dsh-deeppilot 0.2.0 → 0.2.1

package/README.md

@@ -63,9 +63,9 @@ do not pass through the relay. Read [PRIVACY.md](./PRIVACY.md) and
 
 ## Screenshots
 
-Screenshots will be added after the current TestFlight review.
-
-<!-- Add future app screenshots under assets/screenshots/ and replace this note. -->
+| Home | Sidebar | Chat | Settings |
+| --- | --- | --- | --- |
+| <img src="./assets/screenshots/home.png" alt="DeepPilot home screen" width="220"> | <img src="./assets/screenshots/sidebar.png" alt="DeepPilot sidebar" width="220"> | <img src="./assets/screenshots/chat.png" alt="DeepPilot chat screen" width="220"> | <img src="./assets/screenshots/settings.png" alt="DeepPilot settings screen" width="220"> |
 
 ## Compatibility
 
@@ -73,6 +73,12 @@ See [COMPATIBILITY.md](./COMPATIBILITY.md) for the tested baseline and current
 limitations. DSH is still evolving; include exact DSH and plugin versions when
 reporting an issue.
 
+## Protocol
+
+[PROTOCOL.md](./PROTOCOL.md) is the normative DeepPilot bridge protocol. Any
+wire change must update that document and `src/protocol.ts` together, preserve
+protocol-v1 compatibility, and be coordinated with the private iOS client.
+
 ## Development
 
 ```sh

package/README.zh-CN.md

@@ -59,15 +59,21 @@ dsh plugin --profile web remove dsh-deeppilot
 
 ## App 截图
 
-当前 TestFlight 审核完成后再补充截图。
-
-<!-- 后续将 App 截图放到 assets/screenshots/，并替换本段说明。 -->
+| 首页 | 侧边栏 | 聊天 | 设置 |
+| --- | --- | --- | --- |
+| <img src="./assets/screenshots/home.png" alt="DeepPilot 首页" width="220"> | <img src="./assets/screenshots/sidebar.png" alt="DeepPilot 侧边栏" width="220"> | <img src="./assets/screenshots/chat.png" alt="DeepPilot 聊天界面" width="220"> | <img src="./assets/screenshots/settings.png" alt="DeepPilot 设置界面" width="220"> |
 
 ## 兼容性
 
 已验证的基线与当前限制见 [COMPATIBILITY.md](./COMPATIBILITY.md)。DSH 仍在快速
 迭代；提交问题时请附上准确的 DSH 与插件版本。
 
+## 协议
+
+[PROTOCOL.md](./PROTOCOL.md) 是 DeepPilot 桥接协议的规范性文档。任何 wire
+变更都必须同步更新该文档与 `src/protocol.ts`，保持协议 v1 向后兼容，并与
+私有 iOS 客户端协调。
+
 ## 开发
 
 ```sh

package/lib/index.d.ts

@@ -39,6 +39,32 @@ interface PushNotification {
   title: string;
   body: string;
 }
+interface PendingApprovalPayload {
+  requestId: string;
+  sessionId: string;
+  toolName: string;
+  summary: string;
+  riskLevel: 'read' | 'write' | 'destructive';
+}
+interface PendingQuestionOption {
+  label: string;
+  description?: string;
+}
+interface PendingQuestionItem {
+  id: string;
+  question: string;
+  multiSelect?: boolean;
+  options?: PendingQuestionOption[];
+}
+interface PendingQuestionPayload {
+  requestId: string;
+  sessionId: string;
+  questions: PendingQuestionItem[];
+}
+interface PendingSnapshotPayload {
+  approvals: PendingApprovalPayload[];
+  questions: PendingQuestionPayload[];
+}
 //#endregion
 //#region src/host-bridge.d.ts
 interface RpcOk<T> {
@@ -291,6 +317,17 @@ interface ApiProxyLike {
     host(req: RpcRequestLike<Record<string, never>>, signal: AbortSignal): AsyncIterable<MuxFrameLike | ApiStreamItemLike>;
   };
 }
+/**
+ * Outcome of answering a pending approval/question. The host distinguishes
+ * "never/no longer pending" from "payload rejected", and collapsing both into
+ * a boolean made every rejection read as `question not pending` on the phone.
