dsh-deeppilot 0.6.2 → 0.7.0

package/COMPATIBILITY.md

@@ -7,7 +7,7 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 | Component | Baseline | Evidence |
 |---|---|---|
 | Node.js | 22 or newer | package engine and CI |
-| DSH CLI and Host API | `0.1.5-rc.1` minimum for plugin `0.6.x` | rc.1 package-family typecheck/build; bridge and `/phone` protocol tests |
+| DSH CLI and Host API | the `0.1.5-rc.*` and `0.1.6-*`/`0.1.6` lines, `0.1.5-rc.1` minimum, for plugin `0.7.x` | plugin source typecheck, unit suite (240 tests) and `tsdown` build run against both the `0.1.5-rc.2` and the `0.1.6-alpha.1` package families; bridge and `/phone` protocol tests |
 | Host OS | macOS, Linux, Windows on packaged amd64/arm64 helper targets | helper checksums plus user-confirmed Windows/Linux Funnel launch and connection; local LAN validation remains part of alpha testing |
 | Remote access | Tailscale Funnel, ports 443/8443/10000 | helper and supervisor tests |
 | iOS | native DeepPilot client, protocol v2 | simulator build and v2 pairing/challenge evidence |
@@ -15,11 +15,27 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 ## Protocol boundary
 
 - Protocol v2 is the only supported wire version. Existing protocol-v1 devices must pair again after upgrading.
+- Plugin `0.7.x` serves the LAN listener over self-signed TLS only; devices paired over LAN with `0.6.x` or older must pair again so the app receives the certificate fingerprint. The DSH web server no longer carries `/phone` compatibility routes. Funnel pairings are unaffected.
 - Bearer authentication, URL credentials, and first-frame shared tokens are rejected. A supported client registers a P-256 public key through `/phone/pair` and signs each WebSocket challenge.
 - Without a compatible embedded helper, the core bridge and trusted-LAN mode can still run; remote Funnel reports `unavailable`.
 - If a DSH Host API is missing, only the dependent capability should be disabled. The plugin must not crash the Host.
-- Plugin `0.6.x` requires DSH `0.1.5-rc.1` or newer. Older plugin
-  versions used developer-preview DSH builds and remain historical artifacts.
+- Plugin `0.7.x` requires DSH `0.1.5-rc.1` or newer within the `0.1.x` line.
+  Older plugin versions used developer-preview DSH builds and remain historical
+  artifacts.
+- The declared peer range is a disjunction,
+  `^0.1.5-rc.1 || >=0.1.6-alpha.1 <0.2.0-0`, because npm's prerelease rule only
+  lets a prerelease version satisfy a range whose comparators carry a
+  prerelease on the same `major.minor.patch` tuple. Neither `^0.1.5-rc.1` nor
+  `>=0.1.5-rc.1` alone admits a `0.1.6` prerelease. `tests/compatibility-metadata.test.ts`
+  asserts the range admits `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.6-alpha.1`,
+  `0.1.6-beta.1` and `0.1.6`, and rejects `0.2.0`.
+- DSH `0.1.6-alpha.1` replaced `agent/session-start` with `agent/created`,
+  deprecated the synchronous `snapshotEvents`/`eventAt`/`ownEvents` history
+  readers, and renamed the PTC packages to the `ptc-runtime` family. The plugin
+  uses none of those surfaces: every host dependency is resolved structurally
+  from the Cordis context (`sessionController`, `workspaceController`,
+  `directoryPickerController`, `sessionProjections`) and the `session/event`
+  and `api-session/*` events, all of which kept their `0.1.5-rc` shape.
 - The compatibility facade converts the
   current Session controller's raw event arrays into the stable wrapped
   history entries consumed by the phone bridge. Sessions persisted by earlier
@@ -31,8 +47,8 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 
 - Intel macOS support for the embedded helper;
 - signed/notarized helper distribution;
-- repair or migration of persisted history rejected by the `0.1.5-rc.1`
-  Host's own session reader;
+- repair or migration of persisted history rejected by the Host's own session
+  reader;
 - every DSH developer-preview revision;
 - physical-device performance and every carrier/network combination;
 - production APNs delivery without a real provider credential and device.

