dsh-pocket 1.12.2 → 1.13.0

package/README.en.md

@@ -41,7 +41,7 @@ What it looks like — the phone shows the exact same UI as your computer, live:
 
 | Feature | Description |
 |---|---|
-| 📶 LAN QR access | Works out of the box: Settings → Phone access — scan the LAN QR on the same Wi-Fi |
+| 📶 LAN QR access | Works out of the box: Settings → Phone access — scan the LAN QR on the same Wi-Fi (auto-detects the LAN IP; **under WSL it picks the Windows host's physical NIC IP**) |
 | 🌐 Public QR (from anywhere) | Click "Enable anywhere" → cloudflared tunnel → scan the public QR over 4G / any network |
 | 🔐 Access PIN | Public links require an **8-digit PIN** (rotated on every tunnel start by default; **customizable to a fixed PIN** — custom PINs are not rotated); LAN has its own separate **8-digit PIN** (on by default; switchable off in Settings — then LAN scans connect directly) |
 | 🔑 Custom PINs | Both the public and LAN PINs can be **set to your own fixed 8-digit number** in Settings (custom PINs are never auto-rotated) |
@@ -82,6 +82,8 @@ Settings → **Phone access** → scan the "📶 LAN" QR code → enter the **LA
 > The LAN PIN is **on by default** (security-first). If you're the only user and find typing it every time annoying, flip "LAN access PIN" to **Off** in the LAN block — LAN scans then connect directly with no PIN (LAN-only devices; the **public tunnel always requires a PIN**, unaffected).
 >
 > After logging in once, the phone **won't ask again**: as long as the computer's dsh web keeps running, reopening the phone needs no PIN (**a dsh web restart/update asks for it once more**).
+>
+> Advanced option: auto-detection may not pick a reachable address for Tailscale/VPN setups. You can select a detected IP from the "LAN address" dropdown; normally no change is needed.
 
 ### Public (from anywhere)
 

package/README.md

@@ -41,7 +41,7 @@ DSH Pocket 就是干这个的：**装上它，手机扫个码，就能实时看
 
 | 特性 | 说明 |
 |---|---|
-| 📶 局域网扫码 | 装好即用：设置 → 手机访问，打开就有局域网二维码，手机连同一 WiFi 扫码即开 |
+| 📶 局域网扫码 | 装好即用：设置 → 手机访问，打开就有局域网二维码，手机连同一 WiFi 扫码即开（自动识别本机局域网 IP，**WSL 环境自动取 Windows 物理网卡 IP**） |
 | 🌐 公网扫码（人在外面） | 点「开启公网访问」→ cloudflared 隧道 → 出公网二维码，4G/任何网络都能访问 |
 | 🔐 访问密码 | 公网链接需输入 **8 位数字密码**（默认每次开启公网自动换新；**可自定义固定密码**——自定义后不再换新）；局域网有独立 **8 位数字密码**（默认开启，设置页可**一键关闭**——关闭后局域网扫码直连） |
 | 🔑 自定义密码 | 公网/局域网密码都可在设置页**设成自己固定的 8 位数字**（自定义后公网不再自动换新） |
@@ -82,6 +82,8 @@ npx @deepseek-ai/dsh web
 > 局域网密码**默认开启**（安全优先）。如果只有自己用、嫌每次输密码麻烦，可在设置页局域网区块把「局域网访问密码」切到**关**——之后局域网扫码直连、无需密码（仅同一局域网设备可访问；**公网始终要密码**，不受影响）。
 >
 > 手机登录一次后**长期免输**：只要电脑上的 dsh web 不重启，再次打开手机不用再输入（**dsh web 重启/更新后需重新输入一次**）。
+>
+> 高级选项：自动识别在 Tailscale/VPN 等场景下可能选不到可达地址。可在「局域网地址」下拉框手动选择已检测到的 IP；一般不需要修改。
 
