dsh-mobile 0.3.6 → 0.3.7

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 Notable changes to DSH Mobile are recorded here. GitHub Releases remain the source for downloadable packages and complete generated commit notes.
 
+## 0.3.7 - 2026-09-02
+
+- Fix the Windows DSH Desktop startup failure reported in [#22](https://github.com/saya-ch/dsh-mobile/issues/22): capture subprocess output through the callback API instead of relying on `execFile` promisify metadata that a host wrapper may omit. Thanks @XChen446 for the precise 0.3.6 stack trace.
+- Apply the same output handling to Windows SID resolution, private-file ACLs, route selection, and firewall diagnostics/setup. Invalid SID output and ACL failures still reject the operation; a failed SID lookup can be retried and Windows permission commands have bounded execution time.
+- Retain the 0.3.6 removal of the exact DSH version allowlist. Existing 0.3.3-0.3.6 Android apps and paired devices remain compatible; the 0.3.7 APK updates version metadata only.
+
 ## 0.3.6 - 2026-09-02
 
 - Remove the fixed DeepSeek Harness version allowlist from plugin startup and npm peer metadata. A compatible future DSH release can now load without waiting for DSH Mobile to enumerate its exact prerelease version.

package/README.en.md

@@ -19,14 +19,14 @@
 
 > DSH Mobile is a DeepSeek Harness community plugin; the native app supports Android only.
 >
-> **0.3.6 update**: remove the exact DSH version allowlist and verify compatibility with 0.1.2-alpha.3/alpha.4. Future releases with compatible interfaces are no longer blocked only because their version is new. [Details](CHANGELOG.md).
+> **0.3.7 update**: fix a Windows DSH Desktop startup crash when capturing system-command output, including the related route-selection and firewall-diagnostic paths. The 0.3.6 DSH version policy and private-file protections remain intact. [Details](CHANGELOG.md).
 >
-> **Upgrade reminder**: use Mobile plugin 0.3.6 or later with DSH 0.1.2-alpha.3/alpha.4. Existing 0.3.3-0.3.5 apps and pairings remain valid. [Compatibility notes](#compatibility).
+> **Upgrade reminder**: Windows DSH Desktop users should update to plugin 0.3.7. Existing 0.3.3-0.3.6 apps and paired devices remain compatible without re-pairing. [Compatibility notes](#compatibility).
 
 <p align="center">
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.3.6/dsh-mobile-android-v0.3.6.apk"><img src="assets/brand/app-icon-rounded.svg" alt="DSH Mobile Android app icon" width="72" height="72"></a><br>
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.3.6/dsh-mobile-android-v0.3.6.apk"><strong>Download Android app 0.3.6</strong></a><br>
-  <sub><a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.3.6">Release notes and checksums</a></sub>
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.3.7/dsh-mobile-android-v0.3.7.apk"><img src="assets/brand/app-icon-rounded.svg" alt="DSH Mobile Android app icon" width="72" height="72"></a><br>
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.3.7/dsh-mobile-android-v0.3.7.apk"><strong>Download Android app 0.3.7</strong></a><br>
+  <sub><a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.3.7">Release notes and checksums</a></sub>
 </p>
 
 DSH Mobile is a DeepSeek Harness plugin that lets a mobile browser or the Android app connect over a protected LAN or an optional Tailscale Funnel, cpolar, or self-hosted FRP remote path. Local and remote access keep the same sessions, Workspaces, messages, and tools while using separate switches and paired-device stores without modifying DeepSeek Harness source.

package/README.md

@@ -26,14 +26,14 @@
 
 > DSH Mobile 是 DeepSeek Harness 社区插件，原生 App 仅支持 Android。
 >
-> **0.3.6 更新**：取消 DSH 精确版本白名单，已验证兼容 0.1.2-alpha.3/alpha.4；今后接口兼容的新版本不会再仅因版本号而阻止插件启动。[详细记录](CHANGELOG.md)。
+> **0.3.7 更新**：修复 Windows DSH Desktop 获取系统命令输出时的启动崩溃，同步完善网卡选择与防火墙诊断；保留 0.3.6 的 DSH 版本开放策略和私有文件权限保护。[详细记录](CHANGELOG.md)。
 >
-> **升级提醒**：DSH 0.1.2-alpha.3/alpha.4 请使用 Mobile 插件 0.3.6 或更高版本；现有 0.3.3-0.3.5 App 与配对无需重建。[兼容说明](#兼容性)。
+> **升级提醒**：Windows DSH Desktop 用户请更新至插件 0.3.7；现有 0.3.3-0.3.6 App 可继续使用，无需重新配对。[兼容说明](#兼容性)。
 
 <p align="center">
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.3.6/dsh-mobile-android-v0.3.6.apk"><img src="assets/brand/app-icon-rounded.svg" alt="DSH Mobile 安卓应用图标" width="72" height="72"></a><br>
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.3.6/dsh-mobile-android-v0.3.6.apk"><strong>下载 Android App 0.3.6</strong></a><br>
-  <sub><a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.3.6">版本说明与校验文件</a></sub>
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.3.7/dsh-mobile-android-v0.3.7.apk"><img src="assets/brand/app-icon-rounded.svg" alt="DSH Mobile 安卓应用图标" width="72" height="72"></a><br>
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/download/v0.3.7/dsh-mobile-android-v0.3.7.apk"><strong>下载 Android App 0.3.7</strong></a><br>
+  <sub><a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.3.7">版本说明与校验文件</a></sub>
 </p>
 
