dshost-plugin 0.1.8 → 0.1.10

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-remote contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,107 @@
+# dshost-plugin
+
+[![npm version](https://img.shields.io/npm/v/dshost-plugin.svg)](https://www.npmjs.com/package/dshost-plugin)
+[![license](https://img.shields.io/npm/l/dshost-plugin.svg)](./LICENSE)
+[![node](https://img.shields.io/node/v/dshost-plugin.svg)](https://www.npmjs.com/package/dshost-plugin)
+[![GitHub](https://img.shields.io/badge/GitHub-NoelJudeNoel%2Fdshost--plugin-blue)](https://github.com/NoelJudeNoel/dshost-plugin)
+
+**DSHost 官方 DSH 远程中继插件** — 在你的 dsh（DeepSeek Harness）实例上运行一个 Agent，
+通过 `wss` 主动外连 DSHost 中继，让你在世界任何地方用浏览器安全访问自己的 dsh Web UI，
+无需公网 IP、无需端口映射。
+
+*Official remote cloud relay plugin for DSHost (dshost.me): securely access your
+dsh Web UI from anywhere.*
+
+## 特性
+
+- **零公网 IP**：Agent 主动外连中继（`wss://dshost.me/agent`），本机不开任何入站端口
+- **零破坏性多版本兼容**：同时支持 dsh `0.0.1-rc.*` / `0.1.0-rc.*` / `0.1.1-*` ~ `0.1.5-*`
+- **安全**：中继层 Host/Origin 重写遵守 dsh 信任栅栏；`settings.describe` 密钥脱敏下发；
+  生产环境强制 `wss://`
+- **随 dsh 启动**：以 cordis 插件身份随 `dsh web` 加载，自动重连、休眠省流
+
+## 快速开始
+
+### 1. 申请 Token
+
+在 [dshost.me](https://dshost.me) 注册/登录（支持 GitHub OAuth），创建实例获得
+`dsh_` 开头的接入 Token。
+
+### 2. 一键安装（推荐）
+
+```bash
+curl -fsSL https://dshost.me/install.sh | bash
+```
+
+脚本会安装 pnpm、通过 `dsh plugin add dshost-plugin` 把插件装入当前 profile，
+并写入 profile 的 `cordis.patch.yml`。
+
+### 3. 手动安装
+
+```bash
+# 装入 dsh profile（等价于在 profile 目录执行 pnpm add dshost-plugin）
+dsh plugin add dshost-plugin
+```
+
+然后在 profile 的 `cordis.patch.yml` 里声明插件（新增行必须放在 `- insert:` 块内）：
+
+```yaml
+- insert:
+    - id: dshost-agent
+      name: 'dshost-plugin'
+      config:
+        token: dsh_your_token_here
+        relayUrl: wss://dshost.me/agent
+        autoConnect: true
+```
+
+### 4. 重启 dsh
+
+```bash
+sudo systemctl restart dsh   # 或你的启动方式
+```
+
+启动后控制台（dshost.me）应看到实例上线。
+
+## 配置项
+
+| 字段 | 必填 | 说明 |
+|---|---|---|
+| `token` | ✔ | 中继接入 Token（`dsh_` 前缀，在 dshost.me 申请） |
+| `relayUrl` | ✔ | 中继 WebSocket 地址，生产必须 `wss://` |
+| `autoConnect` | ✕ | 默认 `true`；启动即连接 |
+| `dshHost` / `dshPort` | ✕ | 本机 dsh web 地址，默认 `127.0.0.1:3080` |
+
+## 兼容性
+
+| dsh 版本 | 支持 |
+|---|---|
+| `0.1.5-*`（已实证 `0.1.5-rc.1`） / `0.1.4-*` / `0.1.3-*` | ✔ |
+| `0.1.2-*`（含 `--trusted-host`、BrowserAuth、remote.mux） | ✔ |
+| `0.1.1-*` / `0.1.0-rc.7+`（insert 块 patch 格式） | ✔ |
+| `0.1.0-rc.2 ~ rc.6` / `0.0.1-rc.*` | ✔（旧包名 `@noeljude/dsh-remote-plugin` 亦可解析） |
+
+## 仓库结构
+
+```
+├── package.json         # npm 包定义（dsh.bundle.patch 指向 cordis.patch.yml）
+├── cordis.patch.yml     # bundle patch（有意为空：插件入口由用户 profile 声明）
+├── lib/index.js         # 插件入口（cordis apply）
+├── agent/core.js        # Agent 引擎（与独立 agent 共享的唯一源）
+├── common/protocol.js   # 中继协议
+└── scripts/prepack.mjs  # npm pack 时物化 lib/core.js + lib/protocol.js
+```
+
+`prepack.mjs` 是布局自适应的：在本 monorepo（源码位于 `src/agent`、`src/common`）与
+本仓库独立检出（`agent/`、`common/` 位于包根）下均可运行，支持
+`npm i github:NoelJudeNoel/dshost-plugin` 的 git 直装（经 `prepare` 构建）。
+
+## 发布流程
+
+npm 与 GitHub 同步发布：改动主仓源码 → bump `version` → `npm publish` →
+`bash scripts/publish-github.sh`（同步 GitHub、打 `vX.Y.Z` tag、刷新 topics）。
+完整标准规则见 [`docs/github-release-sop.md`](./docs/github-release-sop.md)。
+
+## License
+
+[MIT](./LICENSE) © 2026 dsh-remote contributors

