dsh-mobile 0.1.0-alpha.14 → 0.1.0-alpha.16

package/README.en.md

@@ -9,6 +9,7 @@
 <p align="center">
   <a href="https://www.npmjs.com/package/dsh-mobile"><img src="https://img.shields.io/npm/v/dsh-mobile?label=npm&amp;color=CB3837" alt="npm version"></a>
   <a href="https://github.com/saya-ch/dsh-mobile/releases"><img src="https://img.shields.io/badge/Download-Android_App-3DDC84?logo=android&amp;logoColor=white" alt="Download Android app"></a>
+  <img src="https://img.shields.io/badge/DeepSeek_Harness-Mobile-2563EB" alt="DeepSeek Harness Mobile">
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-0F172A" alt="Apache-2.0"></a>
 </p>
 
@@ -39,6 +40,8 @@ pnpm dsh plugin --profile web exec dsh-mobile setup
 pnpm dsh --profile web
 ```
 
+`setup` follows the operating system's preferred physical Wi-Fi or Ethernet route, ignores common VPN, WSL, Docker, and proxy adapters, and remembers the selected interface. Later Wi-Fi, hotspot, or DHCP address changes automatically rebind the gateway without replacing the paired-device trust. Add `--address 192.168.x.x` only when the computer truly has two indistinguishable physical LAN routes.
+
 Open **Mobile** in the lower-left DeepSeek Harness sidebar, enable access, and create a pairing key. In the Android app, tap **Scan**, select the computer, and enter the key. The paired device remains trusted until it is revoked, expires, or its app data is cleared.
 
 ## Connection options

package/README.md

@@ -9,7 +9,7 @@
 <p align="center">
   <a href="https://www.npmjs.com/package/dsh-mobile"><img src="https://img.shields.io/npm/v/dsh-mobile?label=npm&amp;color=CB3837" alt="npm 版本"></a>
   <a href="https://github.com/saya-ch/dsh-mobile/releases"><img src="https://img.shields.io/badge/下载-Android_App-3DDC84?logo=android&amp;logoColor=white" alt="下载 Android App"></a>
-  <img src="https://img.shields.io/badge/DSH-插件-2563EB" alt="DSH 插件">
+  <img src="https://img.shields.io/badge/DeepSeek_Harness-Mobile-2563EB" alt="DeepSeek Harness Mobile">
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-0F172A" alt="Apache-2.0"></a>
 </p>
 
@@ -54,6 +54,8 @@ pnpm dsh plugin --profile web exec dsh-mobile setup
 pnpm dsh --profile web
 ```
 
+`setup` 会根据系统默认路由自动选择真实的 Wi-Fi 或以太网，忽略常见 VPN、WSL、Docker 和代理虚拟网卡，并记住所选网卡。以后切换 Wi-Fi、手机热点或 DHCP 地址变化时，网关会自动重绑并沿用原有设备信任。只有系统确实无法区分两条真实局域网时，才需要追加 `--address 192.168.x.x`。
+
 启动后：
 
