rdsh-gateway 0.8.6 → 0.10.0

package/dist/index.d.ts

@@ -21,7 +21,7 @@ export { ipInCidrs, parseCidr, ipToInt } from "./cidr.ts";
 export { loadTls } from "./tls.ts";
 export type { TlsMaterial } from "./tls.ts";
 export { loginPageHtml } from "./login-page.ts";
-export { installService, uninstallService, serviceStatus, systemdUnit, launchdPlist, SERVICE_NAME, JOIN_SERVICE_NAME, HOST_SERVICE_NAME, HUB_SERVICE_NAME } from "./service.ts";
+export { installService, uninstallService, serviceStatus, startService, stopService, restartService, systemdUnit, launchdPlist, SERVICE_NAME, JOIN_SERVICE_NAME, HOST_SERVICE_NAME, HUB_SERVICE_NAME } from "./service.ts";
 export type { ServiceSpec } from "./service.ts";
 export declare const NAME = "rdsh-gateway";
 export { join, startJoin, registerJoin, detectInsecure, selfRevoke, patchLoopbackJs } from "./join.ts";

package/dist/index.js

@@ -14,7 +14,7 @@ export { hashPassword, verifyPassword, UserManager } from "./auth.js";
 export { ipInCidrs, parseCidr, ipToInt } from "./cidr.js";
 export { loadTls } from "./tls.js";
 export { loginPageHtml } from "./login-page.js";
-export { installService, uninstallService, serviceStatus, systemdUnit, launchdPlist, SERVICE_NAME, JOIN_SERVICE_NAME, HOST_SERVICE_NAME, HUB_SERVICE_NAME } from "./service.js";
+export { installService, uninstallService, serviceStatus, startService, stopService, restartService, systemdUnit, launchdPlist, SERVICE_NAME, JOIN_SERVICE_NAME, HOST_SERVICE_NAME, HUB_SERVICE_NAME } from "./service.js";
 export const NAME = "rdsh-gateway";
 export { join, startJoin, registerJoin, detectInsecure, selfRevoke, patchLoopbackJs } from "./join.js";
 export { readPersistedToken, clearPersistedToken } from "./token-store.js";

package/dist/join.d.ts

@@ -105,6 +105,8 @@ export declare function classifyUpstreamFailure(code: string | undefined, respon
 };
 /** JS 响应判定（content-type 含 javascript）。 */
 export declare function isJsContentType(headers: IncomingHttpHeaders): boolean;
+/** HTML 响应判定（content-type 含 text/html）。 */
+export declare function isHtmlContentType(headers: IncomingHttpHeaders): boolean;
 /**
  * 最小 patch：把 DSH 客户端 bundle 里的前端 isLoopback 判定替换为 true
  * （持久设置/API key 输入只对 loopback 开放；E2EE 流上信任基础等同 loopback）。

