dsh-desktop-link 1.2.0 → 1.2.1

package/README.md

@@ -97,9 +97,38 @@ https://registry.npmjs.org/dsh-desktop-link/-/dsh-desktop-link-1.2.0.tgz
 └─────────────────────────────┘
 ```
 
-保存会写进 `$DSH_HOME/desktop-url.txt`（先写临时文件再 rename，半个文件不会被读走）。
+保存会写进 `$DSH_HOME/desktop-url.txt`（先写临时文件再 rename，半个文件不会被读走；
+rename 被文件系统拒绝时退回直接覆写 —— Android 的 proot rootfs 会这样）。
 两个框都清空 = 删掉该文件，退回自动探测。
 
+这个面板按「绝不可能把页面搞挂」设计：不用 `<form>`（Android WebView 会把提交当成
+一次顶层跳转交给 DSHA），按钮都是 `type="button"`，外层包了一个 error boundary ——
+万一渲染抛错，只在这个位置显示一行说明，侧栏和会话都不受影响。
+
+### 界面坏掉时的兜底（一个网址就能改）
+
+不想点界面、或者界面在某个 WebView 里表现不正常，就直接访问：
+
+```
+http://127.0.0.1:<DSH 端口>/api/desktop-link/set?desktopUrl=https://xxx.dsh-market.com
+http://127.0.0.1:<DSH 端口>/api/desktop-link/set?desktopUrl=https://xxx.dsh-market.com&launchUrl=https://…/open.html?k=…
+```
+
+返回一张「已保存」的小网页，写的还是同一个 `desktop-url.txt`。
+这条路只接受同源请求（`Sec-Fetch-Site: cross-site` 与外站 `Origin` 一律 403），
+地址栏直接输入（没有 Origin）是放行的。
+
+### 在 DSHA 终端里一行搞定
+
+DSHA 有终端，插件的 Host 半区是**每次请求重新读文件**的，所以写文件就等于改配置、
+不用重启：
+
+```sh
+echo 'https://4217332722d23859.dsh-market.com' > ~/.dsh/desktop-url.txt
+```
+
+第一行长长期地址，第二行（可选）是点按钮时打开的地址。
+
 ### 用配置文件
 
 插件自身不带默认地址 —— 它从下面这些地方按顺序找，命中即停：
@@ -154,8 +183,10 @@ DSH 的远程访问是要配对的。未配对设备直接打开桌面地址会
 | GET | `/api/desktop-link/info` | `{"ok":true,"launchUrl":"…","desktopUrl":"…","source":"…"}` |
 | POST | `/api/desktop-link/config` | body `{"desktopUrl":"…","launchUrl":"…"}` → 写入 `desktop-url.txt`，返回写入后的解析结果与 `path` |
 
+| GET | `/api/desktop-link/set?desktopUrl=…&launchUrl=…` | 同上，但用查询参数、回一张 HTML 小页面；只要同源 |
+
 POST 只接受 `http(s)` URL：传了非空值但格式不对会返回 `400` 并说明原因，不会静默清空。
-请求体上限 8 KiB，非 `POST` 返回 `405`。
+请求体上限 8 KiB，非 `POST` 返回 `405`；JSON 解析失败时会再试一次 `application/x-www-form-urlencoded`（部分 WebView 会这么发）。
 
 每次请求重新解析地址，所以改配置文件不需要重启。
 另外 Host 半区会在 `webserver/index-inject` 里注入 `globalThis.__DSHA_DESKTOP_LINK__`，让按钮首帧就能拿到地址；全局缺失时 Client 半区回退到上面那个接口。
@@ -189,6 +220,8 @@ locale/{zh,en}.json   meta.title / meta.description
 2. 侧栏折叠成 56px 轨道时只显示图标，展开后才显示「桌面版」文字。
 3. 手机端「点击时铸码」依赖本机装了 `dsh-remote-web-ui`（本插件不声明这个依赖，装不装都能用，只是没有自动铸码）。
 4. 需要 DSH `>= 0.2.1-rc.2`（`webserver/index-inject` 事件与 `sidebar.footer.action` 槽位）。
+5. DSHA 把 DSH 锁在 `0.2.1-rc.2`，那一版**没有** `@deepseek-ai/schemastery`，所以手机上不会出现 DSH 自带的插件设置表单 —— 这正是本插件自带齿轮与 `/set` 路由的原因。
+6. DSHA 的 profile 启动失败时会退到极简 recovery profile（只剩基础界面）；如果界面突然"变回出厂样子"，先看启动日志里 `[DSHA_STARTUP]` 那几行。
 
 ---
 

package/client.js

@@ -29,6 +29,7 @@ window.__ModuleLoader__.load({
       'source.desktop-url.txt': '桌面地址文件',
       'source.relay-registry': '固定中继',
       'source.unset': '未配置',
+      'crash.fallback': '桌面地址面板出错了，界面其余部分不受影响。可以直接把地址写进 ~/.dsh/desktop-url.txt（第一行长期地址，第二行点按钮打开的地址）。',
     }
     const en = {
       'action': 'Open desktop DSH',
@@ -52,6 +53,7 @@ window.__ModuleLoader__.load({
       'source.desktop-url.txt': 'address file',
       'source.relay-registry': 'fixed relay',
       'source.unset': 'not configured',
+      'crash.fallback': 'The address panel failed; the rest of the UI is unaffected. Write the address into ~/.dsh/desktop-url.txt instead (line 1 the long-lived origin, line 2 what a click opens).',
     }
 
     /* 18×18 monitor with an out-arrow — same artwork as icon.svg, inlined so
@@ -239,6 +241,48 @@ window.__ModuleLoader__.load({
      * @param read - selector from the store value to the slice worth rendering.
      * @returns the current slice, re-rendering on change.
      */
+    /**
+     * Last line of defence: a render-time throw inside our own tree must not
+     * take the page down with it.
+     *
+     * DSHA runs this UI inside an Android WebView where a React error in a
+     * sidebar item unmounts the whole shell — the user sees a white page while
+     * the app is still alive. Nothing we render is worth that, so both sidebar
+     * items are wrapped: a failure shows one line of text and the address hint
+     * instead, and the rest of the GUI keeps working.
