@wenbin_wb/dsh-bridge 2.10.7 → 2.10.8

package/CHANGELOG.md

@@ -4,6 +4,20 @@
 
 ---
 
+## [v2.10.8] - 2026-09-08
+
+### ✨ 新功能
+
+- **登录 Session 持久化**（issue #36，PR #37）：宿主（dsh web）进程重启后，已登录设备不再需要重输访问密码——手机远程访问的登录态不再随每次 DSH 重启丢失。改密码 / 切换模式 / 重新生成 Token 仍会同步吊销全部旧会话（安全语义保持）；文件损坏/写盘失败安全降级。
+- **设置页检测 DSH 宿主更新并一键升级**：版本横幅同步检测 `@deepseek-ai/dsh` 线上最新版，发现新版时黄色提示；检测到 npm 全局安装形态时提供「一键升级 DSH」按钮（升级后引导重启），非 npm 安装（源码 / 打包加壳等）仅提醒并给官方升级方式，避免误导。
+- **移动端输入框可折叠**：聊天头部工具栏（Session 下载钮旁）新增折叠按钮，收起底部输入区后消息阅读区最大化（约 +20% 可视高度）；折叠时底部保留「✏️ 点击输入消息」细条一键唤回；折叠偏好跨会话记忆。
+
+### 🐞 修复
+
+- **iOS Safari 键盘弹起时聊天输入框上下跳动**：输入区为 sticky 吸底布局，键盘弹起时随 visual viewport 收缩反复重排抖动——现键盘弹起时固定输入框所属滚动容器高度，键盘收起后还原，仅 iOS 生效、不依赖宿主类名。
+
+---
+
 ## [v2.10.7] - 2026-09-08
 
 ### 🐞 修复

package/client/client.js

@@ -425,6 +425,74 @@ var MOBILE_STYLES_CSS = `
         padding-bottom: max(16px, env(safe-area-inset-bottom)) !important;
       }
 
