dsh-mobile 0.6.11 → 0.6.12

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Notable changes are recorded here. GitHub Releases provide the downloadable packages and generated commit notes.
 
+## 0.6.12 - 2026-10-18
+
+- Send explicit non-navigation Fetch Metadata during the Gateway's internal DSH cookie exchange. This avoids the HTML navigation bounce produced by community authentication plugins without accepting arbitrary HTTP 200 pages, following redirects, or forwarding the upstream Cookie to the phone. Thanks @jamorzzz for [#230](https://github.com/saya-ch/dsh-mobile/issues/230).
+- Separate invalid pairing/renewal/probe attempts from valid credentials behind a shared proxy. Invalid requests retain direct-peer limits; valid pairing secrets receive bounded admission, while renewal and probe budgets belong to the authenticated device. Keep operations accounted for until they settle even when the caller disconnects, and recheck credentials inside serialized writes. Forwarded IP headers remain untrusted. Thanks @Akiyuki1130 for [#231](https://github.com/saya-ch/dsh-mobile/issues/231).
+- Extend the pre-boot compatibility script with identified missing array, string, object and structured-clone APIs. Add Chinese, English and Italian startup-failure feedback with explicit reload/wait actions when DSH has not rendered; mounted DSH and its own loader are not replaced, and no automatic reload is added.
+- Identify unsupported class static-block syntax in DSH 0.2.1-rc.2's published frontend: Chromium 92 cannot parse that bundle. API shims and the existing old-engine advisory do not establish support for that engine. The feedback script itself targets Chromium 92; it does not transpile DSH. Thanks @yunyunlyk for the detailed engine and entry-mode comparison in [#232](https://github.com/saya-ch/dsh-mobile/issues/232).
+- Add DSH 0.2.1-rc.2 to the packed-browser CI matrix and distinguish plugin-update SSE from conversation transport in troubleshooting. Android App 0.6.5 (build 81) remains independently published; no native change or new APK is part of this release.
+
 ## 0.6.11 - 2026-10-17
 
 - Stabilize earlier-history loading by requiring fresh touch or wheel input before an automatic load near the top. DSH's own scroll-position compensation cannot re-arm loading; switching sessions or scroll containers withdraws the previous input. Track only touch contacts started on the owned scroller so another finger elsewhere cannot keep an old loading intent active.

package/CONTRIBUTORS.md

@@ -1,8 +1,14 @@
 # 贡献者 / Contributors
 
-GitHub 的 [Contributors 图表](https://github.com/saya-ch/dsh-mobile/graphs/contributors) 按进入默认分支的提交自动统计，无法手动加入仅提交 issue 或 PR 提案的成员。本页按截至 2026-10-17 的实际参与方式感谢社区成员；仓库维护者与自动依赖更新仍可在 GitHub 历史记录中查看。
+GitHub 的 [Contributors 图表](https://github.com/saya-ch/dsh-mobile/graphs/contributors) 按进入默认分支的提交自动统计，无法手动加入仅提交 issue 或 PR 提案的成员。本页按截至 2026-10-18 的实际参与方式感谢社区成员；仓库维护者与自动依赖更新仍可在 GitHub 历史记录中查看。
 
-GitHub's Contributors graph counts commits on the default branch; issue reports and PR proposals cannot be manually added to it. This page credits community members by how they contributed, through 2026-10-17. The repository maintainer and automated dependency updates remain visible in GitHub's history.
+GitHub's Contributors graph counts commits on the default branch; issue reports and PR proposals cannot be manually added to it. This page credits community members by how they contributed, through 2026-10-18. The repository maintainer and automated dependency updates remain visible in GitHub's history.
+
+## 0.6.12 问题定位 / Issue findings for 0.6.12
+
+感谢 [@jamorzzz](https://github.com/jamorzzz) 在 [#230](https://github.com/saya-ch/dsh-mobile/issues/230) 提供社区认证插件的导航响应与网关握手分析，[@Akiyuki1130](https://github.com/Akiyuki1130) 在 [#231](https://github.com/saya-ch/dsh-mobile/issues/231) 复现共享代理下的匿名限流耗尽，以及 [@yunyunlyk](https://github.com/yunyunlyk) 在 [#232](https://github.com/saya-ch/dsh-mobile/issues/232) 提供具体华为内核版本与 App／浏览器对照。这些报告分别促成认证握手、凭据限流和旧内核启动反馈改进；未将报告者真机写成已完成修复验收。
+
+Thanks [@jamorzzz](https://github.com/jamorzzz) for the community-auth navigation and Gateway exchange analysis in [#230](https://github.com/saya-ch/dsh-mobile/issues/230), [@Akiyuki1130](https://github.com/Akiyuki1130) for reproducing anonymous rate-limit exhaustion behind a shared proxy in [#231](https://github.com/saya-ch/dsh-mobile/issues/231), and [@yunyunlyk](https://github.com/yunyunlyk) for the exact Huawei engine version and App/browser comparison in [#232](https://github.com/saya-ch/dsh-mobile/issues/232). These reports informed authentication, credential-admission and old-engine startup feedback improvements; they are not recorded as completed acceptance on the reporters' devices.
 
