@chenacc/agentbridge 0.2.3 → 0.2.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chenacc/agentbridge",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Control local coding agents from a phone through a secure WeChat QR web console.",
   "license": "MIT",
   "type": "module",
@@ -65,7 +65,7 @@
     "verify:responsive": "node scripts/verify-responsive.mjs",
     "verify:guide": "node scripts/verify-product-guide.mjs",
     "verify:release": "node scripts/verify-plugin-release.mjs",
-    "check": "node --check src/server.js && node --check src/cli.js && node --check src/config.js && node --check src/cc-switch-models.js && node --check src/workspaces/workspace-catalog.js && node --check src/conversations/conversation-catalog.js && node --check src/adapters/capabilities.js && node --check src/adapters/claude.js && node --check src/adapters/codex.js && node --check src/adapters/deepseek-harness.js && node --check src/adapters/dsh-desktop.js && node --check src/dsh-desktop-channels.js && node --check src/event-store.js && node --check src/notifier.js && node --check src/attachments.js && node --check src/session-manager.js && node --check integrations/dsh-phone/lib/index.js && node --check src/tunnel.js && node --check src/remote.js && node --check src/adapters/zcode-native.js && node --check public/adapter-capabilities.js && node --check public/workspace-navigation.js && node --check public/markdown.js && node --check public/highlight.js && node --check public/transcript.js && node --check public/app.js && node --check scripts/verify-workspace-ui.mjs && node --check scripts/verify-message-blocks.mjs && node --check scripts/verify-background-scrim.mjs && node --check scripts/verify-model-control.mjs && node --check scripts/verify-notifications.mjs && node --check scripts/verify-attachments.mjs && node --check scripts/verify-features.mjs && node --check scripts/verify-quick-nav.mjs && node --check scripts/verify-questions.mjs && node --check scripts/verify-responsive.mjs && node --check scripts/verify-product-guide.mjs && node --check scripts/verify-plugin-release.mjs && node --check scripts/capture-screenshots.mjs",
+    "check": "node --check src/server.js && node --check src/cli.js && node --check src/config.js && node --check src/cc-switch-models.js && node --check src/workspaces/workspace-catalog.js && node --check src/conversations/conversation-catalog.js && node --check src/adapters/capabilities.js && node --check src/adapters/claude.js && node --check src/adapters/codex.js && node --check src/adapters/deepseek-harness.js && node --check src/adapters/dsh-desktop.js && node --check src/dsh-desktop-channels.js && node --check src/event-store.js && node --check src/notifier.js && node --check src/attachments.js && node --check src/session-manager.js && node --check integrations/dsh-phone/lib/index.js && node --check src/tunnel.js && node --check src/remote.js && node --check src/origin-announcer.js && node --check src/adapters/zcode-native.js && node --check public/adapter-capabilities.js && node --check public/workspace-navigation.js && node --check public/markdown.js && node --check public/highlight.js && node --check public/transcript.js && node --check public/app.js && node --check scripts/verify-workspace-ui.mjs && node --check scripts/verify-message-blocks.mjs && node --check scripts/verify-background-scrim.mjs && node --check scripts/verify-model-control.mjs && node --check scripts/verify-notifications.mjs && node --check scripts/verify-attachments.mjs && node --check scripts/verify-features.mjs && node --check scripts/verify-quick-nav.mjs && node --check scripts/verify-questions.mjs && node --check scripts/verify-responsive.mjs && node --check scripts/verify-product-guide.mjs && node --check scripts/verify-plugin-release.mjs && node --check scripts/capture-screenshots.mjs",
     "verify:remote": "node scripts/verify-remote-tunnel.mjs",
     "capture:shots": "node scripts/capture-screenshots.mjs"
   },