package/dist/join.js

@@ -22,6 +22,7 @@ import { acquireJoinLock, releaseJoinLock } from "./lock.js";
 import { responderHandshake, Aead } from "./e2ee.js";
 import { loadOrCreateE2eeKeyPair } from "./e2ee-key-store.js";
 import { GATE_COOKIE, signGateCookie, verifyGateCookie, verifyGateCode } from "./access-gate.js";
+import { RDSH_WEBVIEW_API, injectHtmlScript } from "./rdsh-webview-api.js";
 /** 判断错误是否为 TLS 证书类错误（自签/过期/域名不匹配）。 */
 function isCertError(err) {
     const code = err?.code ?? "";
@@ -157,6 +158,12 @@ export function isJsContentType(headers) {
     const s = Array.isArray(ct) ? ct.join(";") : (ct ?? "");
     return /javascript/i.test(s);
 }
+/** HTML 响应判定（content-type 含 text/html）。 */
+export function isHtmlContentType(headers) {
+    const ct = headers["content-type"];
+    const s = Array.isArray(ct) ? ct.join(";") : (ct ?? "");
+    return /text\/html/i.test(s);
+}
 /**
  * 最小 patch：把 DSH 客户端 bundle 里的前端 isLoopback 判定替换为 true
  * （持久设置/API key 输入只对 loopback 开放；E2EE 流上信任基础等同 loopback）。
@@ -301,6 +308,16 @@ export function startJoin(opts) {
         const gatedHttp = new Map();
         /** 已报告过"loopback 补丁未命中"的路径（每个路径只报一次，避免日志刷屏）。 */
         const patchMissReported = new Set();
+        /** 已报告过"loopback 补丁命中"的路径（与 miss 对称：只看得到 miss 会让人误判"补丁从未生效"）。 */
+        const patchHitReported = new Set();
+        /**
+         * 已确认**不含**补丁目标串的 URL（键为完整 path，含 query）——命中过一次 miss 后直接走流式，
+         * 不再每次页面加载都缓冲 + 解压 + 全量扫描（DSH 前端壳资源 2 个就 ~1.3 MB）。
+         * 键含 query 且不截断：combo 路由用 query 选内容，资源 URL 由内容决定（rev/hash），内容一变 URL 就变。
+         */
+        const patchSkipped = new Set();
+        /** rdsh WebView API 是否已注入过（每个进程只打一次日志，避免页面加载刷屏）。 */
+        let adapterInjectionLogged = false;
         /** 从转发头里取 rdsh_gate cookie（hub D12 白名单透传）。 */
         function gateCookie(headers) {
             const ck = headers["cookie"];
@@ -474,7 +491,35 @@ export function startJoin(opts) {
                 responded = true;
                 const status = upRes.statusCode ?? 502;
                 const baseHeaders = normalizeRespHeaders(upRes.headers);
-                const wantsPatch = dio?.jsPatch?.() === true && isJsContentType(upRes.headers);
+                // 已确认该 URL 不含目标串（DSH 前端壳资源就属此类）→ 直接流式，省掉白解压与全量扫描
+                const wantsPatch = dio?.jsPatch?.() === true && isJsContentType(upRes.headers) && !patchSkipped.has(path);
+                const wantsInject = dio?.htmlInject !== undefined && isHtmlContentType(upRes.headers) && upRes.headers["content-encoding"] === undefined;
+                // HTML + 注入：缓冲后注入（htmlInject 会改 body 长度，须先处理再发 OPEN 并重算 content-length）
+                if (wantsInject) {
+                    const htmlChunks = [];
+                    upRes.on("data", (chunk) => htmlChunks.push(chunk));
+                    upRes.on("end", () => {
+                        const html = injectHtmlScript(Buffer.concat(htmlChunks).toString("utf8"), dio.htmlInject);
+                        const outHeaders = {
+                            ...baseHeaders,
+                            "content-length": String(Buffer.byteLength(html)),
+                        };
+                        delete outHeaders["transfer-encoding"];
+                        if (!adapterInjectionLogged) {
+                            adapterInjectionLogged = true;
+                            console.log("[rdsh] rdsh webview api injected (window.__rdshWebViewApi v1)");
+                        }
+                        send(encodeFrame(FRAME_TYPE.OPEN, streamId, jsonPayload({ kind: "http", status, reason: upRes.statusMessage, headers: outHeaders })));
+                        sendChunkedBody(send, streamId, Buffer.from(html));
+                        send(encodeFrame(FRAME_TYPE.CLOSE, streamId, jsonPayload({ code: 0 })));
+                        httpStreams.delete(streamId);
+                    });
+                    upRes.on("error", () => {
+                        send(encodeFrame(FRAME_TYPE.CLOSE, streamId, jsonPayload({ code: 502, message: "upstream error" })));