 ## 0.6.11 代码贡献 / Code contributions in 0.6.11
 

package/README.en.md

@@ -26,13 +26,13 @@
   <a href="#compatibility">Compatibility</a> ·
   <a href="docs/README.md">Documentation</a> ·
   <a href="#contributors">Contributors</a> ·
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.6.11">Release notes</a> ·
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.6.12">Release notes</a> ·
   <a href="README.md">简体中文</a>
 </p>
 
 > DSH Mobile is a DeepSeek Harness community plugin; the native app supports Android only.
 >
-> **Current stable release: 0.6.11**. Improve scroll stability while loading history, retain a manual loading action, and add sanitized HTTP authentication-rejection diagnostics. Android app **0.6.5** independently improves connection cancellation, timeouts and loading presentation. [Release notes and downloads](https://github.com/saya-ch/dsh-mobile/releases/tag/v0.6.11) · [Full changelog](CHANGELOG.md).
+> **Current stable release: 0.6.12**. Fix page 502 errors with community authentication and pairing/renewal limits behind shared proxies; add missing old-engine APIs and actionable startup feedback. Android App **0.6.5** is unchanged and needs no matching update. [Release notes and downloads](https://github.com/saya-ch/dsh-mobile/releases/tag/v0.6.12) · [Full changelog](CHANGELOG.md).
 >
 > **Version policy**: since plugin **0.6.2**, the Android app and plugin use independent version numbers and releases. Their numbers do not need to match, and a plugin update does not imply an app update. [Compatibility notes](#compatibility).
 
@@ -336,9 +336,11 @@ Selection priority is device choice → computer defaults → plugin configurati
 
 The Android app is a thin Kotlin WebView shell and contains no frontend copy; mobile browsers load the same page. Developers can append `?frontend=stock` to an authenticated mobile URL to diagnose boot and layout behavior. This entry skips dedicated mobile boot rewriting and module selection, but installed client adaptation and authenticated customizations may still apply. It is not a plugin-free control; some API operations may be rejected, so it does not replace normal mobile access. See [skins and mobile layout](docs/SKIN_COMPATIBILITY.en.md).
 
-In 0.5.5, the dedicated mobile page synchronously loads the authenticated, same-origin `/mobile-access/compat.js` before the first DSH boot script. This bundled core-js compatibility layer supplies `Iterator` / Iterator helpers to WebViews that lack them, preventing the startup error `Iterator is not defined`. It uses feature detection to preserve or repair native helpers, needs no CDN, and does not weaken CSP. The desktop and `?frontend=stock` pages do not load this gateway script.
+The dedicated mobile page synchronously loads the authenticated, same-origin `/mobile-access/compat.js` before the first DSH boot script. This bundled compatibility layer supplies missing `Iterator` / Iterator helpers, `Promise.withResolvers` and `AbortSignal.any`. It uses feature detection to preserve or repair native implementations, needs no CDN, and does not weaken CSP. The desktop and `?frontend=stock` pages do not load this gateway script. On WebViews that support document-start injection, the Android App also supplies `Promise.withResolvers` early for the paired exact Origin.
 
-Version 0.6.0 adds feature-detected `Promise.withResolvers` and `AbortSignal.any` implementations to the same pre-boot script. On WebViews that support document-start injection, the Android app also supplies `Promise.withResolvers` early for the paired exact Origin. This covers identified missing APIs, not every old engine; the frontend still targets ES2022, and this version has not been verified on the reported physical Huawei WebView 114 device. If other compatibility errors remain and the device allows updates, update Android System WebView / Chrome first. If the system component cannot be updated, retain the full error, engine version, and entry mode for diagnosis.
+**Old-engine limits**: API shims cannot repair JavaScript syntax an engine cannot parse. The published **DSH 0.2.1-rc.2** frontend contains class static blocks, which Chromium **92** cannot parse. This syntax became enabled by default in Chrome 94, but that does not establish full DSH compatibility on 94. [V8 announcement](https://v8.dev/blog/v8-release-94). The App's below-100 advisory is not a compatibility guarantee; choosing Continue does not make the current DSH runnable. If system WebView cannot be updated, use a phone browser already confirmed to work with the computer's mobile address, without clearing existing App pairings.
+
+**Plugin 0.6.12** adds identified missing array, string, object and structured-clone APIs, plus startup-failure feedback with Reload page and Keep waiting actions when DSH has not rendered. It does not transpile DSH or reload automatically; acceptance on the physical Huawei Chromium 92 App remains unverified. Reports should include DSH/plugin/App and WebView versions, entry mode and the first redacted console error, never tokens or complete pairing URLs.
 
 > **Community client (unofficial)**: [WeChat Mini-Program client](https://github.com/StrawberryAO/dsh-mobile-minapp)
 > A native WeChat Mini-Program that reuses the Mobile Access pairing and Remote stream protocol (requires dsh-mobile ≥ 0.3.8).
@@ -405,6 +407,7 @@ On macOS, local network, cloudflared, self-hosted FRP and the own reverse proxy
 | DSH Mobile plugin | Verified DeepSeek Harness version |
 | --- | --- |
 | `0.6.11` | Isolated packed-browser CI on `0.1.7-alpha.2`, `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.1`, `0.2.0-rc.2`, `0.2.1-alpha.2` and `0.2.1-alpha.3`; additional real history-pagination, viewport-preservation and manual-loading checks on `0.2.0-rc.2` and `0.2.1-alpha.3`. Browser checks do not establish acceptance of every phone engine, third-party plugin or public route |
+| `0.6.12` | Packed installation, mobile boot, missing-API simulation, Workspace streaming, retained-page transport recovery and mobile settings on `0.2.1-rc.2`; authentication/resource regression with the actual community `dsh-web-startup-auth@0.1.12` on `0.2.0-rc.2`. This does not establish physical Chromium 92, arbitrary auth-plugin or public-route acceptance |
 
 <details>
 <summary>Historical version checks</summary>

package/README.md

@@ -26,13 +26,13 @@
   <a href="#兼容性">兼容性</a> ·
   <a href="docs/README.md">文档</a> ·
   <a href="#贡献者">贡献者</a> ·
-  <a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.6.11">更新记录</a> ·
+  <a href="https://github.com/saya-ch/dsh-mobile/releases/tag/v0.6.12">更新记录</a> ·
   <a href="README.en.md">English</a>
 </p>
 
