dsh-plugin-dshm 0.0.0-stage → 0.1.0

package/lib/server/uploads.d.ts

@@ -0,0 +1,21 @@
+import type { DmpObject } from '../types.js';
+/** Connection-local upload buffers; no unverified bytes cross the projection boundary. */
+export declare class Uploads {
+    private readonly allocate;
+    private readonly send;
+    private readonly commit;
+    private uploads;
+    private streams;
+    constructor(allocate: () => number, send: (frame: DmpObject) => unknown, commit: (sessionId: string, name: string, mime: string, bytes: Uint8Array, signal: AbortSignal) => Promise<{
+        attachmentId: string;
+    }>);
+    private touch;
+    private remove;
+    begin(params: DmpObject): DmpObject;
+    receive(frame: Buffer, maxChunkBytes: number): void;
+    finish(id: string, signal: AbortSignal): Promise<{
+        attachmentId: string;
+    }>;
+    abort(streamId: number): void;
+    dispose(): void;
+}

package/lib/server/uploads.js

@@ -0,0 +1,74 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { DmpError } from '../errors.js';
+/** Connection-local upload buffers; no unverified bytes cross the projection boundary. */
+export class Uploads {
+    allocate;
+    send;
+    commit;
+    uploads = new Map();
+    streams = new Map();
+    constructor(allocate, send, commit) {
+        this.allocate = allocate;
+        this.send = send;
+        this.commit = commit;
+    }
+    touch(upload) {
+        clearTimeout(upload.timer);
+        upload.timer = setTimeout(() => { this.remove(upload); this.send({ t: 'stream.abort', streamId: upload.streamId, code: 'timeout' }); }, 30000);
+        upload.timer.unref();
+    }
+    remove(upload) {
+        clearTimeout(upload.timer);
+        this.uploads.delete(upload.id);
+        this.streams.delete(upload.streamId);
+    }
+    begin(params) {
+        const limit = ['image/png', 'image/jpeg', 'image/webp', 'image/gif'].includes(String(params.mime)) ? 20 * 1024 * 1024 : 32 * 1024 * 1024;
+        if (Number(params.size) > limit)
+            throw new DmpError('too-large', 'Attachment exceeds upload limit', { limit });
+        if (this.uploads.size >= 3)
+            throw new DmpError('busy');
+        const upload = { id: randomUUID(), streamId: this.allocate(), sessionId: String(params.sessionId), name: String(params.name), mime: String(params.mime),
+            size: Number(params.size), sha256: String(params.sha256), chunks: [], received: 0, final: false };
+        this.uploads.set(upload.id, upload);
+        this.streams.set(upload.streamId, upload);
+        this.touch(upload);
+        return { uploadId: upload.id, streamId: upload.streamId };
+    }
+    receive(frame, maxChunkBytes) {
+        if (frame.length < 5 || frame.length - 5 > maxChunkBytes || (frame[4] & ~1))
+            throw new DmpError('bad-frame');
+        const upload = this.streams.get(frame.readUInt32BE(0));
+        if (!upload || upload.final)
+            throw new DmpError('bad-frame');
+        const bytes = frame.subarray(5);
+        if (upload.received + bytes.length > upload.size)
+            throw new DmpError('bad-frame');
+        upload.chunks.push(bytes);
+        upload.received += bytes.length;
+        upload.final = frame[4] === 1;
+        this.touch(upload);
+        // Ack every chunk, which is stricter than the required 1 MiB cadence.
+        this.send({ t: 'stream.ack', streamId: upload.streamId, bytes: upload.received });
+    }
+    async finish(id, signal) {
+        const upload = this.uploads.get(id);
+        if (!upload)
+            throw new DmpError('not-found');
+        if (!upload.final)
+            throw new DmpError('invalid-params', 'Upload has no final frame');
+        this.remove(upload);
+        if (upload.received !== upload.size)
+            throw new DmpError('invalid-params', 'Upload size mismatch');
+        const bytes = Buffer.concat(upload.chunks);
+        if (createHash('sha256').update(bytes).digest('hex') !== upload.sha256)
+            throw new DmpError('invalid-params', 'Upload hash mismatch');
+        if (signal.aborted)
+            throw new DmpError('cancelled');
+        return this.commit(upload.sessionId, upload.name, upload.mime, bytes, signal);
+    }
+    abort(streamId) { const upload = this.streams.get(streamId); if (upload)
+        this.remove(upload); }
+    dispose() { for (const upload of this.uploads.values())
+        this.remove(upload); }
+}

