dsh-pad-kit 0.0.0-stage → 1.0.0

package/install-windows.ps1

@@ -0,0 +1,102 @@
+# dsh-pad-kit 电脑端安装器（Windows）
+# 用法：右键「使用 PowerShell 运行」，或在 PowerShell 里：
+#   powershell -ExecutionPolicy Bypass -File .\install-windows.ps1
+# 作用：把插件放到 %USERPROFILE%\.dsh\plugins\、建 junction、在 profile 里登记、追加激活行。
+# 幂等：重复运行只做补齐，不会重复写入。
+
+param(
+  [string]$Profile = 'web',
+  [string]$DshHome = (Join-Path $env:USERPROFILE '.dsh')
+)
+
+$ErrorActionPreference = 'Stop'
+$pkgName = '@local/dsh-pad-kit'
+$pluginDirName = 'dsh-pad-kit'
+$src = $PSScriptRoot
+
+function Say($msg) { Write-Host $msg }
+function Fail($msg) { Write-Host "错误：$msg" -ForegroundColor Red; exit 1 }
+
+Say "==> 1/5 检查来源目录"
+$needed = @('package.json', 'cordis.patch.yml', 'lib\plugin.js', 'dsh-android-kit.tgz', 'kit\termux.apk')
+foreach ($f in $needed) {
+  if (-not (Test-Path (Join-Path $src $f))) { Fail "来源里缺少 $f（请在解压后的 dsh-pad-kit 目录里运行本脚本）" }
+}
+Say "    来源 OK：$src"
+
+Say "==> 2/5 复制到 $DshHome\plugins\$pluginDirName"
+$pluginsRoot = Join-Path $DshHome 'plugins'
+$target = Join-Path $pluginsRoot $pluginDirName
+New-Item -ItemType Directory -Force -Path $pluginsRoot | Out-Null
+if (Test-Path $target) {
+  foreach ($f in $needed) {
+    $dstFile = Join-Path $target $f
+    New-Item -ItemType Directory -Force -Path (Split-Path $dstFile) | Out-Null
+    Copy-Item (Join-Path $src $f) $dstFile -Force
+  }
+  Say "    已存在，已就地更新关键文件"
+} else {
+  Copy-Item $src $target -Recurse -Force
+  Say "    已复制"
+}
+
+Say "==> 3/5 建 junction（让 node 能按包名解析）"
+$profileDir = Join-Path $DshHome "profiles\$Profile"
+if (-not (Test-Path $profileDir)) { Fail "找不到 profile 目录：$profileDir（DSH 至少启动过一次吗？）" }
+$linkDir = Join-Path $profileDir 'node_modules\@local'
+New-Item -ItemType Directory -Force -Path $linkDir | Out-Null
+$link = Join-Path $linkDir $pluginDirName
+if (Test-Path $link) {
+  (Get-Item $link).Delete()
+  Say "    旧链接已移除"
+}
+cmd /c mklink /J "`"$link`"" "`"$target`"" | Out-Null
+if (-not (Test-Path $link)) { Fail "junction 创建失败：$link" }
+Say "    OK：$link"
+
+Say "==> 4/5 在 profile package.json 里登记依赖"
+$pkgFile = Join-Path $profileDir 'package.json'
+if (-not (Test-Path $pkgFile)) { Fail "找不到 $pkgFile" }
+$backup = "$pkgFile.bak-pad-kit"
+Copy-Item $pkgFile $backup -Force
+$json = Get-Content $pkgFile -Raw -Encoding UTF8 | ConvertFrom-Json
+if (-not $json.dependencies) { $json | Add-Member -NotePropertyName dependencies -NotePropertyValue ([pscustomobject]@{}) }
+$wanted = "link:$($target -replace '\\', '/')"
+if ($json.dependencies.PSObject.Properties.Name -contains $pkgName) {
+  $json.dependencies.$pkgName = $wanted
+} else {
+  $json.dependencies | Add-Member -NotePropertyName $pkgName -NotePropertyValue $wanted
+}
+$out = ConvertTo-Json -InputObject $json -Depth 20
+[System.IO.File]::WriteAllText($pkgFile, $out, (New-Object System.Text.UTF8Encoding($false)))
+Say "    OK（备份：$backup）"
+
+Say "==> 5/5 在 cordis.patch.yml 追加激活行"
+$patchFile = Join-Path $profileDir 'cordis.patch.yml'
+if (-not (Test-Path $patchFile)) { Fail "找不到 $patchFile" }
+Copy-Item $patchFile "$patchFile.bak-pad-kit" -Force
+$text = [System.IO.File]::ReadAllText($patchFile)
+if ($text -match '(?m)^\s*-\s*id:\s*pad-kit\s*$') {
+  Say "    已存在 pad-kit 行，跳过"
+} else {
+  $block = @"
+
+# dsh-pad-kit：平板上跑 DSH + 电脑 SSH 远程管理
+- insert:
+    - id: pad-kit
+      name: '$pkgName'
+      config:
+        httpPort: 8090
+        apkName: termux.apk
+        timeoutMs: 120000
+"@
+  [System.IO.File]::WriteAllText($patchFile, ($text.TrimEnd() + $block + "`n"), (New-Object System.Text.UTF8Encoding($false)))
+  Say "    已追加"
+}
+
+Write-Host ''
+Write-Host '完成。还有两步是必须人工做的：' -ForegroundColor Green
+Write-Host '  1) 重启 DSH（新增插件行不会热加载），重启后工具列表里会出现 17 个 tablet_* 工具'
+Write-Host '  2) 首次装平板时，防火墙要放行一次 8090（会弹窗，选「允许」）'
+Write-Host ''
+Write-Host '下一步：在 DSH 里调用 tablet_install_page，按返回的地址在平板上操作。'