 DSH Mobile 是一个 DeepSeek Harness 插件，让手机浏览器或 Android App 通过局域网，或可选的 Tailscale Funnel、cpolar、自建 FRP 远程通道连接电脑，继续使用同一份会话、工作区、消息和工具。局域网与远程访问分别启停、分别管理设备，且都不修改 DeepSeek Harness 源码。

package/lib/cli.js

@@ -3,27 +3,54 @@ import { execFile } from "node:child_process";
 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { homedir, networkInterfaces } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
-import { promisify } from "node:util";
 import { X509Certificate, createPrivateKey, createPublicKey } from "node:crypto";
 import { generate } from "selfsigned";
 import "@deepseek-ai/cordis";
 import "@deepseek-ai/schemastery";
+//#region src/exec-file.ts
+/** Capture both output streams even when a desktop host wraps execFile without Node's promisify metadata. */
+function execFileText(file, args, options = {}) {
+	return new Promise((resolve, reject) => {
+		execFile(file, [...args], {
+			windowsHide: true,
+			...options,
+			encoding: "utf8"
+		}, (error, stdout, stderr) => {
+			if (error !== null) {
+				reject(error);
+				return;
+			}
+			if (typeof stdout !== "string" || typeof stderr !== "string") {
+				reject(/* @__PURE__ */ new Error("subprocess returned invalid text output"));
+				return;
+			}
+			resolve({
+				stdout,
+				stderr
+			});
+		});
+	});
+}
+//#endregion
 //#region src/private-file.ts
-const execFile$3 = promisify(execFile);
 let userSidTask;
 async function currentWindowsUserSid() {
-	userSidTask ??= execFile$3("whoami.exe", [
+	userSidTask ??= execFileText("whoami.exe", [
 		"/user",
 		"/fo",
 		"csv",
 		"/nh"
 	], {
 		encoding: "utf8",
-		windowsHide: true
+		windowsHide: true,
+		timeout: 1e4
 	}).then(({ stdout }) => {
 		const match = /,"(S-\d(?:-\d+)+)"\s*$/u.exec(stdout.trim());
 		if (match?.[1] === void 0) throw new Error("unable to resolve the current Windows user SID");
 		return match[1];
+	}).catch((error) => {
+		userSidTask = void 0;
+		throw error;
 	});
 	return userSidTask;
 }
@@ -31,12 +58,11 @@ async function currentWindowsUserSid() {
 async function restrictPrivateFile(file, mode = 384) {
 	await chmod(file, mode);
 	if (process.platform !== "win32") return;
-	const userSid = await currentWindowsUserSid();
-	await execFile$3("icacls.exe", [
+	await execFileText("icacls.exe", [
 		file,
 		"/inheritance:r",
 		"/grant:r",
-		`*${userSid}:(F)`,
+		`*${await currentWindowsUserSid()}:(F)`,
 		"*S-1-5-18:(F)",
 		"*S-1-5-32-544:(F)",
 		"/remove:g",
@@ -45,12 +71,12 @@ async function restrictPrivateFile(file, mode = 384) {
 		"*S-1-5-32-545"
 	], {
 		encoding: "utf8",
-		windowsHide: true
+		windowsHide: true,
+		timeout: 1e4
 	});
 }
 //#endregion
 //#region src/managed-setup.ts
-const execFile$2 = promisify(execFile);
 const VIRTUAL_INTERFACE_MARKERS = [
 	"bridge",
 	"docker",
@@ -98,7 +124,7 @@ function likelyVirtualInterface(name) {
 	return VIRTUAL_INTERFACE_MARKERS.some((marker) => normalized.includes(marker.replaceAll("-", " "))) || /^(?:br|wg)\d*\b/u.test(normalized);
 }
 async function runRouteCommand(file, args) {
-	return (await execFile$2(file, [...args], {
+	return (await execFileText(file, [...args], {
 		encoding: "utf8",
 		windowsHide: true
 	})).stdout;
@@ -325,7 +351,6 @@ function assertExtensionId(value) {
 }
 //#endregion
 //#region src/cli.ts
-const execFile$1 = promisify(execFile);
 const FIREWALL_TCP_RULE = "DSH Mobile HTTPS";
 const FIREWALL_UDP_RULE = "DSH Mobile Discovery";
 function parseOptions(args) {
@@ -370,16 +395,15 @@ function dshHome() {
 	return resolve(process.env.DSH_HOME ?? join(homedir(), ".dsh"));
 }
 async function runElevatedPowerShell(script) {
-	const launch = [
-		"$ErrorActionPreference = 'Stop'; $process = Start-Process -FilePath 'powershell.exe' -Verb RunAs -WindowStyle Hidden -Wait -PassThru",
-		`  -ArgumentList @('-NoProfile','-NonInteractive','-EncodedCommand','${Buffer.from(script, "utf16le").toString("base64")}')`,
-		"; exit $process.ExitCode"
-	].join(" ");
-	await execFile$1("powershell.exe", [
+	await execFileText("powershell.exe", [
 		"-NoProfile",
 		"-NonInteractive",
 		"-Command",
-		launch
+		[
+			"$ErrorActionPreference = 'Stop'; $process = Start-Process -FilePath 'powershell.exe' -Verb RunAs -WindowStyle Hidden -Wait -PassThru",
+			`  -ArgumentList @('-NoProfile','-NonInteractive','-EncodedCommand','${Buffer.from(script, "utf16le").toString("base64")}')`,
+			"; exit $process.ExitCode"
+		].join(" ")
 	], { windowsHide: true });
 }
 async function configureWindowsFirewall(port) {