dsh-remote-plugin 0.6.19 → 0.6.20

package/client.js

@@ -10,7 +10,14 @@ window.__ModuleLoader__.load({
     var exports = module.exports
     Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' })
     var React = require('react')
-    var runtime = require('@deepseek-ai/dsh-client-runtime/client')
+    // DSH 0.1.2-alpha.1 将 defineStore 从已删除的 client-runtime 迁入
+    // client-store 平台种子；0.1.1-rc.2 及更早版本仍只提供旧模块。
+    var storeRuntime
+    try {
+      storeRuntime = require('@deepseek-ai/dsh-client-store')
+    } catch (_) {
+      storeRuntime = require('@deepseek-ai/dsh-client-runtime/client')
+    }
 
     var DRAWER_STYLE = {
       position: 'fixed', top: 12, right: 12, bottom: 12, zIndex: 2147483000,
@@ -146,7 +153,7 @@ window.__ModuleLoader__.load({
 
     var inject = ['slots']
     function apply(ctx) {
-      var store = runtime.defineStore({
+      var store = storeRuntime.defineStore({
         init: function () { return { open: false } },
         actions: {
           toggle: function (d) { d.open = !d.open },

package/gateway.cjs

@@ -78,6 +78,7 @@ const UPSTREAM_AUTHORITY = `${UPSTREAM.hostname}${UPSTREAM.port ? ':' + UPSTREAM
 const DSH_HEALTH_PATH = String(process.env.DSH_HEALTH_PATH || '/').startsWith('/')
   ? String(process.env.DSH_HEALTH_PATH || '/')
   : '/' + String(process.env.DSH_HEALTH_PATH)
+const DSH_UPSTREAM_COOKIE_FILE = process.env.DSH_REMOTE_DSH_COOKIE_FILE || path.join(os.homedir(), '.dsh-remote', 'dsh-upstream.cookie')
 const TOKEN_FILE = process.env.TOKEN_FILE || path.join(os.homedir(), '.dsh-remote', 'token')
 const NOTES_FILE = process.env.DSH_REMOTE_NOTES || path.join(os.homedir(), '.dsh-remote', 'device-notes.json')
 const DEVICE_KEYS_FILE = process.env.DSH_REMOTE_DEVICE_KEYS || path.join(os.homedir(), '.dsh-remote', 'device-keys.json')
@@ -94,6 +95,24 @@ const HTTP_REQUEST_TIMEOUT_MS = durationEnv('GATEWAY_HTTP_REQUEST_TIMEOUT_MS', 1
 const HTTP_HEADERS_TIMEOUT_MS = durationEnv('GATEWAY_HTTP_HEADERS_TIMEOUT_MS', 120000, 1000, 10 * 60 * 1000)
 const HTTP_KEEPALIVE_TIMEOUT_MS = durationEnv('GATEWAY_HTTP_KEEPALIVE_TIMEOUT_MS', 65000, 1000, 10 * 60 * 1000)
 
+/** 读取插件兑换的新版 DSH 会话 Cookie；动态读取允许 DSH 重启后原地刷新。 */
+function dshUpstreamCookie() {
+  try {
+    const value = fs.readFileSync(DSH_UPSTREAM_COOKIE_FILE, 'utf8').trim()
+    if (!value.includes('=') || value.length > 4096 || /[\0\r\n]/.test(value)) return ''
+    return value
+  } catch {
+    return ''
+  }
+}
+
+function dshUpstreamHeaders(base = {}) {
+  const headers = { ...base }
+  const cookie = dshUpstreamCookie()
+  if (cookie) headers.cookie = cookie
+  return headers
+}
+
 // 更新检查: GitHub 为默认源, 可用环境变量覆盖(国内镜像 / 代理)
 const UPDATE_CHECK_URL = process.env.UPDATE_CHECK_URL ||
   'https://api.github.com/repos/Blank-not-black/dsh-Remote/releases/latest'
@@ -1055,6 +1074,7 @@ async function probeDshUpstream() {
   const startedAt = Date.now()
   try {
     const probe = await fetch(new URL(DSH_HEALTH_PATH, UPSTREAM), {
+      headers: dshUpstreamHeaders(),
       signal: AbortSignal.timeout(Math.min(2500, UPSTREAM_REQUEST_TIMEOUT_MS)),
       cache: 'no-store',
     })
@@ -1314,6 +1334,211 @@ const eventCollectorState = {
 }
 const eventCollectors = { mux: null, host: null }
 