package/kit/bootstrap.tmpl

@@ -0,0 +1,102 @@
+#!/data/data/com.termux/files/usr/bin/bash
+# DSH 平板端引导：自动判断环境（有没有 Termux、curl 好不好、ssh 有没有）再决定怎么走
+set -u
+BASE="__BASE__"
+PUBKEY="__PUBKEY__"
+step() { printf '\n[dsh-kit] %s\n' "$*"; }
+die()  { printf '\n[dsh-kit] 失败：%s\n' "$*"; exit 1; }
+
+# ---------- 0. 环境判断：这里如果不是 Termux，直接给出结论 ----------
+step "0/5 环境检查"
+if [ -z "${PREFIX:-}" ] || [ ! -d "/data/data/com.termux" ]; then
+  die "这里不是 Termux 环境。请先在平板装 Termux（安装页上有 APK），再在 Termux 里运行这一行。"
+fi
+command -v pkg >/dev/null 2>&1 || die "找不到 pkg 命令：Termux 版本过旧（Play 商店版）。请卸载后装 F-Droid/GitHub 版 0.118+。"
+ARCH="$(uname -m)"
+case "$ARCH" in
+  aarch64|arm64) ;;
+  *) die "只支持 arm64 平板，当前架构是 $ARCH。" ;;
+esac
+SDK="$(getprop ro.build.version.sdk 2>/dev/null || echo 0)"
+case "$SDK" in ''|*[!0-9]*) SDK=0 ;; esac
+[ "$SDK" -ge 24 ] || die "需要 Android 7.0 及以上（当前 SDK=$SDK）。"
+FREE_MB="$(df -k /data 2>/dev/null | awk 'NR==2{print int($4/1024)}')"
+case "$FREE_MB" in ''|*[!0-9]*) FREE_MB=0 ;; esac
+[ "$FREE_MB" -ge 1500 ] || die "空间不足：/data 只剩 ${FREE_MB}MB，至少要 1.5GB。"
+echo "  Termux=$PREFIX"
+echo "  架构=$ARCH  Android SDK=$SDK  剩余空间=${FREE_MB}MB"
+
+# ---------- 1. 先保证 curl 可用，否则后面什么都下不了 ----------
+step "1/5 检查 curl 与网络"
+if ! curl --version >/dev/null 2>&1; then
+  echo "  curl 不可用（常见：libssl 符号缺失），先整体升级一版"
+  apt update >/dev/null 2>&1 || true
+  apt full-upgrade -y -o Dpkg::Options::="--force-confnew" >/dev/null 2>&1 || true
+  curl --version >/dev/null 2>&1 || die "curl 仍然不可用。请手动执行：apt update && apt full-upgrade -y 之后重跑这一行。"
+  echo "  curl 已修复：$(curl --version | head -n1)"
+fi
+if ! curl -fsS -m 8 "$BASE/healthz" >/dev/null 2>&1; then
+  die "连不上电脑 $BASE。三条常见原因：①两台设备不在同一 Wi-Fi ②路由器开了 AP 隔离/访客网络 ③电脑防火墙拦了 8090。"
+fi
+echo "  已连通电脑：$BASE"
+
+# ---------- 2. 装 openssh（缺包时换官方源重试） ----------
+step "2/5 安装 openssh"
+if ! command -v sshd >/dev/null 2>&1; then
+  pkg install -y openssh >/dev/null 2>&1 || true
+fi
+if ! command -v sshd >/dev/null 2>&1; then
+  echo "  默认源里没有 openssh，切到官方源重试"
+  echo "deb https://packages.termux.dev/apt/termux-main stable main" > "$PREFIX/etc/apt/sources.list"
+  apt update >/dev/null 2>&1 || true
+  apt install -y openssh >/dev/null 2>&1 || true
+fi
+command -v sshd >/dev/null 2>&1 || die "openssh 装不上。手动执行：pkg install openssh"
+echo "  sshd=$(command -v sshd)"
+
+# ---------- 3. 公钥 + 起服务 ----------
+step "3/5 配置 SSH 免密登录"
+mkdir -p "$HOME/.ssh"; chmod 700 "$HOME/.ssh"
+touch "$HOME/.ssh/authorized_keys"; chmod 600 "$HOME/.ssh/authorized_keys"
+grep -qF "${PUBKEY%% *}" "$HOME/.ssh/authorized_keys" 2>/dev/null || echo "$PUBKEY" >> "$HOME/.ssh/authorized_keys"
+[ -f "$PREFIX/etc/ssh/ssh_host_ed25519_key" ] || ssh-keygen -A >/dev/null 2>&1
+pkill sshd 2>/dev/null; sleep 1
+nohup sshd >/dev/null 2>&1
+sleep 1
+if pgrep sshd >/dev/null 2>&1; then echo "  sshd 已启动（8022）"; else echo "  ! sshd 没起来，电脑端可能连不上"; fi
+
+# ---------- 4. 报到：电脑据此自动登记这台平板 ----------
+step "4/5 向电脑报到"
+USER_NAME="$(whoami)"
+if curl -fsS "$BASE/register?user=$USER_NAME&port=8022" >/dev/null 2>&1; then
+  echo "  已报到：$USER_NAME @ 8022"
+else
+  echo "  报到失败（不影响平板本地使用，只是电脑端暂时不能远程操作这台平板）"
+fi
+
+# ---------- 开机自启脚本（由 Termux:Boot 触发，装不装 Boot 应用都能先放好） ----------
+mkdir -p "$HOME/.termux/boot"
+cat > "$HOME/.termux/boot/start-dsh.sh" <<BOOTEOF
+#!/data/data/com.termux/files/usr/bin/bash
+export HOME=/data/data/com.termux/files/home
+export PREFIX=/data/data/com.termux/files/usr
+export PATH=\$PREFIX/bin:\$PATH
+{
+  echo "=== boot \$(date '+%Y-%m-%d %H:%M:%S') ==="
+  command -v termux-wake-lock >/dev/null 2>&1 && termux-wake-lock
+  sleep 8
+  [ -x "\$HOME/start-dsh.sh" ] && bash "\$HOME/start-dsh.sh" || echo "missing \$HOME/start-dsh.sh"
+} >> "\$HOME/dsh-boot.log" 2>&1
+BOOTEOF
+chmod +x "$HOME/.termux/boot/start-dsh.sh"
+echo "  开机脚本已放好：~/.termux/boot/start-dsh.sh（装了 Termux:Boot 才会自动执行）"
+
+__SKIP_DSH__
+
+# ---------- 5. 装 DSH 本体 ----------
+step "5/5 安装 DSH 本体（node → dsh → 原生绑定 → 两个安卓补丁 → 起服务）"
+cd "$HOME" || die "无法进入 HOME 目录"
+curl -fL -o dsh-android-kit.tgz "$BASE/kit.tgz" || die "下载套件失败，检查网络后重跑"
+rm -rf "$HOME/dsh-android-kit"
+tar -xzf dsh-android-kit.tgz -C "$HOME" || die "解压失败"
+bash "$HOME/dsh-android-kit/setup.sh"