+     */
+    class Boundary extends React.Component {
+      constructor(props) {
+        super(props)
+        this.state = { failed: false, message: '' }
+      }
+
+      static getDerivedStateFromError() {
+        return { failed: true }
+      }
+
+      componentDidCatch(error) {
+        try { console.error('dsha-desktop-link: render failed', error) } catch { /* noop */ }
+      }
+
+      render() {
+        if (!this.state.failed) return this.props.children
+        const t = (this.props && this.props.t) || ((key) => zh[key] || en[key] || key)
+        return h('div', {
+          role: 'alert',
+          style: {
+            padding: '8px 10px',
+            fontSize: 12,
+            lineHeight: 1.45,
+            borderRadius: 8,
+            background: 'var(--dsw-alias-interactive-bg-hover, rgba(127,127,127,.12))',
+            color: 'var(--dsw-alias-label-secondary, inherit)',
+            wordBreak: 'break-word',
+          },
+        }, t('crash.fallback'))
+      }
+    }
+
     function useStore(source, read) {
       const [, force] = React.useState(0)
       React.useEffect(() => source.subscribe(() => force((n) => n + 1)), [source])
@@ -282,7 +326,7 @@ window.__ModuleLoader__.load({
         mintPairUrl().then((url) => { window.location.assign(url || value.desktopUrl) })
       }
 
-      return h('a', {
+      return h(Boundary, { t }, h('a', {
         href: href || undefined,
         target: '_blank',
         rel: 'noopener noreferrer',
@@ -299,7 +343,7 @@ window.__ModuleLoader__.load({
         ? h('span', {
           style: { marginLeft: 8, overflow: 'hidden', textOverflow: 'ellipsis', fontSize: 13 },
         }, t('action.short'))
-        : null)
+        : null))
     }
 
     /**
@@ -312,7 +356,7 @@ window.__ModuleLoader__.load({
     function DesktopLinkSettingsButton(props) {
       const wide = props.wide !== false
       const t = props.t || ((key) => zh[key] || en[key] || key)
-      return h(React.Fragment, null,
+      return h(Boundary, { t }, h(React.Fragment, null,
         h('button', {
           type: 'button',
           style: baseButtonStyle(false),
@@ -322,7 +366,7 @@ window.__ModuleLoader__.load({
           onMouseEnter: hoverIn,
           onMouseLeave: hoverOut,
         }, h(Gear)),
-        h(DesktopLinkSettingsDialog, { t }))
+        h(DesktopLinkSettingsDialog, { t })))
     }
 
     const overlayStyle = {
@@ -332,12 +376,18 @@ window.__ModuleLoader__.load({
       display: 'flex',
       alignItems: 'center',
       justifyContent: 'center',
-      padding: 16,
+      padding: '16px 16px calc(16px + env(safe-area-inset-bottom, 0px))',
       background: 'rgba(0,0,0,.45)',
+      // A soft keyboard shrinks the WebView without moving a fixed overlay;
+      // letting the overlay itself scroll keeps the card reachable on a phone.
+      overflowY: 'auto',
+      overscrollBehavior: 'contain',
+      WebkitOverflowScrolling: 'touch',
     }
     const cardStyle = {
       width: 'min(520px, 100%)',
       maxHeight: 'calc(100vh - 32px)',
+      WebkitMaxHeight: 'calc(100vh - 32px)',
       overflow: 'auto',
       boxSizing: 'border-box',
       padding: 20,
@@ -416,7 +466,7 @@ window.__ModuleLoader__.load({
       if (!open) return null
 
       const submit = (event) => {
-        event.preventDefault()
+        if (event && typeof event.preventDefault === 'function') event.preventDefault()
         if (status === 'saving') return
         setStatus('saving')
         setError('')
@@ -521,23 +571,25 @@ window.__ModuleLoader__.load({
         onClick: () => dialog.hide(),
       }, fallback('form.cancel')),
       h('button', {
-        type: 'submit',
+        type: 'button',
         style: actionStyle(true),
         disabled: status === 'saving',
         onClick: submit,
       }, status === 'saving' ? fallback('form.saving') : fallback('form.save'))))
 
-      return h('div', {
+      // Deliberately not a <form>: an Android WebView treats a submission as a
+      // top-level navigation and hands it to DSHA, and a prevented submit still
+      // costs one navigation attempt. Two plain buttons have no such path.
+      return h(Boundary, { t: fallback }, h('div', {
         role: 'dialog',
         'aria-modal': 'true',
         'aria-label': fallback('form.title'),
         style: overlayStyle,
         onClick: (event) => { if (event.target === event.currentTarget) dialog.hide() },
-      }, h('form', {
-        onSubmit: submit,
+      }, h('div', {
         style: cardStyle,
         onClick: (event) => event.stopPropagation(),
-      }, body))
+      }, body)))
     }
 
     return {

package/index.js

@@ -1,397 +1,526 @@
-/**
- * dsh-desktop-link —— 宿主半区。
- *
- * 只做一件事：把两个地址交给浏览器半区，并允许在界面上改这两个地址。
- * 路由（均为同源 JSON）：
- *
- *   GET  /api/desktop-link/info
- *     → { ok, launchUrl, desktopUrl, source }
- *
- *   POST /api/desktop-link/config   { desktopUrl?, launchUrl? }
- *     → { ok, path, launchUrl, desktopUrl, source }；写入 $DSH_HOME/desktop-url.txt
- *
- *   launchUrl   点按钮时真正打开的地址（可以是中转的一次性链接）
- *   desktopUrl  桌面版 GUI 的长期地址（书签用，也是 launchUrl 的兜底）
- *
- * desktopUrl 的来源优先级（命中即停）：
- *   1. 本行 config.desktopUrl
- *   2. 环境变量 DSH_DESKTOP_URL
- *   3. $DSH_HOME/desktop-url.txt 第一行
- *   4. $DSH_HOME/remote-web-ui-registry/web.json 的 id → https://<id>.dsh-market.com
- *
- * launchUrl 额外支持 config.launchUrl / 环境变量 DSH_DESKTOP_LAUNCH_URL，
- * 用来指向 dsha-pair/bridge.py 的 /open.html（每次点都铸一枚新码）。
- * 没配 launchUrl 时，launchUrl 恒等于 desktopUrl。
- */
-import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs'
-import { createRequire } from 'node:module'
-import { homedir } from 'node:os'
-import { dirname, join, resolve } from 'node:path'
-import { fileURLToPath } from 'node:url'
-
-/**
- * Resolve `@deepseek-ai/schemastery`, which ships inside the harness
- * installation rather than as a dependency of this package.
