dsh-remote-hub 0.3.3 → 0.4.0

package/README.md

@@ -267,6 +267,27 @@ curl http://127.0.0.1:<bridgePort>/_dsh-remote/health
 > 提示：`cordis.patch.yml` 里的 `port` 只是**首选**端口。若被占用，实际端口会写在 `~/.dsh/dsh-remote/status.json`，
 > 一切链接与二维码都以那里为准，不必手改配置。
 
+### 用自己的服务器做中转（阿里云等自建 relay）
+
+如果你不用 ngrok，而是用一台云服务器（Caddy/nginx 终止 TLS + SSH 反向隧道）把本机暴露出去，
+就让插件把这个地址写进二维码，否则扫码只会得到 ngrok/cloudflared 的地址：
+
+```bash
+# 方式一：临时环境变量
+export DSH_REMOTE_PUBLIC_URL="https://your-relay.example"     # Windows: $env:DSH_REMOTE_PUBLIC_URL="https://..."
+dsh-remote start --open
+
+# 方式二：写进 profile 配置（推荐，长期有效）
+# ~/.dsh/profiles/<name>/cordis.patch.yml 的 dsh-remote 行：
+#   publicUrl: 'https://your-relay.example'
+```
+
+配置后插件不再启动 ngrok/cloudflared，并把该地址作为「公网地址」放进配对载荷；
+启动时会探测 `<publicUrl>/_dsh-remote/health`，结果记在 `status.json` 的 `public.reachable`
+（中转在、但反向隧道断了 → `false` 并打印警告）。
+
+前提：服务器侧确实把请求转发到**桥接监听的端口**（默认 6300）。
+
 ### 扫码配对（一次性配对码）
 
 不想手抄 Cookie 就用二维码：

package/bin/dsh-remote.mjs

@@ -62,6 +62,21 @@ function printStatus() {
   console.log('')
 }
 
+/** Describe the process listening on a port (Windows only, best effort). */
+function describePortOwner(port) {
+  if (process.platform !== 'win32') return Promise.resolve(null)
+  const script =
+    `$c = Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1;` +
+    'if ($c) { $p = Get-CimInstance Win32_Process -Filter (\"ProcessId=$($c.OwningProcess)\");' +
+    ' "PID $($c.OwningProcess): $($p.CommandLine)" }'
+  return new Promise((resolve) => {
+    execFile('powershell', ['-NoProfile', '-NonInteractive', '-Command', script], { timeout: 8000, windowsHide: true }, (err, stdout) => {
+      const out = String(stdout || '').trim()
+      resolve(err || !out ? null : out.slice(0, 180))
+    })
+  })
+}
+
 function openBrowser(url) {
   const cmd = process.platform === 'win32' ? 'cmd' : process.platform === 'darwin' ? 'open' : 'xdg-open'
   const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url]
@@ -188,6 +203,29 @@ async function doctor() {
   }
   console.log('  ' + '-'.repeat(52))
   console.log('')
+  // Who owns the bridge port right now, and what public URL is advertised.
+  const bridgePort = Number(process.env.DSH_REMOTE_PORT || 6300)
+  const health = await bridgeHealthy(bridgePort)
+  if (health) {
+    console.log(`  ✔ 桥接端口        ${bridgePort}（本插件，pairing=${health.pairing}）`)
+  } else {
+    console.log(`  · 桥接端口        ${bridgePort} 上没有本插件在跑`)
+    const owner = await describePortOwner(bridgePort)
+    if (owner) console.log(`     被其它进程占用:   ${owner}`)
+  }
+  const st = readStatus()
+  const pub = st?.public
+  if (pub?.url) {
+    const tag = pub.kind === 'relay' ? '自建中转' : pub.kind
+    console.log(`  ▲ 公网地址        ${pub.url}（${tag}${pub.reachable === false ? '，当前不可达' : ''}）`)
+    if (pub.kind !== 'relay' && process.env.DSH_REMOTE_PUBLIC_URL) {
+      console.log('     （已设置 DSH_REMOTE_PUBLIC_URL，但当前桥接未采用：需要重启桥接）')
+    }
+  } else if (process.env.DSH_REMOTE_PUBLIC_URL) {
+    console.log(`  · 公网地址        未生效（要重启桥接才会用 ${process.env.DSH_REMOTE_PUBLIC_URL}）`)
+  } else {
+    console.log('  · 公网地址        未配置（如需自建中转，设置 DSH_REMOTE_PUBLIC_URL）')
+  }
 }
 
