release: v0.2.0

Author: zengyufei

CHANGELOG.en.md

@@ -2,9 +2,20 @@
 
 All notable changes to `ii` are documented here. The default Chinese version is [CHANGELOG.md](CHANGELOG.md).
 
-## Unreleased
+## 0.2.0 - 2026-07-31
 
-Nothing yet.
+### Added
+
+- Added `ii webrtc [--token <value>]` for temporary LAN browser-to-browser WebRTC file transfer rooms; it prints a QR code and all IPv4 LAN URLs, keeps file bytes out of the `ii` process, and uses no public STUN/TURN.
+
+### Fixed
+
+- Fixed `ii webrtc` DataChannel setup between mobile browsers when mDNS host candidates could not be resolved or ICE gathering did not finish; signalling now uses the client's LAN IPv4 and trickles candidates immediately.
+- `ii webrtc` now verifies an ICE host candidate before joining; browsers with disabled or blocked WebRTC receive an explicit message instead of only discovering peers without being able to transfer.
+
+### Documentation
+
+- Added [webrtc.md](webrtc.md) covering LAN scope, browser requirements, memory limits, the path token, and unsupported capabilities.
 
 ## 0.1.19 - 2026-07-31
 

CHANGELOG.md

@@ -2,9 +2,20 @@
 
 本文件记录 `ii` 的重要变更。默认中文版本在这里，英文版本见 [CHANGELOG.en.md](CHANGELOG.en.md)。
 
-## Unreleased
+## 0.2.0 - 2026-07-31
 
-暂无。
+### 新增
+
+- 新增 `ii webrtc [--token <value>]`：临时提供局域网浏览器间 WebRTC 文件直传房间，终端输出二维码和全部 IPv4 LAN URL；文件不经过 `ii` 进程，不使用公网 STUN/TURN。
+
+### 修复
+
+- 修复 `ii webrtc` 在移动浏览器之间因 mDNS host candidate 无法解析或 ICE gathering 不结束而无法建立 DataChannel 的问题；信令使用访问服务的客户端局域网 IPv4 并即时转发候选。
+- `ii webrtc` 页面在加入房间前实际验证 ICE host candidate；浏览器禁用或阻止 WebRTC 时明确提示，避免只能发现设备但无法传输。
+
+### 文档
+
+- 新增 [webrtc.md](webrtc.md)，说明局域网范围、浏览器要求、内存限制、路径令牌和不支持的能力。
 
 ## 0.1.19 - 2026-07-31
 

Cargo.lock

@@ -4,7 +4,7 @@ exclude = ["vendor/iroh", "vendor/suppaftp"]
 resolver = "3"
 
 [workspace.package]
-version = "0.1.19"
+version = "0.2.0"
 edition = "2024"
 rust-version = "1.91"
 license = "MIT"

Cargo.toml

@@ -23,7 +23,7 @@
 
 - The sender serves one successful receive by default, then exits
 - It briefly probes for a usable path through complex networks, with S3, WebDAV, FTP, and SFTP backend options
-- `ii send <file-or-folder> --web` opens a temporary LAN download page, while `ii web [directory]` browses a LAN directory
+- `ii send <file-or-folder> --web` opens a temporary LAN download page, `ii web [directory]` browses a LAN directory, and `ii webrtc` transfers files directly between LAN browsers
 - Receives resume automatically by default
 - Existing files with the same MD5 are skipped
 - Folders can be sent directly
@@ -134,12 +134,16 @@ ii send .\video.mp4 --web --token A1b2C3d4E5f6G7h8
 ii send .\video.mp4 --web --path .\uploads
 ii web
 ii web .\shared --token A1b2C3d4E5f6G7h8 --path .\uploads
+ii webrtc
+ii webrtc --token A1b2C3d4E5f6G7h8
 ```
 
 The command displays a QR code directly above the primary LAN URL for opening the download page, then lists the remaining physical and virtual adapter IPv4 URLs under `other:`. The QR code at the top of that page points directly to `/download` for phone downloads. The page can also upload multiple files into `./ii/` under the directory where the command started. Use `--path <dir>` to write directly into a different directory; relative paths are based on the startup directory, and the directory is created on the first upload. Directory uploads are not supported. Folders download as `.tar` archives. Press `Ctrl+C` to stop the server. Optional `--token <value>` adds a path access token to the page, download, and upload URLs; it must be 16 to 128 ASCII letters, digits, `-`, or `_`, and omitting it keeps the unprotected URLs. This mode has no account authentication and is intended only for short-lived, trusted LAN sharing.
 
 Without a path, `ii web` serves the directory where the command starts; with a path, it accepts only an existing directory. Its page provides recursive nginx-style directory browsing, normal file responses, and multi-file uploads. The terminal still shows the QR code, primary IPv4 LAN URL, and `other:` adapter URLs, but the directory page has no QR code. `--token` and `--path` follow the same rules as `ii send ... --web`; `-p` does not apply to `ii web`.
 
+`ii webrtc` opens a LAN browser-to-browser transfer room. The terminal prints a QR code, the primary IPv4 LAN URL, and `other:` adapter URLs. Browsers that open the same URL receive temporary device numbers, choose another online device, and send multiple independent files. Files travel directly between browser WebRTC DataChannels, never through the `ii` process or its disk. Before joining, the page verifies that the browser can create an ICE host candidate; if WebRTC is disabled or blocked it shows `WebRTC unavailable` and does not join the room. It exchanges host candidates only and has no public STUN/TURN fallback, so client isolation, firewalls, or blocked P2P can prevent connection. Receivers download automatically after buffering each file in browser memory, so it is unsuitable for files larger than the available browser memory. Optional `--token <value>` scopes the page and signalling URLs to a path token. See [webrtc.md](webrtc.md) for details.
+
 Prefer local network paths and avoid public relays:
 
