dsh-deeppilot 0.9.15 → 0.9.17

package/README.md

@@ -77,8 +77,11 @@ Simulator or when the camera is unavailable. Switching between the LAN and
 public address issues a matching new QR code and string immediately, with the
 panel staying open.
 
-LAN access is enabled by default on the plugin's independent TCP port `3098`
-and is TLS-only. The plugin generates a self-signed certificate on first start
+LAN access is always on (there is no switch) on the plugin's independent TCP
+port `3098` and is TLS-only. After every connection the plugin tells the app
+its current LAN addresses and the public Funnel address, so a paired phone
+connects over the LAN on the same Wi-Fi and falls back to Funnel elsewhere,
+without pairing again. The plugin generates a self-signed certificate on first start
 (key under `$DSH_HOME/deeppilot/lan-tls/`), and the pairing QR code carries its
 public-key fingerprint so the app pins that exact Host. DSH may continue
 listening only on `127.0.0.1:3080`; the plugin no longer registers any `/phone`

package/README.zh-CN.md

@@ -64,7 +64,9 @@ DSH 重启后，打开 **设置 → DeepPilot**，开启“允许手机连接”
 与证书指纹），在 App 里粘贴一次即可完成配对，适合模拟器或相机不可用时使用；在「内网 /
 公网」之间切换会立即为所选地址生成新的二维码与配对信息，面板保持展开。
 
-局域网连接默认使用插件独立的 TCP `3098` 端口，且只提供 TLS。插件首次启动时生成
+局域网连接始终开启（没有开关），使用插件独立的 TCP `3098` 端口，且只提供 TLS。每次连上后，
+插件会把当前的局域网地址和公网 Funnel 地址告诉 App：同一 Wi-Fi 下手机自动走局域网，在外自动
+改走 Funnel，不需要重新配对。插件首次启动时生成
 自签证书（私钥位于 `$DSH_HOME/deeppilot/lan-tls/`），配对二维码携带其公钥指纹，
 App 只信任与该指纹一致的主机。DSH 可以继续只监听 `127.0.0.1:3080`；插件不再在
 DSH Web 服务上注册任何 `/phone` 路由。启用系统防火墙时，请仅在你使用的网络放行

package/bin/SHA256SUMS

@@ -1,6 +1,6 @@
-c79c889415f6fce13a2d0f19c94e2ceb5cbfc06ec5c841c1002092783663a6a6  ./darwin-amd64/dsh-deeppilot-tunnel
-affe9151e5356b574e1a85c806b198c39b5804f3a305b655cd3eb03c628ae0cc  ./darwin-arm64/dsh-deeppilot-tunnel
-a2475a2844250a6ef03853fe64db63eb1a163d9fcd7f3f438f3ec7a142d3a044  ./linux-amd64/dsh-deeppilot-tunnel
-6241de8d3c67e6e2af98e6b6040a10d9352183f893d3aed82c879a76c8b79432  ./linux-arm64/dsh-deeppilot-tunnel
-9449d3c48cc11446cd0f35c030f28000b5934512512fc1d7eeaa769d8d8304f3  ./windows-amd64/dsh-deeppilot-tunnel.exe
-fd0c912b5b39ba8bd385cb05c39665d89519c75b6f5ddbc506b7554926f6545f  ./windows-arm64/dsh-deeppilot-tunnel.exe
+eecc0241e0940e901c7f0bcda96945c22dcc5b24bd27349c391231d0398e50c2  ./darwin-amd64/dsh-deeppilot-tunnel
+e834c3d5e02abe0fc459b99ba3dd4f8e9b63f9f94ade402ab8bfaf34720dea86  ./darwin-arm64/dsh-deeppilot-tunnel
+1bcb0af171a9491566ec26f971930eb97a380f1a0db1d8dd55ee5e1fff46a9c5  ./linux-amd64/dsh-deeppilot-tunnel
+555846f645f3bbfcf96250d4a7e981829cfaf3e1bcda8b7854cf3b74b8cc4505  ./linux-arm64/dsh-deeppilot-tunnel
+725213a7302f325f098c6313ef38bf3a60e9b0929e4705e3f2e03e5977dca502  ./windows-amd64/dsh-deeppilot-tunnel.exe
+90cb4018d48e7e0b637d50d7725a8c1782fc93e8775b429380a979e3a8b04887  ./windows-arm64/dsh-deeppilot-tunnel.exe

package/docs/DSH_RELEASE_MEMORY.md

@@ -5,6 +5,29 @@
 > move the lower bound, at each `0.x` minor boundary, or when a host inside the
 > range breaks at runtime.
 
