dsh-remote-bridge 2.5.2 → 2.6.0

package/README.en.md

@@ -9,7 +9,7 @@
 </p>
 
 <p align="center">
-  <img alt="Version" src="https://img.shields.io/badge/version-v2.5.2-087f8c">
+  <img alt="Version" src="https://img.shields.io/badge/version-v2.6.0-087f8c">
   <img alt="DSH plugin" src="https://img.shields.io/badge/DeepSeek_Harness-plugin-1f2328">
   <img alt="Platforms" src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-586069">
   <img alt="License" src="https://img.shields.io/badge/license-AGPL--3.0-2da44e">
@@ -102,10 +102,10 @@ dsh plugin --profile web add dsh-remote-bridge
 dsh plugin --profile web add dsh-remote-bridge --registry https://registry.npmmirror.com
 
 # 2. tarball from the GitHub release
-dsh plugin --profile web add https://github.com/westanke/dsh-remote-bridge/releases/download/v2.5.2/dsh-remote-bridge-v2.5.2.tgz
+dsh plugin --profile web add https://github.com/westanke/dsh-remote-bridge/releases/download/v2.6.0/dsh-remote-bridge-v2.6.0.tgz
 
 # 3. tarball from the Gitee release (faster from mainland China)
-dsh plugin --profile web add https://gitee.com/westanke/dsh-remote-bridge/releases/download/v2.5.2/dsh-remote-bridge-v2.5.2.tgz
+dsh plugin --profile web add https://gitee.com/westanke/dsh-remote-bridge/releases/download/v2.6.0/dsh-remote-bridge-v2.6.0.tgz
 
 npx @deepseek-ai/dsh web
 ```
@@ -122,7 +122,7 @@ Restart DSH after installation, then open settings — The section is titled **
 To install a downloaded release archive:
 
 ```sh
-dsh plugin --profile web add ./dsh-remote-bridge-v2.5.2.tgz
+dsh plugin --profile web add ./dsh-remote-bridge-v2.6.0.tgz
 ```
 
 ## First connection
@@ -354,11 +354,11 @@ pnpm pack
 
 `pnpm check` covers type-checking, documentation consistency, and tests. It currently passes **67 test files / 557 cases**, plus **8 browser-layer cases** (Playwright measuring real computed styles, including the 375px narrow-viewport contract).
 
-`npm pack` produces roughly a **0.61 MB** archive (v2.5.2 measured 635,316 bytes, SHA-256 `1779c02e…bdd3bd`): 2.2.0 dropped the standalone page and its editor dependencies and turned source maps off, down from 1.72 MB; it has since grown slightly with projection passthrough, the permission BFF, and the five-dimension hardening.
+`npm pack` produces roughly a **0.61 MB** archive (v2.5.2 measured 635,325 bytes, SHA-256 `18d36904…c8095`): 2.2.0 dropped the standalone page and its editor dependencies and turned source maps off, down from 1.72 MB; it has since grown slightly with projection passthrough, the permission BFF, and the five-dimension hardening.
 
 v2.5.0 was verified on DSH **0.2.1-rc.2** on real hardware: all 14/14 host services injected, the three jobs endpoints exercised, and the permission catalog returned the kernel's real three presets. The development baseline is upstream `dsh-v0.2.1-rc.2` (commit `687f282e8625c6b8d11ff58211a90524be2e4317`); see `engines.dsh` above for the supported range. CI covers Windows, Ubuntu, and macOS.
 