 ```powershell

README.en.md

@@ -25,7 +25,7 @@
 
 自动找路 / 局域网优先 / 可公网中继或 `--s3` / `--webdav` / `--ftp` / `--sftp` 中继
 
-也可用 `ii send <文件或文件夹> --web` 临时开下载页，或用 `ii web [目录]` 浏览局域网目录
+也可用 `ii send <文件或文件夹> --web` 临时开下载页、`ii web [目录]` 浏览局域网目录，或用 `ii webrtc` 让浏览器局域网直传文件
 
 断点续收 / 秒传跳过 / 冲突覆盖 / 支持传完清理中转
 
@@ -137,12 +137,16 @@ ii send .\video.mp4 --web --token A1b2C3d4E5f6G7h8
 ii send .\video.mp4 --web --path .\uploads
 ii web
 ii web .\shared --token A1b2C3d4E5f6G7h8 --path .\uploads
+ii webrtc
+ii webrtc --token A1b2C3d4E5f6G7h8
 ```
 
 命令行会在主局域网 URL 上方显示进入下载页的二维码，并在 `other:` 下列出其余物理和虚拟网卡的 IPv4 URL；下载页顶部的二维码则直达 `/download`，方便手机扫码下载。网页也可以一次上传多个文件，默认写到启动命令当前目录的 `./ii/`；可用 `--path <目录>` 改为直接写入指定目录，相对路径仍以启动目录为基准，目录会在首次上传时创建。不支持上传目录。目录会下载为 `.tar`。按 `Ctrl+C` 关闭服务。可选 `--token <value>` 为网页、下载和上传加路径访问令牌，令牌只能是 16 到 128 个 ASCII 字母、数字、`-` 或 `_`；不带时保持无令牌 URL。该模式没有账号鉴权，只适合临时、可信的局域网。
 
 `ii web` 不带路径时服务启动命令的当前目录；带路径时只接受已有目录。网页提供 nginx 风格的递归目录浏览、普通文件访问和多文件上传，终端输出同样有二维码、主 IPv4 LAN URL 与 `other:` 网卡 URL，但目录网页不显示二维码。`--token` 与 `--path` 的规则和 `ii send ... --web` 相同，`-p` 不适用于 `ii web`。
 
+`ii webrtc` 开一个局域网浏览器直传房间。终端输出二维码、主 IPv4 LAN URL 与 `other:` 网卡 URL；打开同一 URL 的浏览器会自动显示为临时设备编号，可选择另一个在线设备并发送多个独立文件。文件通过浏览器 WebRTC DataChannel 两端直传，不经过 `ii` 进程，也不会写入启动机器。页面会先实际测试浏览器能否创建 ICE host candidate；浏览器禁用或阻止 WebRTC 时会显示 `WebRTC unavailable`，不会加入房间。它只交换局域网 host candidates，不使用公网 STUN/TURN；网络隔离、防火墙或禁止 P2P 时会连接失败。接收端自动下载，但会先把单个文件聚合在浏览器内存中，因此不适合超出设备可用内存的大文件。可选 `--token <value>` 将页面和信令 URL 固定到路径令牌下。完整说明见 [webrtc.md](webrtc.md)。
+
 局域网优先，不走公网中继：
 
 ```powershell

README.md

@@ -29,6 +29,7 @@ All measurements use `cargo build -p ii --release --locked` followed by UPX
 | Web-share bidirectional file upload | 5,992,960 | 2,166,784 | +5,632 | `cargo test -p ii --locked` (78 tests), `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
 | Web-share path access token | 6,001,664 | 2,169,344 | +2,560 | `cargo test -p ii --locked` (83 tests), `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
 | Web upload path and `ii web` directory service | 6,038,016 | 2,180,608 | +11,264 | `cargo test -p ii --locked` (92 tests), `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
+| Browser WebRTC LAN signalling and direct page | 6,068,736 | 2,189,824 | +9,216 | `cargo test -p ii --locked` (96 tests), `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
 
 Equivalent release rebuilds have varied by up to `1,536` UPX bytes; the latest
 measurement is recorded with the pinned `5.1.0` packer.

