@linxin666/dsh-remote-web-ui 0.3.2 → 0.3.4

package/src/client/locales.ts

@@ -114,21 +114,27 @@ export const zh = {
   'update.doneDetail': '所有组件已更新到最新版本。',
   'update.restartHint': '请重启 dsh web 使新版本生效：在终端按 Ctrl+C 停止后重新运行 dsh web。',
   'update.linkMode': '当前为本地开发模式',
-  'update.linkModeDetail': 'dsh-web-ui 或其组件通过本地链接安装（开发模式），无法自动更新。npm 上最新版本：{version}。请同步本地仓库，或移除与全家桶重复的独立链接。',
-  'update.missing': '未找到 dsh-web-ui 安装',
-  'update.missingDetail': '无法定位已安装的 dsh-web-ui 聚合包。请先运行 dsh plugin --profile <profile> add @linxin666/dsh-web-ui-all。',
+  'update.linkModeDetail': 'dsh-web 或其组件通过本地链接安装（开发模式），无法自动更新。npm 上最新版本：{version}。请同步本地仓库，或移除与全家桶重复的独立链接。',
+  'update.missing': '未找到 dsh-web 安装',
+  'update.missingDetail': '无法定位已安装的 dsh-web 聚合包。请先运行 dsh plugin --profile <profile> add @linxin666/dsh-web-all。',
   'update.offline': '无法连接更新源',
   'update.offlineDetail': '网络不可用或更新服务异常，请稍后重试。',
   'update.unmounted': '更新服务未加载',
   'update.unmountedDetail': '当前 dsh web 进程运行的插件版本不含更新服务，请重启 dsh web（Ctrl+C 后重新运行）后再试。',
   'update.error': '更新失败',
   'update.packages': '组件版本',
+  'update.releaseNotes': 'v{version} 更新说明',
+  'update.releaseFeatures': '新增功能',
+  'update.releaseFixes': '修复',
+  'update.releaseOther': '其他变动',
+  'update.releaseUnavailable': '本次发布说明暂不可用，可前往 GitHub Release 查看。',
+  'update.componentVersions': '查看组件版本',
   'update.retry': '重新检查',
   'update.close': '关闭更新面板',
   'update.error.pnpmMissing': '未找到 pnpm，已尝试 pnpm / corepack / npx 仍不可用。请安装 pnpm 后重启应用（Windows: npm install -g pnpm 或 corepack enable；macOS: brew install pnpm 或 corepack enable）。',
   'update.error.timeout': '更新超时，已终止安装进程，请重试。',
-  'update.error.notFound': '未找到 dsh-web-ui 聚合包安装，无法更新。',
-  'update.error.link': 'dsh-web-ui 或其组件使用本地链接，无法自动更新；请同步本地仓库，或移除与全家桶重复的独立链接。',
+  'update.error.notFound': '未找到 dsh-web 聚合包安装，无法更新。',
+  'update.error.link': 'dsh-web 或其组件使用本地链接，无法自动更新；请同步本地仓库，或移除与全家桶重复的独立链接。',
   'update.error.pnpmFailed': '更新执行失败（pnpm 退出码 {code}），详见下方输出。',
   'update.error.stale': '更新命令已执行，但安装版本未变化。常见原因：pnpm 11 的 minimumReleaseAge 门禁会静默跳过发布不足 24 小时的新版本。请在 profile 目录（~/.dsh/profiles/<profile>）的 pnpm-workspace.yaml 中配置 minimumReleaseAgeExclude（例如 "@linxin666/*"）或 minimumReleaseAge: 0 后重新点击更新。',
   'update.error.verifyFailed': '更新命令已执行，但无法核对安装后的版本（可能是 registry 探测失败或安装路径变化）。请查看下方输出，或稍后重试。',
@@ -255,21 +261,27 @@ export const en = {
   'update.doneDetail': 'All components are up to date.',
   'update.restartHint': 'Restart dsh web for the new version to take effect: stop it with Ctrl+C in the terminal, then run dsh web again.',
   'update.linkMode': 'Local development mode',
-  'update.linkModeDetail': 'dsh-web-ui or one of its components is installed via a local link and cannot be updated remotely. Latest npm release: {version}. Sync the local checkout, or remove a standalone link duplicated by the aggregate.',
-  'update.missing': 'dsh-web-ui not found',
-  'update.missingDetail': 'Could not locate the installed dsh-web-ui aggregate package. Install it with: dsh plugin --profile <profile> add @linxin666/dsh-web-ui-all',