+// DSH 0.1.2-alpha.1 replaced dotted RPC names and the two downlink sockets with
+// generated slash RPCs over one logical-stream mux.  Keep the public Remote
+// contract stable here so older DSH releases and newer generated Remotes can
+// both serve the same zero-build clients.
+let upstreamApiFlavor = 'unknown'
+let upstreamApiFlavorProbe = null
+const modernState = {
+  home: '',
+  eventClientId: '',
+  sessions: new Map(),
+  sessionCursors: new Map(),
+  workspaces: { items: [], archivedSessionIds: [] },
+  pendingEvents: new Map(),
+}
+
+async function callUpstreamRemote(endpoint, args, rpcId = crypto.randomUUID()) {
+  const target = new URL('/api/' + endpoint, UPSTREAM)
+  const response = await fetch(target, {
+    method: 'POST',
+    headers: dshUpstreamHeaders({ 'content-type': 'application/json' }),
+    body: JSON.stringify({ type: 'client-request', rpcId, method: endpoint, payload: { args } }),
+    signal: AbortSignal.timeout(UPSTREAM_REQUEST_TIMEOUT_MS),
+  })
+  const body = await response.json().catch(() => null)
+  return { status: response.status, body }
+}
+
+async function detectUpstreamApiFlavor(force = false) {
+  if (!force && upstreamApiFlavor !== 'unknown') return upstreamApiFlavor
+  if (!force && upstreamApiFlavorProbe) return upstreamApiFlavorProbe
+  upstreamApiFlavorProbe = (async () => {
+    try {
+      const probe = await callUpstreamRemote('session/list', { _request: {} })
+      upstreamApiFlavor = probe.status === 200
+        && probe.body?.result?.ok === true
+        && Array.isArray(probe.body?.result?.value?.items)
+        ? 'modern'
+        : 'legacy'
+      if (upstreamApiFlavor === 'modern' && probe.body?.result?.ok) {
+        updateModernSessions(probe.body.result.value?.items)
+      }
+    } catch {
+      upstreamApiFlavor = 'legacy'
+    } finally {
+      upstreamApiFlavorProbe = null
+    }
+    return upstreamApiFlavor
+  })()
+  return upstreamApiFlavorProbe
+}
+
+function updateModernSessions(items) {
+  if (!Array.isArray(items)) return
+  modernState.sessions.clear()
+  for (const item of items) {
+    if (!item?.sessionId) continue
+    modernState.sessions.set(item.sessionId, item)
+    const cursor = Number(item.projections?.asOfSeq)
+    if (Number.isSafeInteger(cursor) && cursor >= -1) modernState.sessionCursors.set(item.sessionId, cursor)
+  }
+}
+
+function legacyEnvelope(rpcId, result) {
+  return { rpcId, result }
+}
+
+function modernError(message, code = 'upstream-incompatible', details = {}) {
+  return { ok: false, error: { code, message, details } }
+}
+
+function legacyHistoryValue(value, summary) {
+  const records = Array.isArray(value?.records) ? value.records : []
+  return {
+    events: records.map(record => ({ event: record?.event })).filter(entry => entry.event),
+    hasMore: !!value?.hasMore,
+    ...(summary?.projections ? { projections: summary.projections } : {}),
+  }
+}
+
+async function refreshModernSessions() {
+  const response = await callUpstreamRemote('session/list', { _request: {} })
+  if (response.status === 200 && response.body?.result?.ok) updateModernSessions(response.body.result.value?.items)
+  return response
+}
+
+async function translateModernRpc(method, payload, rpcId) {
+  let endpoint = ''
+  let args = {}
+  let transform = value => value
+
+  if (method === 'host.describe') {
+    return legacyEnvelope(rpcId, { ok: true, value: { home: modernState.home || os.homedir(), canOpenPath: false } })
+  }
+  if (method === 'workspace.list') {
+    return legacyEnvelope(rpcId, { ok: true, value: modernState.workspaces })
+  }
+  if (method === 'session.list') {
+    const response = await refreshModernSessions()
+    return response.body || legacyEnvelope(rpcId, modernError('DSH session/list returned no JSON response'))
+  }
+  if (method === 'session.history') {
+    let summary = modernState.sessions.get(payload.sessionId)
+    if (!summary) {
+      await refreshModernSessions()
+      summary = modernState.sessions.get(payload.sessionId)
+    }
+    const throughSeq = modernState.sessionCursors.get(payload.sessionId) ?? Number(summary?.projections?.asOfSeq)
+    if (!Number.isSafeInteger(throughSeq) || throughSeq < -1) {
+      return legacyEnvelope(rpcId, modernError('DSH did not expose a history cursor for this session', 'session-not-found'))
+    }
+    endpoint = 'session/page'
+    args = { request: {
+      address: { kind: 'session', sessionId: payload.sessionId },
+      throughSeq,
+      ...(payload.beforeSeq === undefined ? {} : { beforeSeq: payload.beforeSeq }),
+      ...(payload.maxMessages === undefined ? {} : { maxMessages: payload.maxMessages }),
+    } }
+    transform = value => legacyHistoryValue(value, summary)
+  } else if (method === 'session.models') {
+    endpoint = 'session/modelCatalog'
+    args = {}
+    transform = catalog => {
+      const summary = modernState.sessions.get(payload.sessionId)
+      const projected = summary?.projections?.values?.modelSelection
+      const current = projected?.next || projected?.lastUsed || catalog?.default
+      return {
+        current,
+        routable: !!current && (!Array.isArray(catalog?.routableProviders) || catalog.routableProviders.includes(current.provider)),
+        groups: catalog?.groups || [],
+        failures: catalog?.failures || [],
+      }
+    }
+  } else if (method.startsWith('session.')) {
+    const verb = method.slice('session.'.length)
+    if (!['search', 'create', 'selectModel', 'rename', 'fork', 'prompt', 'attachment', 'updateQueue', 'cancel'].includes(verb)) return null
+    endpoint = 'session/' + verb
+    const request = verb === 'prompt' && !payload.requestId
+      ? { ...payload, requestId: crypto.randomUUID() }
+      : payload
+    args = verb === 'search' ? { request } : { request }
+  } else if (method.startsWith('workspace.')) {
+    const verb = method.slice('workspace.'.length)
+    if (!['create', 'rename', 'delete', 'insertBefore', 'insertSessionBefore', 'archiveSession'].includes(verb)) return null
+    endpoint = 'workspace/' + verb
+    args = { request: payload }
+  } else if (method.startsWith('goal.')) {
+    const verb = method.slice('goal.'.length)
+    if (!['create', 'edit', 'pause', 'resume', 'complete', 'clear'].includes(verb)) return null
+    endpoint = 'goals/' + verb
+    args = verb === 'create'
+      ? { agentId: payload.sessionId, request: { objective: payload.objective, ...(payload.maxGoalRounds === undefined ? {} : { maxGoalRounds: payload.maxGoalRounds }) } }
+      : { agentId: payload.sessionId, ref: payload.ref, ...(verb === 'edit' ? { request: { ...(payload.objective === undefined ? {} : { objective: payload.objective }), ...(payload.maxGoalRounds === undefined ? {} : { maxGoalRounds: payload.maxGoalRounds }) } } : {}) }
+    transform = value => verb === 'create'
+      ? value
+      : verb === 'clear'
+        ? { cleared: true }
+        : { ref: { id: value?.id, revision: value?.revision } }
+  } else if (method === 'subagent.list') {
+    endpoint = 'subagents/list'
+    args = { parentSessionId: payload.parentSessionId }
+  } else if (method === 'subagent.interrupt') {
+    endpoint = 'subagents/interruptByParent'
+    args = { childSessionId: payload.childSessionId, parentSessionId: payload.parentSessionId, mode: payload.mode }
+  } else if (method === 'settings.describe') {
+    endpoint = 'settings/describe'
+    args = {}
+  } else if (method === 'settings.mutate') {
+    endpoint = 'settings/mutate'
+    args = { ns: payload.ns, ops: payload.ops, expectedRevision: payload.expectedRevision }
+  } else if (method === 'settings.openDocument') {
+    endpoint = 'settings/openSettingsDocument'
+    args = {}
+  } else if (method.startsWith('credentials.')) {
+    const verb = method.slice('credentials.'.length)
+    if (!['describe', 'set', 'unset'].includes(verb)) return null
+    endpoint = 'credentials/' + verb
+    args = verb === 'describe' ? { refs: payload.refs } : verb === 'set' ? { ref: payload.ref, value: payload.value } : { ref: payload.ref }
+    if (verb !== 'describe') transform = () => ({})
+  } else if (method === 'llm.providers') {
+    endpoint = 'llm/listConfigurableProviders'
+    args = {}
+    transform = values => ({ providers: (Array.isArray(values) ? values : []).map(entry => ({
+      provider: entry.provider,
+      displayName: entry.displayName,
+      settingsNs: entry.settingsNs,
+      settingsPath: entry.settingsPath || [],
+      active: true,
+      ...(entry.declared === undefined ? {} : { declared: entry.declared }),
+    })) })
+  } else if (method === 'llm.discoverModels') {
+    endpoint = 'llm/discoverModels'
+    args = {
+      settingsNs: payload.settingsNs,
+      request: Object.fromEntries(Object.entries(payload).filter(([key, value]) => key !== 'settingsNs' && value !== undefined)),
+    }
+    transform = models => ({ models: Array.isArray(models) ? models : [] })
+  } else {
+    return null
+  }
+
+  const response = await callUpstreamRemote(endpoint, args, rpcId)
+  if (!response.body?.result?.ok) return response.body || legacyEnvelope(rpcId, modernError(`DSH ${endpoint} returned no JSON response`))
+  return legacyEnvelope(rpcId, { ok: true, value: transform(response.body.result.value) })
+}
+
 /** 递归截断超大字段，避免单条超大事件撑爆环形缓冲。 */
 function truncateEventValue(v, depth = 0) {
   if (typeof v === 'string') return v.length > EVENT_MAX_STRING ? v.slice(0, EVENT_MAX_STRING) + '…[truncated]' : v
@@ -1530,7 +1755,8 @@ function startEventCollector(kind) {
     if (stopped) return
     let current
     try {
-      current = new WebSocket(url)
+      const headers = dshUpstreamHeaders()
+      current = Object.keys(headers).length ? new WebSocket(url, { headers }) : new WebSocket(url)
       ws = current
     } catch (err) {
       state.lastError = String(err?.message || err)
@@ -1616,6 +1842,280 @@ function startEventCollector(kind) {
   }
 }
 
