dsh-remote-plugin 0.7.0-rc.1 → 0.7.0-rc.3

package/gateway.cjs

@@ -85,6 +85,7 @@ const TOKEN_FILE = process.env.TOKEN_FILE || path.join(os.homedir(), '.dsh-remot
 const NOTES_FILE = process.env.DSH_REMOTE_NOTES || path.join(os.homedir(), '.dsh-remote', 'device-notes.json')
 const DEVICE_KEYS_FILE = process.env.DSH_REMOTE_DEVICE_KEYS || path.join(os.homedir(), '.dsh-remote', 'device-keys.json')
 const WORKBENCH_FILE = process.env.DSH_REMOTE_WORKBENCH || path.join(os.homedir(), '.dsh-remote', 'workbench.json')
+const HANDOFF_FILE = process.env.DSH_REMOTE_HANDOFF || path.join(os.homedir(), '.dsh-remote', 'handoff.json')
 const STARTED_AT = Date.now()
 const DSH_SERVICE = String(process.env.DSH_REMOTE_DSH_SERVICE || 'dsh-web').trim()
 const SYSTEMCTL = String(process.env.DSH_REMOTE_SYSTEMCTL || 'systemctl').trim() || 'systemctl'
@@ -298,21 +299,43 @@ const FS_PREVIEW_EXTENSIONS = new Set([
 
 // ---------- token ----------
 function loadToken() {
-  if (process.env.TOKEN) return process.env.TOKEN
+  if (process.env.DSH_REMOTE_TOKEN || process.env.TOKEN) return process.env.DSH_REMOTE_TOKEN || process.env.TOKEN
   try {
     const t = fs.readFileSync(TOKEN_FILE, 'utf8').trim()
     if (t) return t
-  } catch {}
+  } catch (err) {
+    if (err.code !== 'ENOENT') throw new Error(`无法读取令牌文件 ${TOKEN_FILE}: ${err.message}`)
+  }
   const token = crypto.randomBytes(24).toString('base64url')
   try {
     fs.mkdirSync(path.dirname(TOKEN_FILE), { recursive: true })
     fs.writeFileSync(TOKEN_FILE, token + '\n', { mode: 0o600 })
-  } catch {}
+    if (fs.readFileSync(TOKEN_FILE, 'utf8').trim() !== token) throw new Error('令牌写入后校验失败')
+  } catch (err) {
+    throw new Error(`无法持久化令牌文件 ${TOKEN_FILE}: ${err.message}`)
+  }
   return token
 }
 
-const TOKEN_FROM_ENV = !!process.env.TOKEN
+const TOKEN_FROM_ENV = !!(process.env.DSH_REMOTE_TOKEN || process.env.TOKEN)
 let TOKEN = loadToken()
+// 仅恢复缺失文件，绝不覆盖另一个进程或管理员已写入的令牌。
+function restoreMissingTokenFile() {
+  if (TOKEN_FROM_ENV) return
+  try {
+    fs.lstatSync(TOKEN_FILE)
+    return
+  } catch (err) {
+    if (err.code !== 'ENOENT') return
+  }
+  try {
+    fs.mkdirSync(path.dirname(TOKEN_FILE), { recursive: true })
+    fs.writeFileSync(TOKEN_FILE, TOKEN + '\n', { mode: 0o600, flag: 'wx' })
+    console.warn('[token] 已恢复缺失的令牌文件')
+  } catch (err) {
+    if (err.code !== 'EEXIST') console.error(`[token] 恢复令牌文件失败: ${err.message}`)
+  }
+}
 const WS_TICKET_TTL_MS = durationEnv('GATEWAY_WS_TICKET_TTL_MS', 90000, 10000, 10 * 60 * 1000)
 const wsTickets = new Map()
 
@@ -1457,7 +1480,10 @@ async function detectUpstreamApiFlavor(force = false) {
       }
     } catch (error) {
       upstreamApiFlavorCheckedAt = Date.now()
-      if (upstreamApiFlavor === 'unknown') upstreamApiFlavor = 'legacy'
+      // 网络级失败（上游未启动/cookie 未就绪）不改变 flavor：
+      // 把 unknown 定格成 legacy 会让新版 DSH 被永久当旧服务器探测，
+      // events 双流从此连不上（websocket error 循环）。保持 unknown，
+      // 下一轮 recheck 再探；已有明确 flavor 的也不因瞬断回退。
       recordCompatibility('protocol-probe-failed', { detail: error?.message || error })
     } finally {
       upstreamApiFlavorProbe = null
@@ -1953,6 +1979,11 @@ function legacyPush(kind, payload, rpcId = crypto.randomUUID()) {
 
 function openModernSessionStream(ws, sessionId) {
   if (!sessionId || ws.readyState !== 1) return
+  // subagent 来源的会话在 DSH 侧只接受带 durable parent address 的 follow，
+  // 直接按 session 地址 open 会被拒（session/agent-busy），错误帧还会污染事件流；
+  // 这些会话的投影变化由 control/workspaces 基线推送覆盖，无需单独 follow。
+  const summary = modernState.sessions.get(sessionId)
+  if (summary?.origin === 'subagent') return
   const streamId = 'session:' + sessionId
   ws.send(JSON.stringify({
     type: 'open', streamId, endpoint: 'session/follow',
@@ -3949,6 +3980,127 @@ function workbenchPathInfo(rawPath) {
   return { path: checked.abs }
 }
 
+/* ---------- /handoff 跨端接续指针 ----------
+ * 单条记录：最近一次"正在查看的会话"。双端客户端离开会话时 PUT，
+ * 进入会话列表时 GET，发现是另一台设备写的就展示"在 xx 上打开过"接续卡片。
+ * 只存指针（sessionId + 设备名），不存消息内容——消息仍由 DSH 实时通道下发。
+ * 支持多服务器共用一个网关：key 是上游会话所属服务器没有区分需求，
+ * 这里按"该 token 能看到的同一个 DSH"即单工作台语义，只存一份。
+ */
+const HANDOFF_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000
+let handoffMemory = null
+
+function handoffLoad() {
+  if (handoffMemory) return handoffMemory
+  try {
+    const raw = JSON.parse(fs.readFileSync(HANDOFF_FILE, 'utf8'))
+    if (raw && typeof raw === 'object' && typeof raw.sessionId === 'string' && raw.sessionId) {
+      handoffMemory = {
+        sessionId: String(raw.sessionId).slice(0, 128),
+        title: String(raw.title || '').slice(0, 200),
+        device: String(raw.device || '').slice(0, 80),
+        clientId: String(raw.clientId || '').slice(0, 96),
+        at: Number(raw.at) || 0
+      }
+    }
+  } catch {}
+  return handoffMemory
+}
+
+function handoffSave(record) {
+  handoffMemory = record
+  try {
+    fs.mkdirSync(path.dirname(HANDOFF_FILE), { recursive: true })
+    fs.writeFileSync(HANDOFF_FILE, JSON.stringify(record, null, 2) + '\n')
+  } catch {}
+}
+
+function handoffFresh() {
+  const rec = handoffLoad()
+  if (!rec) return null
+  if (!rec.at || Date.now() - rec.at > HANDOFF_MAX_AGE_MS) return null
+  return rec
+}
+
+function serveHandoff(req, res, url) {
+  cors(res)
+  if (req.method === 'OPTIONS') {
+    res.writeHead(204)
+    res.end()
+    return
+  }
+  if (req.method !== 'GET' && req.method !== 'PUT' && req.method !== 'DELETE') {
+    res.writeHead(405, { allow: 'GET, PUT, DELETE' })
+    res.end()
+    return
+  }
+  if (!authorized(req, url)) {
+    authFailures++
+    touchDevice(req, { failedAuth: true })
+    res.writeHead(401, { 'content-type': 'application/json; charset=utf-8' })
+    res.end(JSON.stringify({ error: 'unauthorized' }))
+    return
+  }
+  touchDevice(req)
+
+  if (req.method === 'GET') {
+    const rec = handoffFresh()
+    fsJson(res, 200, { ok: true, handoff: rec })
+    return
+  }
+
+  if (req.method === 'DELETE') {
+    handoffMemory = null
+    try { fs.rmSync(HANDOFF_FILE, { force: true }) } catch {}
+    fsJson(res, 200, { ok: true })
+    return
+  }
+
+  // PUT：读 JSON 体，字段白名单 + 截断，4KB 上限
+  let body = ''
+  let done = false
+  req.on('data', chunk => {
+    if (done) return
+    body += chunk
+    if (Buffer.byteLength(body) > 4096) {
+      done = true
+      fsJson(res, 413, { error: 'payload too large' })
+      req.destroy()
+    }
+  })
+  req.on('end', () => {
+    if (done || res.headersSent) return
+    done = true
+    let payload
+    try {
+      payload = JSON.parse(body || '{}')
+    } catch {
+      fsJson(res, 400, { error: 'invalid json' })
+      return
+    }
+    // JSON 允许 null/数组/标量：后续读 payload.sessionId 会在 end 回调里抛
+    // TypeError（外层 try/catch 接不住，请求悬挂无响应，2026-09-20 评审复现）。
+    // 先校验为普通对象，不合规直接 400。
+    if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
+      fsJson(res, 400, { error: 'object body required' })
+      return
+    }
+    const sessionId = typeof payload.sessionId === 'string' ? payload.sessionId.trim() : ''
+    if (!sessionId) {
+      fsJson(res, 400, { error: 'sessionId required' })
+      return
+    }
+    handoffSave({
+      sessionId: sessionId.slice(0, 128),
+      title: String(payload.title || '').slice(0, 200),
+      device: String(payload.device || '').slice(0, 80),
+      clientId: String(payload.clientId || '').slice(0, 96),
+      at: Date.now()
+    })
+    fsJson(res, 200, { ok: true })
+  })
+}
+
 function loadWorkbench() {
   try {
     const raw = JSON.parse(fs.readFileSync(WORKBENCH_FILE, 'utf8'))
@@ -4265,6 +4417,7 @@ function proxyApi(req, res, url) {
 
