bothouse-dsh 0.1.61 → 0.1.63

package/collab/devices.html

@@ -72,6 +72,7 @@
         <div class="code" id="codeText">------</div>
         <p class="center muted" id="codeLeft"></p>
         <p class="center muted">在另一台电脑点「连到另一台电脑」，选这台电脑，输入上面的数字。只能用一次。</p>
+        <p class="center muted" id="phoneUrl" hidden></p>
         <div class="center"><button id="cancelCode">不连了</button></div>
       </div>
       <p class="err" id="hostErr"></p>
@@ -194,7 +195,11 @@ function hideCode(note) {
 $('newCode').onclick = async () => {
   $('hostErr').textContent = '';
   $('newCode').disabled = true;
-  try { const r = await post('api/pair/code'); showCode(r.code, r.expires_at); }
+  try {
+    const r = await post('api/pair/code'); showCode(r.code, r.expires_at);
+    // #1327: a phone in the same tailnet opens this address in its browser and types the number there.
+    $('phoneUrl').hidden = !r.listening; $('phoneUrl').textContent = r.listening ? `手机：开着 Tailscale，用浏览器打开 http://${r.listening}/ 输入数字` : '';
+  }
   catch (e) { $('hostErr').textContent = e.message; }
   finally { $('newCode').disabled = false; }
 };

package/collab/pairing.mjs

@@ -38,6 +38,11 @@ export const UNTIL_GRACE_MS = 10_000;
 export const REMOTE_PREFIX = '/collab/remote';
 // Marks a request the host listener authenticated with a device credential (plugin.mjs owner()).
 export const REMOTE_OWNER = Symbol('collab.remoteOwner');
+// #1327: a phone in the tailnet opens this machine's pairing port in a browser, types the same
+// number and keeps the device credential in this cookie (no DSH on the phone to forward for it).
+export const PAIR_COOKIE = 'dsh_pair';
+// 「记住这台手机」的 cookie 存活：浏览器允许的上限 400 天（RFC 6265bis Max-Age 上限）；踢掉即失效。
+const REMEMBER_COOKIE_S = 400 * 24 * 3600;
 
 const TAILSCALE_BINS = ['tailscale', '/opt/homebrew/bin/tailscale', '/usr/local/bin/tailscale', '/Applications/Tailscale.app/Contents/MacOS/Tailscale', 'C:\\Program Files\\Tailscale\\tailscale.exe'];
 // 沿用 plugin.mjs MAX_BODY（256 KiB）。
@@ -136,7 +141,7 @@ export class PairHost {
    * @param {{ code: string, mode: string, name: string, address?: string, duration_ms?: number|null }} claim
    * @returns {{ token: string, device: object }}
    */
-  claim({ code, mode, name, address, duration_ms }) {
+  claim({ code, mode, name, address, duration_ms, kind }) {
     if (!MODES.includes(mode)) throw new PairError('mode', '连接方式只能是「临时」或「记住这台电脑」');
     const duration = tempDuration(mode, duration_ms);
     if (this.code === undefined) throw new PairError('no-code', '那台电脑现在没有在等配对，请在那台电脑上点「让别的电脑连我」');
@@ -152,8 +157,8 @@ export class PairHost {
     const token = randomBytes(32).toString('base64url');
     const now = this.now();
     const device = {
-      id: randomUUID(), name: String(name ?? '').trim().slice(0, 80) || '另一台电脑', address: String(address ?? ''),
-      mode, token_hash: sha256(token).toString('hex'), created_at: now, last_seen: now,
+      id: randomUUID(), name: String(name ?? '').trim().slice(0, 80) || (kind === 'browser' ? '手机浏览器' : '另一台电脑'), address: String(address ?? ''),
+      kind: kind === 'browser' ? 'browser' : 'dsh', mode, token_hash: sha256(token).toString('hex'), created_at: now, last_seen: now,
       expires_at: duration === null ? null : now + duration,
     };
     this.devices.set(device.id, device);
@@ -212,11 +217,11 @@ export class PairHost {
   // Same clock and length the number itself uses (a constructor may override codeTtl in tests).
   kickGrace() { return this.lastRevokeAt !== undefined && this.now() - this.lastRevokeAt < this.codeTtl; }
 
