dsh-mobile 0.8.3 → 0.8.5

package/lib/client.js

@@ -803,7 +803,7 @@ window.__ModuleLoader__.load({
 			lanSetupConfiguring: "Creating private certificates and local network rules…",
 			lanSetupRequired: "Local network setup has not been completed. Choose a network above to continue.",
 			lanSetupRestart: "Setup complete for {origin}. Restart DSH once to start local network access.",
-			lanSetupFailed: "Setup was not completed. Confirm the network selection and approve the Windows prompt, then try again.",
+			lanSetupFailed: "Setup was not completed. Existing firewall rules were retained when possible. Approve the Windows prompt and retry; if it still fails, check dsh-mobile.log for the exact firewall error.",
 			lanChangeTitle: "Change network",
 			lanChangeIntro: "Move local network access to another interface. The private CA and paired devices are kept; connected phones reconnect with the new address.",
 			lanChangeSelect: "New network",
@@ -833,7 +833,7 @@ window.__ModuleLoader__.load({
 			lanSetupConfiguring: "Creazione dei certificati privati e delle regole di rete locale…",
 			lanSetupRequired: "La configurazione della rete locale non è completa. Scegli una rete qui sopra per continuare.",
 			lanSetupRestart: "Configurazione completata per {origin}. Riavvia DSH una volta per attivare l’accesso locale.",
-			lanSetupFailed: "Configurazione non completata. Controlla la rete e approva la richiesta di Windows, quindi riprova.",
+			lanSetupFailed: "Configurazione non completata. Le regole firewall esistenti sono state mantenute quando possibile. Approva la richiesta di Windows e riprova; se fallisce ancora, controlla dsh-mobile.log per l’errore esatto.",
 			lanChangeTitle: "Cambia rete",
 			lanChangeIntro: "Sposta l’accesso alla rete locale su un’altra interfaccia. La CA privata e i dispositivi abbinati restano; i telefoni collegati si riconnettono con il nuovo indirizzo.",
 			lanChangeSelect: "Nuova rete",
@@ -863,7 +863,7 @@ window.__ModuleLoader__.load({
 			lanSetupConfiguring: "正在生成私有证书并配置局域网规则…",
 			lanSetupRequired: "尚未完成局域网配置，请选择上方网络继续。",
 			lanSetupRestart: "已为 {origin} 完成配置。请重启一次 DSH，局域网访问会自动开启。",
-			lanSetupFailed: "配置未完成。请确认网卡选择并允许 Windows 授权提示，然后重试。",
+			lanSetupFailed: "配置未完成。原有防火墙规则已尽量保留；请允许 Windows 授权提示后重试，若仍失败请查看 dsh-mobile.log 中的具体错误。",
 			lanChangeTitle: "更换网络",
 			lanChangeIntro: "把局域网访问切换到另一块网卡。私有 CA 与已配对设备都会保留，已连接的手机需要用新地址重新连接。",
 			lanChangeSelect: "新网络",
@@ -1172,6 +1172,7 @@ window.__ModuleLoader__.load({
 			irohConnecting: "Sidecar connected; starting the DSH authentication gateway…",
 			irohCompanionMissing: "No verified iroh sidecar is available. Use Install official component below; a separate companion plugin is optional.",
 			irohDataDirectoryInvalid: "Could not prepare the private sidecar directory. Check that DSH can manage its own profile directory, then retry.",
+			irohDataDirectoryInsecure: "Windows parent folders of the iroh state path must not grant write or replacement rights to other users. Choose a private profile directory or correct the parent ACLs, then retry.",
 			irohSidecarInvalid: "The installed sidecar failed checksum verification. Reinstall the component.",
 			irohDownloadFailed: "The sidecar download failed before verification. Check the network and retry.",
 			irohPlatformUnsupported: "iroh sidecars are published for Windows x64 and Linux x64 only.",
@@ -1207,6 +1208,7 @@ window.__ModuleLoader__.load({
 			irohConnecting: "Sidecar connesso; avvio del gateway di autenticazione DSH…",
 			irohCompanionMissing: "Nessun sidecar iroh verificato disponibile. Usa Installa componente ufficiale qui sotto; il plugin complementare è facoltativo.",
 			irohDataDirectoryInvalid: "Impossibile preparare la directory privata del sidecar. Verifica che DSH possa gestire la propria directory del profilo, poi riprova.",
+			irohDataDirectoryInsecure: "Le cartelle Windows superiori del percorso di stato iroh non devono concedere ad altri utenti diritti di scrittura o sostituzione. Scegli una directory profilo privata o correggi le ACL superiori, poi riprova.",