+                        httpStreams.delete(streamId);
+                    });
+                    return;
+                }
                 // 非 JS / 未开补丁：保持原流式路径（OPEN 立即发，body 边到边发）
                 if (!wantsPatch) {
                     send(encodeFrame(FRAME_TYPE.OPEN, streamId, jsonPayload({ kind: "http", status, reason: upRes.statusMessage, headers: baseHeaders })));
@@ -503,8 +548,11 @@ export function startJoin(opts) {
                     let body = raw;
                     let outHeaders = baseHeaders;
                     let hit = false;
+                    /** 解码成功、且明文里确实**没有**目标串 → 该 URL 可以永久短路（换编码回来也一样没有）。 */
+                    let targetAbsent = false;
                     if (decoded !== null) {
                         const patched = patchLoopbackJs(decoded);
+                        targetAbsent = patched === null;
                         const recoded = patched === null ? null : encodeBody(patched, encoding);
                         if (recoded !== null) {
                             body = recoded;
@@ -516,17 +564,26 @@ export function startJoin(opts) {
                             outHeaders["cache-control"] = "public, max-age=300";
                         }
                     }
-                    // 未命中必须留痕（每个路径一次）：fail-open 是刻意设计，但"补丁从未生效"不能静默
-                    //（2026-09-14 gzip 事故正是因为没有这条日志而排查了很久）
-                    if (!hit) {
-                        const key = (path.split("?")[0] ?? path).slice(0, 120);
-                        if (!patchMissReported.has(key)) {
-                            patchMissReported.add(key);
-                            console.log(`[patch] miss: ${key} (${raw.length}B, content-encoding=${encoding === "" ? "identity" : encoding})`);
+                    // 命中与未命中都必须留痕（每个路径一次）：fail-open 是刻意设计，但"补丁是否生效"不能靠猜。
+                    // 两次误判都源于只看得到一半日志：2026-09-14 gzip 事故（只见 miss）、2026-09-17
+                    // 「补丁在 0.1.5-rc.2 上永不命中」（把前端壳资源的 miss 当成了判据所在的 bundle）。
+                    const logKey = (path.split("?")[0] ?? path).slice(0, 120);
+                    if (hit) {
+                        if (!patchHitReported.has(logKey) || process.env.RDSH_DEBUG_PATCH === "1") {
+                            patchHitReported.add(logKey);
+                            console.log(`[patch] hit: ${logKey} (${raw.length}B → ${body.length}B, ${encoding === "" ? "identity" : encoding})`);
                         }
                     }
-                    else if (process.env.RDSH_DEBUG_PATCH === "1") {
-                        console.log(`[patch] hit: ${path.slice(0, 120)} (${raw.length}B → ${body.length}B, ${encoding === "" ? "identity" : encoding})`);
+                    else {
+                        const firstMiss = !patchMissReported.has(logKey);
+                        patchMissReported.add(logKey);
+                        // 只有"解码后确实没有目标串"才永久短路；编码不支持（decoded === null）时并没看过明文，
+                        // 保持每次尝试（同一 URL 换个编码回来仍能被补丁）；重压失败同理不算。
+                        if (targetAbsent)
+                            patchSkipped.add(path);
+                        if (firstMiss) {
+                            console.log(`[patch] miss: ${logKey} (${raw.length}B, content-encoding=${encoding === "" ? "identity" : encoding}) — fail-open${targetAbsent ? "；此 URL 后续不再尝试补丁" : ""}`);
+                        }
                     }
                     send(encodeFrame(FRAME_TYPE.OPEN, streamId, jsonPayload({ kind: "http", status, reason: upRes.statusMessage, headers: outHeaders })));
                     sendChunkedBody(send, streamId, body);
@@ -615,7 +672,7 @@ export function startJoin(opts) {
         }
         return { handleFrame, cleanup };
     }
-    const plainDispatcher = makeInnerDispatcher(sendTunnelFrame, { jsPatch: () => uiCompat.trustE2EEAsLoopback, gate: true });
+    const plainDispatcher = makeInnerDispatcher(sendTunnelFrame, { jsPatch: () => uiCompat.trustE2EEAsLoopback, gate: true, htmlInject: RDSH_WEBVIEW_API });
     // host 端 E2EE 静态密钥对（持久化 ~/.rdsh/e2ee-key.json；join 注册时上送指纹）
     let hostE2eeKeypair;
     try {

