dsh-remote 0.8.34 → 0.8.36

package/lib/client.js

@@ -105,6 +105,36 @@ window.__ModuleLoader__.load({
         'settings.audit': '最近执行的远程命令（审计日志）',
         'settings.auditEmpty': '暂无记录（在远端执行的命令会记录到 $DSH_HOME/remote-workspaces/audit.log）',
         'settings.auditRefresh': '刷新日志',
+        'settings.webAttach': '远程 DSH 界面',
+        'settings.webAttachHint': '在本机浏览器里打开远程机器上的 DSH 网页界面。不需要在远端开放任何端口：插件会主动 SSH 连出去，在远端启一个只监听 127.0.0.1 的 dsh web，再把它的端口通过 SSH 隧道搬回本机。',
+        'settings.webAttachMachine': '机器',
+        'settings.webAttachOpen': '连接并打开',
+        'settings.webAttachOpening': '正在连接…',
+        'settings.webAttachReopen': '打开',
+        'settings.webAttachClose': '断开',
+        'settings.webAttachCloseStop': '断开并停止远端',
+        'settings.webAttachReconnect': '重连',
+        'settings.webAttachDropped': '连接已断开',
+        'settings.webAttachNone': '尚未连接任何远程界面',
+        'settings.webAttachExisting': '或粘贴远端已在运行的界面地址（http://127.0.0.1:<端口>/?token=…）',
+        'settings.webAttachExistingGo': '连接已有实例',
+        'settings.webAttachTokenWarn': '地址含登录令牌，仅供本机使用，请勿外发。',
+        'settings.webAttachFailed': '连接失败：',
+        'settings.deploy': '远端 dsh 体检与部署',
+        'settings.deployHint': '连接失败大多不是插件的问题，而是远端 dsh 版本或环境不对（例如旧版在 Linux 上无法启动 web）。这里可以只读体检，也可以一键装到远端私有目录（不影响用户在用的版本）。',
+        'settings.deployProbe': '体检（只读）',
+        'settings.deployProbing': '正在体检…',
+        'settings.deployInstall': '部署并验证',
+        'settings.deployInstalling': '正在部署…',
+        'settings.deployConfirm': '将在远端私有目录安装 dsh（不写系统目录、不改 PATH、不覆盖用户在用的版本）。继续？',
+        'settings.deployInvestigate': '让 AI 排查',
+        'settings.deployInvestigating': '正在创建排查会话…',
+        'settings.deployOk': '远端环境可用',
+        'settings.deployBlocked': '远端环境有问题',
+        'settings.deployUseCommand': '将使用的 dsh',
+        'settings.deploySteps': '安装步骤',
+        'settings.deployDone': '部署完成，已记录该机器使用的 dsh',
+        'settings.deployInvestigateStarted': '已创建排查会话，请在会话里跟进。',
         'settings.badgePwd': '密码',
         'settings.badgeKeychain': '钥匙串',
         'settings.badgeProxy': '跳板',
@@ -144,6 +174,7 @@ window.__ModuleLoader__.load({
 'settings.updateAppliedNoReload': '✅ 已更新到 v{to}（{from} → {to}）。重启 Harness 生效。',
 'settings.updatePendingReload': '⚠️ 磁盘已是 v{disk}，运行中的仍是 v{loaded}；点「立即更新」或重启 Harness 完成切换。',
 'settings.selfUpdateBlocked': 'ℹ️ 当前是 link:/开发模式安装（不在 node_modules 下），已禁止自动更新以免覆盖源码——请在你的源码仓库里更新。',
+'settings.updateRegistryError': 'npm registry 查询失败：{msg}',
         'settings.updateFailed': '更新失败',
         'settings.updateFailedMsg': '更新失败: {msg}',
         'settings.registryUnreachable': '无法连接 npm registry',
@@ -332,6 +363,36 @@ window.__ModuleLoader__.load({
         'settings.audit': 'Recent remote commands (audit log)',
         'settings.auditEmpty': 'No records yet (commands run remotely are logged to $DSH_HOME/remote-workspaces/audit.log)',
         'settings.auditRefresh': 'Refresh log',
+        'settings.webAttach': 'Remote DSH Web UI',
+        'settings.webAttachHint': 'Open the DSH web interface of a remote machine in this browser. The remote never opens an inbound port: this plugin SSHes out, starts a loopback-only dsh web there, and carries its port back over the SSH connection.',
+        'settings.webAttachMachine': 'Machine',
+        'settings.webAttachOpen': 'Connect & open',
