dsh-plugin-vrmpet3d 0.1.2 → 0.1.4

package/lib/index.js

@@ -17,7 +17,9 @@
 // boundary hub still provides a baseline; with no `webServer` service the pet
 // still runs from its built-in placeholder avatar and reports why.
 
-import { copyFileSync, createReadStream, existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { copyFileSync, createReadStream, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { createHash } from 'node:crypto';
 import { homedir } from 'node:os';
 import { basename, dirname, extname, isAbsolute, join, normalize, resolve, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -25,6 +27,7 @@ import { fileURLToPath } from 'node:url';
 import { SettingsStore, settingsFileFor } from './settings.js';
 // `VRMPET3D_*` with the pre-rename `PET3D_*` names as a fallback — see the module's own note.
 import { envVar } from './env.js';
+import { createLevelStore } from './mini-game-level-store.js';
 
 // `lib/core.js` is a classic script that publishes itself on the global — that is
 // how the client half reads it too, so importing it here is what keeps ONE list
@@ -54,6 +57,21 @@ import { COMPRESSED_SUFFIX, decompressBrotli, isCompressedMotionName } from './b
 /** The shared pure logic, published by the import above. */
 const core = globalThis.__VRMPET3D_CORE__;
 
+/** Resolve from the running CLI, not the plugin's dependencies or the Node executable.
+ * package.json is exported by the chat package; lib/client.js is intentionally not.
+ * Resolve the entry's symlink first so globally installed CLI shims work too.
+ */
+export function installRootFromDshEntry(entry = process.argv[1]) {
+  if (!entry) return null;
+  try {
+    const fromDsh = createRequire(realpathSync(entry));
+    const chatPackage = fromDsh.resolve('@deepseek-ai/dsh-client-ui-chat/package.json');
+    return dirname(dirname(dirname(dirname(chatPackage))));
+  } catch {
+    return null;
+  }
+}
+
 export const name = 'vrmpet3d';
 
 /**
@@ -208,6 +226,7 @@ export const ROUTES = {
    * guide's 偏好模型 step — one page plus one shared component, instead of two hand-kept copies of a grid.
    */
   picker: '/vrmpet3d/picker',
+  game: '/vrmpet3d/game',
   /**
    * The pet's live state, reported by the in-app pet and read by the floating window.
    *
@@ -267,6 +286,7 @@ export const WINDOW_SOURCES = new Set([
   // grid of thumbnails is exactly how the two would drift (and the operator asked for them to be identical).
   'model-picker.js',
   'picker-page.js',
+  'mini-game-core.js', 'mini-game-page.js', 'mini-game.css',
   // The stylesheet the TWO settings pages share. One file rather than a copy in each page's `<head>`: the two
   // render the same rows, tables and status lines, and a copy is how the two drift apart.
   'pages.css',
@@ -1808,7 +1828,43 @@ function sendJson(req, res, payload) {
  * copies of this drifted before — one capped at 64 KB and one not — and the route without the
  * cap is the one that reads an arbitrary upload into memory.
  */
+function allowWriteRequest(req, res) {
+  const headers = req.headers || {};
+  const site = headers['sec-fetch-site'];
+  if (site === 'cross-site') {
+    sendStatus(res, 403, 'cross-site writes are not allowed');
+    return false;
+  }
+  // This forbidden browser header describes the PUBLIC request, even when a proxy
+  // rewrites Host internally. A foreign web page cannot forge same-origin metadata.
+  if (site === 'same-origin' && headers.origin !== 'null') return true;
+  // Compare authority using the browser's scheme: TLS may terminate at a reverse proxy.
+  // Do not trust arbitrary X-Forwarded-* headers to authorize a different public host.
+  const source = headers.origin || headers.referer;
+  if (source) {
+    try {
+      const origin = new URL(source);
+      const target = new URL(`${origin.protocol}//${headers.host}`);
+      if (!/^https?:$/.test(origin.protocol) || origin.host !== target.host || target.username || target.password) throw new Error('origin');
+    } catch {
+      sendStatus(res, 403, 'a same-origin request is required');
+      return false;
+    }
+  } else if (site && site !== 'same-origin' && site !== 'none') {
+    sendStatus(res, 403, 'a same-origin request is required');
+    return false;
+  }
+  // Native/local clients have no browser Origin. Browser JSON writes below still require
+  // a non-safelisted content type, so text/plain cannot bypass the CORS preflight.
+  return true;
+}
+
 function readJsonBody(req, res, limit, onBody) {
+  if (!allowWriteRequest(req, res)) return;
+  if (!/^application\/json\s*(?:;|$)/i.test(String(req.headers?.['content-type'] || ''))) {
+    sendStatus(res, 415, 'application/json is required');
+    return;
+  }
   const chunks = [];
   let size = 0;
   let refused = false;
@@ -1852,6 +1908,12 @@ const MODEL_UPLOAD_LIMIT = 256 * 1024 * 1024;
  * and no callback at all once the response has been sent.
  */
 function readRawBody(req, res, limit, onBody) {
+  if (!allowWriteRequest(req, res)) return;
+  const mediaType = String(req.headers?.['content-type'] || '').split(';')[0].trim().toLowerCase();
+  if (!mediaType || ['text/plain', 'application/x-www-form-urlencoded', 'multipart/form-data'].includes(mediaType)) {
+    sendStatus(res, 415, 'a binary content type is required');
+    return;
+  }
   const chunks = [];
   let size = 0;
   let refused = false;
@@ -1888,18 +1950,32 @@ function methodAllowed(req, res) {
   return false;
 }
 