+      /* \u2500\u2500 \u79FB\u52A8\u7AEF\u8F93\u5165\u6846\u6298\u53E0\u6A21\u5F0F\uFF08body.dsh-composer-collapsed\uFF09\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+         \u6298\u53E0\u540E\u9690\u85CF\u5438\u5E95\u8F93\u5165\u533A\uFF0C\u8BA9\u6D88\u606F viewArea \u81EA\u52A8\u4F38\u5C55\u5230\u5168\u9AD8\uFF0C\u6700\u5927\u5316\u9605\u8BFB\u533A\u3002
+         \u5165\u53E3\uFF1A\u804A\u5929\u5934\u90E8\u5DE5\u5177\u680F\uFF08Session \u4E0B\u8F7D\u94AE\u65C1\uFF09\u7684\u6298\u53E0\u6309\u94AE\uFF0C\u6216\u6298\u53E0\u6001\u5E95\u90E8\u7EC6\u8F93\u5165\u6761\u70B9\u5B83\u5524\u56DE\u3002
+         \u72B6\u6001\u6301\u4E45\u5316\u5230 localStorage\u3002 */
+      body.dsh-composer-collapsed div[class*="wSkVaW_composerSeat"] {
+        display: none !important;
+      }
+      body.dsh-composer-collapsed div[class*="wSkVaW_viewArea"] {
+        flex: 1 1 auto !important;
+        height: auto !important;
+        min-height: 0 !important;
+      }
+      /* \u6298\u53E0\u65F6\u6EDA\u52A8\u533A\u5E95\u90E8\u5BF9\u9F50 safe-area\uFF0C\u907F\u514D\u5185\u5BB9\u88AB iPhone \u5E95\u90E8\u6A2A\u6761\u906E\u6321 */
+      body.dsh-composer-collapsed div[class*="wSkVaW_scrollBody"] {
+        padding-bottom: max(16px, env(safe-area-inset-bottom)) !important;
+      }
+
+      /* \u6298\u53E0\u8F93\u5165\u6846\u6309\u94AE\uFF1A\u6CE8\u5165\u5728\u804A\u5929\u5934\u90E8\u5DE5\u5177\u680F\uFF08Session \u4E0B\u8F7D\u94AE\u65C1\uFF09\uFF0C
+         \u4E0E DSH sessionLogButton \u540C\u89C4\u683C\uFF0828px \u5706\u5F62\u56FE\u6807\u94AE\uFF09\uFF0C\u89C6\u89C9\u4E0E\u539F\u751F\u4E00\u81F4 */
+      .dsh-header-fold-btn {
+        min-width: 28px !important;
+        width: 28px !important;
+        height: 28px !important;
+        padding: 0 !important;
+        border-radius: 50% !important;
+        display: inline-flex !important;
+        align-items: center !important;
+        justify-content: center !important;
+        flex-shrink: 0 !important;
+        border: 1px solid var(--dsw-alias-border-l2, rgba(0, 0, 0, 0.1)) !important;
+        background: var(--dsw-alias-bg-layer-2, rgba(0, 0, 0, 0.03)) !important;
+        color: var(--dsw-alias-label-secondary, #6b7280) !important;
+        cursor: pointer !important;
+        transition: opacity 0.15s !important;
+        box-shadow: 0 1px 2px rgba(0, 0, 0, 0.03) !important;
+        -webkit-tap-highlight-color: transparent !important;
+      }
+      .dsh-header-fold-btn:active {
+        opacity: 0.6 !important;
+      }
+      .dsh-header-fold-btn svg {
+        width: 15px !important;
+        height: 15px !important;
+      }
+
+      /* \u6298\u53E0\u6001\u5E95\u90E8\u7EC6\u8F93\u5165\u6761\uFF1A\u70B9\u51FB\u5524\u8D77\u8F93\u5165\u6846\uFF08\u4F4D\u4E8E\u539F\u8F93\u5165\u533A\u4F4D\u7F6E\uFF0Csticky \u5E95\u90E8\uFF09 */
+      .dsh-composer-collapsed-bar {
+        display: none !important;
+        position: sticky !important;
+        bottom: 0 !important;
+        margin: 8px 12px max(8px, env(safe-area-inset-bottom, 0px)) 12px !important;
+        padding: 11px 16px !important;
+        border-radius: 22px !important;
+        background: var(--dsw-alias-bg-layer-2, #f4f4f7) !important;
+        border: 1px solid rgba(0, 0, 0, 0.07) !important;
+        color: var(--dsw-alias-label-tertiary, #8b93a1) !important;
+        font-size: 13.5px !important;
+        line-height: 1.4 !important;
+        cursor: pointer !important;
+        box-shadow: 0 2px 10px rgba(0, 0, 0, 0.04) !important;
+        -webkit-tap-highlight-color: transparent !important;
+        z-index: 40 !important;
+        box-sizing: border-box !important;
+      }
+      body.dsh-composer-collapsed .dsh-composer-collapsed-bar {
+        display: block !important;
+      }
+
       /* \u8F93\u5165\u5361\u7247\uFF1ADeepSeek App \u5706\u89D2\u5927\u80F6\u56CA\u9020\u578B */
       div[class*="uV2eYG_card"] {
         border-radius: 26px !important;
@@ -999,6 +1067,7 @@ var BRIDGE_ENDPOINTS = {
   setLanIp: "setLanIp",
   checkVersion: "checkVersion",
   upgradePlugin: "upgradePlugin",
+  upgradeDsh: "upgradeDsh",
   restartDsh: "restartDsh",
   exportBackup: "exportBackup",
   importBackup: "importBackup",
@@ -3690,6 +3759,7 @@ function VersionBanner({ rpcCall }) {
   }, [check]);
   const hasUpdate = info?.latest && info?.current && !info.error && semverGt(info.latest, info.current);
   const isLatest = info?.latest && info?.current && !info.error && !semverGt(info.latest, info.current);
+  const dshHasUpdate = !!(info?.dshLatest && info?.dshVersion && !info.error && semverGt(info.dshLatest, info.dshVersion));
   const handleUpgrade = React.useCallback(async () => {
     if (!info?.latest || upgrading) return;
     setUpgrading(true);
@@ -3711,6 +3781,28 @@ function VersionBanner({ rpcCall }) {
       setUpgrading(false);
     }
   }, [info?.latest, upgrading, rpcCall]);
+  const [dshUpgrading, setDshUpgrading] = React.useState(false);
+  const [dshUpgradeResult, setDshUpgradeResult] = React.useState(null);
+  const handleUpgradeDsh = React.useCallback(async () => {
+    if (!info?.dshLatest || dshUpgrading) return;
+    setDshUpgrading(true);
+    setDshUpgradeResult(null);
+    setDismissRestart(false);
+    resetRestartStatus();
+    try {
+      const r = await rpcCall(BRIDGE_ENDPOINTS.upgradeDsh, { version: info.dshLatest });
+      if (r?.ok && r.value?.ok) {
+        setDshUpgradeResult({ ok: true, message: `DSH \u5DF2\u6210\u529F\u5347\u7EA7\u5230 v${info.dshLatest}\uFF01` });
+      } else {
+        const msg = r?.value?.error || r?.error?.message || "\u5347\u7EA7\u5931\u8D25";
+        setDshUpgradeResult({ ok: false, message: msg, manual: true });
+      }
+    } catch (e) {
+      setDshUpgradeResult({ ok: false, message: e.message || "\u5347\u7EA7\u8BF7\u6C42\u5931\u8D25", manual: true });
+    } finally {
+      setDshUpgrading(false);
+    }
+  }, [info?.dshLatest, dshUpgrading, rpcCall]);
   const links = React.createElement(
     "div",
     { style: { display: "flex", gap: 10, alignItems: "center", flexWrap: "wrap" } },
@@ -3775,24 +3867,26 @@ function VersionBanner({ rpcCall }) {
           hasUpdate && React.createElement("span", { style: { fontWeight: 600, fontSize: 11 } }, `\u2794 v${info.latest}`),
           info?.error && React.createElement("span", { style: { color: "var(--dsw-alias-state-warn-primary,#d97706)", fontSize: 11 } }, "(\u7F51\u7EDC\u8D85\u65F6)")
         ),
-        // DSH 宿主版本标签
+        // DSH 宿主版本标签（有新版时黄色高亮）
         info?.dshVersion && React.createElement(
           "span",
           {
             style: {
               ...s.tag,
-              background: "var(--dsw-alias-bg-layer-2,#f3f4f6)",
-              color: "var(--dsw-alias-label-tertiary,#6b7280)",
+              background: dshHasUpdate ? "var(--dsw-alias-state-warn-bg,#fffbeb)" : "var(--dsw-alias-bg-layer-2,#f3f4f6)",
+              color: dshHasUpdate ? "var(--dsw-alias-state-warn-primary,#d97706)" : "var(--dsw-alias-label-tertiary,#6b7280)",
               padding: "3px 10px",
               fontSize: 12,
               fontWeight: 500,
               display: "inline-flex",
               alignItems: "center",
               gap: 5
-            }
+            },
+            title: dshHasUpdate ? `\u53D1\u73B0 DSH \u65B0\u7248\u672C v${info.dshLatest}` : void 0
           },
           React.createElement("span", { style: { opacity: 0.75, fontSize: 11, fontWeight: 400 } }, "DSH"),
-          `v${info.dshVersion}`
+          `v${info.dshVersion}`,
+          dshHasUpdate && React.createElement("span", { style: { fontWeight: 600, fontSize: 11 } }, `\u2794 v${info.dshLatest}`)
         ),
         // 刷新检查按钮
         React.createElement(
@@ -3982,6 +4076,109 @@ function VersionBanner({ rpcCall }) {
           )
         )
       )
+    ),
+    // ── DSH 宿主有新版本时的提示 / 一键升级卡片 ──
+    dshHasUpdate && React.createElement(
+      "div",
+      {
+        style: {
+          ...s.card,
+          background: "var(--dsw-alias-state-warn-bg,#fffbeb)",
+          border: "1px solid var(--dsw-alias-state-warn-border,#fde68a)",
+          padding: "14px 16px",
+          marginTop: 10,
+          marginBottom: 0
+        }
+      },
+      React.createElement(
+        "div",
+        { style: { display: "flex", alignItems: "flex-start", gap: 12 } },
+        React.createElement("span", { style: { fontSize: 22 } }, "\u{1F6E0}\uFE0F"),
+        React.createElement(
+          "div",
+          { style: { flex: 1, minWidth: 0 } },
+          React.createElement(
+            "div",
+            { style: { display: "flex", alignItems: "center", justifyContent: "space-between", flexWrap: "wrap", gap: 8, marginBottom: 8 } },
+            React.createElement("div", {
+              style: { fontSize: 13, fontWeight: 600, color: "var(--dsw-alias-state-warn-primary,#92400e)" }
+            }, `DSH \u6709\u65B0\u7248\u672C v${info.dshLatest}\uFF08\u5F53\u524D v${info.dshVersion}\uFF09`),
+            info?.dshUpgradable ? React.createElement(
+              "button",
+              {
+                style: {
+                  ...s.btnPri,
+                  height: 28,
+                  fontSize: 12,
+                  padding: "0 14px",
+                  background: dshUpgradeResult?.ok ? "var(--dsw-alias-state-success-primary,#059669)" : "var(--dsw-alias-brand-primary,#4f6ef7)",
+                  opacity: dshUpgrading || restarting ? 0.6 : 1
+                },
+                onClick: handleUpgradeDsh,
+                disabled: dshUpgrading || restarting || dshUpgradeResult?.ok
+              },
+              dshUpgrading ? React.createElement(
+                "span",
+                { style: { display: "inline-flex", alignItems: "center", gap: 6 } },
+                React.createElement("span", { style: { animation: "spin 1s linear infinite", display: "inline-flex" } }, React.createElement(Icons.refresh)),
+                "\u6B63\u5728\u5347\u7EA7 DSH\u2026"
+              ) : dshUpgradeResult?.ok ? "\u2713 DSH \u5347\u7EA7\u5B8C\u6210" : `\u4E00\u952E\u5347\u7EA7 DSH \u5230 v${info.dshLatest}`
+            ) : React.createElement("a", {
+              href: GITHUB_URL,
+              target: "_blank",
