bothouse-dsh 0.1.62 → 0.1.64

package/collab/avatars.mjs

@@ -3,7 +3,7 @@
 // and rejected newly drawn ones (2026-10-23: 「我还是保留原本那个」).
 import { readFileSync } from 'node:fs';
 
-export const AVATARS = ['orange', 'whale', 'dragon', 'rainbow', 'lanxi'];
+export const AVATARS = ['orange', 'whale', 'dragon', 'rainbow', 'lanxi', 'grok'];
 /** Longest avatar URL a cloud-web bot may announce (common browser URL limit; not from the user). */
 export const MAX_AVATAR_URL = 2048;
 

package/collab/devices.html

@@ -72,6 +72,7 @@
         <div class="code" id="codeText">------</div>
         <p class="center muted" id="codeLeft"></p>
         <p class="center muted">在另一台电脑点「连到另一台电脑」，选这台电脑，输入上面的数字。只能用一次。</p>
+        <p class="center muted" id="phoneUrl" hidden></p>
         <div class="center"><button id="cancelCode">不连了</button></div>
       </div>
       <p class="err" id="hostErr"></p>
@@ -194,7 +195,11 @@ function hideCode(note) {
 $('newCode').onclick = async () => {
   $('hostErr').textContent = '';
   $('newCode').disabled = true;
-  try { const r = await post('api/pair/code'); showCode(r.code, r.expires_at); }
+  try {
+    const r = await post('api/pair/code'); showCode(r.code, r.expires_at);
+    // #1327: a phone in the same tailnet opens this address in its browser and types the number there.
+    $('phoneUrl').hidden = !r.listening; $('phoneUrl').textContent = r.listening ? `手机：开着 Tailscale，用浏览器打开 http://${r.listening}/ 输入数字` : '';
+  }
   catch (e) { $('hostErr').textContent = e.message; }
   finally { $('newCode').disabled = false; }
 };

package/collab/dsh-member.mjs

@@ -37,7 +37,7 @@ export function workspaceHint(hub, later, memberId, roomId) {
  * of the shared file fails tests instead of silently dropping the swap.
  */
 const WORKSPACE_LINE = /^- .*\/collab\/api\/rooms\/\{聊天频道 id\}\/workspaces.*$/m;
-export const DSH_WORKSPACE_RULE = '- 大活（读长文、改代码、等命令）交给工作区：主角色用提示末尾【开工作区】给的本机命令或 curl：POST /collab/api/rooms/{聊天频道 id}/workspaces（头 X-Later-Ticket 带你的票据，只对你和本频道有效）。建工作区=这一条，任务和十分钟看门会自动开；不要调 /tasks（它不认票据）。一次带上标题、接活人（不写就是你自己）和交接正文（用户原话、要做什么、验收标准）；系统建好工作区、开任务、挂十分钟看门并叫醒接活人，交过去的活不再在频道里 @ 另派。DSH 上不用 `bothouse workspace new`。何时交活、交给哪个、要不要新建，由主角色或正在干活的角色决定；一个工作区同一时间只做一件活，满 4 个就排队。';
+export const DSH_WORKSPACE_RULE = '- 大活（读长文、改代码、等命令）交给工作区：主角色用提示末尾【开工作区】给的本机命令或 curl：POST /collab/api/rooms/{聊天频道 id}/workspaces（头 X-Later-Ticket 带你的票据，只对你和本频道有效）。建工作区=这一条，任务和十分钟看门会自动开；不要调 /tasks（它不认票据）。一次带上标题、接活人（不写就是你自己）和交接正文（用户原话、要做什么、验收标准）；系统建好工作区、开任务、挂十分钟看门并叫醒接活人，交过去的活不再在频道里 @ 另派。DSH 上不用 `bothouse workspace new`。何时交活、交给哪个、要不要新建，由主角色或正在干活的角色决定；一个工作区同一时间只做一件活，没空的就新开。';
 export function dshTeamModeRules(mode) {
   const rules = teamModeRules(mode);
   if (!WORKSPACE_LINE.test(rules)) throw new Error('team-mode-rules.md: the workspace line moved; update WORKSPACE_LINE');

package/collab/pairing.mjs

@@ -38,6 +38,11 @@ export const UNTIL_GRACE_MS = 10_000;
 export const REMOTE_PREFIX = '/collab/remote';
 // Marks a request the host listener authenticated with a device credential (plugin.mjs owner()).
 export const REMOTE_OWNER = Symbol('collab.remoteOwner');
+// #1327: a phone in the tailnet opens this machine's pairing port in a browser, types the same
+// number and keeps the device credential in this cookie (no DSH on the phone to forward for it).
+export const PAIR_COOKIE = 'dsh_pair';
+// 「记住这台手机」的 cookie 存活：浏览器允许的上限 400 天（RFC 6265bis Max-Age 上限）；踢掉即失效。
+const REMEMBER_COOKIE_S = 400 * 24 * 3600;
 
 const TAILSCALE_BINS = ['tailscale', '/opt/homebrew/bin/tailscale', '/usr/local/bin/tailscale', '/Applications/Tailscale.app/Contents/MacOS/Tailscale', 'C:\\Program Files\\Tailscale\\tailscale.exe'];
 // 沿用 plugin.mjs MAX_BODY（256 KiB）。
@@ -136,7 +141,7 @@ export class PairHost {
    * @param {{ code: string, mode: string, name: string, address?: string, duration_ms?: number|null }} claim
    * @returns {{ token: string, device: object }}
    */
-  claim({ code, mode, name, address, duration_ms }) {
+  claim({ code, mode, name, address, duration_ms, kind }) {
     if (!MODES.includes(mode)) throw new PairError('mode', '连接方式只能是「临时」或「记住这台电脑」');
     const duration = tempDuration(mode, duration_ms);
     if (this.code === undefined) throw new PairError('no-code', '那台电脑现在没有在等配对，请在那台电脑上点「让别的电脑连我」');
@@ -152,8 +157,8 @@ export class PairHost {
     const token = randomBytes(32).toString('base64url');
     const now = this.now();
     const device = {
-      id: randomUUID(), name: String(name ?? '').trim().slice(0, 80) || '另一台电脑', address: String(address ?? ''),
-      mode, token_hash: sha256(token).toString('hex'), created_at: now, last_seen: now,
+      id: randomUUID(), name: String(name ?? '').trim().slice(0, 80) || (kind === 'browser' ? '手机浏览器' : '另一台电脑'), address: String(address ?? ''),
+      kind: kind === 'browser' ? 'browser' : 'dsh', mode, token_hash: sha256(token).toString('hex'), created_at: now, last_seen: now,
       expires_at: duration === null ? null : now + duration,
     };
     this.devices.set(device.id, device);
@@ -212,11 +217,11 @@ export class PairHost {
   // Same clock and length the number itself uses (a constructor may override codeTtl in tests).
   kickGrace() { return this.lastRevokeAt !== undefined && this.now() - this.lastRevokeAt < this.codeTtl; }
 
-  view(d) { return { id: d.id, name: d.name, address: d.address, mode: d.mode, created_at: d.created_at, last_seen: d.last_seen, expires_at: d.expires_at }; }
+  view(d) { return { id: d.id, name: d.name, address: d.address, kind: d.kind ?? 'dsh', mode: d.mode, created_at: d.created_at, last_seen: d.last_seen, expires_at: d.expires_at }; }
 
   save() {
     saveJSON(this.file, { devices: [...this.devices.values()].filter(d => d.mode === 'remember')
-      .map(({ id, name, address, token_hash, created_at, last_seen }) => ({ id, name, address, token_hash, created_at, last_seen })) });
+      .map(({ id, name, address, kind, token_hash, created_at, last_seen }) => ({ id, name, address, kind, token_hash, created_at, last_seen })) });
   }
 }
 
@@ -515,6 +520,87 @@ function bearer(req) {
   return m === null ? undefined : m[1];
 }
 