package/dist/proxy.js

@@ -7,6 +7,20 @@
 import { request } from "node:http";
 import { WebSocket, WebSocketServer } from "ws";
 import { decodeBody, encodeBody, firstEncoding } from "./http-encoding.js";
+/**
+ * 已知**不含**补丁目标串的 URL（按 patcher 函数身份隔离——目标串由 patcher 决定，只看 URL 会误判）。
+ * 目的与隧道路径（`join.ts` 的 `patchSkipped`）一致：DSH 前端壳资源每次页面加载都被缓冲 + 解压 + 全量扫描，
+ * 而这些字节永远不会命中；记住一次即可一直走流式。
+ */
+const jsPatchMissedUrls = new WeakMap();
+function missedUrlsFor(patcher) {
+    const existing = jsPatchMissedUrls.get(patcher);
+    if (existing !== undefined)
+        return existing;
+    const created = new Set();
+    jsPatchMissedUrls.set(patcher, created);
+    return created;
+}
 /**
  * 重写转发头以通过 DSH 围栏（isTrustedApiRequest 要求 Host/Origin 一致且为 loopback）。
  * - Host → 127.0.0.1:<port>（M1 事实：DSH 只信任 loopback/trusted Host）
@@ -81,7 +95,12 @@ export function forwardHttp(req, res, target, opts) {
             });
             return;
         }
-        const canPatchJs = opts?.jsPatch !== undefined && typeof contentType === "string" && /javascript/i.test(contentType);
+        const patchUrl = req.url ?? "";
+        const patchMissed = opts?.jsPatch === undefined ? undefined : missedUrlsFor(opts.jsPatch);
+        const canPatchJs = opts?.jsPatch !== undefined &&
+            typeof contentType === "string" &&
+            /javascript/i.test(contentType) &&
+            patchMissed?.has(patchUrl) !== true;
         if (canPatchJs) {
             // JS bundle 需缓冲后才能替换目标串；先按 content-encoding 解码（dsh 会 gzip JS），
             // 补丁后按原编码重压（fail-open：未命中/不支持编码 → 原字节原头透传）
@@ -95,6 +114,9 @@ export function forwardHttp(req, res, target, opts) {
                 const patched = decoded === null ? null : opts.jsPatch(decoded);
                 const recoded = patched === null ? null : encodeBody(patched, encoding);
                 const outBody = recoded ?? raw;
+                // 只有"解码后确实没有目标串"才记住该 URL（编码不支持时没看过明文，保持每次尝试）
+                if (patched === null && decoded !== null)
+                    patchMissed?.add(patchUrl);
                 const outHeaders = { ...upstreamRes.headers };
                 if (recoded !== null) {
                     outHeaders["content-length"] = String(outBody.length);