+function legacyPush(kind, payload, rpcId = crypto.randomUUID()) {
+  pushEvent(kind, { rpcId, payload })
+}
+
+function openModernSessionStream(ws, sessionId) {
+  if (!sessionId || ws.readyState !== 1) return
+  const streamId = 'session:' + sessionId
+  ws.send(JSON.stringify({
+    type: 'open', streamId, endpoint: 'session/follow',
+    payload: { args: { request: { address: { kind: 'session', sessionId } } } },
+  }))
+}
+
+function applyModernControlFrame(value) {
+  if (value?.type === 'baseline') {
+    for (const [sessionId, items] of Object.entries(value.value?.queues || {})) {
+      legacyPush('mux', { type: 'session/queue', sessionId, items })
+    }
+    for (const [sessionId, jobs] of Object.entries(value.value?.jobs || {})) {
+      legacyPush('mux', { type: 'session/jobs', sessionId, jobs })
+    }
+    for (const [sessionId, block] of Object.entries(value.value?.projections || {})) {
+      for (const [key, projection] of Object.entries(block?.values || {})) {
+        legacyPush('mux', { type: 'session/projection', sessionId, key, value: projection, seq: block?.asOfSeq ?? 0 })
+      }
+    }
+    return
+  }
+  if (value?.type === 'queue') legacyPush('mux', { type: 'session/queue', sessionId: value.sessionId, items: value.items || [] })
+  else if (value?.type === 'jobs') legacyPush('mux', { type: 'session/jobs', sessionId: value.sessionId, jobs: value.jobs || [] })
+  else if (value?.type === 'projection') legacyPush('mux', {
+    type: 'session/projection', sessionId: value.sessionId, key: value.key, value: value.value, seq: value.seq,
+  })
+}
+
+function applyModernWorkspaceFrame(value) {
+  if (value?.type === 'baseline') {
+    modernState.workspaces = {
+      items: Array.isArray(value.value?.items) ? value.value.items : [],
+      archivedSessionIds: Array.isArray(value.value?.archivedSessionIds) ? value.value.archivedSessionIds : [],
+    }
+    return
+  }
+  if (value?.type === 'upsert' && value.workspace) {
+    const items = modernState.workspaces.items.filter(item => item.workspaceId !== value.workspace.workspaceId)
+    items.push(value.workspace)
+    modernState.workspaces = { ...modernState.workspaces, items }
+    legacyPush('host', { type: 'host/workspace-changed', workspace: value.workspace })
+  } else if (value?.type === 'remove') {
+    modernState.workspaces = {
+      ...modernState.workspaces,
+      items: modernState.workspaces.items.filter(item => item.workspaceId !== value.workspaceId),
+    }
+    legacyPush('host', { type: 'host/workspace-removed', workspaceId: value.workspaceId })
+  } else if (value?.type === 'order') {
+    const byId = new Map(modernState.workspaces.items.map(item => [item.workspaceId, item]))
+    const ordered = (value.workspaceIds || []).map(id => byId.get(id)).filter(Boolean)
+    for (const item of modernState.workspaces.items) if (!value.workspaceIds?.includes(item.workspaceId)) ordered.push(item)
+    modernState.workspaces = { ...modernState.workspaces, items: ordered }
+    legacyPush('host', { type: 'host/workspace-order-changed', workspaceIds: value.workspaceIds || [] })
+  } else if (value?.type === 'archived') {
+    modernState.workspaces = { ...modernState.workspaces, archivedSessionIds: value.archivedSessionIds || [] }
+    legacyPush('host', { type: 'host/archived-sessions-changed', archivedSessionIds: value.archivedSessionIds || [] })
+  }
+}
+
+function applyModernSessionFrame(sessionId, value) {
+  if (value?.type === 'snapshot') {
+    modernState.sessionCursors.set(sessionId, value.cursor)
+    legacyPush('mux', { type: 'session/subscribed', sessionId, lastSeq: value.cursor })
+    for (const record of value.records || []) {
+      if (record?.event) legacyPush('mux', { type: 'session/event', sessionId, event: record.event })
+    }
+    for (const [key, projection] of Object.entries(value.projections?.values || {})) {
+      legacyPush('mux', { type: 'session/projection', sessionId, key, value: projection, seq: value.projections?.asOfSeq ?? value.cursor })
+    }
+    return
+  }
+  if (value?.type === 'event' && value.event) {
+    modernState.sessionCursors.set(sessionId, value.event.seq)
+    legacyPush('mux', { type: 'session/event', sessionId, event: value.event })
+  }
+}
+
+function resolveModernPendingEvent(eventId, cancelled = false) {
+  const pending = modernState.pendingEvents.get(eventId)
+  if (!pending) return
+  modernState.pendingEvents.delete(eventId)
+  if (pending.event === 'approval/request') {
+    legacyPush('mux', {
+      type: 'approval/resolved', sessionId: pending.sessionId, approvalId: eventId,
+      outcome: cancelled ? 'cancelled' : pending.outcome,
+    })
+  } else if (pending.event === 'user-questions/request') {
+    legacyPush('mux', {
+      type: 'question/resolved', sessionId: pending.sessionId, questionRpcId: eventId,
+      outcome: cancelled ? 'cancelled' : 'answered',
+    })
+  }
+}
+
+function applyModernRemoteEvent(ws, value) {
+  if (value?.type === 'ready') {
+    modernState.eventClientId = value.clientId || ''
+    modernState.home = value.host?.home || modernState.home
+    return
+  }
+  if (value?.type === 'cancel') {
+    resolveModernPendingEvent(value.eventId, true)
+    return
+  }
+  if (value?.type === 'waterfall') {
+    const sessionId = value.agentId
+    modernState.pendingEvents.set(value.eventId, { event: value.event, sessionId, outcome: '' })
+    if (value.event === 'approval/request') {
+      legacyPush('mux', {
+        type: 'approval/requested', sessionId, approvalId: value.eventId,
+        toolName: value.request?.toolName || '',
+        ...(value.request?.callId === undefined ? {} : { callId: value.request.callId }),
+        ...(value.request?.reason === undefined ? {} : { reason: value.request.reason }),
+      }, value.eventId)
+    } else if (value.event === 'user-questions/request') {
+      legacyPush('mux', { type: 'question/requested', sessionId, questions: value.request?.questions || [] }, value.eventId)
+    }
+    return
+  }
+  if (value?.type !== 'emit') return
+  const args = value.args || []
+  if (value.event === 'api-session/added') {
+    const summary = args[0]
+    if (summary?.sessionId) {
+      modernState.sessions.set(summary.sessionId, summary)
+      openModernSessionStream(ws, summary.sessionId)
+      legacyPush('host', {
+        type: 'host/session-added', sessionId: summary.sessionId, blank: !!summary.blank,
+        ...(summary.parentSessionId === undefined ? {} : { parentSessionId: summary.parentSessionId }),
+        ...(summary.origin === undefined ? {} : { origin: summary.origin }),
+        ...(summary.cwd === undefined ? {} : { cwd: summary.cwd }),
+      })
+    }
+  } else if (value.event === 'api-session/removed') {
+    modernState.sessions.delete(args[0])
+    modernState.sessionCursors.delete(args[0])
+    try { ws.send(JSON.stringify({ type: 'cancel', streamId: 'session:' + args[0] })) } catch {}
+    legacyPush('host', { type: 'host/session-removed', sessionId: args[0] })
+  } else if (value.event === 'api-session/status') {
+    legacyPush('host', { type: 'host/session-status', sessionId: args[0], running: !!args[1] })
+  } else if (value.event === 'api-session/error') {
+    legacyPush('host', { type: 'host/agent-error', sessionId: args[0], message: String(args[1] || '') })
+  } else {
+    legacyPush('host', { type: 'host/remote-event', event: value.event, args })
+  }
+}
+
+function startModernEventCollector() {
+  if (typeof WebSocket !== 'function') return null
+  let ws = null
+  let stopped = false
+  let retryTimer = null
+  let connectTimer = null
+  let attempt = 0
+  const scheme = UPSTREAM.protocol === 'https:' ? 'wss' : 'ws'
+  const url = `${scheme}://${UPSTREAM_AUTHORITY}/api/remote.mux`
+  const setConnected = (connected, error = '') => {
+    for (const state of Object.values(eventCollectorState)) {
+      state.connected = connected
+      if (connected) {
+        state.lastConnectAt = Date.now()
+        state.lastError = ''
+        state.attempt = 0
+      } else if (error) state.lastError = error
+    }
+  }
+  const schedule = () => {
+    if (stopped || retryTimer) return
+    const delay = Math.round(Math.min(1500 * Math.pow(2, attempt++), 60000) * (0.8 + Math.random() * 0.4))
+    retryTimer = setTimeout(() => { retryTimer = null; connect() }, delay)
+    retryTimer.unref?.()
+  }
+  const connect = () => {
+    if (stopped) return
+    let current
+    try {
+      const headers = dshUpstreamHeaders()
+      current = Object.keys(headers).length ? new WebSocket(url, { headers }) : new WebSocket(url)
+      ws = current
+    } catch (error) {
+      setConnected(false, String(error?.message || error))
+      schedule()
+      return
+    }
+    let finished = false
+    const finish = (code = 0, reason = '', error = '') => {
+      if (finished) return
+      finished = true
+      clearTimeout(connectTimer)
+      modernState.eventClientId = ''
+      setConnected(false, error)
+      for (const state of Object.values(eventCollectorState)) {
+        state.lastCloseCode = Number(code) || 0
+        state.lastCloseReason = String(reason || '')
+        state.reconnects++
+      }
+      if (ws === current) ws = null
+      if (!stopped) schedule()
+    }
+    connectTimer = setTimeout(() => {
+      finish(0, '', 'websocket connect timeout')
+      try { current.close() } catch {}
+    }, WS_UPGRADE_TIMEOUT_MS)
+    connectTimer.unref?.()
+    current.onopen = () => {
+      if (finished || stopped || ws !== current) return
+      clearTimeout(connectTimer)
+      attempt = 0
+      setConnected(true)
+      current.send(JSON.stringify({ type: 'open', streamId: 'events', endpoint: '$events', payload: { args: {} } }))
+      current.send(JSON.stringify({ type: 'open', streamId: 'control', endpoint: 'session/control', payload: { args: {} } }))
+      current.send(JSON.stringify({ type: 'open', streamId: 'workspaces', endpoint: 'workspace/follow', payload: { args: {} } }))
+      for (const sessionId of modernState.sessions.keys()) openModernSessionStream(current, sessionId)
+    }
+    current.onmessage = ev => {
+      try {
+        const data = typeof ev.data === 'string' ? ev.data : Buffer.isBuffer(ev.data) ? ev.data.toString() : String(ev.data)
+        const frame = JSON.parse(data)
+        if (frame.type === 'error') {
+          const message = frame.error?.message || 'modern stream error'
+          for (const state of Object.values(eventCollectorState)) state.lastError = message
+          legacyPush('mux', { type: 'stream/error', error: frame.error || { message } })
+          return
+        }
+        if (frame.type !== 'item') return
+        if (frame.streamId === 'events') applyModernRemoteEvent(current, frame.value)
+        else if (frame.streamId === 'control') applyModernControlFrame(frame.value)
+        else if (frame.streamId === 'workspaces') applyModernWorkspaceFrame(frame.value)
+        else if (frame.streamId.startsWith('session:')) applyModernSessionFrame(frame.streamId.slice(8), frame.value)
+      } catch {}
+    }
+    current.onclose = ev => finish(ev?.code, ev?.reason)
+    current.onerror = err => {
+      finish(0, '', String(err?.error?.message || err?.message || 'websocket error'))
+      try { current.close() } catch {}
+    }
+  }
+  connect()
+  return {
+    kind: 'modern',
+    reconnectNow() {
+      if (stopped || ws?.readyState === 0 || ws?.readyState === 1) return
+      clearTimeout(retryTimer)
+      retryTimer = null
+      attempt = 0
+      connect()
+    },
+    close() {
+      stopped = true
+      clearTimeout(retryTimer)
+      clearTimeout(connectTimer)
+      try { ws?.close() } catch {}
+    },
+  }
+}
+
+async function startCompatibleEventCollectors() {
+  if (await detectUpstreamApiFlavor() === 'modern') {
+    const collector = startModernEventCollector()
+    eventCollectors.mux = collector
+    eventCollectors.host = collector
+    return
+  }
+  eventCollectors.mux = startEventCollector('mux')
+  eventCollectors.host = startEventCollector('host')
+}
+
 // ---------- 统计 API ----------
 let statsScanning = false
 async function scanStatsOnce(delay) {
@@ -2048,6 +2548,7 @@ function upstreamReachable(cb) {
     port: UPSTREAM_PORT,
     method: 'GET',
     path: '/health',
+    headers: dshUpstreamHeaders(),
     timeout: 1500
   }, (res) => {
     res.resume()
@@ -2330,16 +2831,21 @@ async function loadFsWorkspaceRoots(force = false) {
   if (fsWorkspaceRootsFetch) return fsWorkspaceRootsFetch
   fsWorkspaceRootsFetch = (async () => {
     try {
-      const target = new URL('/api/workspace.list', UPSTREAM)
-      const res = await fetch(target, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({ type: 'client-request', rpcId: crypto.randomUUID(), method: 'workspace.list', payload: {} }),
-        signal: AbortSignal.timeout(Math.min(8000, UPSTREAM_REQUEST_TIMEOUT_MS)),
-      })
-      if (!res.ok) throw new Error(`workspace.list HTTP ${res.status}`)
-      const body = await res.json()
-      const value = body?.result?.ok ? body.result.value : null
+      let value
+      if (await detectUpstreamApiFlavor() === 'modern') {
+        value = modernState.workspaces
+      } else {
+        const target = new URL('/api/workspace.list', UPSTREAM)
+        const res = await fetch(target, {
+          method: 'POST',
+          headers: dshUpstreamHeaders({ 'content-type': 'application/json' }),
+          body: JSON.stringify({ type: 'client-request', rpcId: crypto.randomUUID(), method: 'workspace.list', payload: {} }),
+          signal: AbortSignal.timeout(Math.min(8000, UPSTREAM_REQUEST_TIMEOUT_MS)),
+        })
+        if (!res.ok) throw new Error(`workspace.list HTTP ${res.status}`)
+        const body = await res.json()
+        value = body?.result?.ok ? body.result.value : null
+      }
       const items = Array.isArray(value?.items) ? value.items : []
       const roots = [...new Set(items.map(fsWorkspacePath).filter(Boolean))]
       const reals = roots.map(root => { try { return fs.realpathSync(root) } catch { return null } }).filter(Boolean)
@@ -3263,38 +3769,84 @@ function serveWorkbench(req, res, url) {
 }
 