 			irohSidecarInvalid: "Il sidecar installato non ha superato la verifica del checksum. Reinstalla il componente.",
 			irohDownloadFailed: "Download del sidecar non riuscito prima della verifica. Controlla la rete e riprova.",
 			irohPlatformUnsupported: "I sidecar iroh sono pubblicati solo per Windows x64 e Linux x64.",
@@ -1242,6 +1244,7 @@ window.__ModuleLoader__.load({
 			irohConnecting: "Sidecar 已连接，正在启动 DSH 认证网关…",
 			irohCompanionMissing: "尚无校验通过的 iroh 组件，请点击下方「安装官方组件」；无需另装配套插件。",
 			irohDataDirectoryInvalid: "无法准备 sidecar 私有目录。请确认 DSH 能管理自己的配置目录后重试。",
+			irohDataDirectoryInsecure: "iroh 状态路径的 Windows 上级目录不能向其他用户授予写入或替换权限；请改用私有配置目录或修正上级目录 ACL 后重试。",
 			irohSidecarInvalid: "已安装的 sidecar 哈希校验失败，请重装组件。",
 			irohDownloadFailed: "下载 sidecar 失败，还没开始校验。请检查网络后重试。",
 			irohPlatformUnsupported: "iroh sidecar 仅发布 Windows x64 与 Linux x64 版本。",
@@ -2213,6 +2216,27 @@ window.__ModuleLoader__.load({
 			frpConfigurationMissingAttach: "填写既有 frps 信息，在本机安装 frpc，然后保存并验证连接。",
 			purgeFrpConfirmSelfSigned: "要停止 FRP 并删除本机 frpc、Token、配置、证书、私钥、身份记录、临时文件和日志吗？通过此自签入口配对的手机都需重新配对；VPS 不会改变。"
 		});
+		Object.assign(MOBILE_CONTROL_MESSAGES.zh, {
+			macPermissionTitle: "请确认已开启「完全磁盘访问权限」",
+			macPermissionSummary: "开启后，远程使用期间不会再弹出需要确认的文件夹授权窗口，连接也不会因此中断。",
+			macPermissionSteps: "系统设置 → 隐私与安全性 → 完全磁盘访问权限 → 打开 DeepSeek Harness",
+			macPermissionOpen: "打开系统设置",
+			macPermissionDismiss: "我知道了"
+		});
+		Object.assign(MOBILE_CONTROL_MESSAGES.en, {
+			macPermissionTitle: "Confirm Full Disk Access is enabled",
+			macPermissionSummary: "With it enabled, remote use will not raise folder authorization dialogs, and the connection will not stall on them.",
+			macPermissionSteps: "System Settings → Privacy & Security → Full Disk Access → turn on DeepSeek Harness",
+			macPermissionOpen: "Open System Settings",
+			macPermissionDismiss: "Got it"
+		});
+		Object.assign(MOBILE_CONTROL_MESSAGES.it, {
+			macPermissionTitle: "Verifica che l’accesso completo al disco sia attivo",
+			macPermissionSummary: "Se attivo, durante l’uso remoto non compariranno finestre di autorizzazione per le cartelle e la connessione non si bloccherà.",
+			macPermissionSteps: "Impostazioni di Sistema → Privacy e sicurezza → Accesso completo al disco → attiva DeepSeek Harness",
+			macPermissionOpen: "Apri Impostazioni di Sistema",
+			macPermissionDismiss: "Ho capito"
+		});
 		/** Caddy snippet owned entirely by DSH Mobile; the main Caddyfile only imports it. */
 		const FRP_CADDY_SNIPPET_PATH = "/etc/caddy/dsh-mobile-dsh.caddy";
 		/** First line of the owned snippet; also the legacy whole-file marker. */
@@ -11617,6 +11641,7 @@ dialog.dshm-picker[open]{display:grid;place-items:center}dialog.dshm-picker::bac
 			frp_exited: "frpExited",
 			iroh_companion_missing: "irohCompanionMissing",
 			iroh_data_directory_invalid: "irohDataDirectoryInvalid",
+			iroh_data_directory_insecure: "irohDataDirectoryInsecure",
 			iroh_sidecar_invalid: "irohSidecarInvalid",
 			iroh_download_failed: "irohDownloadFailed",
 			iroh_download_size_mismatch: "irohDownloadFailed",
@@ -12950,6 +12975,7 @@ dialog.dshm-picker[open]{display:grid;place-items:center}dialog.dshm-picker::bac
 			remoteStatus.setAttribute("aria-live", "polite");
 			const remoteGuide = element("section", "dsh-mobile-control__guide");
 			remoteGuide.hidden = true;
+			remoteGuide.dataset.dshMobileGuide = "funnel";
 			remoteGuide.setAttribute("aria-label", t("funnelGuideAria"));
 			const remoteGuideTitle = element("h3", "dsh-mobile-control__guide-title");
 			remoteGuideTitle.textContent = t("funnelGuideTitle");
@@ -12976,6 +13002,26 @@ dialog.dshm-picker[open]{display:grid;place-items:center}dialog.dshm-picker::bac
 			remoteSetupRetry.textContent = t("retryNow");
 			remoteGuideActions.append(remoteSetup, remoteSetupRetry);
 			remoteGuide.append(remoteGuideTitle, remoteGuideSummary, remoteGuideSteps, remoteGuideNote, remoteGuideActions);
+			const remotePermission = element("section", "dsh-mobile-control__guide");
+			remotePermission.hidden = true;
+			remotePermission.dataset.dshMobileGuide = "mac-file-access";
+			remotePermission.setAttribute("aria-label", t("macPermissionTitle"));
