dsh-plugin-mobile-gateway 0.10.0 → 0.10.2

package/lib/client.js

@@ -686,7 +686,6 @@ window.__ModuleLoader__.load({
         React.createElement('strong', null, name), '：', description)
 
       return React.createElement('div', { style: styles.backdrop, onMouseDown: () => setOpen(false) },
-        React.createElement('style', null, panelCss),
         qr ? React.createElement('div', { style: { ...styles.backdrop, zIndex: 1201 },
           onMouseDown: (event) => { event.stopPropagation(); closePairingDialog() } },
           React.createElement('div', { className: 'mgw-pairing-dialog', 'data-closing': pairingClosing, ref: pairingDialogRef, role: 'dialog', 'aria-modal': true, 'aria-label': '设备配对二维码', tabIndex: -1,
@@ -1033,6 +1032,12 @@ window.__ModuleLoader__.load({
 
     const inject = ['slots']
     function apply(ctx) {
+      ctx.effect(() => {
+        const style = document.createElement('style')
+        style.textContent = panelCss
+        document.head.appendChild(style)
+        return () => style.remove()
+      }, 'mobile-gateway: panel styles')
       ctx.slots.inject('sidebar.footer.action', () => ctx.slots.register(
         { name: 'sidebar.footer.action', id: 'mobile-gateway-devices', order: 80, label: '移动设备' },
         (props) => React.createElement(FooterButton, props),

package/lib/dsh-host-adapter.mjs

@@ -198,6 +198,16 @@ export function createDshHostAdapter(typertGateway) {
   }
 
   return {
+    speech: {
+      catalog: (signal) => invoke('speech', 'catalog', {}, signal),
+      follow: (signal) => typertGateway.stream({ namespace: 'speech', method: 'follow', args: {}, signal }),
+      configure: (patch, signal) => invoke('speech', 'configure', { patch }, signal),
+      prepare: (providerId, options, signal) => invoke('speech', 'prepare', {
+        providerId, ...(options === undefined ? {} : { options }),
+      }, signal),
+      cancelPreparation: (providerId, signal) => invoke('speech', 'cancelPreparation', { providerId }, signal),
+      transcribe: (request, signal) => invoke('speech', 'transcribe', { request }, signal),
+    },
     sessions: {
       list: (payload = {}, signal) => invoke('session', 'list', sessionListArgs(payload), signal),
       search: (payload, signal) => invoke('session', 'search', requestArgs(payload), signal),