package/lib/core.js

@@ -67,6 +67,20 @@ function getInstanceId() {
   return cachedInstanceId;
 }
 
+/**
+ * Effective instance id. DSH_INSTANCE_ID (env) overrides the derived id —
+ * used when a dedicated services agent coexists with the dsh-hosted plugin
+ * on the SAME machine: both derive the identical hostname+machine-id id,
+ * and the relay would treat them as one instance, evicting each other in a
+ * reconnect war. The override must be stable across restarts (it is the
+ * key sessions/tickets bind to).
+ */
+function getEffectiveInstanceId() {
+  const override = (process.env.DSH_INSTANCE_ID || '').trim();
+  if (override && /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(override)) return override;
+  return getInstanceId();
+}
+
 /**
  * Collect every real disk partition (df -kPT), not just the root filesystem.
  * Filters to physical filesystems (/dev/* or common on-disk types), excludes
@@ -236,7 +250,7 @@ export function collectSystemInfo(defaultVersion) {
   const cpus = os.cpus();
   const meta = detectDshMetadata();
   return {
-    instanceId: getInstanceId(),
+    instanceId: getEffectiveInstanceId(),
     hostname: os.hostname(),
     platform: os.platform(),
     release: os.release(),
@@ -253,11 +267,86 @@ export function collectSystemInfo(defaultVersion) {
     diskFree,
     dshVersion: defaultVersion || meta.dshVersion,
     plugins: meta.plugins,
+    // 服务旁挂：独立 services agent（DSH_SERVICES_ONLY=1，无本地 dsh 承载）
+    // 上报 role=services，relay 不将其注册为主实例，只挂到同 hostname 的主实例下
+    role: process.env.DSH_SERVICES_ONLY === '1' ? 'services' : 'dsh',
     // 无头检测：供 relay 注入脚本决定产物点击行为(新窗口HTTP直出 vs 本地打开)
     headless: !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY,
   };
 }
 