package/kit/dsh-home.js

@@ -0,0 +1,33 @@
+const http = require('http');
+const fs = require('fs');
+
+const DIR = '/data/data/com.termux/files/home/dshpad';
+
+function currentUrl() {
+  try {
+    const t = fs.readFileSync(DIR + '/url.txt', 'utf8').trim();
+    if (t.startsWith('http')) return t;
+  } catch (e) {}
+  try {
+    const log = fs.readFileSync(DIR + '/web.log', 'utf8');
+    const m = log.match(/http:\/\/127\.0\.0\.1:3080\/\?token=[A-Za-z0-9_-]+/g);
+    if (m && m.length) return m[m.length - 1];
+  } catch (e) {}
+  return null;
+}
+
+http.createServer((req, res) => {
+  if (req.url.startsWith('/healthz')) {
+    res.writeHead(200, { 'content-type': 'text/plain' });
+    res.end('ok');
+    return;
+  }
+  const target = currentUrl();
+  if (!target) {
+    res.writeHead(503, { 'content-type': 'text/html; charset=utf-8' });
+    res.end('<meta name="viewport" content="width=device-width,initial-scale=1"><body style="font:20px sans-serif;padding:24px">DSH 还没有启动。<br>请在 Termux 里运行：<br><code>bash ~/start-dsh.sh</code></body>');
+    return;
+  }
+  res.writeHead(302, { location: target, 'cache-control': 'no-store' });
+  res.end();
+}).listen(3081, '127.0.0.1', () => console.log('HOME LISTENING 3081'));

package/kit/install-addon.sh

@@ -0,0 +1,56 @@
+#!/data/data/com.termux/files/usr/bin/bash
+# 把编译好的 require_builtin.node 安装成 node-addon-require-builtin-android-arm64 可选包
+# 用法：install-addon.sh <require_builtin.node 路径> <目标目录>
+set -eu
+BIN="${1:?需要 require_builtin.node 路径}"
+TARGET="${2:?需要目标目录}"
+
+[ -f "$BIN" ] || { echo "找不到 $BIN"; exit 1; }
+
+rm -rf "$TARGET"
+mkdir -p "$TARGET/prebuilt"
+cp "$BIN" "$TARGET/prebuilt/android-arm64-napi-v9.node"
+chmod 755 "$TARGET/prebuilt/android-arm64-napi-v9.node"
+
+cat > "$TARGET/package.json" <<'EOF'
+{
+  "name": "node-addon-require-builtin-android-arm64",
+  "version": "0.1.9",
+  "description": "Locally built android-arm64 native addon package for node-addon-require-builtin.",
+  "main": "./index.js",
+  "os": ["android"],
+  "cpu": ["arm64"],
+  "engines": { "node": ">=20" },
+  "files": ["index.js", "prebuilds.json", "prebuilt/"],
+  "dependencies": { "node-addon-native-custom-loader": "*" },
+  "license": "MIT"
+}
+EOF
+
+cat > "$TARGET/prebuilds.json" <<'EOF'
+{
+  "platform": "android-arm64",
+  "binaries": [
+    {
+      "backend": "napi",
+      "abi": "napi-v9",
+      "binaryTag": "napi-v9",
+      "node": ">=20",
+      "path": "prebuilt/android-arm64-napi-v9.node"
+    }
+  ]
+}
+EOF
+
+cat > "$TARGET/index.js" <<'EOF'
+'use strict';
+const { loadPrebuild } = require('node-addon-native-custom-loader');
+module.exports = loadPrebuild(__dirname);
+EOF
+
+echo "[install-addon] 已安装到 $TARGET"
+node -e "
+const addon = require(process.argv[1]);
+console.log('[install-addon] requireBuiltin=' + typeof addon.requireBuiltin);
+console.log('[install-addon] info=' + JSON.stringify(addon.getNativeBindingInfo()));
+" "$TARGET" 2>&1 || true