 ### 公网（人在外面）
 

package/client/api.js

@@ -10,6 +10,7 @@ export const POCKET_ENDPOINTS = Object.freeze({
   restart: 'pocket.restart',
   lanTokenRefresh: 'token.lanRefresh',
   lanAuthSetEnabled: 'lanAuth.setEnabled',
+  lanSetOverride: 'lan.setOverride',
   pinSetCustom: 'pin.setCustom',
 });
 
@@ -54,6 +55,8 @@ export function redactStatus(s) {
     proxyPort: s?.proxyPort ?? null,
     lanUrl: s?.lanUrl ?? null,
     lanQr: s?.lanQr ?? null,
+    lanCandidates: Array.isArray(s?.lanCandidates) ? s.lanCandidates : [],
+    lanIpOverride: s?.lanIpOverride ?? '',
     tunnelRunning: s?.tunnelRunning === true,
     tunnelUrl: s?.tunnelUrl ?? null,
     tunnelQr: s?.tunnelQr ?? null,

package/client/client.js

@@ -50,6 +50,7 @@ var POCKET_ENDPOINTS = Object.freeze({
   restart: "pocket.restart",
   lanTokenRefresh: "token.lanRefresh",
   lanAuthSetEnabled: "lanAuth.setEnabled",
+  lanSetOverride: "lan.setOverride",
   pinSetCustom: "pin.setCustom"
 });
 function compareVersions(a, b) {
@@ -87,6 +88,8 @@ function redactStatus(s) {
     proxyPort: s?.proxyPort ?? null,
     lanUrl: s?.lanUrl ?? null,
     lanQr: s?.lanQr ?? null,
+    lanCandidates: Array.isArray(s?.lanCandidates) ? s.lanCandidates : [],
+    lanIpOverride: s?.lanIpOverride ?? "",
     tunnelRunning: s?.tunnelRunning === true,
     tunnelUrl: s?.tunnelUrl ?? null,
     tunnelQr: s?.tunnelQr ?? null,
@@ -1337,6 +1340,9 @@ var zh2 = {
   "versionRange": "\u5F53\u524D v{cur} \u2192 \u6700\u65B0 v{latest}",
   "lanTitle": "\u{1F4F6} \u5C40\u57DF\u7F51\uFF08\u540C\u4E00 WiFi\uFF09",
   "lanHint": "\u624B\u673A\u8FDE\u63A5\u540C\u4E00 WiFi \u540E\u626B\u7801\u5373\u53EF\u6253\u5F00",
+  "lanAddress": "\u5C40\u57DF\u7F51\u5730\u5740",
+  "lanAddressAuto": "\u81EA\u52A8\uFF08\u63A8\u8350\uFF09",
+  "lanAddressHint": "\u9AD8\u7EA7\u9009\u9879\uFF1A\u4E00\u822C\u4E0D\u9700\u8981\u4FEE\u6539\uFF1B\u4F7F\u7528 Tailscale/VPN \u7B49\u8FDC\u7A0B\u8BBF\u95EE\u65F6\u53EF\u624B\u52A8\u9009\u62E9",
   "lanPin": "\u5C40\u57DF\u7F51\u8BBF\u95EE\u5BC6\u7801",
   "on": "\u5F00",
   "off": "\u5173",
@@ -1396,6 +1402,9 @@ var en2 = {
   "versionRange": "Current v{cur} \u2192 latest v{latest}",
   "lanTitle": "\u{1F4F6} LAN (same Wi-Fi)",
   "lanHint": "Scan to open once your phone is on the same Wi-Fi",
+  "lanAddress": "LAN address",
+  "lanAddressAuto": "Auto (recommended)",
+  "lanAddressHint": "Advanced option: usually no change needed; select manually when accessing through Tailscale/VPN",
   "lanPin": "LAN access PIN",
   "on": "On",
   "off": "Off",
@@ -1604,6 +1613,13 @@ function PocketSettingsTab({ rpcCall, t }) {
     } catch {
     }
   };
+  const setLanAddress = async (ip) => {
+    try {
+      setStatus(await call(POCKET_ENDPOINTS.lanSetOverride, { ip }));
+    } catch (err) {
+      setError(err.message);
+    }
+  };
   const [customPin, setCustomPin] = (0, import_react2.useState)(null);
   const saveCustomPin = async (which) => {
     try {
@@ -1717,6 +1733,22 @@ function PocketSettingsTab({ rpcCall, t }) {
         (0, import_react2.createElement)("img", { src: status.lanQr, alt: "LAN QR", style: styles.qr }),
         (0, import_react2.createElement)("div", { style: styles.code }, lanUrl),
         (0, import_react2.createElement)("div", { style: styles.muted }, t("lanHint")),
+        (0, import_react2.createElement)(
+          "label",
+          { style: { display: "flex", alignItems: "center", gap: 8, marginTop: 10, fontSize: 12, color: "var(--dsw-alias-label-secondary,#6b7280)" } },
+          t("lanAddress"),
+          (0, import_react2.createElement)(
+            "select",
+            {
+              value: status?.lanIpOverride || "",
+              onChange: (e) => setLanAddress(e.target.value),
+              style: { font: "inherit", height: 30, padding: "0 8px", borderRadius: 8, border: "1px solid var(--dsw-alias-border-l2,#d1d5db)", background: "var(--dsw-alias-bg-layer-1,#fff)", color: "var(--dsw-alias-label-primary,inherit)" }
+            },
+            (0, import_react2.createElement)("option", { value: "" }, t("lanAddressAuto")),
+            (status?.lanCandidates || []).map((ip) => (0, import_react2.createElement)("option", { key: ip, value: ip }, ip))
+          )
+        ),
+        (0, import_react2.createElement)("div", { style: { ...styles.muted, marginTop: 2 } }, t("lanAddressHint")),
         // 访问密码开关（issue #24）：默认开启；关闭后扫码直连（仅同一局域网设备可访问）
         (0, import_react2.createElement)(
           "div",

