dsh-mobile-access 0.0.0-stage → 1.0.0

package/html.js

@@ -0,0 +1,275 @@
+/** Self-contained, dependency-free HTML for the public pairing route. */
+const CSP = [
+    "default-src 'none'",
+    "style-src 'unsafe-inline'",
+    "form-action 'self'",
+    "base-uri 'none'",
+    "frame-ancestors 'none'",
+].join('; ');
+export function contentSecurityPolicy() {
+    return CSP;
+}
+export function escapeHtml(value) {
+    return value
+        .replaceAll('&', '&')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;')
+        .replaceAll("'", '&#39;');
+}
+function shell(title, body) {
+    return `<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
+<meta name="format-detection" content="telephone=no">
+<meta name="robots" content="noindex, nofollow">
+<meta name="color-scheme" content="light dark">
+<meta name="theme-color" content="#f4f6fa" media="(prefers-color-scheme: light)">
+<meta name="theme-color" content="#0b0f14" media="(prefers-color-scheme: dark)">
+<meta name="apple-mobile-web-app-capable" content="yes">
+<meta name="apple-mobile-web-app-title" content="DSH 手机访问">
+<title>${escapeHtml(title)}</title>
+<style>
+:root {
+  color-scheme: light dark;
+  --bg: #f4f6fa;
+  --card: #ffffff;
+  --text: #111827;
+  --muted: #5f6b7a;
+  --line: #dfe4ec;
+  --brand: #2f5bea;
+  --brand-ink: #ffffff;
+  --danger: #b42318;
+  --danger-bg: #fff2f0;
+  --ok: #087443;
+  --ok-bg: #eaf8f0;
+  --shadow: 0 18px 50px rgba(20, 33, 61, .12);
+}
+@media (prefers-color-scheme: dark) {
+  :root {
+    --bg: #0b0f14;
+    --card: #141b24;
+    --text: #f3f6fa;
+    --muted: #a5b2c2;
+    --line: #2a3542;
+    --brand: #7aa2ff;
+    --brand-ink: #08101f;
+    --danger: #ff9a90;
+    --danger-bg: #2a1514;
+    --ok: #69d9a3;
+    --ok-bg: #10251b;
+    --shadow: 0 18px 50px rgba(0, 0, 0, .35);
+  }
+}
+* { box-sizing: border-box; }
+html, body { margin: 0; min-height: 100%; }
+body {
+  min-height: 100vh;
+  min-height: 100svh;
+  display: grid;
+  place-items: center;
+  padding: max(20px, env(safe-area-inset-top)) max(20px, env(safe-area-inset-right)) max(20px, env(safe-area-inset-bottom)) max(20px, env(safe-area-inset-left));
+  background: radial-gradient(circle at 20% 0%, color-mix(in srgb, var(--brand) 16%, transparent), transparent 42%), var(--bg);
+  color: var(--text);
+  font: 16px/1.55 -apple-system, BlinkMacSystemFont, "SF Pro Text", "Segoe UI", sans-serif;
+  -webkit-text-size-adjust: 100%;
+}
+.card {
+  width: 100%;
+  max-width: 430px;
+  padding: 24px;
+  border: 1px solid var(--line);
+  border-radius: 22px;
+  background: var(--card);
+  box-shadow: var(--shadow);
+}
+.brand {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  margin-bottom: 18px;
+  color: var(--muted);
+  font-size: 13px;
+  font-weight: 650;
+  letter-spacing: .08em;
+  text-transform: uppercase;
+}
+.mark {
+  display: grid;
+  place-items: center;
+  width: 30px;
+  height: 30px;
+  border-radius: 10px;
+  background: var(--brand);
+  color: var(--brand-ink);
+  font-size: 15px;
+  font-weight: 800;
+}
+h1 { margin: 0 0 8px; font-size: 25px; line-height: 1.2; letter-spacing: -.02em; }
+p { margin: 0 0 14px; color: var(--muted); }
+.status {
+  display: inline-flex;
+  align-items: center;
+  gap: 7px;
+  min-height: 32px;
+  padding: 5px 11px;
+  margin: 2px 0 18px;
+  border: 1px solid var(--line);
+  border-radius: 999px;
+  color: var(--muted);
+  font-size: 13px;
+  font-weight: 650;
+}
+.dot { width: 8px; height: 8px; border-radius: 50%; background: var(--muted); }
+.dot.ok { background: var(--ok); }
+.dot.warn { background: #d97706; }
+.dot.bad { background: var(--danger); }
+.error, .locked {
+  padding: 12px 13px;
+  margin: 0 0 16px;
+  border-radius: 12px;
+  background: var(--danger-bg);
+  color: var(--danger);
+  font-size: 14px;
+  font-weight: 600;
+}
+label { display: block; margin-bottom: 8px; font-size: 14px; font-weight: 700; }
+input {
+  width: 100%;
+  min-height: 54px;
+  padding: 10px 12px;
+  border: 1px solid var(--line);
+  border-radius: 13px;
+  background: var(--bg);
+  color: var(--text);
+  font: 600 20px/1.2 ui-monospace, "SF Mono", Menlo, monospace;
+  font-variant-numeric: tabular-nums;
+  letter-spacing: .18em;
+  text-align: center;
+  outline: none;