+// ── Plugin workspace services（config.services）───────────────────────
+// 实例在 cordis.patch.yml（插件配置）或 standalone agent 的 DSH_SERVICES env
+// JSON 中声明的本地/内网上游清单。relay 只能经本 agent 隧道触达这些上游。
+// 安全关键：上游白名单在此强制 —— 回环 + EasyTier mesh 10.144.144.0/24 +
+// AGENT_UPSTREAM_ALLOW 显式追加。被攻破的 relay 也无法借隧道横移到宿主者
+// 未声明的任意内网地址；仅接受字面 IP（localhost 归一为 127.0.0.1），
+// 不做 DNS 解析，杜绝 DNS rebinding 绕过白名单。
+const SVC_ID_RE = /^[a-z0-9][a-z0-9_-]{0,31}$/;
+
+function parseUpstream(raw) {
+  const m = /^(.+):(\d{1,5})$/.exec(String(raw || '').trim());
+  if (!m) return null;
+  const host = m[1].toLowerCase() === 'localhost' ? '127.0.0.1' : m[1];
+  const port = parseInt(m[2], 10);
+  if (!/^\d{1,3}(\.\d{1,3}){3}$|^[0-9a-f:]+$/i.test(host)) return null;
+  if (port < 1 || port > 65535) return null;
+  return { host, port };
+}
+
+function upstreamAllowed(host) {
+  if (host === '::1' || /^127\./.test(host)) return true;
+  if (/^10\.144\.144\./.test(host)) return true; // EasyTier wolo-mesh 网段
+  const extra = (process.env.AGENT_UPSTREAM_ALLOW || '').split(',').map((s) => s.trim()).filter(Boolean);
+  return extra.includes(host);
+}
+
+/**
+ * Normalize + validate the declared services list. Invalid entries are
+ * skipped with a warning, never thrown — one bad line must not take down
+ * the dsh remote tunnel.
+ * @returns {Array<{id,name,desc,icon,auth,entry,ssoSecret,host,port}>}
+ */
+export function normalizeServices(raw, log) {
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  const seen = new Set();
+  for (const s of raw) {
+    if (!s || typeof s !== 'object') continue;
+    const id = String(s.id || '').trim();
+    const up = parseUpstream(s.upstream);
+    if (!SVC_ID_RE.test(id) || id === 'dsh') {
+      log?.warn?.(`[agent] service "${id || '(unnamed)'}": invalid/reserved id, skipped`);
+      continue;
+    }
+    if (seen.has(id)) continue;
+    if (!up) {
+      log?.warn?.(`[agent] service "${id}": bad upstream "${s.upstream}" (want host:port), skipped`);
+      continue;
+    }
+    if (!upstreamAllowed(up.host)) {
+      log?.warn?.(`[agent] service "${id}": upstream ${up.host} not in allowlist (loopback / 10.144.144.0/24 / AGENT_UPSTREAM_ALLOW), skipped`);
+      continue;
+    }
+    seen.add(id);
+    out.push({
+      id,
+      name: String(s.name || id).slice(0, 64),
+      desc: String(s.desc || '').slice(0, 200),
+      icon: String(s.icon || '').slice(0, 32),
+      auth: s.auth === 'sso' ? 'sso' : 'open',
+      entry: typeof s.entry === 'string' && s.entry.startsWith('/') ? s.entry : '/',
+      ssoSecret: typeof s.ssoSecret === 'string' && s.ssoSecret ? s.ssoSecret : '',
+      spa: s.spa === true,
+      basicUser: typeof s.basicUser === 'string' ? s.basicUser : '',
+      basicPassword: typeof s.basicPassword === 'string' ? s.basicPassword : '',
+      host: up.host,
+      port: up.port,
+    });
+  }
+  return out;
+}
+
 /**
  * Start the agent connection loop.
  * @param {object} opts
@@ -269,6 +358,7 @@ export function collectSystemInfo(defaultVersion) {
  * @param {string} [opts.webToken]   local dsh web launch token (dsh >= 0.1.2 auth mode)
  * @param {object} [opts.log]        logger with log/warn/error (default console)
  * @param {string} [opts.dshVersion] reported dsh version (default rc.6)
+ * @param {Array}  [opts.services]   plugin workspace services (see normalizeServices)
  * @returns {{ stop: () => void }}
  */
 export function startAgent(opts) {
@@ -280,8 +370,16 @@ export function startAgent(opts) {
     dshPort = 3080,
     log = console,
     dshVersion,
+    services = [],
   } = opts;
 