+			remotePermission.setAttribute("role", "status");
+			const remotePermissionTitle = element("h3", "dsh-mobile-control__guide-title");
+			remotePermissionTitle.textContent = t("macPermissionTitle");
+			const remotePermissionSummary = element("p", "dsh-mobile-control__guide-summary");
+			remotePermissionSummary.textContent = t("macPermissionSummary");
+			const remotePermissionSteps = element("p", "dsh-mobile-control__guide-note");
+			remotePermissionSteps.textContent = t("macPermissionSteps");
+			const remotePermissionActions = element("div", "dsh-mobile-control__guide-actions");
+			const remotePermissionOpen = element("button", "dsh-mobile-control__primary");
+			remotePermissionOpen.type = "button";
+			remotePermissionOpen.textContent = t("macPermissionOpen");
+			const remotePermissionDismissButton = element("button", "dsh-mobile-control__secondary");
+			remotePermissionDismissButton.type = "button";
+			remotePermissionDismissButton.textContent = t("macPermissionDismiss");
+			remotePermissionActions.append(remotePermissionOpen, remotePermissionDismissButton);
+			remotePermission.append(remotePermissionTitle, remotePermissionSummary, remotePermissionSteps, remotePermissionActions);
 			const remoteActions = element("div", "dsh-mobile-control__actions");
 			const remoteToggle = element("button", "dsh-mobile-control__primary");
 			remoteToggle.type = "button";
@@ -13224,7 +13270,7 @@ dialog.dshm-picker[open]{display:grid;place-items:center}dialog.dshm-picker::bac
 			macosFolderHelpBody.append(macosFolderHelpNote);
 			macosFolderHelp.append(macosFolderHelpSummary, macosFolderHelpBody);
 			setupDetailsRow.append(macosFolderHelp);
-			remoteWorkspace.append(remoteStatus, remoteAccess, remoteGuide, providerSetupBody, remoteQr, pairingValidity, providerInstallRow, remoteActions, remotePairLink, setupDetailsRow);
+			remoteWorkspace.append(remoteStatus, remoteAccess, remoteGuide, remotePermission, providerSetupBody, remoteQr, pairingValidity, providerInstallRow, remoteActions, remotePairLink, setupDetailsRow);
 			const diagnosticsView = element("div", "dsh-mobile-control__view is-diagnostics");
 			diagnosticsView.hidden = true;
 			const devicesView = element("div", "dsh-mobile-control__view is-devices");
@@ -13323,6 +13369,7 @@ dialog.dshm-picker[open]{display:grid;place-items:center}dialog.dshm-picker::bac
 			let remoteLoginUrl = "";
 			let remoteSetupUrl = "";
 			let remoteSetupPending = false;
+			let remotePermissionDismissed = false;
 			let remoteSetupOpenedAt = 0;
 			let remoteReconnectBusy = false;
 			let remoteProviderBusy = false;
@@ -14202,6 +14249,8 @@ dialog.dshm-picker[open]{display:grid;place-items:center}dialog.dshm-picker::bac
 				const needsFunnelSetup = state === "error" && remoteSetupUrl !== "";
 				remoteReady = remoteRunning && state === "ready" && remoteOrigin !== "";
 				macosFolderHelp.hidden = data.macosHost !== true || !remoteReady;
+				const macFileAccess = data.macFileAccess === "missing" ? "missing" : data.macFileAccess === "ok" ? "ok" : void 0;
+				remotePermission.hidden = macFileAccess !== "missing" || remotePermissionDismissed || !remoteReady;
 				frpChoiceBadge.textContent = frpConfigured && frpInstalled ? t("ready") : t("advanced");
 				originChoiceBadge.textContent = managedOrigin ? t(remoteReady ? "ready" : "advanced") : originListening ? t("originBackendReady") : t("advanced");
 				if (remoteStatus.style) remoteStatus.style.display = state === "off" && remoteFailureText === "" ? "none" : "";
@@ -15620,6 +15669,13 @@ dialog.dshm-picker[open]{display:grid;place-items:center}dialog.dshm-picker::bac
 				remoteSetupPending = false;
 				reconnectRemote();
 			});
+			remotePermissionOpen.addEventListener("click", () => {
+				controlRequestJson("/api/mobile-access/remote/macos-file-access/open-settings", { method: "POST" }).catch(() => {});
+			});
+			remotePermissionDismissButton.addEventListener("click", () => {
+				remotePermissionDismissed = true;
+				remotePermission.hidden = true;
+			});
 			remoteSetup.addEventListener("click", () => {
 				if (remoteSetupUrl === "") return;
 				remoteSetupPending = true;