dsh-remote-bridge 2.3.3 → 2.3.5

package/README.en.md

@@ -9,7 +9,7 @@
 </p>
 
 <p align="center">
-  <img alt="Version" src="https://img.shields.io/badge/version-v2.3.3-087f8c">
+  <img alt="Version" src="https://img.shields.io/badge/version-v2.3.5-087f8c">
   <img alt="DSH plugin" src="https://img.shields.io/badge/DeepSeek_Harness-plugin-1f2328">
   <img alt="Platforms" src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-586069">
   <img alt="License" src="https://img.shields.io/badge/license-AGPL--3.0-2da44e">
@@ -73,10 +73,10 @@ dsh plugin --profile web add dsh-remote-bridge
 dsh plugin --profile web add dsh-remote-bridge --registry https://registry.npmmirror.com
 
 # 2. tarball from the GitHub release
-dsh plugin --profile web add https://github.com/westanke/dsh-remote-bridge/releases/download/v2.3.3/dsh-remote-bridge-v2.3.3.tgz
+dsh plugin --profile web add https://github.com/westanke/dsh-remote-bridge/releases/download/v2.3.5/dsh-remote-bridge-v2.3.5.tgz
 
 # 3. tarball from the Gitee release (faster from mainland China)
-dsh plugin --profile web add https://gitee.com/westanke/dsh-remote-bridge/releases/download/v2.3.3/dsh-remote-bridge-v2.3.3.tgz
+dsh plugin --profile web add https://gitee.com/westanke/dsh-remote-bridge/releases/download/v2.3.5/dsh-remote-bridge-v2.3.5.tgz
 
 npx @deepseek-ai/dsh web
 ```
@@ -93,7 +93,7 @@ Restart DSH after installation, then open settings — The section is titled **
 To install a downloaded release archive:
 
 ```sh
-dsh plugin --profile web add ./dsh-remote-bridge-v2.3.3.tgz
+dsh plugin --profile web add ./dsh-remote-bridge-v2.3.5.tgz
 ```
 
 ## First connection
@@ -327,11 +327,11 @@ pnpm pack
 
 `npm pack` produces roughly a **0.25 MB** archive: 2.2.0 dropped the standalone page and its editor dependencies and turned source maps off, down from 1.72 MB.
 
-v2.3.3 was developed against DSH `master@47f943859bef60e4160492346772ded9b24f765a`. CI covers Windows, Ubuntu, and macOS.
+v2.3.5 was developed against DSH `master@47f943859bef60e4160492346772ded9b24f765a`. CI covers Windows, Ubuntu, and macOS.
 
 ## Project
 
-- Version: `v2.3.3`
+- Version: `v2.3.5`
 - Author: upstream [Hakunm](https://github.com/Hakunm); this fork maintained by [westanke](https://github.com/westanke)
 - Repository: [GitHub](https://github.com/westanke/dsh-remote-bridge) · [Gitee](https://gitee.com/westanke/dsh-remote-bridge)
 - npm: [`dsh-remote-bridge`](https://www.npmjs.com/package/dsh-remote-bridge) ([mainland-China mirror](https://registry.npmmirror.com/dsh-remote-bridge))

package/README.md

@@ -9,7 +9,7 @@
 </p>
 
 <p align="center">
-  <img alt="Version" src="https://img.shields.io/badge/version-v2.3.3-087f8c">
+  <img alt="Version" src="https://img.shields.io/badge/version-v2.3.5-087f8c">
   <img alt="DSH plugin" src="https://img.shields.io/badge/DeepSeek_Harness-plugin-1f2328">
   <img alt="Platforms" src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-586069">
   <img alt="License" src="https://img.shields.io/badge/license-AGPL--3.0-2da44e">
@@ -70,10 +70,10 @@ dsh plugin --profile web add dsh-remote-bridge
 dsh plugin --profile web add dsh-remote-bridge --registry https://registry.npmmirror.com
 
 # ② GitHub Release 的 tarball
-dsh plugin --profile web add https://github.com/westanke/dsh-remote-bridge/releases/download/v2.3.3/dsh-remote-bridge-v2.3.3.tgz
+dsh plugin --profile web add https://github.com/westanke/dsh-remote-bridge/releases/download/v2.3.5/dsh-remote-bridge-v2.3.5.tgz
 
 # ③ Gitee Release 的 tarball（国内访问更快）
-dsh plugin --profile web add https://gitee.com/westanke/dsh-remote-bridge/releases/download/v2.3.3/dsh-remote-bridge-v2.3.3.tgz
+dsh plugin --profile web add https://gitee.com/westanke/dsh-remote-bridge/releases/download/v2.3.5/dsh-remote-bridge-v2.3.5.tgz
 
 npx @deepseek-ai/dsh web
 ```
@@ -89,7 +89,7 @@ npx @deepseek-ai/dsh web
 从 GitHub Release 下载离线安装包时，可直接安装 tarball：
 
 ```sh
-dsh plugin --profile web add ./dsh-remote-bridge-v2.3.3.tgz
+dsh plugin --profile web add ./dsh-remote-bridge-v2.3.5.tgz
 ```
 