+ */
+type PendingResponseOutcome = {
+  ok: true;
+} | {
+  ok: false;
+  reason: 'not-pending' | 'bad-response' | 'transport';
+};
 /** Downward sink every connected phone registers (one per WebSocket). */
 interface BridgeSink {
   push(type: string, payload: unknown, seq?: number): void;
@@ -343,6 +380,7 @@ declare class HostBridge {
     replay: boolean;
     approvals: boolean;
     questions: boolean;
+    pendingSnapshot: boolean;
     models: boolean;
     sessionManagement: boolean;
     projectSelection: boolean;
@@ -392,6 +430,12 @@ declare class HostBridge {
   private bumpPendingFlags;
   private pushSummary;
   listSessions(): SessionSummary[];
+  /**
+   * Complete transient interaction state. Unlike the replay ring, this remains
+   * authoritative after a long disconnect and is rehydrated by apiProxy's mux
+   * stream when the bridge itself restarts.
+   */
+  pendingSnapshot(): PendingSnapshotPayload;
   /** Tail history for an opened session; pushes s2c.session.tail to the sink. */
   openSession(sink: BridgeSink, sessionId: string, tailCount: number): Promise<boolean>;
   historyPage(sink: BridgeSink, sessionId: string, beforeSeq: number, limit: number): Promise<boolean>;
@@ -431,9 +475,9 @@ declare class HostBridge {
     mediaType: 'image/png' | 'image/jpeg' | 'image/webp' | 'image/gif';
     data: string;
     name?: string;
-  }>): Promise<number | null>;
-  respondApproval(requestId: string, decision: 'allow' | 'deny'): Promise<boolean>;
-  respondQuestion(requestId: string, answers: unknown): Promise<boolean>;
+  }>): Promise<SessionManagementResult<number>>;
+  respondApproval(requestId: string, decision: 'allow' | 'deny', reason?: string): Promise<PendingResponseOutcome>;
+  respondQuestion(requestId: string, answers: unknown): Promise<PendingResponseOutcome>;
 }
 //#endregion
 //#region src/index.d.ts

package/lib/index.js

@@ -362,6 +362,9 @@ var BridgeConnection = class {
 					sessions: this.deps.bridge.listSessions()
 				}, env.id);
 				return;
+			case "c2s.pending.list":
+				this.send("s2c.pending.snapshot", this.deps.bridge.pendingSnapshot(), env.id);
+				return;
 			case "c2s.workspaces.list": {
 				if (!this.deps.bridge.capabilities.projectSelection) return this.fail(env.id, "E_UNSUPPORTED", "project selection unavailable on this host version");
 				const result = await this.deps.bridge.listWorkspaces();
@@ -395,10 +398,15 @@ var BridgeConnection = class {
 			}
 			case "c2s.session.open": {
 				const p = env.payload;
-				if (!p?.sessionId) return this.fail(env.id, "E_PROTOCOL", "sessionId required");
-				this.openSessions.add(p.sessionId);
-				this.deps.bridge.markSinkOpen(this, p.sessionId);
-				if (!await this.deps.bridge.openSession(this, p.sessionId, p.tailCount ?? 100)) this.fail(env.id, "E_NOT_FOUND", "session history unavailable");
+				if (!p?.sessionId || typeof p.sessionId !== "string") return this.fail(env.id, "E_PROTOCOL", "sessionId required");
+				const sessionId = p.sessionId;
+				this.openSessions.add(sessionId);
+				this.deps.bridge.markSinkOpen(this, sessionId);
+				if (!await this.deps.bridge.openSession(this, sessionId, p.tailCount ?? 100)) {
+					this.openSessions.delete(sessionId);
+					this.deps.bridge.markSinkClosed(this, sessionId);
+					return this.fail(env.id, "E_NOT_FOUND", "session history unavailable");
+				}
 				return;
 			}
 			case "c2s.session.close": {
@@ -526,21 +534,23 @@ var BridgeConnection = class {
 					});
 				}
 				const userSeq = await this.deps.bridge.sendPrompt(p.sessionId, text, images);
-				if (userSeq === null) return this.fail(env.id, "E_BUSY", "session busy or unavailable");
-				this.send("s2c.ack", { userSeq }, env.id);