 async function main() {

package/lib/index.js

@@ -16,7 +16,7 @@ import { start } from './supervisor.js'
 
 export const name = 'dsh-remote-hub'
 
-export const version = '0.3.3'
+export const version = '0.4.0'
 
 /** No host services are required: the plugin only needs Node builtins. */
 export const inject = []

package/lib/pairing-routes.js

@@ -22,11 +22,13 @@ export const PAIR_PREFIX = '/_dsh-remote/pair'
  * fastest one at connect time: `l` = LAN (private address), `u` = public tunnel. Either may be null
  * when that transport is unavailable that moment.
  */
-export function buildPairPayload({ lan, publicUrl, code, expiresAt }) {
-  // `l` is a LIST of LAN URLs: a machine can have several private adapters and only one of them is
-  // reachable from the phone, so the client probes them in order instead of trusting our pick.
+export function buildPairPayload({ lan, relay, tunnel, code, expiresAt }) {
+  // v3 ships all three transports so one scan can fill every tab:
+  //   l = LAN addresses (list; only one adapter may be reachable from the phone)
+  //   r = self-hosted relay (Aliyun/Caddy + reverse SSH)
+  //   u = auto tunnel (ngrok / cloudflared)
   const lanList = Array.isArray(lan) ? lan.filter(Boolean) : lan ? [lan] : []
-  return JSON.stringify({ v: 2, l: lanList, u: publicUrl ?? null, c: code, e: expiresAt })
+  return JSON.stringify({ v: 3, l: lanList, r: relay ?? null, u: tunnel ?? null, c: code, e: expiresAt })
 }
 
 /**
@@ -76,10 +78,12 @@ export async function handlePairing({ req, res, current, store }) {
     res.end(
       JSON.stringify({
         ok: true,
-        // `url` keeps the old single-address shape working; new clients read lan/public.
-        url: snapshot.public ?? (Array.isArray(snapshot.lan) ? snapshot.lan[0] : snapshot.lan) ?? null,
+        // `url`/`public` keep the old single-address shape working; new clients read the three.
+        url: snapshot.relay ?? snapshot.tunnel ?? null,
         lan: Array.isArray(snapshot.lan) ? snapshot.lan : snapshot.lan ? [snapshot.lan] : [],
-        public: snapshot.public ?? null,
+        relay: snapshot.relay ?? null,
+        tunnel: snapshot.tunnel ?? null,
+        public: snapshot.relay ?? snapshot.tunnel ?? null,
         cookie: result.cookie,
         issuedAt: result.issuedAt,
       }),
@@ -89,7 +93,7 @@ export async function handlePairing({ req, res, current, store }) {
 
   // Any other GET under the prefix hands out a fresh code.
   const { code, expiresAt, ttlMs } = store.issue(snapshot.cookie)
-  const payload = buildPairPayload({ lan: snapshot.lan, publicUrl: snapshot.public, code, expiresAt })
+  const payload = buildPairPayload({ lan: snapshot.lan, relay: snapshot.relay, tunnel: snapshot.tunnel, code, expiresAt })
 