package/dist/rdsh-webview-api.d.ts

@@ -0,0 +1,17 @@
+/**
+ * rdsh-webview-api.ts — 智能体 API 契约适配脚本（注入 DSH 首页，feature 22）。
+ *
+ * 挂出稳定契约 `window.__rdshWebViewApi`（version 1），供 WebView 客户端（如 garsync App）优先消费，
+ * 以把「DSH 版本适配」从 App（发版慢）挪到 gateway（随 npm 包快速发布）。
+ *
+ * 契约正文与语义以 garsync `doc/feature/108_agent_api_contract/req.md` R7 为准；
+ * 本脚本是 garsync `lib/rdsh/rdsh_web_bridge.dart` 的 `_bridgeJs` 的**精简等价物**：
+ * - 保留：isDshPage / readReply / fillAndSend 三方法及其 DOM 细节（Lexical 写入管线、
+ *   键盘守卫、最后一轮答案提取、UTF-8 安全 base64）；
+ * - 去掉：`report()` 通道与 105 诊断探针（那是 App 侧独有的 debug 机制）。
+ *
+ * 安全约定：幂等（已注入即返回）、防御式（任何 DOM 缺失/异常返回安全默认值、绝不抛错）。
+ */
+export declare const RDSH_WEBVIEW_API = "(function () {\n  if (window.__rdshWebViewApi) return;\n  function findComposer() {\n    var el = document.querySelector('[data-lexical-editor=\"true\"]');\n    if (el) return { el: el, kind: 'lexical' };\n    el = document.querySelector('[contenteditable=\"true\"]');\n    if (el) return { el: el, kind: 'contenteditable' };\n    el = document.querySelector('textarea');\n    if (el) return { el: el, kind: 'textarea' };\n    return null;\n  }\n  function selectAll(el) {\n    var tag = el.tagName;\n    if (tag === 'TEXTAREA' || tag === 'INPUT') { el.select(); return; }\n    var range = document.createRange();\n    range.selectNodeContents(el);\n    var sel = window.getSelection();\n    sel.removeAllRanges();\n    sel.addRange(range);\n  }\n  function insertText(el, text) {\n    el.focus();\n    try { selectAll(el); } catch (e) {}\n    // 1) execCommand \u8D70\u6D4F\u89C8\u5668\u7F16\u8F91\u7BA1\u7EBF\uFF0C\u8BA9 Lexical \u6536\u5230 input \u4E8B\u4EF6\u3002\n    try { if (document.execCommand('insertText', false, text)) return true; } catch (e) {}\n    // 2) \u663E\u5F0F beforeinput\u3002\n    try {\n      el.dispatchEvent(new InputEvent('beforeinput', { inputType: 'insertText', data: text, bubbles: true, cancelable: true }));\n      return true;\n    } catch (e) {}\n    // 3) \u515C\u5E95\uFF1A\u76F4\u63A5\u5199 DOM + \u89E6\u53D1 input\u3002\n    try {\n      var tag = el.tagName;\n      if (tag === 'TEXTAREA' || tag === 'INPUT') {\n        var proto = tag === 'TEXTAREA' ? HTMLTextAreaElement.prototype : HTMLInputElement.prototype;\n        Object.getOwnPropertyDescriptor(proto, 'value').set.call(el, text);\n      } else {\n        el.textContent = text;\n      }\n      el.dispatchEvent(new Event('input', { bubbles: true }));\n      return true;\n    } catch (e) {}\n    return false;\n  }\n  function pressEnter(el) {\n    var opts = { key: 'Enter', code: 'Enter', keyCode: 13, which: 13, bubbles: true, cancelable: true, composed: true, isComposing: false };\n    try {\n      el.dispatchEvent(new KeyboardEvent('keydown', opts));\n      el.dispatchEvent(new KeyboardEvent('keypress', opts));\n      el.dispatchEvent(new KeyboardEvent('keyup', opts));\n    } catch (e) {}\n  }\n  // \u952E\u76D8\u5B88\u536B\uFF1A\u8BED\u97F3\u5199\u5165\u540E\u5173\u8F6F\u952E\u76D8\uFF1B\u7528\u6237\u771F\u5B9E\u89E6\u6478\u9875\u9762\u5373\u89E3\u9664\u3002\n  var keyboardGuard = false;\n  function dismissKeyboard() {\n    try {\n      var active = document.activeElement;\n      if (active && active !== document.body && typeof active.blur === 'function') active.blur();\n      var selection = window.getSelection();\n      if (selection && selection.removeAllRanges) selection.removeAllRanges();\n    } catch (e) {}\n  }\n  function onUserTouch() { if (keyboardGuard) keyboardGuard = false; }\n  document.addEventListener('focusin', function () { if (!keyboardGuard) return; dismissKeyboard(); }, true);\n  document.addEventListener('pointerdown', onUserTouch, true);\n  document.addEventListener('touchstart', onUserTouch, true);\n\n  // \u5355\u4E2A flow \u8282\u70B9\u7684\u53EF\u89C1\u6587\u672C\uFF1BproseOnly \u989D\u5916\u4E22\u5F03\u6574\u5757\u4EE3\u7801\u4E0E\u8868\u683C\uFF08105 \u53EA\u8BFB\u7B54\u6848\u6B63\u6587\uFF09\u3002\n  function answerTextOf(el, proseOnly) {\n    var clone = el.cloneNode(true);\n    var selector = '[data-variant=\"think\"],[data-variant=\"others\"]';\n    if (proseOnly) selector += ',pre,table';\n    var drop = clone.querySelectorAll(selector);\n    for (var i = 0; i < drop.length; i++) { if (drop[i].parentNode) drop[i].parentNode.removeChild(drop[i]); }\n    return (clone.innerText || clone.textContent || '').trim();\n  }\n  // \u6700\u540E\u4E00\u8F6E\u7684\u7B54\u6848\u90E8\u5206\uFF08\u6392\u9664 reasoning\uFF0C\u53D6\u6700\u5927 turn\uFF0C\u9010 part \u62FC\u63A5\uFF09\u3002\n  function latestAnswer() {\n    var steps = Array.prototype.slice.call(document.querySelectorAll('[data-chat-flow-kind=\"assistant-step\"]'));\n    var answers = steps.filter(function (el) { return el.getAttribute('data-chat-group-part') !== 'reasoning'; });\n    var maxTurn = -1;\n    for (var i = 0; i < answers.length; i++) {\n      var turn = parseInt(answers[i].getAttribute('data-chat-turn'), 10);\n      if (!isNaN(turn) && turn > maxTurn) maxTurn = turn;\n    }\n    var parts = answers.filter(function (el) { return parseInt(el.getAttribute('data-chat-turn'), 10) === maxTurn; });\n    var texts = [];\n    for (var j = 0; j < parts.length; j++) {\n      var text = answerTextOf(parts[j], true);\n      if (text.length) texts.push(text);\n    }\n    return texts.join('\\n\\n');\n  }\n\n  window.__rdshWebViewApi = {\n    version: 1,\n    // 104\uFF1A\u5199\u5165 composer \u5E76\u63D0\u4EA4\u3002\u8FD4\u56DE\u88F8\u72B6\u6001 token\u3002\n    fillAndSend: function (text) {\n      var found = findComposer();\n      if (!found) return 'no-composer';\n      keyboardGuard = false;\n      if (!insertText(found.el, text)) return 'fill-failed';\n      keyboardGuard = true;\n      dismissKeyboard();\n      setTimeout(function () { pressEnter(found.el); dismissKeyboard(); }, 80);\n      return 'ok';\n    },\n    // 105\uFF1A\u5F85\u6717\u8BFB\u5185\u5BB9 + \u72B6\u6001\u3002\u8FD4\u56DE UTF-8 \u5B89\u5168\u7684 base64 JSON {dsh, streaming, text}\u3002\n    readReply: function () {\n      var out = { dsh: false, streaming: 0, text: '' };\n      try {\n        out.streaming = document.querySelectorAll('[data-streaming]').length;\n        if (document.querySelectorAll('[data-chat-flow-kind]').length > 0) {\n          out.dsh = true;\n          out.text = latestAnswer();\n        } else {\n          out.text = document.body ? document.body.innerText : '';\n        }\n      } catch (e) {}\n      return window.btoa(unescape(encodeURIComponent(JSON.stringify(out))));\n    },\n    // 107\uFF1A\u662F\u5426 DSH \u4F1A\u8BDD\u9875\uFF08\u8F7B\u91CF\u5224\u5B9A\uFF0C\u53EF\u8F6E\u8BE2\uFF09\u3002\u8FD4\u56DE\u88F8 '1' / '0'\u3002\n    isDshPage: function () {\n      try {\n        return document.querySelectorAll('[data-chat-flow-kind]').length > 0 ? '1' : '0';\n      } catch (e) { return '0'; }\n    }\n  };\n})();";
+/** 把 `<script>${script}</script>` 插到 `</head>` 前（无则前置）；纯函数，可单测。 */
+export declare function injectHtmlScript(html: string, script: string): string;

