dsh-deeppilot 0.6.0 → 0.6.1

package/PRIVACY.md

@@ -7,7 +7,7 @@ DeepPilot connects directly to the DSH Host controlled by the user. The plugin d
 By default, runtime state is stored under `$DSH_HOME/deeppilot/`:
 
 - `host-id`: a random, non-secret stable audience identifier;
-- `devices-v2.json`: paired public keys, fingerprints, scopes, device metadata, revocation/last-seen timestamps, notification preferences, and APNs registrations;
+- `devices-v2.json`: paired public keys, fingerprints, scopes, device metadata, revocation/last-seen timestamps, notification preferences, APNs alert registrations, and WidgetKit push registrations (a separate token per device used only for content-free widget refresh invalidations);
 - `tailscale/`: local state for the optional embedded tsnet node.
 
 The directory is owner-only mode `0700`. The Mac never receives or stores iPhone private signing keys. Pairing codes exist only in plugin memory for up to five minutes and are not written to disk.
@@ -31,6 +31,20 @@ Direct APNs mode sends the device token and notification payload to Apple using
 
 The relay does not receive complete history, attachments, live token streams, unrelated prompts, pairing codes, device keys, the device registry, or Tailscale state. Disabling offline push removes this path.
 
+## WidgetKit refresh push
+
+The iOS home-screen widget may register a separate WidgetKit push token (iOS 26+). These invalidations are content-free: the APNs payload is fixed to `{ "aps": { "content-changed": true } }` with no session, title, or body fields, so neither Apple nor the relay learns anything about Host activity beyond "something changed, please refetch". The widget then pulls data over its own short-lived, authenticated read-only connection directly to the user's DSH Host. Widget tokens are stored alongside the alert token in `devices-v2.json`, are throttled to at most one invalidation per Host per 30 seconds, expire after 7 days without re-registration, and are deleted when the device is revoked.
+
 ## Logs
 
 Routine logs contain lifecycle state, delivery outcomes, and process-local salted hashes for source/device identifiers. Logs are designed not to contain pairing codes, key material, APNs tokens, or message bodies. Frame diagnostics appear only with `debug`.
+
+### Generic offline notifications
+
+Set `push.contentMode` to `generic` in the plugin configuration to replace conversation-derived notification titles and bodies with generic status text **before** either APNs or the Relay receives them. The default is `preview`, preserving short previews. Device tokens, Host audience, session and notification identifiers, and categories are still sent. This option controls offline pushes; local notifications generated by the iOS app from its direct connection are unchanged.
+
+For identity-tracked sends, the Host stores a bounded local delivery journal containing
+hashed device/send keys, content fingerprints, session identifiers, timestamps, and
+receipts. It does not store prompt bodies or image data in that journal. The iOS app
+stores unresolved send IDs, display text and attachment counts in its instance-scoped
+SQLite cache; removing that instance removes this outbox with its database.

