dsh-remote-plugin 0.7.0-rc.2 → 0.7.0-rc.3

package/gateway.cjs

@@ -85,6 +85,7 @@ const TOKEN_FILE = process.env.TOKEN_FILE || path.join(os.homedir(), '.dsh-remot
 const NOTES_FILE = process.env.DSH_REMOTE_NOTES || path.join(os.homedir(), '.dsh-remote', 'device-notes.json')
 const DEVICE_KEYS_FILE = process.env.DSH_REMOTE_DEVICE_KEYS || path.join(os.homedir(), '.dsh-remote', 'device-keys.json')
 const WORKBENCH_FILE = process.env.DSH_REMOTE_WORKBENCH || path.join(os.homedir(), '.dsh-remote', 'workbench.json')
+const HANDOFF_FILE = process.env.DSH_REMOTE_HANDOFF || path.join(os.homedir(), '.dsh-remote', 'handoff.json')
 const STARTED_AT = Date.now()
 const DSH_SERVICE = String(process.env.DSH_REMOTE_DSH_SERVICE || 'dsh-web').trim()
 const SYSTEMCTL = String(process.env.DSH_REMOTE_SYSTEMCTL || 'systemctl').trim() || 'systemctl'
@@ -1479,7 +1480,10 @@ async function detectUpstreamApiFlavor(force = false) {
       }
     } catch (error) {
       upstreamApiFlavorCheckedAt = Date.now()
-      if (upstreamApiFlavor === 'unknown') upstreamApiFlavor = 'legacy'
+      // 网络级失败（上游未启动/cookie 未就绪）不改变 flavor：
+      // 把 unknown 定格成 legacy 会让新版 DSH 被永久当旧服务器探测，
+      // events 双流从此连不上（websocket error 循环）。保持 unknown，
+      // 下一轮 recheck 再探；已有明确 flavor 的也不因瞬断回退。
       recordCompatibility('protocol-probe-failed', { detail: error?.message || error })
     } finally {
       upstreamApiFlavorProbe = null
@@ -1975,6 +1979,11 @@ function legacyPush(kind, payload, rpcId = crypto.randomUUID()) {
 
 function openModernSessionStream(ws, sessionId) {
   if (!sessionId || ws.readyState !== 1) return
+  // subagent 来源的会话在 DSH 侧只接受带 durable parent address 的 follow，
+  // 直接按 session 地址 open 会被拒（session/agent-busy），错误帧还会污染事件流；
+  // 这些会话的投影变化由 control/workspaces 基线推送覆盖，无需单独 follow。
+  const summary = modernState.sessions.get(sessionId)
+  if (summary?.origin === 'subagent') return
   const streamId = 'session:' + sessionId
   ws.send(JSON.stringify({
     type: 'open', streamId, endpoint: 'session/follow',
@@ -3971,6 +3980,127 @@ function workbenchPathInfo(rawPath) {
   return { path: checked.abs }
 }
 
+/* ---------- /handoff 跨端接续指针 ----------
+ * 单条记录：最近一次"正在查看的会话"。双端客户端离开会话时 PUT，
+ * 进入会话列表时 GET，发现是另一台设备写的就展示"在 xx 上打开过"接续卡片。
+ * 只存指针（sessionId + 设备名），不存消息内容——消息仍由 DSH 实时通道下发。
+ * 支持多服务器共用一个网关：key 是上游会话所属服务器没有区分需求，
+ * 这里按"该 token 能看到的同一个 DSH"即单工作台语义，只存一份。
+ */
+const HANDOFF_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000
+let handoffMemory = null
+
+function handoffLoad() {
+  if (handoffMemory) return handoffMemory
+  try {
+    const raw = JSON.parse(fs.readFileSync(HANDOFF_FILE, 'utf8'))
+    if (raw && typeof raw === 'object' && typeof raw.sessionId === 'string' && raw.sessionId) {
+      handoffMemory = {
+        sessionId: String(raw.sessionId).slice(0, 128),
+        title: String(raw.title || '').slice(0, 200),
+        device: String(raw.device || '').slice(0, 80),
+        clientId: String(raw.clientId || '').slice(0, 96),
+        at: Number(raw.at) || 0
+      }
+    }
+  } catch {}
+  return handoffMemory
+}
+
+function handoffSave(record) {
+  handoffMemory = record
+  try {
+    fs.mkdirSync(path.dirname(HANDOFF_FILE), { recursive: true })
+    fs.writeFileSync(HANDOFF_FILE, JSON.stringify(record, null, 2) + '\n')