- *
- * A bare `import` here fails with ERR_MODULE_NOT_FOUND and takes the whole
- * plugin down, so the module is located at runtime: first as a normal package
- * import from this file, then by walking up from the running `dsh` binary (the
- * harness's own node_modules), and finally by asking Node's global paths. The
- * `Config` export is omitted entirely when none of those resolve — the plugin
- * still works from config files, it just has no settings form.
- * @returns the schemastery `z` function, or undefined.
- */
-function loadSchemastery() {
-  const requireFrom = createRequire(import.meta.url)
-  const candidates = ['@deepseek-ai/schemastery']
-
-  // The harness entry point: .../node_modules/@deepseek-ai/dsh/lib/bin.js
-  const argv1 = process.argv[1]
-  if (typeof argv1 === 'string' && argv1) {
-    const dir = dirname(resolve(argv1))
-    candidates.push(join(dir, '..', 'node_modules', '@deepseek-ai', 'schemastery'))
-    candidates.push(join(dir, 'node_modules', '@deepseek-ai', 'schemastery'))
-  }
-  try {
-    for (const base of requireFrom.resolve.paths?.('@deepseek-ai/schemastery') ?? []) {
-      candidates.push(join(base, '@deepseek-ai', 'schemastery'))
-    }
-  } catch {
-    // resolve.paths is not on every Node build; the other candidates stand.
-  }
-
-  for (const candidate of candidates) {
-    try {
-      const mod = requireFrom(candidate)
-      const z = mod?.default ?? mod
-      if (typeof z === 'function' && typeof z.object === 'function') return z
-    } catch {
-      // try the next candidate
-    }
-  }
-  return undefined
-}
-
-const z = loadSchemastery()
-
-/**
- * Row config.
- *
- * Everything is optional. An install with no config falls through to the
- * environment, then to `desktop-url.txt`, then to the relay origin that
- * `dsh-remote-web-ui` publishes. The form exists so a phone — where there is no
- * shell to write that file with — can set the address from the GUI.
- *
- * The loader validates Config through schemastery's own `meta`/`dict` shape, so
- * a plain JSON Schema object is not interchangeable here (`undefined.validate`
- * when it tries). When schemastery cannot be located the export is omitted: no
- * settings form, but the row still activates.
- */
-const configSchema = typeof z === 'function'
-  ? z.object({
-    desktopUrl: z.string().description(
-      '桌面版 DSH 的长期地址（书签用），例如 https://xxx.dsh-market.com。'
-      + '留空则依次读环境变量 DSH_DESKTOP_URL、$DSH_HOME/desktop-url.txt、'
-      + 'dsh-remote-web-ui 的固定中继地址。'),
-    launchUrl: z.string().description(
-      '点按钮时真正打开的地址。留空则等于 desktopUrl。'
-      + '填一个会临时铸配对码的端点（如 bridge.py 的 /open.html?k=…），'
-      + '未配对过的手机也能一次进入。'),
-  })
-  : undefined
-
-export { configSchema as Config }
-
-function dshHome() {
-  const fromEnv = process.env.DSH_HOME
-  if (typeof fromEnv === 'string' && fromEnv.trim()) return fromEnv.trim()
-  return join(homedir(), '.dsh')
-}
-
-function urlish(value) {
-  return typeof value === 'string' && /^https?:\/\/\S+$/i.test(value.trim()) ? value.trim() : ''
-}
-
-/**
- * Every URL in a hand-edited comment-friendly file under the DSH home.
- *
- * `desktop-url.txt` takes up to two lines, in this order:
- *   line 1 = desktopUrl, the long-lived desktop origin (bookmark target)
- *   line 2 = launchUrl, what a click actually opens (a minting endpoint)
- * A single line therefore means "open this one thing". `#` comments and blank
- * lines are skipped, and anything that is not http(s) is ignored rather than
- * returned half-parsed.
- * @param name - file name inside the DSH home.
- * @returns the URLs found, in file order.
- */
-function readUrlLines(name) {
-  try {
-    const file = join(dshHome(), name)
-    if (!existsSync(file)) return []
-    const found = []
-    for (const raw of readFileSync(file, 'utf8').split(/\r?\n/)) {
-      const line = raw.trim()
-      if (!line || line.startsWith('#')) continue
-      const value = urlish(line)
-      if (value) found.push(value)
-    }
-    return found
-  } catch {
-    return []
-  }
-}
-
-function readRelayOrigin() {
-  try {
-    const file = join(dshHome(), 'remote-web-ui-registry', 'web.json')
-    if (!existsSync(file)) return ''
-    const parsed = JSON.parse(readFileSync(file, 'utf8'))
-    const id = typeof parsed?.id === 'string' ? parsed.id.trim() : ''
-    return /^[A-Za-z0-9-]{8,}$/.test(id) ? `https://${id}.dsh-market.com` : ''
-  } catch {
-    return ''
-  }
-}
-
-/**
- * Whether this instance has ever paired a device.
- *
- * The roster is `dsh-remote-web-ui`'s own persisted store
- * (`$DSH_HOME/remote-web-ui-devices.json`, 0600, its documented default). It is
- * read only for this boolean — no ids, no credentials — and a missing or
- * unreadable file simply means "nothing paired yet", which is the safe answer:
- * the button then mints a token instead of opening a URL that would 401.
- * @returns whether at least one device session exists on disk.
- */
-function hasPairedDevice() {
-  try {
-    const file = join(dshHome(), 'remote-web-ui-devices.json')
-    if (!existsSync(file)) return false
-    const parsed = JSON.parse(readFileSync(file, 'utf8'))
-    const rows = Array.isArray(parsed) ? parsed : (parsed?.devices ?? [])
-    return Array.isArray(rows) ? rows.length > 0 : Boolean(rows && Object.keys(rows).length)
-  } catch {
-    return false
-  }
-}
-
-function resolveUrls(config) {
-  const fileUrls = readUrlLines('desktop-url.txt')
-  const chain = [
-    ['config', () => urlish(config?.desktopUrl)],
-    ['env', () => urlish(process.env.DSH_DESKTOP_URL)],
-    ['desktop-url.txt', () => fileUrls[0] ?? ''],
-    ['relay-registry', readRelayOrigin],
-  ]
-  let desktopUrl = ''
-  let source = 'unset'
-  for (const [label, read] of chain) {
-    const value = read()
-    if (value) { desktopUrl = value; source = label; break }
-  }
-  // launchUrl is what a click opens. In order: the row's config, the
-  // environment, line 2 of desktop-url.txt (a local minting endpoint such as
-  // dsha-pair/bridge.py's /open.html?k=…), then the desktop origin itself.