package/lib/types.d.ts

@@ -0,0 +1,92 @@
+import type { Capability, HostInfo, Device } from './protocol/dmp.js';
+import type { PushMethods } from './push/controller.js';
+export type DmpObject = Record<string, unknown>;
+export interface DmpEvent {
+    kind: string;
+    data: DmpObject;
+}
+export type WatchMethod = 'sessions.watch' | 'session.watch' | 'jobs.watch' | 'job.watch';
+export type ContentMethod = 'tool.output' | 'timeline.text' | 'files.download' | 'deliverables.download';
+export interface ProjectionWatch {
+    result: DmpObject;
+    dispose(): void | Promise<void>;
+}
+export interface ProjectionPeer {
+    upload(sessionId: string, name: string, mime: string, bytes: Uint8Array, signal: AbortSignal): Promise<{
+        attachmentId: string;
+    }>;
+    create(workspaceId: string, sessionId: string, signal: AbortSignal): Promise<{
+        sessionId: string;
+    }>;
+    request(method: string, params: DmpObject, signal: AbortSignal): Promise<DmpObject>;
+    watch(method: WatchMethod, params: DmpObject, emit: (event: DmpEvent) => void, signal: AbortSignal): Promise<ProjectionWatch>;
+    content(method: ContentMethod, params: DmpObject, signal: AbortSignal): Promise<Uint8Array>;
+    dispose(): void | Promise<void>;
+}
+export interface ProjectionHost {
+    version: string;
+    status: 'ok' | 'incompatible' | 'unavailable';
+    connect(deviceId: string): Promise<ProjectionPeer>;
+    diagnostics?(): {
+        activePeers: number;
+        createdPeers: number;
+        disposedPeers: number;
+    };
+    dispose(): void | Promise<void>;
+}
+export type Reply = {
+    result: DmpObject;
+} | {
+    bytes: Uint8Array;
+    mime?: string;
+};
+export interface ConnectionMethods {
+    upload?(sessionId: string, name: string, mime: string, bytes: Uint8Array, signal: AbortSignal): Promise<{
+        attachmentId: string;
+    }>;
+    request(method: string, params: DmpObject, signal: AbortSignal): Promise<Reply>;
+    dispose(): void | Promise<void>;
+}
+export interface ServerIdentity {
+    host: HostInfo;
+    version: string;
+    instanceId: string;
+    dshVersion: string;
+    dshStatus: ProjectionHost['status'];
+    caps: Capability[];
+}
+export interface DeviceService {
+    list(): Device[];
+    rename(deviceId: string, name: string): Device;
+    revoke(deviceId: string): void;
+    watch(changed: () => void): () => void;
+}
+export interface MethodContext {
+    push?: PushMethods;
+    uploads: {
+        begin(params: DmpObject): DmpObject;
+        finish(uploadId: string, signal: AbortSignal): Promise<{
+            attachmentId: string;
+        }>;
+    };
+    devices: DeviceService;
+    deviceId: string;
+    identity: ServerIdentity;
+    emit(sub: string, event: DmpEvent): void;
+}
+export interface BridgeServerOptions {
+    onAuthenticated?(deviceId: string): void;
+    onRevoked?(deviceId: string): void;
+    onAddresses?(addresses: string[], port: number): Promise<void> | void;
+    stateDir: string;
+    port: number;
+    addresses?: string[];
+    bindMode?: 'lan' | 'tailscale' | 'all-private';
+    pairing?: boolean;
+    quiet?: boolean;
+    version: string;
+    dshVersion: string;
+    dshStatus: ProjectionHost['status'];
+    caps: Capability[];
+    connect(context: MethodContext): Promise<ConnectionMethods>;
+}

package/lib/types.js

@@ -0,0 +1 @@
+export {};

