dsh-multi-chat 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 daetz-coder
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,163 @@
+# 🧱 DSH 多窗口墙 · Multi-Window Wall
+
+> **一个浏览器，并排盯住你所有的 AI 任务。** 让 DSH 从「一次一个对话」变成「一屏全景驾驶舱」，还能用手机躺着看进度。
+
+给 [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) 官方 Web 界面装上一个**多窗口墙**：在一张网格里同时显示 N 个正在运行的 DSH 实例（每个实例独立跑一个任务），所有 Agent 的实时进度、对话、输出**一眼尽收**，不用在无数标签页/窗口之间切来切去。
+
+## ✨ 它能做什么
+
+| 能力 | 说明 |
+|------|------|
+| 📺 **多窗口墙** | 侧边栏一键进入，右侧对话区原位变成窗口网格，一个端口一格，并排看全部任务 |
+| 🔍 **自动发现** | 扫描端口区间自动发现正在运行的 DSH 实例，也可手动管理 |
+| ➕ **一键新建窗口** | 墙内直接启动全新 DSH 实例，凑成你的多任务矩阵 |
+| 📱 **手机访问** | 点「手机访问」自动起一个**带口令认证的局域网网关**，手机扫码/输入口令即可看进度 |
+| 🛑 **窗口控制** | 单窗口放大、刷新、新标签页打开、关闭实例、列数切换（自动/1/2/3/4/6）|
+
+> **多任务 = 多端口。** 启动 N 个 `dsh web --port <n>`，每个实例独立跑一个任务；在任意一个实例里打开多窗口墙，即可并排看到全部。
+
+## 🚀 30 秒上手
+
+```bash
+# 1. 安装（npm / npx，免手工打包补丁）
+npx dsh-multi-chat install
+
+# 2. 启动几个实例
+npx dsh-multi-chat start --ports 3080,3081,3082
+
+# 3. 打开任意实例，点侧边栏底部「多窗口墙」→ 完成 🎉
+```
+
+## 为什么这样做
+
+- **不改动任何官方逻辑**：插件只注册两个**增量列表槽位**（`conversation.view` 视图环条目、`sidebar.footer.action` 侧边栏快捷入口）和只读 JSON 探活路由（`/multi/api/ports`、`/multi/api/status`、`/multi/api/stop`）。不替换任何既有槽位、不改写任何行、不触碰会话/代理/工具等核心逻辑。
+- **界面就是官方界面**：墙是官方视图环的一个视图，渲染在对话主面板内（不是弹层），主题、字号、图标、控件全部走官方 `--dsw-*` token 与官方 primitives（Button/Input/Menu/StateDot）。
+- **递归防护**：墙永远不嵌入自身端口；被嵌入页面带 `?multi-wall=embed` 标记，不注册任何墙界面，杜绝「墙中墙」无限递归。
+- **最小改动**：新增一个 client 插件包 + 一个 patch 行。
+
+## 目录结构
+
+```
+plugin/dsh-client-ui-multi-wall/   # 官方规范 client 插件包（node half + browser half）
+  lib/                             # 已构建产物（lib/index.js + lib/client.js + 类型）
+  src/                             # 源码（与官方 monorepo packages/client/ui-multi-wall 一致）
+patches/multi-wall.yml             # 启用插件的 cordis.patch.yml insert 行
+scripts/
+  install-plugin.ps1               # 打包 + 装进 profile + 追加 patch + 提示重启
+  start-multi.ps1 / stop-multi.ps1 # 启停多个 dsh web 实例（-Remote 可带认证网关）
+  gateway.mjs                      # 带令牌认证 / 可选 TLS 的反向代理网关（手机/远程访问）
+  gateway-hidden.vbs               # 无窗口启动器：用隐藏窗口方式启动 gateway.mjs（不弹控制台）
+  gateway-start.ps1 / gateway-stop.ps1  # 一键静默启动/停止网关
+bin/dsh-multi-chat.mjs             # 跨平台 npx CLI（install/start/stop/gateway）
+harness-src/                       # 官方 deepseek-harness 源码（开发/构建用）
+```
+
+## 安装与启用（Windows）
+
+```powershell
+# 1) 打包并装进 web profile，自动追加 patch 行
+.\scripts\install-plugin.ps1
+
+# 2) 重启 dsh web，打开任意实例
+dsh web --port 3084
+# 浏览器打开 http://127.0.0.1:3084 ，侧边栏底部出现「多窗口墙」按钮
+```
+
+或手动：
+
+```bash