+## Runtime break — image read-back since `dsh-v0.2.2-alpha.2` (2026-11-06)
+
+- **Symptom (issue #42):** every conversation image (tool results and the
+  user's own uploads) spins forever on the phone on `0.2.2-alpha.2` through
+  `0.2.2-rc.1`; `0.2.1-rc.5` is unaffected.
+- **Cause:** `SessionController.attachment` changed its request from
+  `{ sessionId, attachmentId }` to `{ sessionId, attachment: ImageAttachmentRef }`.
+  The host now verifies the ref's `mediaType`/`bytes`/`width`/`height` against
+  the stored file and no longer checks that the session references the image
+  (`sessionId` is a gateway scope only). The bridge still sent the old shape, so
+  `readImage(undefined)` failed and the phone got `E_NOT_FOUND`; the iOS
+  thumbnail had no failure state. Earlier audits compared method names only, so
+  this signature change was missed — audit request shapes, not just presence.
+- **Fix (plugin, no protocol change):** `src/image-ref-index.ts` remembers the
+  full host ref for every image the bridge projects (live events, tail, history
+  pages) and, on a miss, pages back through session history (at most 20 pages of
+  500 messages). `HostBridge.attachmentData` sends `attachmentId` and
+  `attachment` together — the controller is injected directly, without schema
+  validation, so each generation reads its own field. A ref is only supplied when
+  that session projected the image, which restores the session-membership check
+  the new host dropped. `tests/dsh-api-proxy.test.ts` runs both host contracts.
+- **Declaration:** unchanged; both generations are served.
+
 ## UI integration check — native settings controls (2026-11-05)
 