+  } catch {}
+}
+
+function handoffFresh() {
+  const rec = handoffLoad()
+  if (!rec) return null
+  if (!rec.at || Date.now() - rec.at > HANDOFF_MAX_AGE_MS) return null
+  return rec
+}
+
+function serveHandoff(req, res, url) {
+  cors(res)
+  if (req.method === 'OPTIONS') {
+    res.writeHead(204)
+    res.end()
+    return
+  }
+  if (req.method !== 'GET' && req.method !== 'PUT' && req.method !== 'DELETE') {
+    res.writeHead(405, { allow: 'GET, PUT, DELETE' })
+    res.end()
+    return
+  }
+  if (!authorized(req, url)) {
+    authFailures++
+    touchDevice(req, { failedAuth: true })
+    res.writeHead(401, { 'content-type': 'application/json; charset=utf-8' })
+    res.end(JSON.stringify({ error: 'unauthorized' }))
+    return
+  }
+  touchDevice(req)
+
+  if (req.method === 'GET') {
+    const rec = handoffFresh()
+    fsJson(res, 200, { ok: true, handoff: rec })
+    return
+  }
+
+  if (req.method === 'DELETE') {
+    handoffMemory = null
+    try { fs.rmSync(HANDOFF_FILE, { force: true }) } catch {}
+    fsJson(res, 200, { ok: true })
+    return
+  }
+
+  // PUT：读 JSON 体，字段白名单 + 截断，4KB 上限
+  let body = ''
+  let done = false
+  req.on('data', chunk => {
+    if (done) return
+    body += chunk
+    if (Buffer.byteLength(body) > 4096) {
+      done = true
+      fsJson(res, 413, { error: 'payload too large' })
+      req.destroy()
+    }
+  })
+  req.on('end', () => {
+    if (done || res.headersSent) return
+    done = true
+    let payload
+    try {
+      payload = JSON.parse(body || '{}')
+    } catch {
+      fsJson(res, 400, { error: 'invalid json' })
+      return
+    }
+    // JSON 允许 null/数组/标量：后续读 payload.sessionId 会在 end 回调里抛
+    // TypeError（外层 try/catch 接不住，请求悬挂无响应，2026-09-20 评审复现）。
+    // 先校验为普通对象，不合规直接 400。
+    if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
+      fsJson(res, 400, { error: 'object body required' })
+      return
+    }
+    const sessionId = typeof payload.sessionId === 'string' ? payload.sessionId.trim() : ''
+    if (!sessionId) {
+      fsJson(res, 400, { error: 'sessionId required' })
+      return
+    }
+    handoffSave({
+      sessionId: sessionId.slice(0, 128),
+      title: String(payload.title || '').slice(0, 200),
+      device: String(payload.device || '').slice(0, 80),
+      clientId: String(payload.clientId || '').slice(0, 96),
+      at: Date.now()
+    })
+    fsJson(res, 200, { ok: true })
+  })
+}
+
 function loadWorkbench() {
   try {
     const raw = JSON.parse(fs.readFileSync(WORKBENCH_FILE, 'utf8'))
@@ -4369,6 +4499,7 @@ const server = http.createServer(async (req, res) => {
     if (url.pathname === '/workbench' || url.pathname.startsWith('/workbench/')) return serveWorkbench(req, res, url)
     if (url.pathname === '/diagnostics') return serveDiagnostics(req, res, url)
     if (url.pathname === '/feedback') return serveFeedback(req, res, url)
+    if (url.pathname === '/handoff') return serveHandoff(req, res, url)
     if (url.pathname.startsWith('/admin/api')) return serveAdminApi(req, res, url)
     if (url.pathname.startsWith('/stats')) return serveStats(req, res, url)
     if (url.pathname === '/api/ws-ticket') return serveWsTicket(req, res, url)
@@ -4417,6 +4548,41 @@ function wsPingFrame(masked) {