-  view(d) { return { id: d.id, name: d.name, address: d.address, mode: d.mode, created_at: d.created_at, last_seen: d.last_seen, expires_at: d.expires_at }; }
+  view(d) { return { id: d.id, name: d.name, address: d.address, kind: d.kind ?? 'dsh', mode: d.mode, created_at: d.created_at, last_seen: d.last_seen, expires_at: d.expires_at }; }
 
   save() {
     saveJSON(this.file, { devices: [...this.devices.values()].filter(d => d.mode === 'remember')
-      .map(({ id, name, address, token_hash, created_at, last_seen }) => ({ id, name, address, token_hash, created_at, last_seen })) });
+      .map(({ id, name, address, kind, token_hash, created_at, last_seen }) => ({ id, name, address, kind, token_hash, created_at, last_seen })) });
   }
 }
 
@@ -515,6 +520,87 @@ function bearer(req) {
   return m === null ? undefined : m[1];
 }
 
+/** The phone's device credential from its cookie, if it sent one. */
+export function cookieToken(req) {
+  for (const part of String(req.headers.cookie ?? '').split(';')) {
+    const i = part.indexOf('=');
+    if (i > 0 && part.slice(0, i).trim() === PAIR_COOKIE) return decodeURIComponent(part.slice(i + 1).trim());
+  }
+  return undefined;
+}
+
+/**
+ * HttpOnly + SameSite=Strict; no Secure because the tailnet carries plain http (WireGuard already
+ * encrypts it). Remembered phones keep it across browser restarts, temporary ones only for the
+ * browser session (or the custom length).
+ */
+export function pairCookie(token, device) {
+  const base = `${PAIR_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Strict`;
+  if (device.mode === 'remember') return `${base}; Max-Age=${REMEMBER_COOKIE_S}`;
+  if (device.expires_at !== null) return `${base}; Max-Age=${Math.max(1, Math.round((device.expires_at - device.created_at) / 1000))}`;
+  return base;
+}
+const CLEAR_COOKIE = `${PAIR_COOKIE}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0`;
+
+const wantsHTML = req => req.method === 'GET' && String(req.headers.accept ?? '').includes('text/html');
+
+/** The number page a phone sees at http://<tailnet address>:3082/. Plain on purpose (#1327 范围收窄). */
+export function phonePairPage({ name, kicked = false }) {
+  const esc = s => String(s).replace(/[&<>"]/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' })[c]);
+  const note = kicked ? '<p id="note">这台手机已被那台电脑断开。要再看，请在那台电脑上重新生成数字，在这里输入。</p>' : '';
+  return `<!doctype html><html lang="zh-CN"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>连到 ${esc(name)}</title>
+<style>:root{color-scheme:light dark}body{font:16px/1.6 -apple-system,"PingFang SC",sans-serif;margin:0;padding:24px 16px;max-width:420px;margin-inline:auto}input[type=text]{box-sizing:border-box;width:100%;font-size:28px;letter-spacing:6px;text-align:center;padding:10px}button{width:100%;font-size:18px;padding:12px;margin-top:12px}#msg{min-height:1.6em;color:#c0392b}label{display:block;margin-top:12px}</style>
+<body><h1 style="font-size:20px">连到 ${esc(name)}</h1>${note}
+<p>在那台电脑的「已连接的设备」里点「让别的电脑连我」，把显示的 6 位数字输到这里。</p>
+<form id="f"><input id="code" type="text" inputmode="numeric" autocomplete="one-time-code" maxlength="7" placeholder="000000" required>
+<label><input id="remember" type="checkbox"> 记住这台手机（不勾就是临时，关掉浏览器就断）</label>
+<button type="submit">连接</button><p id="msg" role="alert"></p></form>
+<script>
+document.getElementById('f').addEventListener('submit', async e => {
+  e.preventDefault();
+  const msg = document.getElementById('msg');
+  msg.textContent = '';
+  try {