package/lib/client.js

@@ -539,6 +539,8 @@ window.__ModuleLoader__.load({
 				"devices.col.fingerprint": "密钥指纹",
 				"devices.col.actions": "操作",
 				"devices.revoke": "删除",
+				"devices.revokeAria": "删除设备“{name}”",
+				"devices.deleting": "删除中…",
 				"devices.revokeConfirm": "确定删除设备“{name}”吗？该设备会立即断开，再次使用时需要重新配对。",
 				"devices.revoked": "设备已删除",
 				"devices.revokeFailed": "设备删除失败：",
@@ -719,6 +721,8 @@ window.__ModuleLoader__.load({
 				"devices.col.fingerprint": "Key fingerprint",
 				"devices.col.actions": "Actions",
 				"devices.revoke": "Delete",
+				"devices.revokeAria": "Delete device “{name}”",
+				"devices.deleting": "Deleting…",
 				"devices.revokeConfirm": "Delete “{name}”? It will disconnect immediately and must pair again before reconnecting.",
 				"devices.revoked": "Device deleted",
 				"devices.revokeFailed": "Failed to delete device: ",
@@ -881,10 +885,15 @@ window.__ModuleLoader__.load({
 			".pbb-action:disabled{cursor:default;opacity:.5}",
 			".pbb-actionSelected{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-state-success-primary,#22a06b);background:var(--dsw-alias-bg-module-platform)}",
 			".pbb-targetList{display:flex;flex-wrap:wrap;gap:6px;padding-top:4px}",
-			".pbb-actionDanger{color:#fff;background:#dc2626;border-color:#dc2626;line-height:1.35;padding:4px 10px;box-shadow:0 1px 2px rgba(127,29,29,.18);transition:background-color .15s ease,border-color .15s ease,box-shadow .15s ease,transform .1s ease}",
-			".pbb-actionDanger:hover:not(:disabled){color:#fff;background:#b91c1c;border-color:#b91c1c;box-shadow:0 2px 5px rgba(127,29,29,.24)}",
-			".pbb-actionDanger:active:not(:disabled){background:#991b1b;border-color:#991b1b;box-shadow:0 1px 2px rgba(127,29,29,.2);transform:translateY(1px)}",
-			".pbb-actionDanger:focus-visible{outline:2px solid rgba(220,38,38,.32);outline-offset:2px}",
+			".pbb-actionDangerGhost{color:#dc2626;border-color:rgba(220,38,38,.38);background:transparent;line-height:1.35;padding:3px 9px;box-shadow:none;transition:color .15s ease,background-color .15s ease,border-color .15s ease,box-shadow .15s ease,transform .1s ease}",
+			".pbb-actionDangerGhost:hover:not(:disabled){color:#b91c1c;background:rgba(220,38,38,.09);border-color:rgba(185,28,28,.5);box-shadow:0 1px 2px rgba(127,29,29,.1)}",
+			".pbb-actionDangerGhost:active:not(:disabled){color:#991b1b;background:rgba(220,38,38,.14);border-color:rgba(153,27,27,.55);box-shadow:none;transform:translateY(1px)}",
+			".pbb-actionDangerGhost:focus-visible{outline:2px solid rgba(220,38,38,.32);outline-offset:1px}",
+			".pbb-actionDangerGhost:disabled{cursor:default;opacity:.62}",
+			".pbb-actionIcon{flex:none;display:inline-block;vertical-align:-2px;margin-right:5px;pointer-events:none}",
+			".pbb-actionBusy{display:inline-flex;align-items:center;gap:6px}",
+			".pbb-actionBusy::before{content:\"\";width:9px;height:9px;border-radius:50%;border:1.5px solid rgba(220,38,38,.35);border-top-color:currentColor;animation:pbb-spin .7s linear infinite}",
+			"@keyframes pbb-spin{to{transform:rotate(360deg)}}",
 			".pbb-qrPanel{display:flex;flex-direction:column;align-items:center;gap:9px;padding:12px 0 4px}",
 			".pbb-qrImage{width:240px;height:240px;max-width:100%;background:#fff;border-radius:10px;padding:8px;box-sizing:border-box}",
 			".pbb-pairCodeBlock{width:min(100%,420px);display:flex;flex-direction:column;gap:5px}",
@@ -3411,6 +3420,21 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/settings-page.ts
+		/** Inline trash icon for the compact destructive row action. Kept as a tiny
+		*  element (no icon dependency) so the client bundle stays dependency-free
+		*  apart from React. */
+		const TrashIcon = () => (0, react.createElement)("svg", {
+			className: "pbb-actionIcon",
+			viewBox: "0 0 16 16",
+			width: 13,
+			height: 13,
+			fill: "none",
+			stroke: "currentColor",
+			strokeWidth: 1.5,
+			strokeLinecap: "round",
+			strokeLinejoin: "round",
+			"aria-hidden": true
+		}, (0, react.createElement)("path", { d: "M2.5 4.5h11" }), (0, react.createElement)("path", { d: "M6.5 2.5h3" }), (0, react.createElement)("path", { d: "M4 4.5l.6 8.2a1 1 0 0 0 1 .9h4.8a1 1 0 0 0 1-.9l.6-8.2" }), (0, react.createElement)("path", { d: "M6.6 7v4.2" }), (0, react.createElement)("path", { d: "M9.4 7v4.2" }));
 		async function writeClipboard(t, value) {
 			try {
 				await navigator.clipboard.writeText(value);
@@ -3754,10 +3778,11 @@ window.__ModuleLoader__.load({
 			const visibleDevices = report?.devices.filter((device) => device.revokedAt === void 0) ?? [];
 			const deviceTable = visibleDevices.length > 0 ? (0, react.createElement)("table", { className: "pbb-table" }, (0, react.createElement)("thead", null, (0, react.createElement)("tr", null, (0, react.createElement)("th", null, translateWith(props.t, "devices.col.name")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.fingerprint")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.lastSeen")), (0, react.createElement)("th", null, translateWith(props.t, "devices.col.actions")))), (0, react.createElement)("tbody", null, visibleDevices.map((d) => (0, react.createElement)("tr", { key: d.deviceId }, (0, react.createElement)("td", null, d.deviceName, (0, react.createElement)("div", { className: "pbb-diag" }, d.appVersion)), (0, react.createElement)("td", null, (0, react.createElement)("code", { className: "pbb-token" }, d.fingerprint.slice(0, 12))), (0, react.createElement)("td", null, new Date(d.lastSeenTs).toLocaleString()), (0, react.createElement)("td", null, (0, react.createElement)("button", {
 				type: "button",
-				className: "pbb-action pbb-actionDanger",
+				className: "pbb-action pbb-actionDangerGhost",
 				disabled: deviceBusy === d.deviceId,
+				"aria-label": deviceBusy === d.deviceId ? translateWith(props.t, "devices.deleting", { name: d.deviceName }) : translateWith(props.t, "devices.revokeAria", { name: d.deviceName }),
 				onClick: () => revokeDevice(d.deviceId, d.deviceName)
-			}, translateWith(props.t, "devices.revoke"))))))) : (0, react.createElement)("p", { className: "pbb-empty" }, translateWith(props.t, "devices.empty"));
+			}, deviceBusy === d.deviceId ? null : TrashIcon(), deviceBusy === d.deviceId ? (0, react.createElement)("span", { className: "pbb-actionBusy" }, translateWith(props.t, "devices.deleting")) : translateWith(props.t, "devices.revoke"))))))) : (0, react.createElement)("p", { className: "pbb-empty" }, translateWith(props.t, "devices.empty"));
 			const switchTitle = translateWith(props.t, "master.title");
 			const switchDesc = switchReady ? enabled ? translateWith(props.t, "master.on") : translateWith(props.t, "master.off") : translateWith(props.t, "master.loading");
 			return (0, react.createElement)("div", { className: "pbb-section" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("h2", { className: "pbb-title" }, "DeepPilot"), (0, react.createElement)("div", { style: { flex: "1" } }), (0, react.createElement)("button", {