-**v2.5.2 verification status**: 67 test files / 557 cases green, plus 8 Playwright browser cases
+**v2.6.0 verification status**: 70 test files / 593 cases green, plus 8 Playwright browser cases
 (including the 375px narrow-viewport contract); `typecheck`, `docs:check`, and the build all pass.
 All three rounds of real-hardware tunnel regressions were reproduced and verified on a
 React18 + Playwright click harness (one-click token issuance, the stop-tunnel escape hatch, and the
@@ -366,7 +366,8 @@ locked state when re-entering settings), then confirmed by manual testing on the
 
 ## Project
 
-- Version: `v2.5.2`
+- Version: `v2.6.0`
+- **v2.6.0 is the plugin-settings + IM-entry release**: it adds the per-plugin settings namespaces (`GET /api/v1/settings/namespaces`, `PATCH .../{ns}`) so the app can build the form from the kernel schema, and two entry points for "I am out and the desktop is still locked" — the host command `/tunnel` and the tool `open_tunnel_config`; plus one-tap pruning of unused devices, the audit page removed, and a guard so a failing optional registration cannot tear down the whole plugin context.
 - **v2.5.2 is a comprehensive hardening release**: it lands the five-dimension audit
   (security, features, performance, UI, button feedback) — including the unauthenticated
   `debug/host-services` information disclosure fix, dual-bucket rate limiting, broadcast backpressure,

package/README.md

@@ -9,7 +9,7 @@
 </p>
 
 <p align="center">
-  <img alt="Version" src="https://img.shields.io/badge/version-v2.5.2-087f8c">
+  <img alt="Version" src="https://img.shields.io/badge/version-v2.6.0-087f8c">
   <img alt="DSH plugin" src="https://img.shields.io/badge/DeepSeek_Harness-plugin-1f2328">
   <img alt="Platforms" src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-586069">
   <img alt="License" src="https://img.shields.io/badge/license-AGPL--3.0-2da44e">
@@ -93,10 +93,10 @@ dsh plugin --profile web add dsh-remote-bridge
 dsh plugin --profile web add dsh-remote-bridge --registry https://registry.npmmirror.com
 
 # ② GitHub Release 的 tarball
-dsh plugin --profile web add https://github.com/westanke/dsh-remote-bridge/releases/download/v2.5.2/dsh-remote-bridge-v2.5.2.tgz
+dsh plugin --profile web add https://github.com/westanke/dsh-remote-bridge/releases/download/v2.6.0/dsh-remote-bridge-v2.6.0.tgz
 
 # ③ Gitee Release 的 tarball（国内访问更快）
-dsh plugin --profile web add https://gitee.com/westanke/dsh-remote-bridge/releases/download/v2.5.2/dsh-remote-bridge-v2.5.2.tgz
+dsh plugin --profile web add https://gitee.com/westanke/dsh-remote-bridge/releases/download/v2.6.0/dsh-remote-bridge-v2.6.0.tgz
 
 npx @deepseek-ai/dsh web
 ```
@@ -112,7 +112,7 @@ npx @deepseek-ai/dsh web
 从 GitHub Release 下载离线安装包时，可直接安装 tarball：
 
 ```sh
-dsh plugin --profile web add ./dsh-remote-bridge-v2.5.2.tgz
+dsh plugin --profile web add ./dsh-remote-bridge-v2.6.0.tgz
 ```
 