package/README.md

@@ -22,7 +22,8 @@ Host on your own Mac and does not replace or modify the DSH Web UI.
 - Send prompts, switch models, create sessions, and answer approvals/questions.
 - Pair with a five-minute single-use code and a per-device P-256 key; physical
   iPhones keep the private key in Secure Enclave.
-- Connect over a trusted LAN or the optional embedded Tailscale Funnel.
+- Connect over the LAN (TLS with a Host-issued certificate pinned during
+  pairing) or the optional embedded Tailscale Funnel.
 - Receive live notifications and optional APNs notifications while offline.
 - Self-update hint: the settings page footer shows the installed plugin
   version, with an inline "new version" link to the matching GitHub
@@ -37,10 +38,11 @@ does not require the helper.
 
 | Plugin version | Required DSH | How to install |
 |---|---|---|
-| `0.6.x` (current stable, `latest`) | DSH `0.1.5-rc.1` or newer | `dsh plugin --profile web add dsh-deeppilot` |
-| `0.5.x` (previous stable) | DSH `0.1.1-rc.2`–`0.1.2-alpha.1` | `dsh plugin --profile web add dsh-deeppilot@0.5.0` |
+| `0.7.x` (current stable, `latest`) | DSH `0.1.5-rc.1` or newer | `dsh plugin --profile web add dsh-deeppilot` |
+| `0.6.x` (previous stable) | DSH `0.1.5-rc.1` or newer | `dsh plugin --profile web add dsh-deeppilot@0.6.2` |
+| `0.5.x` (legacy) | DSH `0.1.1-rc.2`–`0.1.2-alpha.1` | `dsh plugin --profile web add dsh-deeppilot@0.5.0` |
 
-`0.6.x` is built and typechecked against the DSH
+`0.7.x` is built and typechecked against the DSH
 [0.1.5-rc.1](https://www.npmjs.com/package/@deepseek-ai/dsh/v/0.1.5-rc.1)
 Host and client package family. It uses the Gateway multi-client Remote Events
 routing that keeps Web and DeepPilot independently answerable. Earlier plugin
@@ -59,10 +61,18 @@ After DSH restarts, open **Settings → DeepPilot**, enable the connection, show
 the pairing QR code, and scan it in the DeepPilot app. The same panel also
 shows a copyable pairing code for Simulator or manual entry.
 
-LAN access is enabled by default on the plugin's independent TCP port `3098`.
-DSH may continue listening only on `127.0.0.1:3080`; do not expose the full DSH
-web server. If a firewall is enabled, allow inbound TCP `3098` on trusted
-private networks. The port can be changed under **Advanced settings**.
+LAN access is enabled by default on the plugin's independent TCP port `3098`
+and is TLS-only. The plugin generates a self-signed certificate on first start
+(key under `$DSH_HOME/deeppilot/lan-tls/`), and the pairing QR code carries its
+public-key fingerprint so the app pins that exact Host. DSH may continue
+listening only on `127.0.0.1:3080`; the plugin no longer registers any `/phone`
+routes on the DSH web server. If a firewall is enabled, allow inbound TCP
+`3098` on the networks you use. The port can be changed under **Advanced
+settings**.
+
+Upgrading from a plugin version that served plain `ws://` on the LAN: devices
+paired over the LAN must pair again so they receive the certificate
+fingerprint. Devices paired through Funnel are unaffected.
 
 Package: [npmjs.com/package/dsh-deeppilot](https://www.npmjs.com/package/dsh-deeppilot)
 
@@ -78,14 +88,15 @@ DeepPilot state under `$DSH_HOME/deeppilot/`.
 
