dsh-relay-phone 0.12.0 → 0.12.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-relay-phone",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "Remote-control your local DeepSeek Harness from a phone through your own zero-knowledge relay: phone-first page, QR pairing, end-to-end encryption, approvals, full desktop UI fallback.",
   "type": "module",
   "main": "src/index.js",

package/src/pump.js

@@ -439,7 +439,9 @@ export class PumpManager {
       auditLog(`relayed plaintext ${info.method} ${info.path} refused (sealed only)`)
       this.respondInline(
         sid, 403, 'Forbidden',
-        'dsh-relay-phone: only documents and static assets may travel unsealed\n',
+        'dsh-relay-phone: only documents and static assets may travel unsealed.\n' +
+        'The phone page seals everything it sends; if a desktop-UI request lands here, it bypassed the\n' +
+        'boot patch. Set "allowDesktopPlaintext": true in the plugin config to accept that risk.\n',
       )
       this.closeStream(sid)
       return
@@ -449,10 +451,17 @@ export class PumpManager {
 
   /**
    * True for the GET/HEAD document + asset traffic a phone browser issues by
-   * itself. Explicitly excludes `/api/`, the mobile RPC path and upgrades.
+   * itself, and for WebSocket handshakes.
+   *
+   * A WebSocket handshake is an HTTP GET with an Upgrade header: there is no
+   * body, so an envelope cannot ride along. Sealing happens per frame instead,
+   * and `pumpPhoneWs` refuses any data frame that does not open — which is why
+   * the handshake may pass while the payload stays mandatory-sealed. (DSH's own
+   * event mux, `/api/remote.mux`, is such a WebSocket; blocking the handshake
+   * broke the desktop UI with "Reconnecting".)
    */
   isPlaintextDocument(info, isUpgrade) {
-    if (isUpgrade) return false
+    if (isUpgrade) return info.method === 'GET'
     if (info.method !== 'GET' && info.method !== 'HEAD') return false
     if (info.path.startsWith('/api/')) return false
     return PLAINTEXT_DOCUMENT.test(info.path)