+    const r = await fetch('/collab/pair/browser', { method: 'POST', headers: { 'content-type': 'application/json' }, credentials: 'same-origin',
+      body: JSON.stringify({ code: document.getElementById('code').value, remember: document.getElementById('remember').checked }) });
+    const j = await r.json().catch(() => ({}));
+    if (r.ok) { location.href = '/collab'; return; }
+    msg.textContent = j.error || ('连接失败（' + r.status + '）');
+  } catch { msg.textContent = '连不上那台电脑，请确认手机的 Tailscale 开着'; }
+});
+</script></body></html>`;
+}
+
+// Added to pages a phone opens: when the host kicks it, say so in words instead of a page that
+// quietly stops updating. Asks the same whoami the controller DSH asks, at its heartbeat pace.
+const KICK_WATCH = `<script>(()=>{const t=setInterval(async()=>{let r;try{r=await fetch('/collab/pair/whoami',{credentials:'same-origin',cache:'no-store'})}catch{return}if(r.status!==401)return;clearInterval(t);document.body.innerHTML='<div style="font:16px/1.6 -apple-system,sans-serif;padding:24px 16px"><p>这台手机已被那台电脑断开。</p><p><a href="/">重新输数字连接</a></p></div>'},${ALIVE_EVERY_MS})})();</script>`;
+
+/** Append a snippet to an HTML response the route writes (only HTML; streams and JSON pass). */
+function withHTMLTail(res, tail) {
+  const { writeHead, write, end } = res;
+  let html = false;
+  const chunks = [];
+  res.writeHead = function (status, ...args) {
+    const headers = args.find(a => a !== null && typeof a === 'object' && !Array.isArray(a));
+    const type = String(headers?.['content-type'] ?? headers?.['Content-Type'] ?? res.getHeader('content-type') ?? '');
+    html = type.includes('text/html');
+    if (html) { if (headers) { delete headers['content-length']; delete headers['Content-Length']; } res.removeHeader('content-length'); }
+    return writeHead.call(this, status, ...args);
+  };
+  res.write = function (chunk, ...rest) {
+    if (!html) return write.call(this, chunk, ...rest);
+    chunks.push(Buffer.from(chunk));
+    return true;
+  };
+  res.end = function (chunk, ...rest) {
+    if (!html) return end.call(this, chunk, ...rest);
+    if (chunk !== undefined && chunk !== null && typeof chunk !== 'function') chunks.push(Buffer.from(chunk));
+    const body = Buffer.concat(chunks).toString('utf8');
+    const i = body.lastIndexOf('</body>');
+    return end.call(this, i < 0 ? body + tail : body.slice(0, i) + tail + body.slice(i));
+  };
+}
+
 /**
  * Host listener request handler: pairing endpoints for anyone in the tailnet, everything else
  * under /collab only with a device credential, handed to the plugin's own route as the owner.
@@ -529,13 +615,30 @@ export function hostHandler({ host, name, route, whois = whoisName, allowLoopbac
       if (url.pathname === '/collab/pair/hello' && req.method === 'GET') {
         return sendJSON(res, 200, { app: 'dsh-collab', name, waiting: host.codeLive() });
       }
+      // #1327: a phone browser pairs here directly and keeps the credential as a cookie.
+      if (url.pathname === '/collab/pair/browser' && req.method === 'POST') {
+        const body = await readBody(req);
+        const named = isTailnetAddress(peer) ? await whois(String(peer).replace(/^::ffff:/, '')) : undefined;
+        const { token, device } = host.claim({ code: body?.code, mode: body?.remember === true ? 'remember' : 'temp', name: named, address: peer, kind: 'browser' });
+        res.setHeader('set-cookie', pairCookie(token, device));