package/public/app.js

@@ -310,22 +310,84 @@ async function resolveRequest(requestId, body) {
 }
 
 async function api(path, options = {}) {
-  const response = await fetch(path, {
-    credentials: "same-origin",
-    ...options,
-    headers: options.body ? { "content-type": "application/json", ...(options.headers ?? {}) } : options.headers,
-  });
+  let response;
+  try {
+    response = await fetch(path, {
+      credentials: "same-origin",
+      ...options,
+      headers: options.body ? { "content-type": "application/json", ...(options.headers ?? {}) } : options.headers,
+    });
+  } catch (error) {
+    // No HTTP status at all: the origin itself is unreachable — almost always
+    // because the tunnel hostname changed and this page is still on the old one.
+    noteConnectionFailure("offline");
+    throw error;
+  }
   const body = response.headers.get("content-type")?.includes("application/json") ? await response.json() : null;
   if (!response.ok) {
+    if (response.status === 401) noteConnectionFailure("unauthorized");
     const error = new Error(body?.error ?? `请求失败 (${response.status})`);
     error.status = response.status;
     error.code = body?.code;
     error.diagnostics = body?.diagnostics;
     throw error;
   }
+  noteConnectionSuccess();
   return body;
 }
 
+/**
+ * A page that cannot reach its bridge must say so.
+ *
+ * After a tunnel rebuild the phone keeps rendering the last transcript and the
+ * connection chip just says 正在重连 — which reads as "still working" while every
+ * request is already failing. Two failures in a row is enough evidence to show a
+ * banner that explains what to do, because there is nothing else the page can do:
+ * the address it was loaded from no longer exists.
+ */
+const connectionWatch = { failures: 0, banner: null };
+
+function noteConnectionFailure(kind) {
+  connectionWatch.failures += 1;
+  if (connectionWatch.failures < 2) return;
+  showStaleBanner(kind);
+}
+
+function noteConnectionSuccess() {
+  connectionWatch.failures = 0;
+  if (connectionWatch.banner) {
+    connectionWatch.banner.remove();
+    connectionWatch.banner = null;
+  }
+}
+
+function showStaleBanner(kind) {
+  if (connectionWatch.banner) return;
+  const banner = document.createElement("div");
+  banner.id = "stale-banner";
+  banner.setAttribute("role", "alert");
+  banner.style.cssText = [
+    "position:fixed", "inset:0 0 auto 0", "z-index:9999",
+    "padding:12px 16px", "font:14px/1.5 system-ui,-apple-system,sans-serif",
+    "background:#b3261e", "color:#fff", "box-shadow:0 2px 8px rgba(0,0,0,.4)",
+  ].join(";");
+  banner.textContent = kind === "unauthorized"
+    ? "登录状态已失效：这台手机的配对属于旧地址。请在电脑上重新执行 /phone，扫描新的二维码。"
+    : "连不上电脑：二维码地址可能已经更换（隧道重建会换域名）。请在电脑上重新执行 /phone 并扫描新二维码。";
+  const dismiss = document.createElement("button");
+  dismiss.textContent = "知道了";
+  dismiss.style.cssText = "margin-left:12px;padding:4px 10px;border:0;border-radius:6px;background:rgba(255,255,255,.2);color:#fff;font:inherit";
+  dismiss.addEventListener("click", () => {
+    banner.remove();
+    connectionWatch.banner = null;
+    // Keep counting: a still-broken page will show it again on the next failure.
+    connectionWatch.failures = 0;
+  });
+  banner.appendChild(dismiss);
+  document.body.appendChild(banner);
+  connectionWatch.banner = banner;
+}
+
 function toast(message) {
   const element = $("#toast");
   element.textContent = message;

package/public/styles.css

@@ -412,6 +412,28 @@ select { appearance: none; background-image: linear-gradient(45deg, transparent
 .event-entry.tool .event-body { color: var(--ink-2); font-size: 13px; }  /* 底板是浅色玻璃，次级文字不能再用 45% 黑 */
 .event-entry.error .event-body { color: var(--err); }
 
