: the exact
+  // answer, and the only one that works for a non-standard install location.
+  if (typeof process.resourcesPath === 'string' && process.resourcesPath !== '') {
+    candidates.push(process.resourcesPath)
+  }
+  // A plain Node process started beside the app binary can derive it.
+  if (typeof process.execPath === 'string' && process.execPath !== '') {
+    candidates.push(join(dirname(process.execPath), 'resources'))
+  }
+  candidates.push(process.env.DSH_RESOURCES)
+  if (process.platform === 'win32') {
+    const localAppData = process.env.LOCALAPPDATA
+    if (localAppData !== undefined && localAppData !== '') {
+      candidates.push(join(localAppData, 'Programs', 'DeepSeek Harness', 'resources'))
+    }
+    candidates.push('C:\\Program Files\\DeepSeek Harness\\resources')
+    candidates.push('C:\\Program Files (x86)\\DeepSeek Harness\\resources')
+  } else if (process.platform === 'darwin') {
+    candidates.push('/Applications/DeepSeek Harness.app/Contents/Resources')
+  } else {
+    candidates.push('/opt/DeepSeek Harness/resources')
+    candidates.push(join(homedir(), 'DeepSeek Harness', 'resources'))
+  }
+  return candidates.filter((entry) => typeof entry === 'string' && entry !== '')
+}
+
+/** @returns {string | undefined} the directory that actually holds app.asar */
+function detectResources() {
+  for (const candidate of resourcesCandidates()) {
+    if (existsSync(join(candidate, 'app.asar'))) return candidate
+  }
+  return undefined
+}
+
+/** @param {string} file @returns {boolean} */
+function isWritable(file) {
+  try {
+    accessSync(file, constants.W_OK)
+    return true
+  } catch (error) {
+    void error
+    return false
+  }
+}
+
+/**
+ * Read a file with the real Node implementation.
+ *
+ * Inside Electron the `node:fs` binding is patched to treat a path ending in
+ * `.asar` as a directory, so `readFileSync('<install>/app.asar')` raises ENOENT
+ * even though the bytes are all there. `original-fs` is Electron's unpatched
+ * copy; outside Electron the ordinary binding is already literal and is used.
+ *
+ * @param {string} file
+ * @returns {Buffer}
+ */
+function readRealFile(file) {
+  const fallback = () => readFileSync(file)
+  try {
+    const original = createRequire(import.meta.url)('original-fs')
+    if (original !== undefined && original !== null && typeof original.readFileSync === 'function') {
+      return original.readFileSync(file)
+    }
+  } catch (error) {
+    void error
+  }
+  return fallback()
+}
+
+/** @param {string} file @returns {number} the real byte length */
+function statRealSize(file) {
+  try {
+    const original = createRequire(import.meta.url)('original-fs')
+    if (original !== undefined && original !== null && typeof original.statSync === 'function') {
+      return original.statSync(file).size
+    }
+  } catch (error) {
+    void error
+  }
+  return statSync(file).size
+}
+
+/**
+ * Read one entry out of an asar archive.
+ *
+ * The container is `u32 @0 = 4`, `u32 @4 = headerLen + 8`, `u32 @8 = headerLen + 4`,
+ * `u32 @12 = headerLen`, then the JSON header, padding, then the file data.
+ *
+ * @param {string} file
+ * @param {string} entry slash-separated path inside the archive
+ * @returns {string | undefined} the entry as UTF-8, or undefined when absent
+ */
+function readAsarEntry(file, entry) {
+  const buffer = readRealFile(file)
+  const headerLength = buffer.readUInt32LE(12)
+  const header = JSON.parse(buffer.toString('utf8', 16, 16 + headerLength))
+  const padding = (4 - (headerLength % 4)) % 4
+  const dataStart = 16 + headerLength + padding
+  let node = header
+  for (const segment of entry.split('/')) {
+    if (node === undefined || node.files === undefined) return undefined
+    node = node.files[segment]
+  }
+  if (node === undefined || node.files !== undefined) return undefined
+  if (node.unpacked === true) return undefined
+  const offset = dataStart + Number(node.offset)
+  return buffer.toString('utf8', offset, offset + Number(node.size))
+}
+
+/**
+ * Inspect the desktop shell and the optional patch. Read-only: no file here is
+ * written, so this is safe to call from a diagnostics button.
+ *
+ * @param {string} [resources]
+ * @returns {object} a report the panel formats and copies
+ */
+function inspectShell(resources) {
+  const explicit = typeof resources === 'string' && resources !== ''
+  const resolved = explicit ? resources : detectResources()
+  if (resolved === undefined) {
+    return {
+      found: false,
+      platform: process.platform,
+      node: process.version,
+      detail: '没有找到 DSH 安装目录；用 DSH_RESOURCES 或 --resources 指定',
+    }
+  }
+  const asar = join(resolved, 'app.asar')
+  if (!existsSync(asar)) {
+    return {
+      found: false,
+      platform: process.platform,
+      node: process.version,
+      resources: resolved,
+      asar,
+      detail: '该目录下没有 app.asar；路径不对，或桌面壳安装不完整',
+    }
+  }
+  const staged = join(resolved, 'app.asar.new')
+  const backup = join(resolved, 'app.asar.orig')
+  const report = {
+    found: true,
+    platform: process.platform,
+    node: process.version,
+    resources: resolved,
+    asar,
+    exists: true,
+    writable: existsSync(asar) ? isWritable(asar) : isWritable(resolved),
+    backup: existsSync(backup),
+    staged: existsSync(staged),
+    patched: undefined,
+    patchSite: undefined,
+    detail: '',
+  }
+  try {