+              rel: "noreferrer",
+              style: { ...s.btnLink, fontSize: 12, fontWeight: 600 }
+            }, "\u67E5\u770B\u5B98\u65B9\u5347\u7EA7\u65B9\u5F0F \u2197")
+          ),
+          React.createElement(
+            "div",
+            {
+              style: { fontSize: 12, color: "var(--dsw-alias-label-secondary,#6b7280)", lineHeight: 1.6 }
+            },
+            info?.dshUpgradable ? "\u5347\u7EA7 DSH \u547D\u4EE4\u884C\u5DE5\u5177\u540E\u9700\u91CD\u542F DSH \u670D\u52A1\u751F\u6548\u3002" : info?.dshUpgradeReason || "\u5F53\u524D DSH \u975E npm \u5168\u5C40\u5B89\u88C5\uFF0C\u65E0\u6CD5\u4E00\u952E\u81EA\u52A8\u5347\u7EA7\uFF0C\u8BF7\u6309\u5B98\u65B9\u6E20\u9053\u624B\u52A8\u66F4\u65B0\u3002"
+          ),
+          dshUpgradeResult && React.createElement("div", {
+            style: {
+              marginTop: 10,
+              fontSize: 12,
+              lineHeight: 1.6,
+              color: dshUpgradeResult.ok ? "var(--dsw-alias-state-success-primary,#059669)" : "var(--dsw-alias-state-error-primary,#dc2626)"
+            }
+          }, dshUpgradeResult.message),
+          dshUpgradeResult?.ok && !dismissRestart && React.createElement(
+            "div",
+            {
+              style: { display: "flex", gap: 8, alignItems: "center", flexWrap: "wrap", marginTop: 10 }
+            },
+            React.createElement("button", {
+              style: { ...s.btnPri, height: 30, fontSize: 12, padding: "0 14px", background: "var(--dsw-alias-state-success-primary,#059669)" },
+              onClick: handleRestart
+            }, "\u{1F504} \u7ACB\u5373\u91CD\u542F DSH \u670D\u52A1"),
+            React.createElement("button", {
+              style: { ...s.btnGhost, height: 30, fontSize: 12, padding: "0 12px" },
+              onClick: () => setDismissRestart(true)
+            }, "\u7A0D\u540E\u624B\u52A8\u91CD\u542F")
+          ),
+          (restarting || restartStatus) && React.createElement(
+            "div",
+            {
+              style: {
+                display: "flex",
+                alignItems: "center",
+                gap: 8,
+                fontSize: 12,
+                marginTop: 8,
+                color: restartStatus?.phase === "success" ? "var(--dsw-alias-state-success-primary,#059669)" : restartStatus?.phase === "timeout" ? "var(--dsw-alias-state-error-primary,#dc2626)" : "var(--dsw-alias-state-info-primary,#2563eb)",
+                fontWeight: 500
+              }
+            },
+            restartStatus?.phase !== "success" && restartStatus?.phase !== "timeout" && React.createElement("span", {
+              style: { animation: "spin 1s linear infinite", display: "inline-flex" }
+            }, React.createElement(Icons.refresh)),
+            restartStatus?.text || "\u6B63\u5728\u5904\u7406\u2026"
+          )
+        )
+      )
     )
   );
 }
@@ -5756,10 +5953,196 @@ function RemoteDirectoryFlow(props) {
   }, [open, pick]);
   return null;
 }
+function setupIosKeyboardAdapter() {
+  if (typeof window === "undefined" || !window.visualViewport) return;
+  if (!/iPhone|iPad|iPod/.test(navigator.userAgent || "")) return;
+  const vv = window.visualViewport;
+  const isEditable = (el) => el && (el.isContentEditable || el.tagName === "TEXTAREA" || el.tagName === "INPUT");
+  let keyboardOpen = false;
+  let pinnedEl = null;
+  let pinnedH = null;
+  let pinnedInline = null;
+  const findScrollContainer = (el) => {
+    let n = el;
+    while (n && n !== document.body) {
+      const cs = getComputedStyle(n);
+      if ((cs.overflowY === "auto" || cs.overflowY === "scroll") && n.scrollHeight > n.clientHeight) {
+        return n;
+      }
+      n = n.parentElement;
+    }
+    return null;
+  };
+  vv.addEventListener("resize", () => {
+    const ratio = vv.height / window.innerHeight;
+    const nowOpen = ratio < 0.75;
+    if (nowOpen === keyboardOpen) return;
+    keyboardOpen = nowOpen;
+    const el = document.activeElement;
+    if (nowOpen) {
+      const scroller = isEditable(el) ? findScrollContainer(el) : null;
+      if (scroller) {
+        pinnedEl = scroller;
+        pinnedInline = scroller.style.height || "";
+        pinnedH = scroller.getBoundingClientRect().height;
+        scroller.style.height = `${Math.round(pinnedH)}px`;
+      }
+      requestAnimationFrame(() => {
+        if (isEditable(el)) {
+          try {
+            el.scrollIntoView({ block: "nearest" });
+          } catch {
+          }
+        }
+      });
+    } else {
+      if (pinnedEl) {
+        pinnedEl.style.height = pinnedInline;
+        pinnedEl = null;
+        pinnedH = null;
+        pinnedInline = null;
+      }
+    }
+  });
+}
+function setupComposerCollapse() {
+  if (typeof window === "undefined" || typeof document === "undefined") return;
+  if (window.innerWidth > 768) return;
+  const LS_KEY = "dsh-composer-fold";
+  let bar = null;
+  let busy = false;
+  let lastHadSeat = null;
+  const getFoldBtn = () => {
+    const existing = document.querySelector(".dsh-header-fold-btn");
+    if (existing) return existing;
+    const utils = document.querySelector('div[class*="wSkVaW_headerUtilities"], div[class*="headerUtilities"]');
+    const logBtn = document.querySelector('button[class*="sessionLogButton"], button[class*="nL4_yW_sessionLogButton"]');
+    if (!utils) return null;
+    const btn = document.createElement("button");
+    btn.className = "dsh-header-fold-btn";
+    btn.setAttribute("aria-label", "\u6536\u8D77/\u5C55\u5F00\u8F93\u5165\u6846");
+    btn.innerHTML = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><line x1="3" y1="18" x2="21" y2="18"></line><polyline points="6 9 12 15 18 9"></polyline></svg>';
+    if (logBtn && logBtn.parentElement === utils) utils.insertBefore(btn, logBtn);
+    else utils.appendChild(btn);
+    return btn;
+  };
+  const isCollapsed = () => document.body.classList.contains("dsh-composer-collapsed");
+  const readPref = () => {
+    try {
+      return localStorage.getItem(LS_KEY) === "1";
+    } catch {
+      return false;
+    }
+  };
+  const ensureBar = () => {
+    if (bar && document.body.contains(bar)) return bar;
+    const seat = document.querySelector('div[class*="composerSeat"]');
+    const scrollBody = seat ? seat.parentElement : null;
+    if (!scrollBody) return null;
+    bar = document.createElement("div");
+    bar.className = "dsh-composer-collapsed-bar";
+    bar.textContent = "\u270F\uFE0F \u70B9\u51FB\u8F93\u5165\u6D88\u606F\u2026";
+    scrollBody.insertBefore(bar, seat);
+    bar.addEventListener("click", () => setCollapsed(false));
+    return bar;
+  };
+  const removeBar = () => {
+    if (bar) {
+      try {
+        bar.remove();
+      } catch {
+      }
+      bar = null;
+    }
+  };
+  const setCollapsed = (collapsed) => {
+    if (busy) return;
+    busy = true;
+    try {
+      if (isCollapsed() !== collapsed) {
+        document.body.classList.toggle("dsh-composer-collapsed", collapsed);
+        try {
+          localStorage.setItem(LS_KEY, collapsed ? "1" : "0");
+        } catch {
+        }
+        updateButton(collapsed);
+      }
+      if (collapsed) ensureBar();
+      else removeBar();
+    } finally {
+      busy = false;
+    }
+  };
+  const updateButton = (collapsed) => {
+    const btn = getFoldBtn();
+    if (!btn) return;
+    btn.title = collapsed ? "\u5C55\u5F00\u8F93\u5165\u6846" : "\u6536\u8D77\u8F93\u5165\u6846\uFF0C\u6700\u5927\u5316\u5BF9\u8BDD\u9605\u8BFB\u533A";
+    const icon = collapsed ? '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="2" y="6" width="20" height="12" rx="2"></rect><line x1="6" y1="10" x2="6.01" y2="10"></line><line x1="10" y1="10" x2="10.01" y2="10"></line><line x1="14" y1="10" x2="14.01" y2="10"></line><line x1="6" y1="14" x2="10" y2="14"></line><line x1="14" y1="14" x2="18" y2="14"></line></svg>' : '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><line x1="3" y1="18" x2="21" y2="18"></line><polyline points="6 9 12 15 18 9"></polyline></svg>';
+    const existing = btn.querySelector("svg");
+    if (!existing || existing.outerHTML !== icon) btn.innerHTML = icon;
+  };
+  const handleSeatPresent = () => {
+    const btn = getFoldBtn();
+    if (!btn) return false;
+    btn.style.display = "inline-flex";
+    if (!btn._dshFoldWired) {
+      btn._dshFoldWired = true;
+      btn.onclick = (e) => {
+        e.stopPropagation();
+        setCollapsed(!isCollapsed());
+      };
+    }
+    document.body.classList.add("dsh-composer-active");
+    const want = readPref();
+    if (want !== isCollapsed()) {
+      setCollapsed(want);
+    } else {
+      updateButton(isCollapsed());
+    }
+    return true;
+  };
+  const handleSeatAbsent = () => {
+    const btn = getFoldBtn();
+    if (btn) {
+      btn.style.display = "none";
+    }
+    document.body.classList.remove("dsh-composer-active");
+    removeBar();
+  };
+  const onComposerChange = () => {
+    const hasSeat = !!document.querySelector('div[class*="composerSeat"]');
+    const hasBtn = !!document.querySelector(".dsh-header-fold-btn");
+    if (busy) return;
+    if (hasSeat === lastHadSeat && hasSeat === hasBtn) return;
+    busy = true;
+    try {
+      if (hasSeat) {
+        lastHadSeat = handleSeatPresent();
+      } else {
+        handleSeatAbsent();
+        lastHadSeat = false;
+      }
+    } finally {
+      busy = false;
+    }
+  };
+  const observer = new MutationObserver(() => {
+    observer.disconnect();
+    try {
+      onComposerChange();
+    } finally {
+      observer.observe(document.body, { childList: true, subtree: true });
+    }
+  });
+  observer.observe(document.body, { childList: true, subtree: true });
+  onComposerChange();
+}
 function apply(ctx) {
   window.__dshClientCtx = ctx;
   const rpcCall = (endpoint, payload, signal) => ctx.connection.rpc.call(BRIDGE_RPC_CHANNEL, endpoint, payload, signal);
   window.__dshOpenRemoteWorkspaceModal = (onAdded, onPickDirect, onCancel) => showRemoteWorkspaceDialog(rpcCall, onAdded, ctx, onPickDirect, onCancel);
+  setupIosKeyboardAdapter();
+  setupComposerCollapse();
   setupMobileExperience(rpcCall, ctx);
   const injected = () => ({ pick: () => ctx.workspaces?.pickDirectory?.() });
   ctx.slots.inject(