+        'settings.webAttachOpening': 'Connecting…',
+        'settings.webAttachReopen': 'Open',
+        'settings.webAttachClose': 'Disconnect',
+        'settings.webAttachCloseStop': 'Disconnect & stop remote',
+        'settings.webAttachReconnect': 'Reconnect',
+        'settings.webAttachDropped': 'Disconnected',
+        'settings.webAttachNone': 'No remote UI attached',
+        'settings.webAttachExisting': 'Or paste the URL of an interface already running there (http://127.0.0.1:<port>/?token=…)',
+        'settings.webAttachExistingGo': 'Attach to running instance',
+        'settings.webAttachTokenWarn': 'The URL carries a login token. It is for this machine only — do not share it.',
+        'settings.webAttachFailed': 'Could not attach: ',
+        'settings.deploy': 'Remote dsh health check & deploy',
+        'settings.deployHint': 'A failed connect is usually not the plugin\'s fault: the remote dsh version or environment is wrong (an old one cannot start the web surface on Linux at all). Check read-only, or install into a private directory on the remote that leaves the user\'s own version untouched.',
+        'settings.deployProbe': 'Check (read-only)',
+        'settings.deployProbing': 'Checking…',
+        'settings.deployInstall': 'Deploy & verify',
+        'settings.deployInstalling': 'Deploying…',
+        'settings.deployConfirm': 'Install dsh into a private directory on the remote (no system directory, no PATH change, no replacing the version in use). Continue?',
+        'settings.deployInvestigate': 'Let the AI investigate',
+        'settings.deployInvestigating': 'Creating a session…',
+        'settings.deployOk': 'Remote environment is usable',
+        'settings.deployBlocked': 'Remote environment has a problem',
+        'settings.deployUseCommand': 'dsh that will be used',
+        'settings.deploySteps': 'Install steps',
+        'settings.deployDone': 'Deployed; this machine now records the dsh it uses',
+        'settings.deployInvestigateStarted': 'A session was created — follow up there.',
         'settings.badgePwd': 'password',
         'settings.badgeKeychain': 'keychain',
         'settings.badgeProxy': 'jump',
@@ -371,6 +432,7 @@ window.__ModuleLoader__.load({
 'settings.updateAppliedNoReload': '✅ Updated to v{to} ({from} → {to}). Restart Harness to apply.',
 'settings.updatePendingReload': '⚠️ v{disk} is on disk but v{loaded} is still running; update again or restart Harness to switch.',
 'settings.selfUpdateBlocked': 'ℹ️ This is a link:/dev install (not under node_modules), so self-update is disabled to avoid overwriting source — update it from its source repo.',
+        'settings.updateRegistryError': 'npm registry query failed: {msg}',
         'settings.updateFailed': 'Update failed',
         'settings.updateFailedMsg': 'Update failed: {msg}',
         'settings.registryUnreachable': 'Cannot reach the npm registry',
@@ -783,6 +845,21 @@ window.__ModuleLoader__.load({
       const [advOpen, setAdvOpen] = React.useState(false) // 高级配置折叠
       const [fwdOpen, setFwdOpen] = React.useState(true)
       const [auditOpen, setAuditOpen] = React.useState(false)
+      // Issue #46: attach a REMOTE machine's DSH Web UI as a local page. One
+      // session per machine; `webAttach` holds the machineId currently opening.