+  'update.linkModeDetail': 'dsh-web or one of its components is installed via a local link and cannot be updated remotely. Latest npm release: {version}. Sync the local checkout, or remove a standalone link duplicated by the aggregate.',
+  'update.missing': 'dsh-web not found',
+  'update.missingDetail': 'Could not locate the installed dsh-web aggregate package. Install it with: dsh plugin --profile <profile> add @linxin666/dsh-web-all',
   'update.offline': 'Cannot reach the update source',
   'update.offlineDetail': 'The network is unavailable or the update service is failing; try again later.',
   'update.unmounted': 'The update service is not loaded',
   'update.unmountedDetail': 'The running dsh web process loads a plugin build without the update service; restart dsh web (Ctrl+C, then run dsh web again) and retry.',
   'update.error': 'Update failed',
   'update.packages': 'Component versions',
+  'update.releaseNotes': 'v{version} release notes',
+  'update.releaseFeatures': 'New Features',
+  'update.releaseFixes': 'Bug Fixes',
+  'update.releaseOther': 'Other Changes',
+  'update.releaseUnavailable': 'Release notes are unavailable for this version; see the GitHub release instead.',
+  'update.componentVersions': 'View component versions',
   'update.retry': 'Check again',
   'update.close': 'Close update panel',
   'update.error.pnpmMissing': 'pnpm was not found (tried pnpm / corepack / npx). Install pnpm and restart the app (Windows: npm install -g pnpm or corepack enable; macOS: brew install pnpm or corepack enable).',
   'update.error.timeout': 'The update timed out and the install process was killed; try again.',
-  'update.error.notFound': 'The dsh-web-ui aggregate package is not installed; nothing to update.',
-  'update.error.link': 'dsh-web-ui or one of its components uses a local link. Sync the checkout, or remove a standalone link duplicated by the aggregate.',
+  'update.error.notFound': 'The dsh-web aggregate package is not installed; nothing to update.',
+  'update.error.link': 'dsh-web or one of its components uses a local link. Sync the checkout, or remove a standalone link duplicated by the aggregate.',
   'update.error.pnpmFailed': 'The update failed (pnpm exited with code {code}); see the output below.',
   'update.error.stale': 'The update command ran but the installed versions did not change. Likely cause: the pnpm 11 minimumReleaseAge gate silently skips releases published less than 24 hours ago. Add minimumReleaseAgeExclude (e.g. "@linxin666/*") or set minimumReleaseAge: 0 in pnpm-workspace.yaml under the profile directory (~/.dsh/profiles/<profile>), then run the update again.',
   'update.error.verifyFailed': 'The update command ran but the installed versions could not be verified afterwards (registry probe failed or the install path changed). Inspect the output below, or retry later.',