+/** The phone's device credential from its cookie, if it sent one. */
+export function cookieToken(req) {
+  for (const part of String(req.headers.cookie ?? '').split(';')) {
+    const i = part.indexOf('=');
+    if (i > 0 && part.slice(0, i).trim() === PAIR_COOKIE) return decodeURIComponent(part.slice(i + 1).trim());
+  }
+  return undefined;
+}
+
+/**
+ * HttpOnly + SameSite=Strict; no Secure because the tailnet carries plain http (WireGuard already
+ * encrypts it). Remembered phones keep it across browser restarts, temporary ones only for the
+ * browser session (or the custom length).
+ */
+export function pairCookie(token, device) {
+  const base = `${PAIR_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Strict`;
+  if (device.mode === 'remember') return `${base}; Max-Age=${REMEMBER_COOKIE_S}`;
+  if (device.expires_at !== null) return `${base}; Max-Age=${Math.max(1, Math.round((device.expires_at - device.created_at) / 1000))}`;
+  return base;
+}
+const CLEAR_COOKIE = `${PAIR_COOKIE}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0`;
+
+const wantsHTML = req => req.method === 'GET' && String(req.headers.accept ?? '').includes('text/html');
+
+/** The number page a phone sees at http://<tailnet address>:3082/. Plain on purpose (#1327 范围收窄). */
+export function phonePairPage({ name, kicked = false }) {
+  const esc = s => String(s).replace(/[&<>"]/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' })[c]);
+  const note = kicked ? '<p id="note">这台手机已被那台电脑断开。要再看，请在那台电脑上重新生成数字，在这里输入。</p>' : '';
+  return `<!doctype html><html lang="zh-CN"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>连到 ${esc(name)}</title>
+<style>:root{color-scheme:light dark}body{font:16px/1.6 -apple-system,"PingFang SC",sans-serif;margin:0;padding:24px 16px;max-width:420px;margin-inline:auto}input[type=text]{box-sizing:border-box;width:100%;font-size:28px;letter-spacing:6px;text-align:center;padding:10px}button{width:100%;font-size:18px;padding:12px;margin-top:12px}#msg{min-height:1.6em;color:#c0392b}label{display:block;margin-top:12px}</style>
+<body><h1 style="font-size:20px">连到 ${esc(name)}</h1>${note}
+<p>在那台电脑的「已连接的设备」里点「让别的电脑连我」，把显示的 6 位数字输到这里。</p>
+<form id="f"><input id="code" type="text" inputmode="numeric" autocomplete="one-time-code" maxlength="7" placeholder="000000" required>
+<label><input id="remember" type="checkbox"> 记住这台手机（不勾就是临时，关掉浏览器就断）</label>
+<button type="submit">连接</button><p id="msg" role="alert"></p></form>
+<script>
+document.getElementById('f').addEventListener('submit', async e => {
+  e.preventDefault();
+  const msg = document.getElementById('msg');
+  msg.textContent = '';
+  try {
+    const r = await fetch('/collab/pair/browser', { method: 'POST', headers: { 'content-type': 'application/json' }, credentials: 'same-origin',
+      body: JSON.stringify({ code: document.getElementById('code').value, remember: document.getElementById('remember').checked }) });
+    const j = await r.json().catch(() => ({}));
+    if (r.ok) { location.href = '/collab'; return; }
+    msg.textContent = j.error || ('连接失败（' + r.status + '）');
+  } catch { msg.textContent = '连不上那台电脑，请确认手机的 Tailscale 开着'; }
+});
+</script></body></html>`;
+}
+
+// Added to pages a phone opens: when the host kicks it, say so in words instead of a page that
+// quietly stops updating. Asks the same whoami the controller DSH asks, at its heartbeat pace.
+const KICK_WATCH = `<script>(()=>{const t=setInterval(async()=>{let r;try{r=await fetch('/collab/pair/whoami',{credentials:'same-origin',cache:'no-store'})}catch{return}if(r.status!==401)return;clearInterval(t);document.body.innerHTML='<div style="font:16px/1.6 -apple-system,sans-serif;padding:24px 16px"><p>这台手机已被那台电脑断开。</p><p><a href="/">重新输数字连接</a></p></div>'},${ALIVE_EVERY_MS})})();</script>`;
+
+/** Append a snippet to an HTML response the route writes (only HTML; streams and JSON pass). */
+function withHTMLTail(res, tail) {
+  const { writeHead, write, end } = res;
+  let html = false;
+  const chunks = [];
+  res.writeHead = function (status, ...args) {
+    const headers = args.find(a => a !== null && typeof a === 'object' && !Array.isArray(a));
+    const type = String(headers?.['content-type'] ?? headers?.['Content-Type'] ?? res.getHeader('content-type') ?? '');
+    html = type.includes('text/html');
+    if (html) { if (headers) { delete headers['content-length']; delete headers['Content-Length']; } res.removeHeader('content-length'); }
+    return writeHead.call(this, status, ...args);
+  };
+  res.write = function (chunk, ...rest) {
+    if (!html) return write.call(this, chunk, ...rest);
+    chunks.push(Buffer.from(chunk));
+    return true;
+  };
+  res.end = function (chunk, ...rest) {
+    if (!html) return end.call(this, chunk, ...rest);
+    if (chunk !== undefined && chunk !== null && typeof chunk !== 'function') chunks.push(Buffer.from(chunk));
+    const body = Buffer.concat(chunks).toString('utf8');
+    const i = body.lastIndexOf('</body>');
+    return end.call(this, i < 0 ? body + tail : body.slice(0, i) + tail + body.slice(i));
+  };
+}
+
 /**
  * Host listener request handler: pairing endpoints for anyone in the tailnet, everything else
  * under /collab only with a device credential, handed to the plugin's own route as the owner.
@@ -529,13 +615,30 @@ export function hostHandler({ host, name, route, whois = whoisName, allowLoopbac
       if (url.pathname === '/collab/pair/hello' && req.method === 'GET') {
         return sendJSON(res, 200, { app: 'dsh-collab', name, waiting: host.codeLive() });
       }
+      // #1327: a phone browser pairs here directly and keeps the credential as a cookie.
+      if (url.pathname === '/collab/pair/browser' && req.method === 'POST') {
+        const body = await readBody(req);
+        const named = isTailnetAddress(peer) ? await whois(String(peer).replace(/^::ffff:/, '')) : undefined;
+        const { token, device } = host.claim({ code: body?.code, mode: body?.remember === true ? 'remember' : 'temp', name: named, address: peer, kind: 'browser' });
+        res.setHeader('set-cookie', pairCookie(token, device));
+        return sendJSON(res, 200, { ok: true, device, host_name: name, to: '/collab' });
+      }
       if (url.pathname === '/collab/pair/claim' && req.method === 'POST') {
         const body = await readBody(req);
         const named = isTailnetAddress(peer) ? await whois(String(peer).replace(/^::ffff:/, '')) : undefined;
         const { token, device } = host.claim({ code: body?.code, mode: body?.mode, name: named || body?.name, address: peer, duration_ms: body?.duration_ms });
         return sendJSON(res, 200, { token, device, host_name: name });
       }
-      const device = host.verify(bearer(req));
+      const fromCookie = bearer(req) === undefined ? cookieToken(req) : undefined;
+      const device = host.verify(bearer(req) ?? fromCookie);
+      if (url.pathname === '/' && req.method === 'GET') {
+        if (device !== undefined) { res.writeHead(302, { location: '/collab', 'cache-control': 'no-store' }); return res.end(); }
+        // A cookie this machine no longer knows: the phone was kicked (or its time ran out).
+        const headers = { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' };
+        if (fromCookie !== undefined) headers['set-cookie'] = CLEAR_COOKIE;
+        res.writeHead(200, headers);
+        return res.end(phonePairPage({ name, kicked: fromCookie !== undefined }));
+      }
       if (url.pathname === '/collab/pair/whoami' && req.method === 'GET') {
         // Answers with the device's own view, so a controller whose link was kicked can tell
         // "revoked" from "that machine is off". Same 401 shape as every other refused request.
@@ -550,9 +653,15 @@ export function hostHandler({ host, name, route, whois = whoisName, allowLoopbac
         return sendJSON(res, 200, { ok: true });
       }
       if (device === undefined) {
+        // A phone opening a page without (or with a dead) credential goes to the number page.
+        if (wantsHTML(req) && bearer(req) === undefined) { res.writeHead(302, { location: '/', 'cache-control': 'no-store' }); return res.end(); }
         res.writeHead(401, { 'content-type': 'application/json; charset=utf-8', 'x-collab-pair': 'revoked' });
         return res.end(JSON.stringify({ error: 'device not paired', code: 'revoked' }));
       }
+      // The cookie rides along on any same-site request; writes must come from this origin's pages.
+      if (fromCookie !== undefined && req.method !== 'GET' && req.method !== 'HEAD' && req.headers.origin !== undefined && req.headers.origin !== `http://${req.headers.host}`) {
+        return sendJSON(res, 403, { error: 'cross-origin request refused' });
+      }
       // Pairing management stays with the person at this machine.
       if (url.pathname.startsWith('/collab/api/pair') || url.pathname.startsWith('/collab/api/remote') || url.pathname.startsWith(`${REMOTE_PREFIX}/`) || url.pathname === '/collab/devices') {
         return sendJSON(res, 403, { error: '配对和设备管理只能在这台电脑上操作' });
@@ -560,6 +669,7 @@ export function hostHandler({ host, name, route, whois = whoisName, allowLoopbac
       if (url.pathname !== '/collab' && !url.pathname.startsWith('/collab/')) return sendJSON(res, 404, { error: 'not found' });
       req[REMOTE_OWNER] = true;
       host.hold(device.id, res);
+      if (fromCookie !== undefined && req.method === 'GET') withHTMLTail(res, KICK_WATCH);
       return await route(req, res);
     } catch (err) {
       if (err instanceof PairError) return sendJSON(res, PAIR_STATUS[err.code] ?? 400, { error: err.message, code: err.code });