package/lib/index.mjs

@@ -1,4 +1,5 @@
 import { stringifyWireFrame } from './wire-json.mjs'
+import { assistantFinish, failureDetails, toolResultDetails, turnReasonDetails } from './session-event-details.mjs'
 // dsh-plugin-mobile-gateway — persistent Host plugin.
 //
 // Two directions:
@@ -35,6 +36,7 @@ import { stringifyWireFrame } from './wire-json.mjs'
 //                     { "type": "attachment", "sessionId", "attachmentId" }
 //                        -> verified image metadata + canonical base64 bytes
 //                     { "type": "file-list", "requestId"?, "sessionId", "path"? }
+//                     { "type": "file-resolve", "requestId", "sessionId", "path" }
 //                     { "type": "file-download-open", "requestId", "sessionId", "path" }
 //                     { "type": "file-download-read", "transferId", "offset" }
 //                     { "type": "file-download-cancel", "transferId" }
@@ -93,6 +95,7 @@ import { stringifyWireFrame } from './wire-json.mjs'
 //                     { "kind": "command-selected", "sessionId", "command", "selected" }
 //                     { "kind": "attachment", "sessionId", "attachment", "data" }
 //                     { "kind": "file-list", "requestId"?, "sessionId", "path", "entries" }
+//                     { "kind": "file-resolved", "requestId", "sessionId", "path", "name", "mediaType", "size", "modifiedAt" }
 //                     { "kind": "file-download-opened", "requestId", "transferId", "sessionId",
 //                       "path", "name", "mediaType", "size", "chunkBytes" }
 //                     { "kind": "file-download-chunk", "transferId", "offset", "data", "eof", "sha256"? }
@@ -132,6 +135,7 @@ import Schema from '@deepseek-ai/schemastery'
 import { WebSocketServer } from 'ws'
 import devicesModule from './devices.js'
 import { createDshHostAdapter, DSH_VERSION, SESSION_FORMAT_VERSION } from './dsh-host-adapter.mjs'
+import { createSpeechInputManager, SPEECH_REQUEST_TYPES } from './speech-input.mjs'
 import { handlePluginQuery, PLUGIN_REQUEST_TYPES } from './plugin-management.mjs'
 import { createSessionFollower } from './session-follower.mjs'
 import { createGatewayState, GATEWAY_MODES } from './gateway-state.mjs'
@@ -307,6 +311,7 @@ function buildWireEvent(session, event) {
       }
       return Object.assign(base, {
         event: { type: 'assistant/message', turn: d.turn, step: d.step, text, reasoning, toolCalls,
+          ...(assistantFinish(d) ? { finish: assistantFinish(d) } : {}),
           ...(d.interrupted === true ? { interrupted: true } : {}),
           ...(d.usage === undefined ? {} : { usage: d.usage }),
           ...(images.length ? { images } : {}),
@@ -314,7 +319,15 @@ function buildWireEvent(session, event) {
       })
     }
     case 'assistant/attempt':
-      return Object.assign(base, { event: { type: event.type, turn: d.turn, step: d.step, stream: d.stream } })
+      return Object.assign(base, { event: { type: event.type, turn: d.turn, step: d.step, stream: d.stream,
+        ...(assistantFinish(d) ? { finish: assistantFinish(d) } : {}) } })
+    case 'llm/retry':
+    case 'llm/retry-started':
+      return Object.assign(base, { event: { type: event.type, turn: d.turn, step: d.step,
+        retryId: d.retryId, retry: d.retry,
+        ...(event.type === 'llm/retry' ? { provider: d.provider, mode: d.mode,
+          maxRetries: d.maxRetries, delayMs: d.delayMs, failure: failureDetails(d.failure) } : {}),
+      } })
     case 'session/title':
       return Object.assign(base, {
         event: {
@@ -325,6 +338,16 @@ function buildWireEvent(session, event) {
       })
     case 'agent-preset/selected':
       return Object.assign(base, { event: { type: event.type, agentPreset: d.agentPreset } })
+    case 'deliverables/presented':
+      return Object.assign(base, {
+        event: { type: event.type, turn: d.turn, callId: d.callId,
+          files: (Array.isArray(d.files) ? d.files : [])
+            .filter(file => file && typeof file.path === 'string' && file.path.trim())
+            .map(file => ({ path: file.path,
+              ...(typeof file.description === 'string' ? { description: file.description } : {}),
+            })),
+        },
+      })
     case 'tool/call':
       return Object.assign(base, {
         event: { type: 'tool/call', turn: d.turn, step: d.step, callId: d.callId, name: d.name, arguments: d.arguments },
@@ -346,6 +369,7 @@ function buildWireEvent(session, event) {
           callId: d.message?.toolCallId ?? d.message?.source?.callId,
           isError: d.message?.isError === true || !!d.error || ((d.message && d.message.content) || []).some(block => block?.type === 'tool-result' && block.isError === true),
           preview,
+          ...toolResultDetails(d),
           ...(d.error ? { error: d.error } : {}),
         },
       })
@@ -404,7 +428,8 @@ function buildWireEvent(session, event) {
     case 'step/start':
     case 'step/end':
       return Object.assign(base, {
-        event: { type: event.type, turn: d.turn, step: d.step, reason: d.reason && d.reason.kind },
+        event: { type: event.type, turn: d.turn, step: d.step, reason: d.reason && d.reason.kind,
+          ...(turnReasonDetails(d.reason) ? { reasonDetails: turnReasonDetails(d.reason) } : {}) },
       })
     default:
       return Object.assign(base, { event: { type: event.type } })
@@ -673,20 +698,31 @@ function createFileTransferManager(api, options) {
       if (!stat.isDirectory()) {
         return fileTransferError('file-workspace-unavailable', 'the session working directory is unavailable', requestType, sessionId)
       }
-      return { root }
+      return { root, inputRoot: path.resolve(item.cwd) }
     } catch {
       return fileTransferError('file-workspace-unavailable', 'the session working directory is unavailable', requestType, sessionId)
     }
   }
 