 // ---------- /api 代理 ----------
-function proxyApi(req, res, url) {
-  if (req.method === 'OPTIONS') {
-    cors(res)
-    res.writeHead(204)
-    res.end()
-    return
-  }
-  const ok = authorized(req, url)
-  touchDevice(req, ok ? {} : { failedAuth: true })
-  if (!ok) {
-    authFailures++
+async function proxyModernApi(req, res, url) {
+  if (req.method !== 'POST' || url.pathname.startsWith('/remote/')) return false
+  if (await detectUpstreamApiFlavor() !== 'modern') return false
+  let raw = ''
+  try {
+    raw = await new Promise((resolve, reject) => {
+      req.setEncoding('utf8')
+      req.on('data', chunk => {
+        raw += chunk
+        if (raw.length > 4 * 1024 * 1024) reject(new Error('request body too large'))
+      })
+      req.once('end', () => resolve(raw))
+      req.once('error', reject)
+      req.once('aborted', () => reject(new Error('request aborted')))
+    })
+    const body = JSON.parse(raw || '{}')
     cors(res)
-    res.writeHead(401, { 'content-type': 'application/json; charset=utf-8' })
-    res.end(JSON.stringify({ error: 'unauthorized' }))
-    return
+    if (url.pathname === '/api/respond') {
+      const eventId = body.rpcId
+      const pending = modernState.pendingEvents.get(eventId)
+      if (!pending || !modernState.eventClientId) {
+        res.writeHead(200, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+        res.end(JSON.stringify({ accepted: false }))
+        return true
+      }
+      const value = body.result?.value
+      const answer = pending.event === 'approval/request' ? value?.outcome : value?.answer
+      pending.outcome = answer
+      const response = await callUpstreamRemote('$events/result', {
+        clientId: modernState.eventClientId,
+        eventId,
+        outcome: { kind: 'result', value: answer },
+      })
+      const accepted = response.status === 200 && response.body?.result?.ok === true
+      if (accepted) resolveModernPendingEvent(eventId, false)
+      res.writeHead(200, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+      res.end(JSON.stringify({ accepted }))
+      return true
+    }
+    if (body.type !== 'client-request' || typeof body.rpcId !== 'string' || typeof body.method !== 'string') {
+      res.writeHead(400, { 'content-type': 'application/json; charset=utf-8' })
+      res.end(JSON.stringify({ error: 'bad-request' }))
+      return true
+    }
+    const translated = await translateModernRpc(body.method, body.payload || {}, body.rpcId)
+    if (translated === null) {
+      res.writeHead(404, { 'content-type': 'application/json; charset=utf-8' })
+      res.end(JSON.stringify(legacyEnvelope(body.rpcId, modernError(`Remote method ${body.method} is unavailable on this DSH version`, 'method-unavailable'))))
+      return true
+    }
+    res.writeHead(200, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+    res.end(JSON.stringify(translated))
+    return true
+  } catch (error) {
+    if (!res.headersSent) {
+      cors(res)
+      res.writeHead(502, { 'content-type': 'application/json; charset=utf-8' })
+    }
+    if (!res.writableEnded) res.end(JSON.stringify({ error: 'upstream-incompatible', detail: String(error?.message || error) }))
+    return true
   }
+}
 
+function proxyLegacyApi(req, res, url) {
   const headers = {}
   for (const [k, v] of Object.entries(req.headers)) {
     if (v === undefined) continue
     const key = k.toLowerCase()
-    if (['host', 'authorization', 'connection', 'keep-alive', 'transfer-encoding', 'upgrade',
+    if (['host', 'authorization', 'cookie', 'connection', 'keep-alive', 'transfer-encoding', 'upgrade',
       'proxy-connection', 'accept-encoding', 'origin', 'referer',
       'sec-fetch-site', 'sec-fetch-mode', 'sec-fetch-dest', 'sec-fetch-user',
       'x-dsh-remote-client'].includes(key)) continue
     headers[k] = v
   }
   headers.host = UPSTREAM.host
+  Object.assign(headers, dshUpstreamHeaders())
   // /remote/* 由 DSH 插件端点处理；插件侧用网关自身 token 鉴权。
-  if (url.pathname.startsWith('/remote/')) {
-    headers.authorization = 'Bearer ' + TOKEN
-  }
+  if (url.pathname.startsWith('/remote/')) headers.authorization = 'Bearer ' + TOKEN
 
   let responseDone = false
   const upstreamReq = UPSTREAM_TRANSPORT.request({
@@ -3336,6 +3888,31 @@ function proxyApi(req, res, url) {
   req.pipe(upstreamReq)
 }
 