package/client/index.jsx

@@ -211,6 +211,15 @@ function PocketSettingsTab({ rpcCall, t }) {
     } catch { /* 忽略 */ }
   };
 
+  // 局域网地址手动覆盖（Tailscale/VPN 等远程访问场景）：空值恢复自动选择
+  const setLanAddress = async (ip) => {
+    try {
+      setStatus(await call(POCKET_ENDPOINTS.lanSetOverride, { ip }));
+    } catch (err) {
+      setError(err.message);
+    }
+  };
+
   // 自定义访问密码（issue #33）：公网/局域网各自设固定 8 位数字；自定义后公网不再自动轮换。
   // customPin: { which: 'public'|'lan', value, err } | null —— 正在输入自定义密码的区块
   const [customPin, setCustomPin] = useState(null);
@@ -317,6 +326,18 @@ function PocketSettingsTab({ rpcCall, t }) {
           h('img', { src: status.lanQr, alt: 'LAN QR', style: styles.qr }),
           h('div', { style: styles.code }, lanUrl),
           h('div', { style: styles.muted }, t('lanHint')),
+          h('label', { style: { display: 'flex', alignItems: 'center', gap: 8, marginTop: 10, fontSize: 12, color: 'var(--dsw-alias-label-secondary,#6b7280)' } },
+            t('lanAddress'),
+            h('select', {
+              value: status?.lanIpOverride || '',
+              onChange: (e) => setLanAddress(e.target.value),
+              style: { font: 'inherit', height: 30, padding: '0 8px', borderRadius: 8, border: '1px solid var(--dsw-alias-border-l2,#d1d5db)', background: 'var(--dsw-alias-bg-layer-1,#fff)', color: 'var(--dsw-alias-label-primary,inherit)' },
+            },
+            h('option', { value: '' }, t('lanAddressAuto')),
+            (status?.lanCandidates || []).map((ip) => h('option', { key: ip, value: ip }, ip)),
+            ),
+          ),
+          h('div', { style: { ...styles.muted, marginTop: 2 } }, t('lanAddressHint')),
           // 访问密码开关（issue #24）：默认开启；关闭后扫码直连（仅同一局域网设备可访问）
           h('div', { style: { display: 'flex', alignItems: 'center', gap: 8, marginTop: 8 } },
             h('span', { style: { fontSize: 12, color: 'var(--dsw-alias-label-secondary,#6b7280)' } }, t('lanPin')),