+				if (!userSeq.ok) return this.fail(env.id, managementErrorCode(userSeq.kind), userSeq.message);
+				this.send("s2c.ack", { userSeq: userSeq.value }, env.id);
 				return;
 			}
 			case "c2s.approval.respond": {
 				const p = env.payload;
 				if (!p?.requestId || p.decision !== "allow" && p.decision !== "deny") return this.fail(env.id, "E_PROTOCOL", "requestId and decision required");
-				if (!await this.deps.bridge.respondApproval(p.requestId, p.decision)) return this.fail(env.id, "E_NOT_FOUND", "approval not pending");
+				const outcome = await this.deps.bridge.respondApproval(p.requestId, p.decision, typeof p.reason === "string" ? p.reason : void 0);
+				if (!outcome.ok) return this.fail(env.id, pendingResponseErrorCode(outcome.reason), pendingResponseMessage("approval", outcome.reason));
 				this.send("s2c.ack", {}, env.id);
 				return;
 			}
 			case "c2s.question.respond": {
 				const p = env.payload;
 				if (!p?.requestId || !Array.isArray(p.answers)) return this.fail(env.id, "E_PROTOCOL", "requestId and answers required");
-				if (!await this.deps.bridge.respondQuestion(p.requestId, p.answers)) return this.fail(env.id, "E_NOT_FOUND", "question not pending");
+				const outcome = await this.deps.bridge.respondQuestion(p.requestId, p.answers);
+				if (!outcome.ok) return this.fail(env.id, pendingResponseErrorCode(outcome.reason), pendingResponseMessage("question", outcome.reason));
 				this.send("s2c.ack", {}, env.id);
 				return;
 			}
@@ -612,6 +622,23 @@ var BridgeConnection = class {
 		}
 	}
 };
+/** Error code for a failed approval/question response outcome. */
+function pendingResponseErrorCode(reason) {
+	switch (reason) {
+		case "not-pending": return "E_NOT_FOUND";
+		case "bad-response": return "E_PROTOCOL";
+		case "transport": return "E_INTERNAL";
+	}
+}
+/** Human-readable failure detail; `question not pending` must only ever mean
+* "nothing pending", never "the host rejected the answer". */
+function pendingResponseMessage(kind, reason) {
+	switch (reason) {
+		case "not-pending": return kind + " not pending";
+		case "bad-response": return kind + " answer rejected by host: answer does not match the asked questions";
+		case "transport": return "host connection failed while answering " + kind;
+	}
+}
 function managementErrorCode(kind) {
 	switch (kind) {
 		case "unsupported": return "E_UNSUPPORTED";
@@ -677,6 +704,7 @@ var HostBridge = class {
 			replay: true,
 			approvals: true,
 			questions: true,
+			pendingSnapshot: true,
 			models: typeof this.apiProxy.sessions.models === "function" && typeof this.apiProxy.sessions.selectModel === "function",
 			sessionManagement: typeof this.apiProxy.sessions.rename === "function" && typeof this.apiProxy.workspace?.archiveSession === "function",
 			projectSelection: typeof this.apiProxy.workspace?.list === "function" && typeof this.apiProxy.workspace?.create === "function",
@@ -698,7 +726,7 @@ var HostBridge = class {
 	/** Whether the ring still holds everything after the cursor. */
 	canResumeFrom(cursor) {
 		const oldest = this.ring.length > 0 ? this.ring[0].seq : this.cursor + 1;
-		return cursor + 1 >= oldest;
+		return cursor <= this.cursor && cursor + 1 >= oldest;
 	}
 	sinkSessions = /* @__PURE__ */ new Map();
 	lastAssistantText = /* @__PURE__ */ new Map();
@@ -1040,6 +1068,27 @@ var HostBridge = class {
 	listSessions() {
 		return [...this.summaries.values()].sort((a, b) => b.lastActivityTs - a.lastActivityTs);
 	}
+	/**
+	* Complete transient interaction state. Unlike the replay ring, this remains
+	* authoritative after a long disconnect and is rehydrated by apiProxy's mux
+	* stream when the bridge itself restarts.