package/src/client/remote.module.css

@@ -18,8 +18,10 @@
   backdrop-filter: var(--dsw-mask-blur);
 }
 
-/* Trigger: settings row height beside the trigger row (wide), or the 36px
-   rail circle; the seat's owner (ui-sidebar) lays out the geometry. */
+/* Trigger: the 36px rail circle, or a fully rounded (pill) full-row button
+   in wide mode — both maximally rounded so the footer action pair shares one
+   shape family (#1035); the seat's owner (ui-sidebar) lays out the
+   geometry. */
 .trigger {
   position: relative;
   flex: none;
@@ -57,7 +59,9 @@
   justify-content: flex-start;
   width: auto;
   min-width: 0;
-  border-radius: 8px;
+  /* Pill: maximal rounding, same shape family as the 36px rail circle next
+     to it (the update trigger) — one consistent footer-action look (#1035). */
+  border-radius: 999px;
   gap: 8px;
   padding: 0 10px;
 }
@@ -750,6 +754,55 @@
   font-variant-numeric: tabular-nums;
 }
 
+.updateNotes {
+  margin-top: 14px;
+}
+
+.updateNotesTitle {
+  margin: 0 0 8px;
+  font-size: 14px;
+  font-weight: 600;
+}
+
+.updateNoteSection {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  margin-top: 10px;
+}
+
+.updateNoteHeading {
+  margin: 0;
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--dsw-alias-label-secondary);
+}
+
+.updateNoteList {
+  margin: 0;
+  padding-left: 18px;
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  font-size: 13px;
+}
+
+.updateNoteItem {
+  color: var(--dsw-alias-label-primary);
+  overflow-wrap: anywhere;
+}
+
+.updateVersions {
+  margin-top: 12px;
+}
+
+.updateVersionsSummary {
+  cursor: pointer;
+  color: var(--dsw-alias-label-secondary);
+  font-size: 12px;
+  user-select: none;
+}
+
 .updateActions {
   display: flex;
   justify-content: flex-end;

package/src/client/settings-card.module.css

@@ -24,6 +24,10 @@
 .header {
   appearance: none;
   width: 100%;
+  /* The suite does not force a global border-box, so width:100% + padding
+     would stretch the row 32px past the card and push the trailing pending
+     badge (last flex item) outside the card border. */
+  box-sizing: border-box;
   font: inherit;
   color: inherit;
   text-align: left;
@@ -44,6 +48,7 @@
 
 .headerStatic {
   width: 100%;
+  box-sizing: border-box;
   border-radius: 12px;
   align-items: center;
   gap: 12px;

package/src/client/settings-form.ts

@@ -320,7 +320,7 @@ export class CardForm<T> {
   /**
    * Write every staged edit, then re-seed from what the Host accepted.
    *
-   * When the scope carries the optional batch surface (the dsh-web-ui
+   * When the scope carries the optional batch surface (the dsh-web
    * bridge scope), every planned write rides one mutation so cross-field
    * validate hooks (baseURL+model) judge the batch as a unit instead of
    * deadlocking on per-field writes. Otherwise the per-field loop runs.