+/* 中间过程只占一行：说清在用什么工具做什么，细节折进去。手机上一屏能看更多对话。 */
+.tool-line { margin: 0; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.event-entry.tool-compact .event-body,
+.event-entry.step .event-body { padding-top: 1px; }
+.step-detail, .tool-output { margin-top: 4px; }
+.step-detail > summary,
+.tool-output > summary {
+  cursor: pointer;
+  font-size: 12px;
+  color: var(--ink-3, var(--ink-2));
+  opacity: .82;
+  list-style: none;
+}
+.step-detail > summary::-webkit-details-marker,
+.tool-output > summary::-webkit-details-marker { display: none; }
+.step-detail > summary::before,
+.tool-output > summary::before { content: "▸ "; }
+.step-detail[open] > summary::before,
+.tool-output[open] > summary::before { content: "▾ "; }
+.step-detail .message-markdown,
+.tool-output pre { margin-top: 6px; opacity: .9; font-size: 12px; }
+
 /* ---------- 无底板可读性：给字形描边，而不是给文字垫一层遮罩 ---------- */
 /* 文字层底板保持透明（用户要求），可读性全部来自整页遮罩的地板——**不再给字形描边**：
    之前那圈 1px + 2px 的白色 text-shadow 会把每个字的边缘糊掉，这正是"文字很模糊"的来源。

package/public/transcript.js

@@ -221,26 +221,43 @@ function entryFor(event, label, text, className, supportsMarkdown, { formatMessa
 }
 
 /**
- * Tool calls get the two affordances a person actually needs: the command is
- * copyable, and a long output collapses instead of pushing the conversation off the
- * screen. Both work without JavaScript state — `<details>` is the disclosure.
+ * Tool calls get one line that says what is being done, and the raw material
+ * behind a disclosure.
+ *
+ * The phone is read at a glance, on a narrow screen, often while walking: the
+ * command and its output are the least useful thing on it. So the row is
+ * "调用 Bash · 检查端口占用" and everything else waits behind 详情 — still one tap
+ * away for the moment it matters, never in the way.
  */
+function toolSummary(event) {
+  const payload = event.payload ?? {};
+  const name = String(payload.type ?? payload.toolName ?? payload.name ?? "工具");
+  // "What is it doing" is the title when the Agent gave us one. A raw command is not a
+  // summary — the whole point of this row is to keep it out of the reader's way — so the
+  // command contributes at most its program name.
+  const stated = String(payload.title ?? payload.description ?? "").trim();
+  const command = String(payload.command ?? "").trim();
+  const program = command ? command.split(/\s+/)[0] : "";
+  const purpose = stated
+    ? (stated.length > 60 ? `${stated.slice(0, 60)}…` : stated)
+    : (program ? `${program} …` : "");
+  const suffix = payload.status ? ` · ${payload.status}` : "";
+  return { name, purpose, suffix };
+}
+
 function toolEntry(event, label, text, options) {
   const cached = cachedEntry(options.cache, event);
   if (cached) return cached;
-  const body = String(text ?? "");
-  const long = body.length > 240;
-  const command = typeof event.payload?.command === "string" ? event.payload.command : "";
-  const copy = command
-    ? `<button class="tool-copy" type="button" data-copy-tool="${escapeHtml(body)}">复制命令</button>`
+  const body = String(text ?? "").trim();
+  const { name, purpose, suffix } = toolSummary(event);
+  const headline = purpose ? `调用 ${name} · ${purpose}${suffix}` : `调用 ${name}${suffix}`;
+  const details = body
+    ? `<details class="tool-output"><summary>详情</summary><pre>${escapeHtml(body)}</pre></details>`
     : "";
-  const shown = long
-    ? `<details class="tool-output"><summary>展开完整输出（${body.length} 字符）</summary><pre>${escapeHtml(body)}</pre></details>`
-    : `<div class="message-markdown"><p>${escapeHtml(body)}</p></div>`;
   const entry = {
     key: entryKey(event),
-    className: "tool",
-    html: `<time class="event-time">${formatTime(event.time, options.formatMessageTime)}</time><div class="event-body"><strong>${escapeHtml(label)}</strong>${copy}${shown}</div>`,
+    className: "tool tool-compact",
+    html: `<time class="event-time">${formatTime(event.time, options.formatMessageTime)}</time><div class="event-body"><strong>${escapeHtml(label)}</strong><p class="tool-line">${escapeHtml(headline)}</p>${details}</div>`,
   };
   return rememberEntry(options.cache, event, entry);
 }
@@ -307,6 +324,25 @@ function inputEntry(event, options, settledOutcome) {
   return rememberEntry(options.cache, event, entry, cacheKey);
 }
 