package/client/index.js

@@ -2397,6 +2397,8 @@ function VersionBanner({ rpcCall }) {
 
   const hasUpdate = info?.latest && info?.current && !info.error && semverGt(info.latest, info.current);
   const isLatest = info?.latest && info?.current && !info.error && !semverGt(info.latest, info.current);
+  // DSH 宿主更新状态：有线上新版 + 当前版本可比较
+  const dshHasUpdate = !!(info?.dshLatest && info?.dshVersion && !info.error && semverGt(info.dshLatest, info.dshVersion));
 
   const handleUpgrade = React.useCallback(async () => {
     if (!info?.latest || upgrading) return;
@@ -2420,6 +2422,30 @@ function VersionBanner({ rpcCall }) {
     }
   }, [info?.latest, upgrading, rpcCall]);
 
+  // DSH 宿主一键升级：仅当服务端判定可自动升级（npm 全局安装）时按钮才会出现
+  const [dshUpgrading, setDshUpgrading] = React.useState(false);
+  const [dshUpgradeResult, setDshUpgradeResult] = React.useState(null);
+  const handleUpgradeDsh = React.useCallback(async () => {
+    if (!info?.dshLatest || dshUpgrading) return;
+    setDshUpgrading(true);
+    setDshUpgradeResult(null);
+    setDismissRestart(false);
+    resetRestartStatus();
+    try {
+      const r = await rpcCall(BRIDGE_ENDPOINTS.upgradeDsh, { version: info.dshLatest });
+      if (r?.ok && r.value?.ok) {
+        setDshUpgradeResult({ ok: true, message: `DSH 已成功升级到 v${info.dshLatest}！` });
+      } else {
+        const msg = r?.value?.error || r?.error?.message || '升级失败';
+        setDshUpgradeResult({ ok: false, message: msg, manual: true });
+      }
+    } catch (e) {
+      setDshUpgradeResult({ ok: false, message: e.message || '升级请求失败', manual: true });
+    } finally {
+      setDshUpgrading(false);
+    }
+  }, [info?.dshLatest, dshUpgrading, rpcCall]);
+
   const links = React.createElement('div', { style: { display: 'flex', gap: 10, alignItems: 'center', flexWrap: 'wrap' } },
     React.createElement('a', {
       href: GITHUB_URL, target: '_blank', rel: 'noreferrer', style: s.btnLink,
@@ -2478,12 +2504,16 @@ function VersionBanner({ rpcCall }) {
           hasUpdate && React.createElement('span', { style: { fontWeight: 600, fontSize: 11 } }, `➔ v${info.latest}`),
           info?.error && React.createElement('span', { style: { color: 'var(--dsw-alias-state-warn-primary,#d97706)', fontSize: 11 } }, '(网络超时)'),
         ),
-        // DSH 宿主版本标签
+        // DSH 宿主版本标签（有新版时黄色高亮）
         info?.dshVersion && React.createElement('span', {
           style: {
             ...s.tag,
-            background: 'var(--dsw-alias-bg-layer-2,#f3f4f6)',
-            color: 'var(--dsw-alias-label-tertiary,#6b7280)',
+            background: dshHasUpdate
+              ? 'var(--dsw-alias-state-warn-bg,#fffbeb)'
+              : 'var(--dsw-alias-bg-layer-2,#f3f4f6)',
+            color: dshHasUpdate
+              ? 'var(--dsw-alias-state-warn-primary,#d97706)'
+              : 'var(--dsw-alias-label-tertiary,#6b7280)',
             padding: '3px 10px',
             fontSize: 12,
             fontWeight: 500,
@@ -2491,9 +2521,11 @@ function VersionBanner({ rpcCall }) {
             alignItems: 'center',
             gap: 5,
           },
+          title: dshHasUpdate ? `发现 DSH 新版本 v${info.dshLatest}` : undefined,
         },
           React.createElement('span', { style: { opacity: 0.75, fontSize: 11, fontWeight: 400 } }, 'DSH'),
           `v${info.dshVersion}`,
+          dshHasUpdate && React.createElement('span', { style: { fontWeight: 600, fontSize: 11 } }, `➔ v${info.dshLatest}`),
         ),
         // 刷新检查按钮
         React.createElement('button', {
@@ -2672,6 +2704,102 @@ function VersionBanner({ rpcCall }) {
         ),
       ),
     ),
+
+      // ── DSH 宿主有新版本时的提示 / 一键升级卡片 ──
+      dshHasUpdate && React.createElement('div', {
+        style: {
+          ...s.card,
+          background: 'var(--dsw-alias-state-warn-bg,#fffbeb)',
+          border: '1px solid var(--dsw-alias-state-warn-border,#fde68a)',
+          padding: '14px 16px',
+          marginTop: 10,
+          marginBottom: 0,
+        },
+      },
+        React.createElement('div', { style: { display: 'flex', alignItems: 'flex-start', gap: 12 } },
+          React.createElement('span', { style: { fontSize: 22 } }, '🛠️'),
+          React.createElement('div', { style: { flex: 1, minWidth: 0 } },
+            React.createElement('div', { style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', flexWrap: 'wrap', gap: 8, marginBottom: 8 } },
+              React.createElement('div', {
+                style: { fontSize: 13, fontWeight: 600, color: 'var(--dsw-alias-state-warn-primary,#92400e)' },
+              }, `DSH 有新版本 v${info.dshLatest}（当前 v${info.dshVersion}）`),
+              info?.dshUpgradable
+                ? React.createElement('button', {
+                    style: {
+                      ...s.btnPri,
+                      height: 28,
+                      fontSize: 12,
+                      padding: '0 14px',
+                      background: dshUpgradeResult?.ok
+                        ? 'var(--dsw-alias-state-success-primary,#059669)'
+                        : 'var(--dsw-alias-brand-primary,#4f6ef7)',
+                      opacity: (dshUpgrading || restarting) ? 0.6 : 1,
+                    },
+                    onClick: handleUpgradeDsh,
+                    disabled: dshUpgrading || restarting || dshUpgradeResult?.ok,
+                  },
+                  dshUpgrading
+                    ? React.createElement('span', { style: { display: 'inline-flex', alignItems: 'center', gap: 6 } },
+                        React.createElement('span', { style: { animation: 'spin 1s linear infinite', display: 'inline-flex' } }, React.createElement(Icons.refresh)),
+                        '正在升级 DSH…',
+                      )
+                    : dshUpgradeResult?.ok
+                      ? '✓ DSH 升级完成'
+                      : `一键升级 DSH 到 v${info.dshLatest}`,
+                )
+                : React.createElement('a', {
+                    href: GITHUB_URL, target: '_blank', rel: 'noreferrer',
+                    style: { ...s.btnLink, fontSize: 12, fontWeight: 600 },
+                  }, '查看官方升级方式 ↗'),
+            ),
+            React.createElement('div', {
+              style: { fontSize: 12, color: 'var(--dsw-alias-label-secondary,#6b7280)', lineHeight: 1.6 },
+            },
+              info?.dshUpgradable
+                ? '升级 DSH 命令行工具后需重启 DSH 服务生效。'
+                : (info?.dshUpgradeReason || '当前 DSH 非 npm 全局安装，无法一键自动升级，请按官方渠道手动更新。'),
+            ),
+            dshUpgradeResult && React.createElement('div', {
+              style: {
+                marginTop: 10,
+                fontSize: 12,
+                lineHeight: 1.6,
+                color: dshUpgradeResult.ok
+                  ? 'var(--dsw-alias-state-success-primary,#059669)'
+                  : 'var(--dsw-alias-state-error-primary,#dc2626)',
+              },
+            }, dshUpgradeResult.message),
+            dshUpgradeResult?.ok && !dismissRestart && React.createElement('div', {
+              style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap', marginTop: 10 },
+            },
+              React.createElement('button', {
+                style: { ...s.btnPri, height: 30, fontSize: 12, padding: '0 14px', background: 'var(--dsw-alias-state-success-primary,#059669)' },
+                onClick: handleRestart,
+              }, '🔄 立即重启 DSH 服务'),
+              React.createElement('button', {
+                style: { ...s.btnGhost, height: 30, fontSize: 12, padding: '0 12px' },
+                onClick: () => setDismissRestart(true),
+              }, '稍后手动重启'),
+            ),
+            (restarting || restartStatus) && React.createElement('div', {
+              style: {
+                display: 'flex', alignItems: 'center', gap: 8, fontSize: 12, marginTop: 8,
+                color: restartStatus?.phase === 'success'
+                  ? 'var(--dsw-alias-state-success-primary,#059669)'
+                  : restartStatus?.phase === 'timeout'
+                    ? 'var(--dsw-alias-state-error-primary,#dc2626)'
+                    : 'var(--dsw-alias-state-info-primary,#2563eb)',
+                fontWeight: 500,
+              },
+            },
+              restartStatus?.phase !== 'success' && restartStatus?.phase !== 'timeout' && React.createElement('span', {
+                style: { animation: 'spin 1s linear infinite', display: 'inline-flex' },
+              }, React.createElement(Icons.refresh)),
+              restartStatus?.text || '正在处理…',
+            ),
+          ),
+        ),
+      ),
   );
 }
 