+  const svcList = normalizeServices(services, log);
+  const svcMap = new Map(svcList.map((s) => [s.id, s]));
+  let relayUsername = null; // set on 'registered'; subject of SSO trust headers
+  if (svcList.length) {
+    log.log?.(`[agent] plugin services: ${svcList.map((s) => `${s.id}->${s.host}:${s.port}${s.auth === 'sso' ? ' (sso)' : ''}`).join(', ')}`);
+  }
+
   if (!token) {
     log.error?.('[agent] No token configured.');
     return { stop() {} };
@@ -372,8 +470,16 @@ export function startAgent(opts) {
       if (msg.type === 'registered') {
         registered = true;
         reconnectAttempt = 0;
+        relayUsername = msg.username || null;
         log.log?.(`[agent] Registered as ${msg.username} (session ${msg.sessionId || ''})`);
         send(ws, { type: 'system-info', info: collectSystemInfo(dshVersion) });
+        // 插件工作区：上报本实例声明的服务清单（relay 存实例维度，供 /p 路由校验）
+        // DSH_SERVICES_ONLY=1：独立 services agent，relay 不注册主实例（服务旁挂到同机 dsh 实例）
+        send(ws, {
+          type: 'services',
+          servicesOnly: process.env.DSH_SERVICES_ONLY === '1' || undefined,
+          services: svcList.map(({ id, name, desc, icon, auth, entry, spa }) => ({ id, name, desc, icon, auth, entry, spa })),
+        });
         startHeartbeat(ws);
         return;
       }
@@ -381,7 +487,8 @@ export function startAgent(opts) {
       if (msg.type === 'heartbeat') return;
 
       if (msg.type === 'http:request') {
-        if (serveArtifactIfRequested(ws, msg)) return;
+        // [Artifact Viewer] 是 dsh UI 注入脚本的专属旁路；插件流不经过它。
+        if (!msg.target && serveArtifactIfRequested(ws, msg)) return;
         handleHttpRequest(ws, msg);
       } else if (msg.type === 'http:body') {
         const ab = artifactFormBodies.get(msg.streamId);
@@ -394,9 +501,13 @@ export function startAgent(opts) {
         const stream = streams.get(msg.streamId);
         if (stream && stream.dshReq) stream.dshReq.end();
       } else if (msg.type === 'ws:open') {
-        // dsh >= 0.1.2: make sure the auth cookie exists before the upgrade.
-        if ((webToken || authCookie) && !authCookie) mintAuthCookie().then(() => handleWsOpen(ws, msg));
-        else handleWsOpen(ws, msg);
+        // dsh >= 0.1.2: make sure the auth cookie exists before the upgrade
+        // （仅 dsh 目标需要本地 web auth cookie；插件上游不做 cookie 注入）。
+        if ((!msg.target || msg.target === 'dsh') && (webToken || authCookie) && !authCookie) {
+          mintAuthCookie().then(() => handleWsOpen(ws, msg));
+        } else {
+          handleWsOpen(ws, msg);
+        }
       } else if (msg.type === 'ws:frame') {
         const stream = streams.get(msg.streamId);
         if (stream && stream.dshWs) {
@@ -456,9 +567,17 @@ export function startAgent(opts) {
 
   function startHeartbeat(ws) {
     if (heartbeatInterval) clearInterval(heartbeatInterval);
+    // 半开死链看门狗：只发不收时 TCP 仍 ESTAB（FIN 被代理链路吞掉的场景），
+    // close 事件永远不来，agent 变僵尸。每次 ping 记账，收到任意下行帧清零；
+    // 连续 3 个周期（45s）无下行则主动 terminate() 触发重连。
+    let lastRx = Date.now();
+    ws.on('message', () => { lastRx = Date.now(); });
     heartbeatInterval = setInterval(() => {
-      if (ws.readyState === WebSocket.OPEN) {
-        send(ws, { type: 'heartbeat', ts: Date.now() });
+      if (ws.readyState !== WebSocket.OPEN) return;
+      send(ws, { type: 'heartbeat', ts: Date.now() });
+      if (Date.now() - lastRx > 45000) {
+        log.log?.('[agent] heartbeat watchdog: no inbound for 45s, forcing reconnect');
+        try { ws.terminate(); } catch (eT) {}
       }
     }, 15000);
   }
@@ -560,29 +679,68 @@ export function startAgent(opts) {
     streams.delete(streamId);
   }
 