package/client/pocket-locales.js

@@ -30,6 +30,9 @@ export const zh = {
   'versionRange': '当前 v{cur} → 最新 v{latest}',
   'lanTitle': '📶 局域网（同一 WiFi）',
   'lanHint': '手机连接同一 WiFi 后扫码即可打开',
+  'lanAddress': '局域网地址',
+  'lanAddressAuto': '自动（推荐）',
+  'lanAddressHint': '高级选项：一般不需要修改；使用 Tailscale/VPN 等远程访问时可手动选择',
   'lanPin': '局域网访问密码',
   'on': '开',
   'off': '关',
@@ -91,6 +94,9 @@ export const en = {
   'versionRange': 'Current v{cur} → latest v{latest}',
   'lanTitle': '📶 LAN (same Wi-Fi)',
   'lanHint': 'Scan to open once your phone is on the same Wi-Fi',
+  'lanAddress': 'LAN address',
+  'lanAddressAuto': 'Auto (recommended)',
+  'lanAddressHint': 'Advanced option: usually no change needed; select manually when accessing through Tailscale/VPN',
   'lanPin': 'LAN access PIN',
   'on': 'On',
   'off': 'Off',

package/lib/index.js

@@ -21,7 +21,7 @@ import { createPocketService } from './service.mjs';
 import { installPocketRpc } from './web-rpc.js';
 import { restartHost } from './restart.js';
 import { desktopEnvPatchScript, advancedNoticeScript, DEFAULT_INJECT } from './proxy.mjs';
-import { lanAuthEnabled, setLanAuthEnabled, pinCustom, setPinCustom } from './settings.mjs';
+import { lanAuthEnabled, setLanAuthEnabled, lanIpOverride, setLanIpOverride, pinCustom, setPinCustom } from './settings.mjs';
 
 const name = 'dsh-pocket';
 const inject = ['connection', 'webServer'];
@@ -222,6 +222,7 @@ export function apply(ctx, config = {}, internals = {}) {
     port: internals.port ?? config.port ?? 3081,
     home: internals.home,
     internals,
+    getLanIpOverride: () => lanIpOverride(),
     // 桌面端：手机扫码访问的页面缺 dsh-desktop-mode/platform 参数会让 dsh-plugin-desktop
     // client 崩溃（issue #3/#4）。给代理注入「桌面参数补丁」（history.replaceState 补齐参数，
     // 无跳转；compatibility 模式不套桌面布局，避免移动端按钮叠加）。保留默认 polyfill。
@@ -255,6 +256,8 @@ export function apply(ctx, config = {}, internals = {}) {
     refreshLanToken: () => refreshLanToken(),
     getLanAuthEnabled: () => lanAuthEnabled(),
     setLanAuthEnabled: (on) => setLanAuthEnabled(on),
+    getLanIpOverride: () => lanIpOverride(),
+    setLanIpOverride: (ip) => setLanIpOverride(ip),
     getPinCustom: (which) => pinCustom(which),
     setCustomPin: (which, value) => setCustomPin(which, value),
     runUpdate: internals.runUpdate ?? { currentVersion, perform: performUpdate, loadedVersion: () => loadedVersion },

package/lib/ip.mjs

@@ -0,0 +1,11 @@
+// Small shared helpers for the optional LAN IP override.
+
+/** @param {unknown} value
+ *  @returns {boolean} */
+export function isValidIpv4(value) {
+  const m = String(value ?? '').match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+  return m !== null && m.slice(1).every((part) => {
+    const n = Number(part);
+    return n >= 0 && n <= 255;
+  });
+}