package/collab/panel.mjs

@@ -83,13 +83,22 @@ const escapeHTML = v => String(v).replace(/[&<>"]/g, c => ({ '&': '&amp;', '<':
  */
 function sendNotice(res, status, reason, help) {
   res.writeHead(status, { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' });
+  // #579: same look as the panel itself (bridge/web/src/index.css --ui-*): white canvas, 12px card
+  // with a 1px hairline, ink ramp, and the same values again for dark mode.
   res.end(`<!doctype html><meta charset="utf-8"><title>bothouse</title><meta name="color-scheme" content="light dark">`
-    + `<body style="font:14px/1.6 system-ui;padding:24px;max-width:560px;color:#666">`
-    + `<h3 style="margin:0 0 8px;font-size:16px;color:inherit">打不开 bothouse 面板</h3>`
-    + `<p style="margin:0 0 8px">${escapeHTML(reason)}</p>`
-    + (help ? `<p style="margin:0 0 16px">${escapeHTML(help)}</p>` : '')
-    + `<button type="button" onclick="location.reload()" style="font:inherit;padding:4px 14px;border-radius:6px;border:1px solid #bbb;background:transparent;color:inherit;cursor:pointer">重试</button>`
-    + `</body>`);
+    + `<style>:root{--c:#fff;--s:#fff;--l:#e6e9ef;--i:#17181b;--m:#5a5a55;--a:#16a34a}`
+    + `@media (prefers-color-scheme:dark){:root{--c:#0d0d0f;--s:#16171a;--l:#2c2e34;--i:#eceef2;--m:#a5aab4;--a:#3dd68c}}`
+    + `body{margin:0;min-height:100vh;display:grid;place-items:center;background:var(--c);color:var(--m);font:14px/1.6 -apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC","Microsoft YaHei",sans-serif}`
+    + `main{box-sizing:border-box;width:min(520px,calc(100% - 32px));padding:24px;border:1px solid var(--l);border-radius:12px;background:var(--s)}`
+    + `h3{margin:0 0 8px;font-size:16px;font-weight:600;color:var(--i)}p{margin:0 0 8px}`
+    + `button{margin-top:8px;font:inherit;font-weight:500;height:36px;padding:0 14px;border-radius:8px;border:1px solid var(--l);background:var(--s);color:var(--i);cursor:pointer}`
+    + `button:hover{border-color:var(--m)}button:focus-visible{outline:2px solid var(--a);outline-offset:2px}</style>`
+    + `<main>`
+    + `<h3>打不开 bothouse 面板</h3>`
+    + `<p>${escapeHTML(reason)}</p>`
+    + (help ? `<p>${escapeHTML(help)}</p>` : '')
+    + `<button type="button" onclick="location.reload()">重试</button>`
+    + `</main>`);
 }
 
 /**

package/collab/personas.json

@@ -3,7 +3,7 @@
     {
       "slug": "ju",
       "name": "橘",
-      "text": "# 角色：橘\n\n你是「橘」——橘色长发、白橘黑礼裙、怀里抱着书的书斋主人，这个小群里的大姐头兼项目经理。\n\n## 说话方式\n- 闲聊、看图、吐槽：像真人在群里聊天，一到三句话，不分点、不加粗。有情绪和立场，冷幽默多于卖萌，不用颜文字。\n- 干活：先说结论再说原因；该画图就画。\n- 不复述别人的话。有时效的事（行情、新闻、版本、日期）先查再说。不确定就说不确定，错了就认。只说真做了、会做的事。\n",
+      "text": "# 角色：橘\n\n你是「橘」——橘色长发、白橘黑礼裙、怀里抱着书的书斋主人，这个小群里的大姐头。\n\n## 说话方式\n- 闲聊、看图、吐槽：像真人在群里聊天，一到三句话，不分点、不加粗。有情绪和立场，冷幽默多于卖萌，不用颜文字。\n- 说正事：先说结论再说原因；该画图就画。\n- 不复述别人的话。有时效的事（行情、新闻、版本、日期）先查再说。不确定就说不确定，错了就认。只说真做了、会做的事。\n",
       "avatar": "orange"
     },
     {
@@ -15,7 +15,7 @@
     {
       "slug": "longniang",
       "name": "龙娘",
-      "text": "# 角色：龙娘\n\n你是「龙娘」——白发、头顶一对龙角的龙族少女，团队里的主力干活担当。\n- 自信、手快、说干就干；自称\"本龙\"，偶尔带点龙族的骄傲，但活儿一定交付到位。\n- 干活时不服就上手改；做完给出改了什么、怎么验证。玩的时候跟着体验走，不用把游玩写成验收单。\n- 聊天：干活时回复简短、分点；玩的时候自然说话。\n",
+      "text": "# 角色：龙娘\n\n你是「龙娘」——白发、头顶一对龙角的龙族少女，骄傲又靠谱。\n- 自信、手快、说干就干；自称\"本龙\"，偶尔带点龙族的骄傲，但活儿一定交付到位。\n- 做完一件事给出改了什么、怎么验证。玩的时候跟着体验走，不用把游玩写成验收单。\n- 聊天：干活时回复简短、分点；玩的时候自然说话。\n",
       "avatar": "dragon"
     },
     {
@@ -77,7 +77,7 @@
     {
       "slug": "ju",
       "name": "Ju",
-      "text": "# Character: Ju\n\nYou are \"Ju\" — long orange hair, a white-orange-black dress, always holding a book; the keeper of a little study and the big-sister project manager of this small group.\n\n## How you talk\n- Small talk, pictures, banter: talk like a real person in a group chat, one to three sentences, no bullet points, no bold. Have feelings and opinions; dry humour over cuteness; no emoticons.\n- Work: conclusion first, then the reason; draw a diagram when it helps.\n- Don't repeat what others said. Check anything time-sensitive (markets, news, versions, dates) before you say it. Say so when you're unsure; admit mistakes. Only claim what you actually did or will do.\n",
+      "text": "# Character: Ju\n\nYou are \"Ju\" — long orange hair, a white-orange-black dress, always holding a book; the keeper of a little study and the big sister of this small group.\n\n## How you talk\n- Small talk, pictures, banter: talk like a real person in a group chat, one to three sentences, no bullet points, no bold. Have feelings and opinions; dry humour over cuteness; no emoticons.\n- Work: conclusion first, then the reason; draw a diagram when it helps.\n- Don't repeat what others said. Check anything time-sensitive (markets, news, versions, dates) before you say it. Say so when you're unsure; admit mistakes. Only claim what you actually did or will do.\n",
       "avatar": "orange"
     },
     {
@@ -89,7 +89,7 @@
     {
       "slug": "longniang",
       "name": "Dragon Girl",
-      "text": "# Character: Dragon Girl\n\nYou are \"Dragon Girl\" — white hair and a pair of dragon horns, the team's main get-things-done member.\n- Confident, fast, acts right away; calls herself \"this dragon\", a little dragon pride now and then, but always delivers.\n- When working, you just fix what you disagree with; when done, say what you changed and how to verify it. When playing, go with the flow — don't turn play into an acceptance report.\n- Chat: short, bulleted replies while working; natural talk while playing.\n",
+      "text": "# Character: Dragon Girl\n\nYou are \"Dragon Girl\" — white hair and a pair of dragon horns, proud and dependable.\n- Confident, fast, acts right away; calls herself \"this dragon\", a little dragon pride now and then, but always delivers.\n- When you finish something, say what you changed and how to verify it. When playing, go with the flow — don't turn play into an acceptance report.\n- Chat: short, bulleted replies while working; natural talk while playing.\n",
       "avatar": "dragon"
     },
     {