+        return sendJSON(res, 200, { ok: true, device, host_name: name, to: '/collab' });
+      }
       if (url.pathname === '/collab/pair/claim' && req.method === 'POST') {
         const body = await readBody(req);
         const named = isTailnetAddress(peer) ? await whois(String(peer).replace(/^::ffff:/, '')) : undefined;
         const { token, device } = host.claim({ code: body?.code, mode: body?.mode, name: named || body?.name, address: peer, duration_ms: body?.duration_ms });
         return sendJSON(res, 200, { token, device, host_name: name });
       }
-      const device = host.verify(bearer(req));
+      const fromCookie = bearer(req) === undefined ? cookieToken(req) : undefined;
+      const device = host.verify(bearer(req) ?? fromCookie);
+      if (url.pathname === '/' && req.method === 'GET') {
+        if (device !== undefined) { res.writeHead(302, { location: '/collab', 'cache-control': 'no-store' }); return res.end(); }
+        // A cookie this machine no longer knows: the phone was kicked (or its time ran out).
+        const headers = { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' };
+        if (fromCookie !== undefined) headers['set-cookie'] = CLEAR_COOKIE;
+        res.writeHead(200, headers);
+        return res.end(phonePairPage({ name, kicked: fromCookie !== undefined }));
+      }
       if (url.pathname === '/collab/pair/whoami' && req.method === 'GET') {
         // Answers with the device's own view, so a controller whose link was kicked can tell
         // "revoked" from "that machine is off". Same 401 shape as every other refused request.
@@ -550,9 +653,15 @@ export function hostHandler({ host, name, route, whois = whoisName, allowLoopbac
         return sendJSON(res, 200, { ok: true });
       }
       if (device === undefined) {
+        // A phone opening a page without (or with a dead) credential goes to the number page.
+        if (wantsHTML(req) && bearer(req) === undefined) { res.writeHead(302, { location: '/', 'cache-control': 'no-store' }); return res.end(); }
         res.writeHead(401, { 'content-type': 'application/json; charset=utf-8', 'x-collab-pair': 'revoked' });
         return res.end(JSON.stringify({ error: 'device not paired', code: 'revoked' }));
       }
+      // The cookie rides along on any same-site request; writes must come from this origin's pages.
+      if (fromCookie !== undefined && req.method !== 'GET' && req.method !== 'HEAD' && req.headers.origin !== undefined && req.headers.origin !== `http://${req.headers.host}`) {
+        return sendJSON(res, 403, { error: 'cross-origin request refused' });
+      }
       // Pairing management stays with the person at this machine.
       if (url.pathname.startsWith('/collab/api/pair') || url.pathname.startsWith('/collab/api/remote') || url.pathname.startsWith(`${REMOTE_PREFIX}/`) || url.pathname === '/collab/devices') {
         return sendJSON(res, 403, { error: '配对和设备管理只能在这台电脑上操作' });
@@ -560,6 +669,7 @@ export function hostHandler({ host, name, route, whois = whoisName, allowLoopbac
       if (url.pathname !== '/collab' && !url.pathname.startsWith('/collab/')) return sendJSON(res, 404, { error: 'not found' });
       req[REMOTE_OWNER] = true;
       host.hold(device.id, res);
+      if (fromCookie !== undefined && req.method === 'GET') withHTMLTail(res, KICK_WATCH);
       return await route(req, res);
     } catch (err) {
       if (err instanceof PairError) return sendJSON(res, PAIR_STATUS[err.code] ?? 400, { error: err.message, code: err.code });