+cd plugin/dsh-client-ui-multi-wall && npm pack          # 得到 tarball
+dsh plugin --profile web add <tarball>                  # 装进 profile
+# 把 patches/multi-wall.yml 的 insert 行加进 ~/.dsh/profiles/web/cordis.patch.yml
+```
+
+## 使用
+
+1. 先启动若干实例：`.\scripts\start-multi.ps1 -Ports "3080,3081,3082,3084"`（或手动 `dsh web --port <n>`）。
+2. 打开任意实例，点侧边栏底部的「多窗口墙」快捷入口（或点对话区头部的「多窗口墙」标签页）。
+3. 墙视图内：自动发现实例（自动排除自身端口）、列数切换（自动/1/2/3/4/6，默认横向铺满）、点标题放大、⟳ 单独刷新、↗ 新标签页打开、✕ 从视图移除、全部刷新、实时在线状态点。布局保存在 localStorage。
+4. 退出墙：点工具栏**右上角的「退出」按钮**，一键切回对话视图。
+
+## 手机 / 远程访问（认证网关）
+
+官方 `dsh web` 出于安全**刻意禁止 `--host 0.0.0.0`**（会向网络暴露远程代码执行）。因此跨设备访问的正确姿势是：实例保持仅本机回环，在实例前挂一个**带令牌认证的网关**，由网关对外监听 `0.0.0.0`。
+
+```bash
+# 一个实例 + 一个认证网关（手机在同一内网时打开 http://<局域网IP>:8443 登录）
+node scripts/gateway.mjs --target 127.0.0.1:3080 --listen 0.0.0.0:8443 --token <口令>
+
+# 加密：提供证书即走 HTTPS（跨公网必须，否则用 VPN）
+node scripts/gateway.mjs --target 127.0.0.1:3080 --listen 0.0.0.0:8443 --token <口令> --tls-cert cert.pem --tls-key key.pem
+```
+
+网关的安全模型：HMAC 签名的 HttpOnly/SameSite 会话 Cookie（默认 12h）、`Authorization: Bearer` 与 `?token=` 供脚本使用、按 IP 限流登录失败；所有代理请求把 Host/Origin 重写为回环目标，官方 `/api` 浏览器信任栅栏（DNS-rebinding 防线）因此判定为本地请求，无需重启加 `--trusted-host`；WebSocket 升级与 SSE 流原样透传。
+
+`start-multi.ps1` 也能一键带网关启动：
+
+```powershell
+.\scripts\start-multi.ps1 -Ports "3080,3081" -Remote -Token "my-secret"
+# 或自签名加密：-TlsCert cert.pem -TlsKey key.pem
+```
+
+## 分发与安装
+
+仓库内置跨平台 CLI `dsh-multi-chat`（`bin/dsh-multi-chat.mjs`），下面三种渠道都可安装。CLI 的 `install` 会探测 `$DSH_HOME`（缺省 `~/.dsh`）并幂等地追加启用 patch（与 `install-plugin.ps1` 行为一致）。
+
+### 渠道一：npm / npx（推荐，最省事）
+
+```bash
+# 发布到 npm 后，任意机器一句话安装
+npx dsh-multi-chat install
+
+# 或直接 npx 跑单条命令（无需安装）
+npx dsh-multi-chat start --remote --token <口令> --ports 3080,3081
+npx dsh-multi-chat gateway --target 127.0.0.1:3080 --token <口令>
+```
+
+维护者发布：`npm publish`（无作用域公开包 `dsh-multi-chat`）。
+
+### 渠道二：GitHub Release
+
+从 [Releases](https://github.com/daetz-coder/dsh-multi-chat/releases) 下载源码 zip/tarball，解压后进目录：
+
+```bash
+node bin/dsh-multi-chat.mjs install           # 打包 + dsh plugin add + 追加启用 patch
+node bin/dsh-multi-chat.mjs start --ports 3080,3081
+```
+
+> 打 tag 后，GitHub 会自动生成 source zip/tarball 资产；也可在 Release 附加 `npm pack` 产出的 `.tgz` 作为离线安装包。
+
+### 渠道三：git 直接安装
+
+```bash
+git clone https://github.com/daetz-coder/dsh-multi-chat.git
+cd dsh-multi-chat
+
+node bin/dsh-multi-chat.mjs install           # 装插件
+node bin/dsh-multi-chat.mjs start --ports 3080,3081
+node bin/dsh-multi-chat.mjs gateway --target 127.0.0.1:3080 --token <口令>
