dsh-bridge-gateway 0.1.4 → 0.1.5

package/CHANGELOG.md

@@ -2,7 +2,22 @@
 
 本项目 `dsh-bridge-gateway` 是基于 [dsh-bridge](https://github.com/wenbin-wb/dsh-bridge) 的移植增强分支，在保留原版能力之外，重点新增「公网直连网关」。
 
-## [0.1.4] - 待发布
+## [0.1.5] - 2026-09-12
+
+### 变更
+- 适配 DSH 0.1.5：RPC 通道从 `connection.rpc.handle` 迁到 webServer 直注册 + `connection.requestRejection` 鉴权（0.1.5 inject 守卫使旧入口不可用，wire 格式不变）。
+
+### 修复（移动端深度适配批次，基于 390px/320px 真机实测坐标）
+- 顶栏「标准模式」与「对话管理」水平重叠（390px 下重叠 11px）：titleRow 允许换行，titleCluster/headerActions/headerUtilities 各自可收缩并限宽（45vw/50vw），内部按钮限宽省略号。
+- 输入框被撑到 780px 而消息列仅 318px：从会话根节点收窄 `--dsh-chat-content-width`/`--dsh-composer-card-max-width` 变量，并补上此前遗漏的 `uV2eYG_root` 约束层，输入框祖先链整体不超视口。
+- 320px 下 git 分支 chip 溢出屏幕右侧 39px 被裁切：chip 限宽 `min(120px, 30vw)`，其 `position:absolute` 浮层锚点改用 `right: 8px` 覆盖内联 `left`。
+- 主要控件（模型/权限/工作区/分支 chip/会话操作等 10 类按钮）点击热区经伪元素 `inset: -8px` 扩至约 44px，视觉尺寸不变。
+- 侧边栏关闭时仅被 transform 移出屏幕、内部 7 个按钮仍可被 Tab 聚焦：改用 `visibility: hidden` + `pointer-events: none`，抽屉打开时恢复。
+- 隐藏 dsh-better-sidebar 注入的全屏 `panel-host` 遮罩（z-index 25 压住输入框并拦截点击）与主题装饰性 `glass-fade` 渐变条（右下角小方块）。
+- 输入框底部工具栏（权限选择器/模型选择器/添加命令/发送）弹性自适应互不重叠。
+- 侧边栏抽屉底部溢出屏幕 38px：`box-sizing: border-box` + `100dvh` 高度约束。
+
+## [0.1.4] - 2026-08-30
 
 ### 修复
 - 修复「远程访问」面板在宿主连接未建立时无限卡在「加载中」的问题：为状态拉取增加兜底超时（15s），超时后释放 in-flight 锁并给出可用的「🔄 重试」按钮，避免面板永远无法自行恢复。

package/README.md

@@ -1,47 +1,82 @@
 # dsh-bridge-gateway
 
-DeepSeek Harness 远程访问插件：以 [dsh-bridge](https://github.com/wenbin-wb/dsh-bridge) 为基础，额外加入 **「公网直连网关」**，让手机/外网设备能直接访问操作电脑上的 Harness。
+English | [简体中文](./README.zh.md)
 
-局域网、Cloudflare 隧道、自建隧道、IM 机器人等原有能力保持不变。
+Remote-access plugin for DeepSeek Harness (DSH). Built on top of [dsh-bridge](https://github.com/wenbin-wb/dsh-bridge), it adds a **public direct-connect gateway** so phones and other out-of-network devices can open and operate the Harness running on your computer — no tunnel required.
 
-## 一键安装
+LAN access, Cloudflare tunnels, custom tunnels, and the IM bots all keep working exactly as before. The plugin is fully inert until you enable the features you want.
 
-```bash
+## Features
+
+- **Public direct-connect gateway.** The computer listens on `0.0.0.0:<port>` with its own HTTPS self-signed certificate and a forced login gate, so outside devices connect straight to your machine. The link is terminated at the gateway and proxied to the DSH loopback, so plugin pages and RPC channels work unchanged.
+- **LAN access.** Scan a QR code from the remote-access panel on the same Wi-Fi and you are in.
+- **Public tunnels.** Cloudflare (temporary or fixed hostname) or a self-built tunnel, selectable per need alongside the direct gateway.
+- **Remote workspace.** Browse the host's directory tree and pick workspace conversations from the phone.
+- **Security.** Password gate + QR-based password-free token + admin unlock/lock for sensitive config + rate limiting against brute force. Client-claimed `isLocalhost` is never trusted.
+- **IM bots.** WeChat / QQ / Feishu / Telegram bots connect through their own gateway links — no public IP needed. Per-platform guides live in [docs/](./docs).
+- **Mobile-friendly web.** The remote web UI is deeply adapted for phone screens: drawer sidebar (fully hidden when closed, removing keyboard/screen-reader focus traps), top-bar mode and conversation-management controls that wrap instead of overlapping, git branch chips anchored to the viewport edge instead of being clipped, composer width aligned with the conversation column and stuck to the bottom, ~44px touch targets on the main controls via pseudo-element hit areas, and removal of full-screen overlays and decorative gradient strips that covered the input box.
+- **All configuration in the UI.** Every feature above is configured from DSH Web's remote-access panel; nothing is edited by hand.
+
+## Requirements
+
+- Node `^22.19.0 || >=24.0.0`.
+- DSH with a web profile (built and tested against `0.1.5-rc.2`; adapted for the 0.1.5 RPC/webServer entry points).
+
+## Install
+
+```sh
+# Preferred: install straight from GitHub (no npm involved)
+dsh plugin --profile web add github:lament-z/dsh-bridge-gateway
+
+# Alternative: from npm
 dsh plugin --profile web add dsh-bridge-gateway
+
+# From a local clone / working copy
+dsh plugin --profile web add link:<this directory>
 ```
 
-> 源码安装：`git clone https://github.com/lament-z/dsh-bridge-gateway && dsh plugin --profile web add ./dsh-bridge-gateway`
+Upgrade to the newest build: `dsh plugin --profile web add github:lament-z/dsh-bridge-gateway` again (or append `@latest` for the npm source). Then restart `dsh web`.
+
+Nothing changes on install: the gateway is off by default and the original LAN/tunnel/IM behavior is untouched.
+
+## Usage
+
+### Public direct-connect gateway (core feature)
+
+No tunnel needed — the computer exposes a port itself and outside devices connect directly.
+
+1. Install, then open DSH Web -> Settings -> **Public Access** tab.
+2. In the **Direct Gateway** card, set the port (default `7443`) and click save.
+3. Click **Enable Direct Gateway**.
+4. Map that port to this machine on your router / cloud server, then open `https://<public-IP-or-domain>:<port>` from outside.
+
+First visit shows a certificate warning because the HTTPS certificate is self-signed — choose "always allow" to continue. External visitors must pass the login gate configured under **Security**; the gate policy is independent of your LAN settings.
+
+### LAN access
 
-升级到最新版：`dsh plugin --profile web add dsh-bridge-gateway@latest`
+Open the remote-access panel in DSH Web and scan the QR code with the phone on the same Wi-Fi.
 
-## 核心功能：公网直连网关
+### Public tunnel
 
-不需要隧道，让电脑直接监听公网端口，外网直连访问。
+In the same panel choose Cloudflare (temporary or fixed hostname) or a self-built tunnel. See [docs/custom-tunnel.md](./docs/custom-tunnel.md) for the custom-tunnel protocol.
 
-- **HTTPS 自签证书**：本机自动生成，公网传输加密。
-- **强制登录门禁**：外部访问必须输入你在「安全认证」里设置的密码，与局域网策略相互独立。
-- **全界面配置**：端口、随 DSH 自动启动等，都在「公网访问」设置页里配置。
+### Security configuration
 
-### 开启方式
+Settings -> Security: enable protection, set the password, manage the password-free token, and unlock/lock the admin surface. Unauthorized visitors are rejected before any page content is served.
 
-1. 安装后进入 DSH Web 设置 → 「公网访问」Tab。
-2. 在「直连网关」卡片设置端口（默认 `7443`），点「保存端口」。
-3. 点击「开启直连网关」。
-4. 在路由器/云服务器把该端口映射到本机，即可通过 `https://<公网IP或域名>:端口` 访问。
+### IM bots
 
-浏览器首次访问会提示证书不安全，勾选「始终允许」即可继续。
+WeChat / QQ / Feishu / Telegram guides: [docs/wechat-usage.md](./docs/wechat-usage.md), [docs/qq-usage.md](./docs/qq-usage.md), [docs/feishu-usage.md](./docs/feishu-usage.md), [docs/telegram-usage.md](./docs/telegram-usage.md).
 
-## 其他能力
+## Security notes
 
-- **局域网访问**：同一 Wi-Fi 扫码即可。
-- **公网隧道**：Cloudflare（临时/固定域名）或自建隧道二选一，与直连网关按需选用。
-- **远程工作区**：手机端网页目录树直接浏览并选择工作区对话。
-- **安全认证**：密码 + 扫码免密 Token + 管理后台防篡改 + 防暴力破解。
-- **IM 机器人**：微信 / QQ / 飞书 / Telegram 扫码直连，无需公网。
+- The direct gateway always enforces `public_only`-style gating: external visitors authenticate through the same AuthManager as LAN access, and loopback-only resources stay loopback-only.
+- RPC channels are registered through the host web server and pass request-rejection authentication, so forged or unauthenticated channel calls are dropped at the entry.
+- The self-signed certificate encrypts transport; it does not add identity. Anyone with the password can log in — keep the password strong and enable admin lock.
 
-## 开发
+## Development
 
-```bash
+```sh
 git clone https://github.com/lament-z/dsh-bridge-gateway
 cd dsh-bridge-gateway
 npm install
@@ -50,10 +85,10 @@ npm test
 dsh plugin --profile web add .
 ```
 
-## 发布说明
+## Release notes
 
-打 `v*` 标签推送到 GitHub 即自动 `npm publish`（GitHub Actions，需仓库配置 `NPM_TOKEN` secret）。
+Pushing a `v*` tag to GitHub triggers automatic `npm publish` (GitHub Actions; the repository needs an `NPM_TOKEN` secret).
 
