dsh-ssh-workspace-companion 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 i060912
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,26 @@
-# Temporary Holding Version
+# dsh-ssh-workspace-companion
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Remote companion plugin for `dsh-ssh-workspace`.
+
+Install it in each remote DSH web profile that should be embedded by the local Remote Desktop controller. It exposes only a transitional local health endpoint, runs only in `?dshRemoteDesktop=1` iframe mode, validates parent origin/token messages, forwards official Client Controller state and commands over a versioned `MessageChannel`, opens requested remote sessions, and hides the embedded remote left sidebar.
+
+The companion does not expose Session/Workspace snapshot or RPC Host APIs. The authenticated remote DSH Gateway and its official `ctx.sessions` / `ctx.workspaces` services remain the only business-data path.
+
+## Install
+
+```sh
+dsh plugin --profile web add dsh-ssh-workspace-companion
+```
+
+Before npm publication, install from a local checkout on the remote machine/profile:
+
+```sh
+dsh plugin --profile web add /path/to/dsh-remote-desktop/packages/companion
+```
+
+The iframe client source is `src/client.js`; `lib/client.js` is generated with
+the repository-level `npm run build` command.
+
+## Architecture
+
+See the repository [architecture reference](https://github.com/sincerity711/dsh-remote-desktop/blob/main/docs/architecture.md) for iframe bridge, token validation, and companion behavior.

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: remote-desktop-companion
+      name: dsh-ssh-workspace-companion