+```
+
+### 本仓库直接运行（开发）
+
+```bash
+node bin/dsh-multi-chat.mjs install
+node bin/dsh-multi-chat.mjs start --ports 3080,3081
+node bin/dsh-multi-chat.mjs stop
+node bin/dsh-multi-chat.mjs gateway --target 127.0.0.1:3080 --token <口令>
+```
+
+## 在官方 monorepo 中的位置
+
+`packages/client/ui-multi-wall` 是遵循官方 client 插件规范的包（tsconfig host/client 分离、tsdown clientBundle、locales zh/en、invariant 伴随、HMR 安全测试），并已接入 `packages/bundle/web-app` 的 dsh.client roster 与 `tsconfig.client.json` 聚合。构建：
+
+```bash
+cd harness-src
+pnpm install
+pnpm --filter @deepseek-ai/dsh-client-ui-multi-wall bundle   # 产出 lib/client.js
+npx vitest run packages/client/ui-multi-wall                 # 14 项测试
+```
+
+## License
+
+MIT

package/bin/dsh-multi-chat.mjs

@@ -0,0 +1,417 @@
+#!/usr/bin/env node
+/**
+ * dsh-multi-chat — install / manage the multi-window wall plugin and its
+ * authenticated gateway, from anywhere `npx dsh-multi-chat` can run.
+ *
+ * Subcommands:
+ *   install [--profile web]   pack the plugin, `dsh plugin add` it into the
+ *                             profile, and append the enable patch row.
+ *   start [options]           start N loopback `dsh web` instances (cross-
+ *                             platform replacement for scripts/start-multi.ps1);
+ *                             with --remote, put an authenticated gateway in
+ *                             front of each so a phone/remote machine can log
+ *                             in with a token.
+ *   stop                      stop everything `start` recorded (instances +
+ *                             gateways).
+ *   gateway [options...]      run the authenticated gateway itself (forwards
+ *                             to scripts/gateway.mjs).
+ *
+ * The PowerShell scripts remain the Windows-native path; this CLI is the
+ * npx/distribution path and works on Windows, macOS, and Linux.
+ */
+
+import { spawn, spawnSync } from 'node:child_process'
+import { createServer as createNetServer } from 'node:net'
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { homedir, networkInterfaces } from 'node:os'
+import { join, dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
+const STATE_FILE = join(ROOT, '.wall-pids.json')
+const PLUGIN_DIR = join(ROOT, 'plugin', 'dsh-client-ui-multi-wall')
+
+// Node ≥22 warns about spawn(shell:true, args[]) (DEP0190). The args here are
+// fixed strings we control (numeric ports, our own paths), so the warning is
+// noise; drop only that message and keep other warnings visible.