-  const launchUrl =
-    urlish(config?.launchUrl) ||
-    urlish(process.env.DSH_DESKTOP_LAUNCH_URL) ||
-    fileUrls[1] ||
-    desktopUrl
-  return { launchUrl, desktopUrl, source }
-}
-
-/**
- * Nothing to do here — kept as the single place that maps a URL string to a
- * file line, so the write path and the read path agree on what counts as a URL.
- * @param value - candidate URL.
- * @returns the trimmed URL, or an empty string when it is not http(s).
- */
-function cleanUrl(value) {
-  return urlish(value)
-}
-
-/**
- * Persist both addresses to `$DSH_HOME/desktop-url.txt`.
- *
- * Written to a sibling temp file and renamed into place: a half-written file
- * would be read back by the next `/api/desktop-link/info` and silently point
- * the button at a truncated URL. An empty pair removes the file entirely, which
- * restores the relay-registry fallback instead of pinning a dead address.
- * @param desktopUrl - the long-lived origin, or ''.
- * @param launchUrl - what a click opens, or '' for "same as desktopUrl".
- * @returns the file path written, or '' when the file was removed.
- */
-function writeUrlFile(desktopUrl, launchUrl) {
-  const file = join(dshHome(), 'desktop-url.txt')
-  const lines = []
-  if (desktopUrl) lines.push(desktopUrl)
-  // Line 2 only carries meaning next to a line 1; a lone launchUrl is written
-  // as line 1 so a user who only knows the minting endpoint still gets one.
-  if (launchUrl && launchUrl !== desktopUrl) {
-    if (lines.length === 0) lines.push(launchUrl)
-    else lines.push(launchUrl)
-  }
-  if (lines.length === 0) {
-    try { rmSync(file, { force: true }) } catch { /* already gone */ }
-    return ''
-  }
-  const tmp = `${file}.tmp`
-  writeFileSync(tmp, `${lines.join('\n')}\n`, { encoding: 'utf8', mode: 0o600 })
-  renameSync(tmp, file)
-  return file
-}
-
-/**
- * Read a small JSON request body.
- *
- * Bounded on purpose: this route is reachable from any paired device, and an
- * unbounded read would let one request hold the process's memory. The cap is
- * far above the two URLs the form sends.
- * @param req - the incoming request.
- * @returns the parsed object, or null when the body is absent, oversized, or
- * not JSON.
- */
-function readJsonBody(req) {
-  return new Promise((resolveBody) => {
-    const chunks = []
-    let size = 0
-    let settled = false
-    const finish = (value) => {
-      if (settled) return
-      settled = true
-      resolveBody(value)
-    }
-    req.on('data', (chunk) => {
-      size += chunk.length
-      if (size > 8192) { finish(null); req.destroy(); return }
-      chunks.push(chunk)
-    })
-    req.on('end', () => {
-      if (!chunks.length) return finish({})
-      try {
-        const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'))
-        finish(parsed && typeof parsed === 'object' ? parsed : null)
-      } catch {
-        finish(null)
-      }
-    })
-    req.on('error', () => finish(null))
-  })
-}
-
-/** Host half: publish the desktop address. */
-export const inject = ['webServer']
-
-/**
- * Register the info route and the index global.
- *
- * The browser half reads `globalThis.__DSHA_DESKTOP_LINK__` synchronously, so
- * the button is usable on first paint. `paired` tells it whether this instance
- * ever paired a device: when it never has, the client mints a token itself
- * through `/api/pair/issue` (same-origin, loopback, so the pairing service
- * answers) instead of opening a URL that would hit the harness 401 fence.
- *
- * `config` is read per request rather than captured once: the settings form
- * writes through the Host's config layer, and a request that arrived after such
- * a write must see the new value without a restart.
- * @param ctx - host plugin context carrying webServer.
- * @param config - the row's live config (`{ desktopUrl?, launchUrl? }`).
- */
-export function apply(ctx, config) {
-  /**
-   * A Cordis config value may be a getter-backed proxy that throws when a field
-   * is read outside the loader's own evaluation, so every read is guarded: a
-   * failing field is treated as absent, and the chain simply continues.
-   */
-  const field = (name) => {
-    try {
-      const source = typeof config === 'function' ? config() : config
-      const value = source?.[name]
-      return typeof value === 'string' ? value : ''
-    } catch {
-      return ''
-    }
-  }
-  const live = () => resolveUrls({ desktopUrl: field('desktopUrl'), launchUrl: field('launchUrl') })
-
-  const disposeGlobal = ctx.on('webserver/index-inject', (table) => {
-    table.push({ kind: 'global', name: '__DSHA_DESKTOP_LINK__', value: live() })
-  })
-
-  const info = ctx.webServer.register({
-    kind: 'exact',
-    path: '/api/desktop-link/info',
-    handler(_req, res) {
-      // Re-read per request: editing desktop-url.txt (or saving the settings
-      // form) takes effect on the next click without restarting the profile.
-      // Never let a resolve failure answer with a bare 400 — the button reads
-      // this and a crash here looks exactly like "the plugin is gone".
-      let payload
-      try {
-        payload = { ok: true, ...live() }
-      } catch (error) {
-        payload = { ok: false, error: String(error?.message ?? error) }
-      }
-      const body = JSON.stringify(payload)
-      res.writeHead(200, {
-        'content-type': 'application/json; charset=utf-8',
-        'content-length': Buffer.byteLength(body),
-        'cache-control': 'no-store',
-      })
-      res.end(body)
-    },
-  })
-
-  /**
-   * Save the two addresses.
-   *
-   * This is the form a phone can actually reach: DSH renders a settings form
-   * only for entries it considers editable, and an installed bundle's own row
-   * is not always one of them. The route writes the same file the file-based
-   * chain reads, so both entry points converge on one source of truth.