 // ---------- 其它 ----------
 async function serveHealth(req, res, url) {
+  restoreMissingTokenFile()
   const eventHealth = Object.fromEntries(Object.entries(eventCollectorState).map(([kind, state]) => [kind, {
     connected: state.connected,
     lastEventAt: state.lastEventAt,
@@ -4346,6 +4499,7 @@ const server = http.createServer(async (req, res) => {
     if (url.pathname === '/workbench' || url.pathname.startsWith('/workbench/')) return serveWorkbench(req, res, url)
     if (url.pathname === '/diagnostics') return serveDiagnostics(req, res, url)
     if (url.pathname === '/feedback') return serveFeedback(req, res, url)
+    if (url.pathname === '/handoff') return serveHandoff(req, res, url)
     if (url.pathname.startsWith('/admin/api')) return serveAdminApi(req, res, url)
     if (url.pathname.startsWith('/stats')) return serveStats(req, res, url)
     if (url.pathname === '/api/ws-ticket') return serveWsTicket(req, res, url)
@@ -4394,6 +4548,41 @@ function wsPingFrame(masked) {
   return Buffer.concat([Buffer.from([0x89, 0x80]), mask])
 }
 
+/**
+ * 从缓冲头部解析一个完整客户端帧（RFC6455 §5.2）。
+ * 返回 null 表示数据不够、需要等下一个 chunk；解析成功返回
+ * { fin, opcode, payload(已解掩码), total(帧总长) }。
+ * 客户端帧必须带掩码位（§5.1），无掩码直接按协议错误返回 null 并由调用方清缓冲。
+ * 只支持 ≤125 载荷的控制帧上限约束交由调用方（Ping 载荷协议上限 125）；
+ * 长度用 126/127 扩展格式完整解析，保证数据帧边界正确跳过。
+ */
+function wsParseClientFrame(buf) {
+  if (buf.length < 2) return null
+  const fin = (buf[0] & 0x80) !== 0
+  const opcode = buf[0] & 0x0f
+  const masked = (buf[1] & 0x80) !== 0
+  let len = buf[1] & 0x7f
+  let off = 2
+  if (len === 126) {
+    if (buf.length < 4) return null
+    len = buf.readUInt16BE(2)
+    off = 4
+  } else if (len === 127) {
+    if (buf.length < 10) return null
+    const big = buf.readBigUInt64BE(2)
+    if (big > BigInt(1 << 20)) return 'oversize'
+    len = Number(big)
+    off = 10
+  }
+  if (!masked) return 'unmasked'
+  if (buf.length < off + 4 + len) return null
+  const mask = buf.subarray(off, off + 4)
+  const payload = Buffer.alloc(len)
+  const src = buf.subarray(off + 4, off + 4 + len)
+  for (let i = 0; i < len; i++) payload[i] = src[i] ^ mask[i & 3]
+  return { fin, opcode, payload, total: off + 4 + len }
+}
+
 /**
  * 原始 TCP 透传也要维护 WebSocket 控制帧活性:
  * - 浏览器侧收到网关的未掩码 Ping 后会自动回 Pong;
@@ -4498,6 +4687,41 @@ function acceptCollectorClient(req, socket, head, kind, device) {
   socket.setNoDelay(true)
   collectorClients[kind].add(socket)
   eventCollectorState[kind].clients = collectorClients[kind].size
+  // 客户端（鸿蒙 lws 等严格 RFC 实现）会发掩码 Ping 并等待 Pong；
+  // 网关必须按 RFC6455 回 Pong(0x8A)，且服务端→客户端方向不带掩码位
+  // （RFC6455 §5.1：客户端帧必须掩码，服务端帧必须不掩码，违规即断链）。
+  // TCP 不保证帧边界与 data 事件对齐，逐字节扫描当前 chunk 会把跨包帧、
+  // 其他帧的掩码/载荷误认成帧头（2026-09-20 评审复现：掩码后拆包回出错误
+  // Pong 8a03010203）。这里按 RFC6455 组帧：维护 per-socket 缓冲，帧头
+  // （含 126/127 扩展长度）与载荷凑齐才应答，整帧消费，控制帧间数据帧安全跳过。
+  let rx = Buffer.alloc(0)
+  socket.on('data', (chunk) => {
+    rx = rx.length ? Buffer.concat([rx, chunk]) : chunk
+    while (true) {
+      let frame
+      try {
+        frame = wsParseClientFrame(rx)
+      } catch {
+        rx = Buffer.alloc(0)
+        break
+      }
+      if (!frame) break
+      if (typeof frame === 'string') { rx = Buffer.alloc(0); break }
+      rx = rx.subarray(frame.total)
+      if (frame.payload.length > 125) continue
+      if (frame.fin === false) continue
+      // 仅应答 Ping（RFC6455 §5.5 控制帧载荷上限 125）；Pong（0xA）消费后丢弃，
+      // 其余 opcode（含数据帧/分片）跳过
+      if (frame.opcode === 0x9) {
+        const pong = Buffer.alloc(2 + frame.payload.length)
+        pong[0] = 0x8a
+        pong[1] = frame.payload.length
+        frame.payload.copy(pong, 2)
+        try { socket.write(pong) } catch {}
+      }
+    }
+    if (rx.length > 1 << 20) rx = Buffer.alloc(0)
+  })
   for (const raw of collectorReplay[kind].values()) {
     if (socket.destroyed || !socket.writable) break
     try { socket.write(encodeWsText(raw)) } catch { break }

