dsh-remote-plugin 0.4.4

package/index.mjs

@@ -0,0 +1,392 @@
+/* dsh-remote DSH 插件 · Node half
+ * 在 DSH Web 的 httpServer 上挂 /remote 前缀路由:
+ *   - /remote/...         移动控制台 + 主机管理页静态资源
+ *   - /remote/admin/api   管理控制台数据: 优先代理本地网关(完整设备监控/更新检查),
+ *                         网关不可用时回退到插件模式主机状态
+ * 浏览器侧入口由 client half 注册在 DSH 原生侧边栏(见 client.js)。
+ */
+import { spawn } from 'node:child_process'
+import { createReadStream, existsSync, mkdirSync, openSync, readFileSync, writeFileSync } from 'node:fs'
+import { stat } from 'node:fs/promises'
+import { homedir, hostname, networkInterfaces } from 'node:os'
+import { dirname, extname, normalize, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+export const name = 'dsh-remote'
+export const inject = ['webServer']
+
+const MOUNT = '/remote'
+const PUBLIC_DIR = fileURLToPath(new URL('./public/', import.meta.url))
+const INDEX_FILE = 'index.html'
+const GATEWAY_SCRIPT = fileURLToPath(new URL('./gateway.cjs', import.meta.url))
+const gatewayInstalled = existsSync(GATEWAY_SCRIPT)
+// 本地网关管理 API 代理: 让插件抽屉显示与 8787 网关管理页完全一致的数据。
+const GATEWAY_BASE = (process.env.DSH_REMOTE_GATEWAY || 'http://127.0.0.1:8787').replace(/\/+$/, '')
+
+function gatewayToken() {
+  if (process.env.DSH_REMOTE_TOKEN) return process.env.DSH_REMOTE_TOKEN
+  try {
+    return readFileSync(`${homedir()}/.dsh-remote/token`, 'utf8').trim() || ''
+  } catch {
+    return ''
+  }
+}
+
+const MIME = {
+  '.html': 'text/html; charset=utf-8',
+  '.js': 'text/javascript; charset=utf-8',
+  '.css': 'text/css; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.svg': 'image/svg+xml',
+  '.webmanifest': 'application/manifest+json; charset=utf-8',
+  '.png': 'image/png',
+  '.ico': 'image/x-icon',
+}
+
+let version = '0.0.0'
+try {
+  const v = JSON.parse(readFileSync(new URL('./public/version.json', import.meta.url), 'utf8'))
+  if (v?.version) version = v.version
+} catch {}
+
+// DSH 实际监听地址由 apply 时从 webServer 服务读取
+let dshListen = { host: '127.0.0.1', port: 3080 }
+
+function lanIPs() {
+  const out = []
+  for (const list of Object.values(networkInterfaces())) {
+    for (const it of list ?? []) {
+      if (it.family === 'IPv4' && !it.internal) out.push(it.address)
+    }
+  }
+  return out
+}
+
+function targetPath(pathname) {
+  const rel = decodeURIComponent(pathname.slice(MOUNT.length)) || '/'
+  const file = rel === '/' ? INDEX_FILE : rel.replace(/^\/+/, '')
+  const abs = resolve(PUBLIC_DIR, normalize(file))
+  if (abs !== PUBLIC_DIR && !abs.startsWith(PUBLIC_DIR)) return null
+  return abs
+}
+
+function sendJson(res, status, body) {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' })
+  res.end(JSON.stringify(body))
+}
+
+function readBody(req, maxBytes) {
+  return new Promise((resolvePromise, reject) => {
+    let body = ''
+    req.on('data', (chunk) => {
+      body += chunk
+      if (body.length > maxBytes) {
+        reject(new Error('body too large'))
+        req.destroy()
+      }
+    })
+    req.on('end', () => resolvePromise(body))
+    req.on('error', reject)
+  })
+}
+
+/** 转发到本地网关管理 API; 失败/超时返回 null。 */
+async function proxyGateway(path, method, body) {
+  const token = gatewayToken()
+  if (!token) return null
+  try {
+    const res = await fetch(`${GATEWAY_BASE}${path}`, {
+      method,
+      headers: {
+        authorization: `Bearer ${token}`,
+        'content-type': 'application/json',
+        'x-dsh-remote-client': 'admin',
+      },
+      body: method === 'POST' ? body : undefined,
+      signal: AbortSignal.timeout(1500),
+    })
+    const json = await res.json().catch(() => ({ ok: false, error: `gateway ${res.status}` }))
+    return { status: res.status, json }
+  } catch {
+    return null
+  }
+}
+
+/* ---------- 本地网关开关(持久化 + 自愈) ---------- */