+  /** Resolve msg.target to a dial target. null = plugin not declared. */
+  function resolveTarget(msg) {
+    const t = msg.target || 'dsh';
+    if (t === 'dsh') return { id: 'dsh', host: dshHost, port: dshPort, dsh: true, svc: null };
+    const svc = svcMap.get(t);
+    if (!svc) return null;
+    return { id: t, host: svc.host, port: svc.port, dsh: false, svc };
+  }
+
+  /** auth:'sso' 服务出站的信任头（M3：relay↔业务系统共享密钥的 HMAC 链）。 */
+  function ssoHeaders(svc) {
+    if (!svc || svc.auth !== 'sso' || !svc.ssoSecret || !relayUsername) return {};
+    const ts = Date.now().toString();
+    const sig = crypto.createHmac('sha256', svc.ssoSecret).update(`${relayUsername}.${ts}`).digest('hex');
+    return { 'x-sso-user': relayUsername, 'x-sso-ts': ts, 'x-sso-sig': sig };
+  }
+
+  /** auth:'open' 服务的上游 Basic 凭据注入（服务自身保留 Basic Auth 时的代填）。 */
+  function basicHeader(svc) {
+    if (!svc || svc.auth !== 'open' || !svc.basicPassword) return undefined;
+    return 'Basic ' + Buffer.from(`${svc.basicUser || 'user'}:${svc.basicPassword}`).toString('base64');
+  }
+
   function handleHttpRequest(ws, msg, isRetry) {
     const { streamId, method, path, headers } = msg;
+    const target = resolveTarget(msg);
+    if (!target) {
+      respondError(ws, streamId, 404, `dsh-remote: plugin "${msg.target}" is not declared on this instance`);
+      return;
+    }
 
     // dsh >= 0.1.2 web auth: inject the minted browser cookie when we have
     // one. dsh <= 0.1.1 has no web auth; with no token/cookie nothing is
     // injected and requests go out exactly like plugin 0.1.5 sent them.
+    // 插件上游：不注入 dsh cookie，注入 SSO 信任头（若声明），剥除 Origin。
     const issue = (cookie) => {
-      const dshHeaders = {
+      const upstreamHeaders = {
         ...headers,
-        host: `${dshHost}:${dshPort}`,
-        origin: `http://${dshHost}:${dshPort}`,
+        host: `${target.host}:${target.port}`,
       };
-      if (cookie) dshHeaders.cookie = cookie;
-      delete dshHeaders['content-length'];
+      if (target.dsh) {
+        upstreamHeaders.origin = `http://${target.host}:${target.port}`;
+        if (cookie) upstreamHeaders.cookie = cookie;
+      } else {
+        delete upstreamHeaders.origin;
+        // 插件上游不透传 dshost 站点 Cookie（dsh_session 等），业务自身的
+        // Bearer authorization 保留（relay 侧已放行）。
+        delete upstreamHeaders.cookie;
+        Object.assign(upstreamHeaders, ssoHeaders(target.svc));
+        const basic = basicHeader(target.svc);
+        if (basic) upstreamHeaders.authorization = basic;
+      }
+      delete upstreamHeaders['content-length'];
 