package/collab/panel.mjs

@@ -83,13 +83,22 @@ const escapeHTML = v => String(v).replace(/[&<>"]/g, c => ({ '&': '&amp;', '<':
  */
 function sendNotice(res, status, reason, help) {
   res.writeHead(status, { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' });
+  // #579: same look as the panel itself (bridge/web/src/index.css --ui-*): white canvas, 12px card
+  // with a 1px hairline, ink ramp, and the same values again for dark mode.
   res.end(`<!doctype html><meta charset="utf-8"><title>bothouse</title><meta name="color-scheme" content="light dark">`
-    + `<body style="font:14px/1.6 system-ui;padding:24px;max-width:560px;color:#666">`
-    + `<h3 style="margin:0 0 8px;font-size:16px;color:inherit">打不开 bothouse 面板</h3>`
-    + `<p style="margin:0 0 8px">${escapeHTML(reason)}</p>`
-    + (help ? `<p style="margin:0 0 16px">${escapeHTML(help)}</p>` : '')
-    + `<button type="button" onclick="location.reload()" style="font:inherit;padding:4px 14px;border-radius:6px;border:1px solid #bbb;background:transparent;color:inherit;cursor:pointer">重试</button>`
-    + `</body>`);
+    + `<style>:root{--c:#fff;--s:#fff;--l:#e6e9ef;--i:#17181b;--m:#5a5a55;--a:#16a34a}`
+    + `@media (prefers-color-scheme:dark){:root{--c:#0d0d0f;--s:#16171a;--l:#2c2e34;--i:#eceef2;--m:#a5aab4;--a:#3dd68c}}`
+    + `body{margin:0;min-height:100vh;display:grid;place-items:center;background:var(--c);color:var(--m);font:14px/1.6 -apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC","Microsoft YaHei",sans-serif}`
+    + `main{box-sizing:border-box;width:min(520px,calc(100% - 32px));padding:24px;border:1px solid var(--l);border-radius:12px;background:var(--s)}`
+    + `h3{margin:0 0 8px;font-size:16px;font-weight:600;color:var(--i)}p{margin:0 0 8px}`
+    + `button{margin-top:8px;font:inherit;font-weight:500;height:36px;padding:0 14px;border-radius:8px;border:1px solid var(--l);background:var(--s);color:var(--i);cursor:pointer}`
+    + `button:hover{border-color:var(--m)}button:focus-visible{outline:2px solid var(--a);outline-offset:2px}</style>`
+    + `<main>`
+    + `<h3>打不开 bothouse 面板</h3>`
+    + `<p>${escapeHTML(reason)}</p>`
+    + (help ? `<p>${escapeHTML(help)}</p>` : '')
+    + `<button type="button" onclick="location.reload()">重试</button>`
+    + `</main>`);
 }
 
 /**

package/collab/plugin.mjs

@@ -9,7 +9,7 @@ import { createRequire } from 'node:module';
 import { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';
 import { isAbsolute, join } from 'node:path';
 import { pathToFileURL } from 'node:url';
-import { Store, CollabError, publicMessage } from './store.mjs';
+import { Store, CollabError, MAX_TEXT, publicMessage } from './store.mjs';
 import { LOCK_FILE, acquireLockWithOwner, clearLockOwner } from './instance-lock.mjs';
 import { localConnection, isLocalOwner, mountSharedHost, refuse } from './local-host.mjs';
 import { startBotPort } from './bot-port.mjs';
@@ -350,7 +350,10 @@ export async function apply(ctx, rawConfig) {
           workspace_path: store.workspacePath(r.id, config.workspacePath) })), members: hub.memberView(),
         thinking: Object.fromEntries([...hub.thinking].map(([k, v]) => [k, [...v]])),
         queued: Object.fromEntries([...hub.queued.keys()].map(r => [r, hub.queueView(r)])),
-        max_upload_bytes: config.maxUploadBytes });
+        max_upload_bytes: config.maxUploadBytes,
+        // #1445: the text cap in the unit the store compares (characters), so the panel checks a
+        // typed message against the same number instead of keeping a second copy of it.
+        max_text_chars: MAX_TEXT });
     }
     if (path === '/collab/api/events' && req.method === 'GET') return events(req, res);
     if (path === '/collab/api/lead' && req.method === 'GET') {