   return Buffer.concat([Buffer.from([0x89, 0x80]), mask])
 }
 
+/**
+ * 从缓冲头部解析一个完整客户端帧（RFC6455 §5.2）。
+ * 返回 null 表示数据不够、需要等下一个 chunk；解析成功返回
+ * { fin, opcode, payload(已解掩码), total(帧总长) }。
+ * 客户端帧必须带掩码位（§5.1），无掩码直接按协议错误返回 null 并由调用方清缓冲。
+ * 只支持 ≤125 载荷的控制帧上限约束交由调用方（Ping 载荷协议上限 125）；
+ * 长度用 126/127 扩展格式完整解析，保证数据帧边界正确跳过。
+ */
+function wsParseClientFrame(buf) {
+  if (buf.length < 2) return null
+  const fin = (buf[0] & 0x80) !== 0
+  const opcode = buf[0] & 0x0f
+  const masked = (buf[1] & 0x80) !== 0
+  let len = buf[1] & 0x7f
+  let off = 2
+  if (len === 126) {
+    if (buf.length < 4) return null
+    len = buf.readUInt16BE(2)
+    off = 4
+  } else if (len === 127) {
+    if (buf.length < 10) return null
+    const big = buf.readBigUInt64BE(2)
+    if (big > BigInt(1 << 20)) return 'oversize'
+    len = Number(big)
+    off = 10
+  }
+  if (!masked) return 'unmasked'
+  if (buf.length < off + 4 + len) return null
+  const mask = buf.subarray(off, off + 4)
+  const payload = Buffer.alloc(len)
+  const src = buf.subarray(off + 4, off + 4 + len)
+  for (let i = 0; i < len; i++) payload[i] = src[i] ^ mask[i & 3]
+  return { fin, opcode, payload, total: off + 4 + len }
+}
+
 /**
  * 原始 TCP 透传也要维护 WebSocket 控制帧活性:
  * - 浏览器侧收到网关的未掩码 Ping 后会自动回 Pong;
@@ -4521,6 +4687,41 @@ function acceptCollectorClient(req, socket, head, kind, device) {
   socket.setNoDelay(true)
   collectorClients[kind].add(socket)
   eventCollectorState[kind].clients = collectorClients[kind].size
+  // 客户端（鸿蒙 lws 等严格 RFC 实现）会发掩码 Ping 并等待 Pong；
+  // 网关必须按 RFC6455 回 Pong(0x8A)，且服务端→客户端方向不带掩码位
+  // （RFC6455 §5.1：客户端帧必须掩码，服务端帧必须不掩码，违规即断链）。
+  // TCP 不保证帧边界与 data 事件对齐，逐字节扫描当前 chunk 会把跨包帧、
+  // 其他帧的掩码/载荷误认成帧头（2026-09-20 评审复现：掩码后拆包回出错误
+  // Pong 8a03010203）。这里按 RFC6455 组帧：维护 per-socket 缓冲，帧头
+  // （含 126/127 扩展长度）与载荷凑齐才应答，整帧消费，控制帧间数据帧安全跳过。
+  let rx = Buffer.alloc(0)
+  socket.on('data', (chunk) => {
+    rx = rx.length ? Buffer.concat([rx, chunk]) : chunk
+    while (true) {
+      let frame
+      try {
+        frame = wsParseClientFrame(rx)
+      } catch {
+        rx = Buffer.alloc(0)
+        break
+      }
+      if (!frame) break
+      if (typeof frame === 'string') { rx = Buffer.alloc(0); break }
+      rx = rx.subarray(frame.total)
+      if (frame.payload.length > 125) continue
+      if (frame.fin === false) continue
+      // 仅应答 Ping（RFC6455 §5.5 控制帧载荷上限 125）；Pong（0xA）消费后丢弃，
+      // 其余 opcode（含数据帧/分片）跳过
+      if (frame.opcode === 0x9) {
+        const pong = Buffer.alloc(2 + frame.payload.length)
+        pong[0] = 0x8a
+        pong[1] = frame.payload.length
+        frame.payload.copy(pong, 2)
+        try { socket.write(pong) } catch {}
+      }
+    }
+    if (rx.length > 1 << 20) rx = Buffer.alloc(0)
+  })
   for (const raw of collectorReplay[kind].values()) {
     if (socket.destroyed || !socket.writable) break
     try { socket.write(encodeWsText(raw)) } catch { break }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-plugin",
-  "version": "0.7.0-rc.2",
+  "version": "0.7.0-rc.3",
   "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控；网关提供 /fs/* 文件传输端点(列表/断点下载/上传)，配合 Android App 远程操控会话/审批/提问/goal 与文件互传(多服务器测速切换、聊天记录离线缓存)。",
   "type": "module",
   "main": "./index.mjs",

package/public/app.js