       const dshReq = http.request({
-        hostname: dshHost,
-        port: dshPort,
+        hostname: target.host,
+        port: target.port,
         path,
         method,
-        headers: dshHeaders,
+        headers: upstreamHeaders,
       }, (dshRes) => {
-        if (dshRes.statusCode === 401 && cookie) {
+        if (target.dsh && dshRes.statusCode === 401 && cookie) {
           // Cached cookie rejected (launch token rotated, e.g. dsh restarted).
           // Re-mint; body-less requests are retried once with the fresh
           // cookie, everything else forwards the 401 and the browser app
@@ -640,14 +798,14 @@ export function startAgent(opts) {
           streams.delete(streamId);
         });
         dshRes.on('error', () => {
-          send(ws, { type: 'error', streamId, message: 'Local dsh response error' });
+          send(ws, { type: 'error', streamId, message: `${target.dsh ? 'Local dsh' : `Plugin ${target.id}`} response error` });
           streams.delete(streamId);
         });
       });
 
       dshReq.on('error', (err) => {
         log.error?.(`[agent] HTTP Error: ${err.message}`);
-        send(ws, { type: 'error', streamId, message: err.message });
+        send(ws, { type: 'error', streamId, message: `${target.dsh ? 'local dsh' : `plugin ${target.id}`} upstream: ${err.message}` });
         streams.delete(streamId);
       });
 
@@ -661,7 +819,9 @@ export function startAgent(opts) {
       if (method === 'GET' || method === 'HEAD') dshReq.end();
     };
 
-    if ((webToken || authCookie) && !authCookie) {
+    if (!target.dsh) {
+      issue(undefined);
+    } else if ((webToken || authCookie) && !authCookie) {
       // A token is known but the eager mint has not landed yet (startup
       // race): mint first, then issue. Body frames arriving during the mint
       // window are dropped (no streams entry yet) — only POSTs racing the
@@ -675,19 +835,32 @@ export function startAgent(opts) {
 
   function handleWsOpen(ws, msg) {
     const { streamId, path, headers } = msg;
-    const dshWsUrl = `ws://${dshHost}:${dshPort}${path || '/'}`;
-    log.log?.(`[agent] WS OPEN stream ${streamId} -> ${dshWsUrl}`);
+    const target = resolveTarget(msg);
+    if (!target) {
+      send(ws, { type: 'error', streamId, message: `dsh-remote: plugin "${msg.target}" is not declared on this instance` });
+      return;
+    }
+    const dshWsUrl = `ws://${target.host}:${target.port}${path || '/'}`;
+    log.log?.(`[agent] WS OPEN stream ${streamId} -> ${target.id}@${dshWsUrl}`);
 
     const options = {
       headers: {
         ...headers,
-        host: `${dshHost}:${dshPort}`,
-        origin: `https://${dshHost}:${dshPort}`,
+        host: `${target.host}:${target.port}`,
       },
       rejectUnauthorized: false,
     };
-    // dsh >= 0.1.2 gates the WS upgrade behind the same browser cookie.
-    if (authCookie) options.headers.cookie = authCookie;
+    if (target.dsh) {
+      // dsh 信任栅栏要求 Origin 与本地 web 一致
+      options.headers.origin = `https://${target.host}:${target.port}`;
+      // dsh >= 0.1.2 gates the WS upgrade behind the same browser cookie.
+      if (authCookie) options.headers.cookie = authCookie;
+    } else {
+      delete options.headers.origin;
+      Object.assign(options.headers, ssoHeaders(target.svc));
+      const basic = basicHeader(target.svc);
+      if (basic) options.headers.authorization = basic;
+    }
 
     const dshWs = new WebSocket(dshWsUrl, undefined, options);
     const pending = [];

package/lib/index.js

@@ -18,8 +18,11 @@ export function apply(ctx, config) {
   // Local dsh instance this plugin proxies (config-overridable for tests/dev)
   const dshHost = config.dshHost || process.env.DSH_HOST || DSH_HOST;
   const dshPort = parseInt(config.dshPort || process.env.DSH_PORT || String(DSH_PORT), 10);
+  // 插件工作区服务清单（cordis.patch.yml 的 config.services 数组）
+  const services = Array.isArray(config.services) ? config.services : [];
 
   console.log('[dsh-remote] Plugin loaded, token:', token ? '***' : 'none');
+  if (services.length) console.log('[dsh-remote] Plugin services:', services.map((s) => s && s.id).filter(Boolean).join(', '));
 
   if (!token) {
     console.warn('[dsh-remote] No token configured. Please set token in settings.');
@@ -37,6 +40,7 @@ export function apply(ctx, config) {
     relayUrl,
     dshHost,
     dshPort,
+    services,
   });
 