+
+function sleep(ms) { return new Promise(r => setTimeout(r, ms)) }
+
+function runExit(cmd, args) {
+  return new Promise((resolvePromise) => {
+    let p
+    try { p = spawn(cmd, args, { stdio: 'ignore' }) }
+    catch { return resolvePromise(1) }
+    p.on('error', () => resolvePromise(1))
+    p.on('exit', (code) => resolvePromise(code ?? 1))
+  })
+}
+
+async function gatewayRunning() {
+  try {
+    const res = await fetch(`${GATEWAY_BASE}/health`, { signal: AbortSignal.timeout(800) })
+    return res.ok
+  } catch {
+    return false
+  }
+}
+
+/** 用户意图持久化在 ~/.dsh-remote/gateway.enabled: on=跟随 DSH 自启/自愈, off=手动停止。 */
+function gatewayStateFile() { return `${homedir()}/.dsh-remote/gateway.enabled` }
+
+function gatewayAutostart() {
+  if (process.env.DSH_REMOTE_AUTOSTART === '0') return false
+  try {
+    const v = readFileSync(gatewayStateFile(), 'utf8').trim()
+    return v !== 'off'
+  } catch {
+    return true // 全新安装: 默认自动拉起网关, 抽屉打开即有网关模式
+  }
+}
+
+function setGatewayEnabled(on) {
+  try {
+    mkdirSync(`${homedir()}/.dsh-remote`, { recursive: true })
+    writeFileSync(gatewayStateFile(), on ? 'on\n' : 'off\n')
+  } catch {}
+}
+
+/** 启动随插件分发的 gateway.cjs; 已运行则直接返回。 */
+async function startGateway() {
+  if (await gatewayRunning()) {
+    setGatewayEnabled(true)
+    return { ok: true, running: true, started: false }
+  }
+  const script = GATEWAY_SCRIPT
+  if (!existsSync(script)) {
+    return { ok: false, running: false, error: '插件包缺少 gateway.cjs, 请升级插件' }
+  }
+  const port = process.env.DSH_REMOTE_GATEWAY_PORT || '8787'
+
+  // 首选 systemd-run: 网关成为独立 user 单元, DSH 重启/升级不会连带杀掉它
+  let sysd = false
+  try {
+    await runExit('systemctl', ['--user', 'reset-failed', 'dsh-remote-gateway'])
+    sysd = (await runExit('systemd-run', [
+      '--user', '--unit=dsh-remote-gateway', '--service-type=exec',
+      '--setenv=PORT=' + port, '--setenv=HOST=0.0.0.0',
+      '--', process.execPath, script,
+    ])) === 0
+  } catch {}
+
+  // 无 systemd 的机器回退: detached 子进程
+  if (!sysd) {
+    let logFd = null
+    try {
+      logFd = openSync(`${homedir()}/.dsh-remote/plugin-gateway.log`, 'a')
+    } catch {}
+    const child = spawn(process.execPath, [script], {
+      cwd: dirname(script),
+      detached: true,
+      stdio: ['ignore', logFd ?? 'ignore', logFd ?? 'ignore'],
+      env: { ...process.env, PORT: port },
+    })
+    child.unref()
+  }
+  // 最多等 4 秒; 超过可能是端口冲突或首次初始化, 前端稍后刷新即可
+  for (let i = 0; i < 16; i++) {
+    await sleep(250)
+    if (await gatewayRunning()) {
+      setGatewayEnabled(true)
+      return { ok: true, running: true, started: true }
+    }
+  }
+  return { ok: true, running: false, pending: true, hint: '网关启动中, 稍后刷新' }
+}
+
+let ensurePromise = null
+/** 自愈入口: 状态轮询/DSH 启动时调用。开关为 on 且网关没起来, 就自动拉起(并发只拉一次)。 */
+function ensureGateway() {
+  if (!gatewayAutostart()) return Promise.resolve(false)
+  if (ensurePromise) return ensurePromise
+  ensurePromise = (async () => {
+    try {
+      if (await gatewayRunning()) return true
+      const out = await startGateway()
+      return !!out.running
+    } finally {
+      setTimeout(() => { ensurePromise = null }, 4000)
+    }
+  })()
+  return ensurePromise
+}
+
+/** 通过网关自身的 /admin/api/shutdown 优雅停止(不管它当初是谁拉起的); 并写入 off 防自愈拉起。 */
+async function stopGateway() {
+  const token = gatewayToken()
+  if (!token) return { ok: false, running: false, error: '找不到 ~/.dsh-remote/token, 无法认证网关' }
+  try {
+    const res = await fetch(`${GATEWAY_BASE}/admin/api/shutdown`, {
+      method: 'POST',
+      headers: { authorization: `Bearer ${token}`, 'x-dsh-remote-client': 'admin' },
+      signal: AbortSignal.timeout(2000),
+    })
+    const json = await res.json().catch(() => ({}))