-   *
-   * POST /api/desktop-link/config  { desktopUrl?, launchUrl? }
-   */
-  const save = ctx.webServer.register({
-    kind: 'exact',
-    path: '/api/desktop-link/config',
-    handler(req, res) {
-      const reply = (status, payload) => {
-        const body = JSON.stringify(payload)
-        res.writeHead(status, {
-          'content-type': 'application/json; charset=utf-8',
-          'content-length': Buffer.byteLength(body),
-          'cache-control': 'no-store',
-        })
-        res.end(body)
-      }
-      if (req.method !== 'POST') return reply(405, { ok: false, error: 'POST only' })
-      readJsonBody(req).then((body) => {
-        if (!body) return reply(400, { ok: false, error: 'invalid JSON body' })
-        const desktopUrl = cleanUrl(body.desktopUrl)
-        const launchUrl = cleanUrl(body.launchUrl)
-        // A supplied non-empty value that fails validation is an error, not a
-        // silent "unset": the user typed something and deserves to know it was
-        // rejected instead of watching the button stay grey.
-        if (body.desktopUrl && !desktopUrl) {
-          return reply(400, { ok: false, error: 'desktopUrl must be an http(s) URL' })
-        }
-        if (body.launchUrl && !launchUrl) {
-          return reply(400, { ok: false, error: 'launchUrl must be an http(s) URL' })
-        }
-        try {
-          const path = writeUrlFile(desktopUrl, launchUrl)
-          return reply(200, { ok: true, path, ...live() })
-        } catch (error) {
-          return reply(500, { ok: false, error: String(error?.message ?? error) })
-        }
-      })
-    },
-  })
-
-  ctx.effect(() => () => {
-    if (typeof disposeGlobal === 'function') disposeGlobal()
-    if (typeof info === 'function') info()
-    if (typeof save === 'function') save()
-  }, 'dsha-desktop-link: info + config routes + index global')
-}
+/**
+ * dsh-desktop-link —— 宿主半区。
+ *
+ * 只做一件事：把两个地址交给浏览器半区，并允许在界面上改这两个地址。
+ * 路由（均为同源 JSON）：
+ *
+ *   GET  /api/desktop-link/info
+ *     → { ok, launchUrl, desktopUrl, source }
+ *
+ *   POST /api/desktop-link/config   { desktopUrl?, launchUrl? }
+ *     → { ok, path, launchUrl, desktopUrl, source }；写入 $DSH_HOME/desktop-url.txt
+ *
+ *   launchUrl   点按钮时真正打开的地址（可以是中转的一次性链接）
+ *   desktopUrl  桌面版 GUI 的长期地址（书签用，也是 launchUrl 的兜底）
+ *
+ * desktopUrl 的来源优先级（命中即停）：
+ *   1. 本行 config.desktopUrl
+ *   2. 环境变量 DSH_DESKTOP_URL
+ *   3. $DSH_HOME/desktop-url.txt 第一行
+ *   4. $DSH_HOME/remote-web-ui-registry/web.json 的 id → https://<id>.dsh-market.com
+ *
+ * launchUrl 额外支持 config.launchUrl / 环境变量 DSH_DESKTOP_LAUNCH_URL，
+ * 用来指向 dsha-pair/bridge.py 的 /open.html（每次点都铸一枚新码）。
+ * 没配 launchUrl 时，launchUrl 恒等于 desktopUrl。
+ */
+import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { homedir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+/**
+ * Resolve `@deepseek-ai/schemastery`, which ships inside the harness
+ * installation rather than as a dependency of this package.
+ *
+ * A bare `import` here fails with ERR_MODULE_NOT_FOUND and takes the whole
+ * plugin down, so the module is located at runtime: first as a normal package
+ * import from this file, then by walking up from the running `dsh` binary (the
+ * harness's own node_modules), and finally by asking Node's global paths. The
+ * `Config` export is omitted entirely when none of those resolve — the plugin
+ * still works from config files, it just has no settings form.
+ * @returns the schemastery `z` function, or undefined.
+ */
+function loadSchemastery() {
+  const requireFrom = createRequire(import.meta.url)
+  const candidates = ['@deepseek-ai/schemastery']
+
+  // The harness entry point: .../node_modules/@deepseek-ai/dsh/lib/bin.js
+  const argv1 = process.argv[1]
+  if (typeof argv1 === 'string' && argv1) {
+    const dir = dirname(resolve(argv1))
+    candidates.push(join(dir, '..', 'node_modules', '@deepseek-ai', 'schemastery'))
+    candidates.push(join(dir, 'node_modules', '@deepseek-ai', 'schemastery'))
+  }
+  try {
+    for (const base of requireFrom.resolve.paths?.('@deepseek-ai/schemastery') ?? []) {
+      candidates.push(join(base, '@deepseek-ai', 'schemastery'))
+    }
+  } catch {
+    // resolve.paths is not on every Node build; the other candidates stand.
+  }
+
+  for (const candidate of candidates) {
+    try {
+      const mod = requireFrom(candidate)
+      const z = mod?.default ?? mod
+      if (typeof z === 'function' && typeof z.object === 'function') return z
+    } catch {
+      // try the next candidate
+    }
+  }
+  return undefined
+}
+
+const z = loadSchemastery()
+
+/**
+ * Row config.
+ *
+ * Everything is optional. An install with no config falls through to the
+ * environment, then to `desktop-url.txt`, then to the relay origin that
+ * `dsh-remote-web-ui` publishes. The form exists so a phone — where there is no
+ * shell to write that file with — can set the address from the GUI.
+ *
+ * The loader validates Config through schemastery's own `meta`/`dict` shape, so
+ * a plain JSON Schema object is not interchangeable here (`undefined.validate`
+ * when it tries). When schemastery cannot be located the export is omitted: no
+ * settings form, but the row still activates.
+ */
+const configSchema = typeof z === 'function'
+  ? z.object({
+    desktopUrl: z.string().description(
+      '桌面版 DSH 的长期地址（书签用），例如 https://xxx.dsh-market.com。'
+      + '留空则依次读环境变量 DSH_DESKTOP_URL、$DSH_HOME/desktop-url.txt、'
+      + 'dsh-remote-web-ui 的固定中继地址。'),
+    launchUrl: z.string().description(
+      '点按钮时真正打开的地址。留空则等于 desktopUrl。'
+      + '填一个会临时铸配对码的端点（如 bridge.py 的 /open.html?k=…），'
+      + '未配对过的手机也能一次进入。'),
+  })
+  : undefined
+
+export { configSchema as Config }
+
+function dshHome() {
+  const fromEnv = process.env.DSH_HOME
+  if (typeof fromEnv === 'string' && fromEnv.trim()) return fromEnv.trim()
+  return join(homedir(), '.dsh')
+}
+
+function urlish(value) {
+  return typeof value === 'string' && /^https?:\/\/\S+$/i.test(value.trim()) ? value.trim() : ''
+}
+
+/**
+ * Every URL in a hand-edited comment-friendly file under the DSH home.