 - **Runtime surface:** `@deepseek-ai/dsh-client-ui-primitives` is an implicit
@@ -2376,3 +2399,40 @@ release notes.
 - **发布后核验。** 来源证明类型 `https://slsa.dev/provenance/v1`，`gitCommit` 为发布提交，工作流引用 `refs/tags/v0.9.13`，invocation 为 `40911590022`；tarball SHA1 `ca2c754e3421cddd14a795c5b4d869c5ea4b3cf9`、SHA512 与注册表一致，69 个条目、解包 131,263,175 字节。全新隔离 `DSH_HOME`（`/tmp/dsh-verify-0913`，pnpm 从 npm 安装，不是 link）在真实 `0.2.2-alpha.2` 宿主上启动，`https://127.0.0.1:3098/phone/health` 返回 200，`serverVersion` 为 `0.9.13`、`dataPlane: true`；GitHub Release 在这一步通过后才公开并标记 Latest。
 - **流程变更。** 用户决定保留暂存流程；批准步骤与「工作流末尾核对在批准前必然失败」已写入 `docs/NPM_PUBLISHING.md` 与 `AGENTS.md` 发布第 4–5 步。工作流本身未改：末尾核对在 staged 版本上仍会标红，是否改成「检测到 staged 即视为成功并输出待批准」留待下次发布前决定。
 - **局限。** 未做真机、Funnel 端到端、真实 `updateBundle`/HMR 回滚安装，也没有在 `0.2.1-rc.4` 上做真实业务回合；上述健康检查只证明插件能被宿主组合、启动并应答。
+
+## 2026-11-07 — 插件自更新真实宿主验证：HMR 在线替换失败，禁用 HMR 后成功
+
+**环境。** `dsh 0.2.2-rc.1` / Node `24.22.1` / pnpm `12.8.1`；两套独立 `DSH_HOME`（`/tmp/dsh-plugin-update-verify/` 与工作区 `.verify-plugin-update/`，web 端口 3397/3497、插件 LAN TLS 3197/3297）；`dsh-deeppilot@0.9.15` 以 registry 精确 spec 安装，目标 `0.9.16`。真实 WSS 鉴权（P-256 挑战/证明）驱动 wire 帧，非内存假件。
+
+**结论：能力位与查询链路通，HMR 在线替换不通。**
+
+| 项目 | 实测 |
+|---|---|
+| `welcome.capabilities.pluginUpdate` | `true`（rc.1 上首次实测，此前只在 alpha.2 记过） |
+| `c2s.plugin.update.check` | `currentVersion 0.9.15`、`latestVersion 0.9.16`、`updateAvailable true`、`compatible true`、`protocolCompatible true`；宿主 `listVersions('dsh-deeppilot')` 真机返回 `listed`，补上 `.feature-scout/FEATURES.md:145` 的未验证项 |
+| `c2s.plugin.update.apply`（HMR 开启） | pnpm 成功装 0.9.16，宿主 `installBundle` 返回 `application:'failed', stage:'enable'`，触发 `restore` 装回 0.9.15；`restore` 报同一错误。两次独立复现（不同 `DSH_HOME`、不同卷、不同请求编号） |
+| `c2s.plugin.update.apply`（禁用 HMR） | progress → `restart-required`；profile 与磁盘变 0.9.16；重启后 health `serverVersion 0.9.16`、journal `done`（「重启后已运行目标版本，更新完成」）、`check` 返回 `currentVersion 0.9.16 / updateAvailable false`。**完整闭环成功** |
+
+**根因（宿主 `updateBundle` 完整返回，见 `.verify-plugin-update/diag-updatebundle.json`）。**
+
+```
+result.error / restore.error:
+  code: operation-error
+  diagnostic: dsh: warning: 1 entry did not activate
+    deeppilot-directory-picker-browse (@deepseek-ai/dsh-host-directory-picker-browse):
+    Error: service "directoryPicker" has been registered at <NativeDirectoryPicker>
+```
+