+function proxyApi(req, res, url) {
+  if (req.method === 'OPTIONS') {
+    cors(res)
+    res.writeHead(204)
+    res.end()
+    return
+  }
+  const ok = authorized(req, url)
+  touchDevice(req, ok ? {} : { failedAuth: true })
+  if (!ok) {
+    authFailures++
+    cors(res)
+    res.writeHead(401, { 'content-type': 'application/json; charset=utf-8' })
+    res.end(JSON.stringify({ error: 'unauthorized' }))
+    return
+  }
+  void proxyModernApi(req, res, url).then(handled => {
+    if (!handled) proxyLegacyApi(req, res, url)
+  }).catch(error => {
+    cors(res)
+    if (!res.headersSent) res.writeHead(502, { 'content-type': 'application/json; charset=utf-8' })
+    if (!res.writableEnded) res.end(JSON.stringify({ error: 'upstream-unreachable', detail: String(error?.message || error) }))
+  })
+}
+
 // ---------- 其它 ----------
 async function serveHealth(req, res, url) {
   const eventHealth = Object.fromEntries(Object.entries(eventCollectorState).map(([kind, state]) => [kind, {
@@ -3364,7 +3941,7 @@ async function serveHealth(req, res, url) {
     const ctrl = new AbortController()
     timer = setTimeout(() => ctrl.abort(), 5000)
     const probeUrl = new URL(DSH_HEALTH_PATH, UPSTREAM).toString()
-    const probe = await fetch(probeUrl, { signal: ctrl.signal, cache: 'no-store' })
+    const probe = await fetch(probeUrl, { headers: dshUpstreamHeaders(), signal: ctrl.signal, cache: 'no-store' })
     upstreamReachable = true
     upstreamStatus = probe.status
     upstreamOk = probe.ok
@@ -3637,7 +4214,7 @@ server.on('upgrade', (req, socket, head) => {
   for (const [k, v] of Object.entries(req.headers)) {
     if (v === undefined) continue
     const key = k.toLowerCase()
-    if (['host', 'authorization', 'connection', 'upgrade', 'sec-websocket-key',
+    if (['host', 'authorization', 'cookie', 'connection', 'upgrade', 'sec-websocket-key',
       'sec-websocket-version', 'sec-websocket-extensions', 'sec-websocket-protocol',
       'proxy-connection', 'accept-encoding', 'origin', 'referer',
       'sec-fetch-site', 'sec-fetch-mode', 'sec-fetch-dest', 'sec-fetch-user',
@@ -3645,6 +4222,7 @@ server.on('upgrade', (req, socket, head) => {
     headers[k] = v
   }
   headers.host = UPSTREAM.host
+  Object.assign(headers, dshUpstreamHeaders())
   headers.connection = 'Upgrade'
   headers.upgrade = 'websocket'
   if (req.headers['sec-websocket-key']) headers['sec-websocket-key'] = req.headers['sec-websocket-key']
@@ -3747,8 +4325,7 @@ server.listen(PORT, HOST, () => {
   }
   console.log('  上游:  ' + UPSTREAM.origin + '  (Ctrl+C 退出)')
   // 事件轮询缓冲：网关自身上游 WS 采集，断线自动重连
-  eventCollectors.mux = startEventCollector('mux')
-  eventCollectors.host = startEventCollector('host')
+  void startCompatibleEventCollectors()
   // 启动 8 秒后首查, 之后每 6 小时查一次 GitHub/镜像最新版
   setTimeout(() => checkForUpdates(false), 8000)
   setInterval(() => checkForUpdates(false), UPDATE_INTERVAL_MS)

package/index.mjs

@@ -6,7 +6,7 @@
  * 浏览器侧入口由 client half 注册在 DSH 原生侧边栏(见 client.js)。
  */
 import { execFileSync, spawn } from 'node:child_process'
-import { appendFileSync, createReadStream, existsSync, mkdirSync, openSync, readFileSync, writeFileSync } from 'node:fs'
+import { appendFileSync, chmodSync, createReadStream, existsSync, mkdirSync, openSync, readFileSync, writeFileSync } from 'node:fs'
 import { stat } from 'node:fs/promises'
 import net from 'node:net'
 import { homedir, hostname, networkInterfaces } from 'node:os'
@@ -14,7 +14,7 @@ import { dirname, extname, normalize, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 export const name = 'dsh-remote'
-export const inject = ['webServer', 'commands', 'agents']
+export const inject = ['webServer', 'commands', 'agents', 'connection']
 
 const MOUNT = '/remote'
 const PUBLIC_DIR = fileURLToPath(new URL('./public/', import.meta.url))
@@ -68,6 +68,42 @@ try {
 
 // DSH 实际监听地址由 apply 时从 webServer 服务读取
 let dshListen = { host: '127.0.0.1', port: 3080 }
+let dshConnection = null
+
+function dshUpstreamCookieFile() {
+  return process.env.DSH_REMOTE_DSH_COOKIE_FILE || `${homedir()}/.dsh-remote/dsh-upstream.cookie`
+}
+
+/**
+ * DSH 0.1.2-alpha.1 起，Host RPC 与 WebSocket 都要求浏览器会话 Cookie。
+ * 新版 connection 服务可把仅进程内可见的启动令牌兑换为 Cookie；旧版没有
+ * authenticatedUrl，直接跳过即可。文件只让同一用户的独立网关读取。
+ */
+async function refreshDshUpstreamCookie() {
+  if (typeof dshConnection?.authenticatedUrl !== 'function') return false
+  const upstream = `http://${dshListen.host}:${dshListen.port}`
+  try {
+    const loginUrl = dshConnection.authenticatedUrl(upstream)
+    const response = await fetch(loginUrl, {
+      redirect: 'manual',
+      signal: AbortSignal.timeout(2500),
+    })
+    const setCookie = response.headers.get('set-cookie') || ''
+    const cookie = setCookie.split(';', 1)[0].trim()
+    if (response.status !== 303 || !cookie.includes('=') || cookie.length > 4096 || /[\0\r\n]/.test(cookie)) {
+      throw new Error(`认证交换返回 HTTP ${response.status}`)
+    }
+    const file = dshUpstreamCookieFile()
+    mkdirSync(dirname(file), { recursive: true })
+    writeFileSync(file, cookie + '\n', { mode: 0o600 })
+    chmodSync(file, 0o600)
+    return true
+  } catch (e) {
+    // 禁止记录带启动令牌的 URL 或 Cookie，只保留不含凭据的错误摘要。
+    logGateway('刷新 DSH 上游认证失败: ' + (e?.message || String(e)))
+    return false
+  }
+}
 
 function lanIPs() {
   const out = [...configuredAdvertisedHosts()]
@@ -169,6 +205,7 @@ function runExit(cmd, args) {
 
 const GATEWAY_ENV_KEYS = [
   'TOKEN', 'TOKEN_FILE', 'DSH_REMOTE_TOKEN', 'DSH_REMOTE_DEVICE_KEYS', 'DSH_REMOTE_FS_ROOT', 'DSH_REMOTE_FS_WORKSPACE_CACHE_MS', 'DSH_REMOTE_FS_MAX_UPLOAD',
+  'DSH_REMOTE_DSH_COOKIE_FILE',
   'DSH_REMOTE_NOTES', 'DSH_REMOTE_WORKBENCH', 'DSH_REMOTE_ADVERTISE_HOSTS', 'DSH_REMOTE_DSH_SERVICE', 'DSH_REMOTE_SYSTEMCTL', 'DSH_REMOTE_DSH_CONTROL_MODE',
   'DSH_REMOTE_DSH_CONTROL_TIMEOUT_MS', 'DSH_REMOTE_DSH_CONTROL_POLL_MS', 'DSH_REMOTE_FEEDBACK_URL',
   'UPDATE_CHECK_URL', 'UPDATE_INTERVAL_MS', 'UPDATE_PROXY', 'DSH_HEALTH_PATH',
@@ -363,6 +400,7 @@ function ensureGateway() {
   if (ensurePromise) return ensurePromise
   ensurePromise = (async () => {
     try {
+      await refreshDshUpstreamCookie()
       const health = await gatewayRunning()
       if (!health.running) {
         const out = await startGateway()
@@ -740,7 +778,9 @@ async function serveStatic(req, res, ctx) {
         commandNames = ['list-error: ' + (e?.message || String(e))]
       }
       const signal = AbortSignal.timeout(30000)
-      const result = await ctx.commands.execute(agent, line, signal)
+      const result = ctx.commands.execute.length === 3
+        ? await ctx.commands.execute(agent, line, signal)
+        : await ctx.commands.execute(agent, line, [], signal)
       sendJson(res, 200, { ok: true, executed: result !== undefined, debug: { resolvePath, commandNames } })
     } catch (e) {
       sendJson(res, 200, { ok: false, message: e?.message || String(e) })
@@ -783,6 +823,7 @@ async function serveStatic(req, res, ctx) {
 