   const resolveWorkspaceTarget = async (sessionId, rawPath, requestType, inputOptions) => {
-    const requested = normalizedWorkspaceInput(rawPath, inputOptions)
+    // Only the resolver accepts native absolute paths from recorded deliveries
+    // or Markdown links. Download requests remain workspace-relative.
+    const absoluteInput = inputOptions?.allowAbsolute === true
+      && typeof rawPath === 'string' && path.isAbsolute(rawPath.trim())
+    const requested = absoluteInput
+      ? (rawPath.includes('\0') || rawPath.trim().split(/[\\/]+/).includes('..') ? null : rawPath.trim())
+      : normalizedWorkspaceInput(rawPath, inputOptions)
     if (!requested) {
-      return fileTransferError('bad-request', `${requestType} requires a relative workspace path`, requestType, sessionId)
+      return fileTransferError('bad-request', `${requestType} requires a valid ${inputOptions?.allowAbsolute ? '' : 'relative '}workspace path`, requestType, sessionId)
     }
     const rootResult = await resolveSessionRoot(sessionId, requestType)
     if (rootResult.kind === 'error') return rootResult
-    const candidate = path.resolve(rootResult.root, requested)
+    // macOS commonly exposes one workspace as both /var/... and /private/var/...
+    // (and cwd itself may be a symlink). Map only the known cwd alias before
+    // enforcing the canonical root, then still verify the target's realpath.
+    const candidate = absoluteInput && isInsideWorkspace(rootResult.inputRoot, requested)
+      ? path.resolve(rootResult.root, path.relative(rootResult.inputRoot, requested))
+      : path.resolve(rootResult.root, requested)
     if (!isInsideWorkspace(rootResult.root, candidate)) {
       return fileTransferError('file-not-allowed', 'path must stay inside the session working directory', requestType, sessionId)
     }
@@ -705,6 +741,28 @@ function createFileTransferManager(api, options) {
     }
   }
 
+  const resolveFile = async (msg) => {
+    const session = requireSessionId(msg)
+    if (session.error) return session.error
+    if (typeof msg.requestId !== 'string' || !msg.requestId.trim()) {
+      return fileTransferError('bad-request', 'file-resolve requires a requestId', 'file-resolve', session.value)
+    }
+    const resolved = await resolveWorkspaceTarget(session.value, msg.path, 'file-resolve', { allowAbsolute: true })
+    if (resolved.kind === 'error') return resolved
+    if (!resolved.stat.isFile()) {
+      return fileTransferError('file-not-regular', 'only regular files can be previewed', 'file-resolve', session.value)
+    }
+    if (resolved.stat.size > options.fileDownloadMaxBytes) {
+      return fileTransferError('file-too-large', 'file exceeds the configured download limit', 'file-resolve', session.value)
+    }
+    return {
+      kind: 'file-resolved', requestId: msg.requestId, sessionId: session.value,
+      path: workspaceRelativePath(resolved.root, resolved.target),
+      name: path.basename(resolved.target), mediaType: fileMediaType(resolved.target),
+      size: resolved.stat.size, modifiedAt: resolved.stat.mtimeMs,
+    }
+  }
+
   const fileList = async (msg) => {
     const session = requireSessionId(msg)
     if (session.error) return session.error
@@ -884,9 +942,11 @@ function createFileTransferManager(api, options) {
 