@@ -4567,6 +4695,199 @@ function RemoteDirectoryFlow(props) {
 
 // ---- 插件入口 ----
 
+// iOS Safari 键盘弹起时输入框上下跳动适配。
+//
+// 根因（实测 2026-09）：聊天输入区容器（宿主 wSkVaW_composerSeat）为
+// position:sticky; bottom:0，其滚动容器高度由 100% 链决定。iOS 键盘弹起时
+// visual viewport 收缩，sticky 基准随视口变化 + iOS 反复 scroll 调整 → 每敲一字跳动。
+//
+// 通用解法（不依赖宿主类名）：键盘弹起瞬间找到焦点输入框所属的滚动容器，
+// 把它当前高度用 px 固定（避免随视口继续收缩/重排），键盘收起后还原；
+// 并顺带做一次精确 scrollIntoView，阻止 iOS 二次乱滚。
+function setupIosKeyboardAdapter() {
+  if (typeof window === 'undefined' || !window.visualViewport) return;
+  if (!/iPhone|iPad|iPod/.test(navigator.userAgent || '')) return;
+
+  const vv = window.visualViewport;
+  const isEditable = (el) => el && (el.isContentEditable || el.tagName === 'TEXTAREA' || el.tagName === 'INPUT');
+  let keyboardOpen = false;
+  let pinnedEl = null;   // 被固定高度的滚动容器
+  let pinnedH = null;    // 原始 height（还原用）
+  let pinnedInline = null;
+
+  const findScrollContainer = (el) => {
+    let n = el;
+    while (n && n !== document.body) {
+      const cs = getComputedStyle(n);
+      if ((cs.overflowY === 'auto' || cs.overflowY === 'scroll') && n.scrollHeight > n.clientHeight) {
+        return n;
+      }
+      n = n.parentElement;
+    }
+    return null;
+  };
+
+  vv.addEventListener('resize', () => {
+    const ratio = vv.height / window.innerHeight;
+    const nowOpen = ratio < 0.75;
+    if (nowOpen === keyboardOpen) return;
+    keyboardOpen = nowOpen;
+    const el = document.activeElement;
+
+    if (nowOpen) {
+      // 键盘弹起：固定滚动容器高度，防随视口继续收缩导致 sticky 输入框跳动
+      const scroller = isEditable(el) ? findScrollContainer(el) : null;
+      if (scroller) {
+        pinnedEl = scroller;
+        pinnedInline = scroller.style.height || '';
+        pinnedH = scroller.getBoundingClientRect().height;
+        scroller.style.height = `${Math.round(pinnedH)}px`;
+      }
+      requestAnimationFrame(() => {
+        if (isEditable(el)) {
+          try { el.scrollIntoView({ block: 'nearest' }); } catch { /* 忽略 */ }
+        }
+      });
+    } else {
+      // 键盘收起：还原滚动容器高度，让布局回到正常
+      if (pinnedEl) {
+        pinnedEl.style.height = pinnedInline;
+        pinnedEl = null; pinnedH = null; pinnedInline = null;
+      }
+    }
+  });
+}
+
+// 移动端输入框折叠/展开（body.dsh-composer-collapsed）。
+// 底部输入区（composer）占用 ~116px，顶部菜单 + header 又占 ~120px，屏幕有限时
+// 中间消息可视区很小。折叠后 composer 隐藏、消息 viewArea 自动伸展全高，阅读区显著增大。
+// 折叠态记忆到 localStorage（dsh-composer-fold），跨会话保持用户偏好。
+function setupComposerCollapse() {
+  if (typeof window === 'undefined' || typeof document === 'undefined') return;
+  if (window.innerWidth > 768) return; // 仅移动端
+  const LS_KEY = 'dsh-composer-fold';
+
+  let bar = null;          // 折叠态底部"点击输入"细条
+  let busy = false;        // 防重入锁（observer 由我们自己改动触发时跳过）
+  let lastHadSeat = null;  // 上次检测是否有输入区（避免重复处理）
+
+  // 折叠按钮：注入到聊天头部工具栏（headerUtilities）的 Session 下载按钮旁，
+  // 与 DSH 原生按钮同规格（28px 圆形），视觉与原生一致。返回 null 表示工具栏未就绪。
+  const getFoldBtn = () => {
+    const existing = document.querySelector('.dsh-header-fold-btn');
+    if (existing) return existing;
+    const utils = document.querySelector('div[class*="wSkVaW_headerUtilities"], div[class*="headerUtilities"]');
+    const logBtn = document.querySelector('button[class*="sessionLogButton"], button[class*="nL4_yW_sessionLogButton"]');
+    if (!utils) return null;
+    const btn = document.createElement('button');
+    btn.className = 'dsh-header-fold-btn';
+    btn.setAttribute('aria-label', '收起/展开输入框');
+    btn.innerHTML = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><line x1="3" y1="18" x2="21" y2="18"></line><polyline points="6 9 12 15 18 9"></polyline></svg>';
+    // 插到 session 下载按钮左侧（紧邻原生工具钮）
+    if (logBtn && logBtn.parentElement === utils) utils.insertBefore(btn, logBtn);
+    else utils.appendChild(btn);
+    return btn;
+  };
+  const isCollapsed = () => document.body.classList.contains('dsh-composer-collapsed');
+  const readPref = () => { try { return localStorage.getItem(LS_KEY) === '1'; } catch { return false; } };
+
+  const ensureBar = () => {
+    if (bar && document.body.contains(bar)) return bar;
+    const seat = document.querySelector('div[class*="composerSeat"]');
+    const scrollBody = seat ? seat.parentElement : null;
+    if (!scrollBody) return null;
+    bar = document.createElement('div');
+    bar.className = 'dsh-composer-collapsed-bar';
+    bar.textContent = '\u270f\ufe0f 点击输入消息…';
+    scrollBody.insertBefore(bar, seat);
+    bar.addEventListener('click', () => setCollapsed(false));
+    return bar;
+  };
+  const removeBar = () => { if (bar) { try { bar.remove(); } catch {} bar = null; } };
+
+  // 折叠态切换：改 class + 记忆 + 图标 + 细条显隐
+  const setCollapsed = (collapsed) => {
+    if (busy) return;
+    busy = true;
+    try {
+      if (isCollapsed() !== collapsed) {
+        document.body.classList.toggle('dsh-composer-collapsed', collapsed);
+        try { localStorage.setItem(LS_KEY, collapsed ? '1' : '0'); } catch {}
+        updateButton(collapsed);
+      }
+      if (collapsed) ensureBar(); else removeBar();
+    } finally { busy = false; }
+  };
+
+  // 更新顶部折叠钮图标（仅内容变化时写入，避免无谓 DOM 抖动）
+  const updateButton = (collapsed) => {
+    const btn = getFoldBtn();
+    if (!btn) return;
+    btn.title = collapsed ? '展开输入框' : '收起输入框，最大化对话阅读区';
+    const icon = collapsed
+      ? '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="2" y="6" width="20" height="12" rx="2"></rect><line x1="6" y1="10" x2="6.01" y2="10"></line><line x1="10" y1="10" x2="10.01" y2="10"></line><line x1="14" y1="10" x2="14.01" y2="10"></line><line x1="6" y1="14" x2="10" y2="14"></line><line x1="14" y1="14" x2="18" y2="14"></line></svg>'
+      : '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><line x1="3" y1="18" x2="21" y2="18"></line><polyline points="6 9 12 15 18 9"></polyline></svg>';
+    const existing = btn.querySelector('svg');
+    if (!existing || existing.outerHTML !== icon) btn.innerHTML = icon;
+  };
+
+  // 有输入区（对话页）：确保按钮可用 + 按记忆恢复折叠态
+  const handleSeatPresent = () => {
+    const btn = getFoldBtn();
+    if (!btn) return false;
+    btn.style.display = 'inline-flex';
+    if (!btn._dshFoldWired) {
+      btn._dshFoldWired = true;
+      btn.onclick = (e) => { e.stopPropagation(); setCollapsed(!isCollapsed()); };
+    }
+    document.body.classList.add('dsh-composer-active');
+    const want = readPref();
+    if (want !== isCollapsed()) {
+      setCollapsed(want);
+    } else {
+      updateButton(isCollapsed());
+    }
+    return true;
+  };
+
+  // 无输入区：隐藏折叠钮与细条（保留记忆）
+  const handleSeatAbsent = () => {
+    const btn = getFoldBtn();
+    if (btn) { btn.style.display = 'none'; }
+    document.body.classList.remove('dsh-composer-active');
+    removeBar();
+  };
+
+  // 单次检测（observer 回调 / 初始）。
+  // 仅当"是否有输入区"或"折叠钮是否已注入"发生变化时才全量处理，
+  // 避免消息流式输出等高频 DOM 变化下 observer 反复执行注入/状态恢复。
+  // busy 锁 + 注入幂等共同防止自触发循环。
+  const onComposerChange = () => {
+    const hasSeat = !!document.querySelector('div[class*="composerSeat"]');
+    const hasBtn = !!document.querySelector('.dsh-header-fold-btn');
+    if (busy) return;
+    if (hasSeat === lastHadSeat && hasSeat === hasBtn) return; // 状态与注入都没变：忽略
+    busy = true;
+    try {
+      if (hasSeat) {
+        lastHadSeat = handleSeatPresent(); // 内部幂等；工具栏未就绪返回 false，等下次再试
+      } else {
+        handleSeatAbsent();
+        lastHadSeat = false;
+      }
+    } finally { busy = false; }
+  };
+
+  // observer：断开→处理→重连，杜绝"处理里改 DOM 再触发自己"的死循环
+  const observer = new MutationObserver(() => {
+    observer.disconnect();
+    try { onComposerChange(); } finally { observer.observe(document.body, { childList: true, subtree: true }); }
+  });
+  observer.observe(document.body, { childList: true, subtree: true });
+  onComposerChange(); // 初始检查
+}
+
+
 function apply(ctx) {
   window.__dshClientCtx = ctx;
   const rpcCall = (endpoint, payload, signal) =>
@@ -4575,6 +4896,9 @@ function apply(ctx) {
   window.__dshOpenRemoteWorkspaceModal = (onAdded, onPickDirect, onCancel) =>
     showRemoteWorkspaceDialog(rpcCall, onAdded, ctx, onPickDirect, onCancel);
 