 ## Publishing (maintainers)
 
-`0.6.x` targets DSH `0.1.5-rc.1`+; `0.5.x` stays compatible with
-DSH `0.1.1-rc.2`–`0.1.2-alpha.1`. Keep both published:
+`0.7.x` targets DSH `0.1.5-rc.1`+; `0.6.x` keeps the pre-TLS LAN transport for
+the same DSH family during the migration window, and `0.5.x` stays compatible
+with DSH `0.1.1-rc.2`–`0.1.2-alpha.1`. Keep them published:
 
 1. Bump `version` in `package.json` and in the root `""` entry of
    `package-lock.json`, then run `npm test && npm run typecheck && npm run build`
    and inspect `npm pack --dry-run --json` (the check
-   `tests/compatibility-metadata.test.ts` enforces the `^0.1.5-rc.1` peer
-   ranges).
+   `tests/compatibility-metadata.test.ts` enforces the peer range and asserts it
+   admits both the `0.1.5-rc.*` and the `0.1.6-*` lines).
 2. Commit the release and push it. `npm publish` runs `prepack` (build) and
    `prepublishOnly` (test + typecheck) automatically.
 3. Publish pre-releases without touching `latest`:
@@ -95,7 +106,7 @@ DSH `0.1.1-rc.2`–`0.1.2-alpha.1`. Keep both published:
    ```
 
    After a successful publish, `npm view dsh-deeppilot dist-tags --json` shows
-   `"latest": "0.6.x"` and `"alpha": "0.6.x-alpha.y"`. Verify the published
+   `"latest": "0.7.x"` and `"alpha": "0.7.x-alpha.y"`. Verify the published
    package by installing it into a DSH `0.1.5-rc.1` profile before pointing
    users at it.
 4. Tag the release commit `vX.Y.Z` and prepare a GitHub Release
@@ -109,11 +120,12 @@ Never run `npm publish` from a copy that still has an older version.
 
 ## Connection and privacy
 
-Conversation traffic travels directly between the iPhone and your DSH Host.
-Trusted-LAN `ws://` traffic on the independent plugin port `3098` is
-unencrypted, so use it only on a network you trust. Both the LAN listener and
-optional Funnel mode expose only the DeepPilot connection, one-time pairing,
-and health endpoints, not the complete DSH Web UI.
+Conversation traffic travels directly between the iPhone and your DSH Host and
+is always encrypted: the LAN listener on port `3098` serves TLS with a
+self-signed certificate whose fingerprint the app receives during pairing, and
+Funnel mode uses Tailscale-issued certificates. The app refuses plain `ws://`.
+Both the LAN listener and optional Funnel mode expose only the DeepPilot
+connection, one-time pairing, and health endpoints, not the complete DSH Web UI.
 
 The DeepPilot settings page exposes **Connections per public source** under
 the collapsed **Advanced settings** section. It defaults to `8`, accepts

package/README.zh-CN.md

@@ -21,7 +21,8 @@
 - 发送提示词、切换模型、创建会话，并处理审批与提问；
 - 使用 5 分钟有效的单次配对码与设备级 P-256 密钥；iPhone 真机私钥保存在
   Secure Enclave；
-- 使用可信局域网，或可选的内嵌 Tailscale Funnel 远程连接；
+- 局域网连接全程 TLS：插件自签证书，App 按配对二维码中的指纹固定信任；
+  也可选用内嵌 Tailscale Funnel 远程连接；
 - 接收在线通知，以及可选的离线 APNs 推送；
 - 更新提示：设置页底部显示当前插件版本，并在有新版本时附加一个指向
   对应 GitHub Release 的链接（后台静默检查，仅比较稳定版，不引入第
@@ -34,10 +35,11 @@
 
 | 插件版本 | 所需 DSH | 安装命令 |
 |---|---|---|
-| `0.6.x`（当前稳定版，`latest`） | DSH `0.1.5-rc.1` 或更高 | `dsh plugin --profile web add dsh-deeppilot` |
-| `0.5.x`（旧版稳定版） | DSH `0.1.1-rc.2`–`0.1.2-alpha.1` | `dsh plugin --profile web add dsh-deeppilot@0.5.0` |
+| `0.7.x`（当前稳定版，`latest`） | DSH `0.1.5-rc.1` 或更高 | `dsh plugin --profile web add dsh-deeppilot` |
+| `0.6.x`（旧版稳定版） | DSH `0.1.5-rc.1` 或更高 | `dsh plugin --profile web add dsh-deeppilot@0.6.2` |
+| `0.5.x`（历史版本） | DSH `0.1.1-rc.2`–`0.1.2-alpha.1` | `dsh plugin --profile web add dsh-deeppilot@0.5.0` |
 