-/**
- * Stream one allowlisted file. Shared by the asset route and the motion route.
- *
- * Shared rather than copied: the size cap, the MIME table and the read-error
- * handling are the parts a second implementation would get subtly wrong, and a
- * motion has to be served exactly like a model.
- *
- * `root` is the directory the entry was scanned from. The id map is the
- * allowlist, but containment is re-checked here, so an entry that was somehow
- * built with a path outside its own root is refused rather than streamed.
- */
-function sendFile(req, res, target, root) {
+/** Private browser validators for a model or its sibling texture. */
+function modelCacheHeaders(target, stats, reload) {
+  // Include file identity as well as size/times: model IDs are positional and can
+  // later address a different file. Hash the identity so no server path is exposed.
+  const fingerprint = [realpathSync(target), stats.dev, stats.ino, stats.size, stats.mtimeMs, stats.ctimeMs].join('|');
+  return {
+    etag: `W/"${createHash('sha256').update(fingerprint).digest('hex')}"`,
+    // Store only in the user's browser. Revalidation still passes through proxy auth.
+    'cache-control': reload ? 'no-store' : 'private, no-cache',
+    'access-control-allow-origin': '*',
+    'x-content-type-options': 'nosniff',
+  };
+}
+
+function modelNotModified(req, res, headers, reload) {
+  if (reload) return false;
+  const requested = String(req.headers['if-none-match'] || '').split(',').map(value => value.trim());
+  const tag = headers.etag.replace(/^W\//, '');
+  if (!requested.some(value => value === '*' || value.replace(/^W\//, '') === tag)) return false;
+  res.writeHead(304, headers);
+  res.end();
+  return true;
+}
+
+/** Stream an allowlisted model/texture or motion; only model callers enable caching. */
+function sendFile(req, res, target, root, modelCache = null) {
   if (!isInside(root, target)) {
     sendStatus(res, 404, 'file not found');
     return;
@@ -1921,6 +1997,12 @@ function sendFile(req, res, target, root) {
     return;
   }
 
+  let cacheHeaders = {};
+  if (modelCache) {
+    try { cacheHeaders = modelCacheHeaders(target, stats, modelCache.reload); }
+    catch { sendStatus(res, 404, 'file not found'); return; }
+    if (modelNotModified(req, res, cacheHeaders, modelCache.reload)) return;
+  }
   const extension = extname(target).toLowerCase();
   const headers = {
     'content-type': MIME_TYPES[extension] ?? 'application/octet-stream',
@@ -1928,10 +2010,11 @@ function sendFile(req, res, target, root) {
     // The page is a different origin from this route in some shells, and the
     // bytes are the user's own local files, so a permissive read is correct.
     'access-control-allow-origin': '*',
-    // `no-store`: a user replacing a model file on disk must see the new one on
-    // reload, and these bytes are cheap to re-read locally.
+    // Motion callers retain no-store; model/texture callers override this with
+    // private storage and ETag validation so edited files still replace old bytes.
     'cache-control': 'no-store',
     'x-content-type-options': 'nosniff',
+    ...cacheHeaders,
   };
 