-## 开源协议
+## License
 
-[MIT](./LICENSE)
+[MIT](./LICENSE)

package/README.zh.md

@@ -0,0 +1,110 @@
+# dsh-bridge-gateway
+
+[English](./README.md) | 简体中文
+
+DeepSeek Harness（DSH）远程访问插件。以 [dsh-bridge](https://github.com/wenbin-wb/dsh-bridge)
+为根基，额外加入**「公网直连网关」**，让手机等外网设备不借助隧道就能直接访问、操作电脑上的
+Harness。
+
+局域网访问、Cloudflare 隧道、自建隧道、IM 机器人等原有能力保持不变；插件默认完全不启用，
+装上后原有行为零改动，需要什么再开什么。
+
+## 功能
+
+- **公网直连网关。** 电脑直接监听 `0.0.0.0:<端口>`，自带 HTTPS 自签证书与强制登录门禁，
+  外网设备直连访问。链路在网关处终结并转发到 DSH loopback，插件页面与 RPC 通道原样可用。
+- **局域网访问。** 同一 Wi-Fi 下用手机扫远程访问面板里的二维码即可进入。
+- **公网隧道。** Cloudflare（临时/固定域名）或自建隧道，与直连网关按需二选一或并存。
+- **远程工作区。** 手机端网页目录树直接浏览并选择工作区对话。
+- **安全认证。** 密码门禁 + 扫码免密 Token + 敏感配置的管理员解锁/锁定 + 防暴力破解限频；
+  永不信任客户端自称的 `isLocalhost`。
+- **IM 机器人。** 微信 / QQ / 飞书 / Telegram 机器人走各自网关链路，无需公网 IP；
+  分平台指南见 [docs/](./docs)。
+- **移动端适配。** 远程网页 UI 针对手机屏幕深度适配：抽屉化侧边栏（隐藏后消除键盘/读屏
+  焦点陷阱）、顶栏「标准模式/对话管理」换行不再重叠、git 分支 chip 按视口右边界锚定不再
+  被裁切、输入框宽度与对话列对齐且 sticky 固定于底部、主要控件以伪元素把点击热区扩到
+  约 44px、隐藏会遮挡输入框的全屏遮罩与装饰性渐变条。
+- **全界面配置。** 以上全部功能都在 DSH Web 远程访问面板里配置，无需手改任何文件。
+
+## 要求
+
+- Node `^22.19.0 || >=24.0.0`。
+- DSH web profile（构建与测试基于 `0.1.5-rc.2`，已适配 0.1.5 的 RPC/webServer 入口）。
+
+## 安装
+
+```sh
+# 推荐：直接从 GitHub 安装（不经 npm）
+dsh plugin --profile web add github:lament-z/dsh-bridge-gateway
+
+# 备选：从 npm 安装
+dsh plugin --profile web add dsh-bridge-gateway
+
+# 从本地 clone / 工作副本安装
+dsh plugin --profile web add link:<本目录>
+```
+
+升级到最新版：再次执行上面的 GitHub 安装命令（npm 来源可加 `@latest`）。然后重启 `dsh web`。
+
+安装后默认不启用：直连网关关闭，原有局域网/隧道/IM 行为完全不变。
+
+## 使用方法
+
+### 公网直连网关（核心功能）
+
+不需要隧道，让电脑直接监听公网端口，外网直连访问。
+
+1. 安装后进入 DSH Web 设置 -> **公网访问** Tab。
+2. 在**直连网关**卡片设置端口（默认 `7443`），点「保存端口」。
+3. 点击「开启直连网关」。
+4. 在路由器/云服务器把该端口映射到本机，即可通过 `https://<公网IP或域名>:端口` 访问。
+
+HTTPS 证书为自签，浏览器首次访问会提示不安全，勾选「始终允许」即可继续。外部访客必须通过
+**安全认证**里配置的登录门禁；门禁策略与局域网设置相互独立。
+
+### 局域网访问
+
+在 DSH Web 打开远程访问面板，用同一 Wi-Fi 下的手机扫二维码。
+
+### 公网隧道
+
+同一面板里选择 Cloudflare（临时/固定域名）或自建隧道。自建隧道协议见
+[docs/custom-tunnel.md](./docs/custom-tunnel.md)。
+
+### 安全配置
+
+设置 -> 安全认证：开启防护、设置密码、管理免密 Token、解锁/锁定管理面。未认证访客在
+任何页面内容返回之前就会被拒绝。
+
+### IM 机器人
+
+微信 / QQ / 飞书 / Telegram 使用指南：
+[docs/wechat-usage.md](./docs/wechat-usage.md)、[docs/qq-usage.md](./docs/qq-usage.md)、
+[docs/feishu-usage.md](./docs/feishu-usage.md)、[docs/telegram-usage.md](./docs/telegram-usage.md)。
+
+## 安全说明
+
+- 直连网关始终强制 `public_only` 式门禁：外部访客与局域网访问共用同一 AuthManager 认证，
+  仅限 loopback 的资源绝不经网关暴露。
+- RPC 通道经由宿主 web server 注册并通过请求拒绝（requestRejection）鉴权，
+  伪造或未认证的通道调用在入口即被丢弃。
+- 自签证书只加密传输、不提供身份：拿到密码的人就能登录——请设置强密码并开启管理员锁定。
+
+## 开发
+
+```sh
+git clone https://github.com/lament-z/dsh-bridge-gateway
+cd dsh-bridge-gateway
+npm install
+npm run build:client
+npm test
+dsh plugin --profile web add .
+```
+
+## 发布说明
+
+打 `v*` 标签推送到 GitHub 即自动 `npm publish`（GitHub Actions，需仓库配置 `NPM_TOKEN` secret）。
+
+## 开源协议
+
+[MIT](./LICENSE)

package/client/client.js

@@ -3829,6 +3829,54 @@ function injectMobileStyles() {
         display: none !important;
       }
 