+  setupIosKeyboardAdapter();
+  setupComposerCollapse();
+
   setupMobileExperience(rpcCall, ctx);
 
   const injected = () => ({ pick: () => ctx.workspaces?.pickDirectory?.() });

package/client/mobile-styles.js

@@ -394,6 +394,74 @@ export const MOBILE_STYLES_CSS = `
         padding-bottom: max(16px, env(safe-area-inset-bottom)) !important;
       }
 
+      /* ── 移动端输入框折叠模式（body.dsh-composer-collapsed）──────────────
+         折叠后隐藏吸底输入区，让消息 viewArea 自动伸展到全高，最大化阅读区。
+         入口：聊天头部工具栏（Session 下载钮旁）的折叠按钮，或折叠态底部细输入条点它唤回。
+         状态持久化到 localStorage。 */
+      body.dsh-composer-collapsed div[class*="wSkVaW_composerSeat"] {
+        display: none !important;
+      }
+      body.dsh-composer-collapsed div[class*="wSkVaW_viewArea"] {
+        flex: 1 1 auto !important;
+        height: auto !important;
+        min-height: 0 !important;
+      }
+      /* 折叠时滚动区底部对齐 safe-area，避免内容被 iPhone 底部横条遮挡 */
+      body.dsh-composer-collapsed div[class*="wSkVaW_scrollBody"] {
+        padding-bottom: max(16px, env(safe-area-inset-bottom)) !important;
+      }
+
+      /* 折叠输入框按钮：注入在聊天头部工具栏（Session 下载钮旁），
+         与 DSH sessionLogButton 同规格（28px 圆形图标钮），视觉与原生一致 */
+      .dsh-header-fold-btn {
+        min-width: 28px !important;
+        width: 28px !important;
+        height: 28px !important;
+        padding: 0 !important;
+        border-radius: 50% !important;
+        display: inline-flex !important;
+        align-items: center !important;
+        justify-content: center !important;
+        flex-shrink: 0 !important;
+        border: 1px solid var(--dsw-alias-border-l2, rgba(0, 0, 0, 0.1)) !important;
+        background: var(--dsw-alias-bg-layer-2, rgba(0, 0, 0, 0.03)) !important;
+        color: var(--dsw-alias-label-secondary, #6b7280) !important;
+        cursor: pointer !important;
+        transition: opacity 0.15s !important;
+        box-shadow: 0 1px 2px rgba(0, 0, 0, 0.03) !important;
+        -webkit-tap-highlight-color: transparent !important;
+      }
+      .dsh-header-fold-btn:active {
+        opacity: 0.6 !important;
+      }
+      .dsh-header-fold-btn svg {
+        width: 15px !important;
+        height: 15px !important;
+      }
+
+      /* 折叠态底部细输入条：点击唤起输入框（位于原输入区位置，sticky 底部） */
+      .dsh-composer-collapsed-bar {
+        display: none !important;
+        position: sticky !important;
+        bottom: 0 !important;
+        margin: 8px 12px max(8px, env(safe-area-inset-bottom, 0px)) 12px !important;
+        padding: 11px 16px !important;
+        border-radius: 22px !important;
+        background: var(--dsw-alias-bg-layer-2, #f4f4f7) !important;
+        border: 1px solid rgba(0, 0, 0, 0.07) !important;
+        color: var(--dsw-alias-label-tertiary, #8b93a1) !important;
+        font-size: 13.5px !important;
+        line-height: 1.4 !important;
+        cursor: pointer !important;
+        box-shadow: 0 2px 10px rgba(0, 0, 0, 0.04) !important;
+        -webkit-tap-highlight-color: transparent !important;
+        z-index: 40 !important;
+        box-sizing: border-box !important;
+      }
+      body.dsh-composer-collapsed .dsh-composer-collapsed-bar {
+        display: block !important;
+      }
+
       /* 输入卡片：DeepSeek App 圆角大胶囊造型 */
       div[class*="uV2eYG_card"] {
         border-radius: 26px !important;

package/lib/auth/manager.js

@@ -3,6 +3,9 @@
 
 import { randomBytes, pbkdf2 as pbkdf2Callback, timingSafeEqual } from 'node:crypto'
 import { promisify } from 'node:util'
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join, dirname } from 'node:path'
 
 const pbkdf2Async = promisify(pbkdf2Callback)
 
@@ -18,6 +21,50 @@ const LEGACY_PBKDF2_ITERATIONS = 10000
 const PBKDF2_KEYLEN = 32
 const PBKDF2_PREFIX = 'pbkdf2-sha256$'
 
