dsh-mobile-web 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-mobile contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/LICENSE-APACHE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,26 @@
+dsh-palm
+Copyright (c) 2026 Eternalloveone
+
+This product is a derivative work of dsh-remote-web-ui
+(https://github.com/zhu1090093659/dsh-web, package @linxin666/dsh-remote-web-ui),
+Copyright (c) zhu1090093659, licensed under the Apache License, Version 2.0.
+
+The mobile surface (src/mobile, pairing, gate, routes, mobile-api) was
+extracted from the dsh-remote-web-ui `local/mobile-fixes` branch (M1,
+behavior-identical) and has since been modified and extended independently:
+windowed streaming, inline-markdown preview, image upload, workspace
+browsing, PWA, and the desktop pairing panel.
+
+This product also depends on the dsh platform packages
+(@deepseek-ai/dsh-*, Apache-2.0, https://github.com/deepseek-ai/deepseek-harness).
+
+The phone UI bundle shipped in assets/mobile.bundle.js is built from source
+vendored under mobile-src/ (see mobile-src/UPSTREAM.md), forked from
+dsh-palm v1.6.0 (Apache-2.0, https://github.com/Eternalloveone/dsh-palm).
+This repository does not track upstream feature work; the vendored source is
+maintained here. Local changes carried in that fork:
+  · Settings → 外观 gains a native 「发送模式」 row that reads/writes the host
+    plugin's window.__dmSendMode (send mode is stored on the host, not locally);
+  · the usage card label reads 「充值余额」 (was 「账户余额」).
+Everything else in mobile-src/src is upstream v1.6.0 as published.
+

package/README.md

@@ -1,3 +1,137 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# dsh-mobile · 掌上 dsh
+
+**把 dsh 的会话搬到手机上**：一个 dsh 插件，在宿主上起一个手机端 Web 界面 + `/m/api` RPC 通道，手机浏览器打开就能配对、浏览工作区/会话、实时聊天、审批与提问、切换模型、收发图片，并可安装为 PWA。
+
+English summary: a mobile web surface for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) — pairing by code, workspace/session browsing, streaming chat (SSE), approvals, model switching, images, PWA. Host half lives in `index.js`; the phone UI is built from the vendored dsh-palm v1.6.0 fork under `mobile-src/`.
+
+![手机端配对页](docs/pairing.png)
+
+## 能力
+
+- **6 位码 / 配对链接**：桌面 dsh 设置页「掌上 dsh」出码，手机 `/m/` 输码，服务端下发 HttpOnly 设备 cookie（设备可在桌面端撤销）。
+- **完整手机聊天界面**：会话列表、流式回复（SSE `/m/api/events.mux`）、推理块、工具卡、Markdown/代码块、消息队列、引用、重新生成、搜索。
+- **工作区与会话**：浏览 / 新建 / 重命名 / 归档；运行中会话徽标；「最近访问 / 固定 / 运行中」快捷入口。
+- **审批与提问**：`mobile.pending` / `mobile.respond`；进入会话自动补发待处理卡片，工作区与会话行有橙条提示。
+- **模型**：查看模型目录、切换会话模型与思考强度；默认模型与第三方 provider 在桌面端配置。
+- **附件与图片**：相册/拍照上传、聊天图片限高、点击全屏预览；只读截图路由 `/m/shot/<file>` 便于手机直接看主机截图。
+- **命令面板**：`/` 面板合并宿主命令、本机动作（文件/模型）与宿主技能目录，中文标题与说明；选中即插入输入框，由宿主的命令通道执行。