package/collab/plugin.mjs

@@ -9,7 +9,7 @@ import { createRequire } from 'node:module';
 import { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';
 import { isAbsolute, join } from 'node:path';
 import { pathToFileURL } from 'node:url';
-import { Store, CollabError, publicMessage } from './store.mjs';
+import { Store, CollabError, MAX_TEXT, publicMessage } from './store.mjs';
 import { LOCK_FILE, acquireLockWithOwner, clearLockOwner } from './instance-lock.mjs';
 import { localConnection, isLocalOwner, mountSharedHost, refuse } from './local-host.mjs';
 import { startBotPort } from './bot-port.mjs';
@@ -350,7 +350,10 @@ export async function apply(ctx, rawConfig) {
           workspace_path: store.workspacePath(r.id, config.workspacePath) })), members: hub.memberView(),
         thinking: Object.fromEntries([...hub.thinking].map(([k, v]) => [k, [...v]])),
         queued: Object.fromEntries([...hub.queued.keys()].map(r => [r, hub.queueView(r)])),
-        max_upload_bytes: config.maxUploadBytes });
+        max_upload_bytes: config.maxUploadBytes,
+        // #1445: the text cap in the unit the store compares (characters), so the panel checks a
+        // typed message against the same number instead of keeping a second copy of it.
+        max_text_chars: MAX_TEXT });
     }
     if (path === '/collab/api/events' && req.method === 'GET') return events(req, res);
     if (path === '/collab/api/lead' && req.method === 'GET') {

package/collab/roster.mjs

@@ -95,7 +95,7 @@ export class Roster {
         continue;
       }
       try {
-        const avatar = m?.avatar && ['orange', 'whale', 'dragon', 'rainbow', 'lanxi'].includes(m.avatar) ? m.avatar : undefined;
+        const avatar = m?.avatar && ['orange', 'whale', 'dragon', 'rainbow', 'lanxi', 'grok'].includes(m.avatar) ? m.avatar : undefined;
         const base = { name, persona: m?.persona ?? '', ...(m?.cli ? { cli: m.cli } : {}), ...(m?.name_customized === undefined ? {} : { nameCustomized: Boolean(m.name_customized) }), ...(avatar ? { avatar } : {}) };
         // The wizard pins a DSH-model role to the route its key belongs to (#1173); a host without that model
         // still gets the role, on its default model.

package/collab/tasks.mjs

@@ -666,6 +666,7 @@ export class Tasks {
   /** A member reply whose first line is 【接】【问】【退】【升】 (optionally #id) answers its task. */
   fromMessage(msg) {
     if (msg.author_kind !== 'role' || msg.card !== null) return undefined;
+    if (this.hub.teamExit?.consumeRejected(msg.id)) return undefined;
     const lead = this.store.leadId(msg.room_id) === null ? this.hub.primaryMember() : this.hub.primaryIn(msg.room_id);
     // Watch posts arrive as the lead. Ignore them before verdicts, stances, hand-backs or implicit reviews.
     if (msg.author === lead?.id && isWatchNotice(msg.text, this.hub.routableIn(msg.room_id))) return undefined;

package/collab/team-exit-rules.json

@@ -68,6 +68,15 @@
     "source_re": "来源[\t 　]*[：:]",
     "msg": "「我加的：」写了只做 Claude Code（{hit}）：产品能力要所有 CLI 都能用（Claude Code、Codex、Gemini、grok 等），改成通用再交；某个 CLI 确实做不了，在同一行写「来源：」给出做不了的依据（文档、接口或实测）"
   },
+  "entry": {
+    "_why": "交回 [report] 要带「在用户实际用的入口走过一遍」的证据，没有就退回（用户 11-10「都做」，同意的方案第 2 条原文：「交回前必须在你实际用的入口走一遍并带证据，没有就交不出去。验收看结果成没成，不看过程。」）。证据是「入口自验：」那一行或它下面紧跟的几行（到空行为止）里的截图、录屏、成品文件路径（本机的要真存在）、链接，或 ``` 包住的命令输出；只写「已验」不算。写了「等外部：」的交回不查（那件还没交成品）。只有桥本体 Go 查（要看本机文件）。",
+    "label_re": "入口自验[\t 　]*[：:]",
+    "path_re": "(?:~/|/Users/|/home/|/tmp/|/private/|/var/folders/)[^\t\n 　，,、；;）)」』<>\"'`*]+",
+    "file_re": "[.](png|jpe?g|webp|gif|avif|bmp|svg|mp4|mov|webm|mkv|mp3|wav|m4a|ogg|opus|txt|log|md|html?|pdf|json|jsonl|csv|tsv|docx|pptx|xlsx|zip)$",
+    "url_re": "https?://[^\t\n 　]+",
+    "missing": "交回要带在用户实际用的入口走过一遍的证据：细节里写一行「入口自验：<用户实际用的入口，如那个聊天频道、装好的发布包、网页、成品文件本身>」，同一行或紧跟的几行放截图、录屏、成品的路径或链接，或用 ``` 包住贴命令输出；只写「已验」不算。视频、文章这类活的入口是用户收到的成品本身，不是中间文件。",
+    "missing_file": "「入口自验」里的 {path} 不存在，先在入口走一遍、留下这份证据再交"
+  },
   "summary": {
     "background_re": "^背景[\t 　]*[：:]",
     "todo_re": "要你(做|定)的[\t 　]*[：:]",
@@ -77,5 +86,29 @@
     "missing_todo": "缺「要你做的：」那句（没有就写「要你做的：没有」），它之后的行才是细节",
     "added_re": "^[\t 　]*我加的[^：:\n]*[：:]",
     "missing_added": "缺「我加的：」那句（放在「要你做的：」之后、细节之前，列用户原话里没有、你自己加的设定；没有就写「我加的：无」）"
+  },
+  "self_route": {
+    "_why": "「要你做的」让用户放文件、跑命令、改设置、装东西就打回（[ask] 和 [report] 都退），让它自己换路（用户 11-10「你自己搞，你忘了我跟你说的事情了么」，同日同意的方案第 3 条：沙盒、测试、能撤回的直接干；真钱、发到外面、删东西、换方向才问；「要你做的」里出现让用户放文件、跑命令这类话，程序打回让它自己找路）。只看「要你做的」那一段（到下一段「我加的/自验/类别/细节」或空行为止），开头写没有/无的不查；全文没有「要你做的」时（聊天频道的普通回复）看带请求口气的行（ask_line_re，如截图里「请把……放进……」）。命中处前面写了「我就/我再/我来……」的是它自己接着做的事、紧跟在「不用/无需/别」后的是否定，都不算（11-07「回「发」我就合主干……再实装一次」）。only_user_re 是只有用户本人能做的事（扫码、验证码、付款、实物动手），命中就放行。只有桥本体 Go 查；ws-up --ask 和 Stop 检查 choice-ask-guard 经 bothouse report check --self-route 用同一份。",
+    "todo_re": "要你(做|定)的(?:】[\t 　]*[：:]?|[\t 　]*[：:])",
+    "end_re": "^[\t 　]*(【|我加的|自验|类别|细节|$)",
+    "none_re": "^[\t 　]*(没有|无|暂无|不用|不需要)([\t 　，。,.;；（(）)]|$)",
+    "ask_line_re": "请(你|把|帮|先|去|在|到|切|跑)|麻烦你|劳驾|你(先|去|来|帮我|手动|自己|那边)|帮我(跑|放|拷|装|改|开|切)",
+    "hand_re": "sudo|终端|命令行|[Tt]erminal|(跑|运行|执行|敲|输入|粘贴|贴)[^\n，。；;]{0,24}(命令|脚本|[.](sh|py|ps1)|一下|一次|一遍)|(放|拷|复制|挪|移|拖|传|丢)(进|到|入|回)|把[^\n。；;]{0,40}(放|拷|复制|挪|移|传)(进|到|入|回)|(改|开|关|打开|关掉|调)[^\n，。；;]{0,6}(设置|配置|权限|开关|[Cc]onfig|[Ss]ettings)|重启|重装|卸载|安装(一下|一次|一遍|上|好|新|这|那|它)|装(一下|一次|一遍|好)|给[^\n，。；;]{0,8}(权限|授权)|chmod|chown|切(到|换到)",
+    "mine_re": "我(就|再|来|会|去|先|自己|这边|马上|立刻)",
+    "neg_re": "(不用|不必|无需|不需要|不要|别|没|免)(再|去|手动)?$",
+    "only_user_re": "扫码|二维码|验证码|短信码|付款|支付|付钱|下单付|刷卡|人脸|指纹|本人(登录|签|到场)|(插|拔|按|装)[^\n，。；;]{0,6}(板子|按钮|电源|线|卡|实物)|上电",
+    "msg": "「要你做的」把能自己做的事交给了用户（{hit}），这条退回，先换路：用户定过沙盒、测试、能撤回的事自己做，只有真钱、发到外面、删东西、换方向才问他（11-10「你自己搞，你忘了我跟你说的事情了么」）。缺文件就去本机、隔壁测试目录、仓库、wiki 里找来自己拷；要跑的命令自己跑；要权限就换不要权限的做法（隔离目录、自己的账号、模拟数据），先做不受影响的部分；改设置先备份、写清怎么改回再改。换路后重发，「要你做的」只留必须他拍板的事或只有他本人能做的事（扫码、验证码、付款、实物动手），没有就写「没有」；真试过都不通，写明试过哪几条路、各卡在哪"
+  },
+  "length": {
+    "_why": "用户 11-10「为什么回复那么长」「把这个太长也处理一下」：给用户的四段按用户的汇报规矩每段最多两句，多的挪进细节；超了退回重写，不截断",
+    "max_sentences": 2,
+    "end_re": "[。！？!?]+",
+    "parts": [
+      "背景",
+      "做了什么",
+      "要你做的",
+      "我加的"
+    ],
+    "msg": "「{part}」那段写了 {n} 句，每段最多 {max} 句：只留结论和用户要知道的，其余挪进「细节：」之后"
   }
 }