package/lib/ui/card.d.mts

@@ -0,0 +1,3 @@
+export function createSettingsCard(React: any, { Button }: {
+    Button: any;
+}, apiBase: any): () => any;

package/lib/ui/card.mjs

@@ -0,0 +1,59 @@
+// DMP-shaped host controls; all native module/slot knowledge stays in projection/.
+import { useCopy, guidanceCopy } from './copy.mjs';
+import { createRemoteSetup } from './remote-setup.mjs';
+export function createSettingsCard(React, { Button }, apiBase) {
+    const h = React.createElement;
+    const RemoteSetup = createRemoteSetup(React, { Button });
+    const icon = (kind) => h('svg', { width: 18, height: 18, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 1.8, 'aria-hidden': true }, h('path', { d: kind === 'pair' ? 'M4 4h6v6H4zM14 4h6v6h-6zM4 14h6v6H4zM14 14h2v2h-2zM18 14h2v6h-6v-2' : 'M5 7h14M9 7V4h6v3M7 7l1 13h8l1-13M10 10v7M14 10v7' }));
+    const style = `.dshm-card{color:var(--dsw-alias-label-primary);font:inherit;font-size:16px;line-height:1.5;display:grid;gap:24px}.dshm-card h2,.dshm-card h3,.dshm-card p{margin:0}.dshm-card h2{font-size:20px}.dshm-card h3{font-size:16px}.dshm-card button{min-height:44px;gap:8px}.dshm-card button:focus-visible,.dshm-link-button:focus-visible{outline:2px solid var(--dsw-alias-label-primary);outline-offset:3px}.dshm-row{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap}.dshm-muted{color:var(--dsw-alias-label-secondary);font-size:14px}.dshm-panel{padding:16px;border:1px solid var(--dsw-alias-border-primary,currentColor);border-radius:var(--dsw-radius-md,12px);display:grid;gap:12px}.dshm-qr{display:block;width:256px;max-width:100%;height:auto;background:white;border-radius:8px}.dshm-devices{list-style:none;margin:0;padding:0;display:grid;gap:12px}.dshm-device{padding:14px 0;border-bottom:1px solid var(--dsw-alias-border-primary,currentColor)}.dshm-actions{display:flex;gap:8px;flex-wrap:wrap}.dshm-setup-steps{margin:0;padding-left:24px;display:grid;gap:24px}.dshm-setup-steps li{display:grid;gap:12px;min-width:0}.dshm-link-button{display:inline-flex;align-items:center;min-height:44px;padding:8px 12px;border:1px solid var(--dsw-alias-border-primary,currentColor);border-radius:var(--dsw-radius-md,12px);color:inherit;text-decoration:underline;box-sizing:border-box}.dshm-error{color:var(--dsw-alias-danger-label,#b42318)}.dshm-guidance{padding:14px 16px;background:var(--dsw-alias-bg-layer-3);border-radius:var(--dsw-radius-md,12px)}@media(max-width:480px){.dshm-row{align-items:flex-start}.dshm-qr{width:224px}}`;
+    return function SettingsCard() {
+        const { language, copy } = useCopy(React);
+        const [status, setStatus] = React.useState(null), [devices, setDevices] = React.useState([]);
+        const [pairing, setPairing] = React.useState(null), [busy, setBusy] = React.useState(false);
+        const [error, setError] = React.useState(''), [confirm, setConfirm] = React.useState(null), [now, setNow] = React.useState(Date.now());
+        const [remoteOpen, setRemoteOpen] = React.useState(false);
+        const pairPanel = React.useRef(null);
+        React.useEffect(() => { if (pairing)
+            pairPanel.current?.focus(); }, [pairing?.expiresAt]);
+        const api = async (route, body) => {
+            const response = await fetch(`${apiBase}/${route}`, { method: body === undefined ? 'GET' : 'POST', credentials: 'same-origin', cache: 'no-store', headers: body === undefined ? {} : { 'Content-Type': 'application/json' }, body: body === undefined ? undefined : JSON.stringify(body), signal: AbortSignal.timeout(6000) });
+            if (!response.ok)
+                throw new Error(route === 'pairRemote' && response.status === 409 ? '409' : 'requestError');
+            return response.json();
+        };
+        const refresh = async () => { const [next, list] = await Promise.all([api('status'), api('devices')]); setStatus(next); setDevices(list.devices); if (!next.pairing.active)
+            setPairing(null); };
+        React.useEffect(() => {
+            let live = true;
+            const poll = async () => { try {
+                const [next, list] = await Promise.all([api('status'), api('devices')]);