+/**
+ * A row that stays out of the way until asked: the summary line is what the
+ * reader needs, the text is one tap down.
+ *
+ * Intermediate assistant messages are progress, not answers. Rendering them in
+ * full turned one request into a wall of overlapping drafts on a phone screen.
+ */
+function collapsedEntry(event, label, summary, text, className, options) {
+  const cached = cachedEntry(options.cache, event);
+  if (cached) return cached;
+  const content = renderMessageMarkdown(String(text ?? ""), options.math ? { math: options.math } : undefined);
+  const entry = {
+    key: entryKey(event),
+    className,
+    html: `<time class="event-time">${formatTime(event.time, options.formatMessageTime)}</time><div class="event-body"><strong>${escapeHtml(label)}</strong><details class="step-detail"><summary>${escapeHtml(summary)}</summary><div class="message-markdown">${content}</div></details></div>`,
+  };
+  return rememberEntry(options.cache, event, entry);
+}
+
 /** Turn a session's events into the list of transcript entries to display. */
 export function buildEntries(relevant, options = {}) {
   const statusLabel = options.statusLabel ?? ((kind) => DEFAULT_STATUS_LABELS[kind] ?? kind);
@@ -321,6 +357,14 @@ export function buildEntries(relevant, options = {}) {
       settledInputs.set(event.payload.requestId, event.payload.outcome ?? "answered");
     }
   }
+  // Only the last assistant message of a turn is the answer; everything before it is
+  // the work that produced it.
+  const finalAssistantOfTurn = new Map();
+  for (const event of relevant) {
+    if (event.kind === "message.completed" && event.payload?.role === "assistant") {
+      finalAssistantOfTurn.set(event.turnId, event.eventId ?? entryKey(event));
+    }
+  }
 
   const renderedDeltas = new Set();
   const entries = [];
@@ -328,7 +372,15 @@ export function buildEntries(relevant, options = {}) {
     if (event.kind === "message.delta") {
       if (completedTurns.has(event.turnId) || renderedDeltas.has(event.turnId)) continue;
       renderedDeltas.add(event.turnId);
-      entries.push(entryFor(event, "Agent 正在回复", textByTurn.get(event.turnId) ?? "", "assistant", true, settings));
+      // Live text is progress, so it stays collapsed until the answer itself lands.
+      entries.push(collapsedEntry(
+        event,
+        "Agent 正在回复",
+        "正在生成回答…（点开可看实时输出）",
+        textByTurn.get(event.turnId) ?? "",
+        "assistant streaming",
+        settings,
+      ));
     } else if (event.kind === "message.completed") {
       // An assistant message that carried only tool calls has no text. Rendering it makes
       // an empty "Agent" bubble between the tool rows is pure noise, so skip it — unless it
@@ -336,7 +388,20 @@ export function buildEntries(relevant, options = {}) {
       const messageText = String(event.payload.text ?? "");
       const messageAttachments = Array.isArray(event.payload.attachments) ? event.payload.attachments : [];
       if (!messageText.trim() && messageAttachments.length === 0) continue;
-      entries.push(entryFor(event, event.payload.role === "user" ? "你" : "Agent", messageText, event.payload.role, true, settings));
+      if (event.payload.role === "user") {
+        entries.push(entryFor(event, "你", messageText, "user", true, settings));
+        continue;
+      }
+      const isFinal = finalAssistantOfTurn.get(event.turnId) === (event.eventId ?? entryKey(event));
+      if (isFinal || messageAttachments.length > 0) {
+        // The answer, and anything carrying an attachment: both are content the reader
+        // came for, so they render in full.
+        entries.push(entryFor(event, "Agent", messageText, "assistant", true, settings));
+      } else {
+        const lead = messageText.trim().split(/\r?\n/).find((line) => line.trim()) ?? "";
+        const summary = lead.length > 48 ? `中间过程 · ${lead.slice(0, 48)}…` : `中间过程 · ${lead || "已处理"}`;
+        entries.push(collapsedEntry(event, "Agent", summary, messageText, "assistant step", settings));
+      }
     } else if (event.kind === "tool.started" || event.kind === "tool.completed") {
       const label = event.kind.endsWith("started") ? "工具开始" : "工具完成";
       const detail = event.payload.command ? String(event.payload.command) : `${event.payload.type ?? "tool"}${event.payload.status ? ` · ${event.payload.status}` : ""}`;