package/src/client/telemetry.ts

@@ -0,0 +1,105 @@
+// Generated by scripts/sync-shared.mjs from shared/client/telemetry.ts. Do not edit this copy; edit the shared source and run "node scripts/sync-shared.mjs".
+/**
+ * Anonymous install telemetry shared by the DSH Web UI family plugins.
+ *
+ * Once per UTC day per browser, each wired plugin sends one heartbeat to
+ * the dsh-market edge API listing its package name (and version when known).
+ * The payload carries no conversation data and no identifiers beyond a random
+ * UUID generated in localStorage; the server hashes it with a deployment salt
+ * before storage and never persists IP addresses. Sends are fire-and-forget:
+ * failures stay silent and simply retry on a later mount or day. The system
+ * is documented in docs/telemetry.md.
+ */
+
+export type TelemetryChannel = 'market' | 'npm' | 'unknown'
+
+export interface TelemetryItem {
+  /** npm package name or asset id, e.g. "@linxin666/dsh-pet" or "skin:harbor". */
+  name: string
+  /** Installed version when known; omitted otherwise. */
+  version?: string
+  /** Install channel when determinable (market = Workshop install). */
+  channel?: TelemetryChannel
+}
+
+const VISITOR_KEY = 'dsh-web-ui-telemetry-visitor'
+const DAY_KEY_PREFIX = 'dsh-web-ui-telemetry-day:'
+const ENDPOINT = 'https://dsh-market.com/api/telemetry/event'
+
+// Baked into each client bundle by shared/tsdown.client.ts (the package's own
+// package.json version at build time). Undefined in dev/test builds.
+declare const __DSH_PKG_VERSION__: string | undefined
+
+/** The building package's version, when the bundle carries it. */
+function bakedVersion(): string | undefined {
+  try {
+    return typeof __DSH_PKG_VERSION__ === 'string' && __DSH_PKG_VERSION__ !== ''
+      ? __DSH_PKG_VERSION__
+      : undefined
+  } catch {
+    return undefined
+  }
+}
+
+/** Read or lazily create the anonymous visitor id; null when storage is unavailable. */
+function visitorId(): string | null {
+  try {
+    const existing = localStorage.getItem(VISITOR_KEY)
+    if (existing && /^[A-Za-z0-9_-]{16,64}$/.test(existing)) return existing
+    const fresh = crypto.randomUUID().replaceAll('-', '')
+    localStorage.setItem(VISITOR_KEY, fresh)
+    return fresh
+  } catch {
+    // Storage unavailable (privacy mode, sandboxed frame): report nothing.
+    return null
+  }
+}
+
+/** Drop stale per-day dedup keys so localStorage does not grow forever. */
+function pruneDayKeys(today: string): void {
+  try {
+    for (let index = localStorage.length - 1; index >= 0; index -= 1) {
+      const key = localStorage.key(index)
+      if (key !== null && key.startsWith(DAY_KEY_PREFIX) && key !== DAY_KEY_PREFIX + today) {
+        localStorage.removeItem(key)
+      }
+    }
+  } catch { /* best effort */ }
+}
+
+/**
+ * Fire the daily heartbeat for the given items at most once per UTC day per
+ * browser. Never throws and never blocks the caller. Items without an explicit
+ * version inherit the bundle's baked build version.
+ */
+export function reportDailyHeartbeat(items: readonly TelemetryItem[]): void {
+  try {
+    if (items.length === 0) return
+    const today = new Date().toISOString().slice(0, 10)
+    // Automation contexts (CDP-driven QA browsers, fresh isolated profiles)
+    // mint a new visitor id per run and would inflate instance counts.
+    if (navigator.webdriver) return
+    if (localStorage.getItem(DAY_KEY_PREFIX + today) !== null) return
+    const visitor = visitorId()
+    if (visitor === null) return
+    pruneDayKeys(today)
+    const payloadItems = items.map((item) => {
+      const out: Record<string, string> = { name: item.name }
+      const version = item.version ?? bakedVersion()
+      if (version !== undefined) out.version = version
+      if (item.channel !== undefined) out.channel = item.channel
+      return out
+    })
+    const body = JSON.stringify({ kind: 'heartbeat', visitor, items: payloadItems })
+    void fetch(ENDPOINT, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body,
+      keepalive: true,
+    }).then((response) => {
+      // Mark the day only after an accepted send, so offline browsers retry
+      // on a later mount instead of going dark until tomorrow.
+      if (response.ok) localStorage.setItem(DAY_KEY_PREFIX + today, '1')
+    }).catch(() => { /* unreachable endpoint: stay silent */ })
+  } catch { /* never break the host UI over telemetry */ }
+}

package/src/dsh-home.ts

@@ -7,11 +7,14 @@
 
 import { homedir } from 'node:os'
 import { isAbsolute, join } from 'node:path'
+import { isAbsolute as posixIsAbsolute, join as posixJoin } from 'node:path/posix'
 
 /** Expand a leading ~ (or ~user) in a path, platform-style. */
 export function expandHome(path: string, home: string = homedir()): string {
+  const isPosix = home.startsWith('/')
+  const j = isPosix ? posixJoin : join
   if (path === '~') return home
-  if (path.startsWith('~/') || path.startsWith('~\\')) return join(home, path.slice(2))
+  if (path.startsWith('~/') || path.startsWith('~\\')) return j(home, path.slice(2))
   return path
 }
 