 ## 第一次使用
@@ -182,14 +182,59 @@ dsh plugin --profile web add ./dsh-remote-bridge-v2.5.2.tgz
 装好 App 后，在「手机设置 → 远程访问」里生成配置文本或配对码即可连上本机。
 公开 API 不依赖 DSH 私有协议，也可用于其他客户端：
 
-- 查看、新建、重命名和移除 DSH 工作区登记。
-- 创建、重命名、分叉和归档会话。
+- 查看、新建、重命名和移除 DSH 工作区登记。- 创建、重命名、分叉和归档会话。
 - 读取消息、流式接收正文和思考、追加引导或取消运行。
 - 查看 TODO、斜杠命令、权限模式和待审批操作。
 - 选择 Agent、模型和思考强度。
 - 查看或修改模型供应商，支持完全自定义供应商。
 - 管理设备获准访问的文件和回收站项目。
 
+### 远程开隧道：人已经出门、电脑还锁着
+
+常见场景：**人已经出门，才发现电脑上的 Cloudflare 隧道没开，配置文本也没发给自己**。
+此时公网入口根本不存在，WebUI 和 App 都够不着这台机器。能用的只剩「本机主动连出去」的通道，
+装了 `@xmanrui/dsh-im`（微信 / 飞书 / 钉钉 / 企业微信 / Telegram …）或任何带命令栏的客户端时，
+有两条入口可以做这件事：
+
+**① 桌面 WebUI 的命令栏（立即可用）**
+
+```
+/tunnel
+```
+
+回的是这样一段：
+
+```
+云隧道已开启。
+地址：https://<random>.trycloudflare.com
+设备名：Android 设备
+配置文本（一行，复制后粘贴到 App 的「导入配置」）：
+DSH1:eyJ2IjoxLCJlbmRwb2ludHMiOlt7ImxhYmVsIjoi…
+```
+
+**② IM 聊天窗口里用一句话（配合智能体）**
+
+在微信/飞书里直接说「**帮我开隧道，把配置文本发我**」，智能体会调用本插件的
+`open_tunnel_config` 工具，把同样的地址与 `DSH1:` 文本回到聊天里。
+
+> 为什么 IM 里不是发 `/tunnel`？因为 `@xmanrui/dsh-im` 的斜杠命令表是**封闭的**：
+> 内置 31 条，另外只把 `/compact` `/clear` `/permission` 三条委派给宿主，没有
+> 「未知命令转交宿主命令表」的通用派发，也从不查询宿主的命令列表。所以 `/tunnel`
+> 在 IM 里会当成一句普通消息交给智能体 —— 这也正是上面第 ② 条走自然语言 + 工具的原因。
+> 如果 dsh-im 以后加上通用派发，`/tunnel` 会立刻可用，桥这边不用改。
+
+隧道**已经在跑**时再触发一次不会重复开，而是复用当前地址再给一份配置文本
+（每次调用都会新建一台设备，方便在面板里单独吊销）。
+
+能力边界刻意压得很小：**只能开，不能停、不能改配置、不读任何文件**。
+带参数一律拒绝，不提供 `/tunnel stop` 这类第二入口。就算口令泄露，损失上限也只是
+「隧道被人开了一下」—— 隧道本身不授予任何数据面权限（读文件、发消息仍要设备令牌）。
+
+> ⚠️ **必要前提：IM 机器人必须是白名单模式，且白名单里只有你自己。**
+> 这条通道的身份校验**不在本插件里**，而在 IM 插件自己的访问策略（`canExecuteCommands` +
+> allowlist）。如果机器人设成「允许所有用户私聊执行命令」，那等于把开机按钮放到公共群里 ——
+> 这是部署问题，代码替你兜不住。详见 [SECURITY.md](docs/project/SECURITY.md#im-命令tunnel的信任边界)。
+
 ## 远程访问与安全
 
 默认远程地址为 `0.0.0.0:3090`，IP 和端口都可修改。客户端可以使用能到达服务器的 IP 或域名连接。
@@ -340,20 +385,21 @@ pnpm pack
 
 `pnpm check` 覆盖类型检查、文档一致性与测试；当前 **67 个测试文件 / 557 个用例**，外加 **8 个浏览器层用例**（Playwright 实测量出的计算样式，含 375px 窄屏契约），全部通过。
 
-`npm pack` 的产物约 **0.61 MB**（v2.5.2 实测 635,316 字节，SHA-256 `1779c02e…bdd3bd`）：2.2.0 删除独立页及其编辑器依赖、并关闭 source map 之后从 1.72 MB 降下来，之后随投影透传、权限 BFF 与五维加固小幅增长。
+`npm pack` 的产物约 **0.61 MB**（v2.5.2 实测 635,325 字节，SHA-256 `18d36904…c8095`）：2.2.0 删除独立页及其编辑器依赖、并关闭 source map 之后从 1.72 MB 降下来，之后随投影透传、权限 BFF 与五维加固小幅增长。
 
 v2.5.0 在 DSH **0.2.1-rc.2** 上完成真机验证：14/14 宿主服务全部可注入、三个 jobs 端点实测通过、
 权限档位目录返回内核真实三档。开发基线为上游 `dsh-v0.2.1-rc.2`（commit `687f282e8625c6b8d11ff58211a90524be2e4317`），
 兼容范围见上文 `engines.dsh`。CI 覆盖 Windows、Ubuntu 和 macOS。
 
-**v2.5.2 的验证状态**：67 个测试文件 / 557 个用例全绿、8 个 Playwright 浏览器用例
+**v2.6.0 的验证状态**：70 个测试文件 / 593 个用例全绿、8 个 Playwright 浏览器用例
 （含 375px 窄屏契约）、`typecheck`/`docs:check`/构建通过；隧道管理面三轮真机回归均用
 React18 + Playwright 真点击台复现并验证（一键出令牌、停止出口、重进设置页锁定态），
 用户真机手工复测通过。
 