package/index.mjs

@@ -45,13 +45,23 @@ function readGatewayPort() {
 }
 
 function gatewayBase() {
-  return (process.env.DSH_REMOTE_GATEWAY || `http://127.0.0.1:${readGatewayPort()}`).replace(/\/+$/, '')
+  return (process.env.DSH_REMOTE_GATEWAY || upstreamUrlForListener({ host: readGatewayHost(), port: readGatewayPort() })).replace(/\/+$/, '')
+}
+
+export function readGatewayHost() {
+  if (process.env.DSH_REMOTE_GATEWAY_HOST) return process.env.DSH_REMOTE_GATEWAY_HOST
+  if (process.env.HOST) return process.env.HOST
+  try {
+    const host = readFileSync(`${homedir()}/.dsh-remote/gateway-host`, 'utf8').trim()
+    if (host) return host
+  } catch {}
+  return '0.0.0.0'
 }
 
 function gatewayToken() {
-  if (process.env.DSH_REMOTE_TOKEN) return process.env.DSH_REMOTE_TOKEN
+  if (process.env.DSH_REMOTE_TOKEN || process.env.TOKEN) return process.env.DSH_REMOTE_TOKEN || process.env.TOKEN
   try {
-    return readFileSync(`${homedir()}/.dsh-remote/token`, 'utf8').trim() || ''
+    return readFileSync(process.env.TOKEN_FILE || `${homedir()}/.dsh-remote/token`, 'utf8').trim() || ''
   } catch {
     return ''
   }
@@ -247,7 +257,8 @@ function gatewaySystemdEnvArgs() {
 /** 127.0.0.1 端口占用预检: 能连上=被占用, 连接被拒/超时=可用。 */
 function portInUse(port) {
   return new Promise((resolvePromise) => {
-    const sock = net.connect({ host: '127.0.0.1', port: Number(port) })
+    const host = new URL(upstreamUrlForListener({ host: readGatewayHost(), port })).hostname.replace(/^\[|\]$/g, '')
+    const sock = net.connect({ host, port: Number(port) })
     let done = false
     const finish = (used) => {
       if (done) return
@@ -344,10 +355,16 @@ function setGatewayEnabled(on) {
 }
 
 /** 启动随插件分发的 gateway.cjs; 已运行则直接返回。 */
+const GATEWAY_AUTH_HINT = '网关正在运行，但管理认证不可用。请检查 TOKEN_FILE、TOKEN / DSH_REMOTE_TOKEN 与文件权限；若旧网关无法恢复令牌，请在主机上确认进程归属后手动重启网关，再刷新此页。'
+
 async function startGateway() {
   const upstream = upstreamUrlForListener(dshListen)
   const health = await gatewayRunning()
   if (health.running) {
+    const auth = await proxyGateway('/admin/api/state', 'GET', '')
+    if (!auth || auth.status !== 200 || auth.json.ok !== true) {
+      return { ok: false, running: true, started: false, error: GATEWAY_AUTH_HINT }
+    }
     setGatewayEnabled(true)
     return { ok: true, running: true, started: false }
   }
@@ -356,6 +373,7 @@ async function startGateway() {
     return { ok: false, running: false, error: '插件包缺少 gateway.cjs, 请升级插件' }
   }
   const port = readGatewayPort()
+  const host = readGatewayHost()
   if (await portInUse(port)) {
     logGateway(`端口 ${port} 已被占用, 拒绝启动`)
     return { ok: false, running: false, error: `端口 ${port} 已被占用，请在插件页修改网关端口后重试` }
@@ -369,7 +387,7 @@ async function startGateway() {
     sysd = (await runExit('systemd-run', [
       '--user', '--unit=dsh-remote-gateway', '--service-type=exec',
       ...gatewaySystemdEnvArgs(),
-      '--setenv=PORT=' + port, '--setenv=HOST=0.0.0.0', '--setenv=DSH_UPSTREAM=' + upstream,
+      '--setenv=PORT=' + port, '--setenv=HOST=' + host, '--setenv=DSH_UPSTREAM=' + upstream,
       '--', process.execPath, script,
     ])) === 0
   } catch {}
@@ -390,7 +408,7 @@ async function startGateway() {
       cwd: dirname(script),
       detached: true,
       stdio: ['ignore', logFd ?? 'ignore', logFd ?? 'ignore'],
-      env: { ...process.env, PORT: port, DSH_UPSTREAM: upstream },
+      env: { ...process.env, PORT: port, HOST: host, DSH_UPSTREAM: upstream },
     })
     child.unref()
     writeGatewayPid(child.pid)
@@ -451,7 +469,7 @@ function ensureGateway() {
 /** 通过网关自身的 /admin/api/shutdown 优雅停止(不管它当初是谁拉起的); 并写入 off 防自愈拉起。 */
 async function stopGateway() {
   const health = await gatewayRunning()
-  if (!await killGateway(health)) return { ok: false, running: health.running, error: '无法确认网关身份或认证关闭失败，请检查令牌与端口占用' }
+  if (!await killGateway(health)) return { ok: false, running: health.running, error: health.running ? GATEWAY_AUTH_HINT : '网关未运行' }
   setGatewayEnabled(false)
   return { ok: true, running: false, bye: true }
 }
@@ -661,9 +679,10 @@ async function serveStatic(req, res, ctx) {
   // 管理控制台数据: 优先代理本地网关(设备监控/更新检查完整), 网关不可用回退插件状态
   if (pathname === `${MOUNT}/admin/api/state`) {
     void ensureGateway() // 自愈: 开关为 on 而网关没起来时, 后台拉起, 下个轮询即可见网关
+    const health = await gatewayRunning() // 新网关可在健康探测时恢复缺失的令牌文件
     const localToken = gatewayToken()
     const proxied = await proxyGateway('/admin/api/state', 'GET', '')
-    if (proxied !== null) {
+    if (proxied?.status === 200 && proxied.json.ok === true) {
       // 主机端 DSH 面板本身已登录本机用户, 管理页无需令牌门禁;
       // 把真实网关令牌一并返回, 抽屉里直接显示并允许复制(供手机 App 使用)。
       sendJson(res, proxied.status, { ...proxied.json, token: localToken, mode: 'gateway', via: 'gateway', gatewayInstalled })
@@ -672,8 +691,11 @@ async function serveStatic(req, res, ctx) {
     sendJson(res, 200, {
       ok: true,
       mode: 'plugin',
+      gatewayRunning: health.running,
+      gatewayAuthError: health.running ? GATEWAY_AUTH_HINT : '',
+      gatewayVersion: health.version || '',
       version,
-      token: localToken || '',
+      token: health.running ? '' : localToken || '',
       gatewayInstalled,
       platform: process.platform,
       hostname: hostname(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-plugin",
-  "version": "0.7.0-rc.1",
+  "version": "0.7.0-rc.3",
   "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控；网关提供 /fs/* 文件传输端点(列表/断点下载/上传)，配合 Android App 远程操控会话/审批/提问/goal 与文件互传(多服务器测速切换、聊天记录离线缓存)。",
   "type": "module",
   "main": "./index.mjs",