-`0.6.x` 基于 DSH
+`0.7.x` 基于 DSH
 [0.1.5-rc.1](https://www.npmjs.com/package/@deepseek-ai/dsh/v/0.1.5-rc.1)
 的 Host 与 client 包族构建并完成类型检查。它使用 Gateway 多 Client Remote Events
 路由，使 Web 与 DeepPilot 能独立处理同一交互。旧 alpha 仅保留为历史产物；安装
@@ -54,9 +56,14 @@ dsh web
 DSH 重启后，打开 **设置 → DeepPilot**，启用连接并显示配对二维码，然后在
 DeepPilot App 中扫码。同一面板也会显示可复制的配对码，供模拟器或手动输入使用。
 
-局域网连接默认使用插件独立的 TCP `3098` 端口。DSH 可以继续只监听
-`127.0.0.1:3080`，无需向局域网暴露完整 DSH Web 服务。启用系统防火墙时，请仅在
-可信私有网络放行入站 TCP `3098`；端口可在“高级设置”中修改。
+局域网连接默认使用插件独立的 TCP `3098` 端口，且只提供 TLS。插件首次启动时生成
+自签证书（私钥位于 `$DSH_HOME/deeppilot/lan-tls/`），配对二维码携带其公钥指纹，
+App 只信任与该指纹一致的主机。DSH 可以继续只监听 `127.0.0.1:3080`；插件不再在
+DSH Web 服务上注册任何 `/phone` 路由。启用系统防火墙时，请仅在你使用的网络放行
+入站 TCP `3098`；端口可在“高级设置”中修改。
+
+从仍在局域网提供明文 `ws://` 的旧版本插件升级：通过局域网配对的设备需要重新扫码
+配对，以接收证书指纹；经 Funnel 配对的设备不受影响。
 
 npm 包：[npmjs.com/package/dsh-deeppilot](https://www.npmjs.com/package/dsh-deeppilot)
 
@@ -71,13 +78,14 @@ dsh plugin --profile web remove dsh-deeppilot
 
 ## 发布说明（维护者）
 
-`0.6.x` 面向 DSH `0.1.5-rc.1`+；`0.5.x` 保持兼容 DSH
-`0.1.1-rc.2`–`0.1.2-alpha.1`，两个版本线都要保持发布：
+`0.7.x` 面向 DSH `0.1.5-rc.1`+；`0.6.x` 在同一 DSH 版本族上保留 TLS 化之前的
+局域网传输，供迁移期使用；`0.5.x` 保持兼容 DSH
+`0.1.1-rc.2`–`0.1.2-alpha.1`，各版本线都要保持发布：
 
 1. 同步修改 `package.json` 与 `package-lock.json` 根 `""` 条目中的
    `version`，然后运行 `npm test && npm run typecheck && npm run build`，
    并检查 `npm pack --dry-run --json`（`tests/compatibility-metadata.test.ts`
-   会强制校验 `^0.1.5-rc.1` 的 peer 范围）。
+   会强制校验 peer 范围，并断言它同时接纳 `0.1.5-rc.*` 与 `0.1.6-*` 两条线）。
 2. 提交发布并推送。`npm publish` 会自动执行 `prepack`（构建）与
    `prepublishOnly`（测试 + 类型检查）。
 3. 发布预发布版本，不要动 `latest`：
@@ -87,7 +95,7 @@ dsh plugin --profile web remove dsh-deeppilot
    ```
 
    发布成功后，`npm view dsh-deeppilot dist-tags --json` 应显示
-   `"latest": "0.6.x"` 与 `"alpha": "0.6.x-alpha.y"`。向用户推荐前，请先在
+   `"latest": "0.7.x"` 与 `"alpha": "0.7.x-alpha.y"`。向用户推荐前，请先在
    DSH `0.1.5-rc.1` profile 中安装验证发布的包。
 4. 为发布提交打 `vX.Y.Z` tag，并准备包含英文与简体中文说明的
    GitHub Release，链接本 README 的发布说明。
@@ -99,8 +107,9 @@ dsh plugin --profile web remove dsh-deeppilot
 