+  -webkit-appearance: none;
+}
+input:focus { border-color: var(--brand); box-shadow: 0 0 0 3px color-mix(in srgb, var(--brand) 24%, transparent); }
+button, .button {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 100%;
+  min-height: 50px;
+  margin-top: 12px;
+  padding: 12px 16px;
+  border: 0;
+  border-radius: 13px;
+  background: var(--brand);
+  color: var(--brand-ink);
+  font: 700 17px/1.2 -apple-system, BlinkMacSystemFont, "SF Pro Text", sans-serif;
+  text-decoration: none;
+  cursor: pointer;
+  -webkit-tap-highlight-color: transparent;
+}
+button:active, .button:active { transform: translateY(1px); }
+.button.secondary {
+  margin-top: 10px;
+  border: 1px solid var(--line);
+  background: transparent;
+  color: var(--text);
+}
+.steps {
+  margin: 20px 0 0;
+  padding: 16px 0 0;
+  border-top: 1px solid var(--line);
+  counter-reset: step;
+  list-style: none;
+}
+.steps li {
+  position: relative;
+  margin: 0 0 11px;
+  padding-left: 30px;
+  color: var(--muted);
+  font-size: 14px;
+}
+.steps li:last-child { margin-bottom: 0; }
+.steps li::before {
+  counter-increment: step;
+  content: counter(step);
+  position: absolute;
+  top: -1px;
+  left: 0;
+  display: grid;
+  place-items: center;
+  width: 21px;
+  height: 21px;
+  border-radius: 7px;
+  background: color-mix(in srgb, var(--brand) 14%, transparent);
+  color: var(--brand);
+  font-size: 12px;
+  font-weight: 800;
+}
+.meta {
+  margin-top: 16px;
+  color: var(--muted);
+  font-size: 12px;
+  line-height: 1.5;
+  word-break: break-word;
+}
+.meta code { font-family: ui-monospace, "SF Mono", Menlo, monospace; }
+@media (max-width: 360px) {
+  .card { padding: 20px; border-radius: 18px; }
+  h1 { font-size: 23px; }
+}
+</style>
+</head>
+<body>
+<main class="card" role="main">
+${body}
+</main>
+</body>
+</html>`;
+}
+export function renderPairingPage(options) {
+    const status = options.locked
+        ? { text: '配对码已锁定', dot: 'bad' }
+        : options.expired
+            ? { text: '配对码已过期', dot: 'warn' }
+            : { text: '等待配对', dot: 'ok' };
+    const error = options.error === undefined
+        ? ''
+        : `<div class="error" role="alert" aria-live="polite">${escapeHtml(options.error)}</div>`;
+    const form = options.locked || options.expired
+        ? `<p class="locked">${options.locked
+            ? '请回到 Mac 的 DSH，打开左侧栏「手机访问」，点击「刷新配对码」，然后重新加载本页。'
+            : '配对码只在 10 分钟内有效。请回到 Mac 的 DSH 面板刷新配对码，然后重新加载本页。'}</p>
+      <a class="button" href="/m">重新加载配对页</a>`
+        : `<form method="post" action="/m" accept-charset="utf-8" novalidate>
+        <input type="hidden" name="nonce" value="${escapeHtml(options.nonce)}">
+        <label for="pairing-code">配对码</label>
+        <input id="pairing-code" name="code" type="text" inputmode="numeric" autocomplete="off" autocapitalize="off" autocorrect="off" spellcheck="false" maxlength="12" pattern="[0-9 ]*" placeholder="1234 5678" aria-describedby="pairing-help" required>
+        <button type="submit">连接 DSH</button>
+      </form>
+      <p class="meta" id="pairing-help">配对码显示在 Mac 的 DSH 左侧栏「手机访问」面板中，共 ${options.codeLength} 位数字。输入错误次数过多会锁定，需在 Mac 面板刷新。</p>`;
+    return shell(`DSH 手机访问 · ${status.text}`, `
+<div class="brand"><span class="mark">D</span><span>DeepSeek Harness</span></div>
+<h1>手机访问</h1>
+<p>在同一局域网内，用这台 iPhone 或 iPad 安全打开 Mac 上的官方 DSH Web。</p>
+<div class="status"><span class="dot ${status.dot}"></span>${status.text}</div>
+${error}
+${form}
+<ol class="steps">
+  <li>在 Mac 的 DSH 左侧栏点击「手机访问」。</li>
+  <li>输入面板上显示的 ${options.codeLength} 位配对码。</li>
+  <li>配对成功后会自动进入 DSH，可再「添加到主屏幕」。</li>
+</ol>
+<p class="meta">当前地址：<code>${escapeHtml(options.host)}</code><br>本页面不会把配对码写入 URL 或浏览器历史记录。配对码有效至 ${escapeHtml(new Date(options.expiresAt).toLocaleTimeString('zh-CN', { hour12: false }))}（Mac 本地时间）。</p>
+`);
+}
+export function renderMessagePage(options) {
+    return shell(options.title, `
+<div class="brand"><span class="mark">D</span><span>DeepSeek Harness</span></div>
+<h1>${escapeHtml(options.title)}</h1>
+<div class="error" role="alert">${escapeHtml(options.message)}</div>
+${options.detail === undefined ? '' : `<p class="meta">${escapeHtml(options.detail)}</p>`}
+<a class="button secondary" href="/m">返回配对页</a>
+`);
+}