package/node_modules/bothouse-dsh-channels/client.js

@@ -1,4 +1,4 @@
-// dsh-client-source-sha256: 5037a02f49002644a36f24ed38c08bff4c5de75980c85a1224a90a82b5c82109
+// dsh-client-source-sha256: f5b1b355fea92d3cfa21a9764dfa14f60d869ca0934ae716cbb13a4d1f6df57d
 // dsh-style-sha256: 9ec6f9be158431d36e8c658f1b8def48515a0e80fe35ad14ccfa7202308bb0cd
 window.__ModuleLoader__.load({
  id: "bothouse-dsh-channels",
@@ -66,6 +66,18 @@ const attachmentUrl = (id) => `collab/api/attachments/${encodeURIComponent(id)}`
 const MAX_MESSAGE_BODY = 8388608;
 /** #197: fallback when the service does not report its cap (`max_upload_bytes`); matches collab's DEFAULT_MAX_UPLOAD_BYTES. */
 const DEFAULT_MAX_UPLOAD_BYTES = 1073741824;
+/**
+* #1445: fallback text cap when the service does not report `max_text_chars`.
+* 来源：dsh/collab/store.mjs:8 `MAX_TEXT = 128 * 1024`，同一数值也由 `/collab/api/state` 的
+* `max_text_chars` 回传；这份抄写只覆盖还没有该字段的旧宿主。
+*/
+const DEFAULT_MAX_TEXT_CHARS = 131072;
+/**
+* #1445: whether the typed text alone exceeds the service's character cap. The service compares
+* `text.length` against MAX_TEXT (collab/store.mjs), so this must count characters too — a byte
+* count would let 131072 Chinese characters (about 400 KB) through to a `too-long` refusal.
+*/
+const textTooLarge = (text, maxChars) => text.length > maxChars;
 /** Whether a message with these attachments would exceed the server's body cap (checked before sending). */
 const messageTooLarge = (text, attachments) => new TextEncoder().encode(JSON.stringify({
 	text,
@@ -121,7 +133,8 @@ const INITIAL = {
 	taskChat: void 0,
 	hasMoreOlder: false,
 	outbox: [],
-	maxUploadBytes: DEFAULT_MAX_UPLOAD_BYTES
+	maxUploadBytes: DEFAULT_MAX_UPLOAD_BYTES,
+	maxTextChars: DEFAULT_MAX_TEXT_CHARS
 };
 /** Position of message `id` in rows ascending by id, or -1. */
 function indexOfId(rows, id) {
@@ -218,18 +231,20 @@ function memberNameRefused(name) {
 * @param t - the panel's dictionary, so an English UI stays English.
 * @param place - the field being edited when the action failed.
 * @param typed - the name the person typed, for the copy that names it.
+* @param limits - the caps the panel knows about, for the copy that quotes one back (#1445).
 * @returns one line to show under the form.
 */
-function errorText(error, t, place = "other", typed = "") {
+function errorText(error, t, place = "other", typed = "", limits = {}) {
 	const message = error instanceof Error ? error.message : String(error);
 	if (!(error instanceof ServiceError)) return message;
+	if (error.code === "too-long") return t("messageTooLarge", { limit: t("charCount", { count: limits.textChars ?? 131072 }) });
 	const code = error.code;
 	const name = place === "room" ? typed.trim().replace(/^#/, "") : typed.trim();
 	if (code === "conflict" && place === "room") return WORKSPACE_NAME.test(name) ? t("channelNameReserved", { name }) : t("channelNameTaken", { name });
 	if (code === "invalid" && place === "room") return t("channelNameInvalid");
 	if (code === "conflict" && place === "member") return t("memberNameTaken", { name });
 	if (code === "invalid" && place === "member" && memberNameRefused(name)) return t("memberNameInvalid");
-	return t("actionFailed", { message });
+	return place === "send" ? t("sendFailed", { message }) : t("actionFailed", { message });
 }
 function json(method, body) {
 	return {
@@ -303,6 +318,8 @@ function createChannelSource(transport) {
 	/** Unconfirmed messages for every room; the snapshot exposes the selected room's. */
 	/** #197: how big one attachment may be, as the service reported it (state) or the collab default. */
 	let uploadLimit = DEFAULT_MAX_UPLOAD_BYTES;
+	/** #1445: how many characters one message may hold, as `/collab/api/state` reported it (`max_text_chars`). */
+	let textLimit = DEFAULT_MAX_TEXT_CHARS;
 	let outbox = [];
 	/**
 	* Page-back request in flight per room, tagged with the ticket and the epoch