+`dsh-web-app` 的 `directory-picker` 行是 `-auto`，启动时按宿主打境用 `ctx.loader.create()` 把 native 或 browse 后端挂进内存根树，disposer 异步卸载。我方 bundle 用 `disabled: true` 禁用它、再 `insert` 一个不同 id 的 `-browse` 行。`updateBundle` 有 HMR 时走 `removeBundle → installBundle`：bundle 层被移除 → `-auto` 复活并挂 `NativeDirectoryPicker` → 重新加入 bundle 时 `-browse` 注册 `directoryPicker` 撞名 → 宿主按「1 entry did not activate」把整次包操作判失败并回滚。官方 `-auto` README:40 已写明「同时挂载选择器和某个后端行会明确报错（重复的 `directoryPicker` 服务）」。CLI 覆盖安装 + 重启是全新组合、无残留，0.9.16 能正常激活，故不是包或网络问题。
+
+**排除的错误修法（实测）。**
+
+- 「在 patch 里覆盖 `name` 为 `-browse`」不可行：`name` 是断言不是重命名（`dsh-app-boot/lib/index.js:546`），报 `name mismatch ... skipping`。
+- 「删掉 picker 替换，让 `-auto` 自选」不可取：macOS 本地宿主判定 native，`c2s.directory.list` 实测返回 `E_UNSUPPORTED: directory picker unavailable`，手机端目录浏览失效。
+- **验证方法约束**：`updateBundle` 的 pnpm install 会从 store 重新 clone 包，手改 `node_modules/dsh-deeppilot/cordis.patch.yml` 会被还原；改 bundle patch 必须发新包才能验证。运行时代码（已加载进内存）不受此影响，故 `src/plugin-update.ts` 的修复可在隔离副本产物上真机验证。
+
+**本轮代码修复（B）。** `src/plugin-update.ts` 的 `restore` 分支改为以 `listBundles()` 实际安装版本为权威，`restore.application` 降为辅助判据；`tests/plugin-update.test.ts` 同步期望并新增「实际版本未回到旧版仍判 `failed`」。单测 21 通过 / 0 失败，全量 766 通过 / 0 失败，`typecheck` 通过。真机验证：同一宿主 journal 终态由 `failed` 变为 `rolled-back`（「目标安装失败，宿主已自动恢复旧版本」）。
+
+**上游渠道。** `deepseek-ai/deepseek-harness` 的 `hasIssuesEnabled=false`、`hasDiscussionsEnabled=true`；README:45 指定 bug report 走 GitHub Discussions。已按用户确认的措辞发布 [discussion #12510](https://github.com/deepseek-ai/deepseek-harness/discussions/12510)（`q-a`/`Q&A` 分类，2026-11-07，作者 `Mars-Sea`）；英文正文与中文核对说明留在 [UPSTREAM_DISCUSSION-plugin-update-hmr.md](UPSTREAM_DISCUSSION-plugin-update-hmr.md)，脱敏后的提交正文在 `.verify-plugin-update/discussion-body.md`。线上标题、分类与正文长度已复核。等待上游答复，不承诺修复时限。
+
+**遗留。** ① 仓库 `lib/` 未重建（按用户选择只在隔离副本构建），发布前需 `npm run build` 并提交 `lib/`；② 启用 HMR 的 profile 上手机端一键更新仍会失败，需上游修复 `updateBundle` 原子性，或用户在该 profile 的 `cordis.patch.yml` 禁用 `hmr` 行（代价：配置改动不再热重载、更新后需重启）；③ 真机、Funnel、无 HMR 路径在官方默认 profile 上的验收仍缺；④ `docs/技能提示对接说明.md`、`docs/移动端命令对接说明.md` 的 `dsh-plugin-manager` 清单仍是 0.2.1 口径，未重盘。

package/docs/NPM_PUBLISHING.md

@@ -34,12 +34,10 @@
    npm 不在保存配置时验证绑定；首次发布成功才证明认证可用。
 4. 新绑定必须在 **2 天内完成首次成功发布**。因此准备好新版本后再绑定；若过期，
    删除过期绑定并重新创建。先验证可信发布成功，再按需调整原有令牌发布权限。
-5. **2026-10-29 实测：当前绑定只允许暂存发布。** `publish.yml` 里的 `npm publish`
-   不再直接公开版本，而是把它送进 staged 区（命令返回成功并提示“正在处理”，
-   但注册表的版本、tarball 与来源证明持续 404）。用户决定**保留暂存流程**：
-   每次发版由工作流暂存，维护者用 2FA 批准后才公开（步骤见第三节）。
-   若要恢复直接发布，需在包设置的 Trusted Publisher 中勾选 `Allow npm publish`
-   （账户强制 2FA 时可能不可用），并同步改本节、AGENTS.md 与第 4 步的核对逻辑。
+5. **当前绑定允许直接发布（2026-11-05 起）。** 2026-10-29 实测绑定只允许暂存发布：
+   `npm publish` 把版本送进 staged 区，需维护者 2FA 批准后才公开（见第四节第 11 条）。
+   2026-11-05 用户在 Trusted Publisher 中勾选 `Allow npm publish`，改为工作流直接公开，
+   不再需要批准；首次直接发布的结果在下一次发版时核实并记入第四节。
 