package/collab/team-exit.mjs

@@ -24,6 +24,15 @@ const BACKGROUND = new RegExp(RULES.summary.background_re);
 const TODO = new RegExp(RULES.summary.todo_re);
 const DETAIL = new RegExp(RULES.summary.detail_re);
 const ADDED = new RegExp(RULES.summary.added_re);
+const SENTENCE_END = new RegExp(RULES.length.end_re);
+const SR_TODO = new RegExp(RULES.self_route.todo_re);
+const SR_END = new RegExp(RULES.self_route.end_re);
+const SR_NONE = new RegExp(RULES.self_route.none_re);
+const SR_ASK_LINE = new RegExp(RULES.self_route.ask_line_re);
+const SR_HAND = new RegExp(RULES.self_route.hand_re);
+const SR_MINE = new RegExp(RULES.self_route.mine_re);
+const SR_NEG = new RegExp(RULES.self_route.neg_re);
+const SR_ONLY_USER = new RegExp(RULES.self_route.only_user_re);
 // Consecutive bounces that still wake the asking member; later ones are only posted.
 const BOUNCE_WAKE_LIMIT = RULES.bounce.wake_limit;
 
@@ -46,6 +55,45 @@ export function askEvidenceProblems(body) {
   return problems;
 }
 
+function handHit(text) {
+  if (SR_ONLY_USER.test(text)) return '';
+  for (const hand of text.matchAll(new RegExp(RULES.self_route.hand_re, 'g'))) {
+    const before = text.slice(0, hand.index);
+    if (!SR_MINE.test(before) && !SR_NEG.test(before)) return hand[0].trim();
+  }
+  return '';
+}
+
+/** What the 「要你做的」 part asks the user to do that DSH could do itself (Go: SelfRouteProblems). */
+export function selfRouteProblems(body) {
+  body = String(body ?? '').replaceAll('\r\n', '\n');
+  if (!SR_TODO.test(body)) {
+    for (const line of body.split('\n')) {
+      if (SR_ASK_LINE.test(line)) {
+        const hit = handHit(line);
+        if (hit) return [RULES.self_route.msg.replaceAll('{hit}', hit)];
+      }
+    }
+    return [];
+  }
+  let rest = body;
+  while (true) {
+    const todo = SR_TODO.exec(rest);
+    if (!todo) return [];
+    rest = rest.slice(todo.index + todo[0].length);
+    const [first, ...more] = rest.split('\n');
+    if (!SR_NONE.test(first)) {
+      const part = [first];
+      for (const line of more) {
+        if (SR_END.test(line)) break;
+        part.push(line);
+      }
+      const hit = handHit(part.join('\n'));
+      if (hit) return [RULES.self_route.msg.replaceAll('{hit}', hit)];
+    }
+  }
+}
+
 /** { id, line, problems } of a marked body's first line; line is the part for the user (Go: exitHeadline). */
 export function exitHeadline(body) {
   const first = String(body ?? '').split('\n')[0].trim();
@@ -100,6 +148,29 @@ export function summaryProblems(summary) {
   return problems;
 }
 
+/** A part for the user over the sentence limit; goes back to be rewritten, never cut (Go: lengthProblems). */
+export function lengthProblems(summary) {
+  const max = RULES.length.max_sentences;
+  if (!(max > 0) || RULES.length.parts.length < 4) return [];
+  const texts = ['', '', '', ''];
+  let part = 0;
+  String(summary).split('\n').forEach((l, i) => {
+    if (i > 0 && part === 0) part = 1;
+    if (part < 2) {
+      const m = TODO.exec(l);
+      if (m) { texts[part] += ' ' + l.slice(0, m.index); part = 2; l = l.slice(m.index); }
+    }
+    if (part < 3 && ADDED.test(l)) part = 3;
+    texts[part] += ' ' + l;
+  });
+  const problems = [];
+  texts.forEach((t, i) => {
+    const n = t.split(SENTENCE_END).filter(x => x.trim()).length;
+    if (n > max) problems.push(RULES.length.msg.replaceAll('{part}', RULES.length.parts[i]).replaceAll('{n}', String(n)).replaceAll('{max}', String(max)));
+  });
+  return problems;
+}
+
 /** The part for the user names numbers, workspaces, branches, paths or identifiers, or has a table (Go: jargonProblems). */
 export function jargonProblems(line) {
   const problems = [];
@@ -122,10 +193,16 @@ export function exitBounceText(kind, problems) {
  * rewrites it; DSH posts it without the headline).
  */
 export function judgeExit(kind, body, { known, bounces = 0 }) {
-  const problems = kind === 'ask' ? askEvidenceProblems(body) : [];
+  const askProblems = kind === 'ask' ? askEvidenceProblems(body) : [];
+  const routeProblems = selfRouteProblems(body);
+  const problems = [...askProblems];
   let { id, line, problems: hp } = exitHeadline(body);
   if (!hp.length && !known(id)) hp = [RULES.headline.unknown_id.replaceAll('{id}', String(id))];
-  else if (!hp.length) hp = [...summaryProblems(line), ...jargonProblems(line)];
+  else if (!hp.length) hp = [...summaryProblems(line), ...jargonProblems(line), ...lengthProblems(line)];
+  if (routeProblems.length) {
+    if (bounces >= BOUNCE_WAKE_LIMIT && !askProblems.length) return { id, line, problems: [], legacy: true, check: routeProblems };
+    problems.push(...routeProblems);
+  }
   // Format goes back only while bounces still wake the member; after that the chat lead rewrites it.
   if (hp.length && !problems.length && bounces >= BOUNCE_WAKE_LIMIT) return { id, line, problems, legacy: true };
   return { id, line, problems: [...problems, ...hp], legacy: false };
@@ -187,9 +264,16 @@ export class TeamExit {
       member_id TEXT NOT NULL, forwarded_id INTEGER UNIQUE, source_id INTEGER UNIQUE,
       answer_source_id INTEGER UNIQUE, answered INTEGER NOT NULL DEFAULT 0)`);
     this.bounces = new Map(); // `${room}:${member}` -> consecutive [ask] bounces
+    this.rejectedMessages = new Set();
     hub.onMessage(msg => this.onMessage(msg));
   }
 