 ## 第一次使用
@@ -319,11 +319,11 @@ pnpm pack
 
 `npm pack` 的产物约 **0.25 MB**：2.2.0 删除独立页及其编辑器依赖、并关闭 source map 之后，从 1.72 MB 降下来。
 
-v2.3.3 基于 DSH `master@47f943859bef60e4160492346772ded9b24f765a` 开发，CI 覆盖 Windows、Ubuntu 和 macOS。
+v2.3.5 基于 DSH `master@47f943859bef60e4160492346772ded9b24f765a` 开发，CI 覆盖 Windows、Ubuntu 和 macOS。
 
 ## 项目信息
 
-- 当前版本：`v2.3.3`
+- 当前版本：`v2.3.5`
 - 作者：上游 [Hakunm](https://github.com/Hakunm)，本 fork 维护 [westanke](https://github.com/westanke)
 - 仓库：[GitHub](https://github.com/westanke/dsh-remote-bridge) · [Gitee](https://gitee.com/westanke/dsh-remote-bridge)
 - npm：[`dsh-remote-bridge`](https://www.npmjs.com/package/dsh-remote-bridge)（[国内镜像](https://registry.npmmirror.com/dsh-remote-bridge)）

package/docs/api/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.0.0
 info:
   title: DeepSeek Harness Mobile Events
-  version: 2.3.3
+  version: 2.3.5
   description: |
     Live file and authorized DSH chat events. Reconnect clients must refresh
     REST state; unbounded replay is not provided.

package/docs/api/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: DeepSeek Harness Mobile API
-  version: 2.3.3
+  version: 2.3.5
   description: Versioned file and chat BFF for mobile and third-party DSH clients. HTTP and HTTPS are both supported.
 servers:
   - url: http://127.0.0.1:3090/api/v1
@@ -24,7 +24,7 @@ paths:
                 properties:
                   ok: { type: boolean, const: true }
                   version: { type: string, const: v1 }
-                  pluginVersion: { type: string, const: 2.3.3 }
+                  pluginVersion: { type: string, const: 2.3.5 }
   /pairings/exchange:
     post:
       security: []
@@ -1005,6 +1005,13 @@ components:
         id: { type: string }
         rootId: { type: string }
         cwd: { $ref: '#/components/schemas/WirePath' }
+        cwdAbsolute:
+          type: string
+          description: >-
+            Absolute path of the session working directory. Optional; older clients
+            ignore it. Needed to compose `@absolute-path` mentions. Note that an
+            empty `cwd` is legal and means the session working directory IS the
+            authorized root itself.
         updatedAt: { type: integer }
         running: { type: boolean }
         blank: { type: boolean }