 > DSH Mobile 是 DeepSeek Harness 社区插件，原生 App 仅支持 Android。
 >
-> **当前正式版本：0.6.11**。改善历史加载时的滚动稳定性，保留手动加载入口，并增加脱敏的 HTTP 认证拒绝诊断。Android App **0.6.5** 独立更新取消连接、超时与加载等待。[更新与下载](https://github.com/saya-ch/dsh-mobile/releases/tag/v0.6.11) · [完整更新记录](CHANGELOG.md)。
+> **当前正式版本：0.6.12**。修复社区认证插件下的页面 502、共享代理下的配对与续期限流问题，并补充旧内核 API 和启动失败提示。Android App **0.6.5** 保持不变，无需同步升级。[更新与下载](https://github.com/saya-ch/dsh-mobile/releases/tag/v0.6.12) · [完整更新记录](CHANGELOG.md)。
 >
 > **版本说明**：自插件 **0.6.2** 起，Android App 与插件独立编号、独立发布，版本号无需一致；插件升级不代表 App 需要同步升级。[兼容说明](#兼容性)。
 
@@ -336,9 +336,11 @@ excludedClientModules:
 
 Android App 只是 Kotlin WebView 薄壳，不内置另一份网页；手机浏览器访问的是同一页面。开发者可在已认证移动地址后追加 `?frontend=stock` 诊断启动与布局行为；该入口跳过专用移动启动改写和模块选择，但仍可能加载客户端移动适配及已认证定制，并非不含插件的对照页。部分 API 操作可能被拒绝，不能代替正常移动入口。详见[皮肤与移动布局](docs/SKIN_COMPATIBILITY.md)。
 
-0.5.5 的专用移动页面会在 DSH 的第一个启动脚本之前，同步加载经网关鉴权的同源 `/mobile-access/compat.js`，为缺少 `Iterator` / Iterator helpers 的 WebView 提供随插件打包的 core-js 兼容实现，避免启动时出现 `Iterator is not defined`。兼容层按能力检测保留或修正原生 helper，不依赖 CDN，也不会放宽 CSP；桌面页面与 `?frontend=stock` 页面不会加载这个网关脚本。
+专用移动页面会在 DSH 的第一个启动脚本之前，同步加载经网关鉴权的同源 `/mobile-access/compat.js`，为缺少 `Iterator` / Iterator helpers、`Promise.withResolvers` 和 `AbortSignal.any` 的 WebView 提供随插件打包的兼容实现。兼容层按能力检测保留或修正原生实现，不依赖 CDN，也不会放宽 CSP；桌面页面与 `?frontend=stock` 页面不会加载这个网关脚本。Android App 还会在支持 document-start 注入的 WebView 中，为配对的精确 Origin 提前补齐 `Promise.withResolvers`。
 
-0.6.0 在同一个启动前脚本中增加 `Promise.withResolvers` 与 `AbortSignal.any` 的能力检测和兼容实现。Android App 还会在支持 document-start 注入的 WebView 中，为配对的精确 Origin 提前补齐 `Promise.withResolvers`。这只覆盖已识别的缺失 API，不是所有旧内核的支持承诺；前端仍以 ES2022 为构建目标，尚未在报告中的华为 WebView 114 真机上验收。出现其他兼容错误时，若设备允许更新，请优先更新 Android System WebView / Chrome；若系统组件不可更新，请保留完整错误、内核版本与进入方式供排查。
+**旧内核限制**：API 兼容实现不能修复内核无法解析的 JavaScript 语法。DSH **0.2.1-rc.2** 的正式前端包含 class static blocks，Chromium **92** 无法解析；该语法从 Chrome 94 默认可用，但这不代表 94 已通过整个 DSH 的兼容验收。[V8 说明](https://v8.dev/blog/v8-release-94)。App 的“内核低于 100”提醒只是建议，点击继续不代表当前 DSH 可以运行。若系统 WebView 无法更新，可使用已确认正常的手机浏览器访问电脑端提供的移动地址，无需清除原有 App 配对。
+
+插件 **0.6.12** 补齐已识别的数组、字符串、对象和结构化克隆 API，并在 DSH 尚未显示时提供启动失败说明、“重新载入页面”和“继续等待”。它不转译 DSH，也不自动刷新页面；华为 Chromium 92 的实际 App 尚未完成验收。反馈问题时请提供 DSH／插件／App 与 WebView 版本、进入方式和脱敏后的首个控制台错误，不要发送令牌或完整配对地址。
 
 > **社区客户端（非官方）**：[微信小程序客户端](https://github.com/StrawberryAO/dsh-mobile-minapp)
 > 原生微信小程序实现，复用「移动访问」的配对与 Remote 流协议（需 dsh-mobile ≥ 0.3.8）。
@@ -406,6 +408,7 @@ macOS 上局域网、cloudflared、自建 FRP 与自有反向代理可用；Funn
 | DSH Mobile 插件 | 已验证的 DeepSeek Harness 版本与范围 |
 | --- | --- |
 | `0.6.11` | `0.1.7-alpha.2`、`0.1.7-rc.1`、`0.1.7-rc.2`、`0.2.0-rc.1`、`0.2.0-rc.2`、`0.2.1-alpha.2`、`0.2.1-alpha.3` 的隔离打包浏览器 CI；`0.2.0-rc.2` 与 `0.2.1-alpha.3` 另通过真实历史分页、滚动位置保持和手动加载检查。浏览器检查不代表所有手机内核、第三方插件或公网线路已验收 |
+| `0.6.12` | `0.2.1-rc.2` 的打包安装、移动启动、缺失 API 模拟、工作区实时读取、保留页面的断线恢复及移动设置；`0.2.0-rc.2` 搭配实际社区认证插件 `dsh-web-startup-auth@0.1.12` 的认证与资源回归。未将 Chromium 92 真机、任意认证插件或公网线路写成已验收 |
 
 <details>
 <summary>历史版本验证记录</summary>

package/SECURITY.md

@@ -28,6 +28,13 @@ The maintainer will acknowledge a complete report within seven days. Publication
 - Keep pairing closed except during a short local onboarding action.
 - Revoke a lost device immediately and rotate the device registry if credential theft is suspected.
 