SIZE.md

@@ -4,13 +4,14 @@
 
 ## 一句话
 
-`ii send` 发，`ii recv` 收，`ii web` 开局域网目录，`ii relay` 管中继，`ii doctor` 查问题，`ii version` 看版本。
+`ii send` 发，`ii recv` 收，`ii web` 开局域网目录，`ii webrtc` 开浏览器直传，`ii relay` 管中继，`ii doctor` 查问题，`ii version` 看版本。
 
 ## 命令总览
 
 ```text
 ii send [<path>] [--name <name>] [-t] [-c] [-o <path>] [--web [--token <value>] [--path <dir>] | --s3 | --webdav | --ftp | --sftp] [--profile <name>] [-d] [-p] [--local] [--relay <https-url> [-k]] [--no-relay]
 ii web [<目录>] [--token <value>] [--path <目录>]
+ii webrtc [--token <value>]
 ii recv <ticket> [-o <dir>] [--stdout] [--overwrite] [--resume] [--local] [--trace]
 ii relay (--public <https-url> | --tls <domain> --cert <path> --key <path>) [-H <bind-port>]
 ii doctor
@@ -152,6 +153,19 @@ ii web .\shared --token A1b2C3d4E5f6G7h8 --path .\uploads
 
 `--token <value>` 把目录、文件和上传 URL 固定到 `/<value>/` 下；遗漏或写错返回 `404`。令牌必须为 16 到 128 个 ASCII 字母、数字、`-` 或 `_`。`--path <目录>` 指定网页上传文件直接写入的目录；相对路径按启动目录解析，首次上传才创建目录，未指定时写入启动目录下的 `./ii/`。`-p` 不适用于 `ii web`，仍仅用于 WebDAV、FTP、SFTP 的便携 ticket。
 
+## `ii webrtc`
+
+```powershell
+ii webrtc
+ii webrtc --token A1b2C3d4E5f6G7h8
+```
+
+`ii webrtc` 在 `0.0.0.0` 的随机端口提供局域网页面。命令行在主 IPv4 LAN URL 上方打印二维码，并在 `other:` 下打印其他物理和虚拟网卡 URL；按 `Ctrl+C` 关闭服务。打开同一 URL 的浏览器自动成为临时编号设备，可以选择任一在线设备并发送多个独立文件；对方自动接收并下载。
+
+`ii` 只在 HTTP 上转发 WebRTC 信令，不接收文件，不写入本机磁盘；文件通过浏览器的可靠、有序 DataChannel 点对点传输。页面加入房间前会实际测试浏览器能否创建 ICE host candidate；浏览器禁用或阻止 WebRTC 时会显示 `WebRTC unavailable`，不会加入房间。它只使用局域网 host candidates，不使用公网 STUN/TURN，也不支持目录、断点续传或 CLI 与浏览器直接传输。访客网络隔离、防火墙、跨网段限制或禁用 P2P 时会无法连接。接收浏览器会把单个文件聚合到内存后再下载，大文件会占用相近大小的内存。完整说明见 [webrtc.md](webrtc.md)。
+
+不带 `--token` 时使用根路径；`--token <value>` 将页面和信令接口固定到 `/<value>/` 下，遗漏或写错返回 `404`。令牌必须为 16 到 128 个 ASCII 字母、数字、`-` 或 `_`。`ii webrtc` 不接受路径、`--path` 或 `-p`。
+
 ## `ii recv`
 
 ### 用法

ii.md

@@ -11,6 +11,7 @@ pub struct Cli {
 pub enum Command {
     Send(SendArgs),
     Web(WebArgs),
+    Webrtc(WebrtcArgs),
     Recv(RecvArgs),
     Relay(RelayArgs),
     Doctor,
@@ -47,6 +48,11 @@ pub struct WebArgs {
     pub web_upload_dir: Option<PathBuf>,
 }
 
+#[derive(Debug, Clone, Default)]
+pub struct WebrtcArgs {
+    pub web_token: Option<String>,
+}
+
 #[derive(Debug, Clone)]
 pub struct RecvArgs {
     pub ticket: String,
@@ -147,6 +153,7 @@ where
     let command = match command.as_str() {
         "send" => Command::Send(parse_send(rest)?),
         "web" => Command::Web(parse_web(rest)?),
+        "webrtc" => Command::Webrtc(parse_webrtc(rest)?),
         "recv" => Command::Recv(parse_recv(rest)?),
         "relay" => Command::Relay(parse_relay(rest)?),
         "doctor" => reject_extra("doctor", rest).map(|_| Command::Doctor)?,
@@ -246,6 +253,42 @@ fn parse_web(args: Vec<String>) -> Result<WebArgs, ParseAction> {
     Ok(out)
 }
 
+fn parse_webrtc(args: Vec<String>) -> Result<WebrtcArgs, ParseAction> {
+    let mut out = WebrtcArgs::default();
+    let mut iter = ArgsIter::new(args);
+
+    while let Some(arg) = iter.next() {
+        match split_long_value(&arg) {
+            Some(("token", value)) => out.web_token = Some(value.to_string()),
+            Some((flag, _)) => {
+                return Err(ParseAction::error(format!("unknown option `--{flag}`")));
+            }