 ## 项目信息
 
-- 当前版本：`v2.5.2`
+- 当前版本：`v2.6.0`
+- **v2.6.0 是通用设置面 + IM 入口版**：新增「按插件划分的设置命名空间」两个端点（手机端照 schema 自建表单，新装插件无需改 App），以及「人已出门、电脑还锁着」时用 IM 一句话开隧道并收回配对配置的双入口（宿主命令 `/tunnel` + 工具 `open_tunnel_config`）；另加一键清理 N 天未使用设备、移除审计页，并把「激活期降级保护」补上（apply 尾部抛错不再拆掉整条插件上下文）。
 - **v2.5.2 是全量完善版**：落地五维审计（安全/功能/性能/界面/按钮反馈）——含高危的
   `debug/host-services` 免鉴权信息泄露修复、限流双桶、广播背压、弱 ETag、审计保留策略等，
   并把「一键开隧道并生成令牌」做成同一次请求内搭车完成；隧道运行时管理面安全锁定，

package/docs/api/asyncapi.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.0.0
 info:
   title: DeepSeek Harness Mobile Events
-  version: 2.5.2
+  version: 2.6.0
   description: |
     Live file and authorized DSH chat events. Reconnect clients must refresh
     REST state; unbounded replay is not provided.

package/docs/api/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: DeepSeek Harness Mobile API
-  version: 2.5.2
+  version: 2.6.0
   description: Versioned file and chat BFF for mobile and third-party DSH clients. HTTP and HTTPS are both supported.
 servers:
   - url: http://127.0.0.1:3090/api/v1
@@ -24,7 +24,7 @@ paths:
                 properties:
                   ok: { type: boolean, const: true }
                   version: { type: string, const: v1 }
-                  pluginVersion: { type: string, const: 2.5.2 }
+                  pluginVersion: { type: string, const: 2.6.0 }
   /debug/host-services:
     get:
       operationId: hostServices
@@ -579,6 +579,68 @@ paths:
           content:
             application/json:
               schema: { $ref: '#/components/schemas/ModelCatalog' }
+  /settings/namespaces:
+    get:
+      operationId: listSettingsNamespaces
+      summary: Read every DSH plugin settings namespace
+      description: |
+        Returns the host's per-plugin settings document as one entry per namespace, so a
+        mobile client can build a form from `schema` without a dedicated endpoint per
+        plugin. Requires `settings.read`.
+
+        The top-level `writable` mirrors the host settings document. Each entry's
+        `writable` is that value AND the bridge's write policy: namespaces starting with
+        `ui-` or ending in `locale` are writable by default; high-risk ones (`llm-*`,
+        `permission`, `agent-default-model`, `subagent-*`, …) are read-only unless the
+        deployment explicitly allows them through `settingsWriteNamespaces`. When an
+        entry is not writable, `reason` says why: `HOST_READONLY` (the whole settings
+        document is read-only) or `HIGH_RISK_NAMESPACE` (write policy).
+
+        Secret values never leave the host: the kernel already redacts fields declared as
+        secrets, and the bridge additionally masks string values whose key matches
+        `apiKey|secret|token|password|credential|apiKeyEnv` with `***`.
+      responses:
+        '200':
+          description: All namespaces, with secret values redacted and per-namespace writability.
+          content:
+            application/json:
+              schema: { $ref: '#/components/schemas/SettingsNamespaces' }
+        '403': { $ref: '#/components/responses/Error' }
+  /settings/namespaces/{ns}:
+    parameters:
+      - name: ns
+        in: path
+        required: true
+        schema: { type: string }
+        description: Namespace id (a plugin name such as `ui-chat`).
+    patch:
+      operationId: mutateSettingsNamespace
+      description: |
+        Applies path-addressed `set` / `unset` operations to one namespace, mirroring the
+        kernel's `settings.mutate`. Requires `settings.write`; at most 32 operations per
+        request. A successful mutation is audited as `settings.namespace.mutate` with the
+        touched field paths only — never the values.
+
+        Only namespaces allowed by the write policy can be changed; others answer
+        403 `SETTINGS_NAMESPACE_READONLY`. `expectedRevision` is optimistic concurrency:
+        a mismatch answers 409 `SETTINGS_CONFLICT`; an invalid ops body answers
+        400 `SETTINGS_OPS_INVALID`; a missing host settings service answers