   return {
     async handle(client, msg) {
+      const correlation = typeof msg.requestId === 'string' ? { requestId: msg.requestId } : {}
       if (!options.fileDownloadsEnabled) {
-        return fileTransferError('file-download-disabled', 'file downloads are disabled by gateway configuration', msg.type)
+        return { ...fileTransferError('file-download-disabled', 'file downloads are disabled by gateway configuration', msg.type), ...correlation }
       }
+      if (msg.type === 'file-resolve') return { ...await resolveFile(msg), ...correlation }
       if (msg.type === 'file-list') return fileList(msg)
       if (msg.type === 'file-download-open') return open(client, msg)
       if (msg.type === 'file-download-read') return read(client, msg)
@@ -1077,12 +1137,14 @@ function trimConversationEvent(event) {
     case 'assistant/message':
     case 'assistant/attempt': {
       const { stream, ...data } = event.data || {}
-      return { ...event, data }
+      const finish = assistantFinish(event.data || {})
+      return { ...event, data: { ...data, ...(finish ? { finish } : {}) } }
     }
     case 'tool/result': {
       const d = event.data || {}
       const message = d.message
-      if (!message || !Array.isArray(message.content)) return event
+      const details = toolResultDetails(d)
+      if (!message || !Array.isArray(message.content)) return { ...event, data: { ...d, ...details } }
       let changed = false
       const truncateBlock = (block) => {
         if (!block || typeof block !== 'object') return block
@@ -1096,8 +1158,7 @@ function trimConversationEvent(event) {
         return block
       }
       const content = message.content.map(truncateBlock)
-      if (!changed) return event
-      return { ...event, data: { ...d, message: { ...message, content } } }
+      return { ...event, data: { ...d, ...details, ...(changed ? { message: { ...message, content } } : {}) } }
     }
     default:
       return event
@@ -2212,6 +2273,7 @@ const plugin = {
     const pendingQuestions = new Map()
     const pendingApprovals = new Map()
     const fileTransfers = createFileTransferManager(api, options)
+    const speechInput = createSpeechInputManager(api, options)
     const fileTransferExpiryTimer = setInterval(() => {
       fileTransfers.expire().catch((error) => {
         log(`file download expiry failed: ${error && error.message ? error.message : String(error)}`)
@@ -2907,6 +2969,14 @@ const plugin = {
 
             if (msg.type === 'ping') {
               ws.send(stringifyWireFrame({ kind: 'pong', at: Date.now() }))
+            } else if (SPEECH_REQUEST_TYPES.has(msg.type)) {
+              if (!ws.deviceId) {
+                sendFrame({ kind: 'error', code: 'authentication-required', requestType: msg.type,
+                  ...(typeof msg.requestId === 'string' ? { requestId: msg.requestId } : {}),
+                  message: 'Speech input requires a paired device' })
+                return
+              }
+              void speechInput.handle(ws, msg, sendFrame).then(sendFrame)
             } else if (msg.type === 'subscribe') {
               if (msg.assistantStream !== undefined && typeof msg.assistantStream !== 'boolean') {
                 sendFrame({ kind: 'error', code: 'bad-request', requestType: 'subscribe', message: 'assistantStream must be a boolean' })
@@ -2942,7 +3012,7 @@ const plugin = {
               respondToApproval(msg).then((frame) => {
                 if (frame && ws.readyState === 1) ws.send(stringifyWireFrame(frame))
               })
-            } else if (msg.type === 'file-list' || msg.type === 'file-download-open' ||
+            } else if (msg.type === 'file-list' || msg.type === 'file-resolve' || msg.type === 'file-download-open' ||
                        msg.type === 'file-download-read' || msg.type === 'file-download-cancel') {
               fileTransfers.handle(ws, msg).then((frame) => {
                 if (frame && ws.readyState === 1) ws.send(stringifyWireFrame(frame))
@@ -2989,6 +3059,7 @@ const plugin = {
           })
 
           ws.on('close', () => {
+            speechInput.closeClient(ws)
             ws.sessionFollower.stop()
             clients.delete(ws)
             if (ws.deviceId) registry.disconnected(ws.deviceId)
@@ -3027,11 +3098,12 @@ const plugin = {
               'goals',
               'schedule-management',
               'plugin-management-v1',
+              ...(device ? ['speech-input-v1'] : []),
               'session-cancel',
               'queue-control',
               'session-archive',
               'session-rename',
-              ...(options.fileDownloadsEnabled ? ['file-downloads'] : []),
+              ...(options.fileDownloadsEnabled ? ['file-downloads', 'file-references-v1'] : []),
             ],
             port: transport.port || webServer.port,
             clients: clients.size,
@@ -3201,7 +3273,7 @@ const plugin = {
 