+### Authentication admission and proxy peers
+
+- Invalid pairing guesses, malformed renewal/probe requests and invalid device credentials are limited by the direct TCP peer. `X-Forwarded-For`, `X-Real-IP` and `Forwarded` do not identify an authenticated client. A reverse proxy can therefore give anonymous requests a shared failure budget; this is not a reason to trust forwarded headers without an explicit proxy policy.
+- From plugin 0.6.12, a current valid one-time pairing secret does not consume that anonymous budget. At most one valid pairing candidate can wait for a durable mutation; it is rechecked inside the serialized operation. Renewal and native reachability probes use separate per-device budgets after credential verification, with at most one in-flight operation of each kind per device. Device capacity is independent of the anonymous peer-table capacity. Expiry and revocation are rechecked before mutation; a disconnected caller does not release work that is still pending.
+- These limits protect bounded application work and prevent anonymous failures from exhausting valid credentials' budgets. They do not make an exposed listener immune to connection, bandwidth or CPU exhaustion. Keep pairing windows short, protect proxy ingress, and retain the existing Host/Origin, device-token and CSRF checks.
+- The Gateway's internal upstream cookie exchange requires the configured loopback DSH Origin, its expected redirect status and a valid authentication Cookie. Explicit non-navigation Fetch Metadata avoids community authentication plugins' navigation HTML response; no arbitrary successful HTML page is accepted and no redirect is followed. The upstream Cookie remains server-side.
+
 ### Installation identity and device-state upgrades
 
 - Automatically identified entries without a pairing CA use the random `installation-id` file in the active Mobile state directory for new pairings, not a hash of the state-file path. Explicit operator IDs and CA-bound LAN/self-signed FRP identities remain unchanged. The identifier is public, not an authentication secret. Copying the entire state directory also copies its identity and credentials; this fix does not distinguish cloned installations. Do not delete the identity file to troubleshoot a connection.

package/apps/mobile/README.md

@@ -79,6 +79,8 @@ The native soft-keyboard adapter uses plain Enter for a line break only with a v
 
 System bars, cutouts and keyboard occupancy are reserved once. WebView 151+ receives a minimum 64 MiB HTTP-cache quota for reusable versioned DSH resources; older engines retain their default quota. A Chromium-below-100 reminder is advisory, not a promise that every DSH API is supported on that engine.
 
+A successful App connection does not establish that its engine can execute the page. The DSH 0.2.1-rc.2 frontend contains syntax Chromium 92 cannot parse. If system WebView cannot be updated, use a browser confirmed to work without clearing pairings. See the [old-engine notes](../../README.en.md#app-or-mobile-browser) for the plugin's startup feedback and support limits.
+
 ### Voice
 
 DSH records audio through `getUserMedia` and sends it to the configured computer-side speech provider, not browser SpeechRecognition or the extension bridge. Android asks for microphone permission and accepts audio-only capture from the paired HTTPS Origin. Provider components, models and network access must work; granting recording permission does not verify transcription. Same-origin frontend plugins share that page permission.

package/apps/mobile/README.zh-CN.md

@@ -79,6 +79,8 @@ DSH 的文件入口仍在 **添加** 组；当前附件 owner 支持图片时，
 
 系统栏、屏幕缺口和键盘空间只预留一次。WebView 151+ 为 App 的可复用版本化 DSH 资源提供至少 64 MiB HTTP 缓存配额；旧内核保持默认配额。Chromium 低于 100 的提醒不阻断使用，也不承诺旧内核支持全部 DSH 接口。
 
+App 连接成功不代表网页脚本能够运行。DSH 0.2.1-rc.2 的前端含有 Chromium 92 无法解析的语法；系统内核无法更新时可使用已验证可用的浏览器，不必清除配对。插件的启动反馈与支持范围见[旧内核说明](../../README.md#app-与手机浏览器)。
+
 ### 语音
 
 DSH 通过 `getUserMedia` 录音并交给电脑已配置的语音提供方，不使用浏览器 SpeechRecognition 或扩展 Bridge。Android 申请麦克风权限，仅接受配对 HTTPS Origin 的纯音频请求；电脑组件、模型和网络仍需可用，录音授权不代表转写成功。同源前端插件共享该页面权限。

package/docs/SELF_HOSTED_ORIGIN.en.md

@@ -37,6 +37,8 @@ Bind to an explicit loopback or RFC1918 IPv4 already assigned to the DSH compute
 
 CIDRs match the proxy's **direct TCP peer**, not the phone or `X-Forwarded-For` / `X-Real-IP` / `Forwarded`. Docker or NAT may change that peer. Prefer the actual single-host /32, not an entire subnet. Up to 16 canonical private/loopback CIDRs are accepted, separated by spaces or commas; explicit private proxy sources are required for a LAN bind.
 
+Phones behind a proxy may share that direct peer. From plugin 0.6.12, invalid credentials still share its failure budget, but anonymous failures cannot exhaust a valid one-time pairing secret's admission. Authenticated renewals and probes have per-device limits and bounded pending work. Adding or trusting forwarded-IP headers is unnecessary. For `429 rate_limited` on older versions, update the plugin while retaining pairings; do not widen source CIDRs or expose the ordinary DSH listener.
+
 Select **Save and start backend**. An active backend reloads its settings. The panel separates the public HTTPS origin from the actual listening HTTP backend; saved settings remain visible after stopping.
 