+                if (live) {
+                    setStatus(next);
+                    setDevices(list.devices);
+                    if (!next.pairing.active)
+                        setPairing(null);
+                }
+            }
+            catch {
+                if (live)
+                    setError('bridgeError');
+            } };
+            void poll();
+            const timer = setInterval(poll, 2000), clock = setInterval(() => setNow(Date.now()), 1000);
+            return () => { live = false; clearInterval(timer); clearInterval(clock); };
+        }, []);
+        const action = async (work) => { setBusy(true); setError(''); try {
+            await work();
+            await refresh();
+        }
+        catch (failure) {
+            setError(failure.message);
+        }
+        finally {
+            setBusy(false);
+        } };
+        const seconds = pairing ? Math.max(0, Math.ceil((Date.parse(pairing.expiresAt) - now) / 1000)) : 0;
+        const button = (label, onClick, variant = 'outline', glyph) => h(Button, { variant, disabled: busy, onClick }, glyph ? icon(glyph) : null, label);
+        return h('section', { className: 'dshm-card', 'aria-label': copy.cardLabel, lang: language }, h('style', null, style), h('div', { className: 'dshm-row' }, h('div', null, h('h2', null, 'DSHM'), h('p', { className: 'dshm-muted' }, status ? `${copy.connectedCount(status.connectedDevices)} · ${status.addresses.length ? copy.listening : copy.noNetwork}` : copy.loading)), button(busy ? copy.working : copy.pair, () => action(async () => { const next = await api('pair', {}); setNow(Date.now()); setPairing(next); }), 'primary', 'pair')), error ? h('div', { className: 'dshm-panel', role: 'alert' }, h('p', { className: 'dshm-error' }, copy[error] ?? copy.requestError), button(copy.retry, () => action(refresh))) : null, pairing && seconds > 0 ? h('div', { className: 'dshm-panel', ref: pairPanel, tabIndex: -1, 'aria-label': copy.qrLabel }, h('h3', null, copy.scan), h('img', { className: 'dshm-qr', src: `data:image/svg+xml;base64,${btoa(pairing.svg)}`, alt: copy.qrAlt }), h('p', { role: 'timer', 'aria-live': 'off' }, copy.expires(`${Math.floor(seconds / 60)}:${String(seconds % 60).padStart(2, '0')}`)), button(copy.cancelPair, () => action(async () => { await api('cancelPair', {}); setPairing(null); }))) : null, ...(status?.guidance ?? []).map(text => h('p', { className: 'dshm-guidance', key: text }, guidanceCopy(text, copy))), status?.discovery.state === 'unavailable' ? h('p', { role: 'status' }, copy.bonjour) : null, h('div', { className: 'dshm-row' }, h('h3', null, copy.away), h(Button, { variant: 'outline', 'aria-expanded': remoteOpen, 'aria-controls': 'dshm-remote-setup', onClick: () => setRemoteOpen(!remoteOpen) }, remoteOpen ? copy.closeSetup : copy.openSetup)), remoteOpen ? h(RemoteSetup, { api, copy, pairingBusy: busy, onPair: () => action(async () => { const next = await api('pairRemote', {}); setNow(Date.now()); setPairing(next); }) }) : null, h('div', null, h('h3', null, copy.devices), devices.length ? h('ul', { className: 'dshm-devices' }, ...devices.map(device => h('li', { className: 'dshm-device', key: device.deviceId }, h('div', { className: 'dshm-row' }, h('div', null, h('strong', null, device.name), h('p', { className: 'dshm-muted' }, `${device.connected ? device.connectedVia === 'tailscale' ? copy.viaTailscale : device.connectedVia === 'lan' ? copy.viaLAN : copy.connected : copy.offline} · ${device.lastSeenAt ? copy.lastSeen(new Date(device.lastSeenAt).toLocaleString(language)) : copy.notConnected}`)), confirm === device.deviceId ? h('div', null, h('p', null, copy.revokeQuestion(device.name)), h('div', { className: 'dshm-actions' }, button(copy.cancel, () => setConfirm(null)), button(copy.revokeDevice, () => action(async () => { await api('revoke', { deviceId: device.deviceId }); setConfirm(null); }), 'outline', 'revoke'))) : button(copy.revoke, () => setConfirm(device.deviceId), 'outline', 'revoke'))))) : h('p', { className: 'dshm-muted' }, copy.noDevices)));
+    };
+}