   try {
@@ -2023,7 +2106,7 @@ export function createModelInfoHandler(store) {
  * through the server-held id map, so a crafted id cannot name a file outside it.
  */
 /**
- * Unpacked model bytes, keyed by path + size + mtime — see the compressed branch in `createAssetHandler`.
+ * Unpacked model bytes, keyed by file identity and metadata — see `modelCacheHeaders`.
  *
  * Bounded like the thumbnail cache, and for the same reason: a model is megabytes, so an unbounded map of them is a leak with
  * a friendly name. Two or three entries cover switching between the models someone actually uses.
@@ -2056,6 +2139,8 @@ export function createAssetHandler(store) {
         return;
       }
     }
+    const reload = url.searchParams.has('v');
+    if (!isInside(entry.root, target)) { sendStatus(res, 404, 'file not found'); return; }
     /**
      * A COMPRESSED model is unpacked HERE, the way a compressed clip is on the motion route: the renderer is always handed a
      * plain VRM/GLB, so nothing downstream — the scene, the loaders, the bytes' own header check — has to know about brotli.
@@ -2072,8 +2157,15 @@ export function createAssetHandler(store) {
         sendStatus(res, 404, `cannot read the model: ${error.message}`);
         return;
       }
-      const key = `${target}|${stats.size}|${stats.mtimeMs}`;
-      let plain = modelBytesCache.get(key);
+      if (!stats.isFile()) { sendStatus(res, 404, 'not a file'); return; }
+      if (stats.size > MAX_ASSET_BYTES) { sendStatus(res, 413, 'file exceeds the asset byte limit'); return; }
+      let headers;
+      try { headers = modelCacheHeaders(target, stats, reload); }
+      catch { sendStatus(res, 404, 'file not found'); return; }
+      // Revalidation needs neither a disk read nor Brotli decompression.
+      if (modelNotModified(req, res, headers, reload)) return;
+      const key = headers.etag;
+      let plain = reload ? null : modelBytesCache.get(key);
       if (!plain) {
         try {
           plain = decompressBrotli(readFileSync(target));
@@ -2084,11 +2176,12 @@ export function createAssetHandler(store) {
         modelBytesCache.set(key, plain);
         while (modelBytesCache.size > MODEL_BYTES_CACHE_LIMIT) modelBytesCache.delete(modelBytesCache.keys().next().value);
       }
-      res.writeHead(200, { 'content-type': 'model/gltf-binary', 'content-length': String(plain.byteLength) });
-      res.end(Buffer.from(plain));
+      res.writeHead(200, { ...headers, 'content-type': 'model/gltf-binary', 'content-length': String(plain.byteLength) });
+      if (req.method === 'HEAD') { res.end(); return; }
+      res.end(plain);
       return;
     }
-    sendFile(req, res, target, entry.root);
+    sendFile(req, res, target, entry.root, { reload });
   };
 }
 
@@ -2278,6 +2371,8 @@ function sendBuffer(req, res, bytes, name) {
  * routes, the service and the stream listeners in one step.
  */
 export function apply(ctx, config = {}) {
+  const gameLevelStore = createLevelStore();
+  void gameLevelStore.start();
   const agents = ctx.get('agents');
   const hub = new VrmPet3DBoundaryHub({ agents });
 
@@ -2296,7 +2391,7 @@ export function apply(ctx, config = {}) {
   const whale = resolveWhaleMark({
     asar: envVar('DSH_ASAR') || undefined,
     resourcesPath: process.resourcesPath,
-    installRoot: findInstallRoot(dirname(process.execPath)),
+    installRoot: findInstallRoot(dirname(process.execPath)) || installRootFromDshEntry(),
     localFile: envVar('WHALE_FILE') || join(PLUGIN_ROOT, 'assets', 'whale-tail.apng'),
     stateFile: join(importRootDir(), 'whale-tail.apng'),
     log: (message) => ctx.logger?.warn?.(message),
@@ -3683,6 +3778,8 @@ export function apply(ctx, config = {}) {
    * the note where it is read below.
    */
   const sayHandler = (req, res) => {
+    // GET is retained for older clients, but it can invoke a paid AI provider too.
+    if (!allowWriteRequest(req, res)) return;
     const run = (event, state, language, part, structure, chain, clipPrompt) => {
       const box = speechBoxFor(event, state);
       if (!box) {
@@ -3828,14 +3925,21 @@ export function apply(ctx, config = {}) {
   };
 