 ## Proxy requirements, including Lucky

package/docs/SELF_HOSTED_ORIGIN.md

@@ -38,6 +38,8 @@
 
 CIDR 限制针对 TCP 连接的**直接来源地址**，不是手机 IP，也不是 `X-Forwarded-For`、`X-Real-IP` 或 `Forwarded`。Docker、桥接或 NAT 可能改变这个地址，应填写后端实际看到的私网来源。优先用单地址 `/32`，不要为了排错放宽整个局域网。最多 16 项，用空格或逗号分隔；只允许回环/私网网段，网络地址不能带主机位。LAN 监听必须显式列出私网代理来源。
 
+代理后的手机可能共享一个直接来源地址。插件 0.6.12 起，错误凭据仍共享该来源的失败限额，但有效的一次性配对码不会被匿名失败耗尽；已认证设备的续期和探测按设备分别限频，并限制未完成操作。不需要为此添加或信任转发 IP 请求头。旧版出现 `429 rate_limited` 时先升级插件并保留配对记录，不要放宽来源网段或公开裸 DSH 端口。
+
 点击 **保存并启动后端**。已经开启时会重新载入配置。面板会分别显示公网 HTTPS 地址与**正在监听的 HTTP 后端**；停止后仍可查看、复制已保存的后端地址。
 
 ## 反向代理要求（含 Lucky）

package/docs/SLOW_CONNECTIONS.en.md

@@ -20,6 +20,12 @@ Both [#126](https://github.com/saya-ch/dsh-mobile/issues/126) and [#146](https:/
 
 Plugin 0.6.11 and later write limited `auth failure` HTTP diagnostics to the plugin log (`$DSH_HOME/mobile-access/logs/dsh-mobile.log`): authorization versus CSRF rejection, status, method, a safe route or route category, related Cookie/header presence and counts, normalized Origin and recognized fetch-site values. It omits tokens, Cookie values, query strings and arbitrary original paths. Each Gateway rate-limits its two categories separately: the first event is immediate and same-category rejections aggregate within a 30-second window; `suppressed` counts previously suppressed records of that category, not all requests or only the current path. This helps investigate missing credentials and CSRF failures; it does not automatically repair a 401/403. The absence of a record does not establish successful authentication: earlier Host/Origin rejections, WebSocket upgrades and native pairing/renewal are outside these two recording points. Review logs before sharing them.
 
+## Keep event streams distinct
+
+In DSH 0.2.0-rc.2, `/plugins/events` is the SSE stream for plugin-module graph and build updates, not conversation-message delivery. Its `200` response, small body or repeated reconnects alone cannot establish successful delivery, failure or a missing processing animation. Inspect the `/api/remote.mux` WebSocket and the actual HTTP request for that operation as well.
+
+An ordinary message bubble and cleared draft can precede `POST /api/session/prompt`: they are an optimistic local echo, not Host acceptance. If no corresponding request appears, retain redacted request timing, status codes and DSH logs to distinguish a request never started by the browser, proxy rejection and Host acceptance. The plugin does not automatically replay messages, approvals or other writes; check the Session before retrying an operation with an unknown outcome.
+
 ## Slow transfers can exceed the default deadlines
 
 DSH 0.2.0-rc.2's API gateway sends a WebSocket Ping every **2 seconds** by default and ends the connection after two missed Pongs, allowing roughly **4–6 seconds** in practice. The client separately allows **15 seconds** for live-connection initialization. Large Session data, a slow uplink, or congestion can delay a Pong or the first synchronization and trigger disconnection and another synchronization.

package/docs/SLOW_CONNECTIONS.md

@@ -20,6 +20,12 @@
 
 插件 0.6.11 起会在插件日志（`$DSH_HOME/mobile-access/logs/dsh-mobile.log`）记录有限的 `auth failure` HTTP 诊断：区分授权与 CSRF 拒绝，包含状态、方法、安全路径或路径类别、相关 Cookie／请求头是否存在及计数、规范化 Origin 和受支持的 fetch-site 值，不记录令牌、Cookie 值、查询参数或任意原始路径。每个网关的两类诊断分别限频，首条立即记录，30 秒窗口内同类拒绝聚合；`suppressed` 表示此前被抑制的同类记录数量，不是全部请求数，也不限定于当前路径。它帮助排查凭据未携带或 CSRF 校验失败，不会自动修复 401／403。没有日志也不代表认证成功：更早的 Host／Origin 拒绝、WebSocket 升级和原生配对／续期不在这两处记录范围内。分享前仍应检查日志。
 
+## 不同事件流不能混为一谈
+
+在 DSH 0.2.0-rc.2 中，`/plugins/events` 是插件模块图和构建更新的 SSE，不是对话消息投递通道。它返回 `200`、传输很少字节或反复重连，不能单独证明消息发送成功、失败或处理中动画丢失；同时检查 `/api/remote.mux` WebSocket 与那次操作实际发出的 HTTP 请求。
+
+普通消息的气泡和清空草稿可能先于 `POST /api/session/prompt`，属于本地乐观回显，不是 Host 受理确认。若找不到对应请求，请保留脱敏后的请求时序、状态码及 DSH 日志，区分浏览器未发起、代理拒绝与 Host 已受理。插件不会自动重放消息、审批或其他写请求；结果不明时先确认会话，避免重复副作用。
+
 ## 慢速传输可能超过默认等待时间
 