+      const [webAttaches, setWebAttaches] = React.useState([])
+      const [webAttachMachine, setWebAttachMachine] = React.useState('')
+      const [webAttachOpen, setWebAttachOpen] = React.useState(false)
+      const [webAttachBusy, setWebAttachBusy] = React.useState('')
+      const [webAttachErr, setWebAttachErr] = React.useState('')
+      const [webAttachExisting, setWebAttachExisting] = React.useState('')
+      // Issue #46 P1–P4: deterministic remote deployment + the AI escape hatch.
+      // `deploy` holds the last probe/install outcome for the selected machine;
+      // `deployBusy` is the running step id, so the UI can show progress.
+      const [deploy, setDeploy] = React.useState(null)
+      const [deployBusy, setDeployBusy] = React.useState('')
+      const [deployErr, setDeployErr] = React.useState('')
+      const [deployOpen, setDeployOpen] = React.useState(false)
       React.useEffect(() => { ensureChromeCss() }, [])
 
       const testConn = () => {
@@ -830,9 +907,17 @@ window.__ModuleLoader__.load({
         setUpdBusy(true); setUpdMsg('')
         api('GET', '/dsh-remote/update-check')
           .then((r) => {
-            if (!r || !r.ok) { setUpdMsg((r && r.error) || tr('settings.updateFail')); return }
-            setUpd(r)
-            if (r.updateMode) setUpdMode(r.updateMode)
+            if (!r) { setUpdMsg(tr('settings.updateFail')); return }
+            // 即使 registry 查不到（限流/离线/超时），也先用本地状态填充面板，
+            // 否则 latest 永远为 null，界面会一直停在「版本信息加载中…」——
+            // 看起来像卡死，而本地版本/更新模式其实都是已知的。
+            if (r.ok) { setUpd(r); if (r.updateMode) setUpdMode(r.updateMode) }
+            if (r.registryError) {
+              // 把真实原因说出来：限流是"稍后自动恢复"，与"网络坏了"处置不同。
+              setUpdMsg(tr('settings.updateRegistryError', { msg: r.registryError }))
+              return
+            }
+            if (!r.ok) { setUpdMsg(r.error || tr('settings.updateFail')); return }
             if (!quiet) setUpdMsg(r.updateAvailable ? tr('settings.updateAvailable', { version: r.latest }) : tr('settings.updateLatest', { version: r.current }))
           })
           .catch((e) => setUpdMsg(String((e && e.message) || e)))
@@ -864,6 +949,43 @@ window.__ModuleLoader__.load({
       const refreshForwards = () => api('GET', '/dsh-remote/forwards').then((r) => setForwards(r.forwards || [])).catch(() => {})
       React.useEffect(() => { refreshForwards(); api('GET', '/dsh-remote/audit?limit=30').then((r) => setAuditLines(r.lines || [])).catch(() => {}) }, [])
 
+      // ── 远程 DSH 界面（issue #46）─────────────────────────────────────────
+      // The remote never opens an inbound port; we SSH out and carry the remote
+      // loopback web UI back to a local port. One tunnel per machine.
+      const refreshWebAttaches = () => api('GET', '/dsh-remote/web-attach')
+        .then((r) => setWebAttaches(r.attaches || []))
+        .catch(() => {})
+      React.useEffect(() => { refreshWebAttaches(); const t = setInterval(refreshWebAttaches, 15000); return () => clearInterval(t) }, [])
+      const webAttachAction = (action, machineId, extra) => {
+        setWebAttachBusy(machineId + ':' + action); setWebAttachErr('')
+        return api('POST', '/dsh-remote/web-attach', { action, machineId, ...(extra || {}) })
+          .then((r) => { refreshWebAttaches(); return r })
+          .catch((e) => { setWebAttachErr(String((e && e.message) || e)); return null })
+          .then((r) => { setWebAttachBusy(''); return r })
+      }
+
+      // ── 远程部署：体检 / 部署并验证 / 让 AI 排查 ───────────────────────────
+      // The probe is read-only, so it is safe to run before the user agrees to
+      // anything; the install requires an explicit second click (confirm: true).