package/kotlin-sdk/build.gradle.kts

@@ -4,7 +4,7 @@ plugins {
 }
 
 group = "ai.deepseek.dsh"
-version = "2.3.3"
+version = "2.3.5"
 
 repositories { mavenCentral() }
 

package/lib/index.d.ts

@@ -1131,6 +1131,22 @@ interface ChatSessionView {
   id: string;
   rootId: string;
   cwd: string;
+  /**
+   * 会话工作目录的**绝对路径**（可选，老客户端会忽略）。
+   *
+   * `cwd` 是**相对授权根**的 wire 路径（列举接口要的正是这个），手机端要往输入框
+   * 里插一条 `@绝对路径` 时却需要绝对路径 —— 而客户端手里没有根的 realPath
+   * （`RootView` 刻意不含它，那是机器信息）。此前 App 拿 `cwd` 去 `/roots/resolve`
+   * 换，可那个端点**要求绝对路径输入**、对相对路径直接 400 —— 于是补全必然失败。
+   *
+   * 这里补的这一个字段就是那条缺失的桥：会话的绝对 cwd 服务端本来就有（`matchRoot`
+   * 的入参就是它），它又一定落在**这台设备已授权**的根内（不匹配的会话压根不会出现在
+   * 列表里），所以给出它不扩大任何可见范围。
+   *
+   * `cwd` 为空字符串是**合法**的：会话工作目录正好就是授权根本身时，
+   * `path.relative(root, root)` 返回空串 —— 客户端必须把它当作「根目录」而不是「没有」。
+   */
+  cwdAbsolute?: string;
   updatedAt: number;
   running: boolean;
   blank: boolean;