package/lib/client.js

@@ -0,0 +1,230 @@
+// Generated by scripts/build-clients.mjs. Edit packages/companion/src/client.js instead.
+window.__ModuleLoader__.load({
+  id: 'dsh-remote-desktop-companion',
+  factory: (require) => {
+    const module = { exports: {} }
+    const exports = module.exports
+    exports.inject = ['sessions', 'workspaces', 'uiWorkspace']
+
+    const BRIDGE_PROTOCOL_VERSION = 1
+    const BRIDGE_CAPABILITIES = Object.freeze([
+      'session/open',
+      'session/create',
+      'session/search',
+      'session/rename',
+      'session/fork',
+      'workspace/create',
+      'workspace/rename',
+      'workspace/delete',
+      'workspace/insertBefore',
+      'workspace/archiveSession',
+      'workspace/insertSessionBefore',
+    ])
+    const BRIDGE_METHODS = new Set(BRIDGE_CAPABILITIES)
+
+    function parseHash() {
+      const params = new URLSearchParams(window.location.hash.replace(/^#/, ''))
+      return { token: params.get('token') || '', parent: params.get('parent') || '' }
+    }
+
+    function installEmbeddedCss() {
+      document.body.setAttribute('data-dsh-remote-desktop-child', 'true')
+      const style = document.createElement('style')
+      style.setAttribute('data-dsh-remote-desktop-companion', '')
+      style.textContent = `
+        body[data-dsh-remote-desktop-child="true"] #root [class*="frame"]:has(> [class*="sidebarCol"]) > [class*="sidebarCol"] { visibility: hidden !important; pointer-events: none !important; overflow: hidden !important; }
+        body[data-dsh-remote-desktop-child="true"] [class*="handle"][data-side="sidebar"] { display: none !important; }
+        body[data-dsh-remote-desktop-child="true"] #root [class*="frame"]:has(> [class*="sidebarCol"]) { grid-template-columns: 0 minmax(0, 1fr) 0 !important; }
+      `
+      document.head.appendChild(style)
+      return () => { style.remove(); document.body.removeAttribute('data-dsh-remote-desktop-child') }
+    }
+
+    function controllerSnapshot(ctx) {
+      const sessions = ctx.sessions.list.getSnapshot()
+      const workspaces = ctx.workspaces.list.getSnapshot()
+      return {
+        sessions: {
+          ...sessions,
+          items: (sessions.ids || Object.keys(sessions.byId || {}))
+            .map(id => sessions.byId?.[id])
+            .filter(Boolean),
+        },
+        workspaces: {
+          ...workspaces,
+          items: [...(workspaces.items || [])],
+          archivedSessionIds: [...(workspaces.archivedSessionIds || [])],
+        },
+      }
+    }
+
+    function structuredError(error) {
+      const code = typeof error?.code === 'string' ? error.code : 'remote_desktop_bridge_failed'
+      const message = error instanceof Error ? error.message : String(error)
+      return { code, message }
+    }
+
+    async function waitUntilCurrent(ctx, sessionId, signal) {
+      signal.throwIfAborted()
+      ctx.uiWorkspace.openSession(sessionId)
+      await ctx.sessions.using(sessionId, { source: 'controllerOperation', signal }, async reference => {
+        await reference.ready
+        signal.throwIfAborted()
+        const owners = ctx.sessions.retainInfo(sessionId).getSnapshot().retainedBy
+        if ((owners.mainView || 0) === 0) throw new Error('session open superseded')
+      })
+    }
+
+    async function invoke(ctx, method, payload, signal) {
+      if (!BRIDGE_METHODS.has(method)) throw new Error(`unsupported remote desktop bridge method ${String(method)}`)
+      switch (method) {
+        case 'session/open': await waitUntilCurrent(ctx, payload.sessionId, signal); return { sessionId: payload.sessionId }
+        case 'session/create': return { sessionId: await ctx.sessions.create({ workspaceId: payload.workspaceId }) }
+        case 'session/search': {
+          const result = await ctx.sessions.search(String(payload.query || ''), signal)
+          if (!result.ok) throw new Error(result.error.message)
+          return result.value
+        }
+        case 'session/rename': {
+          return ctx.sessions.using(payload.sessionId, { source: 'controllerOperation', signal }, async reference => {
+            const binding = await reference.ready
+            const result = await binding.session.rename(payload.title)
+            if (!result.ok) throw new Error(result.error.message)
+            return result.value
+          })
+        }
+        case 'session/fork': {
+          const sessionId = await ctx.sessions.fork({ sessionId: payload.sessionId, increaseTitle: true })
+          return { sessionId }
+        }
+        case 'workspace/create': return { workspace: await ctx.workspaces.create({ path: payload.path }) }
+        case 'workspace/rename': return { workspace: await ctx.workspaces.rename(payload.workspaceId, payload.title) }
+        case 'workspace/delete': await ctx.workspaces.delete(payload.workspaceId); return {}
+        case 'workspace/insertBefore': await ctx.workspaces.insertBefore(payload.workspaceId, payload.beforeWorkspaceId); return {}
+        case 'workspace/archiveSession': await ctx.workspaces.archiveSession(payload.sessionId); return {}
+        case 'workspace/insertSessionBefore':
+          return { workspace: await ctx.workspaces.insertSessionBefore(payload.workspaceId, payload.sessionId, payload.beforeSessionId) }
+        default: throw new Error(`unsupported remote desktop bridge method ${String(method)}`)
+      }
+    }
+
+    exports.apply = function apply(ctx) {
+      const marker = new URLSearchParams(window.location.search).get('dshRemoteDesktop')
+      const { token, parent } = parseHash()
+      if (marker !== '1' || token === '' || parent === '') return
+      ctx.effect(() => {
+        const disposeCss = installEmbeddedCss()
+        let channel
+        let channelCleanup = () => {}
+        let openController
+        let announceTimer
+
+        const announceListening = () => {
+          window.parent.postMessage({
+            type: 'dsh-remote-desktop/bridge-listening',
+            protocolVersion: BRIDGE_PROTOCOL_VERSION,
+            sourceToken: token,
+          }, parent)
+        }
+
+        const attach = (port) => {
+          window.clearInterval(announceTimer)
+          channelCleanup()
+          channel = port
+          const generation = globalThis.crypto?.randomUUID?.() || `${Date.now()}-${Math.random()}`
+          let revision = 0
+          let queued = false
+          const publishBaseline = () => {
+            if (queued) return
+            queued = true
+            queueMicrotask(() => {
+              queued = false
+              if (channel !== port) return
+              revision += 1
+              port.postMessage({
+                type: 'dsh-remote-desktop/state-baseline',
+                protocolVersion: BRIDGE_PROTOCOL_VERSION,
+                sourceToken: token,
+                generation,
+                revision,
+                snapshot: controllerSnapshot(ctx),
+              })
+            })
+          }
+          const disposeSessions = ctx.sessions.list.subscribe(publishBaseline)
+          const disposeWorkspaces = ctx.workspaces.list.subscribe(publishBaseline)
+          port.onmessage = (event) => {
+            const data = event.data
+            if (data?.sourceToken !== token || data.protocolVersion !== BRIDGE_PROTOCOL_VERSION) return
+            if (data.type === 'dsh-remote-desktop/state-resync') {
+              publishBaseline()
+              return
+            }
+            if (data.type !== 'dsh-remote-desktop/request') return
+            if (typeof data.requestId !== 'string' || typeof data.method !== 'string') return
+            if (!BRIDGE_METHODS.has(data.method)) {
+              port.postMessage({
+                type: 'dsh-remote-desktop/result', protocolVersion: BRIDGE_PROTOCOL_VERSION,
+                sourceToken: token, requestId: data.requestId, ok: false,
+                error: { code: 'unsupported_method', message: `unsupported remote desktop bridge method ${data.method}` },
+              })
+              return
+            }
+            if (data.method === 'session/open') {
+              openController?.abort(new Error('session open superseded'))
+              openController = new AbortController()
+            }
+            const signal = data.method === 'session/open' ? openController.signal : AbortSignal.timeout(30_000)
+            void invoke(ctx, data.method, data.payload || {}, signal).then((value) => {
+              port.postMessage({
+                type: 'dsh-remote-desktop/result', protocolVersion: BRIDGE_PROTOCOL_VERSION,
+                sourceToken: token, requestId: data.requestId, ok: true, value,
+              })
+            }).catch((error) => {
+              port.postMessage({
+                type: 'dsh-remote-desktop/result', protocolVersion: BRIDGE_PROTOCOL_VERSION,
+                sourceToken: token, requestId: data.requestId, ok: false, error: structuredError(error),
+              })
+            })
+          }
+          port.start?.()
+          port.postMessage({
+            type: 'dsh-remote-desktop/ready',
+            protocolVersion: BRIDGE_PROTOCOL_VERSION,
+            sourceToken: token,
+            generation,
+            capabilities: BRIDGE_CAPABILITIES,
+          })
+          publishBaseline()
+          channelCleanup = () => {
+            disposeWorkspaces()
+            disposeSessions()
+            port.close()
+          }
+        }
+
+        const onMessage = (event) => {
+          if (event.origin !== parent || event.source !== window.parent) return
+          const data = event.data
+          if (data?.type !== 'dsh-remote-desktop/connect'
+            || data.protocolVersion !== BRIDGE_PROTOCOL_VERSION
+            || data.sourceToken !== token) return
+          const port = event.ports?.[0]
+          if (port === undefined) return
+          attach(port)
+        }
+        window.addEventListener('message', onMessage)
+        announceListening()
+        announceTimer = window.setInterval(announceListening, 500)
+        return () => {
+          window.clearInterval(announceTimer)
+          openController?.abort(new Error('remote desktop companion disposed'))
+          channelCleanup()
+          window.removeEventListener('message', onMessage)
+          disposeCss()
+        }
+      }, 'dsh-remote-desktop-companion: iframe bridge')
+    }
+    return module.exports
+  },
+})