+      /* ---- \u9876\u680F\u300C\u6807\u51C6\u6A21\u5F0F\u300D\u4E0E\u300C\u5BF9\u8BDD\u7BA1\u7406\u300D\u91CD\u53E0\u4FEE\u590D ----
+         \u5B9E\u6D4B\uFF08390px\uFF09\uFF1A\u6807\u51C6\u6A21\u5F0F(\u5728 titleCluster \u5185) \u53F3\u8FB9\u754C 102\uFF0C
+         \u5BF9\u8BDD\u7BA1\u7406(\u5728 headerUtilities \u5185) \u5DE6\u8FB9\u754C 91 \u2192 \u6C34\u5E73\u91CD\u53E0 11px\u3002
+         \u6839\u56E0\uFF1AtitleCluster \u53EA\u6709 46px \u5BBD\uFF08[33,79]\uFF09\uFF0C\u4F46\u5185\u90E8\u7684\u300C\u6807\u51C6\u6A21\u5F0F\u300D\u80F6\u56CA\u56FA\u5B9A 69px\uFF0C
+         \u6491\u7834\u7236\u5BB9\u5668\u540E\u4E0E\u53F3\u4FA7 headerUtilities \u76F8\u649E\u3002
+         \u4FEE\u590D\uFF1A\u5141\u8BB8 titleRow \u6362\u884C + \u8BA9\u4E24\u4FA7\u5404\u81EA\u53EF\u6536\u7F29\u5E76\u9650\u5BBD\u3002 */
+      div[class*="wSkVaW_titleRow"],
+      div[class*="_titleRow"] {
+        flex-wrap: wrap !important;
+        row-gap: 6px !important;
+        column-gap: 8px !important;
+        overflow: visible !important;
+      }
+      div[class*="wSkVaW_titleCluster"],
+      div[class*="_titleCluster"] {
+        flex: 1 1 auto !important;
+        min-width: 0 !important;
+        max-width: 100% !important;
+      }
+      div[class*="wSkVaW_headerActions"],
+      div[class*="_headerActions"] {
+        flex: 0 0 auto !important;
+        min-width: 0 !important;
+        max-width: 45vw !important;
+        overflow: hidden !important;
+      }
+      div[class*="wSkVaW_headerUtilities"],
+      div[class*="_headerUtilities"] {
+        flex: 0 0 auto !important;
+        min-width: 0 !important;
+        max-width: 50vw !important;
+        margin-left: auto !important;
+        overflow: hidden !important;
+      }
+      /* \u4E24\u8005\u5185\u90E8\u7684\u65E0 class \u6309\u94AE\uFF08\u6A21\u5F0F\u80F6\u56CA / \u5BF9\u8BDD\u7BA1\u7406 / \u5220\u9664\u672C\u5BF9\u8BDD\uFF09\u7EDF\u4E00\u9650\u5BBD\u5E76\u5141\u8BB8\u6536\u7F29 */
+      div[class*="wSkVaW_headerActions"] > *,
+      div[class*="wSkVaW_headerActions"] button,
+      div[class*="wSkVaW_headerActions"] span,
+      div[class*="wSkVaW_headerUtilities"] > *,
+      div[class*="wSkVaW_headerUtilities"] button,
+      div[class*="wSkVaW_headerUtilities"] span {
+        max-width: 100% !important;
+        min-width: 0 !important;
+        overflow: hidden !important;
+        text-overflow: ellipsis !important;
+        white-space: nowrap !important;
+      }
+
       /* \u5B50\u4EE3\u7406/\u667A\u80FD\u4F53\u6A21\u5F0F\u80F6\u56CA (Actions)\uFF1A\u7D27\u51D1\u5706\u89D2\u80F6\u56CA */
       div[class*="wSkVaW_headerActions"],
       div[class*="headerActions"] {
@@ -3939,6 +3987,136 @@ function injectMobileStyles() {
         box-sizing: border-box !important;
       }
 