package/lib/service.mjs

@@ -8,10 +8,13 @@
 
 import { networkInterfaces } from 'node:os';
 import { createRequire } from 'node:module';
+import { readFileSync } from 'node:fs';
+import { execFile } from 'node:child_process';
 import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { createPocketProxy } from './proxy.mjs';
 import { startQuickTunnel } from './tunnel.mjs';
+import { isValidIpv4 } from './ip.mjs';
 
 const require = createRequire(import.meta.url);
 
@@ -67,10 +70,93 @@ export function selectLanIPv4(interfaces) {
   return candidates[0]?.ip ?? null;
 }
 
-function lanIPv4() {
+// ---------- WSL 局域网 IP（issue #39） ----------
+// WSL2 是 NAT 模式：WSL 内部 os.networkInterfaces() 只能看到自己的虚拟网卡
+// （172.x.x.x），看不到 Windows 宿主机的物理网卡 IP（192.168.x.x）——手机在
+// 同一 WiFi 下访问的是 Windows 宿主机，拿 WSL 的 IP 生成的二维码必然打不开。
+// 解法：检测到 WSL 时，通过 WSL interop 直接执行 Windows 的 ipconfig.exe，
+// 解析出 Windows 侧非虚拟网卡的 IPv4 作为局域网地址；失败回退本机探测。
+
+/** WSL 检测：/proc/version 含 microsoft/wsl，或 WSL 专属环境变量存在。 */
+export function detectWsl() {
+  try {
+    const v = readFileSync('/proc/version', 'utf8').toLowerCase();
+    if (v.includes('microsoft') || v.includes('wsl')) return true;
+  } catch { /* 非 Linux：无 /proc/version */ }
+  return Boolean(process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP || process.env.WSLENV);
+}
+
+/**
+ * 解析 ipconfig.exe 输出，默认取非虚拟网卡块的 IPv4 地址（保持输出顺序）。
+ * 支持中文（`IPv4 地址 . . . :`）与英文（`IPv4 Address. . . :`）两种格式。
+ * @param {string} text ipconfig.exe 的完整输出
+ * @param {{ includeVpn?: boolean }} [opts] 传 includeVpn 时保留 Tailscale/VPN 等候选
+ * @returns {string[]} 候选 IPv4 列表
+ */
+export function parseIpconfig(text, { includeVpn = false } = {}) {
+  const out = [];
+  // 网卡块：块标题行顶格（行首无缩进），其后内容行带缩进
+  const blocks = String(text).split(/\r?\n(?=\S)/);
+  const ipRe = /IPv4[^0-9]{0,40}((?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)/;
+  for (const block of blocks) {
+    const title = String(block.split(/\r?\n/)[0] ?? '');
+    // 跳过虚拟网卡块（vEthernet (WSL)、Docker、VirtualBox、VPN 等）
+    if (!includeVpn && VPN_IFACE_RE.test(title)) continue;
+    const m = block.match(ipRe);
+    if (m) out.push(m[0].replace(/^IPv4[^0-9]*/i, ''));
+  }
+  return out;
+}
+
+function runIpconfig() {
+  // WSL 内 PATH 可能不含 Windows System32；用绝对路径兜底
+  const candidates = ['ipconfig.exe', '/mnt/c/Windows/System32/ipconfig.exe'];
+  return new Promise((resolve) => {
+    const tryNext = (i) => {
+      if (i >= candidates.length) return resolve(null);
+      execFile(candidates[i], [], { timeout: 5000, windowsHide: true }, (err, stdout) => {
+        if (err || !stdout) return tryNext(i + 1);
+        resolve(String(stdout));
+      });
+    };
+    tryNext(0);
+  });
+}
+
+async function lanIPv4() {
+  // WSL：优先 Windows 物理网卡 IP（手机可达）；超时/失败回退本机探测
+  if (detectWsl()) {
+    try {
+      const out = await runIpconfig();
+      const candidates = parseIpconfig(out ?? '');
+      const ip = candidates.find((c) => PRIVATE_IPV4_RE.test(c)) ?? candidates[0];
+      if (ip) return ip;
+    } catch { /* 回退 */ }
+  }
   return selectLanIPv4(networkInterfaces());
 }
 