package/lib/index.js

@@ -244,7 +244,9 @@ var DshChatAdapter = class {
 		const visible = [];
 		for (const session of value.items) {
 			if (archivedSessionIds.has(session.sessionId)) continue;
-			const match = session.cwd === void 0 ? void 0 : matchRoot(roots, session.cwd);
+			const absoluteCwd = session.cwd;
+			if (absoluteCwd === void 0) continue;
+			const match = matchRoot(roots, absoluteCwd);
 			if (match === void 0) continue;
 			const workspace = workspaces.find((item) => item.rootId === match.root.id && item.path === match.relative);
 			const title = sessionTitle(session);
@@ -252,6 +254,7 @@ var DshChatAdapter = class {
 				id: session.sessionId,
 				rootId: match.root.id,
 				cwd: match.relative,
+				cwdAbsolute: absoluteCwd,
 				updatedAt: session.updatedAt,
 				running: session.running,
 				blank: session.blank,
@@ -3239,12 +3242,47 @@ function defaultDisplayName() {
 //#endregion
 //#region src/host/plugin-inventory.ts
 /**
+* 把 profile 标识归一化成 profile 名。
+*
+* 内核接受**两种**写法，两者都合法：
+*
+* - `--profile web` —— profile 名；
+* - `--profile /home/u/.dsh/profiles/web` —— profile 的绝对目录。内核启动器文档里
+*   写的正是 `--profile ${basename(profileDir)}`，**内核自己会取 basename**。
+*
+* 本插件此前只认第一种，于是把第二种的**整条路径**当成了 profile 名。而 `path.join`
+* 并不会因为后面一段是绝对路径就重置（那是 `path.resolve` 的行为），于是拼出：
+*
+*   /home/u/.dsh/profiles/home/u/.dsh/profiles/desktop
+*
+* —— 必然 ENOENT。**官方 Electron 桌面版恰好用第二种启动内核**，所以在桌面版里，
+* 手机上只会看到「服务器读不出插件清单：package.json 可能损坏、缺失或没有读取权限」，
+* 而磁盘上的 package.json 完好无损、权限也对。web 版（`dsh web` / `--profile web`）
+* 走的是名字形式，不受影响 —— 这就是这个 bug 能潜伏到桌面版才暴露的原因。
+*
+* 归一化只做一件事：**含路径分隔符时取最后一段**；不含则原样返回。于是
+* 「名字」「绝对目录」「相对目录」「Windows 反斜杠路径」「末尾带斜杠」五者同归一条规则。
+*/
+function normalizeProfileName(value) {
+	const trimmed = value.trim();
+	if (trimmed === "") return null;
+	if (!/[/\\]/.test(trimmed)) return trimmed;
+	const withoutTrailing = trimmed.replace(/[/\\]+$/, "");
+	if (withoutTrailing === "") return null;
+	const cut = Math.max(withoutTrailing.lastIndexOf("/"), withoutTrailing.lastIndexOf("\\"));
+	const base = withoutTrailing.slice(cut + 1);
+	return base === "" ? null : base;
+}
+/**
 * 解析当前 profile 名。
 *
 * 依次尝试：`DSH_PROFILE` 环境变量 → `--profile=<name>` → `--profile <name>`
 * → **子命令简写**（`dsh web` 等价于 `dsh --profile web`）。
 * 都拿不到时返回 null（调用方不要猜，猜错会读到另一个 profile 的清单）。
 *
+* **四个取值来源一律过 `normalizeProfileName`**：它们都可能装着一个 profile 目录
+* 而不是名字（官方 Electron 桌面版就是），见该函数的说明。
+*
 * 最后那条简写路径是补上的一个真 bug：内核的启动器文档写得很清楚 ——
 *
 * > `dsh <name>` abbreviates `dsh --profile <name>`；`dsh web` boots the web
@@ -3258,15 +3296,15 @@ function resolveProfileName(input = {}) {
 	const env = input.env ?? process.env;
 	const argv = input.argv ?? process.argv;
 	const fromEnv = env.DSH_PROFILE?.trim();
-	if (fromEnv) return fromEnv;
+	if (fromEnv) return normalizeProfileName(fromEnv);
 	for (const arg of argv) if (arg.startsWith("--profile=")) {
 		const value = arg.slice(10).trim();
-		if (value) return value;
+		if (value) return normalizeProfileName(value);
 	}
 	const index = argv.indexOf("--profile");
 	if (index >= 0) {
 		const value = argv[index + 1]?.trim();
-		if (value && !value.startsWith("-")) return value;
+		if (value && !value.startsWith("-")) return normalizeProfileName(value);
 		return null;
 	}
 	return profileFromSubcommand(argv);
@@ -3285,6 +3323,9 @@ function resolveProfileName(input = {}) {
 *
 * `plugin` 单独排除：`dsh plugin add xxx` 是管理插件依赖的命令，
 * 它**不启动任何 profile**，把它当 profile 名会去读一个不存在的目录。
+*
+* 取到的 token 同样过 `normalizeProfileName`：桌面版可能把这个位置填成 profile
+* 目录的绝对路径（`--profile <dir>` 的等价位置参数写法）。
 */
 function profileFromSubcommand(argv) {
 	const start = argv.findIndex((arg) => /(^|[/\\])dsh(\.js|\.cjs|\.mjs)?$/.test(arg));
@@ -3299,7 +3340,7 @@ function profileFromSubcommand(argv) {
 			i += arg.includes("=") ? 1 : 2;
 			continue;
 		}
-		return arg === "plugin" ? null : arg;
+		return arg === "plugin" ? null : normalizeProfileName(arg);
 	}
 	return null;
 }
@@ -3641,7 +3682,7 @@ async function inspectResolvedPath(root, wirePath) {
 }
 //#endregion
 //#region src/shared/version.ts
-const PLUGIN_VERSION = "2.3.3";
+const PLUGIN_VERSION = "2.3.5";
 //#endregion
 //#region src/host/router.ts
 var ApiRouter = class {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-bridge",
-  "version": "2.3.3",
+  "version": "2.3.5",
   "description": "Versioned REST bridge for DeepSeek Harness: remote access for trusted clients (chat, files, devices) plus a Phone-settings panel inside the DSH WebUI.",
   "type": "module",
   "packageManager": "pnpm@11.19.0",