+      /* ---- \u8F93\u5165\u6846\u5BBD\u5EA6\u4E0E\u5BF9\u8BDD\u5217\u5BF9\u9F50\u4FEE\u590D ----
+         \u95EE\u9898\uFF1A\u8FDB\u5165\u771F\u5B9E\u5BF9\u8BDD\u540E\u8F93\u5165\u6846\u88AB\u6491\u5230 780px\uFF08= 748px \u5185\u5BB9\u5BBD + 32px\uFF09\uFF0C
+         \u800C\u6D88\u606F\u5217\u4EC5 318px\uFF0C\u8F93\u5165\u6846\u6BD4\u5BF9\u8BDD\u5185\u5BB9\u5BBD\u7EA6 2.45 \u500D\u3002
+         \u6839\u56E0\uFF1A\u5361\u7247\u7684\u7236\u7EA7 uV2eYG_root \u81EA\u5E26 max-width: var(--dsh-composer-card-max-width)\uFF0C
+         \u5361\u7247\u81EA\u8EAB\u7684 max-width:100% \u662F\u76F8\u5BF9\u7236\u7EA7 780px \u8BA1\u7B97\u7684\uFF0C\u56E0\u6B64\u4ECD\u662F 780px\u3002
+         \u4FEE\u590D\uFF1A\u4ECE\u6839\u53D8\u91CF\u6536\u7A84 + \u8865\u4E0A uV2eYG_root \u8FD9\u4E00\u5C42\u7EA6\u675F\u3002 */
+
+      /* 1. \u4ECE\u4F1A\u8BDD\u6839\u8282\u70B9\u6536\u7A84\u5185\u5BB9\u5BBD\u5EA6\u53D8\u91CF\uFF08\u540C\u65F6\u7EA6\u675F\u6D88\u606F\u5217\u4E0E\u8F93\u5165\u6846\uFF09 */
+      div[class*="wSkVaW_root"] {
+        --dsh-chat-content-width: min(748px, 100vw - 32px) !important;
+        --dsh-composer-card-max-width: min(780px, 100vw - 24px) !important;
+      }
+
+      /* 2. \u8865\u4E0A\u63D2\u4EF6\u6B64\u524D\u9057\u6F0F\u7684 uV2eYG_root\uFF08\u8F93\u5165\u6846\u7684\u76F4\u63A5\u7F29\u5BB9\u5668\uFF09 */
+      div[class*="uV2eYG_root"] {
+        max-width: 100% !important;
+        min-width: 0 !important;
+        box-sizing: border-box !important;
+      }
+
+      /* 3. \u8F93\u5165\u6846\u7956\u5148\u94FE\u6574\u4F53\u4E0D\u8D85\u51FA\u89C6\u53E3 */
+      div[class*="wSkVaW_composerStack"],
+      div[class*="wSkVaW_composerSeat"],
+      div[class*="uV2eYG_scroll"],
+      div[class*="uV2eYG_grow"] {
+        max-width: 100% !important;
+        min-width: 0 !important;
+        box-sizing: border-box !important;
+      }
+
+      /* ---- \u9876\u90E8\u63A7\u4EF6\u9632\u6EA2\u51FA\u88C1\u5207\uFF08320px \u4E0B main \u5206\u652F chip \u6EA2\u51FA 39px \u88AB\u88C1\uFF09 ---- */
+      div[class*="wSkVaW_titleRow"],
+      div[class*="_titleRow"] {
+        flex-wrap: wrap !important;
+        row-gap: 6px !important;
+        overflow: visible !important;
+      }
+      button[class*="_7rgC5q_chip"],
+      button[class*="cubgiG_seat"],
+      div[class*="_7rgC5q_chipWrap"] {
+        max-width: min(120px, 30vw) !important;
+        min-width: 0 !important;
+        overflow: hidden !important;
+        text-overflow: ellipsis !important;
+      }
+
+      /* git-graph \u7684\u5206\u652F chip \u5916\u5C42\u662F position:absolute \u6D6E\u5C42\uFF08_7rgC5q_anchor / _7rgC5q_anchorHero\uFF09\uFF0C
+         \u4E14\u901A\u8FC7\u5185\u8054\u6837\u5F0F\u5199\u6B7B left\uFF08\u5982 left: 271.484px\uFF09\uFF0C\u8131\u79BB flex \u6D41\u4E14\u4E0D\u53D7\u7236\u5BB9\u5668\u9650\u5BBD\u7EA6\u675F\uFF0C
+         \u5728 320px \u4E0B\u6EA2\u51FA\u5C4F\u5E55\u53F3\u4FA7\u88AB\u88C1\u5207\uFF08\u53F3\u8FB9\u754C 351 > \u89C6\u53E3 320\uFF09\u3002
+         \u5185\u8054\u6837\u5F0F\u4F18\u5148\u7EA7\u9AD8\u4E8E\u666E\u901A CSS\uFF0C\u5FC5\u987B\u7528 !important \u8986\u76D6 left\uFF0C\u6539\u4E3A\u6309\u89C6\u53E3\u53F3\u8FB9\u754C\u951A\u5B9A\u3002 */
+      div[class*="_7rgC5q_anchor"] {
+        left: auto !important;
+        right: 8px !important;
+        max-width: calc(100vw - 16px) !important;
+        min-width: 0 !important;
+        overflow: hidden !important;
+      }
+      button[class*="_7rgC5q_chip"],
+      div[class*="_7rgC5q_chipWrap"] {
+        width: auto !important;
+        max-width: 100% !important;
+      }
+
+      /* ---- \u70B9\u51FB\u76EE\u6807\u6269\u5230 44px\uFF08\u4F2A\u5143\u7D20\u6269\u70ED\u533A\uFF0C\u89C6\u89C9\u5C3A\u5BF8\u4E0D\u53D8\uFF09 ---- */
+      button[class*="cubgiG_seat"],
+      button[class*="_7rgC5q_chip"],
+      button[class*="pXSMma_workspace"],
+      button[class*="Sh0Q9G_trigger"],
+      button[class*="_7KE1Ra_trigger"],
+      button[class*="uV2eYG_add"],
+      button[class*="qDHVXG_iconButton"],
+      button[class*="qDHVXG_searchButton"],
+      button[class*="hHd-Xa_iconButton"],
+      button[class*="YDXeBa_iconButton"] {
+        position: relative !important;
+      }
+      button[class*="cubgiG_seat"]::after,
+      button[class*="_7rgC5q_chip"]::after,
+      button[class*="pXSMma_workspace"]::after,
+      button[class*="Sh0Q9G_trigger"]::after,
+      button[class*="_7KE1Ra_trigger"]::after,
+      button[class*="uV2eYG_add"]::after,
+      button[class*="qDHVXG_iconButton"]::after,
+      button[class*="qDHVXG_searchButton"]::after,
+      button[class*="hHd-Xa_iconButton"]::after,
+      button[class*="YDXeBa_iconButton"]::after {
+        content: "" !important;
+        position: absolute !important;
+        inset: -8px !important;
+        z-index: 1 !important;
+      }
+
+      /* ---- \u4FA7\u8FB9\u680F\u771F\u6B63\u9690\u85CF\uFF0C\u6D88\u9664\u952E\u76D8/\u8BFB\u5C4F\u7126\u70B9\u9677\u9631 ----
+         \u6B64\u524D\u4FA7\u8FB9\u680F\u4EC5\u88AB transform \u79FB\u5230\u5C4F\u5E55\u5916\uFF08visibility \u4ECD\u4E3A visible\uFF09\uFF0C
+         \u5185\u90E8 7 \u4E2A\u6309\u94AE\u4ECD\u53EF\u88AB Tab \u805A\u7126\u3002 */
+      div[class*="_sidebarCol"] {
+        visibility: hidden !important;
+        pointer-events: none !important;
+      }
+      body.dsh-drawer-open div[class*="_sidebarCol"] {
+        visibility: visible !important;
+        pointer-events: auto !important;
+      }
+
+      /* ---- \u8F93\u5165\u6846 sticky \u5B9A\u4F4D\u4E0E\u906E\u6321\u4FEE\u590D ----