package/public/admin.js

@@ -447,11 +447,11 @@ function render(st) {
   lastState = st
   const isPlugin = st.mode === 'plugin'
   const isGateway = st.mode === 'gateway'
-  shownToken = st.token || token
-  $('conn-badge').textContent = t(isPlugin ? 'badge.embedded' : isGateway ? 'badge.gateway' : 'badge.connected')
+  shownToken = st.gatewayAuthError ? '' : st.token || token
+  $('conn-badge').textContent = t(st.gatewayRunning ? 'badge.gateway' : isPlugin ? 'badge.embedded' : isGateway ? 'badge.gateway' : 'badge.connected')
   $('conn-badge').className = 'conn-badge ' + (isPlugin || isGateway ? 'on' : 'off')
-  $('conn-badge').title = t(isGateway ? 'badge.gateway.title' : 'badge.gatewayDown')
-  $('token-full').textContent = shownToken || t(isPlugin ? 'token.pluginNoGateway' : 'token.unavailable')
+  $('conn-badge').title = st.gatewayAuthError || t(isGateway ? 'badge.gateway.title' : 'badge.gatewayDown')
+  $('token-full').textContent = shownToken || t(st.gatewayAuthError ? 'token.unavailable' : isPlugin ? 'token.pluginNoGateway' : 'token.unavailable')
   // 主机端插件模式: 显示真实令牌(复制可用), 只隐藏退出按钮; 令牌门禁本身不存在
   $('btn-copy').classList.toggle('hidden', !shownToken)
   $('btn-logout').classList.toggle('hidden', pluginMode)
@@ -463,7 +463,7 @@ function render(st) {
   renderQr(st)
   renderDoctor(st)
   // 网关开关: 仅插件内嵌页提供, 网关运行/停止两种状态
-  gatewayRunning = isGateway
+  gatewayRunning = isGateway || st.gatewayRunning === true
   $('btn-gateway').classList.toggle('hidden', !pluginMode)
   $('btn-gateway').textContent = gatewayBusy
     ? t(gatewayRunning ? 'stopping' : 'starting')
@@ -478,15 +478,15 @@ function render(st) {
   const upOk = st.upstream.reachable
   const hero = $('admin-hero')
   if (hero) {
-    const heroState = isGateway ? (upOk ? 'running' : 'attention') : isPlugin ? 'plugin' : 'offline'
+    const heroState = st.gatewayAuthError ? 'attention' : isGateway ? (upOk ? 'running' : 'attention') : isPlugin ? 'plugin' : 'offline'
     hero.className = 'admin-hero ' + heroState
     const titleKey = heroState === 'running' ? 'hero.running' : heroState === 'attention' ? 'hero.attention' : heroState === 'plugin' ? 'hero.plugin' : 'hero.offline'
     const descKey = heroState === 'running' ? 'hero.runningDesc' : heroState === 'attention' ? 'hero.attentionDesc' : heroState === 'plugin' ? 'hero.pluginDesc' : 'hero.offlineDesc'
     $('admin-hero-title').textContent = t(titleKey)
     $('admin-hero-desc').textContent = heroState === 'running'
       ? t(descKey, { online: st.onlineCount || 0, requests: st.totalRequests || 0 })
-      : t(descKey)
-    $('admin-hero-status').textContent = isGateway ? (upOk ? t('stat.reachable') : t('stat.unreachable')) : t(isPlugin ? 'badge.embedded' : 'badge.gatewayDown')
+      : st.gatewayAuthError || t(descKey)
+    $('admin-hero-status').textContent = st.gatewayAuthError ? t('hero.attention') : isGateway ? (upOk ? t('stat.reachable') : t('stat.unreachable')) : t(isPlugin ? 'badge.embedded' : 'badge.gatewayDown')
     const action = $('admin-hero-action')
     if (action) {
       const actionKey = heroState === 'plugin' ? 'hero.startGateway' : heroState === 'offline' ? 'hero.copyToken' : 'hero.openDevices'
@@ -506,14 +506,16 @@ function render(st) {
     <div class="stat-card"><div class="v">${st.authFailures}</div><div class="k">${t('stat.authFailures')}</div></div>
     <div class="stat-card"><div class="v">${fmtUptime(st.uptimeSec)}</div><div class="k">${t('stat.uptime', { host: st.host, port: st.port })}</div></div>`
 
-  $('device-summary').textContent = isPlugin
+  $('device-summary').textContent = st.gatewayAuthError || (isPlugin
     ? t(st.gatewayInstalled ? 'device.installedNotRunning' : 'device.noGatewayBinary')
-    : t('device.ipRefresh', { n: st.devices.length })
+    : t('device.ipRefresh', { n: st.devices.length }))
   if (isPlugin && !st.devices.length) {
     $('device-rows').innerHTML = ''
     const rel = 'https://github.com/Blank-not-black/dsh-Remote/releases/latest/download/'
     const apkBtn = `<a class="mini-btn" href="${rel}dsh-remote.apk" target="_blank" rel="noopener">${t('device.downloadApp')}</a>`
-    if (!st.gatewayInstalled) {
+    if (st.gatewayAuthError) {
+      $('device-empty').textContent = st.gatewayAuthError
+    } else if (!st.gatewayInstalled) {
       // 只有插件包真的没有内置网关程序时, 才引导下载网关
       const isWin = /windows|win32/i.test(navigator.userAgent)
       const gwAsset = isWin ? 'dsh-remote-win-x64.exe' : 'dsh-remote-linux-x64'

package/public/announcements.json

@@ -43,11 +43,26 @@
         "id": "workbench-retention-2026-08",
         "question": "后续应该如何处理工作台功能？",
         "options": [
-          { "id": "keep-improve", "label": "保留并继续优化" },
-          { "id": "keep-current", "label": "保留现有功能即可" },
-          { "id": "merge-workspaces", "label": "合并到工作区功能" },
-          { "id": "remove-gradually", "label": "可以逐步移除" },
-          { "id": "not-used", "label": "尚未使用，暂时无法判断" }
+          {
+            "id": "keep-improve",
+            "label": "保留并继续优化"
+          },
+          {
+            "id": "keep-current",
+            "label": "保留现有功能即可"
+          },
+          {
+            "id": "merge-workspaces",
+            "label": "合并到工作区功能"
+          },
+          {
+            "id": "remove-gradually",
+            "label": "可以逐步移除"
+          },
+          {
+            "id": "not-used",
+            "label": "尚未使用，暂时无法判断"
+          }
         ]
       }
     },
@@ -62,9 +77,18 @@
         "id": "remote-plugin-demand-2026-08",
         "question": "你更需要哪类远程插件能力？",
         "options": [
-          { "id": "use-plugin-features", "label": "远程使用插件内具体功能" },
-          { "id": "manage-plugins-only", "label": "只需要远程安装、更新、卸载插件" },
-          { "id": "no-remote-plugin", "label": "没有远程使用或管理插件的需求" }
+          {
+            "id": "use-plugin-features",
+            "label": "远程使用插件内具体功能"
+          },
+          {
+            "id": "manage-plugins-only",
+            "label": "只需要远程安装、更新、卸载插件"
+          },
+          {
+            "id": "no-remote-plugin",
+            "label": "没有远程使用或管理插件的需求"
+          }
         ]
       }
     },
@@ -97,15 +121,42 @@
         "id": "meeting-asr-brand-2026-08",
         "question": "你的手机品牌是什么？",
         "options": [
-          { "id": "xiaomi-redmi", "label": "小米 / Redmi" },
-          { "id": "huawei", "label": "华为" },
-          { "id": "honor", "label": "荣耀" },
-          { "id": "oppo-oneplus", "label": "OPPO / 一加" },
-          { "id": "vivo-iqoo", "label": "vivo / iQOO" },
-          { "id": "samsung", "label": "三星" },
-          { "id": "meizu", "label": "魅族" },
-          { "id": "google-pixel", "label": "Google Pixel" },
-          { "id": "other", "label": "其他品牌" }
+          {
+            "id": "xiaomi-redmi",
+            "label": "小米 / Redmi"
+          },
+          {
+            "id": "huawei",
+            "label": "华为"
+          },
+          {
+            "id": "honor",
+            "label": "荣耀"
+          },
+          {
+            "id": "oppo-oneplus",
+            "label": "OPPO / 一加"
+          },
+          {
+            "id": "vivo-iqoo",
+            "label": "vivo / iQOO"
+          },
+          {
+            "id": "samsung",
+            "label": "三星"
+          },
+          {
+            "id": "meizu",
+            "label": "魅族"
+          },
+          {
+            "id": "google-pixel",
+            "label": "Google Pixel"
+          },
+          {
+            "id": "other",
+            "label": "其他品牌"
+          }
         ]
       }
     },
@@ -116,6 +167,16 @@
       "minVersion": "",
       "maxVersion": "",
       "publishedAt": "2026-08-31T12:38:43+08:00"
+    },
+    {
+      "id": "2026-09-19-0.7.0-rc.1-plugin-center",
+      "title": "0.7.0-rc.1 测试版发布：插件中心上线，欢迎体验反馈",
+      "content": "大家好，dsh-Remote 0.7.0-rc.1 测试版现已发布！此前征集的插件管理需求，在这个版本中有了第一步落地。\n\n本次主要新增「插件中心」，手机端和桌面端都可以从「设置 → 插件中心」进入：\n\n- 查看当前 DSH 环境中已安装的插件、版本和状态；\n- 在「发现插件」中搜索 npm 插件目录，查看详情并安装指定版本；\n- 更新、卸载插件，修改插件的启用或停用配置；\n- 查看操作进度和日志，主机侧会保存操作记录并备份相关配置。\n\n体验前请同步更新主机侧的 DSH Remote 插件与手机 App，使用独立网关的用户也请更新网关。插件启用或停用后，需要重启 DSH 才会生效。当前插件发现与管理能力仍在持续完善中，不代表所有第三方插件都已完成兼容性验证。\n\n欢迎愿意参与测试的朋友下载更新，体验后到 QQ 交流群反馈！无论是安装或更新失败、界面问题、兼容性情况，还是你希望加入的插件与功能，都欢迎告诉我们。反馈时可以附上设备与系统版本、DSH/Remote 版本、插件名称、操作步骤，以及相关截图或错误日志，方便我们复现和改进。\n\nQQ 用户交流群：1106138825\n\n这是 RC 测试版，欢迎大家一起帮助完善 0.7.0。感谢支持与反馈！",
+      "minVersion": "",
+      "maxVersion": "",
+      "publishedAt": "2026-09-19T08:03:06+08:00",
+      "actionUrl": "https://github.com/Blank-not-black/dsh-Remote/releases/tag/v0.7.0-rc.1",
+      "actionText": "下载 0.7.0-rc.1 测试版"
     }
   ]
 }