+    report.asarBytes = statRealSize(asar)
+    report.asarHash = createHash('sha256').update(readRealFile(asar)).digest('hex').slice(0, 16)
+  } catch (error) {
+    report.detail = '读取 app.asar 失败：' + firstLine(error)
+    return report
+  }
+  try {
+    const main = readAsarEntry(asar, 'lib/main.js')
+    if (main === undefined) {
+      report.detail = 'app.asar 中找不到 lib/main.js；壳结构已变化'
+      return report
+    }
+    report.patched = main.includes(PATCH_MARK)
+    report.cachePatch = main.includes(CACHE_MARK)
+    report.patchSite = main.includes(PATCH_SITE_MARK) || main.includes(PATCH_MARK)
+    if (report.patched !== true && report.patchSite === false) {
+      report.detail = '补丁点不存在：当前桌面壳版本的分区写法与补丁预期不一致，需要更新补丁'
+    } else if (report.patched !== true && report.cachePatch !== true) {
+      report.detail = '尚未打补丁'
+    }
+  } catch (error) {
+    report.detail = '解析 app.asar 失败：' + firstLine(error)
+  }
+  return report
+}
+
+/** @param {unknown} error @returns {string} */
+function firstLine(error) {
+  const text = error instanceof Error ? error.message : String(error)
+  return text.split('\n')[0].slice(0, 200)
+}
+
+/**
+ * Serve the read-only probe over the Web GUI's HTTP carrier, so the panel can
+ * read it with a plain relative `fetch` — no Remote RPC endpoint, no shell
+ * bridge, and the same code path in the desktop app and the Web GUI.
+ *
+ * The route is GET-only and writes nothing; it reports where the shell is and
+ * what the archive contains, which is what a user needs to file a useful bug
+ * report when cross-restart login stops working.
+ *
+ * @param {import('@deepseek-ai/cordis').Context} ctx
+ * @returns {(() => void) | undefined} a disposer, or undefined without a webserver
+ */
+function installHttpProbe(ctx) {
+  const server = typeof ctx.get === 'function' ? ctx.get('webServer') : undefined
+  if (server === undefined || server === null || typeof server.register !== 'function') return undefined
+  const route = {
+    kind: 'exact',
+    path: PROBE_PATH,
+    resource(request) {
+      if (request.method !== 'GET' && request.method !== 'HEAD') {
+        return new Response('method not allowed', { status: 405 })
+      }
+      let body
+      try {
+        body = JSON.stringify(inspectShell())
+      } catch (error) {
+        body = JSON.stringify({ found: false, detail: firstLine(error) })
+      }
+      return new Response(request.method === 'HEAD' ? null : body, {
+        status: 200,
+        headers: { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' },
+      })
+    },
+  }
+  try {
+    const dispose = server.register(route)
+    return typeof dispose === 'function' ? dispose : () => {}
+  } catch (error) {
+    // Another composition already claimed the path, or the carrier rejected the
+    // shape. The probe is optional: the panel still reports the local state.
+    void error
+    return undefined
+  }
+}
+
+/**
+ * Register the patch checker as an agent tool, so the model can answer
+ * "why does my login not survive a restart?" by looking instead of asking the
+ * user to run a command and paste its output.
+ *
+ * The tool is read-only and needs no approval: it reports paths, byte counts
+ * and whether the patch marks are present, which the user could read off the
+ * disk themselves.
+ *
+ * @param {import('@deepseek-ai/cordis').Context} ctx
+ * @returns {(() => void) | undefined} a disposer, or undefined without a tool registry
+ */
+function installTool(ctx) {
+  const tools = typeof ctx.get === 'function' ? ctx.get('tools') : undefined
+  if (tools === undefined || tools === null || typeof tools.register !== 'function') return undefined
+  const definition = {
+    name: 'dsh_chat_embed_patch_check',
+    description:
+      'Report whether the DSH desktop shell has the optional patch that keeps embedded chat logins across restarts: the install directory, whether app.asar is writable, whether it is already patched, whether the patch can still be applied to this shell version, and whether a backup exists. Read-only.',
+    parameters: {
+      resources: {
+        type: 'string',
+        description:
+          'Optional install directory that contains app.asar. Omit to let the plugin detect the running shell.',
+      },
+    },
+    output: {
+      schema: { type: 'object' },
+      render: (_args, value) => [{ type: 'text', text: JSON.stringify(value, null, 2) }],
+    },
+    async execute(args) {
+      const requested = args !== undefined && args !== null && typeof args.resources === 'string' ? args.resources : undefined
+      return inspectShell(requested)
+    },
+  }
+  try {
+    const dispose = tools.register(definition)
+    return typeof dispose === 'function' ? dispose : () => {}
+  } catch (error) {
+    void error
+    return undefined
+  }
+}
+
+/**
+ * Register the Host-side patch probe and the agent tool.
+ *
+ * @param {import('@deepseek-ai/cordis').Context} ctx
+ */
+export function apply(ctx) {
+  if (ctx === undefined || ctx === null || typeof ctx.effect !== 'function') return
+  ctx.effect(() => installHttpProbe(ctx), 'dsh-chat-embed: shell patch probe')
+  ctx.effect(() => installTool(ctx), 'dsh-chat-embed: shell patch tool')
+}
+
+/** Exposed for tests and for the patch checker to reuse without a Context. */
+export const internals = { inspectShell, detectResources, readAsarEntry, readRealFile, resourcesCandidates, PROBE_PATH }