 ## 连接与隐私
 
-完整会话流量由 iPhone 直接连接用户自己的 DSH Host。插件独立 `3098` 端口上的
-可信局域网 `ws://` 是明文流量，只应在可信网络使用。局域网监听器和可选 Funnel
+完整会话流量由 iPhone 直接连接用户自己的 DSH Host，且始终加密：独立 `3098`
+端口的局域网监听器使用自签证书提供 TLS，指纹在配对时下发给 App；Funnel 模式
+使用 Tailscale 签发的证书。App 拒绝明文 `ws://`。局域网监听器和可选 Funnel
 模式都只暴露经过认证的 DeepPilot 连接、单次配对与健康检查端点，不会暴露完整
 DSH Web UI。
 

package/SECURITY.md

@@ -17,7 +17,7 @@ Do not open a public issue containing pairing codes, APNs device tokens, provide
 - Protocol v1, shared Bearer tokens, query credentials, and `c2s.hello.auth` are not accepted. There is no remote downgrade switch.
 - The server enforces explicit protocol scopes, while the normal settings UI grants the default scope set and exposes only the global connection switch plus per-device deletion. Deleting a device disconnects it immediately.
 - The canonical `$DSH_HOME/deeppilot` directory is repaired to mode `0700`. `host-id` and `devices-v2.json` are owner-only.
-- LAN `ws://` on the independent plugin port (default `3098`) is unencrypted. Use it only on a trusted network and never forward that port to the public Internet. Public access should use Funnel HTTPS/WSS.
+- The independent LAN listener (default port `3098`) is TLS-only: the plugin serves a self-signed EC P-256 certificate, and the app pins its SPKI fingerprint delivered inside the pairing QR. There is no trust-on-first-use; a regenerated key forces re-pairing. The private key lives owner-only under `$DSH_HOME/deeppilot/lan-tls/`. Never forward the LAN port to the public Internet; public access should use Funnel HTTPS/WSS.
 - The LAN listener and Funnel helper publish only `/phone`, `/phone/pair`, and `/phone/health`, never the complete DSH Web UI.
 - Logs must never include pairing codes, key material, APNs tokens, or message bodies.
 