package/kit/patch-flock.js

@@ -0,0 +1,75 @@
+#!/data/data/com.termux/files/usr/bin/node
+/*
+ * Android 兼容补丁 1/2：flock
+ *
+ * 官方 @deepseek-ai/node-addon-system 没有发布 android-arm64 的编译产物，
+ * 源码里写死 platform !== 'linux' && platform !== 'darwin' 就抛错。
+ * 这里把 Android 视为支持平台，并把锁降级为无操作（单实例本地运行不需要跨进程锁）。
+ *
+ * 幂等：已打过就跳过。
+ */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { execSync } = require('node:child_process');
+
+const MARK = 'PATCHED-ANDROID-FLOCK';
+
+function dshRoot() {
+  const cands = [];
+  if (process.env.PREFIX) cands.push(path.join(process.env.PREFIX, 'lib/node_modules/@deepseek-ai/dsh'));
+  try {
+    const root = execSync('npm root -g', { stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
+    if (root) cands.push(path.join(root, '@deepseek-ai/dsh'));
+  } catch (e) { /* npm 不可用就靠下面的候选 */ }
+  cands.push('/data/data/com.termux/files/usr/lib/node_modules/@deepseek-ai/dsh');
+  for (const candidate of cands) {
+    if (candidate && fs.existsSync(path.join(candidate, 'node_modules/@deepseek-ai/node-addon-system'))) return candidate;
+  }
+  return null;
+}
+
+const root = dshRoot();
+if (!root) {
+  console.error('[patch-flock] 找不到 dsh 安装目录');
+  process.exit(1);
+}
+
+const file = path.join(root, 'node_modules/@deepseek-ai/node-addon-system/lib/flock.js');
+if (!fs.existsSync(file)) {
+  console.error('[patch-flock] 找不到 ' + file);
+  process.exit(1);
+}
+
+let src = fs.readFileSync(file, 'utf8');
+if (src.includes(MARK)) {
+  console.log('[patch-flock] 已打过补丁，跳过');
+  process.exit(0);
+}
+
+const anchorGuard = "if (platform !== 'linux' && platform !== 'darwin') {";
+const anchorLock = 'export async function tryLockExclusive(fd) {';
+
+if (!src.includes(anchorGuard) || !src.includes(anchorLock)) {
+  console.error('[patch-flock] 代码结构变了，找不到锚点，请手动检查 ' + file);
+  process.exit(1);
+}
+
+src = src.replace(anchorGuard, "if (platform !== 'linux' && platform !== 'darwin' && platform !== 'android') {");
+
+const lockHead = anchorLock + '\n    const errno = await new Promise((resolve) => {';
+if (src.includes(lockHead)) {
+  src = src.replace(
+    lockHead,
+    anchorLock + '\n'
+      + '    // ' + MARK + ': Android 没有官方 flock 原生绑定，单实例本地运行下退化为无锁。\n'
+      + "    if (process.platform === 'android')\n        return;\n"
+      + '    const errno = await new Promise((resolve) => {',
+  );
+} else {
+  console.error('[patch-flock] tryLockExclusive 结构不匹配，请手动检查');
+  process.exit(1);
+}
+
+fs.writeFileSync(file, src, 'utf8');
+console.log('[patch-flock] 已打补丁：' + file + ' (' + Buffer.byteLength(src) + ' bytes)');