 DSH 0.2.0-rc.2 的 API 网关默认每 **2 秒**发送一次 WebSocket Ping，连续两次未收到 Pong 后会结束连接，实际容忍时间约为 **4–6 秒**。客户端另有 **15 秒**的实时连接初始化期限。较大的会话数据、低速上行或拥塞可能延迟 Pong 或首次数据同步，触发断开和重新同步。

package/lib/index.d.mts

@@ -124,6 +124,8 @@ export declare class BoundedRateLimiter {
   constructor(limit: number, windowMs: number, maximumKeys: number);
   /** Consume one attempt; unknown keys fail closed when the bounded table is full. */
   take(key: string, now: number): boolean;
+  /** Discard entries that no longer identify an eligible key in a trusted, finite key set. */
+  retainKeys(eligible: ReadonlySet<string>): void;
   /** Current table size, exposed for bounded-state assertions. */
   get size(): number;
 }
@@ -135,6 +137,7 @@ export declare class AccessController {
   private readonly pairLimiter;
   private devices;
   private pairingWindow;
+  private pairPending;
   private readonly sessions;
   private readonly sessionEndedListeners;
   private mutation;
@@ -157,6 +160,8 @@ export declare class AccessController {
     token: string;
     expiresAt: number;
   }>;
+  /** Limit invalid guesses by peer without letting them consume a valid one-time secret's admission. */
+  private rejectPairingAttempt;
   /** Consume the pairing window exactly once and persist only the device-token digest. */
   pair(sourceKey: string, token: string, label?: string): Promise<PairingResult>;
   /** Exchange a valid persistent device credential for a new short Session. */
@@ -986,8 +991,12 @@ export declare class MobileAccessGateway {
   private closeTask;
   private readonly removeSessionListener;
   private readonly removeExtensionContentListener;
-  private readonly renewLimiter;
-  private readonly probeLimiter;
+  private readonly renewFailureLimiter;
+  private readonly renewDeviceLimiter;
+  private readonly renewInFlight;
+  private readonly probeFailureLimiter;
+  private readonly probeDeviceLimiter;
+  private readonly probeInFlight;
   private readonly clientModulePreferences;
   private readonly clientModuleOperations;
   private readonly clientModuleTasks;
@@ -1032,6 +1041,8 @@ export declare class MobileAccessGateway {
   private requireCsrf;
   private setSessionCookies;
   private setBrowserDeviceBinding;
+  /** Separate malformed or invalid requests from device-authenticated work without trusting forwarded addresses. */
+  private withDeviceRequest;
   private handlePair;
   private handleRenew;
   /** CA-backed entries retain their pin; public entries project the authenticated credential's identity. */