@@ -132,6 +132,7 @@ const CUSTOM_SELECT_TITLES = {
   'session-sort': 'sessions.sortLabel',
   'fs-workspace': 'workspace.select',
   'mobile-enter-action': 'settings.mobileEnterTitle',
+  'busy-send-mode': 'settings.busySendTitle',
   'bg-interval': 'settings.bgIntervalTitle',
   'new-session-workspace': 'workspace.select'
 }
@@ -606,7 +607,9 @@ async function rpc(method, payload = {}, timeoutMs = 45000) {
   if (!full?.result) throw new Error(t('err.badResponse'))
   if (!full.result.ok) {
     const err = full.result.error || {}
-    throw new Error(err.message || t('err.dshError'))
+    const error = new Error(err.message || t('err.dshError'))
+    error.rpcRejected = true
+    throw error
   }
   return full.result.value
 }
@@ -2416,6 +2419,7 @@ function renderSessionSub() {
 
 /** 顶栏状态: 运行中=蓝色流动渐变, 中断/出错=橙红渐变, 空闲=原样式 */
 function updateSessionStatus() {
+  renderComposerSend()
   const s = state.byId.get(state.current)
   const head = $('session-head')
   if (!head) return
@@ -3248,33 +3252,153 @@ async function sendSessionText(text) {
   return sendSessionContent(text, [])
 }
 
-async function sendSessionContent(text, images) {
+let composerSending = false
+const composerSendFeedback = new Map()
+const steeringInFlight = new Set()
+function composerContext() { return `${state.server}\0${state.current}` }
+function steerSendingEnabled() { return LS.get('steerSendingEnabled', '0') === '1' }
+function composerIsBusy() {
+  return !!state.byId.get(state.current)?.running || (state.queues[state.current] || []).some(item => item.placement === 'queued')
+}
+function composerSendMode(alternate = false) {
+  if (!steerSendingEnabled() || !composerIsBusy()) return 'queue'
+  const preferred = LS.get('busySendMode', 'queue') === 'steer' ? 'steer' : 'queue'
+  return alternate ? (preferred === 'queue' ? 'steer' : 'queue') : preferred
+}
+function renderComposerSend() {
+  const enabled = steerSendingEnabled() && composerIsBusy()
+  const mode = composerSendMode()
+  for (const id of ['btn-send', 'btn-fs-send']) {
+    const button = $(id)
+    if (!button) continue
+    if (composerSending || !button.classList.contains('send-hold-ready')) button.textContent = t(composerSending ? 'send.submitting' : enabled ? `send.${mode}Button` : 'composer.send')
+    button.disabled = composerSending
+    button.classList.toggle('steer-mode', enabled && mode === 'steer')
+    button.title = t(enabled ? 'send.holdHint' : 'composer.send')
+    button.setAttribute('aria-label', button.textContent)
+  }
+  const feedback = composerSendFeedback.get(composerContext())
+  const node = $('composer-send-status')
+  if (node) {
+    node.textContent = feedback ? t(feedback.key, { msg: feedback.message || '' }) : enabled ? t('send.holdHint') : ''
+    node.classList.toggle('hidden', !node.textContent)
+    node.dataset.phase = feedback?.phase || 'hint'
+  }
+}
+function setComposerSendFeedback(context, key, phase, message = '') {
+  composerSendFeedback.set(context, { key, phase, message })
+  if (composerSendFeedback.size > 100) composerSendFeedback.delete(composerSendFeedback.keys().next().value)
+  renderComposerSend()
+}
+// No preflight or automatic retry: an ambiguous timeout may already have delivered the message.