package/public/app.js

@@ -132,6 +132,7 @@ const CUSTOM_SELECT_TITLES = {
   'session-sort': 'sessions.sortLabel',
   'fs-workspace': 'workspace.select',
   'mobile-enter-action': 'settings.mobileEnterTitle',
+  'busy-send-mode': 'settings.busySendTitle',
   'bg-interval': 'settings.bgIntervalTitle',
   'new-session-workspace': 'workspace.select'
 }
@@ -606,7 +607,9 @@ async function rpc(method, payload = {}, timeoutMs = 45000) {
   if (!full?.result) throw new Error(t('err.badResponse'))
   if (!full.result.ok) {
     const err = full.result.error || {}
-    throw new Error(err.message || t('err.dshError'))
+    const error = new Error(err.message || t('err.dshError'))
+    error.rpcRejected = true
+    throw error
   }
   return full.result.value
 }
@@ -2416,6 +2419,7 @@ function renderSessionSub() {
 
 /** 顶栏状态: 运行中=蓝色流动渐变, 中断/出错=橙红渐变, 空闲=原样式 */
 function updateSessionStatus() {
+  renderComposerSend()
   const s = state.byId.get(state.current)
   const head = $('session-head')
   if (!head) return
@@ -3248,33 +3252,153 @@ async function sendSessionText(text) {
   return sendSessionContent(text, [])
 }
 
-async function sendSessionContent(text, images) {
+let composerSending = false
+const composerSendFeedback = new Map()
+const steeringInFlight = new Set()
+function composerContext() { return `${state.server}\0${state.current}` }
+function steerSendingEnabled() { return LS.get('steerSendingEnabled', '0') === '1' }
+function composerIsBusy() {
+  return !!state.byId.get(state.current)?.running || (state.queues[state.current] || []).some(item => item.placement === 'queued')
+}
+function composerSendMode(alternate = false) {
+  if (!steerSendingEnabled() || !composerIsBusy()) return 'queue'
+  const preferred = LS.get('busySendMode', 'queue') === 'steer' ? 'steer' : 'queue'
+  return alternate ? (preferred === 'queue' ? 'steer' : 'queue') : preferred
+}
+function renderComposerSend() {
+  const enabled = steerSendingEnabled() && composerIsBusy()
+  const mode = composerSendMode()
+  for (const id of ['btn-send', 'btn-fs-send']) {
+    const button = $(id)
+    if (!button) continue
+    if (composerSending || !button.classList.contains('send-hold-ready')) button.textContent = t(composerSending ? 'send.submitting' : enabled ? `send.${mode}Button` : 'composer.send')
+    button.disabled = composerSending
+    button.classList.toggle('steer-mode', enabled && mode === 'steer')
+    button.title = t(enabled ? 'send.holdHint' : 'composer.send')
+    button.setAttribute('aria-label', button.textContent)
+  }
+  const feedback = composerSendFeedback.get(composerContext())
+  const node = $('composer-send-status')
+  if (node) {
+    node.textContent = feedback ? t(feedback.key, { msg: feedback.message || '' }) : enabled ? t('send.holdHint') : ''
+    node.classList.toggle('hidden', !node.textContent)
+    node.dataset.phase = feedback?.phase || 'hint'
+  }
+}
+function setComposerSendFeedback(context, key, phase, message = '') {
+  composerSendFeedback.set(context, { key, phase, message })
+  if (composerSendFeedback.size > 100) composerSendFeedback.delete(composerSendFeedback.keys().next().value)
+  renderComposerSend()
+}
+// No preflight or automatic retry: an ambiguous timeout may already have delivered the message.
+async function submitSteer(method, payload, context) {
+  if (steeringInFlight.has(context)) {
+    if (composerContext() === context) toast(t('send.steerPending'), 'err')
+    return null
+  }
+  steeringInFlight.add(context)
+  setComposerSendFeedback(context, 'send.steerPending', 'pending')
+  const slow = setTimeout(() => setComposerSendFeedback(context, 'send.steerSlow', 'pending'), 3000)
+  try {
+    const result = await rpc(method, payload)
+    if (!result?.accepted) {
+      setComposerSendFeedback(context, 'send.steerUnconfirmed', 'unknown')
+      return result
+    }
+    setComposerSendFeedback(context, 'send.steerAccepted', 'accepted')
+    if (composerContext() === context) toast(t('send.steerAccepted'), 'ok')
+    return result
+  } catch (error) {
+    setComposerSendFeedback(context, error.rpcRejected || error.message === 'AUTH' ? 'send.steerRejected' : 'send.steerUnconfirmed', error.rpcRejected ? 'error' : 'unknown', error.message)
+    if (error.message === 'AUTH' && composerContext() === context) authFailure()
+    return null
+  } finally { clearTimeout(slow); steeringInFlight.delete(context) }
+}
+
+function bindComposerSend(button) {
+  let press = null
+  let suppressClickUntil = 0
+  const cancel = () => {
+    if (!press) return
+    clearTimeout(press.timer)
+    press = null
+    suppressClickUntil = Date.now() + 1000
+    button.classList.remove('send-hold-ready')
+    renderComposerSend()
+  }
+  button.addEventListener('pointerdown', event => {
+    if (event.button !== 0 || event.isPrimary === false || composerSending || !steerSendingEnabled() || !composerIsBusy()) return
+    cancel()
+    suppressClickUntil = 0
+    press = { id: event.pointerId, x: event.clientX, y: event.clientY, context: composerContext(), mode: composerSendMode(), alternate: composerSendMode(true), ready: false }
+    press.timer = setTimeout(() => {
+      if (!press || composerSending || composerContext() !== press.context) { cancel(); return }
+      press.ready = true
+      button.classList.add('send-hold-ready')
+      button.textContent = t(press.alternate === 'steer' ? 'send.releaseSteer' : 'send.releaseQueue')
+    }, 450)
+    button.setPointerCapture?.(event.pointerId)
+  })
+  button.addEventListener('pointermove', event => {
+    if (press && Math.hypot(event.clientX - press.x, event.clientY - press.y) > 12) cancel()
+  })
+  button.addEventListener('pointerup', event => {
+    if (!press || event.pointerId !== press.id) return
+    const intent = press
+    cancel()
+    event.preventDefault()
+    if (intent.context === composerContext() && steerSendingEnabled()) void sendMessage(intent.ready ? intent.alternate : intent.mode)
+  })
+  for (const name of ['pointercancel', 'lostpointercapture', 'blur']) button.addEventListener(name, cancel)
+  button.addEventListener('contextmenu', event => { if (press || Date.now() < suppressClickUntil) event.preventDefault() })
+  button.addEventListener('keydown', () => { cancel(); suppressClickUntil = 0 })
+  button.addEventListener('click', () => { if (Date.now() >= suppressClickUntil) void sendMessage() })
+}
+
+async function sendSessionContent(text, images, requestedMode = 'queue') {
   const clean = String(text || '').trim()
-  if ((!clean && !images.length) || !state.current) return false
+  if ((!clean && !images.length) || !state.current || composerSending) return false
   const sessionId = state.current
-  if (images.length === 0 && clean && await runSlashCommand(clean)) {
-    state.sessionActivity.add(sessionId)
-    return true
+  const context = composerContext()
+  const mode = requestedMode === 'steer' && steerSendingEnabled() && composerIsBusy() ? 'steer' : 'queue'
+  if (mode === 'steer' && clean.startsWith('/')) {
+    setComposerSendFeedback(context, 'send.steerSlash', 'error')
+    return false
   }
+  composerSending = true
   const buttons = [$('btn-send'), $('btn-fs-send')].filter(Boolean)
   buttons.forEach(button => { button.disabled = true })
   state.pendingPrompts.add(sessionId)
   try {
+    if (mode === 'steer') setComposerSendFeedback(context, 'send.steerPending', 'pending')
+    else { composerSendFeedback.delete(context); renderComposerSend() }
+    if (images.length === 0 && clean && await runSlashCommand(clean)) {
+      state.sessionActivity.add(sessionId)
+      return true
+    }
     const content = [...await encodeComposerImagesFor(images)]
     if (clean) content.push({ type: 'text', text: clean })
+    if (composerContext() !== context) {
+      setComposerSendFeedback(context, 'send.contextChanged', 'error')
+      return false
+    }
     setSessionRecovery('resuming')
-    const v = await safeRpc('session.prompt', {
+    const payload = {
       sessionId,
-      mode: 'queue',
+      mode,
       content
-    }, t('send.failed'))
+    }
+    const v = mode === 'steer'
+      ? await submitSteer('session.prompt', payload, context)
+      : await safeRpc('session.prompt', payload, t('send.failed'))
+    if (composerContext() !== context) return !!v?.accepted
     if (v?.accepted) {
       state.sessionActivity.add(sessionId)
-      if (state.current === sessionId) {
+      if (composerContext() === context) {
         setSessionRecovery('ready')
         noteSessionTurnTime(sessionId, Date.now())
         renderSessions()
-        toast(images.length ? t('send.imageSent') : (clean.startsWith('/') ? t('send.commandSent') : t('send.sent')), 'ok')
+        if (mode !== 'steer') toast(images.length ? t('send.imageSent') : (clean.startsWith('/') ? t('send.commandSent') : t('send.sent')), 'ok')
       }
       return true
     }
@@ -3286,14 +3410,17 @@ async function sendSessionContent(text, images) {
     if (state.current === sessionId) setSessionRecovery('error')
     return false
   } catch (e) {
-    if (state.current === sessionId) {
+    if (mode === 'steer') setComposerSendFeedback(context, 'send.steerRejected', 'error', e?.message || String(e))
+    if (composerContext() === context) {
       setSessionRecovery('error', e?.message)
       toast(t('composer.imageReadFailed', { msg: e?.message || e }), 'err')
     }
     return false
   } finally {
     state.pendingPrompts.delete(sessionId)
+    composerSending = false
     buttons.forEach(button => { button.disabled = false })
+    renderComposerSend()
   }
 }
 