package/lib/index.mjs

@@ -64,6 +64,10 @@ var BoundedRateLimiter = class {
 		current.count += 1;
 		return true;
 	}
+	/** Discard entries that no longer identify an eligible key in a trusted, finite key set. */
+	retainKeys(eligible) {
+		for (const key of this.buckets.keys()) if (!eligible.has(key)) this.buckets.delete(key);
+	}
 	/** Current table size, exposed for bounded-state assertions. */
 	get size() {
 		return this.buckets.size;
@@ -104,6 +108,7 @@ var AccessController = class {
 	pairLimiter;
 	devices = [];
 	pairingWindow;
+	pairPending = false;
 	sessions = /* @__PURE__ */ new Map();
 	sessionEndedListeners = /* @__PURE__ */ new Set();
 	mutation = Promise.resolve();
@@ -212,40 +217,52 @@ var AccessController = class {
 			});
 		});
 	}
+	/** Limit invalid guesses by peer without letting them consume a valid one-time secret's admission. */
+	rejectPairingAttempt(sourceKey, now) {
+		if (!this.pairLimiter.take(sourceKey, now)) throw new AccessError(429, "rate_limited");
+		throw new AccessError(401, "authentication_failed");
+	}
 	/** Consume the pairing window exactly once and persist only the device-token digest. */
 	async pair(sourceKey, token, label) {
 		this.requireInitialized();
-		const now = this.now();
-		if (!this.pairLimiter.take(sourceKey, now)) throw new AccessError(429, "rate_limited");
-		if (token.length > 512) throw new AccessError(401, "authentication_failed");
-		return this.exclusive(async () => {
-			const window = this.pairingWindow;
-			if (window === void 0 || window.expiresAt <= now || !matchesDigest(token, window.digest)) {
-				if (window !== void 0 && window.expiresAt <= now) this.pairingWindow = void 0;
-				throw new AccessError(401, "authentication_failed");
-			}
-			this.pairingWindow = void 0;
-			if (this.devices.filter((device) => device.revokedAt === void 0 && device.expiresAt > now).length >= this.options.maxDevices) throw new AccessError(409, "device_limit");
-			const deviceToken = opaqueToken();
-			const device = Object.freeze({
-				id: randomBytes(16).toString("hex"),
-				label: normalizeLabel(label),
-				tokenDigest: digestHex(deviceToken),
-				createdAt: now,
-				expiresAt: now + this.options.deviceTtlMs,
-				lastSeenAt: now,
-				...this.options.pairingInstanceId === void 0 ? {} : { nativeInstanceId: this.options.pairingInstanceId }
-			});
-			const next = [...this.devices.filter((candidate) => candidate.revokedAt === void 0 && candidate.expiresAt > now), device];
-			await this.store.save(this.snapshot(next));
-			this.devices = next;
-			const session = this.createSession(device, now);
-			return Object.freeze({
-				...session,
-				deviceToken,
-				deviceExpiresAt: device.expiresAt
+		const initialNow = this.now();
+		const initialWindow = this.pairingWindow;
+		if (token.length > 512 || initialWindow === void 0 || initialWindow.expiresAt <= initialNow || !matchesDigest(token, initialWindow.digest)) this.rejectPairingAttempt(sourceKey, initialNow);
+		if (this.pairPending) throw new AccessError(429, "rate_limited");
+		this.pairPending = true;
+		try {
+			return await this.exclusive(async () => {
+				const now = this.now();
+				const window = this.pairingWindow;
+				if (window === void 0 || window.expiresAt <= now || !matchesDigest(token, window.digest)) {
+					if (window !== void 0 && window.expiresAt <= now) this.pairingWindow = void 0;
+					this.rejectPairingAttempt(sourceKey, now);
+				}
+				this.pairingWindow = void 0;
+				if (this.devices.filter((device) => device.revokedAt === void 0 && device.expiresAt > now).length >= this.options.maxDevices) throw new AccessError(409, "device_limit");
+				const deviceToken = opaqueToken();
+				const device = Object.freeze({
+					id: randomBytes(16).toString("hex"),
+					label: normalizeLabel(label),
+					tokenDigest: digestHex(deviceToken),
+					createdAt: now,
+					expiresAt: now + this.options.deviceTtlMs,
+					lastSeenAt: now,
+					...this.options.pairingInstanceId === void 0 ? {} : { nativeInstanceId: this.options.pairingInstanceId }
+				});
+				const next = [...this.devices.filter((candidate) => candidate.revokedAt === void 0 && candidate.expiresAt > now), device];
+				await this.store.save(this.snapshot(next));
+				this.devices = next;
+				const session = this.createSession(device, now);
+				return Object.freeze({
+					...session,
+					deviceToken,
+					deviceExpiresAt: device.expiresAt
+				});
 			});
-		});
+		} finally {
+			this.pairPending = false;
+		}
 	}
 	/** Exchange a valid persistent device credential for a new short Session. */
 	async renew(deviceToken) {
@@ -5395,8 +5412,12 @@ var MobileAccessGateway = class {
 	closeTask;
 	removeSessionListener;
 	removeExtensionContentListener;
-	renewLimiter;
-	probeLimiter;
+	renewFailureLimiter;
+	renewDeviceLimiter;
+	renewInFlight = /* @__PURE__ */ new Set();
+	probeFailureLimiter;
+	probeDeviceLimiter;
+	probeInFlight = /* @__PURE__ */ new Set();
 	clientModulePreferences;
 	clientModuleOperations = /* @__PURE__ */ new Set();
 	clientModuleTasks = /* @__PURE__ */ new Set();
@@ -5425,8 +5446,12 @@ var MobileAccessGateway = class {
 			maxPairingAttempts: config.maxPairingAttempts,
 			maxRateLimitKeys: config.maxRateLimitKeys
 		});
-		this.renewLimiter = new BoundedRateLimiter(Math.min(100, config.maxPairingAttempts * 4), config.rateLimitWindowMs, config.maxRateLimitKeys);
-		this.probeLimiter = new BoundedRateLimiter(Math.min(1e3, config.maxDevices * 4), config.rateLimitWindowMs, config.maxRateLimitKeys);
+		const renewLimit = Math.min(100, config.maxPairingAttempts * 4);
+		const probeLimit = Math.min(1e3, config.maxDevices * 4);
+		this.renewFailureLimiter = new BoundedRateLimiter(renewLimit, config.rateLimitWindowMs, config.maxRateLimitKeys);
+		this.renewDeviceLimiter = new BoundedRateLimiter(renewLimit, config.rateLimitWindowMs, config.maxDevices);
+		this.probeFailureLimiter = new BoundedRateLimiter(probeLimit, config.rateLimitWindowMs, config.maxRateLimitKeys);
+		this.probeDeviceLimiter = new BoundedRateLimiter(probeLimit, config.rateLimitWindowMs, config.maxDevices);
 		this.removeSessionListener = this.access.onSessionEnded((authorization, reason) => {
 			if (reason === "revoked") {
 				const cleanup = this.clientModulePreferences.removeDevice(authorization.deviceId).catch(() => {
@@ -5754,6 +5779,27 @@ var MobileAccessGateway = class {
 			maxAgeSeconds: (deviceExpiresAt - Date.now()) / 1e3
 		})]);
 	}
+	/** Separate malformed or invalid requests from device-authenticated work without trusting forwarded addresses. */
+	async withDeviceRequest(request, failureLimiter, deviceLimiter, inFlight, validate, operation) {
+		let device;
+		try {
+			device = await validate();