+	*/
+	pendingSnapshot() {
+		return {
+			approvals: [...this.approvals.entries()].map(([requestId, pending]) => ({
+				requestId,
+				sessionId: pending.sessionId,
+				toolName: pending.toolName,
+				summary: pending.reason,
+				riskLevel: riskOf(pending.toolName)
+			})),
+			questions: [...this.questions.entries()].map(([requestId, pending]) => ({
+				requestId,
+				sessionId: pending.sessionId,
+				questions: Array.isArray(pending.questions) ? pending.questions : []
+			}))
+		};
+	}
 	/** Tail history for an opened session; pushes s2c.session.tail to the sink. */
 	async openSession(sink, sessionId, tailCount) {
 		try {
@@ -1445,22 +1494,38 @@ var HostBridge = class {
 					clientTimeZone: localTimeZone()
 				}
 			});
-			if (!response.result || !response.result.ok) return null;
+			if (!response.result) return {
+				ok: false,
+				kind: "internal",
+				message: "prompt returned no result"
+			};
+			if (!response.result.ok) return hostSessionManagementError(response.result.error);
 			const row = this.summaries.get(sessionId);
 			if (row) {
 				row.lastActivityTs = Date.now();
 				this.pushSummary(row);
 			}
-			return Date.now();
-		} catch {
-			return null;
+			return {
+				ok: true,
+				value: Date.now()
+			};
+		} catch (error) {
+			return {
+				ok: false,
+				kind: "internal",
+				message: String(error)
+			};
 		}
 	}
-	async respondApproval(requestId, decision) {
+	async respondApproval(requestId, decision, reason) {
 		const pending = this.approvals.get(requestId);
-		if (!pending) return false;
+		if (!pending) return {
+			ok: false,
+			reason: "not-pending"
+		};
 		this.approvals.delete(requestId);
 		const outcome = decision === "allow" ? "allowed-once" : "rejected";
+		const denialReason = typeof reason === "string" ? reason.trim().slice(0, 500) : "";
 		try {
 			const receipt = await this.apiProxy.respond({
 				type: "client-response",
@@ -1470,21 +1535,35 @@ var HostBridge = class {
 					value: {
 						sessionId: pending.sessionId,
 						approvalId: requestId,
-						outcome
+						outcome,
+						...denialReason.length > 0 ? { reason: denialReason } : {}
 					}
 				}
 			});
-			const accepted = Boolean(receipt?.accepted);
-			if (!accepted && !this.approvals.has(requestId)) this.approvals.set(requestId, pending);
-			return accepted;
+			if (!Boolean(receipt?.accepted)) {
+				const failure = receiptFailureReason(receipt);
+				if (failure !== "not-pending" && !this.approvals.has(requestId)) this.approvals.set(requestId, pending);
+				return {
+					ok: false,
+					reason: failure
+				};
+			}
+			this.bumpPendingFlags(pending.sessionId);
+			return { ok: true };
 		} catch {
 			if (!this.approvals.has(requestId)) this.approvals.set(requestId, pending);
-			return false;
+			return {
+				ok: false,
+				reason: "transport"
+			};
 		}
 	}
 	async respondQuestion(requestId, answers) {
 		const pending = this.questions.get(requestId);
-		if (!pending) return false;
+		if (!pending) return {
+			ok: false,
+			reason: "not-pending"
+		};
 		this.questions.delete(requestId);
 		try {
 			const receipt = await this.apiProxy.respond({
@@ -1494,19 +1573,65 @@ var HostBridge = class {
 					ok: true,
 					value: {
 						sessionId: pending.sessionId,
-						answer: { answers }
+						answer: { answers: normalizeAnswerItems(answers, pending.questions) }
 					}
 				}