+/** 收集所有可手动选择的局域网/Tailnet 候选 IP（WSL 下以 Windows ipconfig 为准）。 */
+async function listLanCandidates() {
+  if (detectWsl()) {
+    try {
+      const out = await runIpconfig();
+      const ips = parseIpconfig(out ?? '', { includeVpn: true });
+      if (ips.length) return [...new Set(ips)];
+    } catch { /* 回退 */ }
+  }
+  const ips = [];
+  for (const [name, addrs] of Object.entries(networkInterfaces())) {
+    for (const addr of addrs ?? []) {
+      if (addr.family !== 'IPv4' || addr.internal) continue;
+      const ip = addr.address;
+      if (!ip || ip.startsWith('127.') || ip.startsWith('169.254.')) continue;
+      if (!ips.includes(ip)) ips.push(ip);
+    }
+  }
+  return ips;
+}
+
 /**
  * 创建 Pocket 服务。
  * @param {object} opts
@@ -84,6 +170,8 @@ export function createPocketService({
   port = 3081,
   home,
   internals = {},
+  /** 局域网地址手动覆盖：返回 IPv4 字符串；空值表示自动选择 */
+  getLanIpOverride,
   /** 代理注入 HTML 的内容（桌面端补丁等由 lib/index.js 传入；默认 randomUUID polyfill） */
   injectHtml,
   /** 访问令牌认证配置（issue #13）：{ getToken, isProtected }，传给代理 */
@@ -93,7 +181,20 @@ export function createPocketService({
 } = {}) {
   const createProxy = internals.createProxy ?? createPocketProxy;
   const startTunnel = internals.startTunnel ?? startQuickTunnel;
-  const getLan = internals.lanIPv4 ?? lanIPv4;
+  const getLanOverride = () => {
+    const value = String(getLanIpOverride?.() ?? '').trim();
+    return isValidIpv4(value) ? value : '';
+  };
+  const getLan = async () => getLanOverride() || (internals.lanIPv4 ? internals.lanIPv4() : lanIPv4());
+  let lanCandidateCache = null;
+  const getLanCandidates = async () => {
+    if (internals.lanCandidates) return internals.lanCandidates();
+    const now = Date.now();
+    if (!lanCandidateCache || now - lanCandidateCache.at > 15000) {
+      lanCandidateCache = { at: now, ips: await listLanCandidates() };
+    }
+    return lanCandidateCache.ips;
+  };
 
   let proxy = null;
   let tunnel = null;
@@ -244,14 +345,19 @@ export function createPocketService({
 
     /** 状态快照（RPC 返回，不含敏感信息；二维码 data URL 本地生成 + 缓存）。 */
     async status() {
-      const lan = getLan();
+      const lan = await getLan();
       const proxyPort = proxy?.port ?? null;
       const lanUrl = lan && proxyPort ? `http://${lan}:${proxyPort}` : null;
+      const lanIpOverride = getLanOverride();
+      const lanCandidates = [...new Set(await getLanCandidates())];
+      if (lanIpOverride && !lanCandidates.includes(lanIpOverride)) lanCandidates.push(lanIpOverride);
       return {
         proxyRunning: proxy !== null,
         proxyPort,
         lanUrl,
         lanQr: await qrCached(lanUrl),
+        lanCandidates,
+        lanIpOverride,
         tunnelRunning: tunnel !== null,
         tunnelUrl: tunnel?.url ?? null,
         tunnelQr: await qrCached(tunnel?.url ?? null),

package/lib/settings.mjs

@@ -10,6 +10,7 @@
 import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { homedir } from 'node:os';
+import { isValidIpv4 } from './ip.mjs';
 
 const settingsRel = join('dsh-pocket', 'settings.json');
 export function settingsPath() {
@@ -45,6 +46,24 @@ export function setLanAuthEnabled(on) {
   return s.lanAuthEnabled;
 }
 