package/src/notifier.js

@@ -63,6 +63,19 @@ export function describeNotification(kind, payload = {}, context = {}) {
     case "notify.test": {
       return { title: "🔔 AgentBridge 通知测试", text: [`${where}`, "如果你看到这条消息，通知链路是通的。"].filter(Boolean).join("\n") };
     }
+    case "bridge.moved": {
+      // The one message a phone cannot get any other way: it is still sitting on
+      // the old address, so its own page can no longer be told anything.
+      return {
+        title: "🔄 AgentBridge 地址已更换",
+        text: [
+          `${where}`,
+          "隧道重建后二维码地址变了，手机上的旧链接已经打不开。",
+          `新地址：${clip(payload.origin ?? "", 200)}`,
+          "在电脑上重新执行 /phone 并扫描新二维码，或直接打开上面的新地址。",
+        ].filter(Boolean).join("\n"),
+      };
+    }
     default:
       return { title: DEFAULT_TITLES[kind] ?? "AgentBridge", text: where };
   }

package/src/origin-announcer.js

@@ -0,0 +1,92 @@
+/**
+ * Tell an already-paired phone that the bridge moved.
+ *
+ * A Cloudflare quick tunnel hands out a new hostname every time the tunnel is
+ * rebuilt, and the bridge is rebuilt often (desktop restart, tunnel restart). The
+ * phone is sitting on the old origin: its page still renders, every request from
+ * it fails, and nothing on the desktop says so. The QR code is not much help
+ * either — the person is not looking at the desktop any more.
+ *
+ * So the address change is announced over the channel that still works when the
+ * web page cannot: the push notification the user configured. One message per
+ * change, only when a device actually exists to tell, and never on the first run
+ * (nothing has "moved" yet).
+ *
+ * Everything that touches the machine is injectable because this decides whether a
+ * third party gets a message, which is worth testing without a network.
+ */
+import { readFileSync, renameSync, writeFileSync } from "node:fs";
+import path from "node:path";
+
+export function announcedOriginPath(dataDir) {
+  return path.join(dataDir, "advertised-origin.json");
+}
+
+export function readAnnouncedOrigin(dataDir, { readFile = readFileSync } = {}) {
+  try {
+    const parsed = JSON.parse(String(readFile(announcedOriginPath(dataDir), "utf8")));
+    return typeof parsed?.origin === "string" ? parsed.origin : null;
+  } catch {
+    return null;
+  }
+}
+
+export function writeAnnouncedOrigin(dataDir, origin, { writeFile = writeFileSync, rename = renameSync, now = () => new Date().toISOString() } = {}) {
+  const target = announcedOriginPath(dataDir);
+  const temporary = `${target}.tmp`;
+  writeFile(temporary, JSON.stringify({ origin, recordedAt: now() }, null, 2), "utf8");
+  rename(temporary, target);
+  return origin;
+}
+
+/** Whether this machine has ever recorded an address (i.e. it is not the first run). */
+export function hasAnnouncedBefore(dataDir, options = {}) {
+  return readAnnouncedOrigin(dataDir, options) !== null;
+}
+
+/**
+ * Compare the address with the last one this bridge announced.
+ *
+ * Returns `{ announced, reason }`. A failure to notify is not thrown: the bridge is
+ * already serving, and a dead webhook must not be able to stop that.
+ */
+export async function announceOriginChange({
+  dataDir,
+  origin,
+  notifier = null,
+  deviceCount = 0,
+  machineName = "",
+  log = () => {},
+  read = readAnnouncedOrigin,
+  write = writeAnnouncedOrigin,
+} = {}) {
+  if (!dataDir || !origin) return { announced: false, reason: "missing-argument" };