+    if (res.ok) setGatewayEnabled(false)
+    return { ok: res.ok, running: false, ...json }
+  } catch (e) {
+    return { ok: false, running: false, error: '网关不可达: ' + (e?.message || e) }
+  }
+}
+
+async function resolveFile(pathname) {
+  let abs = targetPath(pathname)
+  if (abs === null) return null
+  try {
+    let info = await stat(abs)
+    if (info.isDirectory()) {
+      abs = resolve(abs, INDEX_FILE)
+      info = await stat(abs)
+    }
+    if (!info.isFile() && !extname(abs)) {
+      abs = abs + '.html' // /remote/admin -> admin.html
+      info = await stat(abs)
+    }
+    return info.isFile() ? { abs, info } : null
+  } catch {
+    if (!extname(abs)) {
+      // /remote/admin 无此裸文件 -> 再试 admin.html
+      try {
+        const alt = abs + '.html'
+        const info = await stat(alt)
+        return info.isFile() ? { abs: alt, info } : null
+      } catch {
+        return null
+      }
+    }
+    return null
+  }
+}
+
+async function serveStatic(req, res) {
+  const pathname = new URL(req.url ?? '/', 'http://x').pathname
+
+  // 无尾斜杠的入口重定向到带斜杠版本:
+  // 否则相对资源 styles.css/app.js 会按 URL 规则解析到上级路径 /styles.css,
+  // 被 DSH 的 SPA fallback 返回 HTML, 表现为白底 + 脚本不运行。
+  if (pathname === MOUNT) {
+    res.writeHead(302, { location: `${MOUNT}/` })
+    res.end()
+    return
+  }
+  if (pathname === `${MOUNT}/admin`) {
+    res.writeHead(302, { location: `${MOUNT}/admin/` })
+    res.end()
+    return
+  }
+
+  // 管理控制台数据: 优先代理本地网关(设备监控/更新检查完整), 网关不可用回退插件状态
+  if (pathname === `${MOUNT}/admin/api/state`) {
+    void ensureGateway() // 自愈: 开关为 on 而网关没起来时, 后台拉起, 下个轮询即可见网关
+    const localToken = gatewayToken()
+    const proxied = await proxyGateway('/admin/api/state', 'GET', '')
+    if (proxied !== null) {
+      // 主机端 DSH 面板本身已登录本机用户, 管理页无需令牌门禁;
+      // 把真实网关令牌一并返回, 抽屉里直接显示并允许复制(供手机 App 使用)。
+      sendJson(res, proxied.status, { ...proxied.json, token: localToken, mode: 'gateway', via: 'gateway', gatewayInstalled })
+      return
+    }
+    sendJson(res, 200, {
+      ok: true,
+      mode: 'plugin',
+      version,
+      token: localToken || '',
+      gatewayInstalled,
+      hostname: hostname(),
+      lanIPs: lanIPs(),
+      startedAt: Date.now() - Math.floor(process.uptime() * 1000),
+      uptimeSec: Math.floor(process.uptime()),
+      host: dshListen.host,
+      port: dshListen.port,
+      upstream: { url: 'DSH 内嵌(同进程, 无需网关)', reachable: true },
+      latest: { version, newer: false },
+      onlineCount: 0,
+      deviceCount: 0,
+      totalRequests: 0,
+      authFailures: 0,
+      devices: [],
+    })
+    return
+  }
+  if (pathname === `${MOUNT}/admin/api/note` || pathname === `${MOUNT}/admin/api/kick`) {
+    if (req.method !== 'POST') {
+      res.writeHead(405, { allow: 'POST' })
+      res.end()
+      return
+    }
+    const body = await readBody(req, 4096)
+    const sub = pathname.endsWith('/note') ? '/note' : '/kick'
+    const proxied = await proxyGateway(`/admin/api${sub}`, 'POST', body)
+    if (proxied !== null) {
+      sendJson(res, proxied.status, proxied.json)
+    } else {
+      sendJson(res, 502, { ok: false, error: '本地网关不可用, 设备管理需在 8787 网关模式操作' })
+    }
+    return
+  }
+
+  // 本地网关开关(仅插件内嵌页使用): GET 状态 / POST {action:'start'|'stop'}
+  if (pathname === `${MOUNT}/admin/api/gateway`) {
+    if (req.method === 'GET') {
+      sendJson(res, 200, { ok: true, running: await gatewayRunning() })
+      return
+    }
+    if (req.method === 'POST') {
+      let action = ''
+      try {
+        const raw = await readBody(req, 4096)
+        action = JSON.parse(raw || '{}').action
+      } catch {}
+      if (action === 'start') sendJson(res, 200, await startGateway())
+      else if (action === 'stop') sendJson(res, 200, await stopGateway())