     const disposeApprovals = ctx.on('approval/request', (request, next) => {
       const sessionId = request?.agent?.id === undefined ? null : String(request.agent.id)
-      if (!sessionId || typeof request.toolName !== 'string' || !hasInteractionClient(sessionId)) return next()
+      if (!sessionId || typeof request.toolName !== 'string' || !gatewayEnabled) return next()
       const rpcId = crypto.randomUUID()
       const approvalId = crypto.randomUUID()
       return new Promise((resolve, reject) => {
@@ -3231,7 +3303,10 @@ const plugin = {
         }
         pendingApprovals.set(rpcId, pending)
         broadcastInteractionFrame(approvalFrameFor(rpcId, pending))
+        // 控制连接重连期间仍登记待审批，桌面端继续处理同一个请求。
+        // 若桌面端仍在等待，后续连接可以重放；无可用答复时保持原有回退行为。
         startDownstreamApproval(pending)
+        if (!hasInteractionClient(sessionId)) fallbackApproval(pending)
         log(`approval requested: rpcId=${rpcId} approvalId=${approvalId} session=${sessionId} tool=${request.toolName}`)
       })
     }, { prepend: true })
@@ -3396,6 +3471,7 @@ const plugin = {
       if (waitTimer) clearTimeout(waitTimer)
       clearInterval(fileTransferExpiryTimer)
       backgroundStreamAbort.abort()
+      speechInput.dispose()
       for (const pending of [...pendingQuestions.values()]) fallbackQuestion(pending)
       for (const pending of [...pendingApprovals.values()]) fallbackApproval(pending)
       fileTransfers.dispose().catch((error) => {

package/lib/session-event-details.mjs

@@ -0,0 +1,53 @@
+// Keep diagnostic facts when token replay and tool bodies are trimmed for mobile.
+const TOOL_OUTPUT_LIMIT = 16_000
+
+export function failureDetails(value) {
+  if (!value || typeof value !== 'object') return undefined
+  const result = {}
+  for (const key of ['message', 'code', 'name', 'reason', 'requestId']) {
+    if (typeof value[key] === 'string') result[key] = value[key]
+  }
+  for (const key of ['status', 'providerRetryAfterMs']) {
+    if (Number.isFinite(value[key])) result[key] = value[key]
+  }
+  return Object.keys(result).length ? result : undefined
+}
+
+export function assistantFinish(data) {
+  for (let i = (data.stream?.length || 0) - 1; i >= 0; i--) {
+    const record = data.stream[i]
+    if (record?.type !== 'chunk' || record.chunk?.type !== 'finish') continue
+    const reason = record.chunk.reason
+    if (typeof reason?.kind !== 'string') return undefined
+    const failure = failureDetails(reason.failure ?? reason.error)
+    return { kind: reason.kind, ...(failure ? { failure } : {}) }
+  }
+  return data.finish
+}
+
+export function toolResultDetails(data) {
+  const texts = []
+  const visit = block => {
+    if (block?.type === 'text' && typeof block.text === 'string') texts.push(block.text)
+    else if (block?.type === 'tool-result' && Array.isArray(block.content)) block.content.forEach(visit)
+  }
+  for (const block of data.message?.content || []) visit(block)
+  const full = texts.join('')
+  const outputTruncated = full.length > TOOL_OUTPUT_LIMIT
+  // Retain the terminal status and sandbox hints at the end as well as the start.
+  const output = outputTruncated
+    ? `${full.slice(0, TOOL_OUTPUT_LIMIT / 2)}\n[…]\n${full.slice(-TOOL_OUTPUT_LIMIT / 2)}`
+    : full
+  return { output, outputTruncated }
+}
+
+export function turnReasonDetails(reason) {
+  if (!reason || typeof reason.kind !== 'string') return undefined
+  const error = failureDetails(reason.error ?? reason.failure)
+  return { kind: reason.kind, ...(error ? { error } : {}),
+    ...(typeof reason.reason?.kind === 'string' ? { reason: {
+      kind: reason.reason.kind,
+      ...(typeof reason.reason.reason === 'string' ? { reason: reason.reason.reason } : {}),
+    } } : {}),
+  }
+}