@@ -22,12 +25,15 @@ export function expandHome(path: string, home: string = homedir()): string {
  * @returns the absolute DSH home path.
  */
 export function resolveDshHome(env: NodeJS.ProcessEnv = process.env, home: string = homedir()): string {
+  const isPosix = home.startsWith('/')
+  const j = isPosix ? posixJoin : join
+  const isAbs = isPosix ? posixIsAbsolute : isAbsolute
   const raw = env.DSH_HOME
   if (raw !== undefined && raw.trim() !== '') {
     const expanded = expandHome(raw.trim(), home)
-    return isAbsolute(expanded) ? expanded : join(process.cwd(), expanded)
+    return isAbs(expanded) ? expanded : j(process.cwd(), expanded)
   }
-  return join(home, '.dsh')
+  return j(home, '.dsh')
 }
 
 /** Resolve the DSH home directory from the live environment. */

package/src/http.ts

@@ -11,7 +11,7 @@
  * edit this shared source and re-run the sync instead of editing a copy.
  * Consumer code is migrated onto it in follow-up waves; no call site changes
  * belong in the same change as its introduction.
- * @module dsh-web-ui-shared/host/http
+ * @module dsh-web-shared/host/http
  */
 
 import type { IncomingMessage, OutgoingHttpHeaders, ServerResponse } from 'node:http'

package/src/index.ts

@@ -16,6 +16,8 @@ import type { Context } from '@deepseek-ai/cordis'
 import { installSettingsSection, settingsNamespace } from '@deepseek-ai/dsh-settings'
 import z from 'schemastery'
 import type {} from '@deepseek-ai/dsh-host-webserver'
+import type {} from '@deepseek-ai/dsh-agent'
+import type {} from '@deepseek-ai/dsh-commands'
 import { DEFAULT_IDLE_EXPIRE_MS, PairingService, type PairingConfig } from './pairing.ts'
 import { dshHome } from './dsh-home.ts'
 import { isPairedDeviceRequest, makeGateListener } from './gate.ts'
@@ -31,10 +33,13 @@ import { lanIPv4Addresses } from './lan.ts'
 import { TunnelManager, type TunnelInfo } from './tunnel.ts'
 import {
   checkUpdates,
+  fetchGitHubReleaseNotes,
   fetchLatestVersion,
+  RELEASE_NOTES_CACHE_TTL_MS,
   resolveAnchorManifest,
   resolveUpdateTarget,
   runUpdateVerified,
+  type UpdateReleaseNotes,
   type UpdateRunResult,
 } from './update.ts'
 import { makeUpdateRoutes } from './update-routes.ts'
@@ -63,7 +68,7 @@ declare module '@deepseek-ai/cordis' {
 export const name = 'remote-web-ui'
 
 /** Services required before the pairing surfaces can mount. */
-export const inject = ['webServer', 'apiProxy']
+export const inject = ['webServer', 'apiProxy', 'commands', 'agents']
 