+async function submitSteer(method, payload, context) {
+  if (steeringInFlight.has(context)) {
+    if (composerContext() === context) toast(t('send.steerPending'), 'err')
+    return null
+  }
+  steeringInFlight.add(context)
+  setComposerSendFeedback(context, 'send.steerPending', 'pending')
+  const slow = setTimeout(() => setComposerSendFeedback(context, 'send.steerSlow', 'pending'), 3000)
+  try {
+    const result = await rpc(method, payload)
+    if (!result?.accepted) {
+      setComposerSendFeedback(context, 'send.steerUnconfirmed', 'unknown')
+      return result
+    }
+    setComposerSendFeedback(context, 'send.steerAccepted', 'accepted')
+    if (composerContext() === context) toast(t('send.steerAccepted'), 'ok')
+    return result
+  } catch (error) {
+    setComposerSendFeedback(context, error.rpcRejected || error.message === 'AUTH' ? 'send.steerRejected' : 'send.steerUnconfirmed', error.rpcRejected ? 'error' : 'unknown', error.message)
+    if (error.message === 'AUTH' && composerContext() === context) authFailure()
+    return null
+  } finally { clearTimeout(slow); steeringInFlight.delete(context) }
+}
+
+function bindComposerSend(button) {
+  let press = null
+  let suppressClickUntil = 0
+  const cancel = () => {
+    if (!press) return
+    clearTimeout(press.timer)
+    press = null
+    suppressClickUntil = Date.now() + 1000
+    button.classList.remove('send-hold-ready')
+    renderComposerSend()
+  }
+  button.addEventListener('pointerdown', event => {
+    if (event.button !== 0 || event.isPrimary === false || composerSending || !steerSendingEnabled() || !composerIsBusy()) return
+    cancel()
+    suppressClickUntil = 0
+    press = { id: event.pointerId, x: event.clientX, y: event.clientY, context: composerContext(), mode: composerSendMode(), alternate: composerSendMode(true), ready: false }
+    press.timer = setTimeout(() => {
+      if (!press || composerSending || composerContext() !== press.context) { cancel(); return }
+      press.ready = true
+      button.classList.add('send-hold-ready')
+      button.textContent = t(press.alternate === 'steer' ? 'send.releaseSteer' : 'send.releaseQueue')
+    }, 450)
+    button.setPointerCapture?.(event.pointerId)
+  })
+  button.addEventListener('pointermove', event => {
+    if (press && Math.hypot(event.clientX - press.x, event.clientY - press.y) > 12) cancel()
+  })
+  button.addEventListener('pointerup', event => {
+    if (!press || event.pointerId !== press.id) return
+    const intent = press
+    cancel()
+    event.preventDefault()
+    if (intent.context === composerContext() && steerSendingEnabled()) void sendMessage(intent.ready ? intent.alternate : intent.mode)
+  })
+  for (const name of ['pointercancel', 'lostpointercapture', 'blur']) button.addEventListener(name, cancel)
+  button.addEventListener('contextmenu', event => { if (press || Date.now() < suppressClickUntil) event.preventDefault() })
+  button.addEventListener('keydown', () => { cancel(); suppressClickUntil = 0 })
+  button.addEventListener('click', () => { if (Date.now() >= suppressClickUntil) void sendMessage() })
+}
+
+async function sendSessionContent(text, images, requestedMode = 'queue') {
   const clean = String(text || '').trim()
-  if ((!clean && !images.length) || !state.current) return false
+  if ((!clean && !images.length) || !state.current || composerSending) return false
   const sessionId = state.current
-  if (images.length === 0 && clean && await runSlashCommand(clean)) {