@@ -3304,16 +3431,18 @@ async function encodeComposerImagesFor(images) {
   })))
 }
 
-async function sendMessage() {
+async function sendMessage(requestedMode) {
   const input = $('composer-input')
-  const text = input.value.trim()
+  const originalText = input.value
+  const text = originalText.trim()
+  const context = composerContext()
   const images = state.composerImages.slice()
   if ((!text && !images.length) || !state.current) return
   if (images.length && text.startsWith('/')) { toast(t('composer.imageSlashUnsupported'), 'err'); return }
-  if (await sendSessionContent(text, images)) {
-    input.value = ''
-    autosize(input)
-    clearComposerImages()
+  const mode = typeof requestedMode === 'string' ? requestedMode : composerSendMode()
+  if (await sendSessionContent(text, images, mode) && composerContext() === context) {
+    if (input.value === originalText) { input.value = ''; autosize(input) }
+    if (state.composerImages.length === images.length && images.every((item, i) => item === state.composerImages[i])) clearComposerImages()
   }
 }
 
@@ -3842,20 +3971,21 @@ function queuePreview(item) {
 }
 async function steerQueueItem(itemId) {
   const sessionId = state.current
+  const context = composerContext()
   const key = `${sessionId}:${itemId}`
   const s = state.byId.get(sessionId)
   if (!sessionId || !s?.running || state.queueSteering[key]) return
   state.queueSteering[key] = true
   renderQueue()
   try {
-    const v = await safeRpc('session.updateQueue', { sessionId, itemId, action: { kind: 'steer' } }, t('queue.steerFailed', { msg: '' }).replace(/：$/, '').replace(/: $/, ''))
-    if (v?.accepted) toast(t('queue.steerSubmitted'), 'ok')
+    await submitSteer('session.updateQueue', { sessionId, itemId, action: { kind: 'steer' } }, context)
   } finally {
     delete state.queueSteering[key]
     renderQueue()
   }
 }
 function renderQueue() {
+  renderComposerSend()
   const s = state.byId.get(state.current)
   if (!s) return
   const items = (state.queues[state.current] || []).filter(item => item?.placement === 'queued')
@@ -6960,8 +7090,8 @@ function bindUi() {
   $('rename-confirm').addEventListener('click', confirmRenameSession)
   $('rename-session-input').addEventListener('keydown', e => { if (e.key === 'Enter' && !e.isComposing) confirmRenameSession() })
   $('modal-rename').addEventListener('click', e => { if (e.target === $('modal-rename')) closeRenameSession() })
-  $('btn-send').addEventListener('click', sendMessage)
-  $('btn-fs-send').addEventListener('click', sendMessage)
+  bindComposerSend($('btn-send'))
+  bindComposerSend($('btn-fs-send'))
   $('btn-plus').addEventListener('click', toggleComposerMenu)
   $('btn-image').addEventListener('click', toggleComposerImageMenu)
   $('composer-image-menu').addEventListener('click', (e) => {
@@ -7139,11 +7269,23 @@ function bindUi() {
   })
   $('btn-reset').addEventListener('click', () => {
     if (!confirm(t('settings.confirmReset'))) return
-    LS.del('token'); LS.del('notify'); LS.del('server'); LS.del('mobileEnterAction'); LS.del(ANNOUNCEMENTS_KEY); LS.del(ANNOUNCEMENT_HISTORY_KEY); LS.del(ANNOUNCEMENT_VOTES_KEY)
+    LS.del('token'); LS.del('notify'); LS.del('server'); LS.del('mobileEnterAction'); LS.del('steerSendingEnabled'); LS.del('busySendMode'); LS.del(ANNOUNCEMENTS_KEY); LS.del(ANNOUNCEMENT_HISTORY_KEY); LS.del(ANNOUNCEMENT_VOTES_KEY)
     if (bgBridge()?.saveBackgroundConfig) saveBgConfig(false)
     location.reload()
   })
   $('mobile-enter-action').value = mobileEnterAction()
+  $('opt-steer-send').checked = steerSendingEnabled()
+  $('busy-send-mode').value = LS.get('busySendMode', 'queue') === 'steer' ? 'steer' : 'queue'
+  $('busy-send-mode').disabled = !steerSendingEnabled()
+  $('opt-steer-send').addEventListener('change', event => {
+    LS.set('steerSendingEnabled', event.target.checked ? '1' : '0')
+    $('busy-send-mode').disabled = !event.target.checked
+    renderComposerSend()
+  })
+  $('busy-send-mode').addEventListener('change', event => {
+    LS.set('busySendMode', event.target.value === 'steer' ? 'steer' : 'queue')
+    renderComposerSend()
+  })
   $('mobile-enter-action').addEventListener('change', (e) => {
     const action = e.target.value === 'send' ? 'send' : 'newline'
     LS.set('mobileEnterAction', action)