package/kit/patch-link.js

@@ -0,0 +1,133 @@
+#!/data/data/com.termux/files/usr/bin/node
+/*
+ * Android 兼容补丁 2/2：硬链接
+ *
+ * Android 的 /data 分区禁止 hardlink()（实测：ln 返回 Permission denied），
+ * 而 DSH 的会话持久化用 link() 做原子发布。这里把 link() 包成
+ * 「先试 link，遇到 EACCES/EPERM/ENOSYS/ENOTSUP/EOPNOTSUPP 就退化成 copyFile(...,1)」，
+ * 1 = COPYFILE_EXCL，保持原来「目标已存在就 EEXIST」的语义。
+ *
+ * 幂等：已打过就跳过。
+ */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { execSync } = require('node:child_process');
+
+const MARK = 'COPYFILE_EXCL: Android forbids hard links';
+const REL = 'node_modules/@deepseek-ai/dsh-session-persistence-jsonl/lib';
+
+function dshRoot() {
+  const cands = [];
+  if (process.env.PREFIX) cands.push(path.join(process.env.PREFIX, 'lib/node_modules/@deepseek-ai/dsh'));
+  try {
+    const root = execSync('npm root -g', { stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
+    if (root) cands.push(path.join(root, '@deepseek-ai/dsh'));
+  } catch (e) { /* 忽略，用下面的候选 */ }
+  cands.push('/data/data/com.termux/files/usr/lib/node_modules/@deepseek-ai/dsh');
+  for (const candidate of cands) {
+    if (candidate && fs.existsSync(path.join(candidate, REL))) return candidate;
+  }
+  return null;
+}
+
+function fallback(ind, srcExpr, dstExpr, copyExpr) {
+  const t = ind + '\t';
+  const codes = ['EACCES', 'EPERM', 'ENOSYS', 'ENOTSUP', 'EOPNOTSUPP'];
+  const cond = codes.map((c) => '__dshCode !== "' + c + '"').join(' && ');
+  return [
+    ind + 'try {',
+    t + 'await internals.fs.link(' + srcExpr + ', ' + dstExpr + ');',
+    ind + '} catch (__dshLinkError) {',
+    t + 'const __dshCode = __dshLinkError && __dshLinkError.code;',
+    t + 'if (' + cond + ') throw __dshLinkError;',
+    t + 'await ' + copyExpr + '(' + srcExpr + ', ' + dstExpr + ', 1); // ' + MARK,
+    ind + '}',
+  ].join('\n');
+}
+
+const root = dshRoot();
+if (!root) {
+  console.error('[patch-link] 找不到 dsh-session-persistence-jsonl，先装好 @deepseek-ai/dsh');
+  process.exit(1);
+}
+const BASE = path.join(root, REL);
+const IDX = path.join(BASE, 'index.js');
+const WRK = path.join(BASE, 'worker.cjs');
+
+let failed = false;
+const report = [];
+
+// ---- index.js ----
+try {
+  let src = fs.readFileSync(IDX, 'utf8');
+  if (src.includes(MARK)) {
+    report.push('index.js 已打过补丁，跳过');
+  } else {
+    const notes = [];
+    if (src.includes('import { link, lstat,')) {
+      src = src.replace('import { link, lstat,', 'import { copyFile, link, lstat,');
+      notes.push('补上 copyFile 导入');
+    } else if (src.includes('import { copyFile, link, lstat,')) {
+      notes.push('copyFile 导入已存在');
+    } else {
+      throw new Error('找不到 import { link, lstat, 锚点');
+    }
+
+    const site1 = /^([ \t]*)await internals\.fs\.link\(staged, currentPath\);$/m;
+    if (site1.test(src)) {
+      src = src.replace(site1, (m, ind) => fallback(ind, 'staged', 'currentPath', 'copyFile'));
+      notes.push('publishCurrentExclusive 已打补丁');
+    }
+
+    const site2 = /^([ \t]*)await link\(tmp, finalPath\);$/m;
+    if (site2.test(src)) {
+      src = src.replace(site2, (m, ind) => {
+        const t = ind + '\t';
+        const codes = ['EACCES', 'EPERM', 'ENOSYS', 'ENOTSUP', 'EOPNOTSUPP'];
+        const cond = codes.map((c) => '__dshCode !== "' + c + '"').join(' && ');
+        return [
+          ind + 'try {',
+          t + 'await link(tmp, finalPath);',
+          ind + '} catch (__dshLinkError) {',
+          t + 'const __dshCode = __dshLinkError && __dshLinkError.code;',
+          t + 'if (' + cond + ') throw __dshLinkError;',
+          t + 'await copyFile(tmp, finalPath, 1); // ' + MARK,
+          ind + '}',
+        ].join('\n');
+      });
+      notes.push('materializePosix 已打补丁');
+    }
+
+    if (notes.length === 0) throw new Error('两处 link 锚点都没找到');
+    fs.writeFileSync(IDX, src, 'utf8');
+    report.push('index.js：' + notes.join('，') + '（' + Buffer.byteLength(src) + ' 字节）');
+  }
+} catch (e) {
+  report.push('index.js 失败：' + e.message);
+  failed = true;
+}
+
+// ---- worker.cjs（可能不存在）----
+try {
+  if (!fs.existsSync(WRK)) {
+    report.push('worker.cjs 不存在，跳过');
+  } else {
+    let src = fs.readFileSync(WRK, 'utf8');
+    if (src.includes(MARK)) {
+      report.push('worker.cjs 已打过补丁，跳过');
+    } else {
+      const site1 = /^([ \t]*)await internals\.fs\.link\(staged, currentPath\);$/m;
+      if (!site1.test(src)) throw new Error('找不到 link(staged, currentPath) 锚点');
+      src = src.replace(site1, (m, ind) => fallback(ind, 'staged', 'currentPath', 'node_fs_promises.copyFile'));
+      fs.writeFileSync(WRK, src, 'utf8');
+      report.push('worker.cjs 已打补丁（' + Buffer.byteLength(src) + ' 字节）');
+    }
+  }
+} catch (e) {
+  report.push('worker.cjs 失败：' + e.message);
+  failed = true;
+}
+
+for (const line of report) console.log('[patch-link] ' + line);
+process.exit(failed ? 1 : 0);