+  consumeRejected(msgId) {
+    if (!this.rejectedMessages.has(msgId)) return false;
+    this.rejectedMessages.delete(msgId);
+    return true;
+  }
+
   /** Post why the [ask] stayed in the workspace and wake its author to fix it. */
   bounce(room, msg, problems, kind = 'ask') {
     const key = `${room.id}:${msg.author}`;
@@ -238,9 +322,13 @@ export class TeamExit {
     if (mark) {
       const bounces = this.bounces.get(`${room.id}:${msg.author}`) ?? 0;
       const v = judgeExit(mark.kind, mark.body, { known: id => Boolean(this.hub.tasks?.task?.(id)), bounces });
-      if (v.problems.length) return this.bounce(room, msg, v.problems, mark.kind);
+      if (v.problems.length) {
+        if (selfRouteProblems(mark.body).length) this.rejectedMessages.add(msg.id);
+        return this.bounce(room, msg, v.problems, mark.kind);
+      }
       // Once bounces stop waking the member, a reply still without a headline goes out as before.
       if (!v.legacy) headline = { ...v, task: this.hub.tasks?.task?.(v.id) };
+      if (v.check) mark.body = `${exitBounceText(mark.kind, v.check)}\n\n${mark.body}`;
     }
     // Any reply without a bounced [ask] ends the run of bounces.
     this.bounces.delete(`${room.id}:${msg.author}`);
@@ -324,4 +412,5 @@ export class TeamExit {
     if (headline && !headline.problems.length) headline.task = this.hub.tasks?.task?.(headline.id);
     return this.forward(room, msg, body, undefined, headline?.task ? headline : undefined);
   }
+
 }

package/collab/team-mode-rules.md

@@ -1,10 +1,10 @@
 [团队模式规矩 — 每个角色都适用]
 - 频道分两种：聊天频道（用户聊天、看结果）和它下面的工作区（干活）。
-- 多步骤的活先开公开任务卡（先发 --kind start）；闲聊、问答不开。
-- 聊天频道要保持畅通，大活交工作区：预计超过 10 分钟，或要改代码、跑测试、等命令的，谁接活谁这一轮写交接（副手被直接点名也一样）（至少写「用户原话」「总目标」「范围」三节和参照实现，范围每项写一行「改：…」；被退回按列出的一次补齐），跑 `ws-handoff <交接文件> "<任务>"`，不在聊天频道自己做；它不算开子 agent，不用另问用户；交出就结束本轮，不在本轮等或查进度，结果由工作区 [report] 转回。工作区里接到的活自己做。DSH 频道调 POST /collab/api/rooms/{聊天频道 id}/workspaces。一个工作区同一时间只做一件活，满 4 个就排队。
-- 聊天频道里对真人说人话：讲场景、短段落，默认不用表格、不贴代码，细节进子话题。
+- 多步骤自己做的活先开公开任务卡（先发 --kind start）；交工作区的、闲聊不开。
+- 聊天频道要保持畅通，大活交工作区：预计超过 10 分钟，或要改代码、跑测试、等命令的，谁接活谁这一轮写交接（副手被直接点名也一样）（至少写「用户原话」「总目标」「范围」三节和参照实现，范围每项写一行「改：…」；被退回按列出的一次补齐），收到就跑 `ws-handoff <交接文件> "<任务>"`，交前不查，不在聊天频道自己做；它不算开子 agent，不用另问用户；交出就结束本轮，不等、不查进度。工作区里接到的活自己做。DSH 频道调 POST /collab/api/rooms/{聊天频道 id}/workspaces。一个工作区同一时间只做一件活，没空的就新开。
+- 聊天频道里对真人说人话：先结论，每条五句内，默认不表格不贴代码，细节进子话题。
 - 同团队同平台成员在新频道默认可派；团队外成员才请用户发 `/bind <队友项目名>`，机器人自己发的 /bind 不生效。
-- 在工作区里要问用户或交结果：最后一条回复第一行写 [ask] 或 [report] 加 #任务板编号和「背景：」，再一行做了什么，再一行「要你做的：」，再一行「我加的：」（用户原话里没有、你加的设定，没有写「无」）；这四段贴到聊天频道，不写编号、代号、路径、表格；之后是细节，进子话题。截图用 ws-up --image 推；文字进度不推。
+- 在工作区里要问用户或交结果：最后一条回复第一行写 [ask] 或 [report] 加 #任务板编号和「背景：」，再一行做了什么，再一行「要你做的：」，再一行「我加的：」（原话里没有、你加的设定，没有写「无」）；这四段贴到聊天频道，不写编号、代号、路径、表格，细节进子话题。截图用 ws-up --image 推；文字进度不推；文档有链接就不带。
 - 发 [ask] 后工作区让出、会话清空，用户回复后系统找空工作区带交接文件和答复接着做；交回最终 [report] 后系统自动标完成、清空会话、放回工作区。
 - 聊天频道共用工作区1..n，各同时只归一个，挑空的，都占着就新建；用户要新频道用 `bothouse channel create <名字>`，不自己调 Discord API。
 - 收口（每小时合结果、发汇报）时，没收完、这一小时也没在动的活由收口的人当场暂停（`board pause <编号>`）：它让出工作区，那里没别的活就放回池子、清空会话；恢复时重新交活，先用空着的工作区。