package/icon.svg

@@ -0,0 +1,14 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-label="Mobile Access">
+  <defs>
+    <linearGradient id="g" x1="8" y1="4" x2="56" y2="60" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#6ea8ff"/>
+      <stop offset="1" stop-color="#2f5bea"/>
+    </linearGradient>
+  </defs>
+  <rect width="64" height="64" rx="16" fill="url(#g)"/>
+  <rect x="19" y="11" width="26" height="42" rx="6" fill="none" stroke="#fff" stroke-width="3"/>
+  <path d="M28 16h8" stroke="#fff" stroke-width="3" stroke-linecap="round"/>
+  <circle cx="32" cy="46" r="1.8" fill="#fff"/>
+  <path d="M24.5 27.5a10.5 10.5 0 0 1 15 0M28 31a5.7 5.7 0 0 1 8 0" fill="none" stroke="#fff" stroke-width="2.6" stroke-linecap="round"/>
+  <circle cx="32" cy="35" r="1.5" fill="#fff"/>
+</svg>

package/index.js

@@ -0,0 +1,20 @@
+/** Host half of the independent `dsh-mobile-access` bundle. */
+import { registerMobileAccess } from './routes.js';
+import { PairingService } from './service.js';
+export const name = 'dsh-mobile-access';
+export const inject = ['webServer', 'connection'];
+/**
+ * Register exactly three additive routes. No existing route, auth record,
+ * profile setting, layout component, or client root is read or replaced.
+ */
+export function apply(ctx) {
+    const service = new PairingService();
+    ctx.effect(() => {
+        const dispose = registerMobileAccess(ctx, service);
+        ctx.logger?.info?.('[mobile-access] routes registered');
+        return () => {
+            dispose();
+            ctx.logger?.info?.('[mobile-access] routes disposed');
+        };
+    }, 'mobile-access routes');
+}