package/lib/speech-input.mjs

@@ -0,0 +1,192 @@
+// 移动连接只代理官方 speech Remote，不持有识别模型或写入会话历史。
+export const SPEECH_REQUEST_TYPES = new Set([
+  'speech-catalog', 'speech-subscribe', 'speech-unsubscribe', 'speech-configure',
+  'speech-prepare', 'speech-cancel-preparation', 'speech-transcribe', 'speech-cancel',
+])
+
+const MAX_AUDIO_BYTES = 4 * 1024 * 1024
+const UNAVAILABLE_CODES = new Set(['gateway/invocation-unavailable', 'gateway/definition-unavailable', 'gateway/service-unavailable'])
+
+function failure(code, message) {
+  return Object.assign(new Error(message), { code })
+}
+
+function identifier(value, name) {
+  if (typeof value !== 'string' || !value.trim() || value.length > 128) {
+    throw failure('bad-request', `${name} must be a nonempty string of at most 128 characters`)
+  }
+  return value.trim()
+}
+
+function errorFrame(msg, error) {
+  return { kind: 'error', requestType: msg.type,
+    ...(typeof msg.requestId === 'string' ? { requestId: msg.requestId } : {}),
+    code: UNAVAILABLE_CODES.has(error?.code) ? 'speech/unavailable' : error?.code || 'speech/failed',
+    message: UNAVAILABLE_CODES.has(error?.code)
+      ? 'Enable the official voice input bundle in DSH plugin management' : error?.message || 'Speech operation failed' }
+}
+
+export function createSpeechInputManager(api, { maxPayloadBytes = 64 * 1024 * 1024,
+  transcriptionTimeoutMs = 180_000 } = {}) {
+  const clients = new Map()
+  let activeTranscriptions = 0
+  let disposed = false
+  // 为 JSON 信封留出空间；实际限制还须服从官方插件的目录。
+  const audioLimit = Math.min(MAX_AUDIO_BYTES, Math.max(0, Math.floor((maxPayloadBytes - 4096) / 4) * 3))
+  const stateFor = client => {
+    if (disposed) throw failure('speech/unavailable', 'Speech gateway has been disposed')
+    let state = clients.get(client)
+    if (!state) {
+      state = { operations: new Map(), follow: null, closed: false }
+      clients.set(client, state)
+    }
+    return state
+  }
+  const normalizeCatalog = value => {
+    if (!value || !Array.isArray(value.providers) || !value.selection
+      || !Number.isSafeInteger(value.maxAudioBytes) || value.maxAudioBytes < 46
+      || !Number.isFinite(value.maxDurationSeconds) || value.maxDurationSeconds < 1) {
+      throw failure('speech/invalid-response', 'Official speech catalog is invalid')
+    }
+    return { ...value, maxAudioBytes: Math.min(audioLimit, value.maxAudioBytes),
+      maxDurationSeconds: value.maxDurationSeconds, available: true }
+  }
+  const stopFollow = state => {
+    state.follow?.abort.abort()
+    state.follow = null
+  }
+  const catalog = async signal => normalizeCatalog(await api.speech.catalog(signal))
+
+  return {
+    async handle(client, msg, send) {
+      try {
+        const requestId = identifier(msg.requestId, 'requestId')
+        const state = stateFor(client)
+        if (msg.type === 'speech-cancel') {
+          const targetRequestId = identifier(msg.targetRequestId, 'targetRequestId')
+          const task = state.operations.get(targetRequestId)
+          if (!task || task.type !== 'speech-transcribe') throw failure('speech/request-not-found', 'Transcription is not active on this connection')
+          task.abort.abort(failure('speech/cancelled', 'Transcription cancelled'))
+          return { kind: 'speech-cancelled', requestId, targetRequestId }
+        }
+        if (msg.type === 'speech-unsubscribe') {
+          stopFollow(state)
+          return { kind: 'speech-unsubscribed', requestId }
+        }
+        if (state.operations.has(requestId) || state.follow?.requestId === requestId) {
+          throw failure('speech/request-in-progress', 'requestId is already active on this connection')
+        }
+        if (state.operations.size >= 8) throw failure('speech/busy', 'Too many pending speech requests')
+        if (msg.type === 'speech-subscribe') {
+          stopFollow(state)
+          const follow = { abort: new AbortController(), requestId }
+          state.follow = follow