+      const deployAction = (action, machineId, extra) => {
+        setDeployBusy(action); setDeployErr('')
+        return api('POST', '/dsh-remote/web-attach', { action, machineId, ...(extra || {}) })
+          .then((r) => {
+            if (action === 'probe') setDeploy({ kind: 'probe', ...r, at: Date.now() })
+            if (action === 'install') setDeploy({ kind: 'install', ...r, at: Date.now() })
+            if (action === 'investigate') setDeploy({ kind: 'investigate', ...r, at: Date.now() })
+            return r
+          })
+          .catch((e) => {
+            const msg = String((e && e.message) || e)
+            setDeployErr(msg)
+            // Keep the failing step list so the operator sees WHERE it stopped.
+            setDeploy({ kind: action, ok: false, error: msg, at: Date.now() })
+            return null
+          })
+          .then((r) => { setDeployBusy(''); refreshWebAttaches(); return r })
+      }
+
       const setF = (k) => (ev) => setForm({ ...form, [k]: ev.target.value })
       const setFb = (k) => (ev) => setForm({ ...form, [k]: ev.target.checked })
       const startEdit = (m) => {
@@ -1082,6 +1204,132 @@ window.__ModuleLoader__.load({
           workspaces.map((w, i) => React.createElement('div', { key: w + i, style: { display: 'flex', gap: 8, alignItems: 'center', padding: '4px 0' } },
             React.createElement('code', { style: { flex: 1, fontSize: 12, fontFamily: 'monospace' } }, w),
             React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 10px' }, onClick: () => setWorkspaceNow(w) }, tr('settings.switch'))))) : null,
+        // 远程 DSH 界面（issue #46）
+        React.createElement('div', { style: boxS },
+          sectionToggle(webAttachOpen, setWebAttachOpen, tr('settings.webAttach')),
+          webAttachOpen ? React.createElement(React.Fragment, null,
+            React.createElement('div', { style: { opacity: 0.65, fontSize: 11, lineHeight: 1.5, marginBottom: 6 } }, tr('settings.webAttachHint')),
+            // The URL below carries a one-time login token. It stays on loopback,
+            // but a user could paste it into a chat — say so where the URL is.
+            React.createElement('div', { style: { color: T.warn, fontSize: 11, lineHeight: 1.5, marginBottom: 6 } }, tr('settings.webAttachTokenWarn')),
+            // Live tunnels, one row per machine.
+            webAttaches.length ? webAttaches.map((a) => React.createElement('div', { key: a.machineId || a.localPort, style: { display: 'flex', gap: 8, alignItems: 'center', padding: '6px 0', fontSize: 12, flexWrap: 'wrap' } },
+              React.createElement('span', { style: { color: a.active ? T.ok : T.muted } }, a.active ? '●' : '○'),
+              React.createElement('code', { style: { fontFamily: 'monospace' } }, a.cleanUrl || ''),
+              React.createElement('span', { style: { opacity: 0.6, fontFamily: 'monospace' } }, '→ :' + a.remotePort),
+              a.active ? React.createElement('a', {
+                className: 'dsh-rw-btn dsh-rw-primary', style: { ...primaryBtnS, textDecoration: 'none' },
+                // The token rides on this loopback URL only; DSH exchanges it
+                // for a signed cookie and redirects to a clean '/'.
+                href: a.url, target: '_blank', rel: 'noopener noreferrer',
+              }, tr('settings.webAttachReopen')) : null,
+              // A tunnel whose listener died (remote restart, sshd drop) keeps
+              // its row so the user can see what happened and reconnect. The
+              // remote process is NOT auto-restarted: that would silently
+              // resurrect a server on a machine the user may be done with.