   /**
-   * Where a window's page lives, derived from the request so no port is guessed.
-   *
-   * The route is a parameter because there are two windows now, and both URLs come from the same host
-   * header — the one the caller actually reached the plugin on.
+   * Native windows run on THIS host. Reach the actual listener directly so they do not
+   * depend on the remote browser's proxy login cookies or its externally terminated TLS.
+   * Forwarded headers are deliberately not used as a native navigation target.
    */
   const pageUrlFor = (req, route) => {
-    const host = req?.headers?.host;
-    return host ? `http://${host}${route || ROUTES.window}` : null;
+    const address = req?.socket?.localAddress;
+    const port = req?.socket?.localPort;
+    if (address && Number.isInteger(port) && port > 0 && port <= 65535) {
+      const ip = address.startsWith('::ffff:') && /^\d+\.\d+\.\d+\.\d+$/.test(address.slice(7)) ? address.slice(7) : address;
+      const host = ip.includes(':') ? `[${ip}]` : ip;
+      try { return new URL(route || ROUTES.window, `${req.socket.encrypted ? 'https' : 'http'}://${host}:${port}`).href; }
+      catch { return null; }
+    }
+    // A native window cannot infer a trusted listener from a public Host header.
+    return null;
   };
 
   const desktopPageHandler = (req, res) => {
@@ -3877,6 +3981,11 @@ export function apply(ctx, config = {}) {
     let html = null;
     try {
       html = readFileSync(join(PLUGIN_ROOT, 'lib', file));
+      if (file === 'mini-game.html') {
+        const data = JSON.stringify(gameLevelStore.snapshot()).replaceAll('<', '\\u003c');
+        html = Buffer.from(html.toString('utf8').replace('<script id="game-level-data" type="application/json">null</script>',
+          '<script id="game-level-data" type="application/json">' + data + '</script>'));
+      }
     } catch (error) {
       sendStatus(res, 500, `cannot read the ${label}: ${error.message}`);
       return;
@@ -3910,6 +4019,7 @@ export function apply(ctx, config = {}) {
    * mounts is the only version of that which cannot drift.
    */
   const pickerPageHandler = settingsPageHandler('picker-page.html', 'model-picker page');
+  const gamePageHandler = settingsPageHandler('mini-game.html', 'mini-game page');
 