+/** 局域网地址手动覆盖：默认空字符串 = 自动选择。 */
+export function lanIpOverride() {
+  return readSettings().lanIpOverride ?? '';
+}
+
+/** 设置局域网地址覆盖；空字符串清除覆盖，恢复自动选择。非法 IPv4 抛错。 */
+export function setLanIpOverride(value) {
+  const ip = String(value ?? '').trim();
+  if (ip && !isValidIpv4(ip)) {
+    throw new Error('局域网地址必须是 IPv4 地址 | LAN address must be an IPv4 address');
+  }
+  const s = readSettings();
+  if (ip) s.lanIpOverride = ip;
+  else delete s.lanIpOverride;
+  writeSettings(s);
+  return ip;
+}
+
 // ---------- 访问密码「自定义」标记（issue #33） ----------
 // 用户可把公网/局域网密码设成自己固定的 8 位数字（自定义后不再自动轮换）。
 // 标记存 settings.json：publicPinCustom / lanPinCustom。

package/lib/web-rpc.js

@@ -25,7 +25,7 @@ export function killHint(port) {
 }
 
 /** 注册 /dsh-pocket 逻辑通道（仅本机 loopback 可调）。 */
-export function installPocketRpc(ctx, { service, log = console, desktop = false, runUpdate = null, restart = null, restartNotice = null, getToken = null, getLanToken = null, refreshLanToken = null, getLanAuthEnabled = null, setLanAuthEnabled = null, getPinCustom = null, setCustomPin = null }) {
+export function installPocketRpc(ctx, { service, log = console, desktop = false, runUpdate = null, restart = null, restartNotice = null, getToken = null, getLanToken = null, refreshLanToken = null, getLanAuthEnabled = null, setLanAuthEnabled = null, getLanIpOverride = null, setLanIpOverride = null, getPinCustom = null, setCustomPin = null }) {
   if (!ctx?.connection?.rpc?.handle) {
     log.warn?.('dsh-pocket: DSH Host Connection RPC unavailable — settings tab disabled | 无 Connection RPC，设置页不可用');
     return () => {};
@@ -65,6 +65,18 @@ export function installPocketRpc(ctx, { service, log = console, desktop = false,
         if (enabled === undefined) return fail('bad-request', '局域网密码开关不可用 | LAN PIN switch unavailable');
         return ok({ lanAuthEnabled: enabled });
       }
+      if (endpoint === POCKET_ENDPOINTS.lanSetOverride) {
+        // 返回完整 status：前端 setStatus(await call(...)) 直接替换 status 对象，
+        // 若只返回 { lanIpOverride } 会丢掉 accessToken/lanToken/tunnelUrl 等字段，
+        // 且 lanUrl/二维码不会随新 IP 刷新（PR #47 的客户端写法依赖完整 status）。
+        try {
+          const ip = setLanIpOverride?.(payload?.ip ?? '');
+          if (ip === undefined) return fail('bad-request', '局域网地址设置不可用 | LAN address setting unavailable');
+          return await statusPayload();
+        } catch (err) {
+          return fail('bad-request', err?.message ?? String(err));
+        }
+      }
       if (endpoint === POCKET_ENDPOINTS.pinSetCustom) {
         const which = payload?.which === 'public' || payload?.which === 'lan' ? payload.which : null;
         if (!which) return fail('bad-request', '未知密码类型 | unknown PIN kind');

package/package.json

@@ -76,5 +76,5 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
-  "version": "1.12.2"
+  "version": "1.13.0"
 }