package/kit/setup.sh

@@ -0,0 +1,125 @@
+#!/data/data/com.termux/files/usr/bin/bash
+# ---------------------------------------------------------------------------
+# DSH Android (Termux) 一键安装器
+#   在平板的 Termux 里执行：bash setup.sh
+#   作用：装 node → 装 dsh → 编译 android-arm64 原生绑定 → 打 3 个补丁
+#        → 起服务（3080）+ 固定入口（3081）→ 打印可打开的网址
+# ---------------------------------------------------------------------------
+set -u
+KIT_DIR="$(cd "$(dirname "$0")" && pwd)"
+HOME_DIR="${HOME:-/data/data/com.termux/files/home}"
+PREFIX_DIR="${PREFIX:-/data/data/com.termux/files/usr}"
+
+LOGDIR="$HOME_DIR/.dsh-kit/logs"
+mkdir -p "$LOGDIR" 2>/dev/null
+
+log() { printf '\n[kit] %s\n' "$*"; }
+warn() { printf '[kit] ! %s\n' "$*"; }
+fail() { printf '\n[kit] 失败：%s\n' "$*"; exit 1; }
+
+log "DSH Android 安装器"
+log "kit 目录：$KIT_DIR"
+log "HOME：$HOME_DIR"
+
+ARCH="$(uname -m 2>/dev/null || echo unknown)"
+case "$ARCH" in
+  aarch64|arm64) ;;
+  *) fail "只支持 arm64/aarch64 平板，当前是 $ARCH" ;;
+esac
+
+# ---------------------------------------------------------------------------
+# 1. 基础依赖
+# ---------------------------------------------------------------------------
+log "1/6 检查并安装依赖：nodejs clang make python3 binutils tar"
+if command -v pkg >/dev/null 2>&1; then
+  pkg install -y nodejs clang make python3 binutils tar >$LOGDIR/kit-pkg.log 2>&1 || warn "pkg install 有警告，见 $LOGDIR/kit-pkg.log"
+else
+  warn "没有 pkg 命令，假定依赖已手动装好"
+fi
+
+command -v node >/dev/null 2>&1 || fail "node 没装上"
+command -v npm >/dev/null 2>&1 || fail "npm 没装上"
+log "    node $(node -v) / npm $(npm -v)"
+command -v clang >/dev/null 2>&1 || warn "没有 clang，编译原生绑定大概率失败"
+
+# ---------------------------------------------------------------------------
+# 2. 安装 DSH CLI
+# ---------------------------------------------------------------------------
+log "2/6 检查 DSH CLI"
+if command -v dsh >/dev/null 2>&1; then
+  log "    已安装：$(dsh --version 2>&1 | head -n 1)"
+else
+  log "    正在安装 @deepseek-ai/dsh（--ignore-scripts，跳过 koffi 的 cmake 编译）"
+  npm i -g @deepseek-ai/dsh --ignore-scripts --no-audit --no-fund >$LOGDIR/kit-npm.log 2>&1 \
+    || { tail -n 20 $LOGDIR/kit-npm.log; fail "npm 安装 dsh 失败（见 $LOGDIR/kit-npm.log）"; }
+  command -v dsh >/dev/null 2>&1 || fail "dsh 装完但不在 PATH"
+fi
+
+PKG_ROOT="$(npm root -g 2>/dev/null)"
+DSH_DIR="$PKG_ROOT/@deepseek-ai/dsh"
+[ -d "$DSH_DIR" ] || fail "找不到 dsh 安装目录：$DSH_DIR"
+
+# ---------------------------------------------------------------------------
+# 3. 编译 android-arm64 原生绑定（官方没发布）
+# ---------------------------------------------------------------------------
+log "3/6 检查 node-addon-require-builtin 的 android-arm64 绑定"