package/lib/ui/copy.d.mts

@@ -0,0 +1,146 @@
+export function languageFor(hostLanguage: any, browserLanguage: any): "zh-CN" | "en";
+export function useCopy(React: any): {
+    language: any;
+    copy: any;
+};
+export function guidanceCopy(text: any, copy: any): any;
+export const copies: {
+    en: {
+        intro: string;
+        step1: string;
+        step2: string;
+        'step2.detail': string;
+        step3: string;
+        'step3.detail': string;
+        'step3.check': string;
+        'button.pairRemote': string;
+        'button.open': string;
+        'button.check': string;
+        away: string;
+        states: {
+            'not-installed': string[];
+            'needs-login': string[];
+            'needs-approval': string[];
+            stopped: string[];
+            starting: string[];
+            offline: string[];
+            unavailable: string[];
+            unsupported: string[];
+            'bridge-not-ready': string[];
+            ready: string[];
+            connected: string[];
+        };
+        '409': string;
+        requestError: string;
+        bridgeError: string;
+        setupError: string;
+        openError: string;
+        checkingTailscale: string;
+        unavailableStatus: string;
+        opening: string;
+        checking: string;
+        getComputer: string;
+        getPhone: string;
+        installDetail: string;
+        opened: string;
+        cardLabel: string;
+        connectedCount: (count: any) => string;
+        listening: string;
+        noNetwork: string;
+        loading: string;
+        working: string;
+        pair: string;
+        retry: string;
+        qrLabel: string;
+        scan: string;
+        qrAlt: string;
+        expires: (time: any) => string;
+        cancelPair: string;
+        guidanceMac: string;
+        guidanceWindows: string;
+        bonjour: string;
+        closeSetup: string;
+        openSetup: string;
+        devices: string;
+        viaTailscale: string;
+        viaLAN: string;
+        connected: string;
+        offline: string;
+        lastSeen: (date: any) => string;
+        notConnected: string;
+        revokeQuestion: (name: any) => string;
+        cancel: string;
+        revokeDevice: string;
+        revoke: string;
+        noDevices: string;
+    };
+    'zh-CN': {
+        intro: string;
+        step1: string;
+        step2: string;
+        'step2.detail': string;
+        step3: string;
+        'step3.detail': string;
+        'step3.check': string;
+        'button.pairRemote': string;
+        'button.open': string;
+        'button.check': string;
+        away: string;
+        states: {
+            'not-installed': string[];
+            'needs-login': string[];
+            'needs-approval': string[];
+            stopped: string[];
+            starting: string[];
+            offline: string[];
+            unavailable: string[];
+            unsupported: string[];
+            'bridge-not-ready': string[];
+            ready: string[];
+            connected: string[];
+        };
+        '409': string;
+        requestError: string;
+        bridgeError: string;
+        setupError: string;
+        openError: string;
+        checkingTailscale: string;
+        unavailableStatus: string;
+        opening: string;
+        checking: string;
+        getComputer: string;
+        getPhone: string;
+        installDetail: string;
+        opened: string;
+        cardLabel: string;
+        connectedCount: (count: any) => string;
+        listening: string;
+        noNetwork: string;
+        loading: string;
+        working: string;
+        pair: string;
+        retry: string;
+        qrLabel: string;
+        scan: string;
+        qrAlt: string;
+        expires: (time: any) => string;
+        cancelPair: string;
+        guidanceMac: string;
+        guidanceWindows: string;
+        bonjour: string;
+        closeSetup: string;
+        openSetup: string;
+        devices: string;
+        viaTailscale: string;
+        viaLAN: string;
+        connected: string;
+        offline: string;
+        lastSeen: (date: any) => string;
+        notConnected: string;
+        revokeQuestion: (name: any) => string;
+        cancel: string;
+        revokeDevice: string;
+        revoke: string;
+        noDevices: string;
+    };
+};