package/public/index.html

@@ -113,7 +113,7 @@
         <button id="btn-rename-session" class="icon-btn hidden" data-i18n-title="session.rename" data-i18n-aria="session.rename">✎</button>
         <button id="btn-archive-session" class="mini-btn hidden" data-i18n="session.archive">归档</button>
         <button id="btn-stats" class="icon-btn" data-i18n-title="stats.title" data-i18n-aria="stats.title"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M5 19V9M12 19V5M19 19v-7M3 19h18"/></svg></button>
-        <button id="btn-fs-send" class="session-send-btn hidden" type="button" data-i18n="composer.send" data-i18n-title="composer.send" data-i18n-aria="composer.send">发送</button>
+        <button id="btn-fs-send" class="session-send-btn hidden" type="button">发送</button>
         <button id="btn-cancel" class="danger-btn hidden" data-i18n="session.stop">停止</button>
       </div>
 
@@ -173,6 +173,7 @@
           <button type="button" class="composer-image-option" data-image-source="CAMERA" role="menuitem"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M4 8.5h3l1.5-2h7L17 8.5h3v10H4z"/><circle cx="12" cy="13.5" r="3.2"/></svg><span data-i18n="composer.takePhoto">拍照</span></button>
           <button type="button" class="composer-image-option" data-image-source="PHOTOS" role="menuitem"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3.5" y="4" width="17" height="16" rx="2"/><circle cx="8.5" cy="9" r="1.2"/><path d="m5 17 4.5-4.5 3 3 2-2L19 17"/></svg><span data-i18n="composer.choosePhoto">相册</span></button>
         </div>
+        <div id="composer-send-status" class="composer-send-status hidden" role="status" aria-live="polite" aria-atomic="true"></div>
         <div id="composer-attachments" class="composer-attachments hidden"></div>
         <div class="composer">
           <button id="btn-plus" class="plus-btn" data-i18n-aria="a11y.more" data-i18n-title="a11y.moreTitle">＋</button>
@@ -183,7 +184,7 @@
             </button>
           </div>
           <button id="btn-image" class="composer-image-btn" type="button" data-i18n-title="composer.addImage" data-i18n-aria="composer.addImage"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3.5" y="4" width="17" height="16" rx="2"/><circle cx="8.5" cy="9" r="1.2"/><path d="m5 17 4.5-4.5 3 3 2-2L19 17"/></svg></button>
-          <button id="btn-send" class="send-btn" data-i18n="composer.send">发送</button>
+          <button id="btn-send" class="send-btn" type="button">发送</button>
         </div>
         <input id="composer-camera-input" class="hidden" type="file" accept="image/*" capture="environment">
         <input id="composer-gallery-input" class="hidden" type="file" accept="image/*" multiple>
@@ -375,6 +376,17 @@
               <option value="send" data-i18n="settings.mobileEnterSend">回车发送</option>
             </select>
           </div>
+          <div class="setting-row">
+            <div><div class="setting-name" data-i18n="settings.steerSendTitle">启用长按插队发送</div><div class="setting-desc" data-i18n="settings.steerSendDesc">繁忙时长按发送切换方式，松开发送；移动手指取消。默认关闭。</div></div>
+            <label class="switch"><input type="checkbox" id="opt-steer-send" data-i18n-aria="settings.steerSendTitle"><span class="slider"></span></label>
+          </div>
+          <div class="setting-row">
+            <div><div class="setting-name" data-i18n="settings.busySendTitle">繁忙时默认发送方式</div><div class="setting-desc" data-i18n="settings.busySendDesc">单击和回车使用默认方式，长按使用另一种；空闲时正常发送。</div></div>
+            <select id="busy-send-mode" class="setting-select" data-i18n-aria="settings.busySendTitle">
+              <option value="queue" data-i18n="send.queueButton">排队发送</option>
+              <option value="steer" data-i18n="send.steerButton">插队发送</option>
+            </select>
+          </div>
           <div class="setting-row">
             <div><div class="setting-name" data-i18n="presets.title">预设提示词</div><div class="setting-desc" data-i18n="presets.desc">常用提示词，对话界面一键插入（最多 20 条）</div></div>
             <button id="btn-preset-add" class="mini-btn" data-i18n="presets.add">新增</button>
@@ -907,6 +919,17 @@
   <script>
     window.APP_STR = {
       zh: {
+        'settings.steerSendTitle': '启用长按插队发送', 'settings.steerSendDesc': '繁忙时长按发送切换方式，松开发送；移动手指取消。默认关闭。',
+        'settings.busySendTitle': '繁忙时默认发送方式', 'settings.busySendDesc': '单击和回车使用默认方式，长按使用另一种；空闲时正常发送。',
+        'send.queueButton': '排队发送', 'send.steerButton': '插队发送', 'send.submitting': '提交中…',
+        'send.holdHint': '长按切换发送方式，松开发送；移动取消', 'send.releaseSteer': '松开插队', 'send.releaseQueue': '松开排队',
+        'send.steerPending': '正在提交插队请求，尚未确认；请勿认为当前任务已打断。',
+        'send.steerSlow': '仍在等待 DSH 确认插队，请勿重复发送；当前任务可能仍在执行。',
+        'send.steerAccepted': 'DSH 已接受插队请求；不代表当前工具已中断。',
+        'send.steerUnconfirmed': '插队结果未确认，消息可能已送达。请先检查会话与队列，勿直接重复发送。',
+        'send.steerRejected': '插队未成功：{msg}。未自动改为排队。',
+        'send.steerSlash': '斜杠命令不支持插队发送，请使用排队发送执行命令。',
+        'send.contextChanged': '已切换会话或服务器，本次消息未发送。',
         'a11y.hostAdmin': '主机管理', 'a11y.refresh': '刷新', 'a11y.more': '更多操作', 'a11y.moreTitle': '指令/权限/模型',
         'conn.on': '已连接', 'conn.off': '未连接', 'conn.reconnecting': '连接中断，正在重连…',
         'conn.reconnectIn': '重连中 {n}s', 'conn.offline': '离线', 'conn.failed': '连接失败',
@@ -1139,6 +1162,17 @@
         'time.justNow': '刚刚', 'time.minAgo': ' 分钟前', 'time.hourAgo': ' 小时前'
       },
       en: {
+        'settings.steerSendTitle': 'Enable hold-to-steer sending', 'settings.steerSendDesc': 'While busy, hold to switch modes and release to send. Move to cancel. Off by default.',
+        'settings.busySendTitle': 'Default sending mode while busy', 'settings.busySendDesc': 'Click and Enter use the default; hold uses the other mode. Normal sending when idle.',
+        'send.queueButton': 'Queue', 'send.steerButton': 'Steer', 'send.submitting': 'Submitting…',
+        'send.holdHint': 'Hold to switch modes; release to send, move to cancel', 'send.releaseSteer': 'Release to steer', 'send.releaseQueue': 'Release to queue',
+        'send.steerPending': 'Submitting steering request, not yet confirmed. The current task may still be running.',
+        'send.steerSlow': 'Still waiting for DSH to confirm. Do not resend; the current task may still be running.',
+        'send.steerAccepted': 'DSH accepted the steering request. The current tool may still be running.',
+        'send.steerUnconfirmed': 'Steering is unconfirmed; the message may have arrived. Check the conversation and queue before resending.',
+        'send.steerRejected': 'Steering failed: {msg}. Not automatically queued.',
+        'send.steerSlash': 'Slash commands cannot be sent as steering. Use queue mode to execute the command.',
+        'send.contextChanged': 'Conversation or server changed; this message was not sent.',
         'a11y.hostAdmin': 'Host admin', 'a11y.refresh': 'Refresh', 'a11y.more': 'More actions', 'a11y.moreTitle': 'Commands / Permissions / Models',
         'conn.on': 'Connected', 'conn.off': 'Offline', 'conn.reconnecting': 'Connection lost, reconnecting…',
         'conn.reconnectIn': 'Reconnecting {n}s', 'conn.offline': 'Offline', 'conn.failed': 'Connection failed',