+              !a.active ? React.createElement('button', {
+                type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px' },
+                disabled: !!webAttachBusy, onClick: () => webAttachAction('open', a.machineId),
+              }, tr('settings.webAttachReconnect')) : null,
+              !a.active ? React.createElement('span', { style: { color: T.muted, fontSize: 11 } }, a.error || tr('settings.webAttachDropped')) : null,
+              React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px' },
+                disabled: !!webAttachBusy, onClick: () => webAttachAction('close', a.machineId) }, tr('settings.webAttachClose')),
+              // Only offered for a process we started: an attach onto the user's
+              // own running DSH must never signal it.
+              a.managed
+                ? React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px' },
+                    disabled: !!webAttachBusy, onClick: () => webAttachAction('close', a.machineId, { stopRemote: true }) }, tr('settings.webAttachCloseStop'))
+                : null)) : React.createElement('div', { style: { opacity: 0.6, fontSize: 12 } }, tr('settings.webAttachNone')),
+            React.createElement('div', { style: { display: 'flex', gap: 6, alignItems: 'center', marginTop: 8, flexWrap: 'wrap' } },
+              React.createElement('select', { className: 'dsh-rw-input', value: webAttachMachine, onChange: (e) => setWebAttachMachine(e.target.value), style: { ...inputS, maxWidth: 200 } },
+                React.createElement('option', { value: '' }, tr('settings.webAttachMachine') + '…'),
+                machines.map((m) => React.createElement('option', { key: m.id, value: m.id }, `${m.name || m.host} (${m.username}@${m.host})`))),
+              React.createElement('button', {
+                type: 'button', className: 'dsh-rw-btn dsh-rw-primary', style: primaryBtnS,
+                disabled: !!webAttachBusy || !webAttachMachine,
+                // The machine is named explicitly in the request, so attaching
+                // never has to move the user's "current machine" selection.
+                onClick: () => webAttachAction('open', webAttachMachine),
+              }, webAttachBusy.endsWith(':open') ? tr('settings.webAttachOpening') : tr('settings.webAttachOpen'))),
+            React.createElement('div', { style: { display: 'flex', gap: 6, alignItems: 'center', marginTop: 6, flexWrap: 'wrap' } },
+              React.createElement('input', { className: 'dsh-rw-input', value: webAttachExisting, onChange: (e) => setWebAttachExisting(e.target.value), placeholder: tr('settings.webAttachExisting'), style: { ...inputS, flex: 1, minWidth: 260 } }),
+              React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px' },
+                disabled: !!webAttachBusy || !webAttachMachine || !webAttachExisting.trim(),
+                onClick: () => webAttachAction('open', webAttachMachine, { existingUrl: webAttachExisting.trim() }).then(() => setWebAttachExisting('')) }, tr('settings.webAttachExistingGo'))),
+            webAttachErr ? React.createElement('div', { style: { color: T.danger, fontSize: 12, marginTop: 6, wordBreak: 'break-all' } }, tr('settings.webAttachFailed') + webAttachErr) : null,
+          ) : React.createElement('div', { style: { fontSize: 11, opacity: 0.55 } }, String(webAttaches.length)),
+        ),
+        // 远端 dsh 体检与部署（issue #46 P1–P4）：确定性的体检/安装，失败再交给 AI。
+        React.createElement('div', { style: boxS },
+          sectionToggle(deployOpen, setDeployOpen, tr('settings.deploy')),
+          deployOpen ? React.createElement(React.Fragment, null,
+            React.createElement('div', { style: { opacity: 0.65, fontSize: 11, lineHeight: 1.5, marginBottom: 6 } }, tr('settings.deployHint')),
+            React.createElement('div', { style: { display: 'flex', gap: 6, alignItems: 'center', marginBottom: 6, flexWrap: 'wrap' } },
+              React.createElement('select', { className: 'dsh-rw-input', value: webAttachMachine, onChange: (e) => setWebAttachMachine(e.target.value), style: { ...inputS, maxWidth: 200 } },
+                React.createElement('option', { value: '' }, tr('settings.webAttachMachine') + '…'),
+                machines.map((m) => React.createElement('option', { key: m.id, value: m.id }, `${m.name || m.host} (${m.username}@${m.host})`))),
+              React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 10px' },
+                disabled: !!deployBusy || !webAttachMachine,
+                onClick: () => deployAction('probe', webAttachMachine) },
+                deployBusy === 'probe' ? tr('settings.deployProbing') : tr('settings.deployProbe'))),
+            // Verdict from the last probe/install, rendered as findings with the
+            // severity the backend assigned — the UI never re-classifies them.