 1. 在 DeepSeek Harness 左下角打开“移动端”，确认移动访问已开启。

package/lib/cli.js

@@ -7,6 +7,26 @@ import { promisify } from "node:util";
 import { X509Certificate, createPrivateKey, createPublicKey } from "node:crypto";
 import { generate } from "selfsigned";
 //#region src/managed-setup.ts
+const execFile$2 = promisify(execFile);
+const VIRTUAL_INTERFACE_MARKERS = [
+	"bridge",
+	"docker",
+	"hyper-v",
+	"mihomo",
+	"radmin",
+	"tailscale",
+	"tap",
+	"tun",
+	"utun",
+	"vbox",
+	"veth",
+	"virtual",
+	"vmware",
+	"vpn",
+	"vethernet",
+	"wsl",
+	"zerotier"
+];
 function privateIpv4(value) {
 	const parts = value.split(".").map(Number);
 	return parts.length === 4 && parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255) && (parts[0] === 10 || parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31 || parts[0] === 192 && parts[1] === 168);
@@ -30,8 +50,65 @@ function availableLanNetworks(table = networkInterfaces()) {
 	})));
 	return [...new Map(candidates.map((entry) => [`${entry.name}\0${entry.address}`, entry])).values()];
 }
+function likelyVirtualInterface(name) {
+	const normalized = name.toLowerCase().replaceAll(/[^a-z0-9]+/gu, " ");
+	return VIRTUAL_INTERFACE_MARKERS.some((marker) => normalized.includes(marker.replaceAll("-", " "))) || /^(?:br|wg)\d*\b/u.test(normalized);
+}
+async function runRouteCommand(file, args) {
+	return (await execFile$2(file, [...args], {
+		encoding: "utf8",
+		windowsHide: true
+	})).stdout;
+}
+function uniqueLines(output) {
+	return [...new Set(output.split(/\r?\n/gu).map((line) => line.trim()).filter(Boolean))];
+}
+/** Return operating-system default-route interfaces in routing preference order. */
+async function preferredLanInterfaceNames(platform = process.platform, run = runRouteCommand) {
+	try {
+		if (platform === "win32") return uniqueLines(await run("powershell.exe", [
+			"-NoProfile",
+			"-NonInteractive",
+			"-Command",
+			[
+				"$routes = Get-NetRoute -AddressFamily IPv4 -DestinationPrefix '0.0.0.0/0' -ErrorAction Stop",
+				"$ranked = $routes | Where-Object { $_.State -eq 'Alive' -and $_.NextHop -ne '0.0.0.0' } | ForEach-Object {",
+				"  $route = $_",
+				"  $adapter = Get-NetAdapter -InterfaceIndex $route.InterfaceIndex -ErrorAction SilentlyContinue",
+				"  $ip = Get-NetIPInterface -AddressFamily IPv4 -InterfaceIndex $route.InterfaceIndex -ErrorAction SilentlyContinue",
+				"  if ($adapter -and $ip -and $adapter.Status -eq 'Up' -and $adapter.HardwareInterface -eq $true -and $adapter.Virtual -ne $true) {",
+				"    [pscustomobject]@{ Name = $route.InterfaceAlias; Metric = [int]$route.RouteMetric + [int]$ip.InterfaceMetric }",
+				"  }",
+				"}",
+				"$ranked | Sort-Object Metric | Select-Object -ExpandProperty Name -Unique"
+			].join("; ")
+		]));
+		if (platform === "linux") {
+			const routes = uniqueLines(await run("ip", [
+				"-o",
+				"-4",
+				"route",
+				"show",
+				"default"
+			])).map((line) => ({
+				name: /(?:^|\s)dev\s+(\S+)/u.exec(line)?.[1],
+				metric: Number(/(?:^|\s)metric\s+(\d+)/u.exec(line)?.[1] ?? 0)
+			})).filter((route) => route.name !== void 0 && !likelyVirtualInterface(route.name)).sort((left, right) => left.metric - right.metric);
+			return [...new Set(routes.map((route) => route.name))];
+		}
+		if (platform === "darwin") {
+			const name = /^\s*interface:\s*(\S+)\s*$/mu.exec(await run("route", [
+				"-n",
+				"get",
+				"default"
+			]))?.[1];
+			return name === void 0 || likelyVirtualInterface(name) ? [] : [name];
+		}
+	} catch {}
+	return [];
+}
 /** Select an active LAN, optionally by address or by a previously saved interface name. */
-function selectLanNetwork(requestedAddress, requestedInterface, table) {
+function selectLanNetwork(requestedAddress, requestedInterface, table, preferredInterfaces = []) {
 	const candidates = availableLanNetworks(table);
 	if (requestedAddress !== void 0) {
 		const match = candidates.find((candidate) => candidate.address === requestedAddress);
@@ -46,7 +123,13 @@ function selectLanNetwork(requestedAddress, requestedInterface, table) {
 	}
 	if (candidates.length === 1) return candidates[0];
 	if (candidates.length === 0) throw new Error("no active private LAN address was found; connect to Wi-Fi or Ethernet");
-	throw new Error(`more than one LAN address is active; rerun with --address and one of: ${candidates.map((entry) => entry.address).join(", ")}`);
+	for (const name of preferredInterfaces) {
+		const matches = candidates.filter((candidate) => candidate.name === name);
+		if (matches.length === 1) return matches[0];
+	}
+	const physicalCandidates = candidates.filter((candidate) => !likelyVirtualInterface(candidate.name));
+	if (physicalCandidates.length === 1) return physicalCandidates[0];
+	throw new Error(`more than one LAN address is active; rerun with --address and one of: ${candidates.map((entry) => `${entry.name}=${entry.address}`).join(", ")}`);
 }
 function assertMatchingCa(certPem, keyPem) {
 	const certificate = new X509Certificate(certPem);
@@ -251,7 +334,8 @@ async function removeWindowsFirewall() {
 }
 async function setup(args) {
 	const options = parseOptions(args);
-	const network = selectLanNetwork(options.address);
+	const preferredInterfaces = options.address === void 0 ? await preferredLanInterfaceNames() : [];
+	const network = selectLanNetwork(options.address, void 0, void 0, preferredInterfaces);
 	const home = dshHome();
 	const directory = join(home, "mobile-access");
 	const tls = join(directory, "tls");