+process.removeAllListeners('warning')
+process.on('warning', (warning) => {
+  if (warning.name === 'DeprecationWarning' && /shell option true/.test(warning.message)) return
+  process.stderr.write(`Warning: ${warning.message}\n`)
+})
+
+/* ------------------------------------------------------------------ */
+/* Small helpers.                                                     */
+/* ------------------------------------------------------------------ */
+
+function shell(win32) { return win32 || false }
+const isWin = process.platform === 'win32'
+
+function run(file, args, { cwd = ROOT, okCodes = [0] } = {}) {
+  const result = spawnSync(file, args, { cwd, shell: isWin, encoding: 'utf8' })
+  if (!okCodes.includes(result.status ?? -1)) {
+    throw new Error(`command failed (${file} ${args.join(' ')}) exit ${result.status}\n${result.stdout ?? ''}${result.stderr ?? ''}`)
+  }
+  return result.stdout ?? ''
+}
+
+function dshHome() {
+  return process.env.DSH_HOME && process.env.DSH_HOME !== ''
+    ? process.env.DSH_HOME
+    : join(homedir(), '.dsh')
+}
+
+function sleep(ms) { return new Promise(resolve => setTimeout(resolve, ms)) }
+
+async function probe(port, timeoutMs = 600) {
+  try {
+    const res = await fetch(`http://127.0.0.1:${port}/`, { signal: AbortSignal.timeout(timeoutMs) })
+    const body = await res.text()
+    return res.status === 200 && body.includes('__DSH_BOOT__')
+  } catch {
+    return false
+  }
+}
+
+async function waitReady(port, timeoutMs = 20000) {
+  const deadline = Date.now() + timeoutMs
+  for (;;) {
+    if (await probe(port)) return true
+    if (Date.now() > deadline) return false
+    await sleep(400)
+  }
+}
+
+function spawnDetached(file, args, { shell = false } = {}) {
+  const child = spawn(file, args, {
+    detached: true,
+    stdio: 'ignore',
+    windowsHide: true,
+    shell,
+  })
+  child.unref()
+  return child.pid
+}
+
+function killPid(pid) {
+  if (isWin) {
+    spawnSync('taskkill', ['/PID', String(pid), '/F', '/T'], { stdio: 'ignore' })
+  } else {
+    try { process.kill(pid, 'SIGTERM') } catch { /* already gone */ }
+    setTimeout(() => { try { process.kill(pid, 'SIGKILL') } catch { /* already gone */ } }, 500)
+  }
+}
+
+function writeState(state) {
+  writeFileSync(STATE_FILE, JSON.stringify(state, null, 2), 'utf8')
+}
+
+function readState() {
+  try {
+    return JSON.parse(readFileSync(STATE_FILE, 'utf8'))
+  } catch {
+    return null
+  }
+}
+
+/* ------------------------------------------------------------------ */
+/* install                                                           */
+/* ------------------------------------------------------------------ */
+
+const INSTALL_HELP = `dsh-multi-chat install — install the multi-window wall plugin
+
+Usage:
+  dsh-multi-chat install [--profile web]
+
+Packs plugin/dsh-client-ui-multi-wall, installs the tarball into the profile
+with \`dsh plugin --profile <p> add\`, and appends the enable patch row to
+$DSH_HOME/profiles/<p>/cordis.patch.yml. Idempotent: the patch row is only
+added once. Restart dsh web afterwards.
+`
+
+async function cmdInstall(args) {
+  let profile = 'web'
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === '--profile') profile = args[++i] ?? 'web'
+    else if (args[i] === '--help') { process.stdout.write(INSTALL_HELP); return }
+    else throw new Error(`unknown install option: ${args[i]}`)
+  }
+  if (!existsSync(PLUGIN_DIR)) {
+    throw new Error(`plugin directory not found: ${PLUGIN_DIR} — run from the dsh-multi-chat package root`)
+  }
+
+  // 1) pack the plugin tarball into a STABLE location under DSH home. The
+  // profile records a `file:` dependency on the tarball, so a temp directory
+  // (deleted after install) would break every later `dsh plugin add` — the
+  // tarball must outlive the CLI run. (npm pack is offline-safe.)
+  const stableDir = join(dshHome(), 'profiles', profile, 'plugins')
+  mkdirSync(stableDir, { recursive: true })
+  const packOut = run('npm', ['pack', '--pack-destination', stableDir], { cwd: PLUGIN_DIR })
+  const tarballName = packOut.trim().split(/\r?\n/).pop()
+  const tarball = join(stableDir, tarballName)
+  if (!existsSync(tarball)) throw new Error('npm pack produced no tarball')
+
+  // 2) install into the profile.
+  process.stdout.write(`installing ${tarballName} into profile '${profile}'…\n`)
+  run('dsh', ['plugin', '--profile', profile, 'add', tarball])
+
+  // 3) append the enable patch row (idempotent).