package/dist/rdsh-webview-api.js

@@ -0,0 +1,151 @@
+/**
+ * rdsh-webview-api.ts — 智能体 API 契约适配脚本（注入 DSH 首页，feature 22）。
+ *
+ * 挂出稳定契约 `window.__rdshWebViewApi`（version 1），供 WebView 客户端（如 garsync App）优先消费，
+ * 以把「DSH 版本适配」从 App（发版慢）挪到 gateway（随 npm 包快速发布）。
+ *
+ * 契约正文与语义以 garsync `doc/feature/108_agent_api_contract/req.md` R7 为准；
+ * 本脚本是 garsync `lib/rdsh/rdsh_web_bridge.dart` 的 `_bridgeJs` 的**精简等价物**：
+ * - 保留：isDshPage / readReply / fillAndSend 三方法及其 DOM 细节（Lexical 写入管线、
+ *   键盘守卫、最后一轮答案提取、UTF-8 安全 base64）；
+ * - 去掉：`report()` 通道与 105 诊断探针（那是 App 侧独有的 debug 机制）。
+ *
+ * 安全约定：幂等（已注入即返回）、防御式（任何 DOM 缺失/异常返回安全默认值、绝不抛错）。
+ */
+export const RDSH_WEBVIEW_API = `(function () {
+  if (window.__rdshWebViewApi) return;
+  function findComposer() {
+    var el = document.querySelector('[data-lexical-editor="true"]');
+    if (el) return { el: el, kind: 'lexical' };
+    el = document.querySelector('[contenteditable="true"]');
+    if (el) return { el: el, kind: 'contenteditable' };
+    el = document.querySelector('textarea');
+    if (el) return { el: el, kind: 'textarea' };
+    return null;
+  }
+  function selectAll(el) {
+    var tag = el.tagName;
+    if (tag === 'TEXTAREA' || tag === 'INPUT') { el.select(); return; }
+    var range = document.createRange();
+    range.selectNodeContents(el);
+    var sel = window.getSelection();
+    sel.removeAllRanges();
+    sel.addRange(range);
+  }
+  function insertText(el, text) {
+    el.focus();
+    try { selectAll(el); } catch (e) {}
+    // 1) execCommand 走浏览器编辑管线，让 Lexical 收到 input 事件。
+    try { if (document.execCommand('insertText', false, text)) return true; } catch (e) {}
+    // 2) 显式 beforeinput。
+    try {
+      el.dispatchEvent(new InputEvent('beforeinput', { inputType: 'insertText', data: text, bubbles: true, cancelable: true }));
+      return true;
+    } catch (e) {}
+    // 3) 兜底：直接写 DOM + 触发 input。
+    try {
+      var tag = el.tagName;
+      if (tag === 'TEXTAREA' || tag === 'INPUT') {
+        var proto = tag === 'TEXTAREA' ? HTMLTextAreaElement.prototype : HTMLInputElement.prototype;
+        Object.getOwnPropertyDescriptor(proto, 'value').set.call(el, text);
+      } else {
+        el.textContent = text;
+      }
+      el.dispatchEvent(new Event('input', { bubbles: true }));
+      return true;
+    } catch (e) {}
+    return false;
+  }
+  function pressEnter(el) {
+    var opts = { key: 'Enter', code: 'Enter', keyCode: 13, which: 13, bubbles: true, cancelable: true, composed: true, isComposing: false };
+    try {
+      el.dispatchEvent(new KeyboardEvent('keydown', opts));
+      el.dispatchEvent(new KeyboardEvent('keypress', opts));
+      el.dispatchEvent(new KeyboardEvent('keyup', opts));
+    } catch (e) {}
+  }
+  // 键盘守卫：语音写入后关软键盘；用户真实触摸页面即解除。
+  var keyboardGuard = false;
+  function dismissKeyboard() {
+    try {
+      var active = document.activeElement;
+      if (active && active !== document.body && typeof active.blur === 'function') active.blur();
+      var selection = window.getSelection();
+      if (selection && selection.removeAllRanges) selection.removeAllRanges();
+    } catch (e) {}
+  }
+  function onUserTouch() { if (keyboardGuard) keyboardGuard = false; }
+  document.addEventListener('focusin', function () { if (!keyboardGuard) return; dismissKeyboard(); }, true);
+  document.addEventListener('pointerdown', onUserTouch, true);
+  document.addEventListener('touchstart', onUserTouch, true);
+
+  // 单个 flow 节点的可见文本；proseOnly 额外丢弃整块代码与表格（105 只读答案正文）。
+  function answerTextOf(el, proseOnly) {
+    var clone = el.cloneNode(true);
+    var selector = '[data-variant="think"],[data-variant="others"]';
+    if (proseOnly) selector += ',pre,table';
+    var drop = clone.querySelectorAll(selector);
+    for (var i = 0; i < drop.length; i++) { if (drop[i].parentNode) drop[i].parentNode.removeChild(drop[i]); }
+    return (clone.innerText || clone.textContent || '').trim();
+  }
+  // 最后一轮的答案部分（排除 reasoning，取最大 turn，逐 part 拼接）。
+  function latestAnswer() {
+    var steps = Array.prototype.slice.call(document.querySelectorAll('[data-chat-flow-kind="assistant-step"]'));
+    var answers = steps.filter(function (el) { return el.getAttribute('data-chat-group-part') !== 'reasoning'; });
+    var maxTurn = -1;
+    for (var i = 0; i < answers.length; i++) {
+      var turn = parseInt(answers[i].getAttribute('data-chat-turn'), 10);
+      if (!isNaN(turn) && turn > maxTurn) maxTurn = turn;
+    }
+    var parts = answers.filter(function (el) { return parseInt(el.getAttribute('data-chat-turn'), 10) === maxTurn; });
+    var texts = [];
+    for (var j = 0; j < parts.length; j++) {
+      var text = answerTextOf(parts[j], true);
+      if (text.length) texts.push(text);
+    }
+    return texts.join('\\n\\n');
+  }
+
+  window.__rdshWebViewApi = {
+    version: 1,
+    // 104：写入 composer 并提交。返回裸状态 token。
+    fillAndSend: function (text) {
+      var found = findComposer();
+      if (!found) return 'no-composer';
+      keyboardGuard = false;
+      if (!insertText(found.el, text)) return 'fill-failed';
+      keyboardGuard = true;
+      dismissKeyboard();
+      setTimeout(function () { pressEnter(found.el); dismissKeyboard(); }, 80);
+      return 'ok';
+    },
+    // 105：待朗读内容 + 状态。返回 UTF-8 安全的 base64 JSON {dsh, streaming, text}。
+    readReply: function () {
+      var out = { dsh: false, streaming: 0, text: '' };
+      try {
+        out.streaming = document.querySelectorAll('[data-streaming]').length;
+        if (document.querySelectorAll('[data-chat-flow-kind]').length > 0) {
+          out.dsh = true;
+          out.text = latestAnswer();
+        } else {
+          out.text = document.body ? document.body.innerText : '';
+        }
+      } catch (e) {}
+      return window.btoa(unescape(encodeURIComponent(JSON.stringify(out))));
+    },
+    // 107：是否 DSH 会话页（轻量判定，可轮询）。返回裸 '1' / '0'。
+    isDshPage: function () {
+      try {
+        return document.querySelectorAll('[data-chat-flow-kind]').length > 0 ? '1' : '0';
+      } catch (e) { return '0'; }
+    }
+  };
+})();`;
+/** 把 `<script>${script}</script>` 插到 `</head>` 前（无则前置）；纯函数，可单测。 */
+export function injectHtmlScript(html, script) {
+    const tag = `<script>${script}</script>`;
+    if (html.includes("</head>"))
+        return html.replace("</head>", `${tag}</head>`);
+    return `${tag}${html}`;
+}
+//# sourceMappingURL=rdsh-webview-api.js.map