 ## 三、每次发布
 
@@ -47,7 +45,7 @@
    `package-lock.json` 顶层与根包条目的版本；提交并推送，等待持续集成（CI）通过。
    版本提交必须已经进入 `main`，且该提交包含 `publish.yml`。
 2. 经用户授权发布该版本后，从精确的发布提交创建并推送附注标签 `v<版本>`，
-   准备包含英文与简体中文说明的 GitHub 发布草稿。
+   按 `AGENTS.md` 发布流程第 3 步的格式（中文在前、英文在后、短标题、不硬换行）准备 GitHub 发布草稿。
 3. 在对应标签上手动运行工作流。下例的 `0.9.5` 仅为示例，替换为已授权发布的版本：
 
    ```sh
@@ -69,13 +67,11 @@
    压缩包发布跳过生命周期脚本（`--ignore-scripts`）；测试、类型检查和构建已在前序
    步骤执行，打包仍执行 `prepack`（打包前构建）。发布后核对版本、分发标签、
    压缩包完整性和来源证明元数据。
-6. **批准暂存版本（暂存模式下必需）。** 工作流把版本送进 staged 区后，由维护者完成
-   2FA 批准：在 npmjs.com 的 **Staged Packages** 标签找到
-   `dsh-deeppilot@<版本>` → Approve；或本机 `npm login` 后
-   `npm stage list dsh-deeppilot` → `npm stage approve <id>`。
-   批准即公开该版本，并按发布命令写入分发标签（`latest` / `alpha`）。
-   工作流末尾「核对发布版本、包完整性与来源证明」在批准前必然 404 失败、整次运行标红；
-   这是暂存模式的预期结果，不代表上传失败，发布证据以批准后的手工核验为准。
+6. 发布步骤直接公开版本并写入分发标签（`latest` / `alpha`），末尾核对随即通过。
+   若核对持续 404、发布步骤提示进入 staged 区，说明绑定退回暂存模式：维护者在
+   npmjs.com 的 **Staged Packages** 标签用 2FA 批准 `dsh-deeppilot@<版本>`（或本机
+   `npm login` 后 `npm stage list dsh-deeppilot` → `npm stage approve <id>`），
+   同一版本不能重跑工作流（`E409 Cannot publish over previously staged version`）。
 7. 确认 npm 包可安装，在全新 DSH 配置中完成安装验证后，再公开 GitHub 发布草稿。
    工作流不自动公开发布草稿；npm 上传和发布后的核对分别记录在步骤中。
 
@@ -203,6 +199,27 @@
     `/phone/health` 返回 200，`serverVersion` 为 `0.9.14`、`protocolVersion` 2、
     `dataPlane: true`；GitHub Release 在这一步通过后才公开并标记 Latest。
 
+13. `0.9.15` 的实际发布结果（2026-11-05）：发布提交 `688dabc` 直接推到 `main`，
+    CI（运行号 `42036820848`）与 CodeQL（`42036820840`）均绿；附注标签 `v0.9.15` 指向
+    `688dabcc1b8c5f73664633750c47cb90fad1caac`。`publish.yml` 运行 `42037502337`
+    （`latest`）**整次为绿**：本次仍进入 staged 区，维护者在末尾核对的重试窗口内批准，
+    并同时勾选 `Allow npm publish`，下次发版起直接公开。注册表 `latest = 0.9.15`；
+    来源证明类型为 `https://slsa.dev/provenance/v1`、`gitCommit` 为该提交、工作流引用
+    `refs/tags/v0.9.15`、invocation 为 `42037502337`；69 个条目、解包 131,613,948 字节，
+    与本地 `npm pack --dry-run` 一致。随后在全新隔离 `DSH_HOME` 中从 npm 安装
+    `dsh-deeppilot@0.9.15`，用真实 `0.2.2-rc.1` 宿主启动：插件自有端口 `/phone/health`
+    返回 200，`serverVersion` 为 `0.9.15`、`protocolVersion` 2、`dataPlane: true`，
+    日志显示按需完成通知工具已注册；GitHub Release 在这一步通过后才公开并标记 Latest。
+
+14. `0.9.16` 的实际发布结果（2026-11-06）：PR #43 压缩合并为 `1515b7b`，`main` 上 CI（`42170870772`）、
+    CodeQL（`42170870769`）、helper 构建（`42170870802`）均绿；附注标签 `v0.9.16` 指向
+    `1515b7b7059be850e6abf15071b1a5075e5bfd27`。`publish.yml` 运行 `42171736739`（`latest`）整次为绿，
+    **首次直接公开**，未进入 staged 区。注册表 `latest = 0.9.16`，来源证明类型为
+    `https://slsa.dev/provenance/v1`；69 个条目、解包 131,743,027 字节。随后在全新隔离 `DSH_HOME` 中从 npm
+    安装 `dsh-deeppilot@0.9.16`，用真实 `0.2.2-rc.1` 宿主启动：`/phone/health` 返回 200，`serverVersion`
+    为 `0.9.16`、`protocolVersion` 2、`dataPlane: true`，补丁未写 `local.enabled` 时局域网监听照常上线；
+    GitHub Release 在这一步通过后才公开并标记 Latest。
+
 ## 五、官方资料
 