+         \u73B0\u8C61\uFF1A\u53D1\u9001\u540E\u8F93\u5165\u6846\u8DF3\u5230 tabs(\u5BF9\u8BDD/\u8F68\u8FF9/\u4E0A\u4E0B\u6587/\u8BB0\u5FC6) \u4E0B\u65B9\uFF0C\u4E0B\u65B9\u7559\u51FA\u5927\u7247\u7A7A\u767D\uFF1B
+               \u6EDA\u52A8\u65F6\u53F3\u4E0B\u89D2\u51FA\u73B0\u4E00\u4E2A\u5C0F\u65B9\u5757\u3002
+         \u6839\u56E0\uFF1A
+           1) dsh-better-sidebar \u63D2\u4EF6\u6CE8\u5165\u7684 div[data-dsh-panel-host] \u662F\u5168\u5C4F fixed \u906E\u7F69
+              \uFF08390x844\uFF0Cz-index 25\uFF09\uFF0C\u5728\u79FB\u52A8\u7AEF\u672A\u88AB\u9690\u85CF\uFF0C\u538B\u5728 composerSeat(z-index 7) \u4E4B\u4E0A\uFF1B
+           2) \u4E3B\u9898\u88C5\u9970\u5C42 span[data-dsh-glass-fade="bottom"] \u662F\u5168\u5BBD fixed \u6761\uFF08390x13\uFF0Cz-index 7\uFF09\uFF0C
+              \u5E38\u9A7B\u5C4F\u5E55\u53F3\u4E0B\u89D2\uFF0C\u89C6\u89C9\u4E0A\u5C31\u662F\u90A3\u4E2A"\u5C0F\u65B9\u5757"\u3002
+         \u4FEE\u590D\uFF1A\u79FB\u52A8\u7AEF\u9690\u85CF panel-host \u906E\u7F69\u4E0E glass \u6E10\u53D8\u88C5\u9970\u6761\uFF0C\u5E76\u9501\u5B9A\u8F93\u5165\u6846 sticky \u4E8E\u5E95\u90E8\u3002 */
+
+      /* \u9690\u85CF better-sidebar \u7684\u5168\u5C4F\u906E\u7F69\uFF08\u907F\u514D\u8986\u76D6\u8F93\u5165\u6846\u5E76\u62E6\u622A\u70B9\u51FB\uFF09 */
+      div[data-dsh-panel-host],
+      div[data-dsh-better-sidebar] {
+        display: none !important;
+      }
+      /* \u9690\u85CF\u4E3B\u9898\u88C5\u9970\u6027\u6E10\u53D8\u6761\uFF08\u53F3\u4E0B\u89D2\u5C0F\u65B9\u5757\uFF09 */
+      span[data-dsh-glass-fade] {
+        display: none !important;
+      }
+      /* \u6CE8\u610F\uFF1A\u4EE5\u4E0B\u4E24\u5904\u6539\u52A8\u5747\u5DF2\u5B9E\u6D4B\u5931\u8D25\u5E76\u64A4\u56DE\uFF0C\u5207\u52FF\u91CD\u8BD5\u2014\u2014
+         (1) \u628A viewArea \u6539\u4E3A\u53EF\u6536\u7F29\uFF08flex:1 1 auto / min-height:0\uFF09\uFF1A
+             sticky \u5931\u53BB\u6B63\u786E\u6EDA\u52A8\u4E0A\u4E0B\u6587\uFF0C\u8F93\u5165\u6846\u88AB\u9876\u5230\u6574\u4E2A\u5BF9\u8BDD\u5386\u53F2\u6700\u4E0A\u65B9\u3002
+         (2) \u628A composerSeat \u6539\u4E3A absolute\uFF08\u4EFF\u6E90\u7801 composer-overlay \u5206\u652F\uFF09\uFF1A
+             absolute \u8131\u79BB\u6587\u6863\u6D41\u540E\u968F\u6EDA\u52A8\u5185\u5BB9\u79FB\u52A8\uFF0C\u5B9E\u6D4B\u8F93\u5165\u6846\u8DD1\u5230 y=-8972\u3002
+         \u7ED3\u8BBA\uFF1A\u4FDD\u7559\u6E90\u7801\u7684 sticky \u673A\u5236\uFF0C\u4E0D\u505A\u7ED3\u6784\u6027\u6539\u52A8\u3002 */
+
       /* \u8F93\u5165\u6846\u5E95\u90E8\u5DE5\u5177\u680F\uFF1A\u5F39\u6027\u81EA\u9002\u5E94\uFF0C\u5F7B\u5E95\u675C\u7EDD\u6743\u9650\u9009\u62E9\u5668(Full access)\u4E0E\u6A21\u578B\u9009\u62E9\u5668\u91CD\u53E0\u78B0\u649E */
       div[class*="uV2eYG_row"] {
         display: flex !important;
@@ -4033,8 +4211,16 @@ function injectMobileStyles() {
         position: fixed !important;
         left: 0 !important;
         top: 0 !important;
-        bottom: 0 !important;
+        bottom: auto !important;
+        /* \u4FA7\u8FB9\u680F\u5E95\u90E8\u6EA2\u51FA\u5C4F\u5E55\u4FEE\u590D\uFF1A
+           \u5B9E\u6D4B 390x844 \u4E0B\uFF0C\u4FA7\u8FB9\u680F\u5B9E\u9645\u76D2\u5B50\u4E3A T=12 B=882\uFF08\u9AD8\u5EA6 870 > \u89C6\u53E3 844\uFF09\uFF0C\u5E95\u90E8\u6EA2\u51FA 38px\u3002
+           \u6839\u56E0\u662F\u63D2\u4EF6\u6B64\u524D\u672A\u58F0\u660E box-sizing\uFF0C\u5143\u7D20\u7EE7\u627F\u4E3A content-box\uFF0C
+           \u4E8E\u662F padding(10px+14px) \u4E0E margin(12px) \u88AB\u52A0\u5728 height:100dvh \u4E4B\u5916\u3002
+           \u6539\u4E3A border-box \u5E76\u7528 100dvh \u76F4\u63A5\u7EA6\u675F\u9AD8\u5EA6\uFF0Cpadding \u5373\u88AB\u5305\u542B\u5728\u9AD8\u5EA6\u5185\u3002 */
+        box-sizing: border-box !important;
         height: 100dvh !important;
+        max-height: 100dvh !important;
+        margin: 0 !important;
         width: 290px !important;
         max-width: 82vw !important;
         z-index: 10000 !important;
@@ -4552,6 +4738,9 @@ function setupMobileExperience(rpcCall, ctx) {
       }
       const sessionRow = e.target.closest('a, div[class*="sessionRow"], div[role="treeitem"]');
       if (sessionRow) {
+        if (sessionRow.hasAttribute("aria-expanded")) {
+          return;
+        }
         setTimeout(() => {
           if (document.body.classList.contains("dsh-drawer-open")) {
             document.body.classList.remove("dsh-drawer-open");
@@ -4562,6 +4751,31 @@ function setupMobileExperience(rpcCall, ctx) {
       document.body.classList.remove("dsh-drawer-open");
     }
   }, true);
+  const syncSidebarInert = () => {
+    const sidebar = document.querySelector('div[class*="_sidebarCol"]');
+    if (!sidebar) return;
+    const open = document.body.classList.contains("dsh-drawer-open");
+    const wantInert = window.innerWidth <= 768 && !open;
+    if (wantInert) {
+      if (!sidebar.hasAttribute("inert")) sidebar.setAttribute("inert", "");
+    } else if (sidebar.hasAttribute("inert")) {
+      sidebar.removeAttribute("inert");
+    }
+  };
+  new MutationObserver(syncSidebarInert).observe(document.body, {
+    attributes: true,
+    attributeFilter: ["class"],
+    childList: true,
+    subtree: true
+  });
+  window.addEventListener("resize", syncSidebarInert);
+  let inertRetry = 0;
+  const inertTimer = setInterval(() => {
+    syncSidebarInert();
+    const sb = document.querySelector('div[class*="_sidebarCol"]');
+    if (sb && sb.hasAttribute("inert") || ++inertRetry > 40) clearInterval(inertTimer);
+  }, 250);
+  syncSidebarInert();
   let longPressTimer = null;
   let touchStartX = 0;
   let touchStartY = 0;

package/client/index.js

@@ -3426,6 +3426,54 @@ function injectMobileStyles() {
         display: none !important;
       }
 