package/dist/server.js

@@ -22,8 +22,11 @@ import { patchLoopbackJs } from "./join.js";
 import { pairPageHtml } from "./pair-page.js";
 import { loginPageHtml } from "./login-page.js";
 import { SECURE_CONTEXT_POLYFILL } from "./secure-context-polyfill.js";
+import { RDSH_WEBVIEW_API } from "./rdsh-webview-api.js";
 import { loadConfig } from "./config.js";
 import { ipInCidrs } from "./cidr.js";
+/** 注入 DSH 首页的脚本：非 secure context polyfill + rdsh WebView API 契约。两处 forwardHttp 共用，避免漂移。 */
+const HTML_INJECT = SECURE_CONTEXT_POLYFILL + RDSH_WEBVIEW_API;
 const MAX_LOGIN_FAILS = 5;
 const LOGIN_LOCK_MS = 10 * 60 * 1000;
 export async function startGateway(opts) {
@@ -159,7 +162,7 @@ async function handleHttp(req, res, ctx, loginLimiter) {
     }
     if (ctx.authMode === "none") {
         forwardHttp(req, res, ctx.target, {
-            htmlInject: SECURE_CONTEXT_POLYFILL,
+            htmlInject: HTML_INJECT,
             authCookie: ctx.dshAuthCookieHeader,
             jsPatch: ctx.trustPairedAsLoopback ? patchLoopbackJs : undefined,
         });
@@ -171,7 +174,7 @@ async function handleHttp(req, res, ctx, loginLimiter) {
         return;
     }
     forwardHttp(req, res, ctx.target, {
-        htmlInject: SECURE_CONTEXT_POLYFILL,
+        htmlInject: HTML_INJECT,
         authCookie: ctx.dshAuthCookieHeader,
         // 会话分支同样要打 loopback 补丁：LAN 没有 E2EE shim，设置/API key 唯一依赖这个补丁；
         // 旧实现只在 authMode==="none" 分支传了 jsPatch ⇒ 配对/登录模式下设置页打不开（2026-09-14 复审发现）

package/dist/service.d.ts

@@ -30,3 +30,9 @@ export declare function installService(spec: ServiceSpec): Promise<string>;
 export declare function serviceStatus(name?: string): Promise<string>;
 /** 停止并移除服务。 */
 export declare function uninstallService(name?: string): Promise<string>;
+/** 启动服务（运行时控制，不改变开机自启配置）。 */
+export declare function startService(name?: string): Promise<string>;
+/** 停止服务（运行时控制，不改变开机自启配置）。 */
+export declare function stopService(name?: string): Promise<string>;
+/** 重启服务（运行时控制，不改变开机自启配置）。 */
+export declare function restartService(name?: string): Promise<string>;