@@ -562,6 +579,7 @@ function createChannelSource(transport) {
 			const state = await request("collab/api/state", { signal: read.controller.signal });
 			if (!current()) return;
 			if (Number.isSafeInteger(state.max_upload_bytes) && (state.max_upload_bytes ?? 0) > 0) uploadLimit = state.max_upload_bytes;
+			if (Number.isSafeInteger(state.max_text_chars) && (state.max_text_chars ?? 0) > 0) textLimit = state.max_text_chars;
 			const remembered = previous.roomId === void 0 ? rememberedRoom() : void 0;
 			const roomId = state.rooms.some((r) => r.id === previous.roomId) ? previous.roomId : state.rooms.some((r) => r.id === remembered) ? remembered : state.rooms[0]?.id;
 			const rows = [];
@@ -631,6 +649,7 @@ function createChannelSource(transport) {
 				leadId: state.lead_id ?? null,
 				effectiveLeadId: state.effective_lead_id ?? state.lead_id ?? null,
 				maxUploadBytes: uploadLimit,
+				maxTextChars: textLimit,
 				tasks: keepBoard ? previous.tasks : [],
 				taskChat: keepBoard ? previous.taskChat : void 0,
 				outbox: outbox.filter((entry) => entry.roomId === roomId)
@@ -22329,6 +22348,10 @@ function ChannelsPage({ useChannels, selectRoom, send, uploadAttachment, reviewT
 		}));
 	};
 	const limit = state.maxUploadBytes ?? 1073741824;
+	/** #1445: the character cap the store enforces, read back from /state (MAX_TEXT there). */
+	const textLimit = state.maxTextChars ?? 131072;
+	/** #1445: a failure worded in the panel's language, quoting the caps this panel knows about. */
+	const failure = (error, place = "other", typed = "") => errorText(error, t, place, typed, { textChars: textLimit });
 	const attach = useComposerAttachments((picked) => {
 		const roomId = state.roomId;
 		if (roomId === void 0) return;
@@ -23045,7 +23068,7 @@ function ChannelsPage({ useChannels, selectRoom, send, uploadAttachment, reviewT
 		}, (error) => {
 			setErrors((previous) => ({
 				...previous,
-				[roomId]: t("sendFailed", { message: error instanceof Error ? error.message : String(error) })
+				[roomId]: failure(error, "send")
 			}));
 			return false;
 		});
@@ -23124,6 +23147,14 @@ function ChannelsPage({ useChannels, selectRoom, send, uploadAttachment, reviewT
 			}));
 			return;
 		}
+		const maxTextChars = state.maxTextChars ?? 131072;
+		if (textTooLarge(text, maxTextChars)) {
+			setErrors((previous) => ({
+				...previous,
+				[roomId]: t("messageTooLarge", { limit: t("charCount", { count: maxTextChars }) })
+			}));
+			return;
+		}
 		if (messageTooLarge(text, [])) {
 			setErrors((previous) => ({
 				...previous,
@@ -23175,7 +23206,7 @@ function ChannelsPage({ useChannels, selectRoom, send, uploadAttachment, reviewT
 			}).catch((error) => {
 				setErrors((previous) => ({
 					...previous,
-					[roomId]: t("sendFailed", { message: error instanceof Error ? error.message : String(error) })
+					[roomId]: failure(error, "send")
 				}));
 			});
 		};
@@ -24556,6 +24587,8 @@ const zh = {
 	removeAttachment: "移除附件",
 	attachmentsTooLarge: "附件太大：一条消息合计不能超过 {limit}",
 	messageTooLarge: "消息太长：一条消息不能超过 {limit}",
+	/** #1445: the text cap counts characters, so the number reads with its unit in the panel language. */
+	charCount: "{count} 字符",
 	attachmentTooLarge: "「{name}」{size}，超过单个文件上限 {limit}",
 	attachmentUploading: "上传中",
 	attachmentQueued: "等待上传",
@@ -24924,6 +24957,7 @@ const en = {
 	removeAttachment: "Remove attachment",
 	attachmentsTooLarge: "Attachments too large: one message can carry at most {limit} in total",
 	messageTooLarge: "Message too long: one message can hold at most {limit}",
+	charCount: "{count} characters",
 	attachmentTooLarge: "\"{name}\" is {size}, over the per-file limit of {limit}",
 	attachmentUploading: "Uploading",
 	attachmentQueued: "Waiting to upload",
@@ -25015,6 +25049,71 @@ const en = {
 	replyDeleted: "Original message was deleted",
 	cancelReply: "Cancel reply"
 };
+// src/client/panel-hash.ts