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Chat embed",
+    "description": "Opens a multi-tab AI chat panel in the desktop app: DeepSeek, Doubao, ChatGPT, MiniMax, Kimi, Gemini and Grok, each signed in separately."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "内嵌聊天",
+    "description": "在桌面版打开多标签 AI 聊天面板：DeepSeek、豆包、ChatGPT、MiniMax、Kimi、Gemini、Grok，各自独立登录态。"
+  }
+}

package/package.json

@@ -1,6 +1,72 @@
 {
   "name": "dsh-chat-embed",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.6.0",
+  "author": "poluce <fishsummer@126.com>",
+  "description": "Multi-tab AI chat embed for the DeepSeek Harness desktop app: DeepSeek, 豆包, ChatGPT, MiniMax, Kimi, Gemini and Grok, each signed in separately.",
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "docs",
+    "tools/shell-patch",
+    "restore-shell-patch.cmd",
+    "清理聊天缓存.cmd",
+    "README.md",
+    "LICENSE"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
+    }
+  },
+  "scripts": {
+    "check": "node scripts/verify-bundle.mjs && npm test",
+    "test": "node --test \"test/**/*.test.mjs\"",
+    "prepublishOnly": "npm run check",
+    "pack:dist": "node scripts/pack-dist.mjs"
+  },
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "dsh-plugin",
+    "cordis",
+    "chat",
+    "webview",
+    "embed"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/poluce/dsh-chat-embed.git"
+  },
+  "homepage": "https://github.com/poluce/dsh-chat-embed#readme",
+  "bugs": {
+    "url": "https://github.com/poluce/dsh-chat-embed/issues"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22",
+    "dsh": ">=0.1.0-rc.6"
+  }
+}