package/lib/ui/copy.mjs

@@ -0,0 +1,106 @@
+// DSH publishes its active locale on <html lang>; other carriers use the browser language.
+export function languageFor(hostLanguage, browserLanguage) {
+    const language = typeof hostLanguage === 'string' && hostLanguage.trim() ? hostLanguage : browserLanguage;
+    return /^zh(?:[-_]|$)/i.test(language ?? '') ? 'zh-CN' : 'en';
+}
+const readLanguage = () => languageFor(globalThis.document?.documentElement.lang, globalThis.navigator?.language);
+function subscribeLanguage(listener) {
+    const element = globalThis.document?.documentElement;
+    const observer = element && typeof MutationObserver !== 'undefined' ? new MutationObserver(listener) : undefined;
+    observer?.observe(element, { attributes: true, attributeFilter: ['lang'] });
+    globalThis.addEventListener?.('languagechange', listener);
+    return () => { observer?.disconnect(); globalThis.removeEventListener?.('languagechange', listener); };
+}
+export function useCopy(React) {
+    const language = React.useSyncExternalStore(subscribeLanguage, readLanguage, () => 'en');
+    return { language, copy: copies[language] };
+}
+export const copies = {
+    en: {
+        intro: 'Phone not on the same Wi-Fi as this computer? Use Tailscale. On the same Wi-Fi, nothing else is needed.',
+        step1: 'Connect this computer', step2: 'Connect your iPhone or iPad',
+        'step2.detail': 'Install Tailscale, sign in to the same account, and connect.',
+        step3: 'Pair with a fresh code',
+        'step3.detail': 'Connect Tailscale on both devices first. Paired on Wi-Fi before? Forget the computer in DSHM, revoke the old device below, then pair here.',
+        'step3.check': 'Test with your phone on cellular or a different Wi-Fi.',
+        'button.pairRemote': 'Pair for remote access', 'button.open': 'Open Tailscale', 'button.check': 'Check again', away: 'Not on the same Wi-Fi',
+        states: {
+            'not-installed': ['Install Tailscale on this computer', 'Use the official installer, then check again.'],
+            'needs-login': ['Sign in to Tailscale', 'Open Tailscale and finish signing in.'],
+            'needs-approval': ['Waiting for approval', 'Ask your Tailscale admin to approve this computer.'],
+            stopped: ['Tailscale is disconnected', 'Open Tailscale and choose Connect.'],
+            starting: ['Tailscale is starting', 'Check again in a moment.'],
+            offline: ['Tailscale is offline', "Check this computer's internet connection."],
+            unavailable: ["Couldn't check Tailscale", 'Open Tailscale, then check again.'],
+            unsupported: ['Set up your VPN manually', 'Automatic checks support Windows and macOS. Same-network pairing still works.'],
+            'bridge-not-ready': ['Tailscale connected, DSHM not ready yet', 'Check again in a few seconds. If it persists, check the firewall.'],
+            ready: ['Ready for remote pairing', 'No phone has connected over Tailscale yet.'],
+            connected: ['Phone connected over Tailscale', ''],
+        },
+        '409': 'Connect Tailscale on this computer, check again, then make a new code.',
+        requestError: 'DSHM could not complete this request. Try again.',
+        bridgeError: 'The bridge is unavailable. Check the host, then retry.',
+        setupError: 'Could not check remote setup. Check the host and retry. Local pairing is still available.',
+        openError: 'Could not open Tailscale on the host. Open it from the Start menu or Applications, then check again.',
+        checkingTailscale: 'Checking Tailscale…', unavailableStatus: 'Status unavailable', opening: 'Opening…', checking: 'Checking…',
+        getComputer: 'Get Tailscale for this computer', getPhone: 'Get Tailscale for iPhone or iPad',
+        installDetail: 'Run the installer on the computer running DSH. Complete installation and sign-in yourself; canceling leaves local pairing available.',
+        opened: 'Tailscale was opened on the host. Complete sign-in or choose Connect there, then return here.',