+ *
+ * `desktop-url.txt` takes up to two lines, in this order:
+ *   line 1 = desktopUrl, the long-lived desktop origin (bookmark target)
+ *   line 2 = launchUrl, what a click actually opens (a minting endpoint)
+ * A single line therefore means "open this one thing". `#` comments and blank
+ * lines are skipped, and anything that is not http(s) is ignored rather than
+ * returned half-parsed.
+ * @param name - file name inside the DSH home.
+ * @returns the URLs found, in file order.
+ */
+function readUrlLines(name) {
+  try {
+    const file = join(dshHome(), name)
+    if (!existsSync(file)) return []
+    const found = []
+    for (const raw of readFileSync(file, 'utf8').split(/\r?\n/)) {
+      const line = raw.trim()
+      if (!line || line.startsWith('#')) continue
+      const value = urlish(line)
+      if (value) found.push(value)
+    }
+    return found
+  } catch {
+    return []
+  }
+}
+
+function readRelayOrigin() {
+  try {
+    const file = join(dshHome(), 'remote-web-ui-registry', 'web.json')
+    if (!existsSync(file)) return ''
+    const parsed = JSON.parse(readFileSync(file, 'utf8'))
+    const id = typeof parsed?.id === 'string' ? parsed.id.trim() : ''
+    return /^[A-Za-z0-9-]{8,}$/.test(id) ? `https://${id}.dsh-market.com` : ''
+  } catch {
+    return ''
+  }
+}
+
+/**
+ * Whether this instance has ever paired a device.
+ *
+ * The roster is `dsh-remote-web-ui`'s own persisted store
+ * (`$DSH_HOME/remote-web-ui-devices.json`, 0600, its documented default). It is
+ * read only for this boolean — no ids, no credentials — and a missing or
+ * unreadable file simply means "nothing paired yet", which is the safe answer:
+ * the button then mints a token instead of opening a URL that would 401.
+ * @returns whether at least one device session exists on disk.
+ */
+function hasPairedDevice() {
+  try {
+    const file = join(dshHome(), 'remote-web-ui-devices.json')
+    if (!existsSync(file)) return false
+    const parsed = JSON.parse(readFileSync(file, 'utf8'))
+    const rows = Array.isArray(parsed) ? parsed : (parsed?.devices ?? [])
+    return Array.isArray(rows) ? rows.length > 0 : Boolean(rows && Object.keys(rows).length)
+  } catch {
+    return false
+  }
+}
+
+function resolveUrls(config) {
+  const fileUrls = readUrlLines('desktop-url.txt')
+  const chain = [
+    ['config', () => urlish(config?.desktopUrl)],
+    ['env', () => urlish(process.env.DSH_DESKTOP_URL)],
+    ['desktop-url.txt', () => fileUrls[0] ?? ''],
+    ['relay-registry', readRelayOrigin],
+  ]
+  let desktopUrl = ''
+  let source = 'unset'
+  for (const [label, read] of chain) {
+    const value = read()
+    if (value) { desktopUrl = value; source = label; break }
+  }
+  // launchUrl is what a click opens. In order: the row's config, the
+  // environment, line 2 of desktop-url.txt (a local minting endpoint such as
+  // dsha-pair/bridge.py's /open.html?k=…), then the desktop origin itself.
+  const launchUrl =
+    urlish(config?.launchUrl) ||
+    urlish(process.env.DSH_DESKTOP_LAUNCH_URL) ||
+    fileUrls[1] ||
+    desktopUrl
+  return { launchUrl, desktopUrl, source }
+}
+
+/**
+ * Nothing to do here — kept as the single place that maps a URL string to a
+ * file line, so the write path and the read path agree on what counts as a URL.
+ * @param value - candidate URL.
+ * @returns the trimmed URL, or an empty string when it is not http(s).
+ */
+/** Minimal HTML escaping for the fallback page. */
+function escapeHtml(value) {
+  return String(value ?? '').replace(/[&<>"']/g, (ch) => (
+    ch === '&' ? '&amp;' : ch === '<' ? '&lt;' : ch === '>' ? '&gt;' : ch === '"' ? '&quot;' : '&#39;'
+  ))
+}
+
+/**
+ * Whether a request came from this origin.
+ *
+ * `/api/desktop-link/set` writes a URL on a bare GET, and registered routes
+ * sit outside the harness's own auth fence — so the check has to be here or any
+ * page on the internet could repoint the user's button with an image tag.
+ * A request typed into the address bar arrives with no Origin and no
+ * `Sec-Fetch-Site`; that is allowed on purpose, because it is the exact case
+ * the fallback page exists for.
+ * @param req - the incoming request.
+ * @returns whether the request is same-origin (or origin-less).
+ */
+function sameOrigin(req) {
+  try {
+    const site = String(req.headers['sec-fetch-site'] ?? '')
+    if (site === 'cross-site') return false
+    const origin = String(req.headers.origin ?? '')
+    if (!origin) return true
+    return new URL(origin).host === String(req.headers.host ?? '')
+  } catch {
+    return false
+  }
+}
+
+/**
+ * Send the fallback page.
+ * @param res - the response.
+ * @param status - HTTP status.
+ * @param title - heading and document title.
+ * @param body - one paragraph of outcome text.
+ */
+function sendPage(res, status, title, body) {
+  const page = `<!doctype html><meta charset="utf-8">`
+    + `<meta name="viewport" content="width=device-width,initial-scale=1">`
+    + `<title>${escapeHtml(title)}</title>`
+    + `<body style="font:15px/1.6 system-ui,-apple-system,sans-serif;padding:24px;max-width:720px;color:#222">`
+    + `<h1 style="font-size:18px;margin:0 0 12px">${escapeHtml(title)}</h1>`
+    + `<p style="margin:0 0 16px;word-break:break-all">${escapeHtml(body)}</p>`
+    + `<p style="margin:0"><a href="/" style="color:#4d6bfe">← DSH</a></p></body>`
+  res.writeHead(status, {
+    'content-type': 'text/html; charset=utf-8',
+    'content-length': Buffer.byteLength(page),
+    'cache-control': 'no-store',
+  })
+  res.end(page)
+}
+
+function cleanUrl(value) {
+  return urlish(value)
+}
+
+/**
+ * Persist both addresses to `$DSH_HOME/desktop-url.txt`.