+  const patchPath = join(dshHome(), 'profiles', profile, 'cordis.patch.yml')
+  const insert = [
+    '',
+    '# Multi-window wall (dsh-multi-chat): enable the official client',
+    '# plugin that renders the wall inside the DSH web GUI.',
+    '- insert:',
+    '    - id: ui-multi-wall',
+    "      name: '@deepseek-ai/dsh-client-ui-multi-wall'",
+    '',
+  ].join('\n')
+  let content = ''
+  if (existsSync(patchPath)) content = readFileSync(patchPath, 'utf8')
+  if (!content.includes('ui-multi-wall')) {
+    writeFileSync(patchPath, content.trimEnd() + '\n' + insert, 'utf8')
+    process.stdout.write(`patched ${patchPath}\n`)
+  } else {
+    process.stdout.write(`profile patch already enables ui-multi-wall (${patchPath})\n`)
+  }
+
+  process.stdout.write('\nDone. Restart dsh web to load the wall:\n')
+  process.stdout.write('  dsh web --port <n>\n')
+}
+
+/* ------------------------------------------------------------------ */
+/* start                                                             */
+/* ------------------------------------------------------------------ */
+
+const START_HELP = `dsh-multi-chat start — start N loopback DSH web instances
+
+Usage:
+  dsh-multi-chat start [--ports 3080,3081,3082,3083] [--remote] [--token <secret>]
+                       [--gateway-ports 8080,8081,8082,8083] [--no-open]
+
+Options:
+  --ports <list>          comma-separated loopback instance ports (default 3080..3083)
+  --remote                put an authenticated gateway (0.0.0.0) in front of
+                          every instance for phone/remote access
+  --token <secret>        gateway login token; required with --remote (a random
+                          one is generated and printed when omitted)
+  --gateway-ports <list>  external gateway ports; default instance-port + 5000
+  --tls-cert/--tls-key    PEM files; enables HTTPS on every gateway
+  --name <label>          gateway login page label (default DSH)
+  --no-open               do not open the browser
+  --help                  show this help
+
+Examples:
+  dsh-multi-chat start --ports 3080,3081
+  dsh-multi-chat start --remote --token hunter2 --ports 3080,3081 --gateway-ports 8440,8441
+`
+
+async function cmdStart(args) {
+  const opts = {
+    ports: '3080,3081,3082,3083',
+    remote: false,
+    token: null,
+    gatewayPorts: null,
+    tlsCert: null,
+    tlsKey: null,
+    name: 'DSH',
+    noOpen: false,
+  }
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i]
+    switch (a) {
+      case '--ports': opts.ports = args[++i] ?? opts.ports; break
+      case '--remote': opts.remote = true; break
+      case '--token': opts.token = args[++i] ?? null; break
+      case '--gateway-ports': opts.gatewayPorts = args[++i] ?? null; break
+      case '--tls-cert': opts.tlsCert = args[++i] ?? null; break
+      case '--tls-key': opts.tlsKey = args[++i] ?? null; break
+      case '--name': opts.name = args[++i] ?? opts.name; break
+      case '--no-open': opts.noOpen = true; break
+      case '--help': process.stdout.write(START_HELP); return
+      default: throw new Error(`unknown start option: ${a}`)
+    }
+  }
+  const ports = opts.ports.split(',').map(p => p.trim()).filter(p => /^\d+$/.test(p)).map(Number)
+  if (ports.length === 0) throw new Error(`no valid ports in: ${opts.ports}`)
+
+  let token = opts.token
+  if (opts.remote && token === null) {
+    token = Array.from({ length: 4 }, () => Math.random().toString(36).slice(2, 8)).join('')
+    process.stdout.write(`[start] generated gateway token: ${token}  (save it!)\n`)
+  }
+
+  // Resolve the dsh launcher once (shell on Windows resolves the .cmd shim).
+  const dshFile = 'dsh'
+  const dshShell = isWin
+
+  const state = { pid: [], ports: [], gateways: [], startedAt: new Date().toISOString() }
+  const started = []
+
+  for (const port of ports) {
+    const pid = spawnDetached(dshFile, ['web', '--port', String(port)], { shell: dshShell })
+    state.pid.push(pid)
+    state.ports.push(port)
+    process.stdout.write(`dsh web --port ${port} (pid ${pid})\n`)
+    const ready = await waitReady(port)
+    if (!ready) process.stdout.write(`  ⚠ instance on :${port} did not answer the DSH shell yet — check its console\n`)
+    started.push(port)
+  }
+
+  if (opts.remote) {
+    const explicitGatewayPorts = opts.gatewayPorts !== null
+      ? opts.gatewayPorts.split(',').map(p => p.trim()).filter(p => /^\d+$/.test(p)).map(Number)
+      : null
+    if (explicitGatewayPorts !== null && explicitGatewayPorts.length < ports.length) {
+      throw new Error(`--gateway-ports needs one port per instance port (got ${explicitGatewayPorts.length} for ${ports.length})`)
+    }
+    const gatewayFile = join(ROOT, 'scripts', 'gateway.mjs')
+    if (!existsSync(gatewayFile)) throw new Error(`gateway script not found: ${gatewayFile}`)
+    const usedGatewayPorts = new Set()
+    for (let i = 0; i < ports.length; i++) {
+      const port = ports[i]
+      // Auto-advance past Windows excluded port ranges (Hyper-V/WinNAT) and
+      // busy ports so a default +5000 mapping never silently fails to bind;
+      // already-assigned ports are skipped so two gateways never collide.