 export function apply(ctx) {
   dshListen = { host: ctx.webServer.host, port: ctx.webServer.port }
+  dshConnection = ctx.connection
   ctx.effect(() => ctx.webServer.register({
     kind: 'prefix',
     path: MOUNT,
@@ -794,4 +835,10 @@ export function apply(ctx) {
   })
   // DSH 启动/重启后自愈: 用户没关过网关就自动拉起(默认开, DSH_REMOTE_AUTOSTART=0 关闭)
   void ensureGateway()
+  // apply 可能早于 Web 监听完成；延迟再交换一次新版 DSH 的会话 Cookie。
+  ctx.effect(() => {
+    const timer = setTimeout(() => { void ensureGateway() }, 5000)
+    timer.unref?.()
+    return () => clearTimeout(timer)
+  }, 'dsh-remote: refresh upstream authentication')
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-plugin",
-  "version": "0.6.19",
+  "version": "0.6.20",
   "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控；网关提供 /fs/* 文件传输端点(列表/断点下载/上传)，配合 Android App 远程操控会话/审批/提问/goal 与文件互传(多服务器测速切换、聊天记录离线缓存)。",
   "type": "module",
   "main": "./index.mjs",

package/public/app.js

@@ -2108,6 +2108,7 @@ async function openSession(id) {
   renderSessionTitle(); renderSessionSub(); updateCancelBtn(); updateSessionStatus()
   $('history').innerHTML = '<div class="empty">' + t('history.loading') + '</div>'
   renderQueue()
+  renderSessionPending()
   restoreCachedHistory()
   await loadHistory(true)
   renderSessionCards()
@@ -2140,6 +2141,7 @@ async function closeSession() {
     const discard = await shouldDiscardEmptySession(sessionId)
     if (state.current !== sessionId) return
     state.current = null
+    renderSessionPending()
     if (discard) removeLocalSessionRecord(sessionId)
     setComposerFullscreen(false)
     clearComposerImages()
@@ -3329,7 +3331,7 @@ function renderOverview() {
   $('overview-attention-list').innerHTML = pending.length ? pending.slice(0, 3).map(({ kind, item }) => {
     const title = titleOf(state.byId.get(item.sessionId))
     if (kind === 'approval') return `<div class="overview-attention-item" data-overview-approval="${esc(item.approvalId)}">
-      <span class="overview-item-mark">⌁</span><span class="overview-item-copy"><span class="overview-item-title">${esc(item.toolName || t('tool.default'))}</span><span class="overview-item-desc">${esc(item.reason || t('pending.noReason'))} · ${esc(title)}</span></span>
+      <span class="overview-item-mark">⌁</span><span class="overview-item-copy"><span class="overview-item-title">${esc(item.toolName || t('tool.default'))}</span><span class="overview-item-desc">${esc(approvalDetail(item))} · ${esc(title)}</span></span>
       <span class="overview-item-actions"><button type="button" class="mini-btn" data-overview-approve="1">${t('pending.allow')}</button><button type="button" class="mini-btn" data-overview-approve="0">${t('pending.reject')}</button></span>
     </div>`
     return `<button type="button" class="overview-attention-item question" data-overview-question="${esc(item.rpcId)}">
@@ -3394,7 +3396,7 @@ function renderPending() {
       const title = titleOf(state.byId.get(a.sessionId))
       return `<div class="pending-card approval" data-approval="${esc(a.approvalId)}">
         <div class="pc-title">${esc(t('pending.approvalTitle', { tool: a.toolName || t('tool.default') }))}</div>
-        <div class="pc-desc">${esc(a.reason || t('pending.noReason'))}</div>
+        <div class="pc-desc">${esc(approvalDetail(a))}</div>
         <div class="pc-session">${esc(title)}</div>
         <div class="goal-actions"><button class="mini-btn" data-approve="1">${t('pending.allow')}</button><button class="mini-btn" data-approve="0">${t('pending.reject')}</button></div>
       </div>`
@@ -3414,10 +3416,48 @@ function renderPending() {
   })
   list.querySelectorAll('[data-question]').forEach(btn =>
     btn.addEventListener('click', () => openQuestionModal(state.questions.find(q => q.rpcId === btn.dataset.question))))
+  renderSessionPending()
   updatePendingBadge()
   renderOverview()
 }
 
+function approvalDetail(a) {
+  const lines = []
+  if (a?.reason) lines.push(String(a.reason))
+  if (a?.arguments !== undefined) lines.push(safeJson(a.arguments))
+  if (a?.callId) lines.push(`callId: ${a.callId}`)
+  return lines.join('\n') || t('pending.noReason')
+}
+
+function renderSessionPending() {
+  const box = $('session-pending')
+  if (!box) return
+  const sessionId = state.current
+  const items = [
+    ...state.approvals.filter(a => a.sessionId === sessionId).map(a => ({ kind: 'approval', item: a })),
+    ...state.questions.filter(q => q.sessionId === sessionId).map(q => ({ kind: 'question', item: q }))
+  ]
+  box.classList.toggle('hidden', !sessionId || !items.length)
+  if (!sessionId || !items.length) { box.innerHTML = ''; return }
+  box.innerHTML = `<div class="session-pending-head"><span>${esc(t('overview.attention'))}</span><span>${esc(t('pending.count', { n: items.length }))}</span></div><div class="session-pending-list">${items.map(({ kind, item }) => {
+    if (kind === 'approval') return `<article class="pending-card approval" data-session-approval="${esc(item.approvalId)}">
+      <div class="pc-title">${esc(item.toolName || t('tool.default'))}</div>
+      <div class="pc-desc">${esc(approvalDetail(item))}</div>
+      <div class="goal-actions"><button type="button" class="mini-btn" data-session-approve="1">${t('pending.allow')}</button><button type="button" class="mini-btn" data-session-approve="0">${t('pending.reject')}</button></div>
+    </article>`
+    return `<article class="pending-card question" data-session-question="${esc(item.rpcId)}">
+      <div class="pc-title">❓ ${esc((item.questions || []).map(question => question.question).filter(Boolean).join(' / ') || t('notify.questionTitle'))}</div>
+      <div class="goal-actions"><button type="button" class="mini-btn" data-session-answer>${t('pending.answer')}</button></div>
+    </article>`
+  }).join('')}</div>`
+  box.querySelectorAll('[data-session-approve]').forEach(button => {
+    button.addEventListener('click', () => approveApproval(button.closest('[data-session-approval]')?.dataset.sessionApproval || '', button.dataset.sessionApprove === '1'))
+  })
+  box.querySelectorAll('[data-session-answer]').forEach(button => {
+    button.addEventListener('click', () => openQuestionModal(state.questions.find(q => q.rpcId === button.closest('[data-session-question]')?.dataset.sessionQuestion)))
+  })
+}
+
 async function approveApproval(id, allow) {
   const a = state.approvals.find(x => x.approvalId === id)
   if (!a) return