+            None => match arg.as_str() {
+                "-h" | "--help" => return Err(ParseAction::help(WEBRTC_HELP)),
+                "--token" => out.web_token = Some(iter.value("--token")?),
+                _ if arg.starts_with('-') => {
+                    return Err(ParseAction::error(format!("unknown option `{arg}`")));
+                }
+                _ => {
+                    return Err(ParseAction::error(
+                        "webrtc does not accept positional arguments",
+                    ));
+                }
+            },
+        }
+    }
+
+    if let Some(token) = out.web_token.as_deref()
+        && !is_valid_web_token(token)
+    {
+        return Err(ParseAction::error(
+            "--token must contain 16 to 128 ASCII letters, digits, '-' or '_'",
+        ));
+    }
+
+    Ok(out)
+}
+
 fn parse_recv(args: Vec<String>) -> Result<RecvArgs, ParseAction> {
     let mut ticket = None;
     let mut out_dir = None;
@@ -527,6 +570,7 @@ ii file transfer
 Usage:
   ii send [options] [path]
   ii web [directory] [--token <value>] [--path <dir>]
+  ii webrtc [--token <value>]
   ii recv [options] <ticket>
   ii relay [options]
   ii doctor
@@ -567,6 +611,14 @@ Options:
   --path <dir>
 ";
 
+const WEBRTC_HELP: &str = "\
+Usage:
+  ii webrtc [--token <value>]
+
+Options:
+  --token <value>
+";
+
 const RECV_HELP: &str = "\
 Usage:
   ii recv [options] <ticket>
@@ -814,6 +866,42 @@ mod tests {
         ));
     }
 
+    #[test]
+    fn webrtc_accepts_optional_token() {
+        let token = "A1b2C3d4E5f6G7h8";
+        for args in [
+            vec!["ii", "webrtc"],
+            vec!["ii", "webrtc", "--token", token],
+            vec!["ii", "webrtc", "--token=A1b2C3d4E5f6G7h8"],
+        ] {
+            let cli = Cli::parse_from(args);
+            match cli.command {
+                Command::Webrtc(args) => {
+                    if args.web_token.is_some() {
+                        assert_eq!(args.web_token.as_deref(), Some(token));
+                    }
+                }
+                _ => panic!("expected webrtc command"),
+            }
+        }
+    }
+
+    #[test]
+    fn webrtc_rejects_invalid_or_unrelated_arguments() {
+        for args in [
+            vec!["ii", "webrtc", "shared"],
+            vec!["ii", "webrtc", "-p"],
+            vec!["ii", "webrtc", "--path", "uploads"],
+            vec!["ii", "webrtc", "--token", "too-short"],
+            vec!["ii", "webrtc", "--token"],
+        ] {
+            assert!(matches!(
+                parse_args(args),
+                Err(ParseAction::Print { code: 2, .. })
+            ));
+        }
+    }
+
     #[test]
     fn send_accepts_ftp_and_sftp_storage_options() {
         let ftp = Cli::parse_from(["ii", "send", "--ftp", "-p", "-d", "file.txt"]);

src/cli.rs

@@ -23,6 +23,7 @@ pub async fn run_cli() -> Result<()> {
     match cli.command {
         Command::Send(args) => transfer::send(args).await?,
         Command::Web(args) => transfer::web(args).await?,
+        Command::Webrtc(args) => transfer::webrtc(args).await?,
         Command::Recv(args) => transfer::recv(args).await?,
         Command::Relay(args) => relay::run(args).await?,
         Command::Doctor => doctor::run().await?,