 1. [npm 可信发布配置与限制](https://docs.npmjs.com/trusted-publishers/)

package/lib/client.js

@@ -572,6 +572,7 @@ window.__ModuleLoader__.load({
 				"system.title": "运行信息",
 				"system.description": "插件、协议与连接端点的技术信息。",
 				"local.title": "局域网连接",
+				"local.autoRoute": "局域网连接始终开启：手机和电脑在同一 Wi-Fi 下会自动走局域网，在外面自动改走公网。",
 				"local.on": "已开启：手机可通过独立端口 {port} 以 TLS 加密连接。",
 				"local.off": "已关闭：不接受局域网连接。",
 				"local.tlsFingerprint": "证书指纹",
@@ -747,7 +748,6 @@ window.__ModuleLoader__.load({
 				"diag.settingsUnavailable": "设置表单不可用（configForms 未提供）",
 				"diag.missingReportHook": "useDeepPilotReport hook 缺失",
 				"diag.missingEnabledHook": "useDeepPilotEnabled hook 缺失",
-				"diag.missingLocalEnabledHook": "useDeepPilotLocalEnabled hook 缺失",
 				"diag.missingLocalPortHook": "useDeepPilotLocalPort hook 缺失",
 				"diag.missingRemoteEnabledHook": "useDeepPilotRemoteEnabled hook 缺失",
 				"diag.missingRemoteLimitHook": "useDeepPilotRemoteConnectionLimit hook 缺失",
@@ -759,7 +759,6 @@ window.__ModuleLoader__.load({
 				"diag.missingTestRelay": "testRelay 回调缺失",
 				"diag.missingTestPush": "testPush 回调缺失",
 				"diag.missingSetEnabled": "setDeepPilotEnabled 回调缺失",
-				"diag.missingSetLocal": "setDeepPilotLocalEnabled 回调缺失",
 				"diag.missingSetLocalPort": "setDeepPilotLocalPort 回调缺失",
 				"diag.missingSetRemote": "setDeepPilotRemoteEnabled 回调缺失",
 				"diag.missingSetRemoteLimit": "setDeepPilotRemoteConnectionLimit 回调缺失",
@@ -853,6 +852,7 @@ window.__ModuleLoader__.load({
 				"system.title": "Runtime information",
 				"system.description": "Technical details about the plugin, protocol, and endpoints.",
 				"local.title": "LAN connection",
+				"local.autoRoute": "LAN connections are always on: on the same Wi-Fi the phone connects over the LAN automatically, and switches to the public route when away.",
 				"local.on": "On: phones connect over TLS through the independent port {port}.",
 				"local.off": "Off: LAN connections are not accepted.",
 				"local.tlsFingerprint": "Certificate fingerprint",
@@ -1028,7 +1028,6 @@ window.__ModuleLoader__.load({
 				"diag.settingsUnavailable": "Settings form unavailable (configForms not provided)",
 				"diag.missingReportHook": "useDeepPilotReport hook missing",
 				"diag.missingEnabledHook": "useDeepPilotEnabled hook missing",
-				"diag.missingLocalEnabledHook": "useDeepPilotLocalEnabled hook missing",
 				"diag.missingLocalPortHook": "useDeepPilotLocalPort hook missing",
 				"diag.missingRemoteEnabledHook": "useDeepPilotRemoteEnabled hook missing",
 				"diag.missingRemoteLimitHook": "useDeepPilotRemoteConnectionLimit hook missing",
@@ -1040,7 +1039,6 @@ window.__ModuleLoader__.load({
 				"diag.missingTestRelay": "testRelay callback missing",
 				"diag.missingTestPush": "testPush callback missing",
 				"diag.missingSetEnabled": "setDeepPilotEnabled callback missing",
-				"diag.missingSetLocal": "setDeepPilotLocalEnabled callback missing",
 				"diag.missingSetLocalPort": "setDeepPilotLocalPort callback missing",
 				"diag.missingSetRemote": "setDeepPilotRemoteEnabled callback missing",
 				"diag.missingSetRemoteLimit": "setDeepPilotRemoteConnectionLimit callback missing",
@@ -3917,10 +3915,6 @@ window.__ModuleLoader__.load({
 			status: "unavailable",
 			enabled: true
 		});
-		const MISSING_LOCAL_ENABLED_HOOK = () => ({
-			status: "unavailable",
-			enabled: true
-		});
 		const MISSING_LOCAL_PORT_HOOK = () => ({
 			status: "unavailable",
 			value: DEFAULT_LOCAL_PORT
@@ -3941,7 +3935,6 @@ window.__ModuleLoader__.load({
 		const DIAG_KEY = {
 			reportHook: "diag.missingReportHook",
 			enabledHook: "diag.missingEnabledHook",
-			localEnabledHook: "diag.missingLocalEnabledHook",
 			localPortHook: "diag.missingLocalPortHook",
 			remoteEnabledHook: "diag.missingRemoteEnabledHook",
 			remoteLimitHook: "diag.missingRemoteLimitHook",
@@ -3953,7 +3946,6 @@ window.__ModuleLoader__.load({
 			testRelay: "diag.missingTestRelay",
 			testPush: "diag.missingTestPush",
 			setEnabled: "diag.missingSetEnabled",
-			setLocal: "diag.missingSetLocal",
 			setLocalPort: "diag.missingSetLocalPort",
 			setRemote: "diag.missingSetRemote",
 			setRemoteLimit: "diag.missingSetRemoteLimit",
@@ -3968,7 +3960,6 @@ window.__ModuleLoader__.load({
 			["testRelay", "testRelay"],
 			["testPush", "testPush"],
 			["setEnabled", "setDeepPilotEnabled"],
-			["setLocalEnabled", "setDeepPilotLocalEnabled"],
 			["setLocalPort", "setDeepPilotLocalPort"],
 			["setRemoteEnabled", "setDeepPilotRemoteEnabled"],
 			["setRemoteLimit", "setDeepPilotRemoteConnectionLimit"],
@@ -3989,7 +3980,6 @@ window.__ModuleLoader__.load({
 			const can = /* @__PURE__ */ new Set();
 			const useReport = isFn(source.useDeepPilotReport) ? source.useDeepPilotReport : MISSING_REPORT_HOOK;
 			const useEnabled = isFn(source.useDeepPilotEnabled) ? source.useDeepPilotEnabled : MISSING_ENABLED_HOOK;
-			const useLocalEnabled = isFn(source.useDeepPilotLocalEnabled) ? source.useDeepPilotLocalEnabled : MISSING_LOCAL_ENABLED_HOOK;
 			const useLocalPort = isFn(source.useDeepPilotLocalPort) ? source.useDeepPilotLocalPort : MISSING_LOCAL_PORT_HOOK;