package/public/desktop/desktop.css

@@ -225,15 +225,15 @@ html.reorder-scroll-lock body { overscroll-behavior: none; }
 .ds-overview-attention-list, .ds-overview-session-list { display:flex; flex-direction:column; gap:8px; }
 .ds-overview-attention-item, .ds-overview-session-item { width:100%; min-width:0; display:flex; align-items:center; gap:10px; padding:11px 12px; border:1px solid var(--dsr-line); border-radius:12px; background:var(--dsr-bg-2); color:var(--dsr-text); text-align:left; }
 button.ds-overview-attention-item, button.ds-overview-session-item { cursor:pointer; font:inherit; }
-.ds-overview-attention-item { border-left:3px solid var(--dsr-warning); }
+.ds-overview-attention-item { align-items:flex-start; border-left:3px solid var(--dsr-warning); }
 .ds-overview-attention-item.question { border-left-color:var(--dsr-accent-2); }
 .ds-overview-mark { flex:0 0 auto; width:26px; height:26px; display:grid; place-items:center; border-radius:8px; background:var(--dsr-warning-soft); color:var(--dsr-warning); font-size:12px; }
 .ds-overview-attention-item.question .ds-overview-mark { background:var(--dsr-accent-2-soft); color:var(--dsr-accent-2); }
 .ds-overview-copy { flex:1; min-width:0; }
-.ds-overview-item-title, .ds-overview-item-desc { display:block; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+.ds-overview-item-title, .ds-overview-item-desc { display:block; line-height:1.45; overflow-wrap:anywhere; word-break:break-word; }
 .ds-overview-item-title { font-size:12px; font-weight:650; }
-.ds-overview-item-desc { margin-top:3px; color:var(--dsr-muted); font-size:11px; }
-.ds-overview-actions { flex:0 0 auto; display:flex; gap:4px; }
+.ds-overview-item-desc { margin-top:3px; color:var(--dsr-muted); font-size:11px; white-space:normal; }
+.ds-overview-actions { flex:0 0 auto; display:flex; flex-wrap:wrap; justify-content:flex-end; gap:4px; }
 .ds-overview-actions .ds-btn { min-height:27px; padding:2px 8px; font-size:11px; }
 .ds-overview-actions .allow { background:var(--dsr-success-soft); border-color:var(--dsr-success-line); color:var(--dsr-success); }
 .ds-overview-actions .reject { background:var(--dsr-warning-soft); border-color:var(--dsr-warning-line); color:var(--dsr-warning); }
@@ -287,6 +287,11 @@ button.ds-overview-attention-item, button.ds-overview-session-item { cursor:poin
 .ds-presets-guide { padding: 2px 8px 10px; font-size: 11px; line-height: 1.5; }
 .ds-session-cards { flex: none; max-height: 220px; overflow-y: auto; padding: 10px 22px 0; display: flex; flex-direction: column; gap: 8px; }
 .ds-session-cards:empty { display: none; }
+.ds-session-pending { flex:none; margin:10px 22px 0; padding:10px; border:1px solid var(--dsr-warning-line); border-radius:13px; background:var(--dsr-warning-soft); }
+.ds-session-pending-head { display:flex; align-items:center; justify-content:space-between; gap:8px; margin-bottom:8px; color:var(--dsr-text); font-size:12px; font-weight:750; }
+.ds-session-pending-list { display:flex; flex-direction:column; gap:8px; }
+.ds-session-pending .ds-notif-card { min-width:0; box-shadow:none; animation:none; }
+.ds-session-pending .ds-notif-title, .ds-session-pending .ds-notif-body { overflow-wrap:anywhere; word-break:break-word; }
 .ds-card { background: var(--dsr-panel); border: 1px solid var(--dsr-line); border-radius: 12px; padding: 10px 12px; }
 .ds-card-title { font-size: 11px; font-weight: 700; color: var(--dsr-muted); letter-spacing: .6px; margin-bottom: 6px; text-transform: uppercase; }
 .ds-goal-disclosure { width: 100%; min-width: 0; display: flex; justify-content: flex-end; }

package/public/desktop/desktop.html

@@ -151,6 +151,7 @@
         <section id="view-chat" class="ds-view">
           <div id="session-cards" class="ds-session-cards"></div>
           <div id="queue-dock" class="ds-queue-dock hidden" aria-live="polite"></div>
+          <section id="session-pending" class="ds-session-pending hidden" aria-live="polite"></section>
           <div id="history" class="ds-history" aria-live="polite"></div>
           <div class="ds-composer">
             <div id="composer-status" class="ds-composer-status hidden" role="status" aria-live="polite"><span class="ds-composer-status-dot" aria-hidden="true"></span><span data-i18n="ds.composerRunning">运行中…</span></div>

package/public/desktop/desktop.js

@@ -1566,6 +1566,7 @@ async function openSession(id) {
   renderSessions()
   renderSessionCards()
   renderQueue()
+  renderSessionPendingDesktop()
   updateComposerStatus()
   await loadHistory()
 }
@@ -1576,6 +1577,7 @@ function closeSession() {
   const cards = $('session-cards')
   if (cards) cards.innerHTML = ''
   renderQueue()
+  renderSessionPendingDesktop()
   updateComposerStatus()
   updateSessionActions()
   showView('view-sessions')
@@ -2010,6 +2012,39 @@ function serverLabel() {
   const cur = currentServerEntry()
   return cur ? (cur.note || cur.url) : (state.server || location.host)
 }
+function desktopApprovalDetail(a) {
+  const lines = []
+  if (a?.reason) lines.push(String(a.reason))
+  if (a?.arguments !== undefined) lines.push(safeJson(a.arguments))
+  if (a?.callId) lines.push(`callId: ${a.callId}`)
+  return lines.join('\n') || t('ds.approvalReason', { reason: '' })
+}
+function renderSessionPendingDesktop() {
+  const box = $('session-pending')
+  if (!box) return
+  const sessionId = state.current
+  const items = [
+    ...state.approvals.filter(a => a.sessionId === sessionId).map(a => ({ kind: 'approval', item: a })),
+    ...state.questions.filter(q => q.sessionId === sessionId).map(q => ({ kind: 'question', item: q }))
+  ]
+  box.classList.toggle('hidden', !sessionId || !items.length)
+  if (!sessionId || !items.length) { box.innerHTML = ''; return }
+  box.innerHTML = `<div class="ds-session-pending-head"><span>${esc(t('ds.attention'))}</span><span>${items.length}</span></div><div class="ds-session-pending-list">${items.map(({ kind, item }) => {
+    if (kind === 'approval') return `<article class="ds-notif-card" data-session-approval="${esc(item.approvalId)}">
+      <div class="ds-notif-head">🔐 ${t('ds.approvalTitle')}</div>
+      <div class="ds-notif-title">${esc(item.toolName || t('ds.toolDefault'))}</div>
+      <div class="ds-notif-body">${esc(desktopApprovalDetail(item))}</div>
+      <div class="ds-notif-actions"><button type="button" class="ds-btn allow" data-session-approve="1">${t('ds.allow')}</button><button type="button" class="ds-btn reject" data-session-approve="0">${t('ds.reject')}</button></div>
+    </article>`
+    return `<article class="ds-notif-card question" data-session-question="${esc(item.rpcId)}">
+      <div class="ds-notif-head">❓ ${t('ds.questionNotify')}</div>
+      <div class="ds-notif-title">${esc((item.questions || []).map(question => question.question).filter(Boolean).join(' / '))}</div>
+      <div class="ds-notif-actions"><button type="button" class="ds-btn" data-session-answer>${t('ds.submit')}</button></div>
+    </article>`
+  }).join('')}</div>`
+  box.querySelectorAll('[data-session-approve]').forEach(button => button.addEventListener('click', () => approveApproval(button.closest('[data-session-approval]')?.dataset.sessionApproval || '', button.dataset.sessionApprove === '1')))
+  box.querySelectorAll('[data-session-answer]').forEach(button => button.addEventListener('click', () => openQuestionModal(state.questions.find(q => q.rpcId === button.closest('[data-session-question]')?.dataset.sessionQuestion))))
+}
 function renderNotifStack() {
   const stack = $('notif-stack')
   const items = [
@@ -2019,7 +2054,7 @@ function renderNotifStack() {
   stack.innerHTML = items.map(it => {
     if (it.kind === 'approval') {
       const a = it.a
-      const reason = a.reason || a.arguments ? safeJson(a.arguments ?? a.reason ?? '') : ''
+      const reason = desktopApprovalDetail(a)
       return `<div class="ds-notif-card" data-approval="${esc(a.approvalId)}" tabindex="0">
         <div class="ds-notif-head">🔐 ${t('ds.approvalTitle')} · ${esc(serverLabel())} · ${fmtTime(a.time || Date.now())}</div>
         <div class="ds-notif-title">${esc(a.toolName || t('ds.toolDefault'))}</div>
@@ -2050,6 +2085,7 @@ function renderNotifStack() {
   stack.querySelectorAll('.ds-notif-card').forEach(card => card.addEventListener('keydown', (e) => {
     if (e.key === 'Escape') toast(t('ds.ignored'), 'ok')
   }))
+  renderSessionPendingDesktop()
   renderOverviewDesktop()
 }
 async function approveApproval(id, allow) {
@@ -2708,7 +2744,7 @@ function renderOverviewDesktop() {
   $('ds-overview-attention-list').innerHTML = pending.length ? pending.slice(0, 4).map(({ kind, item }) => {
     const title = titleOf(state.byId.get(item.sessionId))
     if (kind === 'approval') return `<div class="ds-overview-attention-item" data-ds-overview-approval="${esc(item.approvalId)}">
-      <span class="ds-overview-mark">⌁</span><span class="ds-overview-copy"><span class="ds-overview-item-title">${esc(item.toolName || t('ds.toolDefault'))}</span><span class="ds-overview-item-desc">${esc(item.reason || t('ds.approvalReason', { reason: '' }))} · ${esc(title)}</span></span>
+      <span class="ds-overview-mark">⌁</span><span class="ds-overview-copy"><span class="ds-overview-item-title">${esc(item.toolName || t('ds.toolDefault'))}</span><span class="ds-overview-item-desc">${esc(desktopApprovalDetail(item))} · ${esc(title)}</span></span>
       <span class="ds-overview-actions"><button class="ds-btn allow" data-ds-overview-approve="1">${t('ds.allow')}</button><button class="ds-btn reject" data-ds-overview-approve="0">${t('ds.reject')}</button></span>
     </div>`
     return `<button type="button" class="ds-overview-attention-item question" data-ds-overview-question="${esc(item.rpcId)}">