package/node_modules/bothouse-dsh-channels/client.js

@@ -1,4 +1,4 @@
-// dsh-client-source-sha256: 5037a02f49002644a36f24ed38c08bff4c5de75980c85a1224a90a82b5c82109
+// dsh-client-source-sha256: 5228c5c93d0c2cb5f22534536897b5f04ad32e249a1ce334768149fccd0a3a2a
 // dsh-style-sha256: 9ec6f9be158431d36e8c658f1b8def48515a0e80fe35ad14ccfa7202308bb0cd
 window.__ModuleLoader__.load({
  id: "bothouse-dsh-channels",
@@ -66,6 +66,18 @@ const attachmentUrl = (id) => `collab/api/attachments/${encodeURIComponent(id)}`
 const MAX_MESSAGE_BODY = 8388608;
 /** #197: fallback when the service does not report its cap (`max_upload_bytes`); matches collab's DEFAULT_MAX_UPLOAD_BYTES. */
 const DEFAULT_MAX_UPLOAD_BYTES = 1073741824;
+/**
+* #1445: fallback text cap when the service does not report `max_text_chars`.
+* 来源：dsh/collab/store.mjs:8 `MAX_TEXT = 128 * 1024`，同一数值也由 `/collab/api/state` 的
+* `max_text_chars` 回传；这份抄写只覆盖还没有该字段的旧宿主。
+*/
+const DEFAULT_MAX_TEXT_CHARS = 131072;
+/**
+* #1445: whether the typed text alone exceeds the service's character cap. The service compares
+* `text.length` against MAX_TEXT (collab/store.mjs), so this must count characters too — a byte
+* count would let 131072 Chinese characters (about 400 KB) through to a `too-long` refusal.
+*/
+const textTooLarge = (text, maxChars) => text.length > maxChars;
 /** Whether a message with these attachments would exceed the server's body cap (checked before sending). */
 const messageTooLarge = (text, attachments) => new TextEncoder().encode(JSON.stringify({
 	text,
@@ -121,7 +133,8 @@ const INITIAL = {
 	taskChat: void 0,
 	hasMoreOlder: false,
 	outbox: [],
-	maxUploadBytes: DEFAULT_MAX_UPLOAD_BYTES
+	maxUploadBytes: DEFAULT_MAX_UPLOAD_BYTES,
+	maxTextChars: DEFAULT_MAX_TEXT_CHARS
 };
 /** Position of message `id` in rows ascending by id, or -1. */
 function indexOfId(rows, id) {
@@ -218,18 +231,20 @@ function memberNameRefused(name) {
 * @param t - the panel's dictionary, so an English UI stays English.
 * @param place - the field being edited when the action failed.
 * @param typed - the name the person typed, for the copy that names it.
+* @param limits - the caps the panel knows about, for the copy that quotes one back (#1445).
 * @returns one line to show under the form.
 */
-function errorText(error, t, place = "other", typed = "") {
+function errorText(error, t, place = "other", typed = "", limits = {}) {
 	const message = error instanceof Error ? error.message : String(error);
 	if (!(error instanceof ServiceError)) return message;
+	if (error.code === "too-long") return t("messageTooLarge", { limit: t("charCount", { count: limits.textChars ?? 131072 }) });
 	const code = error.code;
 	const name = place === "room" ? typed.trim().replace(/^#/, "") : typed.trim();
 	if (code === "conflict" && place === "room") return WORKSPACE_NAME.test(name) ? t("channelNameReserved", { name }) : t("channelNameTaken", { name });
 	if (code === "invalid" && place === "room") return t("channelNameInvalid");
 	if (code === "conflict" && place === "member") return t("memberNameTaken", { name });
 	if (code === "invalid" && place === "member" && memberNameRefused(name)) return t("memberNameInvalid");
-	return t("actionFailed", { message });
+	return place === "send" ? t("sendFailed", { message }) : t("actionFailed", { message });
 }
 function json(method, body) {
 	return {
@@ -303,6 +318,8 @@ function createChannelSource(transport) {
 	/** Unconfirmed messages for every room; the snapshot exposes the selected room's. */
 	/** #197: how big one attachment may be, as the service reported it (state) or the collab default. */
 	let uploadLimit = DEFAULT_MAX_UPLOAD_BYTES;
+	/** #1445: how many characters one message may hold, as `/collab/api/state` reported it (`max_text_chars`). */
+	let textLimit = DEFAULT_MAX_TEXT_CHARS;
 	let outbox = [];
 	/**
 	* Page-back request in flight per room, tagged with the ticket and the epoch
@@ -562,6 +579,7 @@ function createChannelSource(transport) {
 			const state = await request("collab/api/state", { signal: read.controller.signal });
 			if (!current()) return;
 			if (Number.isSafeInteger(state.max_upload_bytes) && (state.max_upload_bytes ?? 0) > 0) uploadLimit = state.max_upload_bytes;
+			if (Number.isSafeInteger(state.max_text_chars) && (state.max_text_chars ?? 0) > 0) textLimit = state.max_text_chars;
 			const remembered = previous.roomId === void 0 ? rememberedRoom() : void 0;
 			const roomId = state.rooms.some((r) => r.id === previous.roomId) ? previous.roomId : state.rooms.some((r) => r.id === remembered) ? remembered : state.rooms[0]?.id;
 			const rows = [];
@@ -631,6 +649,7 @@ function createChannelSource(transport) {
 				leadId: state.lead_id ?? null,
 				effectiveLeadId: state.effective_lead_id ?? state.lead_id ?? null,
 				maxUploadBytes: uploadLimit,
+				maxTextChars: textLimit,
 				tasks: keepBoard ? previous.tasks : [],
 				taskChat: keepBoard ? previous.taskChat : void 0,
 				outbox: outbox.filter((entry) => entry.roomId === roomId)
@@ -19755,26 +19774,72 @@ function HighlightedMarkdown({ text, labels, members, className, inline, dataCar
 // src/client/avatars.ts
 /**
 * Built-in member avatars served by the collab plugin at `collab/avatars/<slug>.png`:
-* the five original character portraits (user 2026-10-23: 「我还是保留原本那个」).
+* the four B-version character portraits (Claude / GPT / DeepSeek / Gemini) + Grok + lanxi.
 */
 const AVATARS = [
 	"orange",
 	"whale",
 	"dragon",
 	"rainbow",
-	"lanxi"
+	"lanxi",
+	"grok"
 ];
 /**
+* Maps member role/model/cli/name to a built-in avatar slug:
+* - Claude -> orange
+* - GPT / Codex -> dragon
+* - DeepSeek -> whale
+* - Gemini -> rainbow
+* - Grok -> grok
+*/
+function matchAvatarSlug(opts) {
+	if (opts.avatar && AVATARS.includes(opts.avatar)) return opts.avatar;
+	const model = (opts.model || "").toLowerCase();
+	const cli = (opts.cli || "").toLowerCase();
+	const name = (opts.name || opts.id || "").toLowerCase();
+	if (model) {
+		if (model.includes("claude") || model.includes("opus") || model.includes("sonnet") || model.includes("haiku")) return "orange";
+		if (model.includes("gpt") || model.includes("codex") || model.includes("o1") || model.includes("o3") || model.includes("o4") || model.includes("chatgpt")) return "dragon";
+		if (model.includes("deepseek") || model.includes("r1") || model.includes("v3")) return "whale";
+		if (model.includes("gemini")) return "rainbow";
+		if (model.includes("grok") || model.includes("xai")) return "grok";
+	}
+	if (cli) {
+		if (cli === "claude" || cli === "claudecode") return "orange";
+		if (cli === "codex") return "dragon";
+		if (cli === "deepseek" || cli === "dsh") return "whale";
+		if (cli === "gemini" || cli === "antigravity") return "rainbow";
+		if (cli === "grok") return "grok";
+	}
+	if (name) {
+		if (name === "橘" || name === "c酱" || name === "cjiang" || name === "claude") return "orange";
+		if (name === "龙娘" || name === "g哥" || name === "gge" || name === "codex" || name === "gpt") return "dragon";
+		if (name === "鲸鱼娘" || name === "肥鱼" || name === "deep" || name === "deepseek" || name === "dsh") return "whale";
+		if (name === "彩虹猫" || name === "大豆包" || name === "gjiang" || name === "gemini") return "rainbow";
+		if (name === "岚汐" || name === "lanxi" || name === "minimax") return "lanxi";
+		if (name === "grok" || name.includes("grok")) return "grok";
+	}
+}
+/**
 * Image source for a member avatar.
-* @param avatar - built-in slug, http(s) URL announced by a bot, or empty.
+* @param avatar - built-in slug, http(s) URL announced by a bot, AvatarOptions, or empty.
 * @param url - #236 path mapper of the panel (a paired computer's panel reads its avatars).
 * @returns a URL relative to the document base, the absolute URL, or undefined for the initial badge.
 */
 function avatarSrc(avatar, url = (path) => path) {
 	if (avatar === void 0 || avatar === "") return void 0;
-	if (/^upload:[a-z0-9-]+\.png$/.test(avatar)) return url(`collab/avatars/uploads/${avatar.slice(7)}`);
-	if (/^https?:\/\//.test(avatar)) return avatar;
-	return AVATARS.includes(avatar) ? url(`collab/avatars/${avatar}.png`) : void 0;
+	if (typeof avatar === "string") {