 			const useRemoteEnabled = isFn(source.useDeepPilotRemoteEnabled) ? source.useDeepPilotRemoteEnabled : MISSING_REMOTE_ENABLED_HOOK;
 			const useRemoteLimit = isFn(source.useDeepPilotRemoteConnectionLimit) ? source.useDeepPilotRemoteConnectionLimit : MISSING_REMOTE_LIMIT_HOOK;
@@ -4003,9 +3993,7 @@ window.__ModuleLoader__.load({
 			if (!isFn(source.testRelay)) diagnostics.push(t(DIAG_KEY.testRelay));
 			if (!isFn(source.testPush)) diagnostics.push(t(DIAG_KEY.testPush));
 			if (!isFn(source.setDeepPilotEnabled)) diagnostics.push(t(DIAG_KEY.setEnabled));
-			if (!isFn(source.useDeepPilotLocalEnabled)) diagnostics.push(t(DIAG_KEY.localEnabledHook));
 			if (!isFn(source.useDeepPilotLocalPort)) diagnostics.push(t(DIAG_KEY.localPortHook));
-			if (!isFn(source.setDeepPilotLocalEnabled)) diagnostics.push(t(DIAG_KEY.setLocal));
 			if (!isFn(source.setDeepPilotLocalPort)) diagnostics.push(t(DIAG_KEY.setLocalPort));
 			if (!isFn(source.useDeepPilotRemoteEnabled)) diagnostics.push(t(DIAG_KEY.remoteEnabledHook));
 			if (!isFn(source.setDeepPilotRemoteEnabled)) diagnostics.push(t(DIAG_KEY.setRemote));
@@ -4018,7 +4006,6 @@ window.__ModuleLoader__.load({
 				props: {
 					useDeepPilotReport: useReport,
 					useDeepPilotEnabled: useEnabled,
-					useDeepPilotLocalEnabled: useLocalEnabled,
 					useDeepPilotLocalPort: useLocalPort,
 					useDeepPilotRemoteEnabled: useRemoteEnabled,
 					useDeepPilotRemoteConnectionLimit: useRemoteLimit,
@@ -4031,7 +4018,6 @@ window.__ModuleLoader__.load({
 					testRelay: isFn(source.testRelay) ? source.testRelay : void 0,
 					testPush: isFn(source.testPush) ? source.testPush : void 0,
 					setDeepPilotEnabled: isFn(source.setDeepPilotEnabled) ? source.setDeepPilotEnabled : void 0,
-					setDeepPilotLocalEnabled: isFn(source.setDeepPilotLocalEnabled) ? source.setDeepPilotLocalEnabled : void 0,
 					setDeepPilotLocalPort: isFn(source.setDeepPilotLocalPort) ? source.setDeepPilotLocalPort : void 0,
 					setDeepPilotRemoteEnabled: isFn(source.setDeepPilotRemoteEnabled) ? source.setDeepPilotRemoteEnabled : void 0,
 					setDeepPilotRemoteConnectionLimit: isFn(source.setDeepPilotRemoteConnectionLimit) ? source.setDeepPilotRemoteConnectionLimit : void 0,
@@ -4388,9 +4374,6 @@ window.__ModuleLoader__.load({
 				hooks.enabled = enabledState.enabled;
 				hooks.switchReady = enabledState.status === "ready";
 				if (enabledState.status === "unavailable") diag.push(translateWith(props.t, "diag.settingsUnavailable"));
-				const localEnabledState = props.useDeepPilotLocalEnabled((s) => s);
-				hooks.localEnabled = localEnabledState.enabled;
-				hooks.localSwitchReady = localEnabledState.status === "ready";
 				const localPortState = props.useDeepPilotLocalPort((s) => s);
 				hooks.localPort = localPortState.value;
 				hooks.localPortReady = localPortState.status === "ready";
@@ -4408,8 +4391,6 @@ window.__ModuleLoader__.load({
 				report: null,
 				enabled: true,
 				switchReady: false,
-				localEnabled: true,
-				localSwitchReady: false,
 				localPort: DEFAULT_LOCAL_PORT,
 				localPortReady: false,
 				remoteEnabled: false,
@@ -4428,8 +4409,6 @@ window.__ModuleLoader__.load({
 			const report = hooks.report;
 			const enabled = hooks.enabled;
 			const switchReady = hooks.switchReady;
-			const localEnabled = hooks.localEnabled;
-			const localSwitchReady = hooks.localSwitchReady;
 			const localPort = hooks.localPort;
 			const localPortReady = hooks.localPortReady;
 			const remoteEnabled = hooks.remoteEnabled;
@@ -4864,14 +4843,7 @@ window.__ModuleLoader__.load({
 				onChange: (next) => {
 					if (can("setEnabled")) props.setDeepPilotEnabled(next);
 				}
-			})), (0, react.createElement)("div", { className: "pbb-channel" }, (0, react.createElement)("div", { className: "pbb-row pbb-channelRow" }, settingsIcon("wifi"), (0, react.createElement)("div", { className: "pbb-controlText" }, (0, react.createElement)("span", { className: "pbb-controlTitle" }, translateWith(props.t, "local.title")), (0, react.createElement)("div", { className: "pbb-channelState" }, (0, react.createElement)("span", { className: localMeta?.label === "online" ? "pbb-ok" : localMeta?.label === "error" ? "pbb-bad" : void 0 }, localStateText))), (0, react.createElement)(_deepseek_ai_dsh_client_ui_primitives.Switch, {
-				checked: localEnabled,
-				label: translateWith(props.t, "local.title"),
-				disabled: !localSwitchReady,
-				onChange: (next) => {
-					if (can("setLocalEnabled")) props.setDeepPilotLocalEnabled(next);
-				}
-			}), (0, react.createElement)("button", {
+			})), (0, react.createElement)("div", { className: "pbb-channel" }, (0, react.createElement)("div", { className: "pbb-row pbb-channelRow" }, settingsIcon("wifi"), (0, react.createElement)("div", { className: "pbb-controlText" }, (0, react.createElement)("span", { className: "pbb-controlTitle" }, translateWith(props.t, "local.title")), (0, react.createElement)("div", { className: "pbb-channelState" }, (0, react.createElement)("span", { className: localMeta?.label === "online" ? "pbb-ok" : localMeta?.label === "error" ? "pbb-bad" : void 0 }, localStateText))), (0, react.createElement)("button", {
 				type: "button",
 				className: "pbb-iconButton pbb-expand",