 			});
-			const accepted = Boolean(receipt?.accepted);
-			if (!accepted && !this.questions.has(requestId)) this.questions.set(requestId, pending);
-			return accepted;
+			if (!Boolean(receipt?.accepted)) {
+				const failure = receiptFailureReason(receipt);
+				if (failure !== "not-pending" && !this.questions.has(requestId)) this.questions.set(requestId, pending);
+				return {
+					ok: false,
+					reason: failure
+				};
+			}
+			this.bumpPendingFlags(pending.sessionId);
+			return { ok: true };
 		} catch {
 			if (!this.questions.has(requestId)) this.questions.set(requestId, pending);
-			return false;
+			return {
+				ok: false,
+				reason: "transport"
+			};
 		}
 	}
 };
+/**
+* The host validates question answers strictly (core dsh-user-questions via
+* apiProxy): a present-but-empty `custom` fails `matchesQuestions`, and a
+* single-select question rejects `custom` combined with a selection. Clients
+* may send lenient shapes (the phone historically always attached
+* `"custom": ""`, which made EVERY option-only answer fail), so normalize to
+* exactly what the host accepts before forwarding.
+*/
+function normalizeAnswerItems(raw, questions) {
+	if (!Array.isArray(raw)) return [];
+	const askedById = /* @__PURE__ */ new Map();
+	if (Array.isArray(questions)) {
+		for (const q of questions) if (typeof q === "object" && q !== null && typeof q.id === "string") askedById.set(q.id, q);
+	}
+	const items = [];
+	for (const entry of raw) {
+		if (typeof entry !== "object" || entry === null) continue;
+		const r = entry;
+		if (typeof r.id !== "string") continue;
+		const selected = [...new Set(Array.isArray(r.selected) ? r.selected.filter((s) => typeof s === "string") : [])];
+		const customText = typeof r.custom === "string" ? r.custom : "";
+		let custom;
+		if (customText.trim().length > 0) custom = customText;
+		if (custom !== void 0 && selected.length > 0 && askedById.get(r.id)?.multiSelect !== true) custom = void 0;
+		items.push({
+			id: r.id,
+			selected,
+			...custom !== void 0 ? { custom } : {}
+		});
+	}
+	return items;
+}
+/** Map an apiProxy respond receipt onto the failure vocabulary. */
+function receiptFailureReason(receipt) {
+	return receipt?.reason === "not-pending" ? "not-pending" : "bad-response";
+}
 function clampTail(n) {
 	if (!Number.isFinite(n)) return 100;
 	return Math.max(10, Math.min(500, Math.floor(n)));
@@ -1598,9 +1723,10 @@ function projectEvent(sessionId, event) {
 			kind: "message.final",
 			data: {
 				seq: event.seq,
-				role: "user",
+				role: userRoleOf(event.data),
 				text: messageText(event.data),
 				...attachmentProjection(event.data),
+				...contextProjectionOf(event.data),
 				ts: tsOf(event)
 			}
 		};
@@ -1644,27 +1770,99 @@ function projectEvent(sessionId, event) {
 					tool: {
 						name: String(data?.name ?? "tool"),
 						state: "running",
-						summary: summarizeArgs(data?.arguments)
+						summary: summarizeArgs(data?.arguments),
+						...data?.callId ? { callId: String(data.callId) } : {}
 					},
 					ts: tsOf(event)
 				}
 			};
 		}
-		case "tool/result": return {
-			kind: "tool.end",
-			data: {
-				seq: event.seq,
-				role: "tool",
-				ok: !event.data || event.data.error === void 0,
-				ts: tsOf(event)
-			}
-		};
+		case "tool/result": {
+			const data = event.data;
+			return {
+				kind: "tool.end",
+				data: {
+					seq: event.seq,