package/lib/client.js

@@ -165,10 +165,16 @@ window.__ModuleLoader__.load({
 			if (!Array.isArray(endpoints) || endpoints.some((entry) => typeof entry !== "string")) reject("local.endpoints");
 			const message = s.message;
 			if (message !== void 0 && typeof message !== "string") reject("local.message");
+			const tlsFingerprint = s.tlsFingerprint;
+			if (tlsFingerprint !== void 0 && typeof tlsFingerprint !== "string") reject("local.tlsFingerprint");
+			const tlsIdentityRegenerated = s.tlsIdentityRegenerated;
+			if (tlsIdentityRegenerated !== void 0 && typeof tlsIdentityRegenerated !== "boolean") reject("local.tlsIdentityRegenerated");
 			return {
 				phase,
 				port: int(s, "port", "local.port"),
 				endpoints,
+				...typeof tlsFingerprint === "string" ? { tlsFingerprint } : {},
+				...tlsIdentityRegenerated === true ? { tlsIdentityRegenerated: true } : {},
 				...typeof message === "string" ? { message } : {},
 				updatedAt: int(s, "updatedAt", "local.updatedAt")
 			};
@@ -436,15 +442,17 @@ window.__ModuleLoader__.load({
 				"master.on": "已开启：接受手机连接。",
 				"master.off": "已关闭：不接受手机连接。",
 				"local.title": "局域网连接",
-				"local.on": "已开启：手机可通过独立端口 {port} 连接。",
+				"local.on": "已开启：手机可通过独立端口 {port} 以 TLS 加密连接。",
 				"local.off": "已关闭：不接受局域网连接。",
+				"local.tlsFingerprint": "证书指纹",
+				"local.tlsRegenerated": "局域网 TLS 身份已重新生成：此前通过内网配对的设备需要重新扫码配对。",
 				"local.phaseDisabled": "局域网连接未启用",
 				"local.phaseStarting": "局域网连接正在启动",
 				"local.phaseOnline": "局域网连接已就绪",
 				"local.phaseError": "局域网连接失败",
 				"local.phaseStopped": "局域网连接已停止",
 				"local.portTitle": "局域网端口",
-				"local.portDescription": "默认 3098，范围 1024–65535。该端口只提供 DeepPilot 的三个连接端点，不会开放完整 DSH。",
+				"local.portDescription": "默认 3098，范围 1024–65535。该端口只以 TLS 提供 DeepPilot 的三个连接端点，不会开放完整 DSH。",
 				"local.portApplied": "局域网端口已保存，监听器正在重新加载。",
 				"local.portInvalid": "请输入 1024–65535 之间的整数。",
 				"local.portFailed": "局域网端口保存失败：",
@@ -505,7 +513,7 @@ window.__ModuleLoader__.load({
 				"pair.codeCopyFailed": "配对码复制失败：",
 				"pair.publicCopyDone": "连接地址已复制",
 				"pair.publicCopyFailed": "复制失败：",
-				"pair.qrHint": "二维码包含{kind}地址和一次性配对码；配对码 5 分钟后失效，二维码将在 60 秒后自动隐藏。",
+				"pair.qrHint": "二维码包含{kind}地址、一次性配对码以及（内网时）证书指纹；配对码 5 分钟后失效，二维码将在 60 秒后自动隐藏。",
 				"advanced.summary": "高级信息",
 				"advanced.protocolVersion": "协议版本",
 				"advanced.serverVersion": "服务器版本",
@@ -618,15 +626,17 @@ window.__ModuleLoader__.load({
 				"master.on": "On: accepting phone connections.",
 				"master.off": "Off: not accepting phone connections.",
 				"local.title": "LAN connection",
-				"local.on": "On: phones can connect through the independent port {port}.",
+				"local.on": "On: phones connect over TLS through the independent port {port}.",
 				"local.off": "Off: LAN connections are not accepted.",
+				"local.tlsFingerprint": "Certificate fingerprint",
+				"local.tlsRegenerated": "The LAN TLS identity was regenerated: devices previously paired over LAN must scan a new pairing QR.",
 				"local.phaseDisabled": "LAN connection disabled",
 				"local.phaseStarting": "LAN connection starting",
 				"local.phaseOnline": "LAN connection ready",
 				"local.phaseError": "LAN connection failed",
 				"local.phaseStopped": "LAN connection stopped",
 				"local.portTitle": "LAN port",
-				"local.portDescription": "Default 3098; range 1024–65535. This port exposes only the three DeepPilot endpoints, never the full DSH server.",
+				"local.portDescription": "Default 3098; range 1024–65535. This port serves only the three DeepPilot endpoints over TLS, never the full DSH server.",
 				"local.portApplied": "LAN port saved; the listener is reloading.",
 				"local.portInvalid": "Enter an integer from 1024 to 65535.",
 				"local.portFailed": "Failed to save LAN port: ",
@@ -687,7 +697,7 @@ window.__ModuleLoader__.load({
 				"pair.codeCopyFailed": "Failed to copy pairing code: ",
 				"pair.publicCopyDone": "Connection address copied",
 				"pair.publicCopyFailed": "Copy failed: ",
-				"pair.qrHint": "The QR contains a {kind} address and a single-use pairing code. The code expires after 5 minutes; the QR auto-hides after 60 seconds.",