-    state.sessionActivity.add(sessionId)
-    return true
+  const context = composerContext()
+  const mode = requestedMode === 'steer' && steerSendingEnabled() && composerIsBusy() ? 'steer' : 'queue'
+  if (mode === 'steer' && clean.startsWith('/')) {
+    setComposerSendFeedback(context, 'send.steerSlash', 'error')
+    return false
   }
+  composerSending = true
   const buttons = [$('btn-send'), $('btn-fs-send')].filter(Boolean)
   buttons.forEach(button => { button.disabled = true })
   state.pendingPrompts.add(sessionId)
   try {
+    if (mode === 'steer') setComposerSendFeedback(context, 'send.steerPending', 'pending')
+    else { composerSendFeedback.delete(context); renderComposerSend() }
+    if (images.length === 0 && clean && await runSlashCommand(clean)) {
+      state.sessionActivity.add(sessionId)
+      return true
+    }
     const content = [...await encodeComposerImagesFor(images)]
     if (clean) content.push({ type: 'text', text: clean })
+    if (composerContext() !== context) {
+      setComposerSendFeedback(context, 'send.contextChanged', 'error')
+      return false
+    }
     setSessionRecovery('resuming')
-    const v = await safeRpc('session.prompt', {
+    const payload = {
       sessionId,
-      mode: 'queue',
+      mode,
       content
-    }, t('send.failed'))
+    }
+    const v = mode === 'steer'
+      ? await submitSteer('session.prompt', payload, context)
+      : await safeRpc('session.prompt', payload, t('send.failed'))
+    if (composerContext() !== context) return !!v?.accepted
     if (v?.accepted) {
       state.sessionActivity.add(sessionId)
-      if (state.current === sessionId) {
+      if (composerContext() === context) {
         setSessionRecovery('ready')
         noteSessionTurnTime(sessionId, Date.now())
         renderSessions()
-        toast(images.length ? t('send.imageSent') : (clean.startsWith('/') ? t('send.commandSent') : t('send.sent')), 'ok')
+        if (mode !== 'steer') toast(images.length ? t('send.imageSent') : (clean.startsWith('/') ? t('send.commandSent') : t('send.sent')), 'ok')
       }
       return true
     }
@@ -3286,14 +3410,17 @@ async function sendSessionContent(text, images) {
     if (state.current === sessionId) setSessionRecovery('error')
     return false
   } catch (e) {
-    if (state.current === sessionId) {
+    if (mode === 'steer') setComposerSendFeedback(context, 'send.steerRejected', 'error', e?.message || String(e))
+    if (composerContext() === context) {
       setSessionRecovery('error', e?.message)
       toast(t('composer.imageReadFailed', { msg: e?.message || e }), 'err')
     }
     return false
   } finally {
     state.pendingPrompts.delete(sessionId)
+    composerSending = false
     buttons.forEach(button => { button.disabled = false })
+    renderComposerSend()
   }
 }
 
@@ -3304,16 +3431,18 @@ async function encodeComposerImagesFor(images) {
   })))
 }
 
-async function sendMessage() {
+async function sendMessage(requestedMode) {
   const input = $('composer-input')
-  const text = input.value.trim()
+  const originalText = input.value
+  const text = originalText.trim()
+  const context = composerContext()
   const images = state.composerImages.slice()
   if ((!text && !images.length) || !state.current) return
   if (images.length && text.startsWith('/')) { toast(t('composer.imageSlashUnsupported'), 'err'); return }
-  if (await sendSessionContent(text, images)) {
-    input.value = ''