   /**
    * The page's own sources, by NAME — the module-level `WINDOW_SOURCES`, so the verification suite reads the
@@ -4009,6 +4119,12 @@ export function apply(ctx, config = {}) {
    * way: numbers and short CSS lengths only, sanitised here the way every other report is.
    */
   let desktopPageMetrics = null;
+  const gameFocusLeases = new Map();
+  function gameHasFocus() {
+    const now = Date.now();
+    for (const [client, deadline] of gameFocusLeases) if (deadline <= now) gameFocusLeases.delete(client);
+    return gameFocusLeases.size > 0;
+  }
   function cleanPageMetrics(raw) {
     if (!raw || typeof raw !== 'object') return null;
     const out = {};
@@ -4043,6 +4159,7 @@ export function apply(ctx, config = {}) {
     if (req.method === 'GET' || req.method === 'HEAD') {
       sendJson(req, res, {
         ...desktopWindow.describe(),
+        gameFocused: gameHasFocus(),
         /**
          * The WINDOW's OWN bubble measurements, posted by its page (action metrics below).
          *
@@ -4062,6 +4179,35 @@ export function apply(ctx, config = {}) {
     }
     readJsonBody(req, res, 16 * 1024, (body) => {
       const action = typeof body?.action === 'string' ? body.action : '';
+      if (action === 'game-focus') {
+        const clientId = body?.clientId;
+        if (typeof clientId !== 'string' || !/^[a-zA-Z0-9-]{8,96}$/.test(clientId) || typeof body.active !== 'boolean') {
+          sendStatus(res, 400, 'invalid game focus report'); return;
+        }
+        gameHasFocus();
+        if (body.active && (gameFocusLeases.has(clientId) || gameFocusLeases.size < 64)) gameFocusLeases.set(clientId, Date.now() + 3500);
+        else if (!body.active) gameFocusLeases.delete(clientId);
+        sendJson(req, res, { ok: true, gameFocused: gameHasFocus() }); return;
+      }
+      if (action === 'game-session') {
+        const sessionId = typeof body?.sessionId === 'string' ? body.sessionId : '';
+        const allowed = petStateStale ? [] : [petStateWhy?.statusSessionId,
+          ...(petStateWhy?.waitingSessionIds || []), ...(petStateWhy?.completedSessionIds || [])];
+        if (!sessionId || !allowed.includes(sessionId)) { sendJson(req, res, { ok: false }); return; }
+        navigation = { seq: navigation.seq + 1, sessionId };
+        sendJson(req, res, { ok: true });
+        return;
+      }
+      if (action === 'game') {
+        const gameUrl = pageUrlFor(req, ROUTES.game);
+        if (!gameUrl) { sendStatus(res, 400, 'local listener address is unavailable'); return; }
+        const url = new URL(gameUrl);
+        if (typeof body.modelId === 'string') url.searchParams.set('model', body.modelId.slice(0, 256));
+        const opened = desktopWindow.openConfig({ url: url.href });
+        if (!opened.ok) { sendStatus(res, 500, opened.error || 'game could not be opened'); return; }
+        sendJson(req, res, { state: 'game-open', pid: opened.pid || null, url: url.href });
+        return;
+      }
       if (action === 'open-status-session' || action === 'open-completed-session') {
         let sessionId = petStateStale ? null : action === 'open-completed-session'
           ? (['working', 'waiting'].includes(petStateValue) && petStateUnread > 0 ? petStateWhy?.completedSessionId : null)
@@ -4110,7 +4256,7 @@ export function apply(ctx, config = {}) {
       if (action === 'setup') {
         const setupUrl = pageUrlFor(req, ROUTES.setup);
         if (!setupUrl) {
-          sendStatus(res, 400, 'no host header to build the page URL from');
+          sendStatus(res, 400, 'local listener address is unavailable');
           return;
         }
         const opened = desktopWindow.openConfig({ url: setupUrl });
@@ -4131,7 +4277,7 @@ export function apply(ctx, config = {}) {
          */
         const pickerUrl = pageUrlFor(req, ROUTES.picker);
         if (!pickerUrl) {
-          sendStatus(res, 400, 'no host header to build the page URL from');
+          sendStatus(res, 400, 'local listener address is unavailable');
           return;
         }
         const opened = desktopWindow.openConfig({ url: pickerUrl });
@@ -4160,11 +4306,12 @@ export function apply(ctx, config = {}) {
         // A model parameter window is ABOUT a model, so it carries one; the 通用设置 window has no model in its URL.
         if (page === 'model' && wanted) query.push('model=' + encodeURIComponent(wanted));
         const route = page === 'global' ? ROUTES.global : ROUTES.config;
-        const settingsUrl = pageUrlFor(req, route) + (query.length ? '?' + query.join('&') : '');
-        if (!settingsUrl) {
-          sendStatus(res, 400, 'no host header to build the page URL from');
+        const settingsBase = pageUrlFor(req, route);
+        if (!settingsBase) {
+          sendStatus(res, 400, 'local listener address is unavailable');
           return;
         }
+        const settingsUrl = settingsBase + (query.length ? '?' + query.join('&') : '');
         const opened = desktopWindow.openConfig({ url: settingsUrl });
         if (!opened.ok) {
           sendStatus(res, 500, opened.error || 'the settings window could not be opened');
@@ -4180,7 +4327,7 @@ export function apply(ctx, config = {}) {
       if (action === 'restart') desktopWindow.stop();
       const url = pageUrlFor(req);
       if (!url) {
-        sendStatus(res, 400, 'no host header to build the page URL from');
+        sendStatus(res, 400, 'local listener address is unavailable');
         return;
       }
       /**
@@ -4256,6 +4403,7 @@ export function apply(ctx, config = {}) {
       disposers.push(webServer.register({ kind: 'exact', path: ROUTES.config, handler: configPageHandler }));
       disposers.push(webServer.register({ kind: 'exact', path: ROUTES.global, handler: globalPageHandler }));
       disposers.push(webServer.register({ kind: 'exact', path: ROUTES.picker, handler: pickerPageHandler }));
+      disposers.push(webServer.register({ kind: 'exact', path: ROUTES.game, handler: gamePageHandler }));
       disposers.push(webServer.register({ kind: 'exact', path: ROUTES.settings, handler: settingsHandler }));
       disposers.push(webServer.register({ kind: 'exact', path: ROUTES.preview, handler: previewHandler }));
       disposers.push(webServer.register({ kind: 'exact', path: ROUTES.setup, handler: setupPageHandler }));

package/lib/menu.js

@@ -60,6 +60,7 @@
      * whose effect ends by itself (the clip finishes, or the user double-clicks the pet, or work starts).
      */
     'dance',
+    'miniGame',
     /**
      * 重载模型 — refresh the model on screen without touching anything else (operator, 2026-10-14: 「给内置和外置宠物的右键菜单
      * 新增“重载模型”的选项，用来刷新模型」).
@@ -102,6 +103,7 @@
       resetSize: 'Reset size',
       globalSettings: 'General settings',
       switchModel: 'Switch model',
+      miniGame: 'Pet breakout',
     reloadModel: 'Reload model',
     dance: 'Dance for me',
       modelSettings: "This model's parameters",
@@ -130,6 +132,7 @@
       resetSize: '重置大小',
       globalSettings: '通用设置',
       switchModel: '切换模型',
+      miniGame: '小游戏 · 吃白饭',
     reloadModel: '重载模型',
     dance: '跳支舞',
       modelSettings: '当前模型参数设置',