+// 登录 Session 持久化：宿主（dsh web 进程）重启后，已登录设备免重输访问密码。
+// 落盘文件与 config.json 同目录（~/.dsh/dsh-bridge/sessions.json，权限 600）；
+// sessionToken 与 secretToken 同级机密（48 位随机 hex），同目录存储不扩大暴露面。
+// 改密码 / 切模式 / 重新生成 token 时的 sessions.clear() 会同步清空文件（吊销语义保持）；
+// 文件缺失或损坏时安全降级为空 Map（等价于旧行为：重新登录一次）。
+// 路径可通过构造参数 sessionsFile 注入（测试传临时目录，避免读写真实环境）。
+const DEFAULT_SESSIONS_FILE = join(
+  process.env.DSH_HOME ?? join(homedir(), '.dsh'),
+  'dsh-bridge', 'sessions.json'
+)
+
+class PersistentSessionMap extends Map {
+  /** @param {string} file 会话落盘文件路径 */
+  constructor(file) {
+    super()
+    this._file = file
+  }
+  _flush() {
+    try {
+      mkdirSync(dirname(this._file), { recursive: true })
+      writeFileSync(this._file, JSON.stringify([...this.entries()]), { mode: 0o600 })
+    } catch { /* 落盘失败降级为纯内存语义，不阻断认证流程 */ }
+  }
+  static load(file) {
+    const m = new PersistentSessionMap(file)
+    try {
+      const arr = JSON.parse(readFileSync(file, 'utf8'))
+      if (Array.isArray(arr)) {
+        const now = Date.now()
+        for (const [k, v] of arr) {
+          // 只恢复结构合法且未过期的会话
+          if (typeof k === 'string' && v && Number.isFinite(v.expiresAt) && v.expiresAt > now) {
+            Map.prototype.set.call(m, k, { createdAt: Number(v.createdAt) || 0, expiresAt: Number(v.expiresAt) })
+          }
+        }
+      }
+    } catch { /* 文件缺失/损坏：降级为空 */ }
+    return m
+  }
+  set(k, v) { super.set(k, v); this._flush(); return this }
+  delete(k) { const r = super.delete(k); if (r) this._flush(); return r }
+  clear() { super.clear(); this._flush() }
+}
+
 export class AuthManager {
   /**
    * @param {object} opts
@@ -30,9 +77,10 @@ export class AuthManager {
    * @param {boolean} [opts.config.allowLoopback=true]
    * @param {boolean} [opts.config.adminProtection=true] 管理保护独立开关：关闭后管理操作免 adminToken
    * @param {(patch: object) => Promise<void>|void} [opts.onPersist]
+   * @param {string} [opts.sessionsFile] 登录会话持久化文件路径（默认 ~/.dsh/dsh-bridge/sessions.json；测试注入临时目录）
    * @param {object} [opts.logger]
    */
-  constructor({ config = {}, onPersist, logger = console } = {}) {
+  constructor({ config = {}, onPersist, sessionsFile, logger = console } = {}) {
     this.logger = logger
     this.onPersist = onPersist
 
@@ -51,8 +99,9 @@ export class AuthManager {
     // 内部隧道专用鉴权密钥（内存生成，用于辨别本地自建隧道转发流量与真实本机访问）
     this.internalTunnelSecret = randomBytes(24).toString('hex')
 
-    // Session 内存存储：sessionToken -> { createdAt, expiresAt }
-    this.sessions = new Map()
+    // Session 存储与重启恢复：sessionToken -> { createdAt, expiresAt }
+    // 持久化到 sessions.json（路径可经 sessionsFile 注入），宿主（dsh web）重启后已登录设备免重输访问密码
+    this.sessions = PersistentSessionMap.load(sessionsFile ?? DEFAULT_SESSIONS_FILE)
     // 管理员解锁 Session 内存存储：adminToken -> { createdAt, expiresAt }
     this.adminSessions = new Map()
     // 防暴力破解：ip -> { failedCount, lockUntil }
@@ -540,7 +589,8 @@ export class AuthManager {
 
   dispose() {
     clearInterval(this._cleanupTimer)
-    this.sessions.clear()
+    // 不清空 sessions：进程退出时内存随进程自然消失；
+    // 若此处 clear() 会把持久化文件一并清空，宿主重启后已登录设备仍会全部丢失
     this.rateLimits.clear()
   }
 }

package/lib/bridge-rpc-constants.js

@@ -16,6 +16,7 @@ export const BRIDGE_ENDPOINTS = {
   setLanIp: 'setLanIp',
   checkVersion: 'checkVersion',
   upgradePlugin: 'upgradePlugin',
+  upgradeDsh: 'upgradeDsh',
   restartDsh: 'restartDsh',
   exportBackup: 'exportBackup',
   importBackup: 'importBackup',

package/lib/bridge-rpc.js

@@ -289,6 +289,14 @@ export function installBridgeRpc(ctx, { service, authManager, platformManager, l
           return ok(result);
         }
 
+        if (endpoint === BRIDGE_ENDPOINTS.upgradeDsh) {
+          const adminErr = checkAdminAuth(authManager, payload, { requireConfigured: true });
+          if (adminErr) return adminErr;
+
+          const result = await service.upgradeDsh(payload);
+          return ok(result);
+        }
+
         if (endpoint === BRIDGE_ENDPOINTS.restartDsh) {
           const adminErr = checkAdminAuth(authManager, payload, { requireConfigured: true });
           if (adminErr) return adminErr;

package/lib/index.js

@@ -10,7 +10,7 @@ import { get as httpsGet } from 'node:https';
 import { networkInterfaces, homedir, totalmem, freemem, cpus, loadavg, platform, arch, release, hostname, uptime } from 'node:os';
 import { join, dirname, basename, resolve, normalize } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { readFileSync, existsSync } from 'node:fs';
+import { readFileSync, existsSync, realpathSync } from 'node:fs';
 import { readFile, writeFile, mkdir, unlink, readdir, stat, access } from 'node:fs/promises';
 import { spawn } from 'node:child_process';
 import { createHash, createHmac } from 'node:crypto';
@@ -1033,6 +1033,63 @@ class BridgeService {
   }
 
   // 检查 npm 上是否有新版本（优先国内高速镜像 npmmirror，降级 npmjs 官方源）
+  // 探测 DSH 宿主 CLI 的安装形态，判断能否通过"npm 全局升级"自动更新。
+  // 仅当 dsh 命令 resolve 到当前 node 同 prefix 的 node_modules/@deepseek-ai/dsh（标准 npm 全局安装）
+  // 时才允许一键升级；pnpm / 源码 / Electron 加壳等形态无法用 npm -g 升级，仅返回提示。
+  // @returns {Promise<{upgradable:boolean, rootGlobal?:string, dshRealPath?:string, reason?:string}>}
+  async _probeDshUpgrade() {
+    const isWin = process.platform === 'win32';
+    const nodeDir = dirname(process.execPath);
+    const existingPath = process.env.PATH || process.env.Path || '';
+    const extraPaths = isWin ? [nodeDir] : [nodeDir, '/opt/homebrew/bin', '/opt/homebrew/sbin', '/usr/local/bin', '/usr/bin', '/bin', join(homedir(), '.local/bin'), join(homedir(), '.npm-global/bin')];
+    const separator = isWin ? ';' : ':';
+    const augmentedEnv = { ...process.env, PATH: [...extraPaths, existingPath].filter(Boolean).join(separator) };
+    if (isWin) augmentedEnv.Path = augmentedEnv.PATH;
+
+    const runCmd = (cmd, args) => new Promise((resolve) => {
+      let cp;
+      try {
+        cp = spawn(cmd, args, { windowsHide: true, shell: true, env: augmentedEnv, timeout: 8000 });
+      } catch {
+        return resolve(null);
+      }
+      let stdout = ''; let stderr = '';
+      cp.stdout?.on('data', (d) => { stdout += d.toString(); });
+      cp.stderr?.on('data', (d) => { stderr += d.toString(); });
+      cp.on('error', () => resolve(null));
+      cp.on('close', (code) => {
+        if (code === 0 && stdout.trim()) resolve(stdout.trim().split(/\r?\n/)[0]);
+        else resolve(null);
+      });
+    });
+
+    try {
+      // 1. 找 dsh bin 的真实路径（Windows which 不存在，用 where）
+      const dshBin = await runCmd(isWin ? 'where' : 'which', [isWin ? 'dsh.cmd' : 'dsh']);
+      if (!dshBin) {
+        return { upgradable: false, reason: '未找到 dsh 命令（可能通过源码/打包方式运行，非 npm 全局安装）' };
+      }
+      // realpath 在主进程内解析（子进程 node -e + shell 引号嵌套易出错）
+      let dshRealPath = dshBin;
+      try {
+        dshRealPath = realpathSync(dshBin) || dshBin;
+      } catch { /* 保留原始路径继续判断 */ }
+      // 2. 当前 node 对应的全局 node_modules 根
+      const globalNodeModules = await runCmd('npm', ['root', '-g']);
+      const rootGlobal = globalNodeModules ? dirname(globalNodeModules) : dirname(nodeDir);
+      const marker = join('node_modules', '@deepseek-ai', 'dsh');
+      if (dshRealPath.includes(marker) && (dshRealPath.startsWith(rootGlobal) || dshRealPath.includes('node-v') && dshRealPath.includes('lib'))) {
+        return { upgradable: true, rootGlobal, dshRealPath };
+      }
+      return {
+        upgradable: false,
+        reason: 'dsh 非标准 npm 全局安装（Electron/打包/源码/pnpm 等），无法自动升级；请按官方渠道手动更新',
+      };
+    } catch {
+      return { upgradable: false, reason: '探测 dsh 安装形态失败，请按官方渠道手动更新' };
+    }
+  }
+
   async checkVersion() {
     // TTL 缓存：窗口内直接返回上次结果，避免重复请求外网 registry
     if (this._versionCheckCache && Date.now() - this._versionCheckCachedAt < this._versionCheckTtlMs) {
@@ -1062,18 +1119,27 @@ class BridgeService {
     try {
       const latestData = await fetchRegistry('https://registry.npmmirror.com/@wenbin_wb/dsh-bridge/latest', 3500)
         .catch(() => fetchRegistry('https://registry.npmjs.org/@wenbin_wb/dsh-bridge/latest', 5000));
+      // DSH 宿主 CLI 最新版本（npm 全局包 @deepseek-ai/dsh；与插件同源镜像，失败不阻断面板）
+      const dshLatestData = await fetchRegistry('https://registry.npmmirror.com/@deepseek-ai/dsh/latest', 3500)
+        .catch(() => fetchRegistry('https://registry.npmjs.org/@deepseek-ai/dsh/latest', 5000))
+        .catch(() => null);
+      // 安装形态探测（决定是否给"一键升级 DSH"按钮）：npm 全局可升级，加壳/源码仅提醒
+      const dshProbe = await this._probeDshUpgrade();
       const result = {
         current: VERSION,
         latest: latestData?.version ?? null,
         releaseNotes: latestData?.releaseNotes ?? null,
         dshVersion: await this.getDshVersion(),
+        dshLatest: dshLatestData?.version ?? null,
+        dshUpgradable: dshProbe.upgradable,
+        dshUpgradeReason: dshProbe.reason || '',
       };
       this._versionCheckCache = result;
       this._versionCheckCachedAt = Date.now();
       return result;
     } catch (e) {
       // 失败不缓存（让下次调用可重试），但记录便于诊断
-      return { current: VERSION, latest: null, error: e.message ?? '检查失败', dshVersion: await this.getDshVersion() };
+      return { current: VERSION, latest: null, error: e.message ?? '检查失败', dshVersion: await this.getDshVersion(), dshLatest: null, dshUpgradable: false, dshUpgradeReason: '' };
     }
   }
 