+            deploy ? React.createElement('div', { style: { fontSize: 12, lineHeight: 1.6 } },
+              deploy.kind === 'probe' && deploy.verdict
+                ? React.createElement('div', { style: { fontWeight: 600, color: deploy.verdict.ok ? T.ok : T.danger, marginBottom: 4 } },
+                    deploy.verdict.ok ? tr('settings.deployOk') : tr('settings.deployBlocked'))
+                : null,
+              (deploy.verdict && deploy.verdict.findings || []).map((f, i) => React.createElement('div', { key: f.code + i, style: { display: 'flex', gap: 6, alignItems: 'flex-start', padding: '2px 0' } },
+                React.createElement('span', { style: { color: f.severity === 'blocker' ? T.danger : f.severity === 'warn' ? T.warn : f.severity === 'ok' ? T.ok : T.muted } },
+                  f.severity === 'blocker' ? '●' : f.severity === 'ok' ? '●' : '○'),
+                React.createElement('span', null,
+                  React.createElement('span', null, f.summary),
+                  f.detail ? React.createElement('span', { style: { opacity: 0.7 } }, ' —— ' + f.detail) : null,
+                  f.fix ? React.createElement('div', { style: { opacity: 0.8, fontSize: 11 } }, '→ ' + f.fix) : null))),
+              deploy.command || (deploy.verdict && deploy.verdict.useCommand)
+                ? React.createElement('div', { style: { marginTop: 4, fontFamily: 'monospace', fontSize: 11, opacity: 0.8, wordBreak: 'break-all' } },
+                    tr('settings.deployUseCommand') + '：' + (deploy.command || deploy.verdict.useCommand))
+                : null,
+              // Per-step progress: a failure names the step it stopped at, which
+              // is the whole reason the plan is split into separate commands.
+              Array.isArray(deploy.steps) && deploy.steps.length
+                ? React.createElement('div', { style: { marginTop: 6 } },
+                    React.createElement('div', { style: { fontWeight: 600, marginBottom: 2 } }, tr('settings.deploySteps')),
+                    deploy.steps.map((s) => React.createElement('div', { key: s.id, style: { fontSize: 11, fontFamily: 'monospace', display: 'flex', gap: 6 } },
+                      React.createElement('span', { style: { color: s.ok ? T.ok : T.danger } }, s.ok ? '✓' : '✗'),
+                      React.createElement('span', null, s.title),
+                      !s.ok && s.output ? React.createElement('span', { style: { opacity: 0.75, whiteSpace: 'pre-wrap', wordBreak: 'break-all' } }, ' — ' + String(s.output).slice(0, 300)) : null)))
+                : null,
+              deploy.ok === true && deploy.steps
+                ? React.createElement('div', { style: { color: T.ok, marginTop: 4 } }, tr('settings.deployDone'))
+                : null,
+              deploy.kind === 'investigate' && deploy.sessionId
+                ? React.createElement('div', { style: { color: T.ok, marginTop: 4 } }, tr('settings.deployInvestigateStarted') + ' (' + deploy.sessionId + ')')
+                : null,
+            ) : null,
+            // The install button only appears when a probe says it is both needed
+            // and possible; clicking it is the explicit consent (confirm: true).