package/public/index.html

@@ -104,6 +104,8 @@
 
       <div id="queue-dock" class="queue-dock hidden" aria-live="polite"></div>
 
+      <section id="session-pending" class="session-pending hidden" aria-live="polite"></section>
+
       <div class="section-head small">
         <span data-i18n="session.history">对话</span>
         <span id="history-hint" class="muted"></span>

package/public/styles.css

@@ -424,6 +424,13 @@ body.in-session .view {
 .queue-dock-item:last-child { border-bottom: 0; }
 .queue-dock-preview { flex: 1; min-width: 0; color: var(--dsr-text); font-size: 13px; line-height: 1.4; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
 .queue-dock-action { flex: 0 0 auto; }
+.session-pending { flex:0 0 auto; margin:0 0 10px; padding:10px; border:1px solid var(--dsr-warning-line); border-radius:13px; background:var(--dsr-warning-soft); }
+.session-pending-head { display:flex; align-items:center; justify-content:space-between; gap:8px; margin-bottom:8px; color:var(--dsr-text); font-size:12px; font-weight:750; }
+.session-pending-list { display:flex; flex-direction:column; gap:8px; }
+.session-pending .pending-card { min-width:0; background:var(--dsr-panel); }
+.session-pending .pc-title { line-height:1.45; overflow-wrap:anywhere; word-break:break-word; }
+.session-pending .pc-desc { line-height:1.5; white-space:pre-wrap; overflow-wrap:anywhere; }
+.session-pending .goal-actions { justify-content:flex-end; }
 .md-table-wrap { max-width: 100%; overflow-x: auto; margin: 8px 0; }
 .md-table-wrap table { width: max-content; min-width: 100%; border-collapse: collapse; font-size: .94em; }
 .md-table-wrap th, .md-table-wrap td { padding: 6px 9px; border: 1px solid var(--dsr-line); text-align: left; white-space: nowrap; }
@@ -711,16 +718,17 @@ body.in-session .main { padding-bottom: 0; }
 .overview-section-meta { color:var(--dsr-muted); font-size:11px; font-weight:500; }
 .overview-attention-list, .overview-session-list { display:flex; flex-direction:column; gap:7px; }
 .overview-attention-item, .overview-session-item { width:100%; display:flex; align-items:center; gap:10px; min-width:0; padding:11px 12px; border:1px solid var(--dsr-line); border-radius:13px; background:var(--dsr-panel); color:var(--dsr-text); text-align:left; }
+.overview-attention-item { align-items:flex-start; }
 button.overview-attention-item, button.overview-session-item { cursor:pointer; }
 .overview-attention-item { border-left:3px solid var(--dsr-warning); }
 .overview-attention-item.question { border-left-color:var(--dsr-accent-2); }
 .overview-item-mark { flex:0 0 auto; width:25px; height:25px; display:grid; place-items:center; border-radius:8px; background:var(--dsr-warning-soft); color:var(--dsr-warning); font-size:12px; }
 .overview-attention-item.question .overview-item-mark { background:var(--dsr-accent-2-soft); color:var(--dsr-accent-2); }
 .overview-item-copy { min-width:0; flex:1; }
-.overview-item-title { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; font-size:12.5px; font-weight:650; }
-.overview-item-desc { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; margin-top:2px; color:var(--dsr-muted); font-size:11px; }
+.overview-item-title { font-size:12.5px; font-weight:650; line-height:1.45; overflow-wrap:anywhere; word-break:break-word; }
+.overview-item-desc { margin-top:3px; color:var(--dsr-muted); font-size:11px; line-height:1.45; white-space:normal; overflow-wrap:anywhere; }
 .overview-item-arrow { color:var(--dsr-muted); font-size:18px; }
-.overview-item-actions { flex:0 0 auto; display:flex; gap:4px; }
+.overview-item-actions { flex:0 0 auto; display:flex; flex-wrap:wrap; justify-content:flex-end; gap:4px; }
 .overview-item-actions .mini-btn { padding:4px 7px; font-size:10px; }
 .overview-metric-grid { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:7px; }
 .overview-metric { min-width:0; padding:11px 12px; border:1px solid var(--dsr-line); border-radius:13px; background:var(--dsr-panel); }

package/public/update.json

@@ -1,10 +1,14 @@
 {
-  "version": "0.6.19",
+  "version": "0.6.20",
   "apkUrl": "dsh-remote.apk",
-  "sha256": "d79c732efa12a8f303a89fd9e707fdcd4c0e30a29515b222157ae48a6c07260b",
-  "releasedAt": "2026-08-30T04:41:52.453Z",
-  "notes": "0.6.19：全面优化手机端、桌面端、管理页和插件页的布局、动效与响应式体验，并支持减少动态效果偏好；重做蓝色、草原、音乐厅等主题的明暗层级和文字图标对比度，新增利落的黑白配色；统一主页图标配色并修正设置齿轮中心孔偏移；目标面板支持收起为始终可见的侧边入口，保留运行状态、可随时恢复，并按会话与目标在本地记忆。",
+  "sha256": "a5793085029414356a0a4faf411eb3c99bc934cdbf3ae387cc9c4c06738cf0c1",
+  "releasedAt": "2026-08-30T14:51:29.621Z",
+  "notes": "0.6.20：适配 DSH 0.1.2-alpha.1 的新版客户端模块、认证、斜杠 RPC 与 remote.mux 实时协议，同时保留旧版 DSH 的自动回退；修复斜杠命令因 commands.execute 参数变化触发 aborted 报错，以及新版历史、工作区、模型、目标和子代理等接口不兼容问题；审批与用户提问现在会在所属对话内完整显示并可直接处理，主页仍保留全局待办入口，长工具参数、原因和调用标识不再被截断。",
   "history": [
+    {
+      "version": "0.6.20",
+      "notes": "0.6.20：适配 DSH 0.1.2-alpha.1 的新版客户端模块、认证、斜杠 RPC 与 remote.mux 实时协议，同时保留旧版 DSH 的自动回退；修复斜杠命令因 commands.execute 参数变化触发 aborted 报错，以及新版历史、工作区、模型、目标和子代理等接口不兼容问题；审批与用户提问现在会在所属对话内完整显示并可直接处理，主页仍保留全局待办入口，长工具参数、原因和调用标识不再被截断。"
+    },
     {
       "version": "0.6.19",
       "notes": "0.6.19：全面优化手机端、桌面端、管理页和插件页的布局、动效与响应式体验，并支持减少动态效果偏好；重做蓝色、草原、音乐厅等主题的明暗层级和文字图标对比度，新增利落的黑白配色；统一主页图标配色并修正设置齿轮中心孔偏移；目标面板支持收起为始终可见的侧边入口，保留运行状态、可随时恢复，并按会话与目标在本地记忆。"
@@ -40,10 +44,6 @@
     {
       "version": "0.6.11",
       "notes": "0.6.11 正式版：新增按 DSH 工作区筛选、切换和创建会话，文件页支持切换工作区并直接预览常见文本与 Markdown；修复工作区筛选未正确收敛会话、工作区位于默认文件根外时无法查看，以及新会话工作区名称与完整路径显示异常；新增投票公告及隐私化汇总；统一手机端应用内选择抽屉；周末全天按谷时并修复重复峰谷提醒；插件侧栏图标采用亮色背景并随插件自身四套皮肤切换配色；加强网关安装、连接与故障排查引导。"
-    },
-    {
-      "version": "0.6.10",
-      "notes": "0.6.10 正式版：修复 DSH/网关重启后事件通道不自动恢复、启动阶段网卡读取异常、同源状态误报、双通道总览卡在 3/4、图片后实时回复不可见及子代理重复；新增完整用户链路与重启生命周期测试；公网反馈切换到安全的 HTTPS 临时入口并加强来源 IP 防伪造、节流与隐私保护。"
     }
   ]
 }

package/public/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.6.19"
+  "version": "0.6.20"
 }