+		} catch (error) {
+			if ((error instanceof HttpError || error instanceof AccessError) && error.status >= 400 && error.status < 500 && !failureLimiter.take(request.socket.remoteAddress ?? "unknown", Date.now())) throw new HttpError(429, "rate_limited");
+			throw error;
+		}
+		if (inFlight.has(device.deviceId)) throw new HttpError(429, "rate_limited");
+		const now = Date.now();
+		const activeIds = new Set(this.access.listDevices().filter((candidate) => candidate.revokedAt === void 0 && candidate.expiresAt > now).map((candidate) => candidate.id));
+		deviceLimiter.retainKeys(activeIds);
+		if (!deviceLimiter.take(device.deviceId, now)) throw new HttpError(429, "rate_limited");
+		inFlight.add(device.deviceId);
+		try {
+			return await operation(device);
+		} finally {
+			inFlight.delete(device.deviceId);
+		}
+	}
 	async handlePair(request, response) {
 		const body = await readJsonObject(request, MAX_CONTROL_BODY_BYTES);
 		if (typeof body.token !== "string" || body.label !== void 0 && typeof body.label !== "string") throw new HttpError(400, "bad_request");
@@ -5776,21 +5822,28 @@ var MobileAccessGateway = class {
 		}, this.tlsEnabled);
 	}
 	async handleRenew(request, response) {
-		if (!this.renewLimiter.take(request.socket.remoteAddress ?? "unknown", Date.now())) throw new HttpError(429, "rate_limited");
-		await readJsonObject(request, MAX_CONTROL_BODY_BYTES);
-		const cookies = browserAuthCookies(request.headers.cookie);
-		const bindings = this.tlsEnabled ? cookies.get(HOST_DEVICE_COOKIE) : void 0;
-		if (bindings !== void 0 && bindings.length !== 1) throw new HttpError(401, "authentication_failed");
-		const device = authenticatedCookie(cookies.get("dsh_ma_device") ?? [], (token) => this.access.authorizeDevice(token), (candidate) => bindings === void 0 || candidate.deviceId === bindings[0]);
-		const result = await this.access.renew(device.value);
-		this.setSessionCookies(response, result, Date.now());
-		this.setBrowserDeviceBinding(response, result.deviceId, device.result.deviceExpiresAt);
-		sendJson(response, 200, {
-			renewed: true,
-			deviceId: result.deviceId,
-			csrfToken: result.csrfToken,
-			sessionExpiresAt: result.sessionExpiresAt
-		}, this.tlsEnabled);
+		await this.withDeviceRequest(request, this.renewFailureLimiter, this.renewDeviceLimiter, this.renewInFlight, async () => {
+			await readJsonObject(request, MAX_CONTROL_BODY_BYTES);
+			const cookies = browserAuthCookies(request.headers.cookie);
+			const bindings = this.tlsEnabled ? cookies.get(HOST_DEVICE_COOKIE) : void 0;
+			if (bindings !== void 0 && bindings.length !== 1) throw new HttpError(401, "authentication_failed");
+			const device = authenticatedCookie(cookies.get("dsh_ma_device") ?? [], (token) => this.access.authorizeDevice(token), (candidate) => bindings === void 0 || candidate.deviceId === bindings[0]);
+			return {
+				deviceId: device.result.deviceId,
+				token: device.value,
+				credential: device.result
+			};
+		}, async (selected) => {
+			const result = await this.access.renew(selected.token);
+			this.setSessionCookies(response, result, Date.now());
+			this.setBrowserDeviceBinding(response, result.deviceId, selected.credential.deviceExpiresAt);
+			sendJson(response, 200, {
+				renewed: true,
+				deviceId: result.deviceId,
+				csrfToken: result.csrfToken,
+				sessionExpiresAt: result.sessionExpiresAt
+			}, this.tlsEnabled);
+		});
 	}
 	/** CA-backed entries retain their pin; public entries project the authenticated credential's identity. */
 	nativeResponseInstanceId(result) {
@@ -5811,28 +5864,40 @@ var MobileAccessGateway = class {
 		}, this.tlsEnabled);
 	}
 	async handleNativeRenew(request, response) {
-		if (!this.renewLimiter.take(request.socket.remoteAddress ?? "unknown", Date.now())) throw new HttpError(429, "rate_limited");
-		const body = await readJsonObject(request, MAX_CONTROL_BODY_BYTES);
-		if (typeof body.deviceToken !== "string") throw new HttpError(400, "bad_request");
-		const result = await this.access.renew(body.deviceToken);
-		sendJson(response, 200, {
-			instanceId: this.nativeResponseInstanceId(result),
-			deviceId: result.deviceId,
-			sessionToken: result.sessionToken,
-			csrfToken: result.csrfToken,
-			sessionExpiresAt: result.sessionExpiresAt
-		}, this.tlsEnabled);
+		await this.withDeviceRequest(request, this.renewFailureLimiter, this.renewDeviceLimiter, this.renewInFlight, async () => {
+			const body = await readJsonObject(request, MAX_CONTROL_BODY_BYTES);
+			if (typeof body.deviceToken !== "string") throw new HttpError(400, "bad_request");
+			return {
+				deviceId: this.access.authorizeDevice(body.deviceToken).deviceId,
+				token: body.deviceToken
+			};
+		}, async (selected) => {
+			const result = await this.access.renew(selected.token);
+			sendJson(response, 200, {
+				instanceId: this.nativeResponseInstanceId(result),
+				deviceId: result.deviceId,
+				sessionToken: result.sessionToken,
+				csrfToken: result.csrfToken,
+				sessionExpiresAt: result.sessionExpiresAt
+			}, this.tlsEnabled);
+		});
 	}
 	async handleNativeProbe(request, response) {
-		if (!this.probeLimiter.take(request.socket.remoteAddress ?? "unknown", Date.now())) throw new HttpError(429, "rate_limited");
-		const body = await readJsonObject(request, MAX_CONTROL_BODY_BYTES);
-		if (typeof body.deviceToken !== "string") throw new HttpError(400, "bad_request");
-		const result = await this.access.probe(body.deviceToken);
-		sendJson(response, 200, {
-			instanceId: this.nativeResponseInstanceId(result),
-			deviceId: result.deviceId,
-			deviceExpiresAt: result.deviceExpiresAt
-		}, this.tlsEnabled);
+		await this.withDeviceRequest(request, this.probeFailureLimiter, this.probeDeviceLimiter, this.probeInFlight, async () => {
+			const body = await readJsonObject(request, MAX_CONTROL_BODY_BYTES);
+			if (typeof body.deviceToken !== "string") throw new HttpError(400, "bad_request");
+			return {
+				deviceId: this.access.authorizeDevice(body.deviceToken).deviceId,
+				token: body.deviceToken
+			};
+		}, async (selected) => {
+			const result = await this.access.probe(selected.token);
+			sendJson(response, 200, {
+				instanceId: this.nativeResponseInstanceId(result),
+				deviceId: result.deviceId,
+				deviceExpiresAt: result.deviceExpiresAt
+			}, this.tlsEnabled);
+		});
 	}
 	async handleLogout(request, response) {
 		await readJsonObject(request, MAX_CONTROL_BODY_BYTES);
@@ -6390,7 +6455,8 @@ var MobileAccessGateway = class {
 					headers: {
 						host: this.config.upstreamOrigin.host,
 						accept: "text/html",
-						"accept-encoding": "identity"
+						"accept-encoding": "identity",
+						"sec-fetch-mode": "same-origin"
 					},
 					agent: false
 				});