+      else sendJson(res, 400, { ok: false, error: 'action 必须是 start 或 stop' })
+      return
+    }
+    res.writeHead(405, { allow: 'GET, POST' })
+    res.end()
+    return
+  }
+
+  if (req.method !== 'GET' && req.method !== 'HEAD') {
+    res.writeHead(405, { allow: 'GET, HEAD' })
+    res.end()
+    return
+  }
+  const found = await resolveFile(pathname)
+  if (found === null) {
+    res.writeHead(404, { 'content-type': 'text/plain; charset=utf-8' })
+    res.end('not found')
+    return
+  }
+  const { abs, info } = found
+  res.writeHead(200, {
+    'content-type': MIME[extname(abs)] ?? 'application/octet-stream',
+    'content-length': info.size,
+    'cache-control': 'no-cache',
+  })
+  if (req.method === 'HEAD') {
+    res.end()
+    return
+  }
+  createReadStream(abs).pipe(res)
+}
+
+export function apply(ctx) {
+  dshListen = { host: ctx.webServer.host, port: ctx.webServer.port }
+  ctx.effect(() => ctx.webServer.register({
+    kind: 'prefix',
+    path: MOUNT,
+    handler: serveStatic,
+  }), 'dsh-remote: /remote route')
+  // DSH 启动/重启后自愈: 用户没关过网关就自动拉起(默认开, DSH_REMOTE_AUTOSTART=0 关闭)
+  void ensureGateway()
+}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "dsh-remote-plugin",
+  "version": "0.4.4",
+  "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控，配合 Android App 远程操控会话/审批/提问/goal。",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": {
+    ".": "./index.mjs",
+    "./client": "./client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.mjs",
+    "client.js",
+    "gateway.cjs",
+    "public",
+    "cordis.patch.yml"
+  ],
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "dsh",
+    "bundle",
+    "remote-control",
+    "mobile"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/Blank-not-black/dsh-Remote",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Blank-not-black/dsh-Remote.git",
+    "directory": "packages/plugin"
+  },
+  "bugs": {
+    "url": "https://github.com/Blank-not-black/dsh-Remote/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-slots"
+      ],
+      "platform": "web"
+    }
+  }
+}

package/public/admin.html

@@ -0,0 +1,89 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
+  <meta name="theme-color" content="#0b0e1a">
+  <title>DSH Remote · 管理</title>
+  <link rel="stylesheet" href="../styles.css">
+  <style>
+    .admin-wrap { max-width: 860px; margin: 0 auto; padding: calc(env(safe-area-inset-top, 0px) + 14px) 14px 40px; }
+    .admin-title { display: flex; align-items: center; justify-content: space-between; margin-bottom: 14px; }
+    .admin-title h1 { font-size: 20px; margin: 0; }
+    .login-card { background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius); padding: 16px; display: flex; gap: 8px; }
+    .login-card input { flex: 1; background: var(--bg); color: var(--text); border: 1px solid var(--line); border-radius: 10px; padding: 10px 12px; font: inherit; outline: none; }
+    .stat-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); gap: 8px; margin-bottom: 14px; }
+    .stat-card { background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius); padding: 12px 14px; }
+    .stat-card .v { font-size: 20px; font-weight: 700; word-break: break-all; }
+    .stat-card .k { font-size: 11px; color: var(--muted); margin-top: 2px; }
+    .stat-card.ok .v { color: var(--cyan); } .stat-card.warn .v { color: var(--orange); }
+    .table-wrap { background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius); overflow-x: auto; }
+    table { width: 100%; border-collapse: collapse; font-size: 13px; min-width: 760px; }
+    th, td { text-align: left; padding: 10px 12px; border-bottom: 1px solid var(--line); vertical-align: top; }
+    th { font-size: 11px; color: var(--muted); letter-spacing: .5px; }