+ *
+ * Written to a sibling temp file and renamed into place: a half-written file
+ * would be read back by the next `/api/desktop-link/info` and silently point
+ * the button at a truncated URL. An empty pair removes the file entirely, which
+ * restores the relay-registry fallback instead of pinning a dead address.
+ * @param desktopUrl - the long-lived origin, or ''.
+ * @param launchUrl - what a click opens, or '' for "same as desktopUrl".
+ * @returns the file path written, or '' when the file was removed.
+ */
+function writeUrlFile(desktopUrl, launchUrl) {
+  const file = join(dshHome(), 'desktop-url.txt')
+  const lines = []
+  if (desktopUrl) lines.push(desktopUrl)
+  // Line 2 only carries meaning next to a line 1; a lone launchUrl is written
+  // as line 1 so a user who only knows the minting endpoint still gets one.
+  if (launchUrl && launchUrl !== desktopUrl) {
+    if (lines.length === 0) lines.push(launchUrl)
+    else lines.push(launchUrl)
+  }
+  if (lines.length === 0) {
+    try { rmSync(file, { force: true }) } catch { /* already gone */ }
+    return ''
+  }
+  const payload = `${lines.join('\n')}\n`
+  const tmp = `${file}.tmp`
+  writeFileSync(tmp, payload, { encoding: 'utf8', mode: 0o600 })
+  try {
+    renameSync(tmp, file)
+  } catch {
+    // Android's proot rootfs can refuse a rename across its overlay; a direct
+    // write is not atomic but it still leaves a complete file, which beats a
+    // settings form that can never save.
+    writeFileSync(file, payload, { encoding: 'utf8', mode: 0o600 })
+    try { rmSync(tmp, { force: true }) } catch { /* best effort */ }
+  }
+  return file
+}
+
+/**
+ * Read a small JSON request body.
+ *
+ * Bounded on purpose: this route is reachable from any paired device, and an
+ * unbounded read would let one request hold the process's memory. The cap is
+ * far above the two URLs the form sends.
+ * @param req - the incoming request.
+ * @returns the parsed object, or null when the body is absent, oversized, or
+ * not JSON.
+ */
+function readJsonBody(req) {
+  return new Promise((resolveBody) => {
+    const chunks = []
+    let size = 0
+    let settled = false
+    const finish = (value) => {
+      if (settled) return
+      settled = true
+      resolveBody(value)
+    }
+    req.on('data', (chunk) => {
+      size += chunk.length
+      if (size > 8192) { finish(null); req.destroy(); return }
+      chunks.push(chunk)
+    })
+    req.on('end', () => {
+      if (!chunks.length) return finish({})
+      const text = Buffer.concat(chunks).toString('utf8')
+      try {
+        const parsed = JSON.parse(text)
+        return finish(parsed && typeof parsed === 'object' ? parsed : null)
+      } catch {
+        // Some WebViews send a form body even when asked for JSON.
+      }
+      try {
+        const form = new URLSearchParams(text)
+        const out = {}
+        for (const [key, value] of form) out[key] = value
+        return finish(Object.keys(out).length ? out : null)
+      } catch {
+        return finish(null)
+      }
+    })
+    req.on('error', () => finish(null))
+  })
+}
+
+/** Host half: publish the desktop address. */
+export const inject = ['webServer']
+
+/**
+ * Register the info route and the index global.
+ *
+ * The browser half reads `globalThis.__DSHA_DESKTOP_LINK__` synchronously, so
+ * the button is usable on first paint. `paired` tells it whether this instance
+ * ever paired a device: when it never has, the client mints a token itself
+ * through `/api/pair/issue` (same-origin, loopback, so the pairing service
+ * answers) instead of opening a URL that would hit the harness 401 fence.
+ *
+ * `config` is read per request rather than captured once: the settings form
+ * writes through the Host's config layer, and a request that arrived after such
+ * a write must see the new value without a restart.
+ * @param ctx - host plugin context carrying webServer.
+ * @param config - the row's live config (`{ desktopUrl?, launchUrl? }`).
+ */
+export function apply(ctx, config) {
+  /**
+   * A Cordis config value may be a getter-backed proxy that throws when a field
+   * is read outside the loader's own evaluation, so every read is guarded: a
+   * failing field is treated as absent, and the chain simply continues.
+   */
+  const field = (name) => {
+    try {
+      const source = typeof config === 'function' ? config() : config
+      const value = source?.[name]
+      return typeof value === 'string' ? value : ''
+    } catch {
+      return ''
+    }
+  }
+  const live = () => resolveUrls({ desktopUrl: field('desktopUrl'), launchUrl: field('launchUrl') })
+
+  const disposeGlobal = ctx.on('webserver/index-inject', (table) => {
+    table.push({ kind: 'global', name: '__DSHA_DESKTOP_LINK__', value: live() })
+  })
+
+  const info = ctx.webServer.register({
+    kind: 'exact',
+    path: '/api/desktop-link/info',
+    handler(_req, res) {
+      // Re-read per request: editing desktop-url.txt (or saving the settings
+      // form) takes effect on the next click without restarting the profile.
+      // Never let a resolve failure answer with a bare 400 — the button reads
+      // this and a crash here looks exactly like "the plugin is gone".
+      let payload
+      try {
+        payload = { ok: true, ...live() }
+      } catch (error) {
+        payload = { ok: false, error: String(error?.message ?? error) }
+      }
+      const body = JSON.stringify(payload)
+      res.writeHead(200, {
+        'content-type': 'application/json; charset=utf-8',
+        'content-length': Buffer.byteLength(body),
+        'cache-control': 'no-store',
+      })
+      res.end(body)
+    },
+  })
+
+  /**
+   * Save the two addresses.
+   *
+   * This is the form a phone can actually reach: DSH renders a settings form
+   * only for entries it considers editable, and an installed bundle's own row
+   * is not always one of them. The route writes the same file the file-based
+   * chain reads, so both entry points converge on one source of truth.