+        cardLabel: 'DSHM remote access', connectedCount: count => `${count} connected`, listening: 'Listening', noNetwork: 'No private network', loading: 'Loading bridge…',
+        working: 'Working…', pair: 'Pair a device', retry: 'Retry', qrLabel: 'Pairing QR code', scan: 'Scan with your iPhone', qrAlt: 'DSHM one-use pairing QR code',
+        expires: time => `Expires in ${time}`, cancelPair: 'Cancel pairing',
+        guidanceMac: 'Allow DeepSeek Harness under System Settings → Privacy & Security → Local Network. If you run dsh web in a terminal, allow that terminal too.',
+        guidanceWindows: 'Allow DeepSeek Harness on Private networks when Windows Firewall asks. Keep Public networks disabled.',
+        bonjour: 'Bonjour is unavailable on this network. Pairing still includes the host’s direct addresses.',
+        closeSetup: 'Close remote setup', openSetup: 'Set up remote access', devices: 'Paired devices',
+        viaTailscale: 'Connected via Tailscale', viaLAN: 'Connected via local network', connected: 'Connected', offline: 'Offline',
+        lastSeen: date => `Last seen ${date}`, notConnected: 'Not connected yet', revokeQuestion: name => `Revoke ${name}?`,
+        cancel: 'Cancel', revokeDevice: 'Revoke device', revoke: 'Revoke', noDevices: 'No paired devices.',
+    },
+    'zh-CN': {
+        intro: '手机和这台电脑不在同一 Wi-Fi？使用 Tailscale。在同一 Wi-Fi 下无需其他设置。',
+        step1: '连接这台电脑', step2: '连接 iPhone 或 iPad',
+        'step2.detail': '安装 Tailscale，登录同一账户并连接。',
+        step3: '用新的配对码配对',
+        'step3.detail': '请先在两台设备上连接 Tailscale。之前在 Wi-Fi 下配对过？在 DSHM 中移除这台电脑，在下方撤销旧设备，然后在此重新配对。',
+        'step3.check': '请让手机使用蜂窝网络或其他 Wi-Fi 进行测试。',
+        'button.pairRemote': '配对以远程访问', 'button.open': '打开 Tailscale', 'button.check': '再次检查', away: '不在同一 Wi-Fi',
+        states: {
+            'not-installed': ['在这台电脑上安装 Tailscale', '使用官方安装程序，然后再次检查。'],
+            'needs-login': ['登录 Tailscale', '打开 Tailscale 并完成登录。'],
+            'needs-approval': ['等待批准', '请 Tailscale 管理员批准这台电脑。'],
+            stopped: ['Tailscale 未连接', '打开 Tailscale 并选择“连接”。'],
+            starting: ['Tailscale 正在启动', '请稍后再次检查。'],
+            offline: ['Tailscale 离线', '请检查这台电脑的网络连接。'],
+            unavailable: ['无法检查 Tailscale', '打开 Tailscale 后再次检查。'],
+            unsupported: ['请手动设置 VPN', '自动检查仅支持 Windows 和 macOS。同一网络配对仍可使用。'],
+            'bridge-not-ready': ['Tailscale 已连接，DSHM 尚未就绪', '请几秒后再次检查。如持续出现，请检查防火墙。'],
+            ready: ['可以远程配对', '尚无手机通过 Tailscale 连接。'],
+            connected: ['手机已通过 Tailscale 连接', ''],
+        },
+        '409': '请在这台电脑上连接 Tailscale，再次检查后生成新的配对码。',
+        requestError: 'DSHM 无法完成此请求，请重试。', bridgeError: '桥接不可用，请检查电脑后重试。',
+        setupError: '无法检查远程设置，请检查电脑后重试。局域网配对仍可使用。',
+        openError: '无法在电脑上打开 Tailscale。请从“开始”菜单或“应用程序”中打开，然后再次检查。',
+        checkingTailscale: '正在检查 Tailscale…', unavailableStatus: '状态不可用', opening: '正在打开…', checking: '正在检查…',
+        getComputer: '获取电脑版 Tailscale', getPhone: '获取 iPhone 或 iPad 版 Tailscale',
+        installDetail: '请在运行 DSH 的电脑上安装，并亲自完成安装和登录。取消后仍可在局域网配对。',
+        opened: '已在电脑上打开 Tailscale。请完成登录或选择“连接”，然后返回此处。',
+        cardLabel: 'DSHM 远程访问', connectedCount: count => `${count} 台设备已连接`, listening: '正在监听', noNetwork: '没有私有网络', loading: '正在加载桥接…',
+        working: '正在处理…', pair: '配对设备', retry: '重试', qrLabel: '配对二维码', scan: '用 iPhone 扫描', qrAlt: 'DSHM 一次性配对二维码',
+        expires: time => `${time} 后过期`, cancelPair: '取消配对',
+        guidanceMac: '请在“系统设置 → 隐私与安全性 → 本地网络”中允许 DeepSeek Harness。如果在终端运行 dsh web，也请允许该终端。',
+        guidanceWindows: 'Windows 防火墙询问时，请允许 DeepSeek Harness 访问专用网络，并保持公用网络禁用。',
+        bonjour: '此网络上的 Bonjour 不可用，配对仍包含电脑的直接连接地址。',
+        closeSetup: '关闭远程设置', openSetup: '设置远程访问', devices: '已配对设备',
+        viaTailscale: '已通过 Tailscale 连接', viaLAN: '已通过局域网连接', connected: '已连接', offline: '离线',
+        lastSeen: date => `上次连接：${date}`, notConnected: '尚未连接', revokeQuestion: name => `撤销 ${name} 的访问权限？`,
+        cancel: '取消', revokeDevice: '撤销设备', revoke: '撤销', noDevices: '没有已配对设备。',
+    },
+};
+export function guidanceCopy(text, copy) {
+    for (const key of ['guidanceMac', 'guidanceWindows'])
+        if (text === copies.en[key])
+            return copy[key];
+    return text;
+}