+        503 `SETTINGS_UNAVAILABLE`.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema: { $ref: '#/components/schemas/SettingsNamespaceOps' }
+      responses:
+        '200':
+          description: The mutated namespace, in the same shape as one entry of `SettingsNamespaces.namespaces`.
+          content:
+            application/json:
+              schema: { $ref: '#/components/schemas/SettingsNamespaceSummary' }
+        '400': { $ref: '#/components/responses/Error' }
+        '403': { $ref: '#/components/responses/Error' }
+        '409': { $ref: '#/components/responses/Error' }
+        '503': { $ref: '#/components/responses/Error' }
   /settings/providers/{providerId}:
     parameters:
       - name: providerId
@@ -1624,6 +1686,83 @@ components:
         providers:
           type: array
           items: { $ref: '#/components/schemas/Provider' }
+    SettingsNamespaceSecret:
+      type: object
+      description: One secret slot reported by the host. Only its path and whether it is set are exposed, never the value.
+      required: [path, set]
+      properties:
+        path:
+          type: array
+          items: { type: string }
+        set: { type: boolean }
+    SettingsNamespaceSummary:
+      type: object
+      description: One DSH settings namespace as seen by a remote client, with secret values redacted.
+      required: [ns, revision, value, writable]
+      properties:
+        ns: { type: string, examples: [ui-chat, ui-theme] }
+        revision: { type: integer, minimum: 0 }
+        schema:
+          type: object
+          additionalProperties: true
+          description: Kernel schema tree for form generation; its shape is kernel-defined.
+        value:
+          description: Effective value (base merged with user overrides), recursively redacted.
+        base:
+          description: Built-in default value, recursively redacted.
+        user:
+          description: User overrides only, recursively redacted.
+        autoGenerate:
+          type: object
+          additionalProperties: true
+          description: Kernel-reported fields that are generated automatically.
+        applies:
+          type: object
+          additionalProperties: true
+          description: Kernel-reported applicability conditions for this namespace.
+        secrets:
+          type: array
+          items: { $ref: '#/components/schemas/SettingsNamespaceSecret' }
+        writable:
+          type: boolean
+          description: The host document is writable AND this namespace passes the bridge's write policy.
+        reason:
+          type: string
+          enum: [HOST_READONLY, HIGH_RISK_NAMESPACE]
+          description: Present only when `writable` is false.
+    SettingsNamespaces:
+      type: object
+      required: [writable, namespaces]
+      properties:
+        writable:
+          type: boolean
+          description: Whether the host settings document itself is writable.
+        namespaces:
+          type: array
+          items: { $ref: '#/components/schemas/SettingsNamespaceSummary' }
+    SettingsNamespaceOps:
+      type: object
+      description: Path-addressed operations and optional optimistic-concurrency revision.
+      required: [ops]
+      properties:
+        ops:
+          type: array
+          minItems: 1
+          maxItems: 32
+          items:
+            oneOf:
+              - type: object
+                required: [op, path, value]
+                properties:
+                  op: { type: string, const: set }
+                  path: { type: array, items: { type: string } }
+                  value: {}
+              - type: object
+                required: [op, path]
+                properties:
+                  op: { type: string, const: unset }
+                  path: { type: array, items: { type: string } }
+        expectedRevision: { type: integer, minimum: 0 }
     ProviderPatch:
       type: object
       properties:

package/lib/client.cjs

@@ -152,6 +152,17 @@ window.__ModuleLoader__.load({
 			async revokeDevice(deviceId) {
 				await this.manageJson(`/devices/${encodeURIComponent(deviceId)}`, { method: "DELETE" });
 			}
+			/**
+			* 一键清理「N 天没动过」的设备。天数由用户填，服务端再夹一次 1..3650。
+			*
+			* 返回真正删掉的条数 —— 0 也是一次合法结果（「没有可清理的」），界面不该把它当失败。
+			*/
+			async pruneInactiveDevices(olderThanDays) {
+				return this.manageJson("/devices/prune", {
+					method: "POST",
+					body: JSON.stringify({ olderThanDays })
+				});
+			}
 			async trashItems() {
 				return this.json("/trash");
 			}
@@ -22831,7 +22842,7 @@ window.__ModuleLoader__.load({
 					key: "1o3tu8"
 				}]
 			]);
-			const ScrollText = createLucideIcon("ScrollText", [
+			createLucideIcon("ScrollText", [
 				["path", {
 					d: "M15 12h-5",
 					key: "r7krc0"
@@ -29780,7 +29791,6 @@ window.__ModuleLoader__.load({
 			exports.HardDrive = HardDrive;
 			exports.Image = Image;
 			exports.Languages = Languages;
-			exports.ScrollText = ScrollText;
 			exports.Smartphone = Smartphone;
 			exports.Trash2 = Trash2;
 			exports.Upload = Upload;
@@ -29984,6 +29994,12 @@ window.__ModuleLoader__.load({
 				pairingCreated: "配对码已生成",
 				configCreated: "配置文本已生成",
 				revokeConfirm: "吊销后这台手机的令牌立即失效，必须重新配对才能访问。确定吊销「{name}」吗？",
+				pruneInactiveDays: "清理超过（天）未使用",
+				pruneInactiveAction: "清理 {days} 天未使用设备",
+				pruneInactiveBusy: "正在清理…",
+				pruneInactiveConfirm: "将删除 {days} 天没有使用过的设备（它们需要重新配对才能访问）。最近用过的设备不受影响。继续吗？",
+				pruneInactiveDone: "已清理 {count} 台设备",
+				pruneInactiveNone: "没有需要清理的设备",
 				removeRootConfirm: "移除根目录「{label}」不会删除磁盘上的文件，但所有手机将立刻失去对它的访问权。确定移除吗？",
 				disableRemoteConfirm: "关闭远程访问后，所有手机连接立即断开，需要重新启用并配对。确定关闭吗？",
 				rootAdded: "根目录已添加",
@@ -30204,6 +30220,12 @@ window.__ModuleLoader__.load({
 				pairingCreated: "Pairing code generated",
 				configCreated: "Config text generated",
 				revokeConfirm: "Revoking invalidates this phone’s token at once; it must pair again to regain access. Revoke “{name}”?",
+				pruneInactiveDays: "Unused for more than (days)",
+				pruneInactiveAction: "Prune devices unused for {days} days",
+				pruneInactiveBusy: "Pruning…",
+				pruneInactiveConfirm: "This deletes devices unused for {days} days (they must pair again to regain access). Recently used devices are untouched. Continue?",
+				pruneInactiveDone: "Pruned {count} device(s)",
+				pruneInactiveNone: "No devices to prune",
 				removeRootConfirm: "Removing “{label}” does not delete files on disk, but every phone immediately loses access to it. Remove it?",
 				disableRemoteConfirm: "Disabling remote access drops every phone connection right away; it must be re-enabled and re-paired. Disable it?",
 				rootAdded: "Root added",
@@ -30944,7 +30966,6 @@ window.__ModuleLoader__.load({
 			devices: "devicesTabDesc",
 			image: "imageTabDesc",
 			trash: "trashTabDesc",
-			audit: "auditTabDesc",
 			"app-download": "appDownloadTabDesc"
 		};
 		function tabDescKey(tab) {
@@ -31050,7 +31071,6 @@ window.__ModuleLoader__.load({
 			const { locale, t } = useWorkspaceI18n();
 			const [status, setStatus] = (0, react.useState)();
 			const [trash, setTrash] = (0, react.useState)([]);
-			const [audit, setAudit] = (0, react.useState)([]);
 			const [path, setPath] = (0, react.useState)("");
 			const [label, setLabel] = (0, react.useState)("");
 			const [listenerHost, setListenerHost] = (0, react.useState)("0.0.0.0");
@@ -31069,8 +31089,8 @@ window.__ModuleLoader__.load({
 			const [tunnel, setTunnel] = (0, react.useState)();
 			const [tunnelBusy, setTunnelBusy] = (0, react.useState)(false);
 			const [activity, setActivity] = (0, react.useState)();
-			const [auditLimit, setAuditLimit] = (0, react.useState)(50);
-			const [auditLoading, setAuditLoading] = (0, react.useState)(false);
+			const [pruneDays, setPruneDays] = (0, react.useState)(30);
+			const [pruneBusy, setPruneBusy] = (0, react.useState)(false);
 			const [now, setNow] = (0, react.useState)(() => Date.now());
 			const notify = (0, react.useCallback)((key, params) => {
 				setNotice(params === void 0 ? {
@@ -31127,7 +31147,6 @@ window.__ModuleLoader__.load({
 					const next = await props.api.status();
 					setStatus(next);
 					if (openCards.has("trash")) setTrash((await props.api.trashItems()).items);
-					if (openCards.has("audit")) setAudit((await props.api.audit()).items);
 					if (openCards.has("image")) {
 						const settings = await props.api.imageSettings();
 						setImage(settings);
@@ -31707,13 +31726,41 @@ window.__ModuleLoader__.load({
 							configText !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ConfigTextPanel, { result: configText })
 						]
 					}, "remote"),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsCard, {
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(SettingsCard, {