package/lib/index.mjs

@@ -10,6 +10,8 @@ import { createServer as createServer$1 } from "node:https";
 import { Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import Bonjour from "bonjour-service";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
 import { generate } from "selfsigned";
 //#region src/access.ts
 /** Stable error categories converted to deliberately terse HTTP responses. */
@@ -2347,8 +2349,26 @@ var MemoryDeviceStore = class {
 		return structuredClone(this.snapshot);
 	}
 };
-//#endregion
-//#region src/managed-setup.ts
+promisify(execFile);
+const VIRTUAL_INTERFACE_MARKERS = [
+	"bridge",
+	"docker",
+	"hyper-v",
+	"mihomo",
+	"radmin",
+	"tailscale",
+	"tap",
+	"tun",
+	"utun",
+	"vbox",
+	"veth",
+	"virtual",
+	"vmware",
+	"vpn",
+	"vethernet",
+	"wsl",
+	"zerotier"
+];
 function requiredString(value, name) {
 	if (typeof value !== "string" || value.length === 0) throw new Error(`${name} must be a non-empty string`);
 	return value;
@@ -2411,8 +2431,12 @@ function availableLanNetworks(table = networkInterfaces()) {
 	})));
 	return [...new Map(candidates.map((entry) => [`${entry.name}\0${entry.address}`, entry])).values()];
 }
+function likelyVirtualInterface(name) {
+	const normalized = name.toLowerCase().replaceAll(/[^a-z0-9]+/gu, " ");
+	return VIRTUAL_INTERFACE_MARKERS.some((marker) => normalized.includes(marker.replaceAll("-", " "))) || /^(?:br|wg)\d*\b/u.test(normalized);
+}
 /** Select an active LAN, optionally by address or by a previously saved interface name. */
-function selectLanNetwork(requestedAddress, requestedInterface, table) {
+function selectLanNetwork(requestedAddress, requestedInterface, table, preferredInterfaces = []) {
 	const candidates = availableLanNetworks(table);
 	if (requestedAddress !== void 0) {
 		const match = candidates.find((candidate) => candidate.address === requestedAddress);
@@ -2427,7 +2451,13 @@ function selectLanNetwork(requestedAddress, requestedInterface, table) {
 	}
 	if (candidates.length === 1) return candidates[0];
 	if (candidates.length === 0) throw new Error("no active private LAN address was found; connect to Wi-Fi or Ethernet");
-	throw new Error(`more than one LAN address is active; rerun with --address and one of: ${candidates.map((entry) => entry.address).join(", ")}`);
+	for (const name of preferredInterfaces) {
+		const matches = candidates.filter((candidate) => candidate.name === name);
+		if (matches.length === 1) return matches[0];
+	}
+	const physicalCandidates = candidates.filter((candidate) => !likelyVirtualInterface(candidate.name));
+	if (physicalCandidates.length === 1) return physicalCandidates[0];
+	throw new Error(`more than one LAN address is active; rerun with --address and one of: ${candidates.map((entry) => `${entry.name}=${entry.address}`).join(", ")}`);
 }
 function assertMatchingCa(certPem, keyPem) {
 	const certificate = new X509Certificate(certPem);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mobile",
-  "version": "0.1.0-alpha.14",
+  "version": "0.1.0-alpha.16",
   "private": false,
   "description": "DeepSeek Harness 移动端适配与安全局域网访问插件，支持 Android App 和手机浏览器。",
   "type": "module",