+   *
+   * POST /api/desktop-link/config  { desktopUrl?, launchUrl? }
+   */
+  const save = ctx.webServer.register({
+    kind: 'exact',
+    path: '/api/desktop-link/config',
+    handler(req, res) {
+      const reply = (status, payload) => {
+        const body = JSON.stringify(payload)
+        res.writeHead(status, {
+          'content-type': 'application/json; charset=utf-8',
+          'content-length': Buffer.byteLength(body),
+          'cache-control': 'no-store',
+        })
+        res.end(body)
+      }
+      if (req.method !== 'POST') return reply(405, { ok: false, error: 'POST only' })
+      readJsonBody(req).catch(() => null).then((body) => {
+        if (!body) return reply(400, { ok: false, error: 'invalid JSON body' })
+        const desktopUrl = cleanUrl(body.desktopUrl)
+        const launchUrl = cleanUrl(body.launchUrl)
+        // A supplied non-empty value that fails validation is an error, not a
+        // silent "unset": the user typed something and deserves to know it was
+        // rejected instead of watching the button stay grey.
+        if (body.desktopUrl && !desktopUrl) {
+          return reply(400, { ok: false, error: 'desktopUrl must be an http(s) URL' })
+        }
+        if (body.launchUrl && !launchUrl) {
+          return reply(400, { ok: false, error: 'launchUrl must be an http(s) URL' })
+        }
+        try {
+          const path = writeUrlFile(desktopUrl, launchUrl)
+          return reply(200, { ok: true, path, ...live() })
+        } catch (error) {
+          return reply(500, { ok: false, error: String(error?.message ?? error) })
+        }
+      })
+    },
+  })
+
+  /**
+   * The no-dialog path.
+   *
+   * Everything the settings panel does, reachable as one URL, so a phone whose
+   * WebView misbehaves — or a user with only a terminal — can still set the
+   * address without touching the sidebar:
+   *
+   *   GET /api/desktop-link/set?desktopUrl=https://xxx.dsh-market.com
+   */
+  const setRoute = ctx.webServer.register({
+    kind: 'exact',
+    path: '/api/desktop-link/set',
+    handler(req, res) {
+      if (req.method !== 'GET') {
+        res.writeHead(405, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+        res.end(JSON.stringify({ ok: false, error: 'GET only' }))
+        return
+      }
+      if (!sameOrigin(req)) {
+        sendPage(res, 403, '已拒绝', '这个地址只能从本机页面写入（跨站请求会被拒绝）。')
+        return
+      }
+      let query
+      try {
+        query = new URL(String(req.url ?? '/'), 'http://127.0.0.1').searchParams
+      } catch {
+        sendPage(res, 400, '参数无法解析', '请求地址无法解析，请重新打开一次。')
+        return
+      }
+      const rawDesktop = query.get('desktopUrl') ?? query.get('desktop') ?? ''
+      const rawLaunch = query.get('launchUrl') ?? query.get('launch') ?? ''
+      if (!rawDesktop && !rawLaunch) {
+        sendPage(res, 400, '缺少参数',
+          '用法：/api/desktop-link/set?desktopUrl=https://xxx.dsh-market.com'
+          + '（可再加 &launchUrl=https://…/open.html?k=…）')
+        return
+      }
+      const desktopUrl = cleanUrl(rawDesktop)
+      const launchUrl = cleanUrl(rawLaunch)
+      if ((rawDesktop && !desktopUrl) || (rawLaunch && !launchUrl)) {
+        sendPage(res, 400, '地址不合法', '只接受 http(s) 地址。')
+        return
+      }
+      try {
+        const file = writeUrlFile(desktopUrl, launchUrl)
+        const now = live()
+        sendPage(res, 200, '已保存',
+          `${file ? `已写入 ${file}。` : '已清空地址文件。'}`
+          + `桌面地址：${now.desktopUrl || '（未配置）'}；点按钮打开：${now.launchUrl || '（未配置）'}。`
+          + '回到 DSH 点一下按钮即可。')
+      } catch (error) {
+        sendPage(res, 500, '保存失败', `写入桌面地址文件时出错：${String(error?.message ?? error)}`)
+      }
+    },
+  })
+
+  ctx.effect(() => () => {
+    if (typeof disposeGlobal === 'function') disposeGlobal()
+    if (typeof info === 'function') info()
+    if (typeof save === 'function') save()
+    if (typeof setRoute === 'function') setRoute()
+  }, 'dsha-desktop-link: info + config routes + index global')
+}

package/package.json

@@ -1,60 +1,60 @@
-{
-  "name": "dsh-desktop-link",
-  "version": "1.2.0",
-  "type": "module",
-  "icon": "./icon.svg",
-  "exports": {
-    ".": "./index.js",
-    "./client": "./client.js",
-    "./locale/*.json": "./locale/*.json",
-    "./icon": "./icon.svg",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "index.js",
-    "client.js",
-    "cordis.patch.yml",
-    "icon.svg",
-    "locale",
-    "assets"
-  ],
-  "dsh": {
-    "engines": {
-      "dsh": ">=0.2.1-rc.2"
-    },
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "platform": "web",
-      "immediately": true,
-      "inject": [
-        "@deepseek-ai/dsh-client-ui-sidebar"
-      ]
-    }
-  },
-  "license": "MIT",
-  "author": "lzlrt",
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek",
-    "deepseek-harness",
-    "dsha",
-    "remote",
-    "sidebar",
-    "mobile"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/lzlrt/dsha-desktop-link.git"
-  },
-  "homepage": "https://github.com/lzlrt/dsha-desktop-link#readme",
-  "bugs": {
-    "url": "https://github.com/lzlrt/dsha-desktop-link/issues"
-  },
-  "description": "DSH sidebar button: open the desktop DSH Web GUI from DSHA on your phone, in one tap.",
-  "engines": {
-    "node": "^22.19.0 || >=24.0.0"
-  }
+{
+  "name": "dsh-desktop-link",
+  "version": "1.2.1",
+  "type": "module",
+  "icon": "./icon.svg",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "icon.svg",
+    "locale",
+    "assets"
+  ],
+  "dsh": {
+    "engines": {
+      "dsh": ">=0.2.1-rc.2"
+    },
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
+    }
+  },
+  "license": "MIT",
+  "author": "lzlrt",
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek",
+    "deepseek-harness",
+    "dsha",
+    "remote",
+    "sidebar",
+    "mobile"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lzlrt/dsha-desktop-link.git"
+  },
+  "homepage": "https://github.com/lzlrt/dsha-desktop-link#readme",
+  "bugs": {
+    "url": "https://github.com/lzlrt/dsha-desktop-link/issues"
+  },
+  "description": "DSH sidebar button: open the desktop DSH Web GUI from DSHA on your phone, in one tap.",
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  }
 }