 						tab: "devices",
 						nameKey: tabLabelKey("devices"),
 						descKey: tabDescKey("devices"),
 						open: isOpen("devices"),
 						onToggle: () => toggleCard("devices"),
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "daw-inline-command",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: "daw-field",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("pruneInactiveDays") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									className: "daw-input",
+									type: "number",
+									min: 1,
+									max: 3650,
+									value: pruneDays,
+									disabled: managementLocked || pruneBusy,
+									onChange: (event) => setPruneDays(Math.max(1, Math.min(3650, Number(event.target.value) || 1)))
+								})]
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								className: "daw-command",
+								disabled: managementLocked || pruneBusy,
+								onClick: () => {
+									if (!confirm(t("pruneInactiveConfirm", { days: String(pruneDays) }))) return;
+									setPruneBusy(true);
+									setError(void 0);
+									props.api.pruneInactiveDevices(pruneDays).then((result) => {
+										if (result.pruned === 0) notify("pruneInactiveNone");
+										else notify("pruneInactiveDone", { count: String(result.pruned) });
+										return refresh();
+									}).catch(setError).finally(() => setPruneBusy(false));
+								},
+								children: pruneBusy ? t("pruneInactiveBusy") : t("pruneInactiveAction", { days: String(pruneDays) })
+							})]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 							className: "daw-list",
 							children: (status?.devices ?? []).map((device) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(DeviceRow, {
 								api: props.api,
@@ -31723,7 +31770,7 @@ window.__ModuleLoader__.load({
 								onError: setError,
 								onNotice: notify
 							}, device.id))
-						})
+						})]
 					}, "devices"),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(SettingsCard, {
 						tab: "image",
@@ -31869,48 +31916,6 @@ window.__ModuleLoader__.load({
 							}, item.id))
 						})]
 					}, "trash"),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsCard, {
-						tab: "audit",
-						nameKey: tabLabelKey("audit"),
-						descKey: tabDescKey("audit"),
-						open: isOpen("audit"),
-						onToggle: () => toggleCard("audit"),
-						children: audit.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-							className: "daw-list-meta daw-empty",
-							children: t("auditEmpty")
-						}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-							className: "daw-list",
-							children: audit.slice(0, auditLimit).map((item, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-								className: "daw-list-row",
-								children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-									className: "daw-list-title",
-									children: String(item.action ?? t("event"))
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "daw-list-meta",
-									children: [
-										new Date(Number(item.time ?? 0)).toLocaleString(locale),
-										" · ",
-										String(item.actorType ?? ""),
-										":",
-										String(item.actorId ?? ""),
-										" · ",
-										String(item.relativePath ?? "")
-									]
-								})] })
-							}, String(item.id ?? index)))
-						}), auditLimit < audit.length && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-							className: "daw-command daw-inline-command",
-							disabled: auditLoading,
-							onClick: () => {
-								setAuditLoading(true);
-								window.setTimeout(() => {
-									setAuditLimit((value) => value + 50);
-									setAuditLoading(false);
-								}, 0);
-							},
-							children: auditLoading ? t("auditLoading") : t("auditLoadMore")
-						})] })
-					}, "audit"),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AppDownloadSection, {
 						open: isOpen("app-download"),
 						onToggle: () => toggleCard("app-download")
@@ -32183,7 +32188,6 @@ window.__ModuleLoader__.load({
 			if (tab === "devices") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(import_lucide_react.Smartphone, { size: 15 });
 			if (tab === "image") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(import_lucide_react.Image, { size: 15 });
 			if (tab === "trash") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(import_lucide_react.Trash2, { size: 15 });
-			if (tab === "audit") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(import_lucide_react.ScrollText, { size: 15 });
 			if (tab === "remote") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(import_lucide_react.Upload, { size: 15 });
 			if (tab === "app-download") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(import_lucide_react.Download, { size: 15 });
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(import_lucide_react.File, { size: 15 });