package/lib/ui/remote-setup.d.mts

@@ -0,0 +1,81 @@
+export function setupPresentation(status: any, copy?: {
+    intro: string;
+    step1: string;
+    step2: string;
+    'step2.detail': string;
+    step3: string;
+    'step3.detail': string;
+    'step3.check': string;
+    'button.pairRemote': string;
+    'button.open': string;
+    'button.check': string;
+    away: string;
+    states: {
+        'not-installed': string[];
+        'needs-login': string[];
+        'needs-approval': string[];
+        stopped: string[];
+        starting: string[];
+        offline: string[];
+        unavailable: string[];
+        unsupported: string[];
+        'bridge-not-ready': string[];
+        ready: string[];
+        connected: string[];
+    };
+    '409': string;
+    requestError: string;
+    bridgeError: string;
+    setupError: string;
+    openError: string;
+    checkingTailscale: string;
+    unavailableStatus: string;
+    opening: string;
+    checking: string;
+    getComputer: string;
+    getPhone: string;
+    installDetail: string;
+    opened: string;
+    cardLabel: string;
+    connectedCount: (count: any) => string;
+    listening: string;
+    noNetwork: string;
+    loading: string;
+    working: string;
+    pair: string;
+    retry: string;
+    qrLabel: string;
+    scan: string;
+    qrAlt: string;
+    expires: (time: any) => string;
+    cancelPair: string;
+    guidanceMac: string;
+    guidanceWindows: string;
+    bonjour: string;
+    closeSetup: string;
+    openSetup: string;
+    devices: string;
+    viaTailscale: string;
+    viaLAN: string;
+    connected: string;
+    offline: string;
+    lastSeen: (date: any) => string;
+    notConnected: string;
+    revokeQuestion: (name: any) => string;
+    cancel: string;
+    revokeDevice: string;
+    revoke: string;
+    noDevices: string;
+}): {
+    title: any;
+    detail: any;
+    ready: boolean;
+};
+export function createRemoteSetup(React: any, { Button }: {
+    Button: any;
+}): ({ api, onPair, pairingBusy, copy }: {
+    api: any;
+    onPair: any;
+    pairingBusy: any;
+    copy: any;
+}) => any;