+          // 先回执，再按订阅 requestId 推送完整快照。Host 的准备任务不属于此观察连接。
+          queueMicrotask(async () => {
+            try {
+              const stream = await api.speech.follow(follow.abort.signal)
+              for await (const snapshot of stream) {
+                if (state.closed || state.follow !== follow || follow.abort.signal.aborted) break
+                send({ kind: 'speech-state', requestId, ...normalizeCatalog(snapshot) })
+              }
+              if (!follow.abort.signal.aborted) throw failure('speech/stream-ended', 'Speech readiness stream ended; subscribe again')
+            } catch (error) {
+              if (!state.closed && state.follow === follow && !follow.abort.signal.aborted) send(errorFrame(msg, error))
+            } finally {
+              if (state.follow === follow) state.follow = null
+            }
+          })
+          return { kind: 'speech-subscribed', requestId }
+        }
+        const abort = new AbortController()
+        const task = { abort, type: msg.type }
+        let timer
+        let admitted = false
+        state.operations.set(requestId, task)
+        try {
+          if (msg.type === 'speech-catalog') {
+            try { return { kind: 'speech-catalog', requestId, ...await catalog(abort.signal) } }
+            catch (error) {
+              if (UNAVAILABLE_CODES.has(error?.code)) return { kind: 'speech-catalog', requestId,
+                available: false, providers: [], code: 'speech/unavailable',
+                message: 'Enable the official voice input bundle in DSH plugin management' }
+              throw error
+            }
+          }
+          if (msg.type === 'speech-transcribe') {
+            if ([...state.operations.values()].some(value => value !== task && value.type === msg.type)
+              || activeTranscriptions >= 4) throw failure('speech/busy', 'Too many active transcriptions')
+            const encoded = msg.audioBase64
+            if (typeof encoded !== 'string' || !encoded.length || encoded.length > Math.ceil(audioLimit / 3) * 4) {
+              throw failure('speech/invalid-audio', 'Audio is empty or exceeds the gateway byte limit')
+            }
+            const audio = Buffer.from(encoded, 'base64')
+            if (audio.length > audioLimit || audio.toString('base64') !== encoded) {
+              throw failure('speech/invalid-audio', 'Audio must use canonical base64 within the gateway byte limit')
+            }
+            const request = { audioBase64: encoded,
+              ...(msg.providerId === undefined ? {} : { providerId: identifier(msg.providerId, 'providerId') }),
+              ...(msg.language === undefined ? {} : { language: identifier(msg.language, 'language') }) }
+            activeTranscriptions++
+            admitted = true
+            timer = setTimeout(() => abort.abort(failure('speech/timeout', 'Transcription timed out')), transcriptionTimeoutMs)
+            timer.unref?.()
+            const limits = await catalog(abort.signal)
+            abort.signal.throwIfAborted()
+            if (audio.length > limits.maxAudioBytes) throw failure('speech/invalid-audio', 'Audio exceeds the official plugin byte limit')
+            // 官方 Remote 负责 WAV、采样率、语言、模型就绪与录音时长校验。
+            const result = await api.speech.transcribe(request, abort.signal)
+            abort.signal.throwIfAborted()
+            if (typeof result?.text !== 'string' || !Number.isFinite(result.audioSeconds) || result.audioSeconds < 0
+              || !Number.isFinite(result.inferenceSeconds) || result.inferenceSeconds < 0) {
+              throw failure('speech/invalid-response', 'Official speech transcript is invalid')
+            }
+            return { kind: 'speech-transcript', requestId, text: result.text,
+              audioSeconds: result.audioSeconds, inferenceSeconds: result.inferenceSeconds }
+          }
+          if (msg.type === 'speech-configure') {
+            const patch = {