 				"aria-label": translateWith(props.t, "local.options"),
@@ -4884,7 +4856,7 @@ window.__ModuleLoader__.load({
 			}, translateWith(props.t, "local.errorDetails", { message: report.local.message })) : null, report !== null && report.local.tlsIdentityRegenerated === true ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "local.tlsRegenerated")) : null, fold(localOptionsOpen, (0, react.createElement)("div", {
 				className: "pbb-channelBody",
 				id: localOptionsId
-			}, report !== null && report.local.phase === "online" ? (0, react.createElement)("p", { className: "pbb-diag pbb-endpoint" }, report.local.endpoints.join(" · ")) : null, (0, react.createElement)("div", { className: "pbb-limitRow" }, (0, react.createElement)("div", { className: "pbb-controlText" }, (0, react.createElement)("label", {
+			}, (0, react.createElement)("p", { className: "pbb-controlDescription" }, translateWith(props.t, "local.autoRoute")), report !== null && report.local.phase === "online" ? (0, react.createElement)("p", { className: "pbb-diag pbb-endpoint" }, report.local.endpoints.join(" · ")) : null, (0, react.createElement)("div", { className: "pbb-limitRow" }, (0, react.createElement)("div", { className: "pbb-controlText" }, (0, react.createElement)("label", {
 				className: "pbb-controlTitle",
 				htmlFor: "deeppilot-local-port"
 			}, translateWith(props.t, "local.portTitle")), (0, react.createElement)("span", { className: "pbb-controlDescription" }, translateWith(props.t, "local.portDescription")), !localPortView.valid ? (0, react.createElement)("p", { className: "pbb-diag pbb-diagBad" }, translateWith(props.t, "local.portInvalid")) : localPortDraft.message ? (0, react.createElement)("p", { className: "pbb-diag" + (localPortDraft.failed ? " pbb-diagBad" : "") }, localPortDraft.message) : null), (0, react.createElement)("div", { className: "pbb-limitControl" }, (0, react.createElement)("input", {
@@ -5309,19 +5281,10 @@ window.__ModuleLoader__.load({
 				if (snap?.status === "ready" && snap.value !== void 0) return snap.value.enabled !== false;
 				return enabledStore.getSnapshot().enabled;
 			};
-			const localEnabledStore = createSnapshotStore({
-				status: "loading",
-				enabled: true
-			});
 			const localPortStore = createSnapshotStore({
 				status: "loading",
 				value: DEFAULT_LOCAL_PORT
 			});
-			const lastConfirmedLocalEnabled = () => {
-				const snap = scope?.getSnapshot();
-				if (snap?.status === "ready") return snap.value?.local?.enabled !== false;
-				return localEnabledStore.getSnapshot().enabled;
-			};
 			const lastConfirmedLocalPort = () => {
 				const snap = scope?.getSnapshot();
 				if (snap?.status === "ready") return normalizeLocalPort(snap.value?.local?.port);
@@ -5356,46 +5319,16 @@ window.__ModuleLoader__.load({
 			const adoptLocal = () => {
 				if (scope === void 0) return;
 				const snap = scope.getSnapshot();
-				if (snap.status === "ready") {
-					localEnabledStore.set({
-						status: "ready",
-						enabled: snap.value?.local?.enabled !== false
-					});
-					localPortStore.set({
-						status: "ready",
-						value: normalizeLocalPort(snap.value?.local?.port)
-					});
-				} else if (snap.status === "unavailable") {
-					localEnabledStore.set({
-						status: "unavailable",
-						enabled: true
-					});
-					localPortStore.set({
-						status: "unavailable",
-						value: DEFAULT_LOCAL_PORT
-					});
-				}
-			};
-			scopeAdoptions.push(adoptLocal);
-			const setDeepPilotLocalEnabled = (value) => {
-				const previous = lastConfirmedLocalEnabled();
-				localEnabledStore.set({
+				if (snap.status === "ready") localPortStore.set({
 					status: "ready",
-					enabled: value
+					value: normalizeLocalPort(snap.value?.local?.port)
 				});
-				if (scope === void 0) return;
-				const currentLocal = scope.getSnapshot().value?.local ?? {};
-				scope.set("local", {
-					...currentLocal,
-					enabled: value
-				}).then(() => {}, (error) => {
-					localEnabledStore.set({
-						status: "ready",
-						enabled: previous
-					});
-					console.error("[deeppilot] failed to persist local.enabled=" + String(value) + ": " + (error instanceof Error ? error.message : String(error)));
+				else if (snap.status === "unavailable") localPortStore.set({
+					status: "unavailable",
+					value: DEFAULT_LOCAL_PORT
 				});
 			};
+			scopeAdoptions.push(adoptLocal);
 			const setDeepPilotLocalPort = async (value) => {
 				const next = normalizeLocalPort(value);
 				if (next !== value) throw new RangeError("local port must be an integer between 1024 and 65535");
@@ -5570,7 +5503,6 @@ window.__ModuleLoader__.load({
 					hooks: {
 						deepPilotReport: store,
 						deepPilotEnabled: enabledStore,
-						deepPilotLocalEnabled: localEnabledStore,
 						deepPilotLocalPort: localPortStore,
 						deepPilotRemoteEnabled: remoteEnabledStore,
 						deepPilotRemoteConnectionLimit: remoteConnectionLimitStore,
@@ -5585,7 +5517,6 @@ window.__ModuleLoader__.load({
 					testRelay: testRelayConnection,
 					testPush: sendTestPush,
 					setDeepPilotEnabled,
-					setDeepPilotLocalEnabled,
 					setDeepPilotLocalPort,
 					setDeepPilotRemoteEnabled,
 					setDeepPilotRemoteConnectionLimit,