@@ -1165,6 +1231,96 @@ class BridgeService {
     return { ok: false, error: lastError?.message ?? '升级命令执行失败', version: targetVersion };
   }
 
+  // 一键升级 DSH 宿主 CLI（npm 全局包 @deepseek-ai/dsh）。
+  // 升级的是"与当前 node 配对"的全局 prefix（dsh 命令所在目录），完成后需重启 DSH 生效。
+  async upgradeDsh({ version } = {}) {
+    const targetVersion = version ? String(version).trim() : 'latest';
+    // 严格 SemVer 白名单校验（dsh 用 rc 版本号，如 0.1.2-rc.1）
+    if (!/^(latest|\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?)$/.test(targetVersion)) {
+      return { ok: false, error: `非法的版本号格式: ${targetVersion}`, version: targetVersion };
+    }
+
+    // 安装形态守卫：非标准 npm 全局安装（Electron/源码/pnpm 等）拒绝自动升级，
+    // 避免"装一份不生效的新副本、误导用户以为升级成功"
+    const probe = await this._probeDshUpgrade();
+    if (!probe.upgradable) {
+      return {
+        ok: false,
+        error: probe.reason || '当前 DSH 为非 npm 全局安装，无法自动升级；请按官方渠道手动更新',
+        version: targetVersion,
+      };
+    }
+
+    const pkgSpec = `@deepseek-ai/dsh@${targetVersion}`;
+    const isWin = process.platform === 'win32';
+    const nodeDir = dirname(process.execPath);
+    const home = homedir();
+    const extraPaths = isWin ? [nodeDir] : [
+      nodeDir,
+      '/opt/homebrew/bin',
+      '/opt/homebrew/sbin',
+      '/usr/local/bin',
+      '/usr/bin',
+      '/bin',
+      join(home, '.nvm/current/bin'),
+      join(home, '.fnm/current/bin'),
+      join(home, '.local/bin'),
+      join(home, '.cargo/bin'),
+    ];
+    const separator = isWin ? ';' : ':';
+    const existingPath = process.env.PATH || process.env.Path || '';
+    const augmentedEnv = {
+      ...process.env,
+      PATH: [...extraPaths, existingPath].filter(Boolean).join(separator),
+    };
+    if (isWin) augmentedEnv.Path = augmentedEnv.PATH;
+
+    // 与当前 node 配对的 npm 绝对路径（保证装进 dsh 所在 prefix，而非 PATH 里其它 npm）
+    const siblingNpm = join(nodeDir, isWin ? 'npm.cmd' : 'npm');
+    const npmBin = existsSync(siblingNpm) ? siblingNpm : 'npm';
+    // 优先用探测到的全局 root（dsh 实际所在 prefix），其次 nodeDir 父目录
+    const globalRoot = probe.rootGlobal || dirname(nodeDir);
+
+    const tasks = [
+      { cmd: npmBin, args: ['install', '-g', '--prefix', globalRoot, pkgSpec] },
+      { cmd: npmBin, args: ['install', '-g', pkgSpec] },
+    ];
+
+    let lastError = null;
+    for (const task of tasks) {
+      try {
+        const res = await new Promise((resolve, reject) => {
+          let cp;
+          try {
+            cp = spawn(task.cmd, task.args, {
+              windowsHide: true,
+              shell: true,
+              env: augmentedEnv,
+              timeout: 180000,
+            });
+          } catch (spawnErr) {
+            return reject(spawnErr);
+          }
+          let stdout = '';
+          let stderr = '';
+          cp.stdout?.on('data', (d) => { stdout += d.toString(); });
+          cp.stderr?.on('data', (d) => { stderr += d.toString(); });
+          cp.on('error', reject);
+          cp.on('close', (code) => {
+            if (code === 0) resolve({ stdout, stderr });
+            else reject(new Error(stderr || stdout || `进程退出码 ${code}`));
+          });
+        });
+        const output = (res.stdout || res.stderr || '升级成功').trim().slice(-500);
+        this.logger?.info('dsh-bridge: DSH 升级命令成功: %s %s', task.cmd, task.args.join(' '));
+        return { ok: true, command: `${task.cmd} ${task.args.join(' ')}`, output, version: targetVersion };
+      } catch (err) {
+        lastError = err;
+      }
+    }
+    return { ok: false, error: lastError?.message ?? '升级命令执行失败', version: targetVersion };
+  }
+
   // 优雅重启 DSH 服务（支持守护进程自动拉起或独立派生子进程重启）
   async restartDsh() {
     this.logger?.info('收到 DSH 重启请求，正在调度重启...');

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@wenbin_wb/dsh-bridge",
-  "version": "2.10.7",
+  "version": "2.10.8",
   "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
-  "releaseNotes": "【v2.10.7】\n• 修复：Cloudflare 固定域名（Token 模式）隧道秒退（issue #35）——`--no-autoupdate` 参数位置修正（v2.10.6 引入），固定域名隧道现在可正常建立并保持；同时将 Incorrect Usage / 无效 Token 等确定性配置错误直接提示为配置错误，不再误判为\"意外退出\"退避重连 12 次\n• 优化：Cloudflare 固定域名配置区新增「查看申请与配置教程」入口（含账号注册、域名接入、创建隧道、绑定子域名到面板的完整图文步骤）",
+  "releaseNotes": "【v2.10.8】\n• 新增：登录 Session 持久化（#36）——宿主 dsh web 重启后已登录设备免重输访问密码，手机远程访问不再每天重登；改密码/切换模式仍同步吊销全部旧会话（安全语义保持）\n• 新增：设置页检测 DSH 宿主更新并支持一键升级（npm 全局安装形态）——发现新版黄色提示 + 一键升级按钮；非 npm 安装（源码/打包）仅提醒并给出官方升级方式\n• 修复：iOS Safari 键盘弹起时聊天输入框上下跳动——键盘弹起时固定输入框滚动容器高度，避免随键盘反复重排抖动\n• 新增：移动端输入框可折叠——聊天头部工具栏新增折叠按钮，收起输入框后消息阅读区最大化；底部保留「点击输入消息」细条一键唤回；折叠偏好跨会话记忆",
   "type": "module",
   "main": "lib/index.js",
   "exports": {