+				"pair.qrHint": "The QR contains a {kind} address, a single-use pairing code and, for LAN, the certificate fingerprint. The code expires after 5 minutes; the QR auto-hides after 60 seconds.",
 				"advanced.summary": "Advanced info",
 				"advanced.protocolVersion": "Protocol version",
 				"advanced.serverVersion": "Server version",
@@ -3352,17 +3362,25 @@ window.__ModuleLoader__.load({
 			});
 		})))(), 1);
 		const PAIRING_QR_TYPE = "deeppilot-pairing";
+		/** `sha256:` + base64url(SHA-256(SubjectPublicKeyInfo DER)) of the LAN certificate. */
+		const LAN_TLS_FINGERPRINT_PATTERN = /^sha256:[A-Za-z0-9_-]{43}$/;
+		function isLanTlsFingerprint(value) {
+			return typeof value === "string" && LAN_TLS_FINGERPRINT_PATTERN.test(value);
+		}
 		/**
 		* Return every explicit DeepPilot transport target. LAN comes first because
 		* it is private and lower latency; an online Funnel remains available as a
-		* separate choice instead of silently replacing the local address.
+		* separate choice instead of silently replacing the local address. A LAN
+		* listener without a certificate pin is never offered: the app could not
+		* trust it.
 		*/
 		function selectPairingTargets(local, remote) {
 			const targets = [];
-			if (local.phase === "online") {
+			if (local.phase === "online" && isLanTlsFingerprint(local.tlsFingerprint)) {
 				for (const host of local.endpoints) if (validTargetHost(host)) targets.push({
 					host,
-					kind: "lan"
+					kind: "lan",
+					tlsFingerprint: local.tlsFingerprint
 				});
 			}
 			if (remote.phase === "online" && remote.publicURL && validTargetHost(remote.publicURL)) targets.push({
@@ -3372,38 +3390,31 @@ window.__ModuleLoader__.load({
 			const seen = /* @__PURE__ */ new Set();
 			return targets.filter(({ host }) => !seen.has(host) && seen.add(host));
 		}
+		/** Only encrypted transports are ever offered to the app. */
+		const TARGET_PROTOCOLS = ["https:", "wss:"];
 		function validTargetHost(value) {
 			try {
 				const parsed = new URL(value);
-				return [
-					"http:",
-					"https:",
-					"ws:",
-					"wss:"
-				].includes(parsed.protocol) && parsed.hostname !== "" && parsed.username === "" && parsed.password === "";
+				return TARGET_PROTOCOLS.includes(parsed.protocol) && parsed.hostname !== "" && parsed.username === "" && parsed.password === "";
 			} catch {
 				return false;
 			}
 		}
 		/** Encode a short-lived, single-use pairing grant without URL credentials. */
-		function encodePairingQRPayload(host, grant) {
+		function encodePairingQRPayload(host, grant, tlsFingerprint) {
 			const normalizedHost = host.trim();
-			const parsed = new URL(normalizedHost);
-			if (![
-				"http:",
-				"https:",
-				"ws:",
-				"wss:"
-			].includes(parsed.protocol) || parsed.hostname === "" || parsed.username !== "" || parsed.password !== "") throw new TypeError("pairing QR requires a valid HTTP(S)/WS(S) host");
+			if (!validTargetHost(normalizedHost)) throw new TypeError("pairing QR requires a valid HTTPS/WSS host");
 			if (grant.code.trim().length < 32 || !Number.isInteger(grant.expiresAt) || grant.expiresAt <= Date.now()) throw new TypeError("pairing grant is invalid or expired");
 			if (!grant.audience.startsWith("deeppilot:")) throw new TypeError("pairing audience is invalid");
+			if (tlsFingerprint !== void 0 && !isLanTlsFingerprint(tlsFingerprint)) throw new TypeError("pairing TLS fingerprint is invalid");
 			const payload = {
 				v: 2,
 				type: PAIRING_QR_TYPE,
 				host: normalizedHost,
 				code: grant.code.trim(),
 				expiresAt: grant.expiresAt,
-				audience: grant.audience
+				audience: grant.audience,
+				...tlsFingerprint !== void 0 ? { tlsFingerprint } : {}
 			};
 			return JSON.stringify(payload);
 		}
@@ -3714,7 +3725,7 @@ window.__ModuleLoader__.load({
 				setPairingGrant(null);
 				props.beginPairing().then(async (grant) => ({
 					grant,
-					svg: await import_browser.toString(encodePairingQRPayload(pairingTarget.host, grant), {
+					svg: await import_browser.toString(encodePairingQRPayload(pairingTarget.host, grant, pairingTarget.tlsFingerprint), {
 						type: "svg",
 						errorCorrectionLevel: "M",
 						margin: 2,
@@ -3805,7 +3816,7 @@ window.__ModuleLoader__.load({
 				role: "img",
 				"aria-label": report !== null ? translateWith(props.t, LOCAL_PHASE_META[report.local.phase].labelKey) : translateWith(props.t, "phase.unknown"),