+      const desired = explicitGatewayPorts !== null ? explicitGatewayPorts[i] : port + 5000
+      const gatewayPort = await reserveGatewayPort(desired, usedGatewayPorts)
+      if (gatewayPort !== desired) process.stdout.write(`  gateway port ${desired} not bindable — using ${gatewayPort}\n`)
+      const gwArgs = ['--target', `127.0.0.1:${port}`, '--listen', `0.0.0.0:${gatewayPort}`, '--token', token, '--name', opts.name]
+      if (opts.tlsCert !== null && opts.tlsKey !== null) {
+        gwArgs.push('--tls-cert', opts.tlsCert, '--tls-key', opts.tlsKey)
+      }
+      const pid = spawnDetached(process.execPath, [gatewayFile, ...gwArgs])
+      state.gateways.push({ port, gatewayPort, pid })
+      process.stdout.write(`gateway :${gatewayPort} -> 127.0.0.1:${port} (pid ${pid})\n`)
+    }
+  }
+
+  writeState(state)
+  process.stdout.write(`state saved to ${STATE_FILE}\n`)
+
+  if (opts.remote) {
+    const scheme = opts.tlsCert !== null ? 'https' : 'http'
+    const ips = lanIps()
+    process.stdout.write('\nphone / remote access (token required):\n')
+    state.gateways.forEach((g) => {
+      const hosts = ips.length > 0 ? ips : ['localhost']
+      process.stdout.write(`  ${hosts.map(ip => `${scheme}://${ip}:${g.gatewayPort}/`).join('  ')}  -> dsh :${g.port}\n`)
+    })
+    process.stdout.write(`  token: ${token}\n`)
+  } else if (!opts.noOpen && isWin) {
+    spawn('cmd', ['/c', 'start', '', `http://127.0.0.1:${started[0]}`], { stdio: 'ignore', detached: true }).unref()
+  }
+}
+
+function lanIps() {
+  const out = []
+  for (const ifaces of Object.values(networkInterfaces())) {
+    for (const iface of ifaces ?? []) {
+      if (iface.family === 'IPv4' && !iface.internal) out.push(iface.address)
+    }
+  }
+  return out
+}
+
+/** Whether a TCP port can be bound (catches Windows excluded ranges like
+ * Hyper-V/WinNAT's 8017–8116 and busy ports). */
+function canBind(port) {
+  return new Promise(resolve => {
+    const srv = createNetServer()
+    srv.once('error', () => resolve(false))
+    srv.listen(port, '127.0.0.1', () => { srv.close(() => resolve(true)) })
+  })
+}
+
+/** Pick the first bindable port at or after `desired` that is not already
+ * assigned to another gateway in this run (probes up to 500 ports). */
+async function reserveGatewayPort(desired, used) {
+  for (let candidate = desired; candidate < desired + 500; candidate++) {
+    if (used.has(candidate)) continue
+    if (await canBind(candidate)) {
+      used.add(candidate)
+      return candidate
+    }
+  }
+  throw new Error(`no bindable gateway port near ${desired} (Windows excluded ranges or busy ports)`)
+}
+
+/* ------------------------------------------------------------------ */
+/* stop                                                              */
+/* ------------------------------------------------------------------ */
+
+const STOP_HELP = `dsh-multi-chat stop — stop everything \`start\` recorded
+
+Usage:
+  dsh-multi-chat stop
+
+Reads ${STATE_FILE} and terminates the recorded dsh instances and gateways.