+- **通知**：浏览器通知 + 推送渠道（WxPusher / Server酱 / Bark / Telegram / PushPlus）+ 可选 Web Push。
+- **语音转写**：可配置 OpenAI 兼容的转写服务（按序回退）。
+- **设置**：外观/对话等本机项 + 主机配置只读/可写项，逐项标注「本机 / 同步桌面 / 桌面端」。
+- **PWA**：可添加到主屏幕，离线壳与更新检查。
+
+## 前置条件
+
+- dsh **>= 0.2.0-rc.1**（见 `package.json` 的 `dsh.engines.dsh`）
+- **Node.js >= 20**（插件宿主与 `mobile-src` 构建）
+- 手机端浏览器：Chrome / 夸克等 Chromium 内核；HTTPS 环境下 Web Push、剪贴板等能力才可用
+
+## 安装
+
+在桌面 dsh 的插件管理器里把本目录作为本地 bundle 安装（`plugin_manager install_bundle` 指向本仓库根目录或打包出的 `.tgz`），或把本仓库放进 profile 的插件目录后手动加一条 patch：
+
+```yaml
+- insert:
+    - id: dsh-mobile
+      name: 'dsh-mobile'
+      config:
+        enabled: true
+        mobilePort: 19387
+        mobileHost: '0.0.0.0'
+        pairCode: ''                                # 留空 = 随机 6 位码（5 分钟过期）；固定码则永不过期
+        publicBaseUrl: 'https://your-host.example.com:45632'   # 仅用于展示，可留空
+```
+
+安装后刷新一次 dsh 页面以加载客户端设置段。
+
+## 快速开始
+
+1. 桌面 dsh：**设置 → 掌上 dsh → 生成配对码**。
+2. 手机：打开 `http://<主机IP>:19387/m/`（或公网 `https://your-host.example.com:45632/m/`），输入配对码。
+3. 配对后即可进入工作区/会话；聊天页输入框上方工具行有 `+`、模型、命令（`/`）、权限、审批、子代理等入口。
+
+公网访问：本插件监听 `0.0.0.0:<mobilePort>`，前面套一层 HTTPS 反代即可（示例：`https://your-host.example.com:45632` → `192.168.1.10:19387`）。反代必须用 HTTPS，且不要把 19387 的明文端口直接暴露到公网。
+
+## 配置
+
+| 字段 | 默认 | 说明 |
+|---|---|---|
+| `enabled` | `true` | 关闭后不挂载任何路由 |
+| `mobilePort` | `19387` | 手机监听端口（独立于 GUI 的动态端口） |
+| `mobileHost` | `0.0.0.0` | 监听地址；只在本机用可改 `127.0.0.1` |
+| `pairCode` | 示例配 `''`（随机 6 位、5 分钟过期） | 留空 = 随机码；填固定值则该码**永不过期**（代码内回退值 `123456` 仅供开发，公开部署不要用固定码） |
+| `publicBaseUrl` | 空 | 设置面板展示的公网地址，仅展示用途，**留空也不影响运行** |
+| `devicesFile` | `~/.dsh/dsh-mobile-devices.json` | 已配对设备与 token 的存储位置 |
+| `pushConfigFile` | `~/.dsh/dsh-mobile-push.json` | 推送渠道配置 |
+| `hiddenModels` | `[]` | 手机端模型选择器里隐藏的模型 id |
+
+## 架构
+
+```
+手机浏览器 / PWA
+   │  GET /m/  (HTML + 31 段注入脚本 + theme.css)
+   │  POST /m/api/<method>  (63 个 RPC：session/workspace/pair/mobile/…)
+   │  GET  /m/api/events.mux (SSE)
+   ▼
+index.js（宿主半）
+   ├─ 双 HTTP 面：GUI webServer（回环，设置面板）+ 0.0.0.0:<port>（手机/局域网/公网）
+   ├─ 配对与设备 cookie、审批/提问应答、通知、用量、插件/自动化页数据、命令与技能目录
+   └─ 注入脚本（31 段）：在不改 bundle 的前提下补齐工具栏、命令面板、设置范围标签、图片预览等
+   ▼
+assets/mobile.bundle.js  ←由 mobile-src/ 构建（dsh-palm v1.6.0 fork，见 mobile-src/UPSTREAM.md）
+assets/theme.css         ←本仓库自己的样式（实时读盘，改完刷新生效）
+```
+
+手机 UI 复用 [dsh-palm](https://github.com/Eternalloveone/dsh-palm) v1.6.0 的 React bundle（源码已 vendor 到 `mobile-src/`，Apache-2.0）；宿主侧 RPC 由本插件按 dsh 原生服务重新实现，而不是沿用 dsh-palm 的 host。
+
+## 开发
+
+```sh
+# 1) 构建手机 bundle（源码在 mobile-src/，产物写到 assets/）
+cd mobile-src
+npm ci
+node build.mjs        # 或 npm run build；实测 npm ci ~1.2s、构建 65–80ms，产物 sha256 可复现