+
+  const previous = read(dataDir);
+  if (previous === origin) return { announced: false, reason: "unchanged" };
+
+  // Record first: a crash mid-announcement must not turn one tunnel restart into a
+  // notification loop on every subsequent launch.
+  write(dataDir, origin);
+
+  if (!previous) {
+    log(`Recorded the first advertised address: ${origin}`);
+    return { announced: false, reason: "first-run" };
+  }
+  if (deviceCount <= 0) return { announced: false, reason: "no-devices" };
+  if (!notifier?.enabled) return { announced: false, reason: "notifications-disabled" };
+
+  try {
+    const result = await notifier.send(
+      "bridge.moved",
+      { previous, origin },
+      { sessionTitle: machineName || "AgentBridge", adapterId: "agentbridge" },
+    );
+    if (result?.sent) log(`Announced the new address to ${deviceCount} paired device(s): ${origin}`);
+    else log(`Address change not announced: ${result?.reason ?? "unknown"}`);
+    return { announced: result?.sent === true, reason: result?.reason ?? null, previous };
+  } catch (error) {
+    log(`Address change announcement failed: ${error instanceof Error ? error.message : String(error)}`);
+    return { announced: false, reason: "send-failed", previous };
+  }
+}

package/src/server.js

@@ -5,6 +5,7 @@ import { readFile, stat } from "node:fs/promises";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import QRCode from "qrcode";
 import { loadConfig, isLoopback } from "./config.js";
+import { announceOriginChange } from "./origin-announcer.js";
 import { EventStore } from "./event-store.js";
 import { PairingManager } from "./pairing.js";
 import { AdapterRegistry } from "./adapter-registry.js";
@@ -33,6 +34,9 @@ function json(res, statusCode, value, headers = {}) {
   res.writeHead(statusCode, {
     "content-type": "application/json; charset=utf-8",
     "cache-control": "no-store",
+    // A renewal cookie rides every authenticated JSON response when the session
+    // was just extended; explicit per-handler cookies (logout, revoke) still win.
+    ...(res.renewCookie ? { "set-cookie": res.renewCookie } : {}),
     ...headers,
   });
   res.end(JSON.stringify(value));
@@ -601,6 +605,16 @@ export async function createBridge(options = {}) {
         // must not consume a pairing code, mint a device, or take the lease away
         // from the phone that is already driving this conversation.
         const reconnecting = body.reconnect === true;
+        // An automatic restore (the desktop app just restarted and is opening a
+        // conversation the phone already owns) passes `existingOnly`: it must bind
+        // the bridge session that already exists and never create a new one, or
+        // simply opening a never-paired conversation would fill the phone's
+        // workspace drawer with sessions nobody asked for.
+        if (reconnecting && body.existingOnly === true
+          && !sessions.findByProvider("deepseek-harness-desktop", providerSessionId)) {
+          dshDesktopChannels.revoke(registration.id);
+          throw Object.assign(new Error("No AgentBridge session is bound to this conversation"), { statusCode: 404 });
+        }
         const device = reconnecting ? null : pairing.createSession("DSH Desktop /phone");
         let session;
         try {
@@ -638,6 +652,27 @@ export async function createBridge(options = {}) {
         });
       }
 