+ADDON_DIR="$(find "$PKG_ROOT" -type d -name 'node-addon-require-builtin' -not -path '*-android-arm64*' 2>/dev/null | head -n 1)"
+[ -n "${ADDON_DIR:-}" ] || fail "找不到 node-addon-require-builtin 包"
+TARGET_DIR="$(dirname "$ADDON_DIR")/node-addon-require-builtin-android-arm64"
+BINDING="$TARGET_DIR/prebuilt/android-arm64-napi-v9.node"
+
+if [ -f "$BINDING" ]; then
+  log "    已存在，跳过编译：$BINDING"
+else
+  log "    开始编译（1～3 分钟，取决于平板性能）"
+  WORK="$HOME_DIR/.dsh-kit/narb"
+  rm -rf "$WORK"; mkdir -p "$WORK"
+  tar -xzf "$KIT_DIR/narb-build.tgz" -C "$WORK" || fail "解压 narb-build.tgz 失败"
+  ( cd "$WORK" \
+      && npm install --no-audit --no-fund >$LOGDIR/kit-narb-npm.log 2>&1 \
+      && ./node_modules/.bin/node-gyp rebuild --nodedir="$PREFIX_DIR" \
+           --python="$(command -v python3)" -j 4 >$LOGDIR/kit-narb-build.log 2>&1 ) \
+    || { tail -n 30 $LOGDIR/kit-narb-build.log 2>/dev/null; fail "原生绑定编译失败（见 $LOGDIR/kit-narb-build.log）"; }
+  [ -f "$WORK/build/Release/require_builtin.node" ] || fail "编译没产出 require_builtin.node"
+  bash "$KIT_DIR/install-addon.sh" "$WORK/build/Release/require_builtin.node" "$TARGET_DIR" \
+    || fail "安装原生绑定包失败"
+fi
+
+# ---------------------------------------------------------------------------
+# 4. 打补丁（flock / 硬链接）
+# ---------------------------------------------------------------------------
+log "4/6 打 Android 兼容补丁"
+node "$KIT_DIR/patch-flock.js" || fail "flock 补丁失败"
+node "$KIT_DIR/patch-link.js"  || fail "硬链接补丁失败"
+
+# ---------------------------------------------------------------------------
+# 5. 安装启动脚本与固定入口
+# ---------------------------------------------------------------------------
+log "5/6 安装启动脚本"
+install -m 644 "$KIT_DIR/dsh-home.js"  "$HOME_DIR/dsh-home.js"  || fail "安装 dsh-home.js 失败"
+install -m 755 "$KIT_DIR/start-dsh.sh" "$HOME_DIR/start-dsh.sh" || fail "安装 start-dsh.sh 失败"
+mkdir -p "$HOME_DIR/dshpad"
+
+# ---------------------------------------------------------------------------
+# 6. 启动
+# ---------------------------------------------------------------------------
+log "6/6 启动 DSH 与固定入口"
+bash "$HOME_DIR/start-dsh.sh"
+
+FIXED="http://127.0.0.1:3081/"
+TOKEN_URL="$(cat "$HOME_DIR/dshpad/url.txt" 2>/dev/null)"
+cat <<EOF
+
+============================================================
+ 安装完成
+------------------------------------------------------------
+ 固定网址（以后只记这个，重启后仍可用）：$FIXED
+ 当前 token 直连：${TOKEN_URL:-（未取到，见 ~/dshpad/web.log）}
+
+ 在平板浏览器打开后：
+   菜单 → 添加到主屏幕，以后一点就进
+
+ 平板重启 / Termux 被杀后重新拉起：
+   bash ~/start-dsh.sh
+============================================================
+EOF