+					role: "tool",
+					ok: !event.data || data?.error === void 0,
+					...data?.callId ? { callId: String(data.callId) } : {},
+					ts: tsOf(event)
+				}
+			};
+		}
 		default: return null;
 	}
 }
 function tsOf(event) {
 	return typeof event.time === "number" ? event.time : Date.now();
 }
+/** Read the durable message source off one user/message payload. Handles both
+* bare-message payloads and older `{message: {...}}` wrappers; undefined when
+* the shape carries no readable source (legacy hosts). */
+function userMessageSource(data) {
+	if (!data || typeof data !== "object") return void 0;
+	const obj = data;
+	if (obj.source && typeof obj.source === "object") return obj.source;
+	if (obj.message && typeof obj.message === "object" && obj.message.source && typeof obj.message.source === "object") return obj.message.source;
+}
+/** Wire role for one user/message payload. A payload without any readable
+* source degrades to 'user' so history written by older hosts stays visible;
+* a present source follows the host's own trajectory rule — anything whose
+* `kind` is not 'user' is injected context and projects as 'system'. */
+function userRoleOf(data) {
+	const source = userMessageSource(data);
+	if (!source) return "user";
+	return source.kind === "user" ? "user" : "system";
+}
+/** Producer name of one injected-context source, mirroring how the DSH client
+* runtime derives its trajectory label: plugin name, skill name, instruction
+* paths, session-reference labels, or the raw kind as fallback. */
+function contextLabelOf(source) {
+	const kind = typeof source.kind === "string" ? source.kind : "";
+	const joined = (member) => {
+		const list = source[member];
+		if (!Array.isArray(list)) return void 0;
+		const names = list.flatMap((entry) => {
+			if (!entry || typeof entry !== "object") return [];
+			const record = entry;
+			return [typeof record.label === "string" ? record.label : typeof record.path === "string" ? record.path : ""];
+		}).filter((name) => name.length > 0);
+		return names.length > 0 ? names.join(", ") : void 0;
+	};
+	switch (kind) {
+		case "session-reference": return joined("references") ?? (kind || void 0);
+		case "agent-instructions": return joined("changes") ?? (kind || void 0);
+		case "plugin": return typeof source.plugin === "string" && source.plugin.length > 0 ? source.plugin : kind || void 0;
+		case "skill-invocation": return typeof source.name === "string" && source.name.length > 0 ? source.name : kind || void 0;
+		default: return kind || void 0;
+	}
+}
+/** Semantic ContextForm declared by the producer ('snapshot', 'notice', …);
+* anything unrecognized stays undefined so clients render it opaque. */
+function contextFormOf(source) {
+	if (typeof source.form !== "string" || source.form.length === 0) return void 0;
+	return [
+		"instructions",
+		"catalog",
+		"snapshot",
+		"notice",
+		"relay",
+		"recall"
+	].includes(source.form) ? source.form : void 0;
+}
+/** Optional `context` metadata for one system row; {} on user rows. */
+function contextProjectionOf(data) {
+	if (userRoleOf(data) !== "system") return {};
+	const source = userMessageSource(data);
+	if (!source) return {};
+	const label = contextLabelOf(source);
+	const form = contextFormOf(source);
+	if (!label && !form) return {};
+	return { context: {
+		...label ? { label } : {},
+		...form ? { form } : {}