   if (url === PAIR_PREFIX + '/svg') {
     const svg = await QRCode.toString(payload, { type: 'svg', margin: 1, width: 320, errorCorrectionLevel: 'M' })
@@ -122,7 +126,7 @@ export async function handlePairing({ req, res, current, store }) {
   <p>配对码 <code>${code}</code> · ${minutes} 分钟内有效，且只能用一次</p>
   <div class="qr">${svg}</div>
   <p class="ok">扫码后自动填入地址并换取登录凭据</p>
-  <p class="addr">${(Array.isArray(snapshot.lan) ? snapshot.lan : snapshot.lan ? [snapshot.lan] : []).map((u) => `局域网：${u}`).join('<br>')}${snapshot.public ? `<br>公网：${snapshot.public}` : ''}</p>
+  <p class="addr">${(Array.isArray(snapshot.lan) ? snapshot.lan : snapshot.lan ? [snapshot.lan] : []).map((u) => `局域网：${u}`).join('<br>')}${snapshot.relay ? `<br>中转：${snapshot.relay}` : ''}${snapshot.tunnel ? `<br>隧道：${snapshot.tunnel}` : ''}</p>
   <p class="addr">扫一次会同时存下局域网与公网地址，之后自动优先走局域网</p>
 </div></body></html>`
   res.writeHead(200, { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' })

package/lib/supervisor.js

@@ -11,6 +11,7 @@
 
 import http from 'node:http'
 import https from 'node:https'
+import { execFile } from 'node:child_process'
 import fs from 'node:fs'
 import os from 'node:os'
 import path from 'node:path'
@@ -126,6 +127,21 @@ function writeStatus(status) {
   fs.writeFileSync(CONNECT_FILE, lines.join(os.EOL), 'utf8')
 }
 
+/** Best-effort description of the process listening on `port` (Windows), for diagnostics. */
+function describePortOwner(port) {
+  if (process.platform !== 'win32') return Promise.resolve(null)
+  const script =
+    `$c = Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1;` +
+    'if ($c) { $p = Get-CimInstance Win32_Process -Filter (\"ProcessId=$($c.OwningProcess)\");' +
+    ' "PID $($c.OwningProcess): $($p.CommandLine)" }'
+  return new Promise((resolve) => {
+    execFile('powershell', ['-NoProfile', '-NonInteractive', '-Command', script], { timeout: 8000, windowsHide: true }, (err, stdout) => {
+      const out = String(stdout || '').trim()
+      resolve(err || !out ? null : out.slice(0, 200))
+    })
+  })
+}
+
 /** Probe a full URL (used for the configured public relay) and report whether it answers. */
 function probeHealthUrl(url, timeoutMs = 4000) {
   return new Promise((resolve) => {
@@ -268,7 +284,8 @@ export async function start(config = {}) {
     // Read at redeem time so a tunnel URL that appears later is still handed to the phone.
     current: () => ({
       lan: lanUrlsFor(actualBridgePort()),
-      public: lastPublicUrl ?? null,
+      relay: relayUrl,
+      tunnel: tunnelRef?.publicUrl ?? null,
       cookie,
     }),
   }
@@ -332,6 +349,10 @@ export async function start(config = {}) {
       log('dsh-remote: port is held by an old bridge WITHOUT pairing support; using another port')
     } else {
       log(`dsh-remote: port ${wanted} is busy (not a dsh-remote bridge); using another port`)
+      // Say WHO holds it: the usual culprit is a leftover lan-proxy.mjs from an older setup, and
+      // knowing the PID is what lets the user stop it instead of guessing.
+      const owner = await describePortOwner(wanted)
+      if (owner) log(`dsh-remote: port ${wanted} is held by: ${owner}`)
     }
     bridge = await startBridge({
       listenPort: 0,
@@ -365,7 +386,6 @@ export async function start(config = {}) {
 
   const tunnel = await startTunnel({
     kind: tunnelKind,
-    publicUrl,
     bridgePort: bridge.port,
     authority,
     domain,
@@ -385,14 +405,15 @@ export async function start(config = {}) {
     },
   })
 