+      /* ---- 顶栏「标准模式」与「对话管理」重叠修复 ----
+         实测（390px）：标准模式(在 titleCluster 内) 右边界 102，
+         对话管理(在 headerUtilities 内) 左边界 91 → 水平重叠 11px。
+         根因：titleCluster 只有 46px 宽（[33,79]），但内部的「标准模式」胶囊固定 69px，
+         撑破父容器后与右侧 headerUtilities 相撞。
+         修复：允许 titleRow 换行 + 让两侧各自可收缩并限宽。 */
+      div[class*="wSkVaW_titleRow"],
+      div[class*="_titleRow"] {
+        flex-wrap: wrap !important;
+        row-gap: 6px !important;
+        column-gap: 8px !important;
+        overflow: visible !important;
+      }
+      div[class*="wSkVaW_titleCluster"],
+      div[class*="_titleCluster"] {
+        flex: 1 1 auto !important;
+        min-width: 0 !important;
+        max-width: 100% !important;
+      }
+      div[class*="wSkVaW_headerActions"],
+      div[class*="_headerActions"] {
+        flex: 0 0 auto !important;
+        min-width: 0 !important;
+        max-width: 45vw !important;
+        overflow: hidden !important;
+      }
+      div[class*="wSkVaW_headerUtilities"],
+      div[class*="_headerUtilities"] {
+        flex: 0 0 auto !important;
+        min-width: 0 !important;
+        max-width: 50vw !important;
+        margin-left: auto !important;
+        overflow: hidden !important;
+      }
+      /* 两者内部的无 class 按钮（模式胶囊 / 对话管理 / 删除本对话）统一限宽并允许收缩 */
+      div[class*="wSkVaW_headerActions"] > *,
+      div[class*="wSkVaW_headerActions"] button,
+      div[class*="wSkVaW_headerActions"] span,
+      div[class*="wSkVaW_headerUtilities"] > *,
+      div[class*="wSkVaW_headerUtilities"] button,
+      div[class*="wSkVaW_headerUtilities"] span {
+        max-width: 100% !important;
+        min-width: 0 !important;
+        overflow: hidden !important;
+        text-overflow: ellipsis !important;
+        white-space: nowrap !important;
+      }
+
       /* 子代理/智能体模式胶囊 (Actions)：紧凑圆角胶囊 */
       div[class*="wSkVaW_headerActions"],
       div[class*="headerActions"] {
@@ -3536,6 +3584,136 @@ function injectMobileStyles() {
         box-sizing: border-box !important;
       }
 
+      /* ---- 输入框宽度与对话列对齐修复 ----
+         问题：进入真实对话后输入框被撑到 780px（= 748px 内容宽 + 32px），
+         而消息列仅 318px，输入框比对话内容宽约 2.45 倍。
+         根因：卡片的父级 uV2eYG_root 自带 max-width: var(--dsh-composer-card-max-width)，
+         卡片自身的 max-width:100% 是相对父级 780px 计算的，因此仍是 780px。
+         修复：从根变量收窄 + 补上 uV2eYG_root 这一层约束。 */
+
+      /* 1. 从会话根节点收窄内容宽度变量（同时约束消息列与输入框） */
+      div[class*="wSkVaW_root"] {
+        --dsh-chat-content-width: min(748px, 100vw - 32px) !important;
+        --dsh-composer-card-max-width: min(780px, 100vw - 24px) !important;
+      }
+
+      /* 2. 补上插件此前遗漏的 uV2eYG_root（输入框的直接缩容器） */
+      div[class*="uV2eYG_root"] {
+        max-width: 100% !important;
+        min-width: 0 !important;
+        box-sizing: border-box !important;
+      }
+
+      /* 3. 输入框祖先链整体不超出视口 */
+      div[class*="wSkVaW_composerStack"],
+      div[class*="wSkVaW_composerSeat"],
+      div[class*="uV2eYG_scroll"],
+      div[class*="uV2eYG_grow"] {
+        max-width: 100% !important;
+        min-width: 0 !important;
+        box-sizing: border-box !important;
+      }
+
+      /* ---- 顶部控件防溢出裁切（320px 下 main 分支 chip 溢出 39px 被裁） ---- */
+      div[class*="wSkVaW_titleRow"],
+      div[class*="_titleRow"] {
+        flex-wrap: wrap !important;
+        row-gap: 6px !important;
+        overflow: visible !important;
+      }
+      button[class*="_7rgC5q_chip"],
+      button[class*="cubgiG_seat"],
+      div[class*="_7rgC5q_chipWrap"] {
+        max-width: min(120px, 30vw) !important;
+        min-width: 0 !important;
+        overflow: hidden !important;
+        text-overflow: ellipsis !important;
+      }
+
+      /* git-graph 的分支 chip 外层是 position:absolute 浮层（_7rgC5q_anchor / _7rgC5q_anchorHero），
+         且通过内联样式写死 left（如 left: 271.484px），脱离 flex 流且不受父容器限宽约束，
+         在 320px 下溢出屏幕右侧被裁切（右边界 351 > 视口 320）。
+         内联样式优先级高于普通 CSS，必须用 !important 覆盖 left，改为按视口右边界锚定。 */
+      div[class*="_7rgC5q_anchor"] {
+        left: auto !important;
+        right: 8px !important;
+        max-width: calc(100vw - 16px) !important;
+        min-width: 0 !important;
+        overflow: hidden !important;
+      }
+      button[class*="_7rgC5q_chip"],
+      div[class*="_7rgC5q_chipWrap"] {
+        width: auto !important;
+        max-width: 100% !important;
+      }
+
+      /* ---- 点击目标扩到 44px（伪元素扩热区，视觉尺寸不变） ---- */
+      button[class*="cubgiG_seat"],
+      button[class*="_7rgC5q_chip"],
+      button[class*="pXSMma_workspace"],
+      button[class*="Sh0Q9G_trigger"],
+      button[class*="_7KE1Ra_trigger"],
+      button[class*="uV2eYG_add"],
+      button[class*="qDHVXG_iconButton"],
+      button[class*="qDHVXG_searchButton"],
+      button[class*="hHd-Xa_iconButton"],
+      button[class*="YDXeBa_iconButton"] {
+        position: relative !important;
+      }
+      button[class*="cubgiG_seat"]::after,
+      button[class*="_7rgC5q_chip"]::after,
+      button[class*="pXSMma_workspace"]::after,
+      button[class*="Sh0Q9G_trigger"]::after,
+      button[class*="_7KE1Ra_trigger"]::after,
+      button[class*="uV2eYG_add"]::after,
+      button[class*="qDHVXG_iconButton"]::after,
+      button[class*="qDHVXG_searchButton"]::after,
+      button[class*="hHd-Xa_iconButton"]::after,
+      button[class*="YDXeBa_iconButton"]::after {
+        content: "" !important;
+        position: absolute !important;
+        inset: -8px !important;
+        z-index: 1 !important;
+      }
+
+      /* ---- 侧边栏真正隐藏，消除键盘/读屏焦点陷阱 ----
+         此前侧边栏仅被 transform 移到屏幕外（visibility 仍为 visible），
+         内部 7 个按钮仍可被 Tab 聚焦。 */
+      div[class*="_sidebarCol"] {
+        visibility: hidden !important;
+        pointer-events: none !important;
+      }
+      body.dsh-drawer-open div[class*="_sidebarCol"] {
+        visibility: visible !important;
+        pointer-events: auto !important;
+      }
+
+      /* ---- 输入框 sticky 定位与遮挡修复 ----
+         现象：发送后输入框跳到 tabs(对话/轨迹/上下文/记忆) 下方，下方留出大片空白；
+               滚动时右下角出现一个小方块。
+         根因：
+           1) dsh-better-sidebar 插件注入的 div[data-dsh-panel-host] 是全屏 fixed 遮罩
+              （390x844，z-index 25），在移动端未被隐藏，压在 composerSeat(z-index 7) 之上；
+           2) 主题装饰层 span[data-dsh-glass-fade="bottom"] 是全宽 fixed 条（390x13，z-index 7），
+              常驻屏幕右下角，视觉上就是那个"小方块"。
+         修复：移动端隐藏 panel-host 遮罩与 glass 渐变装饰条，并锁定输入框 sticky 于底部。 */
+
+      /* 隐藏 better-sidebar 的全屏遮罩（避免覆盖输入框并拦截点击） */
+      div[data-dsh-panel-host],
+      div[data-dsh-better-sidebar] {
+        display: none !important;
+      }
+      /* 隐藏主题装饰性渐变条（右下角小方块） */
+      span[data-dsh-glass-fade] {
+        display: none !important;
+      }
+      /* 注意：以下两处改动均已实测失败并撤回，切勿重试——
+         (1) 把 viewArea 改为可收缩（flex:1 1 auto / min-height:0）：
+             sticky 失去正确滚动上下文，输入框被顶到整个对话历史最上方。
+         (2) 把 composerSeat 改为 absolute（仿源码 composer-overlay 分支）：
+             absolute 脱离文档流后随滚动内容移动，实测输入框跑到 y=-8972。
+         结论：保留源码的 sticky 机制，不做结构性改动。 */
+
       /* 输入框底部工具栏：弹性自适应，彻底杜绝权限选择器(Full access)与模型选择器重叠碰撞 */
       div[class*="uV2eYG_row"] {
         display: flex !important;
@@ -3630,8 +3808,16 @@ function injectMobileStyles() {
         position: fixed !important;
         left: 0 !important;
         top: 0 !important;
-        bottom: 0 !important;
+        bottom: auto !important;
+        /* 侧边栏底部溢出屏幕修复：
+           实测 390x844 下，侧边栏实际盒子为 T=12 B=882（高度 870 > 视口 844），底部溢出 38px。
+           根因是插件此前未声明 box-sizing，元素继承为 content-box，
+           于是 padding(10px+14px) 与 margin(12px) 被加在 height:100dvh 之外。
+           改为 border-box 并用 100dvh 直接约束高度，padding 即被包含在高度内。 */
+        box-sizing: border-box !important;
         height: 100dvh !important;
+        max-height: 100dvh !important;
+        margin: 0 !important;
         width: 290px !important;
         max-width: 82vw !important;
         z-index: 10000 !important;
@@ -4193,8 +4379,16 @@ function setupMobileExperience(rpcCall, ctx) {
       }
 