   // dsh >= 0.1.2 web auth: the web UI is gated behind a per-process one-time

package/lib/protocol.js

@@ -36,10 +36,10 @@ export function sanitizeCloseCode(code) {
 }
 
 // Relay -> Agent
-export const HTTP_REQUEST = 'http:request'; // { streamId, method, path, headers }
+export const HTTP_REQUEST = 'http:request'; // { streamId, method, path, headers, target? }
 export const HTTP_BODY = 'http:body';        // { streamId, data }
 export const HTTP_END = 'http:end';          // { streamId }
-export const WS_OPEN = 'ws:open';            // { streamId, path, headers }
+export const WS_OPEN = 'ws:open';            // { streamId, path, headers, target? }
 export const WS_FRAME = 'ws:frame';          // { streamId, data, binary }
 export const WS_CLOSE = 'ws:close';          // { streamId, code, reason }
 
@@ -53,3 +53,8 @@ export const ERROR = 'error';                 // { streamId?, message }
 export const REGISTER = 'register';    // Agent -> Relay: { token, version }
 export const REGISTERED = 'registered'; // Relay -> Agent: { username, sessionId }
 export const HEARTBEAT = 'heartbeat';  // { ts }
+
+// Agent -> Relay: advertise the plugin workspace services declared in this
+// instance's cordis config (config.services). Sent right after system-info.
+// { services: [{id, name, desc, icon, auth, mount, upstreamLabel}] }
+export const SERVICES = 'services';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dshost-plugin",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Official remote cloud relay plugin for DSHost (dshost.me): securely access your dsh Web UI from anywhere",
   "type": "module",
   "main": "lib/index.js",
@@ -14,8 +14,27 @@
     "scripts"
   ],
   "scripts": {
-    "prepack": "node scripts/prepack.mjs"
+    "prepack": "node scripts/prepack.mjs",
+    "prepare": "node scripts/prepack.mjs"
   },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "cordis",
+    "deepseek-harness",
+    "remote-access",
+    "relay",
+    "websocket",
+    "tunnel"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/NoelJudeNoel/dshost-plugin.git"
+  },
+  "bugs": {
+    "url": "https://github.com/NoelJudeNoel/dshost-plugin/issues"
+  },
+  "homepage": "https://dshost.me",
   "license": "MIT",
   "engines": {
     "node": ">=22.5.0"

package/scripts/prepack.mjs

@@ -14,8 +14,16 @@ const here = path.dirname(fileURLToPath(import.meta.url));
 const pkgRoot = path.resolve(here, '..');
 const repoRoot = path.resolve(pkgRoot, '..', '..');
 
-const coreSrc = path.join(repoRoot, 'src', 'agent', 'core.js');
-const protocolSrc = path.join(repoRoot, 'src', 'common', 'protocol.js');
+// Source resolution is layout-aware so one script serves both checkouts:
+//  · GitHub standalone repo (dshost-plugin): repo root == package root, with
+//    agent/core.js and common/protocol.js beside the package.
+//  · dshost monorepo (/root/dshost): sources live under src/.
+const coreSrc = fs.existsSync(path.join(pkgRoot, 'agent', 'core.js'))
+  ? path.join(pkgRoot, 'agent', 'core.js')
+  : path.join(repoRoot, 'src', 'agent', 'core.js');
+const protocolSrc = fs.existsSync(path.join(pkgRoot, 'common', 'protocol.js'))
+  ? path.join(pkgRoot, 'common', 'protocol.js')
+  : path.join(repoRoot, 'src', 'common', 'protocol.js');
 const coreDest = path.join(pkgRoot, 'lib', 'core.js');
 const protocolDest = path.join(pkgRoot, 'lib', 'protocol.js');