+            deploy && deploy.verdict && deploy.verdict.canAutoInstall && !deploy.verdict.ok
+              ? React.createElement('button', { type: 'button', className: 'dsh-rw-btn dsh-rw-primary', style: { ...primaryBtnS, marginTop: 6 },
+                  disabled: !!deployBusy,
+                  onClick: () => { if (window.confirm(tr('settings.deployConfirm'))) deployAction('install', webAttachMachine, { confirm: true }) } },
+                  deployBusy === 'install' ? tr('settings.deployInstalling') : tr('settings.deployInstall'))
+              : null,
+            // The AI escape hatch: offered after a failure, and ONLY on click —
+            // it costs a model call, so it is never automatic.
+            (deployErr || (deploy && deploy.ok === false))
+              ? React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 10px', marginTop: 6 },
+                  disabled: !!deployBusy,
+                  onClick: () => deployAction('investigate', webAttachMachine, {
+                    findings: (deploy && deploy.verdict && deploy.verdict.findings) || [],
+                    facts: deploy && deploy.facts,
+                    error: deployErr || (deploy && deploy.error) || '',
+                  }) },
+                  deployBusy === 'investigate' ? tr('settings.deployInvestigating') : tr('settings.deployInvestigate'))
+              : null,
+            deployErr ? React.createElement('div', { style: { color: T.danger, fontSize: 12, marginTop: 6, wordBreak: 'break-all' } }, deployErr) : null,
+          ) : React.createElement('div', { style: { fontSize: 11, opacity: 0.55 } }, deploy && deploy.verdict ? (deploy.verdict.ok ? tr('settings.deployOk') : tr('settings.deployBlocked')) : ''),
+        ),
         // 端口转发面板
         React.createElement('div', { style: boxS },
           sectionToggle(fwdOpen, setFwdOpen, tr('settings.forwards')),

package/lib/http-transport.js

@@ -67,11 +67,103 @@ export function connectionRoute(route) {
   }
 }
 
+/**
+ * Reject a browser-shaped request that is not same-origin ours.
+ *
+ * This is the FALLBACK fence, used only when the Connection service (which owns
+ * DSH's authoritative `requestRejection`) is absent — an old composition that
+ * has a `webServer` but no browser-authentication owner. It is deliberately
+ * fail-closed on the three browser vectors our own routes would otherwise
+ * accept:
+ *   • `sec-fetch-site: cross-site` — a page on any origin driving our API;
+ *   • an `Origin` that is not our own authority — the same, with CORS markers;
+ *   • a non-loopback `Host` — DNS rebinding, where a name the attacker controls
+ *     resolves to 127.0.0.1 so even `Origin === Host` looks "same-origin".
+ * Non-browser callers (curl, scripts) carry no `Sec-Fetch-*`/`Origin` and a
+ * loopback `Host`, so they keep working; that is the same shape DSH's own fence
+ * implements for `/api`.
+ *
+ * A request with no HTTP headers at all is not a browser request — it comes
+ * from an in-process caller (tests, and the Desktop carrier's IPC path, which
+ * authenticates before dispatch) — so there is no browser layer to defend.
+ *
+ * @param {import('node:http').IncomingMessage} req - the request under test.
+ * @returns {number|undefined} 403 to reject, undefined to proceed.
+ */
+function fallbackRejection(req) {
+  const headers = req && req.headers
+  if (!headers || typeof headers !== 'object') return undefined
+  const header = (name) => {
+    const value = headers[name]
+    return typeof value === 'string' ? value : Array.isArray(value) ? value[0] : undefined
+  }
+  if (header('sec-fetch-site') === 'cross-site') return 403
+  const host = header('host')
+  const origin = header('origin')
+  if (origin !== undefined && host !== undefined) {
+    try {
+      if (new URL(origin).host !== host) return 403
+    } catch {
+      return 403
+    }
+  }
+  if (host !== undefined) {
+    const hostname = host.replace(/:\d+$/, '').toLowerCase()
+    const loopback = hostname === 'localhost' || hostname === '[::1]'
+      || /^127(?:\.\d{1,3}){3}$/.test(hostname)
+    if (!loopback) return 403
+  }
+  return undefined
+}
+
+/**
+ * Wrap one route so every request passes DSH's browser trust fence first.