       // 点击会话项后平滑收起抽屉
+      // 注意：工作区「文件夹」与「会话」都是 role="treeitem"，但语义完全不同：
+      //   文件夹 → 带 aria-expanded，onClick 是 onToggle（展开/折叠）
+      //   会话   → 无 aria-expanded，onClick 是切换会话
+      // 此前不区分二者，导致点击文件夹（只是想展开）也会立刻收起抽屉。
       const sessionRow = e.target.closest('a, div[class*="sessionRow"], div[role="treeitem"]');
       if (sessionRow) {
+        // 文件夹：点击是为了展开/折叠，保持抽屉打开
+        if (sessionRow.hasAttribute('aria-expanded')) {
+          return;
+        }
         setTimeout(() => {
           if (document.body.classList.contains('dsh-drawer-open')) {
             document.body.classList.remove('dsh-drawer-open');
@@ -4206,6 +4400,34 @@ function setupMobileExperience(rpcCall, ctx) {
     }
   }, true);
 
+  // 3b. 抽屉关闭时，用 inert 彻底移除侧边栏内部控件的可聚焦性
+  //     CSS 的 visibility:hidden 不足以阻止 Tab 聚焦（实测仍可聚焦到屏幕外按钮），
+  //     inert 能同时阻断键盘焦点、指针事件与屏幕阅读器访问。
+  const syncSidebarInert = () => {
+    const sidebar = document.querySelector('div[class*="_sidebarCol"]');
+    if (!sidebar) return;
+    const open = document.body.classList.contains('dsh-drawer-open');
+    const wantInert = window.innerWidth <= 768 && !open;
+    if (wantInert) {
+      if (!sidebar.hasAttribute('inert')) sidebar.setAttribute('inert', '');
+    } else if (sidebar.hasAttribute('inert')) {
+      sidebar.removeAttribute('inert');
+    }
+  };
+  new MutationObserver(syncSidebarInert).observe(document.body, {
+    attributes: true, attributeFilter: ['class'],
+    childList: true, subtree: true,
+  });
+  window.addEventListener('resize', syncSidebarInert);
+  // 侧边栏由 React 异步挂载，首帧执行时可能尚未存在，需轮询重试若干次
+  let inertRetry = 0;
+  const inertTimer = setInterval(() => {
+    syncSidebarInert();
+    const sb = document.querySelector('div[class*="_sidebarCol"]');
+    if ((sb && sb.hasAttribute('inert')) || ++inertRetry > 40) clearInterval(inertTimer);
+  }, 250);
+  syncSidebarInert();
+
   // 4. 移动端抽屉长按（Long Press >= 380ms）呼出操作菜单，以及左右滑动手势
   let longPressTimer = null;
   let touchStartX = 0;

package/lib/bridge-rpc.js

@@ -73,15 +73,123 @@ function checkAdminAuth(authManager, payload) {
   return fail('bad-request', '操作已被拦截：需要管理员权限，请先在控制台输入管理密码解锁');
 }
 
+// ---- RPC wire 助手（对齐 @deepseek-ai/dsh-client-connection 0.1.5 协议）----
+// DSH 0.1.5 起 connection.rpc.handle 会在宿主 connection 上下文上访问 webServer
+// （inject 守卫），第三方插件无法再从插件上下文调用；改为在自身 inject 的
+// webServer 作用域注册等价 prefix 路由，认证走 connection.requestRejection
+// （oh-my-dsh 升级卡 DSH-0.1.2-A1-08 的自定义通道配方），wire 格式保持不变。
+
+const MAX_RPC_BODY_BYTES = 314572800;
+const ENDPOINT_SEGMENT_PATTERN = /^[A-Za-z0-9_$.~-]+$/;
+
+function endpointFromChannelPath(channel, pathname) {
+  if (!pathname.startsWith(`${channel}/`)) return undefined;
+  const endpoint = pathname.slice(channel.length + 1);
+  if (endpoint.split('/').some((s) => s === '' || s === '.' || s === '..' || !ENDPOINT_SEGMENT_PATTERN.test(s))) {
+    return undefined;
+  }
+  return endpoint;
+}
+
+function fullResponse(rpcId, result) {
+  return Response.json({ type: 'server-response', rpcId, result });
+}
+
+function errorResponse(rpcId, error) {
+  return fullResponse(rpcId, { ok: false, error });
+}
+
+async function bridgeRpcFetch(channel, handler, request) {
+  const endpoint = endpointFromChannelPath(channel, new URL(request.url).pathname);
+  if (request.method !== 'POST' || endpoint === undefined) {
+    return new Response('not found', { status: 404 });
+  }
+  if (request.headers.get('content-type')?.split(';', 1)[0]?.trim().toLowerCase() !== 'application/json') {
+    return new Response('content type must be application/json', { status: 415 });
+  }
+  let body;
+  try {
+    body = await request.json();
+  } catch {
+    return new Response('body is not JSON', { status: 400 });
+  }
+  const rpcId = typeof body?.rpcId === 'string' ? body.rpcId : 'invalid-request';
+  if (body?.type !== 'client-request' || body?.method !== endpoint) {
+    return errorResponse(rpcId, {
+      code: 'gateway/bad-request',
+      message: 'invalid client-request message',
+      details: { issues: [] },
+    });
+  }
+  try {
+    const result = await handler(endpoint, body.payload, request.signal);
+    return fullResponse(rpcId, result);
+  } catch (error) {
+    return new Response(`handler failure: ${String(error)}`, { status: 500 });
+  }
+}
+
+async function bridgeChannelRequest(req, res, connection, channel, handler) {
+  const rejection = typeof connection?.requestRejection === 'function' ? connection.requestRejection(req) : undefined;
+  if (rejection !== undefined) {
+    res.writeHead(rejection);
+    res.end(rejection === 401 ? 'unauthorized' : 'forbidden');
+    return;
+  }
+  const abort = new AbortController();
+  res.on('close', () => {
+    if (!res.writableEnded) abort.abort();
+  });
+  const url = new URL(req.url ?? '/', 'http://dsh.internal');
+  const headers = Object.fromEntries(Object.entries(req.headers).filter(([, v]) => typeof v === 'string'));
+  const chunks = [];
+  let received = 0;
+  for await (const chunk of req) {
+    received += chunk.byteLength;
+    if (received > MAX_RPC_BODY_BYTES) {
+      res.writeHead(413, { connection: 'close' });
+      res.end();
+      req.destroy();
+      return;
+    }
+    chunks.push(chunk);
+  }
+  const request = new Request(url, {
+    method: req.method ?? 'GET',
+    headers,
+    ...(chunks.length > 0 ? { body: Buffer.concat(chunks) } : {}),
+    signal: abort.signal,
+  });
+  const response = await bridgeRpcFetch(channel, handler, request);
+  const responseHeaders = Object.fromEntries(response.headers.entries());
+  res.writeHead(response.status, responseHeaders);
+  if (response.body === null) {
+    res.end();
+    return;
+  }
+  for await (const chunk of response.body) {
+    if (!res.write(chunk)) {
+      await new Promise((resolve) => {
+        const done = () => {
+          res.off('drain', done);
+          res.off('close', done);
+          resolve();
+        };
+        res.once('drain', done);
+        res.once('close', done);
+      });
+    }
+  }
+  res.end();
+}
+
 export function installBridgeRpc(ctx, { service, authManager, wechat, platformManager, logger, saveCustomTunnelConfig, exportBackup, importBackup }) {
-  if (!ctx?.connection?.rpc?.handle) {
-    logger.warn('dsh-bridge: Connection RPC unavailable — UI will not work');
+  if (!ctx?.connection) {
+    logger.warn('dsh-bridge: Connection service unavailable — UI will not work');
     return () => {};
   }
 