+      // Which conversations should a freshly started desktop companion re-attach?
+      //
+      // After DSH Desktop updates or restarts, the bridge still has the sessions
+      // and history the phone was using, but the desktop-side channel is gone and
+      // nothing re-registers it: the phone reads "桌面端未连接" until someone runs
+      // /phone again. The companion asks this endpoint on startup and whenever a
+      // conversation is opened, and re-registers only these — a never-paired
+      // conversation stays silent instead of appearing as a new session.
+      if (req.method === "GET" && url.pathname === "/api/local/dsh-desktop/expected") {
+        if (!isLoopback(req.socket.remoteAddress)) throw Object.assign(new Error("Local access only"), { statusCode: 403 });
+        const providerSessionIds = [];
+        for (const session of sessions.list()) {
+          if (session.adapterId !== "deepseek-harness-desktop") continue;
+          const providerSessionId = session.providerSessionId;
+          if (!providerSessionId) continue;
+          if (dshDesktopChannels.isOnline(providerSessionId)) continue;
+          providerSessionIds.push(providerSessionId);
+        }
+        return json(res, 200, { providerSessionIds: [...new Set(providerSessionIds)] });
+      }
+
       if (req.method === "POST" && url.pathname === "/api/pairings/exchange") {
         requireAccessKey(req, url, config);
         requireSameOrigin(req);
@@ -703,6 +738,19 @@ export async function createBridge(options = {}) {
       const device = pairing.authenticate(requestToken(req));
       if (!device) throw Object.assign(new Error("Authentication required"), { statusCode: 401 });
 
+      // Sliding renewal: a phone that keeps using the console is never asked to
+      // scan a QR again merely because its original window ran out. The refreshed
+      // cookie rides whichever response this request produces (JSON or SSE), so
+      // opening the app once is enough for the device to stay paired. Idle
+      // sessions still expire on the normal TTL.
+      if (pairing.renewIfNeeded(device.id)) {
+        res.renewCookie = sessionCookie(
+          requestToken(req),
+          config.secureCookies && !isLoopback(req.socket.remoteAddress),
+          config.sessionTtlMs,
+        );
+      }
+
       if (req.method === "GET" && url.pathname === "/api/devices") {
         return json(res, 200, { devices: pairing.listDevices(), currentDeviceId: device.id });
       }
@@ -820,6 +868,7 @@ export async function createBridge(options = {}) {
           "cache-control": "no-cache, no-transform",
           connection: "keep-alive",
           "x-accel-buffering": "no",
+          ...(res.renewCookie ? { "set-cookie": res.renewCookie } : {}),
         });
         res.write(": connected\n\n");
         const writeEvent = (event) => {
@@ -1005,6 +1054,17 @@ export async function startBridge() {
       + "(set it in the desktop console, or point AGENTBRIDGE_NOTIFY_IMPORT at an older .agentbridge folder)",
     );
   }
+  // A quick tunnel gets a new hostname every time it is rebuilt, and the phone that
+  // is already paired is sitting on the old one: its own page can no longer be told
+  // anything, so the change goes out over the push channel instead.
+  void announceOriginChange({
+    dataDir: bridge.config.dataDir,
+    origin: bridge.config.advertisedOrigin,
+    notifier: bridge.notifier,
+    deviceCount: bridge.pairing.listDevices().length,
+    machineName: bridge.config.machineName,
+    log: (message) => console.log(message),
+  }).catch((error) => console.warn(`Address announcement skipped: ${error.message}`));
   // Silence here used to mean a QR encoding an address the phone could never reach.
   if (new URL(bridge.config.advertisedOrigin).hostname === "127.0.0.1") {
     console.warn(