package/kit/start-dsh.sh

@@ -0,0 +1,39 @@
+#!/data/data/com.termux/files/usr/bin/bash
+export HOME=/data/data/com.termux/files/home
+mkdir -p $HOME/dshpad
+termux-wake-lock 2>/dev/null
+
+echo "=== 停掉旧的 dsh 与旧入口 ==="
+pkill -f 'dsh --profile web' 2>/dev/null
+pkill -f dsh-home.js 2>/dev/null
+sleep 2
+
+echo "=== 启动 dsh web ==="
+rm -f $HOME/dshpad/web.log $HOME/dshpad/url.txt
+nohup dsh --profile web --host 127.0.0.1 --port 3080 --no-open > $HOME/dshpad/web.log 2>&1 &
+
+URL=""
+for i in $(seq 1 40); do
+  URL=$(grep -o 'http://127.0.0.1:3080/?token=[A-Za-z0-9_-]*' $HOME/dshpad/web.log 2>/dev/null | tail -1)
+  [ -n "$URL" ] && break
+  sleep 1
+done
+
+if [ -z "$URL" ]; then
+  echo "FAILED: 没有拿到 token URL"
+  tail -20 $HOME/dshpad/web.log
+  exit 1
+fi
+echo "$URL" > $HOME/dshpad/url.txt
+echo "TOKEN_URL=$URL"
+
+echo "=== 启动固定入口 3081 ==="
+nohup node $HOME/dsh-home.js > $HOME/dshpad/home.log 2>&1 &
+sleep 2
+cat $HOME/dshpad/home.log
+
+echo "=== 自检 ==="
+curl -s -o /dev/null -w "home=%{http_code}\n" http://127.0.0.1:3081/
+curl -s -o /dev/null -w "direct=%{http_code}\n" "http://127.0.0.1:3080/?token=$(echo "$URL" | sed 's/.*token=//')"
+curl -sI http://127.0.0.1:3081/ | grep -i '^location' | head -1
+echo "FIXED_URL=http://127.0.0.1:3081/"