+`
+
+async function cmdStop() {
+  const state = readState()
+  if (state === null) {
+    process.stdout.write(`no state file at ${STATE_FILE} — nothing to stop\n`)
+    return
+  }
+  let count = 0
+  for (const pid of [...(state.pid ?? []), ...(state.gateways ?? []).map(g => g.pid)]) {
+    if (typeof pid !== 'number') continue
+    killPid(pid)
+    count++
+    process.stdout.write(`stopped pid ${pid}\n`)
+  }
+  rmSync(STATE_FILE, { force: true })
+  process.stdout.write(`stopped ${count} process(es); removed ${STATE_FILE}\n`)
+}
+
+/* ------------------------------------------------------------------ */
+/* gateway                                                           */
+/* ------------------------------------------------------------------ */
+
+async function cmdGateway(args) {
+  const script = join(ROOT, 'scripts', 'gateway.mjs')
+  if (!existsSync(script)) throw new Error(`gateway script not found: ${script}`)
+  const child = spawn(process.execPath, [script, ...args], { stdio: 'inherit' })
+  child.on('exit', (code) => process.exit(code ?? 1))
+}
+
+/* ------------------------------------------------------------------ */
+/* Main.                                                              */
+/* ------------------------------------------------------------------ */
+
+const MAIN_HELP = `dsh-multi-chat — multi-window wall + authenticated remote access for DSH
+
+Usage:
+  dsh-multi-chat install [--profile web]      install the wall plugin
+  dsh-multi-chat start [options]              start instances (+ gateways with --remote)
+  dsh-multi-chat stop                         stop what start recorded
+  dsh-multi-chat gateway [options]            run the authenticated gateway
+  dsh-multi-chat --help                       this help
+
+Run "dsh-multi-chat <cmd> --help" for command details.
+`
+
+async function main() {
+  const [cmd, ...rest] = process.argv.slice(2)
+  try {
+    switch (cmd) {
+      case 'install': await cmdInstall(rest); break
+      case 'start': await cmdStart(rest); break
+      case 'stop': await cmdStop(); break
+      case 'gateway': await cmdGateway(rest); break
+      case '--help':
+      case '-h':
+      case undefined:
+        process.stdout.write(MAIN_HELP)
+        break
+      default:
+        throw new Error(`unknown command: ${cmd}`)
+    }
+  } catch (error) {
+    process.stderr.write(`[dsh-multi-chat] ${error instanceof Error ? error.message : String(error)}\n`)
+    process.exit(1)
+  }
+}
+
+void main()

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "dsh-multi-chat",
+  "version": "0.4.0",
+  "description": "DSH 多对话：在官方 DeepSeek Harness Web 界面里并排运行和监控多个对话实例（多窗口墙），并内置带口令认证的手机访问网关。npx dsh-multi-chat install|start|stop",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "dsh-multi-chat": "bin/dsh-multi-chat.mjs"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/daetz-coder/dsh-multi-chat.git"
+  },
+  "homepage": "https://github.com/daetz-coder/dsh-multi-chat#readme",
+  "bugs": {
+    "url": "https://github.com/daetz-coder/dsh-multi-chat/issues"
+  },
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "deepseek",
+    "multi-chat",
+    "multi-conversation",
+    "client-plugin",
+    "gateway",
+    "phone-access"
+  ],
+  "files": [
+    "bin/",
+    "scripts/",
+    "patches/",
+    "plugin/dsh-client-ui-multi-wall/package.json",
+    "plugin/dsh-client-ui-multi-wall/README.md",
+    "plugin/dsh-client-ui-multi-wall/lib/index.js",
+    "plugin/dsh-client-ui-multi-wall/lib/invariant.js",
+    "plugin/dsh-client-ui-multi-wall/lib/client.js",
+    "plugin/dsh-client-ui-multi-wall/lib/types/**/*.d.ts"
+  ],
+  "scripts": {
+    "test": "cd harness-src && npx vitest run packages/client/ui-multi-wall"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/patches/multi-wall.yml

@@ -0,0 +1,10 @@
+# Enable the multi-window wall inside an existing `dsh web` instance.
+# Paste the insert below into the web profile's patch layer
+# ($DSH_HOME/profiles/web/cordis.patch.yml), or pass via `--patch`:
+#   dsh web --port <n> --patch ./patches/multi-wall.yml
+#
+# The package must be installed in the profile's node_modules first:
+#   dsh plugin --profile web add <path-to-tarball-or-git-url>
+- insert:
+    - id: ui-multi-wall
+      name: '@deepseek-ai/dsh-client-ui-multi-wall'