package/restore-shell-patch.cmd

@@ -0,0 +1,39 @@
+@echo off
+rem Restore the original DeepSeek Harness app.asar after the persistence patch.
+rem
+rem Usage:  restore-shell-patch.cmd [resources-dir]
+rem The directory may also come from DSH_RESOURCES, otherwise the usual install
+rem locations are tried.
+setlocal
+if not "%~1"=="" set "RES=%~1"
+if "%RES%"=="" set "RES=%DSH_RESOURCES%"
+if "%RES%"=="" if exist "%LOCALAPPDATA%\Programs\DeepSeek Harness\resources\app.asar" set "RES=%LOCALAPPDATA%\Programs\DeepSeek Harness\resources"
+if "%RES%"=="" if exist "C:\Program Files\DeepSeek Harness\resources\app.asar" set "RES=C:\Program Files\DeepSeek Harness\resources"
+if "%RES%"=="" goto nores
+if not exist "%RES%\app.asar.orig" goto nobackup
+
+if exist "%RES%\app.asar" (
+  move /Y "%RES%\app.asar" "%RES%\app.asar.patched.bak" >nul
+)
+move /Y "%RES%\app.asar.orig" "%RES%\app.asar" >nul
+echo.
+echo  [OK] 已恢复原版 app.asar
+echo       补丁版备份在 app.asar.patched.bak
+echo.
+goto end
+
+:nores
+echo.
+echo  [!!] 找不到 DSH 安装目录：请传入参数，或设置 DSH_RESOURCES。
+echo       例：restore-shell-patch.cmd "D:\DeepSeek Harness\resources"
+echo.
+
+goto end
+
+:nobackup
+echo.
+echo  [!!] 找不到 app.asar.orig，可能从未打过补丁，或已被还原过。
+echo.
+
+:end
+pause

package/tools/shell-patch/clean-cache.ps1

@@ -0,0 +1,76 @@
+# clean-cache.ps1 - free the persistent sidebar-browser caches, keep the logins.
+#
+# The shell patch made `dsh-sidebar-browser-*` partitions persistent, so each
+# workspace keeps its Chromium profile on disk. Most of that is disposable
+# cache; the login itself lives in IndexedDB / Local Storage / Cookies, which
+# this script never touches.
+#
+# The app must be closed: Chromium holds exclusive locks on the cache files.
+
+param(
+  [string]$Partitions = $env:DSH_PARTITIONS
+)
+
+$ErrorActionPreference = 'Continue'
+
+$app     = 'DeepSeek Harness'
+if (-not $Partitions) {
+  $candidates = @()
+  if ($env:APPDATA) { $candidates += (Join-Path $env:APPDATA '@deepseek-ai\dsh-desktop\Partitions') }
+  if ($env:APPDATA) { $candidates += (Join-Path $env:APPDATA 'DeepSeek Harness\Partitions') }
+  foreach ($candidate in $candidates) {
+    if (Test-Path $candidate) { $Partitions = $candidate; break }
+  }
+}
+$base    = $Partitions
+$cacheDirs = @(
+  'Cache',
+  'Code Cache',
+  'GPUCache',
+  'DawnGraphiteCache',
+  'DawnWebGPUCache',
+  'GrShaderCache',
+  'ShaderCache',
+  'Shared Dictionary'
+)
+
+if (-not $base) {
+  Write-Host '  找不到 Partitions 目录：请用 -Partitions <dir> 指定，或设置 DSH_PARTITIONS。'
+  exit 1
+}
+
+$running = Get-Process -Name $app -ErrorAction SilentlyContinue
+if ($running) {
+  Write-Host ''
+  Write-Host '  DSH 正在运行，缓存文件被占用，无法清理。' -ForegroundColor Yellow
+  Write-Host '  请先完全退出 DSH（托盘/菜单「退出」），再运行本脚本。' -ForegroundColor Yellow
+  Write-Host ''
+  exit 1
+}
+
+if (-not (Test-Path $base)) {
+  Write-Host '  没有找到 Partitions 目录，无需清理。'
+  exit 0
+}
+
+$before = (Get-ChildItem $base -Recurse -File -ErrorAction SilentlyContinue | Measure-Object Length -Sum).Sum
+
+foreach ($partition in (Get-ChildItem $base -Directory -ErrorAction SilentlyContinue)) {
+  $freed = 0
+  foreach ($name in $cacheDirs) {
+    $target = Join-Path $partition.FullName $name
+    if (-not (Test-Path $target)) { continue }
+    $size = (Get-ChildItem $target -Recurse -File -ErrorAction SilentlyContinue | Measure-Object Length -Sum).Sum
+    Remove-Item -Recurse -Force $target -ErrorAction SilentlyContinue
+    if (-not (Test-Path $target)) { $freed += $size }
+  }
+  if ($freed -gt 0) {
+    Write-Host ("  {0}: 释放 {1:N1} MB（登录数据保留）" -f $partition.Name, ($freed / 1MB))
+  }
+}
+
+$after = (Get-ChildItem $base -Recurse -File -ErrorAction SilentlyContinue | Measure-Object Length -Sum).Sum
+Write-Host ''
+Write-Host ("  总计释放 {0:N1} MB，剩余 {1:N1} MB" -f (($before - $after) / 1MB), ($after / 1MB))
+Write-Host '  登录状态、Cookie、LocalStorage 均未改动。'
+Write-Host ''