package/public/plugin.js

@@ -81,8 +81,9 @@ function setBusy(value) {
 
 function render(st) {
   latest = st
-  const gateway = st.mode === 'gateway'
-  const healthy = gateway && st.upstream?.reachable !== false
+  const gateway = st.mode === 'gateway' || st.gatewayRunning === true
+  const authError = st.gatewayAuthError || ''
+  const healthy = gateway && !authError && st.upstream?.reachable !== false
   const installed = st.gatewayInstalled !== false
   const hero = $('plugin-hero')
   hero.classList.toggle('ok', healthy)
@@ -92,18 +93,18 @@ function render(st) {
   text('plugin-status', healthy ? '系统运行正常' : gateway ? '网关需要关注' : installed ? '网关待启动' : 'DSH 已连接')
   text('plugin-status-desc', healthy
     ? `${st.onlineCount || 0} 台设备在线 · 最近请求 ${st.totalRequests || 0} 次`
-    : gateway ? 'DSH 上游暂时不可达，请打开控制台诊断' : installed ? '本地网关尚未运行，启动后即可远程连接' : '插件已连接 DSH，但未检测到网关程序')
+    : authError || (gateway ? 'DSH 上游暂时不可达，请打开控制台诊断' : installed ? '本地网关尚未运行，启动后即可远程连接' : '插件已连接 DSH，但未检测到网关程序'))
   text('plugin-status-meta', healthy ? '本地服务可用' : gateway ? '需要查看诊断' : installed ? '本地服务未启动' : '仅 DSH 内嵌模式')
 
   const primary = $('plugin-primary')
-  primary.textContent = healthy ? '打开控制台' : installed ? '启动网关' : '查看控制台'
-  primary.dataset.action = healthy ? 'console' : installed ? 'start' : 'console'
+  primary.textContent = gateway ? '打开控制台' : installed ? '启动网关' : '查看控制台'
+  primary.dataset.action = gateway ? 'console' : installed ? 'start' : 'console'
   text('plugin-toggle-label', gateway ? '停止网关' : '启动网关')
   $('plugin-toggle-icon')?.setAttribute('data-morph-state', gateway ? 'open' : 'closed')
   $('plugin-toggle').classList.toggle('hidden', !installed)
 
   text('plugin-version', st.version ? 'v' + st.version : '—')
-  text('plugin-gateway-version', gateway ? (st.version ? 'v' + st.version : '运行中') : '未运行')
+  text('plugin-gateway-version', gateway ? ('v' + (st.gatewayVersion || st.version || '未知')) : '未运行')
   text('plugin-devices', `${st.onlineCount || 0} / ${st.deviceCount || 0}`)
   text('plugin-host', (st.lanIPs || []).find(x => x && x !== '127.0.0.1') || st.host || '127.0.0.1')
   if (!gateway) {
@@ -134,7 +135,7 @@ async function load() {
 async function toggleGateway() {
   if (busy) return
   setBusy(true)
-  const action = latest?.mode === 'gateway' ? 'stop' : 'start'
+  const action = latest?.mode === 'gateway' || latest?.gatewayRunning === true ? 'stop' : 'start'
   try {
     const res = await fetch(`${API}/gateway`, {
       method: 'POST',
@@ -142,6 +143,8 @@ async function toggleGateway() {
       body: JSON.stringify({ action }),
     })
     if (!res.ok) throw new Error('HTTP ' + res.status)
+    const out = await res.json()
+    if (!out.ok) throw new Error(out.error || '网关操作未完成')
     await new Promise(resolve => setTimeout(resolve, 650))
     await load()
   } catch (e) {

package/public/styles.css

@@ -1319,3 +1319,9 @@ button:focus-visible, a:focus-visible, input:focus-visible, select:focus-visible
 .update-download-progress { margin-top: 12px; font-size: 12px; line-height: 1.6; overflow-wrap: anywhere; }
 .update-download-progress progress { display: block; width: 100%; height: 10px; margin: 7px 0; accent-color: var(--dsr-accent, #2563eb); }
 #update-download-detail { color: var(--dsr-text-muted); font-variant-numeric: tabular-nums; }
+/* Sending intent remains visible while waiting for a steering acknowledgement. */
+.composer-send-status { padding: 6px 12px; font-size: 12px; line-height: 1.5; overflow-wrap: anywhere; }
+.composer-send-status[data-phase="pending"], .composer-send-status[data-phase="unknown"], .composer-send-status[data-phase="error"] { color: var(--dsr-accent-strong); font-weight: 600; }
+#btn-send, #btn-fs-send { touch-action: none; user-select: none; -webkit-touch-callout: none; }
+#btn-send.steer-mode, #btn-fs-send.steer-mode { outline: 2px solid currentColor; outline-offset: 2px; }
+.send-hold-ready { box-shadow: 0 0 0 3px var(--dsr-accent-strong); }

package/public/update.json

@@ -1,9 +1,9 @@
 {
-  "version": "0.7.0-rc.1",
+  "version": "0.7.0-rc.3",
   "apkUrl": "dsh-remote.apk",
-  "sha256": "5393a9a7866566b63f2f0998ec8ac984600e182c153ee1ee892573405385e63f",
-  "releasedAt": "2026-09-18T23:57:45.705Z",
-  "notes": "0.7.0-rc.1：新增插件中心，支持手机端和桌面端管理当前 DSH profile 的插件，搜索 npm 插件目录、查看详情及安装指定版本；支持更新、卸载、配置启停、任务日志与配置备份。启停需重启 DSH 生效，安装默认禁用脚本。此为测试版，Android 真机与 Linux 使用场景仍待验收。",
+  "sha256": "482490d9801a9e5c947fe02e3c7636b39c7089db8b38f55d732a963d848ee3fa",
+  "releasedAt": "2026-09-20T09:53:01.965Z",
+  "notes": "0.7.0-rc.3：手机端新增可选长按插队发送，默认关闭，可设置繁忙时默认排队或插队；直接提交插队请求，等待、超时与已接受状态分别提示，避免误认为工具已中断，失败时保留草稿。合入鸿蒙客户端、平板分栏与服务卡片源码，完善跨端接续接口；修复 WebSocket Ping 跨包组帧及接续接口非法输入处理。保留 rc.2 令牌恢复、认证状态和 IPv6 监听修复。本次提供 Android APK 与网关，未提供签名鸿蒙 HAP；鸿蒙大文件哈希、断点续传、快速切换服务器及 Android/Linux/fnOS 真机场景仍待验收。",
   "history": [
     {
       "version": "0.6.26",

package/public/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.7.0-rc.1"
+  "version": "0.7.0-rc.3"
 }