package/locale/en.json

@@ -0,0 +1,79 @@
+{
+  "meta": {
+    "title": "Mobile Access",
+    "description": "Pair an iPhone or iPad on the same LAN so Safari can securely open the official DeepSeek Harness Web GUI."
+  },
+  "ui": {
+    "panel": "Mobile Access",
+    "title": "Mobile Access",
+    "subtitle": "Open this Mac’s official DSH from an iPhone or iPad on the same LAN.",
+    "statusLoading": "Reading pairing state",
+    "statusReady": "Ready",
+    "statusLoopback": "Loopback only",
+    "statusLocked": "Code locked",
+    "statusExpired": "Code expired",
+    "statusError": "State unavailable",
+    "errorTitle": "Could not read pairing state",
+    "retry": "Reload",
+    "urlLabel": "Address for iPhone",
+    "urlHint": "Type this address into Safari on the iPhone.",
+    "codeLabel": "Pairing code",
+    "codeHint": "Enter these 8 digits on the iPhone pairing page.",
+    "copyLink": "Copy address",
+    "copyCode": "Copy code",
+    "copied": "Copied",
+    "copyFailed": "Copy failed; select the text manually",
+    "rotate": "New code",
+    "rotating": "Rotating…",
+    "toastRotated": "Pairing code rotated",
+    "rotateFailed": "Rotation failed; try again",
+    "expiry": "Valid until",
+    "expiresIn": "Remaining",
+    "expired": "Expired",
+    "locked": "Locked",
+    "never": "Never",
+    "lastPaired": "Last paired",
+    "pairCount": "Successful pairings",
+    "stepsTitle": "Connect from iPhone",
+    "step1": "Put the iPhone and the Mac on the same Wi-Fi, without client isolation.",
+    "step2": "Open the address in Safari, enter the code, and tap “Connect DSH”.",
+    "step3": "After pairing, use Safari Share → “Add to Home Screen”.",
+    "diagnosticsTitle": "Connection diagnostics",
+    "bindLabel": "Mac listener",
+    "deviceLabel": "This device",
+    "deviceIOS": "iPhone / iPad",
+    "deviceOther": "Computer or other device",
+    "launchMode": "Launch mode",
+    "standaloneYes": "Launched from Home Screen",
+    "standaloneNo": "Browser tab",
+    "secureYes": "Secure context",
+    "secureNo": "HTTP insecure context (clipboard fallback enabled)",
+    "loopbackTitle": "The iPhone cannot connect yet",
+    "loopbackBody": "DSH is listening on loopback only. Set Host webserver.host to this Mac’s LAN IPv4 address, then restart DSH manually.",
+    "httpTitle": "About HTTP",
+    "httpBody": "This is plain-HTTP LAN access. DSH already handles UUIDs and most copy buttons; this plugin adds a fallback for older direct navigator.clipboard calls on iPhone.",
+    "selftestTitle": "Browser capability self-test",
+    "selftestRun": "Run self-test",
+    "selftestRunning": "Testing…",
+    "selftestNote": "The self-test only reads browser capabilities; it does not change DSH or affect the Mac.",
+    "checkClipboard": "Clipboard write",
+    "checkCrypto": "Secure random",
+    "checkStorage": "Local storage",
+    "checkWebSocket": "WebSocket",
+    "checkViewport": "Mobile viewport",
+    "checkOnline": "Network status",
+    "checkPass": "Pass",
+    "checkWarn": "Note",
+    "checkFail": "Fail",
+    "limitsTitle": "Platform limits (not plugin defects)",
+    "limit1": "iOS Safari has no desktop drag-and-drop; use the system file picker.",
+    "limit2": "iOS suspends background pages; keep DSH in the foreground for long tasks.",
+    "limit3": "Safari hands downloads to the Files app; iOS chooses the location.",
+    "zeroImpactTitle": "Zero-impact design for the Mac",
+    "zeroImpactBody": "The plugin adds exactly three routes, one sidebar entry, and one main panel. It does not modify core code, auth, config, theme, layout, or other plugins, and it never polls in the background.",