+              ...(msg.providerId === undefined ? {} : { providerId: identifier(msg.providerId, 'providerId') }),
+              ...(msg.language === undefined ? {} : { language: identifier(msg.language, 'language') }),
+            }
+            if (!Object.keys(patch).length) throw failure('bad-request', 'Provide providerId or language')
+            await api.speech.configure(patch, abort.signal)
+            return { kind: 'speech-configured', requestId }
+          }
+          const providerId = identifier(msg.providerId, 'providerId')
+          if (msg.type === 'speech-prepare') {
+            const options = msg.downloadSource === undefined ? undefined : { downloadSource: msg.downloadSource }
+            if (options && (typeof options.downloadSource !== 'string' || !options.downloadSource.trim() || options.downloadSource.length > 2048)) {
+              throw failure('bad-request', 'downloadSource must be an advertised nonempty origin')
+            }
+            await api.speech.prepare(providerId, options, abort.signal)
+            return { kind: 'speech-preparing', requestId, providerId }
+          }
+          if (msg.type === 'speech-cancel-preparation') {
+            await api.speech.cancelPreparation(providerId, abort.signal)
+            return { kind: 'speech-preparation-cancelled', requestId, providerId }
+          }
+          throw failure('bad-request', 'Unknown speech request')
+        } catch (error) {
+          throw abort.signal.aborted ? abort.signal.reason : error
+        } finally {
+          clearTimeout(timer)
+          state.operations.delete(requestId)
+          if (admitted) activeTranscriptions--
+        }
+      } catch (error) { return errorFrame(msg, error) }
+    },
+    closeClient(client) {
+      const state = clients.get(client)
+      if (!state) return
+      state.closed = true
+      stopFollow(state)
+      for (const task of state.operations.values()) task.abort.abort(failure('speech/cancelled', 'Mobile connection closed'))
+      clients.delete(client)
+    },
+    dispose() {
+      disposed = true
+      for (const client of clients.keys()) this.closeClient(client)
+    },
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-plugin-mobile-gateway",
-  "version": "0.10.0",
-  "description": "Mobile gateway for DeepSeek Harness with secure device pairing, realtime session sync, plugin management, LAN and Cloudflare Tunnel access, and a responsive theme-aware control panel",
+  "version": "0.10.2",
+  "description": "DeepSeek Harness 移动网关，支持安全设备配对、实时会话同步、插件管理、官方语音输入、局域网及 Cloudflare Tunnel，以及自适应深浅色控制面板。0.10.2 新增文件卡片事件透传与安全文件引用解析，复用分块下载为移动端文件卡片和正文文件链接预览提供协议支持。",
   "main": "lib/index.mjs",
   "files": [
     "bin",
@@ -26,7 +26,7 @@
   },
   "bin": "bin/setup-ip.mjs",
   "scripts": {
-    "test": "node test/wire-json.test.mjs && node test/setup-ip.test.mjs && node test/host-adapter.test.mjs && node test/plugin-management.test.mjs && node test/session-preset.test.mjs && node test/session-follower.test.mjs && node test/gateway.test.mjs && node test/auth.test.mjs && node test/lan.test.mjs && node test/cloudflared-binary.test.mjs && node test/cloudflare-tunnel.test.mjs && node --test test/public-endpoint-check.test.mjs && node test/gateway-tools.test.mjs && node test/multi-gateway.test.mjs"
+    "test": "node test/wire-json.test.mjs && node test/setup-ip.test.mjs && node test/host-adapter.test.mjs && node test/speech-input.test.mjs && node test/plugin-management.test.mjs && node test/session-preset.test.mjs && node test/session-follower.test.mjs && node test/session-event-details.test.mjs && node test/gateway.test.mjs && node --test test/approval-replay.test.mjs && node test/auth.test.mjs && node test/lan.test.mjs && node test/cloudflared-binary.test.mjs && node test/cloudflare-tunnel.test.mjs && node --test test/public-endpoint-check.test.mjs && node test/gateway-tools.test.mjs && node test/multi-gateway.test.mjs"
   },
   "exports": {
     ".": "./lib/index.mjs",