 				title: report !== null ? translateWith(props.t, LOCAL_PHASE_META[report.local.phase].labelKey) : void 0
-			}), translateWith(props.t, "local.title")), (0, react.createElement)("span", { className: "pbb-switchDesc" }, localSwitchReady ? localEnabled ? translateWith(props.t, "local.on", { port: localPort }) : translateWith(props.t, "local.off") : translateWith(props.t, "master.loading")), report !== null && report.local.message && report.local.phase === "error" ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, report.local.message) : null), (0, react.createElement)("button", {
+			}), translateWith(props.t, "local.title")), (0, react.createElement)("span", { className: "pbb-switchDesc" }, localSwitchReady ? localEnabled ? translateWith(props.t, "local.on", { port: localPort }) : translateWith(props.t, "local.off") : translateWith(props.t, "master.loading")), report !== null && report.local.message && report.local.phase === "error" ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, report.local.message) : null, report !== null && report.local.tlsIdentityRegenerated === true ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "local.tlsRegenerated")) : null, report !== null && report.local.phase === "online" && report.local.tlsFingerprint ? (0, react.createElement)("p", { className: "pbb-diag" }, translateWith(props.t, "local.tlsFingerprint"), " ", (0, react.createElement)("code", { className: "pbb-token" }, report.local.tlsFingerprint)) : null), (0, react.createElement)("button", {
 				type: "button",
 				role: "switch",
 				"aria-checked": localEnabled,
@@ -3920,7 +3931,11 @@ window.__ModuleLoader__.load({
 				type: "button",
 				className: "pbb-action",
 				onClick: () => copyRemoteURL(pairingTarget.host)
-			}, translateWith(props.t, "panel.tokenAction.copy"))), addressMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, addressMessage) : null, (0, react.createElement)("p", { className: "pbb-qrHint" }, translateWith(props.t, "pair.qrHint", { kind: pairingTarget.kind === "public" ? translateWith(props.t, "pair.kind.public") : translateWith(props.t, "pair.kind.lan") }))))), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, primaryRows, advancedRows.length > 0 ? (0, react.createElement)("details", { className: "pbb-help" }, (0, react.createElement)("summary", null, translateWith(props.t, "advanced.summary")), (0, react.createElement)("div", { className: "pbb-helpBody" }, advancedRows)) : null)), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "push.relayTitle")), (0, react.createElement)("span", { className: "pbb-tokenActions" }, (0, react.createElement)("button", {
+			}, translateWith(props.t, "panel.tokenAction.copy"))), addressMessage ? (0, react.createElement)("p", { className: "pbb-diag" }, addressMessage) : null, pairingTarget.tlsFingerprint === void 0 ? null : (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("code", { className: "pbb-token" }, pairingTarget.tlsFingerprint), (0, react.createElement)("button", {
+				type: "button",
+				className: "pbb-action",
+				onClick: () => copyRemoteURL(pairingTarget.tlsFingerprint ?? "")
+			}, translateWith(props.t, "panel.tokenAction.copy"))), (0, react.createElement)("p", { className: "pbb-qrHint" }, translateWith(props.t, "pair.qrHint", { kind: pairingTarget.kind === "public" ? translateWith(props.t, "pair.kind.public") : translateWith(props.t, "pair.kind.lan") }))))), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, primaryRows, advancedRows.length > 0 ? (0, react.createElement)("details", { className: "pbb-help" }, (0, react.createElement)("summary", null, translateWith(props.t, "advanced.summary")), (0, react.createElement)("div", { className: "pbb-helpBody" }, advancedRows)) : null)), (0, react.createElement)("div", { className: "pbb-card" }, (0, react.createElement)("div", { className: "pbb-field" }, (0, react.createElement)("div", { className: "pbb-row" }, (0, react.createElement)("span", { className: "pbb-label" }, translateWith(props.t, "push.relayTitle")), (0, react.createElement)("span", { className: "pbb-tokenActions" }, (0, react.createElement)("button", {
 				type: "button",
 				className: "pbb-action",
 				disabled: relayTestBusy,