+	} };
+}
 /** Extract plain text from user/assistant message payloads across shapes. */
 function messageText(data) {
 	if (typeof data === "string") return data;
@@ -1874,9 +2072,10 @@ function projectHistory(events) {
 			case "user/message":
 				messages.push({
 					...base,
-					role: "user",
+					role: userRoleOf(event.data),
 					text: messageText(event.data),
-					...attachmentProjection(event.data)
+					...attachmentProjection(event.data),
+					...contextProjectionOf(event.data)
 				});
 				break;
 			case "assistant/message": {
@@ -2711,12 +2910,14 @@ var RemoteSupervisor = class {
 				mode: 448
 			});
 		} catch (error) {
+			if (this.stopping) return;
 			this.setStatus({
 				phase: "unavailable",
 				message: `embedded tunnel helper unavailable: ${String(error)}`
 			});
 			return;
 		}
+		if (this.stopping) return;
 		this.setStatus({
 			phase: "starting",
 			message: void 0
@@ -3207,6 +3408,10 @@ function apply(ctx, options) {
 	let enrollAttemptFor;
 	let enrollLastAttemptAt = 0;
 	const ensureRelayEnrolled = async (url) => {
+		if (!/^https:\/\//i.test(url.trim())) {
+			log("push relay enrollment refused: relayUrl must be an https URL");
+			return;
+		}
 		if (enrollmentCell.token) return enrollmentCell.token;
 		const fingerprint = url + ":" + String(enrollmentCell.enrollKey ?? "");
 		if (fingerprint !== enrollAttemptFor) {
@@ -3239,7 +3444,14 @@ function apply(ctx, options) {
 		}
 	};
 	let cachedSender;
+	/**
+	* Last failed APNs-sender build. The config fingerprint cannot see the
+	* filesystem, so remembering a failure forever meant "copy the .p8 into
+	* place later" never recovered without an edit or restart; throttle the
+	* retry by time instead — same pattern as relay enrollment below.
+	*/
 	let senderFailedFor;
+	const SENDER_FAILURE_RETRY_MS = 6e4;
 	/**
 	* Lazily build the push sender for the current config. A broken config
 	* (unreadable .p8) disables push for that fingerprint with exactly one log
@@ -3248,7 +3460,7 @@ function apply(ctx, options) {
 	const senderFor = async (resolved) => {
 		const fingerprint = JSON.stringify(resolved);
 		if (cachedSender?.fingerprint === fingerprint) return cachedSender.send;
-		if (senderFailedFor === fingerprint) return void 0;
+		if (senderFailedFor?.fingerprint === fingerprint && Date.now() - senderFailedFor.at < SENDER_FAILURE_RETRY_MS) return;
 		if (cachedSender) {
 			await cachedSender.dispose?.().catch(() => {});
 			cachedSender = void 0;
@@ -3269,7 +3481,10 @@ function apply(ctx, options) {
 			try {
 				await readFile(expandHome(resolved.keyPath), "utf8");
 			} catch (error) {
-				senderFailedFor = fingerprint;
+				senderFailedFor = {
+					fingerprint,
+					at: Date.now()
+				};
 				log("apns push unavailable (key unreadable at " + resolved.keyPath + "): " + String(error));
 				return;
 			}
@@ -3422,6 +3637,16 @@ function apply(ctx, options) {
 			}]
 		};
 		const url = (push.relayUrl ?? "").trim() || DEFAULT_RELAY_URL;
+		if (!/^https:\/\//i.test(url)) return {
+			url,
+			overall: "failed",
+			tokenIssued: false,
+			steps: [{
+				id: "health",
+				ok: false,
+				message: "relayUrl 必须是 https 地址：注册请求携带共享密钥，明文 HTTP 会把它暴露给链路上的任何节点"
+			}]
+		};
 		if (!enrollmentCell.clientId && enrollmentCell.enrollKey) {
 			enrollmentCell.clientId = "u_" + randomBytes(16).toString("base64url");
 			persistEnrollment();