package/lib/index.js

@@ -0,0 +1,23 @@
+export const name = 'dsh-remote-desktop-companion'
+export const inject = ['webServer']
+
+const HEALTH_PATH = '/remote-desktop-companion/api/health'
+
+/**
+ * Transitional package-readiness probe. Session and Workspace data always use
+ * the authenticated DSH Client Controller running inside the remote iframe.
+ */
+export function apply(ctx) {
+  const disposeHealth = ctx.webServer.register({
+    kind: 'exact',
+    path: HEALTH_PATH,
+    handler: (_req, res) => {
+      res.writeHead(200, {
+        'content-type': 'application/json; charset=utf-8',
+        'cache-control': 'no-store',
+      })
+      res.end(JSON.stringify({ ok: true, name }))
+    },
+  })
+  ctx.effect(() => disposeHealth, 'dsh-remote-desktop-companion: readiness route')
+}

package/package.json

@@ -1,6 +1,63 @@
 {
   "name": "dsh-ssh-workspace-companion",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Remote companion for dsh-remote-desktop iframe control.",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-api-session-controller",
+        "@deepseek-ai/dsh-api-workspace-controller",
+        "@deepseek-ai/dsh-client-ui-workspace"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-workspace-controller": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-workspace": "0.2.0-rc.2"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "license": "MIT",
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "dsh",
+    "deepseek",
+    "cordis",
+    "remote-desktop",
+    "iframe",
+    "companion",
+    "remote-workspace"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sincerity711/dsh-remote-desktop.git",
+    "directory": "packages/companion"
+  },
+  "bugs": {
+    "url": "https://github.com/sincerity711/dsh-remote-desktop/issues"
+  },
+  "homepage": "https://github.com/sincerity711/dsh-remote-desktop#readme",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}