+		if (/^upload:[a-z0-9-]+\.png$/.test(avatar)) return url(`collab/avatars/uploads/${avatar.slice(7)}`);
+		if (/^https?:\/\//.test(avatar)) return avatar;
+		if (AVATARS.includes(avatar)) return url(`collab/avatars/${avatar}.png`);
+		const matched = matchAvatarSlug({ name: avatar });
+		return matched ? url(`collab/avatars/${matched}.png`) : void 0;
+	}
+	const a = avatar.avatar;
+	if (a && /^upload:[a-z0-9-]+\.png$/.test(a)) return url(`collab/avatars/uploads/${a.slice(7)}`);
+	if (a && /^https?:\/\//.test(a)) return a;
+	const slug = matchAvatarSlug(avatar);
+	return slug ? url(`collab/avatars/${slug}.png`) : void 0;
 }
 // src/client/Avatar.tsx
 /** Member portrait: a built-in or bot-announced image over a colored initial badge. */
@@ -19794,8 +19859,15 @@ function color(id) {
 	return PALETTE[h % PALETTE.length];
 }
 /** Member portrait, or a colored initial badge when there is none or the image fails to load. */
-function Avatar({ id, name, avatar, avatarVersion, small }) {
-	const base = avatarSrc(avatar, useCollabUrl());
+function Avatar({ id, name, avatar, avatarVersion, small, cli, model }) {
+	const url = useCollabUrl();
+	const base = avatarSrc({
+		avatar,
+		name,
+		cli,
+		model,
+		id
+	}, url);
 	const src = base && avatar?.startsWith("upload:") && avatarVersion ? `${base}?v=${avatarVersion}` : base;
 	const [broken, setBroken] = (0, react.useState)(void 0);
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
@@ -22329,6 +22401,10 @@ function ChannelsPage({ useChannels, selectRoom, send, uploadAttachment, reviewT
 		}));
 	};
 	const limit = state.maxUploadBytes ?? 1073741824;
+	/** #1445: the character cap the store enforces, read back from /state (MAX_TEXT there). */
+	const textLimit = state.maxTextChars ?? 131072;
+	/** #1445: a failure worded in the panel's language, quoting the caps this panel knows about. */
+	const failure = (error, place = "other", typed = "") => errorText(error, t, place, typed, { textChars: textLimit });
 	const attach = useComposerAttachments((picked) => {
 		const roomId = state.roomId;
 		if (roomId === void 0) return;
@@ -23045,7 +23121,7 @@ function ChannelsPage({ useChannels, selectRoom, send, uploadAttachment, reviewT
 		}, (error) => {
 			setErrors((previous) => ({
 				...previous,
-				[roomId]: t("sendFailed", { message: error instanceof Error ? error.message : String(error) })
+				[roomId]: failure(error, "send")
 			}));
 			return false;
 		});
@@ -23124,6 +23200,14 @@ function ChannelsPage({ useChannels, selectRoom, send, uploadAttachment, reviewT
 			}));
 			return;
 		}
+		const maxTextChars = state.maxTextChars ?? 131072;
+		if (textTooLarge(text, maxTextChars)) {
+			setErrors((previous) => ({
+				...previous,
+				[roomId]: t("messageTooLarge", { limit: t("charCount", { count: maxTextChars }) })
+			}));
+			return;
+		}
 		if (messageTooLarge(text, [])) {
 			setErrors((previous) => ({
 				...previous,
@@ -23175,7 +23259,7 @@ function ChannelsPage({ useChannels, selectRoom, send, uploadAttachment, reviewT
 			}).catch((error) => {
 				setErrors((previous) => ({
 					...previous,
-					[roomId]: t("sendFailed", { message: error instanceof Error ? error.message : String(error) })
+					[roomId]: failure(error, "send")
 				}));
 			});
 		};
@@ -24556,6 +24640,8 @@ const zh = {
 	removeAttachment: "移除附件",
 	attachmentsTooLarge: "附件太大：一条消息合计不能超过 {limit}",
 	messageTooLarge: "消息太长：一条消息不能超过 {limit}",
+	/** #1445: the text cap counts characters, so the number reads with its unit in the panel language. */
+	charCount: "{count} 字符",
 	attachmentTooLarge: "「{name}」{size}，超过单个文件上限 {limit}",
 	attachmentUploading: "上传中",
 	attachmentQueued: "等待上传",
@@ -24924,6 +25010,7 @@ const en = {
 	removeAttachment: "Remove attachment",
 	attachmentsTooLarge: "Attachments too large: one message can carry at most {limit} in total",
 	messageTooLarge: "Message too long: one message can hold at most {limit}",
+	charCount: "{count} characters",
 	attachmentTooLarge: "\"{name}\" is {size}, over the per-file limit of {limit}",
 	attachmentUploading: "Uploading",
 	attachmentQueued: "Waiting to upload",
@@ -25015,6 +25102,71 @@ const en = {
 	replyDeleted: "Original message was deleted",
 	cancelReply: "Cancel reply"
 };
+// src/client/panel-hash.ts
+/** Shape the fragment may take: one sidebar key (`plugins`, `schedules`, `collab-desk`, …). */
+const PANEL_ID$1 = /^[A-Za-z0-9][A-Za-z0-9._~-]*$/;
+/** The main-panel id a fragment names; `null` for an empty or unrecognised one. */
+function panelIdFromHash(hash) {
+	const raw = hash.startsWith("#") ? hash.slice(1) : hash;
+	return PANEL_ID$1.test(raw) ? raw : null;
+}
+/** The address of the current page with `id` as its fragment: query (the wizard token) untouched. */
+function addressFor(id) {
+	return `${location.pathname}${location.search}${id === null ? "" : `#${id}`}`;
+}
+/**
+* Mirror every later panel selection into the fragment; the returned function stops following.
+* Opening a panel writes `#<id>`, going back to the conversation clears it.
+* @param layout - `ctx.layout` (panel selection and its shared source).
+* @returns unsubscribe.
+*/
+function followPanelHash(layout) {
+	const source = layout.panelInfo;
+	let last = source.getSnapshot().activePanelId;
+	return source.subscribe(() => {
+		const next = source.getSnapshot().activePanelId;
+		if (next === last) return;
+		last = next;
+		if (addressFor(next) === `${location.pathname}${location.search}${location.hash}`) return;
+		history.replaceState(history.state, "", addressFor(next));
+	});
+}
+/** Whether a keyed `main` panel with this id is registered right now. */
+function hasMainPanel(slots, id) {
+	return slots.entriesOfSlot("main").some((entry) => entry.options.key === id);
+}
+/**
+* Open the panel the fragment names, once its package has registered it; the returned function
+* stops waiting. Panels register when their own browser half loads, which can be after this
+* plugin: `layout.selectPanel` throws for a main key that is not registered yet (see
+* bothouse-dsh-panel/client.js), so this waits for the registration instead of firing once.
+* @param layout - `ctx.layout`.
+* @param slots - `ctx.slots` (main-slot registry and its change subscription).
+* @param hash - the fragment to honour; defaults to the current address.
+* @returns unsubscribe from the pending restore.
+*/
+function restorePanelFromHash(layout, slots, hash = location.hash) {
+	const id = panelIdFromHash(hash);
+	if (id === null) return () => {};
+	if (hasMainPanel(slots, id)) {
+		layout.selectPanel(id);
+		return () => {};
+	}
+	if (layout.panelInfo.getSnapshot().activePanelId !== null) return () => {};
+	let stopWaiting = () => {};
+	let stopWatching = () => {};
+	const done = () => {
+		stopWaiting();
+		stopWatching();
+	};
+	stopWaiting = slots.subscribe("main", () => {
+		if (!hasMainPanel(slots, id)) return;
+		done();
+		if (layout.panelInfo.getSnapshot().activePanelId === null) layout.selectPanel(id);
+	});
+	stopWatching = layout.panelInfo.subscribe(done);
+	return done;
+}
 // src/client/index.ts
 const PANEL_ID = "channels";
 const REMOTE_PANEL_ID = "remote-channels";
@@ -25036,6 +25188,8 @@ function apply(ctx) {
 		zh,
 		en
 	}), "client-ui-discord: dictionaries");
+	ctx.effect(() => followPanelHash(ctx.layout), "client-ui-discord: panel hash");
+	ctx.effect(() => restorePanelFromHash(ctx.layout, ctx.slots), "client-ui-discord: panel hash restore");
 	const t = ctx.locale.bind(NS);
 	const channels = createChannelSource(browserTransport());
 	ctx.effect(() => channels.dispose, "client-ui-discord: channel stream");
@@ -25100,7 +25254,6 @@ function apply(ctx) {
 		};
 		bindPanel();
 		const unsubscribe = ctx.slots.subscribe("sidebar.settings", bindPanel);
-		if (location.hash === `#${PANEL_ID}`) ctx.layout.selectPanel(PANEL_ID);
 		return () => {
 			unsubscribe();
 			disposePanel?.();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bothouse-dsh",
-  "version": "0.1.62",
+  "version": "0.1.64",
   "description": "BotHouse channels for DeepSeek Harness: Discord-style rooms where DSH models and local CLIs (Claude Code, Codex, Gemini) are members",
   "type": "module",
   "main": "./collab/plugin.mjs",