package/dist/service.js

@@ -158,4 +158,33 @@ export async function uninstallService(name = SERVICE_NAME) {
     await rm(launchdPlistPath(name), { force: true });
     return `removed ${launchdPlistPath(name)}`;
 }
+/** 启动服务（运行时控制，不改变开机自启配置）。 */
+export async function startService(name = SERVICE_NAME) {
+    if (isLinux()) {
+        await run("systemctl", ["--user", "start", name]);
+        return `started ${name}`;
+    }
+    // macOS：kickstart -k 确保在跑（已运行则先停再启）。
+    await run("launchctl", ["kickstart", "-k", `com.${name}`]);
+    return `started com.${name}`;
+}
+/** 停止服务（运行时控制，不改变开机自启配置）。 */
+export async function stopService(name = SERVICE_NAME) {
+    if (isLinux()) {
+        await run("systemctl", ["--user", "stop", name]);
+        return `stopped ${name}`;
+    }
+    // macOS：stop 仅停当前实例；KeepAlive（仅失败退出重启）可能立即拉起 —— 与 systemd stop 语义不同。
+    await run("launchctl", ["stop", `com.${name}`]).catch(() => undefined);
+    return `stopped com.${name}`;
+}
+/** 重启服务（运行时控制，不改变开机自启配置）。 */
+export async function restartService(name = SERVICE_NAME) {
+    if (isLinux()) {
+        await run("systemctl", ["--user", "restart", name]);
+        return `restarted ${name}`;
+    }
+    await run("launchctl", ["kickstart", "-k", `com.${name}`]);
+    return `restarted com.${name}`;
+}
 //# sourceMappingURL=service.js.map

package/dist/spawn-dsh.d.ts

@@ -80,9 +80,12 @@ export declare function compareDshVersions(a: string, b: string): number;
  * 2026-09-11：MAX 扩到 `0.1.5-rc.2` —— 真机实测通过（spawn + ready 行 token + 会话 cookie 换发 +
  * `/api` 转发 + HTML 注入 + WS `/api/remote.mux` 桥接 + join 的 `patchLoopbackJs` 命中），
  * 见 doc/review/20260911-dsh-0.1.5-rc.2-plugin-compat.md §5。
+ * 2026-09-24：MAX 扩到 `0.1.7-rc.1` —— 同一份 G1–G7 清单重跑通过。0.1.7 只改前端 dist 形态
+ * （`<base href="./">` + 相对 `plugins/…`），认证/RPC 未变；网关是同源透明代理，相对引用由浏览器
+ * 解析成绝对路径后原样转发，故不受影响，见 doc/review/20260924-dsh-0.1.7-rc.1-compat.md。
  */
 export declare const DSH_COMPAT_MIN = "0.1.1-rc.2";
-export declare const DSH_COMPAT_MAX = "0.1.5-rc.2";
+export declare const DSH_COMPAT_MAX = "0.1.7-rc.1";
 /**
  * 版本落在实测窗口外时的提示文案（零文档导向：直接给动作指令，用户不查表）。
  * - 比 max 新 → 升级 remote-dsh 或暂用旧 dsh；

package/dist/spawn-dsh.js

@@ -287,9 +287,12 @@ export function compareDshVersions(a, b) {
  * 2026-09-11：MAX 扩到 `0.1.5-rc.2` —— 真机实测通过（spawn + ready 行 token + 会话 cookie 换发 +
  * `/api` 转发 + HTML 注入 + WS `/api/remote.mux` 桥接 + join 的 `patchLoopbackJs` 命中），
  * 见 doc/review/20260911-dsh-0.1.5-rc.2-plugin-compat.md §5。
+ * 2026-09-24：MAX 扩到 `0.1.7-rc.1` —— 同一份 G1–G7 清单重跑通过。0.1.7 只改前端 dist 形态
+ * （`<base href="./">` + 相对 `plugins/…`），认证/RPC 未变；网关是同源透明代理，相对引用由浏览器
+ * 解析成绝对路径后原样转发，故不受影响，见 doc/review/20260924-dsh-0.1.7-rc.1-compat.md。
  */
 export const DSH_COMPAT_MIN = "0.1.1-rc.2";
-export const DSH_COMPAT_MAX = "0.1.5-rc.2";
+export const DSH_COMPAT_MAX = "0.1.7-rc.1";
 /**
  * 版本落在实测窗口外时的提示文案（零文档导向：直接给动作指令，用户不查表）。
  * - 比 max 新 → 升级 remote-dsh 或暂用旧 dsh；

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rdsh-gateway",
-  "version": "0.8.6",
+  "version": "0.10.0",
   "description": "rdsh host-side component: LAN auth gateway + outbound tunnel endpoint (spawns dsh web)",
   "license": "MIT",
   "type": "module",