+    tr:last-child td { border-bottom: none; }
+    .badge { display: inline-block; font-size: 11px; padding: 1px 8px; border-radius: 999px; border: 1px solid var(--line); color: var(--muted); }
+    .badge.app { color: var(--blue); border-color: rgba(91,140,255,.4); background: rgba(91,140,255,.08); }
+    .badge.admin { color: var(--purple); border-color: rgba(180,140,255,.4); background: rgba(180,140,255,.08); }
+    .dot { display: inline-block; width: 7px; height: 7px; border-radius: 50%; background: var(--line); margin-right: 5px; }
+    .dot.on { background: var(--cyan); box-shadow: 0 0 6px rgba(125,207,255,.9); }
+    .dot.off { background: var(--orange); }
+    .mono { font-family: ui-monospace, monospace; font-size: 12px; word-break: break-all; }
+    .ua { max-width: 260px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--muted); }
+    .token-row { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; margin: 10px 0 14px; }
+    .token-row code { flex: 1; background: var(--bg); border: 1px solid var(--line); border-radius: 8px; padding: 8px 10px; font-size: 12px; word-break: break-all; }
+    .empty { text-align: center; color: var(--muted); padding: 30px 0; }
+    .empty-actions { display: flex; gap: 8px; justify-content: center; flex-wrap: wrap; margin-top: 12px; }
+    a.mini-btn { text-decoration: none; display: inline-flex; align-items: center; }
+    .gh-btn { display: inline-flex; align-items: center; gap: 6px; text-decoration: none; color: var(--text); }
+    .gh-btn svg { width: 16px; height: 16px; fill: currentColor; }
+    .admin-title .right { display: flex; align-items: center; gap: 10px; }
+  </style>
+</head>
+<body>
+  <div class="admin-wrap">
+    <div class="admin-title">
+      <div style="display:flex;align-items:center;gap:10px">
+        <a id="btn-console" class="mini-btn" href="../" title="返回控制台">‹ 控制台</a>
+        <button id="btn-close-drawer" class="mini-btn hidden" title="收起面板">‹ 收起面板</button>
+        <h1>DSH Remote 管理</h1>
+      </div>
+      <div class="right">
+        <a class="mini-btn gh-btn" href="https://github.com/Blank-not-black/dsh-Remote" target="_blank" rel="noopener" title="访问 GitHub 仓库">
+          <svg viewBox="0 0 16 16" aria-hidden="true"><path d="M8 0C3.58 0 0 3.58 0 8a8.01 8.01 0 0 0 5.47 7.59c.4.08.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27s1.36.09 2 .27c1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.01 8.01 0 0 0 16 8c0-4.42-3.58-8-8-8Z"/></svg>
+          仓库
+        </a>
+        <span id="conn-badge" class="conn-badge off">未认证</span>
+      </div>
+    </div>
+
+    <div id="login-view" class="login-card hidden">
+      <input id="token-input" type="password" placeholder="输入网关访问令牌" autocomplete="off">
+      <button id="btn-login" class="mini-btn">进入</button>
+    </div>
+
+    <div id="main-view" class="hidden">
+      <div class="token-row">
+        <code id="token-full">—</code>
+        <button id="btn-gateway" class="mini-btn hidden">启动网关</button>
+        <button id="btn-copy" class="mini-btn">复制令牌</button>
+        <button id="btn-logout" class="mini-btn">退出</button>
+      </div>
+
+      <div class="stat-grid" id="stats"></div>
+
+      <div class="section-head"><span>已连接设备</span><span id="device-summary" class="muted"></span></div>
+      <div class="table-wrap">
+        <table>
+          <thead><tr><th>状态</th><th>名称</th><th>类型</th><th>IP</th><th>通道</th><th>请求</th><th>最后活跃</th><th>UA</th><th></th></tr></thead>
+          <tbody id="device-rows"></tbody>
+        </table>
+        <div id="device-empty" class="empty hidden">暂无设备记录</div>
+      </div>
+    </div>
+  </div>
+
+  <div id="toast" class="toast hidden"></div>
+  <script src="../admin.js"></script>
+</body>
+</html>