 /**
  * Settings namespace of the remote-control capability — the section the web
@@ -294,7 +299,7 @@ function applyImpl(ctx: Context, config?: Config): void {
     console.warn('remote-web-ui: apiProxy service unavailable — the mobile data channel is disabled')
   }
   // ── remote update ────────────────────────────────────────────────────────
-  // The dsh-web-ui self-update surface: probe the npm registry for family
+  // The dsh-web self-update surface: probe the npm registry for family
   // releases and run `pnpm update --latest` in the owning profile. Resolutions
   // anchor on the host process's own module graph, so the update always
   // targets the profile the running web GUI was booted from. The anchor path
@@ -309,6 +314,15 @@ function applyImpl(ctx: Context, config?: Config): void {
       return undefined
     }
   })
+
+  const releaseNotesCache = new Map<string, { at: number; notes?: UpdateReleaseNotes }>()
+  const fetchReleaseNotesCached = async (version: string): Promise<UpdateReleaseNotes | undefined> => {
+    const cached = releaseNotesCache.get(version)
+    if (cached !== undefined && Date.now() - cached.at < RELEASE_NOTES_CACHE_TTL_MS) return cached.notes
+    const notes = await fetchGitHubReleaseNotes(version, fetch)
+    releaseNotesCache.set(version, { at: Date.now(), notes })
+    return notes
+  }
   const updateRoutes = makeUpdateRoutes({
     // Control endpoints are host-surface only: a LAN/phone origin must never
     // trigger a real install on this machine.
@@ -323,6 +337,7 @@ function applyImpl(ctx: Context, config?: Config): void {
         }
       },
       fetchLatest: name => fetchLatestVersion(name, fetch),
+      fetchReleaseNotes: fetchReleaseNotesCached,
     }),
     run: async (): Promise<UpdateRunResult> => {
       const target = resolveUpdateTarget({ anchorManifestPath: resolveAnchorPath() })
@@ -332,7 +347,7 @@ function applyImpl(ctx: Context, config?: Config): void {
           ok: false,
           exitCode: null,
           output: '',
-          error: code === 'not-found' ? 'dsh-web-ui aggregate not installed' : 'local link install — update unavailable',
+          error: code === 'not-found' ? 'dsh-web aggregate not installed' : 'local link install — update unavailable',
           errorCode: code,
         }
       }
@@ -352,6 +367,7 @@ function applyImpl(ctx: Context, config?: Config): void {
             }
           },
           fetchLatest: name => fetchLatestVersion(name, fetch),
+          fetchReleaseNotes: fetchReleaseNotesCached,
         },
       })
     },
@@ -360,7 +376,23 @@ function applyImpl(ctx: Context, config?: Config): void {
     ...makeRoutes({ service, lanAddresses, requirePairingForLan: () => resolve().requirePairingForLan }),
     ...makeMobileRoutes(),
     ...(apiProxy !== undefined
-      ? makeMobileApiRoutes({ service, apiProxy, pendingTracker: new PendingTracker(), mobileEnterToSend: () => resolve().mobileEnterToSend })
+      ? makeMobileApiRoutes({
+          service,
+          apiProxy,
+          pendingTracker: new PendingTracker(),
+          mobileEnterToSend: () => resolve().mobileEnterToSend,
+          commandDispatcher: ctx.commands !== undefined && ctx.agents !== undefined
+            ? {
+                async execute(sessionId, line, signal) {
+                  const agent = ctx.agents.get(sessionId as never)
+                  if (agent === undefined) return { error: 'session-not-found' as const }
+                  const execution = await ctx.commands.execute(agent, line, [], signal)
+                  if (execution === undefined) return { error: 'unknown-command' as const }
+                  return { ok: true as const, result: execution.result }
+                },
+              }
+            : undefined,
+        })
       : []),
     ...(apiProxy !== undefined ? makePairedModelCatalogRoutes({ service, apiProxy, lanAddresses }) : []),
     // The remote desktop channel: policy-gated `/remote` prefix that

package/src/loopback.ts

@@ -8,7 +8,7 @@
  * Semantics: RFC 5735 IPv4 127/8, ::1, IPv4-mapped ::ffff:127/8 (matching the
  * remote-web-ui gate), localhost hostnames, plus the browser same-origin
  * markers (sec-fetch-site and Origin) for the request-level fence.
- * @module dsh-web-ui-shared/host/loopback
+ * @module dsh-web-shared/host/loopback
  */
 
 import type { IncomingMessage } from 'node:http'

package/src/mobile/api.ts

@@ -105,13 +105,20 @@ export async function prompt(sessionId: string, text: string): Promise<void> {
 