+ *
+ * The legacy `/dsh-remote/*` routes are registered straight on `webServer`, which
+ * applies no Host/Origin check and no browser authentication — `requestRejection`
+ * lives on the Connection service and is only wired to `/api` and the
+ * `/api/remote.mux` upgrade. Without this wrapper our mutating routes were
+ * reachable cross-site as "simple requests" (no preflight: a `text/plain` POST
+ * needs no CORS approval), so any page the user visited could define a tunnel,
+ * rewrite the machine registry, or drive `update-apply`. The model tools were
+ * never exposed that way; only these JSON routes were.
+ *
+ * The lookup is deferred to request time because `webServer` and `connection`
+ * arrive independently: the fence must engage as soon as authentication exists,
+ * and must not be baked in from whichever service happened to be present when
+ * the route was registered.
+ *
+ * @param {object} route - a webServer route definition.
+ * @param {() => object|undefined} connectionOf - resolves the live Connection service.
+ * @returns {object} a route whose handler enforces the fence before dispatching.
+ */
+export function guardRoute(route, connectionOf) {
+  const inner = route.handler
+  return {
+    ...route,
+    handler: async (req, res) => {
+      const connection = connectionOf()
+      const rejection = typeof connection?.requestRejection === 'function'
+        ? connection.requestRejection(req)
+        : fallbackRejection(req)
+      if (rejection !== undefined) {
+        res.writeHead(rejection, { 'content-type': 'text/plain; charset=utf-8' })
+        res.end(rejection === 401 ? 'unauthorized' : 'forbidden')
+        return
+      }
+      return inner(req, res)
+    },
+  }
+}
+
 export function registerHttpTransports(ctx, routes) {
   // Reactive injection matters: either service can arrive after the plugin.
   // Neither optional transport is a hard prerequisite for the SSH tools.
   ctx.inject(['webServer'], (inner) => {
-    const disposers = routes.map((route) => inner.get('webServer').register(route))
+    // Apply DSH's own browser fence to every legacy route; the Connection
+    // service is read per request so a late-arriving authenticator still counts.
+    const guarded = routes.map((route) => guardRoute(route, () => ctx.get('connection')))
+    const disposers = guarded.map((route) => inner.get('webServer').register(route))
     inner.effect(() => () => disposers.forEach((dispose) => dispose()), 'dsh-remote.web-routes')
   })
   ctx.inject(['connection'], (inner) => {

package/lib/ignore.js

@@ -106,6 +106,39 @@ export const DEFAULT_IGNORE = [
   '.dsh-remote-sync-state.json',
 ]
 
+/**
+ * Extra directories skipped by `rw_search` (but NOT by mirror sync — a user may
+ * legitimately want their cache tree mirrored, and silently excluding it from
+ * sync would lose data).
+ *
+ * These are machine-local package/tool caches: enormous numbers of tiny files
+ * that essentially never contain what a human is searching for, and that are
+ * the main way a "search my home directory" turns into a multi-hour walk
+ * (issue #44 reports `~/.npm/_cacache` specifically). Searching them is
+ * available via an explicit `path`, which bypasses these excludes.
+ */
+export const DEFAULT_SEARCH_IGNORE = [
+  ...DEFAULT_IGNORE,
+  '.npm/',
+  '.cache/',
+  '.local/',
+  '.cargo/',
+  '.rustup/',
+  '.gradle/',
+  '.m2/',
+  '.pnpm-store/',
+  '.yarn/',
+  '.conda/',
+  '.docker/',
+  '.nvm/',
+  '.pyenv/',
+  '.Trash/',
+  '.Trash-1000/',
+  'snap/',
+  'AppData/',
+  'Library/Caches/',
+]
+
 /**
  * Load the user ignore file (gitignore syntax) and merge with defaults.
  * Returns `{ patterns, fromFile }`.