-  lastPublicUrl = tunnel.publicUrl
-  // A configured relay can be "up" while its reverse tunnel is down; probe it so status does not
-  // advertise a URL that cannot answer.
-  let publicReachable = null
-  if (publicUrl && tunnel.publicUrl) {
-    publicReachable = await probeHealthUrl(`${tunnel.publicUrl}/_dsh-remote/health`)
-    if (publicReachable === false) {
-      log(`dsh-remote: WARNING ${tunnel.publicUrl} does not answer — is the relay's SSH tunnel up?`)
+  // The self-hosted relay (if configured) and the auto tunnel are reported SEPARATELY: a self-use
+  // setup wants both (relay for 4G, ngrok as a second path), and the phone decides which to use.
+  const relayUrl = String(publicUrl || '').trim().replace(/\/+$/, '') || null
+  lastPublicUrl = relayUrl ?? tunnel.publicUrl
+  let relayReachable = null
+  if (relayUrl) {
+    relayReachable = await probeHealthUrl(`${relayUrl}/_dsh-remote/health`)
+    if (relayReachable === false) {
+      log(`dsh-remote: WARNING ${relayUrl} does not answer — is the relay's SSH tunnel up?`)
     }
   }
   const ip = ipForPairing
@@ -403,12 +424,11 @@ export async function start(config = {}) {
     authority,
     upstreamPort: discovery.port || null,
     lan: { ip, url: ip ? `http://${ip}:${bridge.port}` : null },
-    public: {
-      url: tunnel.publicUrl,
-      kind: tunnel.kind,
-      ...(publicReachable === null ? {} : { reachable: publicReachable }),
-      ...(tunnel.note ? { note: tunnel.note } : {}),
-    },
+    public: relayUrl
+      ? { url: relayUrl, kind: 'relay', ...(relayReachable === null ? {} : { reachable: relayReachable }) }
+      : { url: tunnel.publicUrl, kind: tunnel.kind, ...(tunnel.note ? { note: tunnel.note } : {}) },
+    relay: relayUrl ? { url: relayUrl, ...(relayReachable === null ? {} : { reachable: relayReachable }) } : null,
+    tunnel: tunnel.publicUrl ? { url: tunnel.publicUrl, kind: tunnel.kind, ...(tunnel.note ? { note: tunnel.note } : {}) } : null,
     cookie,
     cookieExpiresAt: expiresAt ?? cookieExpiry(cookie),
     pairing: {

package/lib/tunnel.js

@@ -148,16 +148,7 @@ export async function ensureCloudflared({ log = () => {} } = {}) {
  * @param {(msg: string) => void} [options.log]
  * @returns {Promise<{publicUrl: string|null, kind: string, close: () => void, note?: string}>}
  */
-export async function startTunnel({ kind = 'auto', bridgePort, authority, domain = '', publicUrl = '', log = () => {} }) {
-  // An explicitly configured public URL (a self-hosted relay, e.g. the Aliyun box) wins over any
-  // detected tunnel: for that setup there is nothing to launch here, the relay is kept alive by its
-  // own reverse SSH tunnel.
-  if (publicUrl) {
-    const trimmed = String(publicUrl).trim().replace(/\/+$/, '')
-    log(`using the configured public URL: ${trimmed}`)
-    return { publicUrl: trimmed, kind: 'relay', close: () => {} }
-  }
-  if (kind === 'off') return { publicUrl: null, kind: 'none', close: () => {}, note: 'tunnel disabled by config' }
+export async function startTunnel({ kind = 'auto', bridgePort, authority, domain = '', publicUrl = '', log = () => {} }) {  if (kind === 'off') return { publicUrl: null, kind: 'none', close: () => {}, note: 'tunnel disabled by config' }
 
   const wantNgrok = kind === 'auto' || kind === 'ngrok'
   const wantCloudflared = kind === 'auto' || kind === 'cloudflared'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-hub",
-  "version": "0.3.3",
+  "version": "0.4.0",
   "description": "DSH 插件：把电脑上的 DeepSeek Harness 变成手机可访问的服务——起桥接、自动开隧道（ngrok / cloudflared）、签发 30 天 Cookie，并输出地址与凭据，配合 DSH Remote Android App 使用。",
   "type": "module",
   "main": "lib/index.js",