-  return ctx.connection.rpc.handle(
-    BRIDGE_RPC_CHANNEL,
-    async (endpoint, payload = {}, signal) => {
+  const handleBridgeRpc = async (endpoint, payload = {}, signal) => {
       if (signal?.aborted) return fail('cancelled', 'Request was cancelled');
 
       try {
@@ -546,8 +654,24 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
         logger.error('RPC endpoint %s failed: %s', endpoint, err.message);
         return fail('bad-request', err.message);
       }
-    },
-    { authority: 'loopback' }
-  );
+  };
+
+  return ctx.inject(['connection', 'webServer'], (c) => {
+    const connection = c.connection;
+    return c.effect(() => {
+      const unregister = c.webServer.register({
+        kind: 'prefix',
+        path: BRIDGE_RPC_CHANNEL,
+        handler: (req, res) => {
+          void bridgeChannelRequest(req, res, connection, BRIDGE_RPC_CHANNEL, handleBridgeRpc);
+        },
+      });
+      return () => {
+        try {
+          unregister?.();
+        } catch {}
+      };
+    }, 'dsh-bridge: rpc channel');
+  });
 }
 

package/lib/feishu/lark-bundled.mjs

@@ -26862,12 +26862,19 @@ var require_index = __commonJS({
           return domain;
       }
     };
-    var fillApiPath = (apiPath, pathSupplement = {}) => apiPath.replace(/:([^/]+)/g, (_, $1) => {
-      if (pathSupplement[$1] !== void 0) {
-        return pathSupplement[$1];
-      }
-      throw new Error(`request miss ${$1} path argument`);
-    });
+    var fillApiPath = (apiPath, pathSupplement = {}) => (
+      // Only treat `:name` as a path parameter when it starts a path segment
+      // (string start or right after `/`). Colons inside the URL authority,
+      // e.g. `http://localhost:3000` or `user:pw@host`, must be left untouched.
+      // The separator is captured and re-emitted instead of using a lookbehind
+      // because the compile target (es6) has no lookbehind support.
+      apiPath.replace(/(^|\/):([^/]+)/g, (_, pathPrefix, pathKey) => {
+        if (pathSupplement[pathKey] !== void 0) {
+          return `${pathPrefix}${pathSupplement[pathKey]}`;
+        }
+        throw new Error(`request miss ${pathKey} path argument`);
+      })
+    );
     var assert = (predication, callback) => __awaiter(void 0, void 0, void 0, function* () {
       const isInvoke = typeof predication === "function" ? predication() : predication;
       if (isInvoke) {
@@ -121095,6 +121102,9 @@ var require_index = __commonJS({
       }
       mergeData(params) {
         const { message_id, sum, seq, trace_id, data } = params;
+        if (!Number.isInteger(sum) || sum <= 0 || !Number.isInteger(seq) || seq < 0 || seq >= sum) {
+          throw new Error(`invalid event fragment metadata (sum: ${sum}, seq: ${seq})`);
+        }
         const cache = this.cache.get(message_id);
         if (!cache) {
           const buffer = new Array(sum).fill(void 0);
@@ -121106,6 +121116,9 @@ var require_index = __commonJS({
             create_time: Date.now()
           });
         } else {
+          if (sum !== cache.buffer.length) {
+            throw new Error(`invalid event fragment metadata (sum: ${sum} differs from first fragment's ${cache.buffer.length}, seq: ${seq})`);
+          }
           cache.buffer[seq] = data;
         }
         const mergedCache = this.cache.get(message_id);
@@ -121196,12 +121209,17 @@ var require_index = __commonJS({
       HttpStatusCode2[HttpStatusCode2["ok"] = 200] = "ok";
       HttpStatusCode2[HttpStatusCode2["internal_server_error"] = 500] = "internal_server_error";
     })(HttpStatusCode || (HttpStatusCode = {}));
+    var describeError = (err) => {
+      const message = err === null || err === void 0 ? void 0 : err.message;
+      return message ? message : String(err);
+    };
     var WSClient = class {
       constructor(params) {
         var _a;
         this.wsConfig = new WSConfig();
         this.reconnectGeneration = 0;
         this.isConnecting = false;
+        this.closed = false;
         this.reconnectInfo = {
           lastConnectTime: 0,
           nextConnectTime: 0
@@ -121270,6 +121288,53 @@ var require_index = __commonJS({
           this.livenessTimer = void 0;
         }
       }
+      /**
+       * Detach a socket we are about to throw away: drop every listener, but
+       * leave one 'error' sink behind.
+       *
+       * `ws` reports the abort of a non-OPEN socket asynchronously — both
+       * `terminate()` and `close()` route through `abortHandshake()`, which
+       * emits 'error' on a later tick — and a non-force `close()` on an OPEN
+       * socket keeps the connection alive until the peer answers (up to `ws`'s
+       * 30s closeTimeout), during which a TCP reset still surfaces as 'error'.
+       * An EventEmitter with no 'error' listener throws instead of emitting, and
+       * that throw lands outside every try/catch, killing the host process.
+       * See https://github.com/larksuite/node-sdk/issues/197
+       *
+       * NOTE: not for the liveness watchdog — that one terminates *on purpose*
+       * and needs its listeners intact so 'close' drives the reconnect.
+       */
+      detachSocket(socket) {
+        socket.removeAllListeners();
+        socket.on("error", (err) => {
+          this.logger.debug("[ws]", "ignored error from discarded socket", err === null || err === void 0 ? void 0 : err.message);
+        });
+      }
+      /**
+       * Throw away whatever the current attempt established — socket *and* the
+       * timers its 'open' handler armed. A handshake that completes after
+       * `close()` runs `pingLoop()`, and that timer is not unref'd: leaving it
+       * behind keeps the event loop alive forever on a client the caller closed.
+       *
+       * Only safe when {@link closed} is set: otherwise a newer session may
+       * already own `wsConfig`'s instance.
+       */
+      discardConnection() {
+        if (this.pingInterval) {
+          clearTimeout(this.pingInterval);
+          this.pingInterval = void 0;
+        }
+        this.clearLiveness();
+        const socket = this.wsConfig.getWSInstance();
+        if (!socket)
+          return;
+        this.detachSocket(socket);
+        try {
+          socket.terminate();
+        } catch (_a) {
+        }
+        this.wsConfig.setWSInstance(null);
+      }
       /**
        * Invoke a user-supplied callback safely: no-op if undefined, swallow any
        * exception to avoid breaking the WS state machine.
@@ -121376,7 +121441,7 @@ var require_index = __commonJS({
           if (this.handshakeTimeoutMs && this.handshakeTimeoutMs > 0) {
             timer = setTimeout(() => {
               this.logger.error("[ws]", `handshake timeout after ${this.handshakeTimeoutMs}ms`);
-              wsInstance.removeAllListeners();
+              this.detachSocket(wsInstance);
               try {
                 wsInstance.terminate();
               } catch (_a) {
@@ -121432,6 +121497,13 @@ var require_index = __commonJS({
             } finally {
               this.isConnecting = false;
             }
+            if (this.closed) {
+              this.discardConnection();
+              return;
+            }
+            if (currentGeneration !== this.reconnectGeneration) {
+              return;
+            }
             if (result.ok) {
               this.hasEverConnected = true;
               this.safeInvoke("onReady", this.onReady);
@@ -121473,6 +121545,10 @@ var require_index = __commonJS({
                 count++;
                 this.currentReconnectAttempts = count;
                 const result = yield tryConnect();
+                if (this.closed) {
+                  this.discardConnection();
+                  return;
+                }
                 if (currentGeneration !== this.reconnectGeneration) {
                   return;
                 }
@@ -121536,13 +121612,17 @@ var require_index = __commonJS({
         const wsInstance = this.wsConfig.getWSInstance();
         wsInstance === null || wsInstance === void 0 ? void 0 : wsInstance.on("message", (buffer) => __awaiter(this, void 0, void 0, function* () {
           this.clearLiveness();
-          const data = decode(buffer);
-          const { method } = data;
-          if (method === FrameType.control) {
-            yield this.handleControlData(data);
-          }
-          if (method === FrameType.data) {
-            yield this.handleEventData(data);
+          try {
+            const data = decode(buffer);
+            const { method } = data;
+            if (method === FrameType.control) {
+              yield this.handleControlData(data);
+            }
+            if (method === FrameType.data) {
+              yield this.handleEventData(data);
+            }
+          } catch (err) {
+            this.logger.error("[ws]", `failed to handle inbound frame: ${describeError(err)}`);
           }
         }));
         wsInstance === null || wsInstance === void 0 ? void 0 : wsInstance.on("error", (e) => {
@@ -121564,8 +121644,15 @@ var require_index = __commonJS({
           }
           if (type === MessageType.pong && payload) {
             this.logger.trace("[ws]", "receive pong");
-            const dataString = new TextDecoder("utf-8").decode(payload);
-            const { PingInterval, ReconnectCount, ReconnectInterval, ReconnectNonce } = JSON.parse(dataString);
+            let pong;
+            try {
+              const dataString = new TextDecoder("utf-8").decode(payload);
+              pong = JSON.parse(dataString);
+            } catch (err) {
+              this.logger.error("[ws]", `invalid pong payload: ${describeError(err)}`);
+              return;
+            }
+            const { PingInterval, ReconnectCount, ReconnectInterval, ReconnectNonce } = pong;
             this.wsConfig.updateWs({
               pingInterval: PingInterval * 1e3,
               reconnectCount: ReconnectCount,
@@ -121588,13 +121675,19 @@ var require_index = __commonJS({
           if (type !== MessageType.event) {
             return;
           }
-          const mergedData = this.dataCache.mergeData({
-            message_id,
-            sum: Number(sum),
-            seq: Number(seq),
-            trace_id,
-            data: payload
-          });
+          let mergedData;
+          try {
+            mergedData = this.dataCache.mergeData({
+              message_id,
+              sum: Number(sum),
+              seq: Number(seq),
+              trace_id,
+              data: payload
+            });
+          } catch (err) {
+            this.logger.error("[ws]", `failed to merge event fragments, message_id: ${message_id}; trace_id: ${trace_id}; error: ${describeError(err)}`);
+            return;
+          }
           if (!mergedData) {
             return;
           }
@@ -121663,6 +121756,7 @@ var require_index = __commonJS({
        */
       close(params = {}) {
         const { force = false } = params;
+        this.closed = true;
         this.reconnectGeneration++;
         if (this.pingInterval) {
           clearTimeout(this.pingInterval);
@@ -121678,7 +121772,7 @@ var require_index = __commonJS({
         this.currentReconnectAttempts = 0;
         const wsInstance = this.wsConfig.getWSInstance();
         if (wsInstance) {
-          wsInstance.removeAllListeners();
+          this.detachSocket(wsInstance);
           if (force) {
             wsInstance.terminate();
           } else {
@@ -121701,6 +121795,7 @@ var require_index = __commonJS({
             return;
           }
           this.terminalError = false;
+          this.closed = false;
           this.currentReconnectAttempts = 0;
           this.dataCache.clearAtInterval();
           this.logger.info("[ws]", `receive events or callbacks through persistent connection only available in self-build & Feishu app, Configured in:
@@ -122120,6 +122215,7 @@ var require_index = __commonJS({
         let domainSwitched = false;
         let pollTimer = null;
         let expireTimer = null;
+        let settled = false;
         const cleanup = () => {
           var _a2;
           if (pollTimer !== null) {
@@ -122132,25 +122228,51 @@ var require_index = __commonJS({
           }
           (_a2 = ctx.signal) === null || _a2 === void 0 ? void 0 : _a2.removeEventListener("abort", onAbort);
         };
-        const onAbort = () => {
+        const succeed = (result) => {
+          if (settled) {
+            return;
+          }
+          settled = true;
           cleanup();
-          reject(createError("abort", "Registration was aborted"));
+          resolve(result);
+        };
+        const fail = (err) => {
+          if (settled) {
+            return;
+          }
+          settled = true;
+          cleanup();
+          reject(err);
+        };
+        const scheduleNextPoll = () => {
+          if (settled) {
+            return;
+          }
+          pollTimer = setTimeout(poll, interval);
+        };
+        const onAbort = () => {
+          fail(createError("abort", "Registration was aborted"));
         };
         if ((_a = ctx.signal) === null || _a === void 0 ? void 0 : _a.aborted) {
-          return reject(createError("abort", "Registration was aborted"));
+          return fail(createError("abort", "Registration was aborted"));
         }
         (_b = ctx.signal) === null || _b === void 0 ? void 0 : _b.addEventListener("abort", onAbort, { once: true });
         expireTimer = setTimeout(() => {
-          cleanup();
-          reject(createError("expired_token", "Polling timed out"));
+          fail(createError("expired_token", "Polling timed out"));
         }, ctx.expireIn);
         const poll = () => __awaiter(this, void 0, void 0, function* () {
           var _c, _d, _e, _f, _g, _h;
+          if (settled) {
+            return;
+          }
           try {
             const pollRes = yield requestRegistration(baseUrl, {
               action: "poll",
               device_code: ctx.deviceCode
             });
+            if (settled) {
+              return;
+            }
             if (((_c = pollRes.user_info) === null || _c === void 0 ? void 0 : _c.tenant_brand) === "lark" && !domainSwitched) {
               baseUrl = ctx.larkBaseUrl;
               domainSwitched = true;
@@ -122159,8 +122281,7 @@ var require_index = __commonJS({
               return;
             }
             if (pollRes.client_id && pollRes.client_secret) {
-              cleanup();
-              resolve({
+              succeed({
                 client_id: pollRes.client_id,
                 client_secret: pollRes.client_secret,
                 user_info: pollRes.user_info
@@ -122177,21 +122298,18 @@ var require_index = __commonJS({
                 break;
               case "access_denied":
               case "expired_token":
-                cleanup();
-                reject(createError(pollRes.error, (_g = pollRes.error_description) !== null && _g !== void 0 ? _g : "Unknown error"));
+                fail(createError(pollRes.error, (_g = pollRes.error_description) !== null && _g !== void 0 ? _g : "Unknown error"));
                 return;
               default:
                 if (pollRes.error) {
-                  cleanup();
-                  reject(createError(pollRes.error, (_h = pollRes.error_description) !== null && _h !== void 0 ? _h : "Unknown error"));
+                  fail(createError(pollRes.error, (_h = pollRes.error_description) !== null && _h !== void 0 ? _h : "Unknown error"));
                   return;
                 }
                 break;
             }
-            pollTimer = setTimeout(poll, interval);
+            scheduleNextPoll();
           } catch (e) {
-            cleanup();
-            reject(e);
+            fail(e);
           }
         });
         poll();

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "dsh-bridge-gateway",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "以 dsh-bridge 为根基、融合 remote-gateway 能力的 DSH 远程访问网关：局域网 / Cloudflare 隧道 / 自建隧道之外，新增「公网直连网关」（0.0.0.0 监听 + 自带 HTTPS 自签证书 + 强制登录门禁），解决移动端外网直连操控电脑。",
-  "releaseNotes": "【dsh-bridge-gateway】以 dsh-bridge 为根基、融合 remote-gateway 能力的 DSH 远程访问网关\n• ➕ 公网访问区：隧道 / 直连网关 二选一，网关全部配置项可在界面配置\n• ➕ 直连网关：0.0.0.0:<端口> 自带 HTTPS(自签证书) + 强制 public_only 门禁，复用 AuthManager，链路打通到 DSH loopback\n• 📱 修复移动端选择模型时界面溢出屏幕的问题\n• 默认不启用，安装后原有局域网/隧道/IM 行为完全不变",
+  "releaseNotes": "【dsh-bridge-gateway 0.1.5】\n• 🔧 适配 DSH 0.1.5：RPC 通道迁移到 webServer 直注册 + requestRejection 鉴权\n• 📱 移动端深度适配：顶栏防重叠、分支 chip 不再裁切、输入框宽度对齐并 sticky 固定、44px 点击热区、侧边栏焦点陷阱消除\n• 默认不启用，安装后原有局域网/隧道/IM 行为完全不变",
   "type": "module",
   "main": "lib/index.js",
   "exports": {
@@ -17,6 +17,7 @@
     "client",
     "cordis.patch.yml",
     "README.md",
+    "README.zh.md",
     "CHANGELOG.md",
     "LICENSE",
     "docs"