+/** Shape the fragment may take: one sidebar key (`plugins`, `schedules`, `collab-desk`, …). */
+const PANEL_ID$1 = /^[A-Za-z0-9][A-Za-z0-9._~-]*$/;
+/** The main-panel id a fragment names; `null` for an empty or unrecognised one. */
+function panelIdFromHash(hash) {
+	const raw = hash.startsWith("#") ? hash.slice(1) : hash;
+	return PANEL_ID$1.test(raw) ? raw : null;
+}
+/** The address of the current page with `id` as its fragment: query (the wizard token) untouched. */
+function addressFor(id) {
+	return `${location.pathname}${location.search}${id === null ? "" : `#${id}`}`;
+}
+/**
+* Mirror every later panel selection into the fragment; the returned function stops following.
+* Opening a panel writes `#<id>`, going back to the conversation clears it.
+* @param layout - `ctx.layout` (panel selection and its shared source).
+* @returns unsubscribe.
+*/
+function followPanelHash(layout) {
+	const source = layout.panelInfo;
+	let last = source.getSnapshot().activePanelId;
+	return source.subscribe(() => {
+		const next = source.getSnapshot().activePanelId;
+		if (next === last) return;
+		last = next;
+		if (addressFor(next) === `${location.pathname}${location.search}${location.hash}`) return;
+		history.replaceState(history.state, "", addressFor(next));
+	});
+}
+/** Whether a keyed `main` panel with this id is registered right now. */
+function hasMainPanel(slots, id) {
+	return slots.entriesOfSlot("main").some((entry) => entry.options.key === id);
+}
+/**
+* Open the panel the fragment names, once its package has registered it; the returned function
+* stops waiting. Panels register when their own browser half loads, which can be after this
+* plugin: `layout.selectPanel` throws for a main key that is not registered yet (see
+* bothouse-dsh-panel/client.js), so this waits for the registration instead of firing once.
+* @param layout - `ctx.layout`.
+* @param slots - `ctx.slots` (main-slot registry and its change subscription).
+* @param hash - the fragment to honour; defaults to the current address.
+* @returns unsubscribe from the pending restore.
+*/
+function restorePanelFromHash(layout, slots, hash = location.hash) {
+	const id = panelIdFromHash(hash);
+	if (id === null) return () => {};
+	if (hasMainPanel(slots, id)) {
+		layout.selectPanel(id);
+		return () => {};
+	}
+	if (layout.panelInfo.getSnapshot().activePanelId !== null) return () => {};
+	let stopWaiting = () => {};
+	let stopWatching = () => {};
+	const done = () => {
+		stopWaiting();
+		stopWatching();
+	};
+	stopWaiting = slots.subscribe("main", () => {
+		if (!hasMainPanel(slots, id)) return;
+		done();
+		if (layout.panelInfo.getSnapshot().activePanelId === null) layout.selectPanel(id);
+	});
+	stopWatching = layout.panelInfo.subscribe(done);
+	return done;
+}
 // src/client/index.ts
 const PANEL_ID = "channels";
 const REMOTE_PANEL_ID = "remote-channels";
@@ -25036,6 +25135,8 @@ function apply(ctx) {
 		zh,
 		en
 	}), "client-ui-discord: dictionaries");
+	ctx.effect(() => followPanelHash(ctx.layout), "client-ui-discord: panel hash");
+	ctx.effect(() => restorePanelFromHash(ctx.layout, ctx.slots), "client-ui-discord: panel hash restore");
 	const t = ctx.locale.bind(NS);
 	const channels = createChannelSource(browserTransport());
 	ctx.effect(() => channels.dispose, "client-ui-discord: channel stream");
@@ -25100,7 +25201,6 @@ function apply(ctx) {
 		};
 		bindPanel();
 		const unsubscribe = ctx.slots.subscribe("sidebar.settings", bindPanel);
-		if (location.hash === `#${PANEL_ID}`) ctx.layout.selectPanel(PANEL_ID);
 		return () => {
 			unsubscribe();
 			disposePanel?.();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bothouse-dsh",
-  "version": "0.1.61",
+  "version": "0.1.63",
   "description": "BotHouse channels for DeepSeek Harness: Discord-style rooms where DSH models and local CLIs (Claude Code, Codex, Gemini) are members",
   "type": "module",
   "main": "./collab/plugin.mjs",