 /** Send one slash command line (e.g. `/permission workspace-write`). */
 export async function sendCommand(sessionId: string, line: string): Promise<unknown> {
-  return await callUnary<unknown>('session.prompt', {
+  return await callUnary<unknown>('mobile.command', {
     sessionId,
-    mode: 'queue',
-    content: [{ type: 'text', text: line }],
+    line,
   })
 }
 
+/**
+ * Stop the session's active turn (the mobile stop button). Pending queued
+ * work is preserved and resumes in FIFO order once cancellation settles.
+ */
+export async function cancelSession(sessionId: string): Promise<{ accepted: true }> {
+  return await callUnary<{ accepted: true }>('session.cancel', { sessionId })
+}
+
 /** Fresh advisory model directory for one session (current + groups + failures). */
 export async function models(sessionId: string): Promise<SessionModels> {
   return await callUnary<SessionModels>('session.models', { sessionId })

package/src/mobile/mobile-styles.ts

@@ -1170,6 +1170,16 @@ body {
   opacity: 0.5;
 }
 
+/* Running state: the primary button carries only the square stop icon, so
+   it centers the glyph instead of sizing to text. */
+.chat-send-stop {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-width: 44px;
+  padding: 0 12px;
+}
+
 .chat-load-older {
   align-self: center;
   margin: 4px 0;

package/src/mobile/views/ChatView.stream.test.tsx

@@ -7,8 +7,8 @@
  * to the plain renderMarkdown output) the moment the turn closes.
  */
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { act, cleanup, render } from '@testing-library/react'
-import { ChatView, STREAM_RENDER_INTERVAL_MS } from './ChatView.tsx'
+import { act, cleanup, render, screen } from '@testing-library/react'
+import { ChatView, STREAM_RENDER_INTERVAL_MS, LONG_TEXT_LIMIT } from './ChatView.tsx'
 import { type SessionView } from './App.tsx'
 import { renderMarkdown } from '../markdown.ts'
 import type { SessionModels } from '@deepseek-ai/dsh-host-apiproxy/api/sessions'
@@ -22,6 +22,8 @@ vi.mock('../api.ts', () => ({
   models: vi.fn(),
   selectModel: vi.fn(),
   sendCommand: vi.fn(),
+  cancelSession: vi.fn(),
+  fetchPending: vi.fn(),
 }))
 vi.mock('./App.tsx', async importOriginal => {
   const actual = await importOriginal<typeof import('./App.tsx')>()
@@ -228,4 +230,34 @@ describe('ChatView streaming markdown throttle', () => {
     expect(renderMarkdownMock.mock.calls.length - beforeFinal).toBe(0)
     expect(normalize(body().innerHTML)).toBe(normalize(renderMarkdown(full)))
   })
+
+  it('does not collapse long text while streaming (pending) and collapses once turn finishes', async () => {
+    const mux = new FakeMux()
+    let container: HTMLElement
+    await act(async () => {
+      const rendered = render(<ChatView session={session} mux={mux as never} onBack={() => {}} />)
+      container = rendered.container
+    })
+
+    const hugeChunk = 'C'.repeat(LONG_TEXT_LIMIT + 200)
+
+    // Stream a chunk exceeding LONG_TEXT_LIMIT
+    await act(async () => {
+      chunk(mux, hugeChunk, 6)
+      vi.advanceTimersByTime(STREAM_RENDER_INTERVAL_MS + 5)
+    })
+
+    // During streaming (pending), message is not collapsed
+    expect(container!.querySelector('.chat-md-collapsed')).toBeNull()
+    expect(screen.queryByRole('button', { name: /展开全文/ })).toBeNull()
+
+    // Turn closes
+    await act(async () => {
+      finalMessage(mux, hugeChunk, 7)
+    })
+
+    // Once turn ends (not pending), message is collapsed and has expand button
+    expect(container!.querySelector('.chat-md-collapsed')).not.toBeNull()
+    expect(screen.getByRole('button', { name: new RegExp(`展开全文（${LONG_TEXT_LIMIT + 200} 字）`) })).toBeTruthy()
+  })
 })