+
+# 2) 检查宿主半语法
+node --check index.js
+
+# 3) 本地加载验证（插件已装好并监听 19387 时）
+curl -s -o /dev/null -w '%{http_code}\n' http://127.0.0.1:19387/m/
+```
+
+- `assets/theme.css` 每次请求实时读盘：改完刷新手机页面即生效，无需重启 dsh。
+- `index.js` 由 dsh 进程加载，保存后不会自动重载；开发时可临时在 profile 的 `cordis.patch.yml` 末尾加一行注释触发 reconcile（随后还原），或重启 dsh。
+
+**改动归属（避免误归因）**
+
+- `mobile-src/` 相对 dsh-palm v1.6.0 只改了两处，已回源到源码并记录在 [`mobile-src/UPSTREAM.md`](mobile-src/UPSTREAM.md)：
+  1. 设置 → 外观新增「发送模式」行（读写宿主 `window.__dmSendMode`）；
+  2. 用量卡片的「账户余额」文案改为「充值余额」。
+- 「关于 / 反馈」文案、网页搜索 artwork 等属于 `index.js` 的 **DOM 补丁**（注入脚本），不是 bundle 源码改动。
+- 其它手机端增强（命令面板、图片预览、设置范围标签、插件/自动化页等）全部在 `index.js` / `assets/theme.css` 中实现，未改 bundle 逻辑。
+
+## 已知限制
+
+- **实时通道**：聊天流式走 SSE `/m/api/events.mux`；通知类端点 `/m/api/events.notify` 未实现（保持 404），手机端通知走轮询 / Web Push / 推送渠道。
+- **Web Push**：iOS 与大陆网络对 FCM 支持有限（需代理）；不想折腾可用推送渠道（WxPusher 等）。
+- **Web Push 需要 HTTPS**：`http://` 访问时浏览器通知与 Service Worker 推送不可用。
+- **设备 cookie 即登录态**：撤销设备后该 cookie 立即失效；不要在多台设备间共享 cookie。
+- **截图路由**：`/m/shot/<file>` 匿名只读（手机 `<img>` 不带 cookie），只应放非敏感截图；详见 [SECURITY.md](SECURITY.md)。
+- **`mobile-src/` 是 fork**：不跟随 dsh-palm 上游；需要上游修复时按 `UPSTREAM.md` 手工 cherry-pick 并重建 bundle。
+- **实测环境**：桌面 Chromium 与 Android 夸克浏览器；其它 WebView 未系统验证。
+
+## License（分层）
+
+本仓库是**混合来源**，按目录分层授权：
+
+| 范围 | 许可证 | 版权 |
+|---|---|---|
+| 根目录代码（`index.js`、`client.js`、`assets/theme.css`、注入脚本、`docs/` 等） | **MIT**（见 [LICENSE](LICENSE)） | dsh-mobile contributors |
+| `mobile-src/`（手机 UI 源码，fork 自 dsh-palm v1.6.0） | **Apache-2.0**（`mobile-src/` 适用同一份 Apache 全文：根目录 [LICENSE-APACHE](LICENSE-APACHE) 与 `mobile-src/LICENSE-APACHE` 内容一致） | © Eternalloveone / dsh-palm 及上游归因方 |
+| 依赖的 dsh 平台包（`@deepseek-ai/dsh-*`） | Apache-2.0 | DeepSeek |
+
+归因链保留在 [NOTICE](NOTICE)：dsh-palm → dsh-remote-web-ui（`@linxin666/dsh-remote-web-ui`，Apache-2.0）。`mobile-src/` 的 baseline、构建方式与本地改动见 [`mobile-src/UPSTREAM.md`](mobile-src/UPSTREAM.md)。
+
+## 安全
+
+公开部署前请阅读 [SECURITY.md](SECURITY.md)：必须 HTTPS 反代、设备 cookie 等同登录态、`/m/shot/` 匿名可读、默认配对码务必修改。

package/assets/icon.svg

@@ -0,0 +1,13 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64">
+  <defs>
+    <linearGradient id="dshm-bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#4D6BFE"/>
+      <stop offset="1" stop-color="#7B9BFF"/>
+    </linearGradient>
+  </defs>
+  <rect width="64" height="64" rx="15" fill="url(#dshm-bg)"/>
+  <!-- DeepSeek-style spark, the shared brand mark -->
+  <path d="M32 12 L36 28 L52 32 L36 36 L32 52 L28 36 L12 32 L28 28 Z" fill="#ffffff"/>
+  <!-- phone handset hint: a small rounded screen notch under the spark -->
+  <rect x="23" y="40" width="18" height="4" rx="2" fill="#ffffff" opacity="0.85"/>
+</svg>