+    "mainAria": "Mobile access panel",
+    "codeAria": "Pairing code",
+    "reload": "Reload",
+    "unknown": "Unknown"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,79 @@
+{
+  "meta": {
+    "title": "手机访问",
+    "description": "让 iPhone 与 iPad 通过同一局域网，用 Safari 安全打开并完整使用官方 DeepSeek Harness Web。"
+  },
+  "ui": {
+    "panel": "手机访问",
+    "title": "手机访问",
+    "subtitle": "在同一局域网内，用 iPhone 或 iPad 打开这台 Mac 上的官方 DSH。",
+    "statusLoading": "正在读取配对状态",
+    "statusReady": "已就绪",
+    "statusLoopback": "仅回环地址",
+    "statusLocked": "配对码已锁定",
+    "statusExpired": "配对码已过期",
+    "statusError": "暂时无法读取状态",
+    "errorTitle": "无法读取配对状态",
+    "retry": "重新加载",
+    "urlLabel": "iPhone 打开的地址",
+    "urlHint": "在 iPhone 的 Safari 地址栏输入这个地址。",
+    "codeLabel": "配对码",
+    "codeHint": "在 iPhone 的配对页输入这 8 位数字。",
+    "copyLink": "复制地址",
+    "copyCode": "复制配对码",
+    "copied": "已复制",
+    "copyFailed": "复制失败，请手动选择文本",
+    "rotate": "刷新配对码",
+    "rotating": "正在刷新…",
+    "toastRotated": "配对码已刷新",
+    "rotateFailed": "刷新失败，请重试",
+    "expiry": "有效至",
+    "expiresIn": "剩余",
+    "expired": "已过期",
+    "locked": "已锁定",
+    "never": "尚未配对",
+    "lastPaired": "最近配对",
+    "pairCount": "成功配对次数",
+    "stepsTitle": "在 iPhone 上连接",
+    "step1": "确认 iPhone 与 Mac 连接同一个 Wi-Fi，且没有开启会隔离设备的访客网络。",
+    "step2": "在 iPhone Safari 打开上面的地址，输入配对码并点「连接 DSH」。",
+    "step3": "配对成功后会自动进入 DSH；再点 Safari 分享按钮，选择「添加到主屏幕」。",
+    "diagnosticsTitle": "连接诊断",
+    "bindLabel": "Mac 监听地址",
+    "deviceLabel": "当前设备",
+    "deviceIOS": "iPhone / iPad",
+    "deviceOther": "电脑或其他设备",
+    "launchMode": "启动方式",
+    "standaloneYes": "已从主屏幕启动",
+    "standaloneNo": "浏览器标签页",
+    "secureYes": "安全上下文",
+    "secureNo": "HTTP 非安全上下文（剪贴板回退已启用）",
+    "loopbackTitle": "iPhone 现在无法连接",
+    "loopbackBody": "DSH 只监听了回环地址（localhost / 127.0.0.1）。请把 Host 的 webserver.host 改为这台 Mac 的局域网 IPv4 地址，然后由你手动重启 DSH。",
+    "httpTitle": "关于 HTTP 访问",
+    "httpBody": "当前是局域网 HTTP。DSH 已为 UUID 和多数复制按钮提供兼容实现；本插件会在 iPhone 上补齐直接调用 navigator.clipboard 的旧代码。",
+    "selftestTitle": "浏览器能力自检",
+    "selftestRun": "运行自检",
+    "selftestRunning": "正在自检…",
+    "selftestNote": "自检只读取浏览器能力，不修改 DSH 配置，也不影响 Mac。",
+    "checkClipboard": "剪贴板写入",
+    "checkCrypto": "安全随机数",
+    "checkStorage": "本地存储",
+    "checkWebSocket": "WebSocket",
+    "checkViewport": "移动端视口",
+    "checkOnline": "网络状态",
+    "checkPass": "通过",
+    "checkWarn": "注意",
+    "checkFail": "失败",
+    "limitsTitle": "平台边界（不是插件缺陷）",
+    "limit1": "iOS Safari 不支持桌面式拖放；文件请用系统选择器上传。",
+    "limit2": "iOS 会在后台挂起网页；长任务请保持 DSH 页面在前台。",
+    "limit3": "下载文件由 Safari 交给「文件」App，落点由 iOS 决定。",
+    "zeroImpactTitle": "对 Mac 的零影响设计",
+    "zeroImpactBody": "插件只增加三个精确路由、一个左侧栏入口和一个主面板；不修改核心代码、认证、配置、主题、布局或其他插件，也不在后台轮询。",
+    "mainAria": "手机访问面板",
+    "codeAria": "配对码",
+    "reload": "刷新",
+    "unknown": "未知"
+  }
+}

package/package.json

@@ -1,6 +1,52 @@
 {
   "name": "dsh-mobile-access",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Independent DSH bundle that pairs iPhones and iPads with the official DeepSeek Harness Web GUI over the local network.",
+  "type": "module",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "index.js",
+    "service.js",
+    "routes.js",
+    "html.js",
+    "types.js",
+    "client.js",
+    "cordis.patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "typecheck": "node scripts/build.mjs --check",
+    "test": "node scripts/build.mjs && node --test tests/*.test.mjs",
+    "verify": "bash scripts/verify.sh"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
+    }
+  }
+}