-    autosize(input)
-    clearComposerImages()
+  const mode = typeof requestedMode === 'string' ? requestedMode : composerSendMode()
+  if (await sendSessionContent(text, images, mode) && composerContext() === context) {
+    if (input.value === originalText) { input.value = ''; autosize(input) }
+    if (state.composerImages.length === images.length && images.every((item, i) => item === state.composerImages[i])) clearComposerImages()
   }
 }
 
@@ -3842,20 +3971,21 @@ function queuePreview(item) {
 }
 async function steerQueueItem(itemId) {
   const sessionId = state.current
+  const context = composerContext()
   const key = `${sessionId}:${itemId}`
   const s = state.byId.get(sessionId)
   if (!sessionId || !s?.running || state.queueSteering[key]) return
   state.queueSteering[key] = true
   renderQueue()
   try {
-    const v = await safeRpc('session.updateQueue', { sessionId, itemId, action: { kind: 'steer' } }, t('queue.steerFailed', { msg: '' }).replace(/：$/, '').replace(/: $/, ''))
-    if (v?.accepted) toast(t('queue.steerSubmitted'), 'ok')
+    await submitSteer('session.updateQueue', { sessionId, itemId, action: { kind: 'steer' } }, context)
   } finally {
     delete state.queueSteering[key]
     renderQueue()
   }
 }
 function renderQueue() {
+  renderComposerSend()
   const s = state.byId.get(state.current)
   if (!s) return
   const items = (state.queues[state.current] || []).filter(item => item?.placement === 'queued')
@@ -6960,8 +7090,8 @@ function bindUi() {
   $('rename-confirm').addEventListener('click', confirmRenameSession)
   $('rename-session-input').addEventListener('keydown', e => { if (e.key === 'Enter' && !e.isComposing) confirmRenameSession() })
   $('modal-rename').addEventListener('click', e => { if (e.target === $('modal-rename')) closeRenameSession() })
-  $('btn-send').addEventListener('click', sendMessage)
-  $('btn-fs-send').addEventListener('click', sendMessage)
+  bindComposerSend($('btn-send'))
+  bindComposerSend($('btn-fs-send'))
   $('btn-plus').addEventListener('click', toggleComposerMenu)
   $('btn-image').addEventListener('click', toggleComposerImageMenu)
   $('composer-image-menu').addEventListener('click', (e) => {
@@ -7139,11 +7269,23 @@ function bindUi() {
   })
   $('btn-reset').addEventListener('click', () => {
     if (!confirm(t('settings.confirmReset'))) return
-    LS.del('token'); LS.del('notify'); LS.del('server'); LS.del('mobileEnterAction'); LS.del(ANNOUNCEMENTS_KEY); LS.del(ANNOUNCEMENT_HISTORY_KEY); LS.del(ANNOUNCEMENT_VOTES_KEY)
+    LS.del('token'); LS.del('notify'); LS.del('server'); LS.del('mobileEnterAction'); LS.del('steerSendingEnabled'); LS.del('busySendMode'); LS.del(ANNOUNCEMENTS_KEY); LS.del(ANNOUNCEMENT_HISTORY_KEY); LS.del(ANNOUNCEMENT_VOTES_KEY)
     if (bgBridge()?.saveBackgroundConfig) saveBgConfig(false)
     location.reload()
   })
   $('mobile-enter-action').value = mobileEnterAction()
+  $('opt-steer-send').checked = steerSendingEnabled()
+  $('busy-send-mode').value = LS.get('busySendMode', 'queue') === 'steer' ? 'steer' : 'queue'
+  $('busy-send-mode').disabled = !steerSendingEnabled()
+  $('opt-steer-send').addEventListener('change', event => {
+    LS.set('steerSendingEnabled', event.target.checked ? '1' : '0')
+    $('busy-send-mode').disabled = !event.target.checked
+    renderComposerSend()
+  })
+  $('busy-send-mode').addEventListener('change', event => {
+    LS.set('busySendMode', event.target.value === 'steer' ? 'steer' : 'queue')
+    renderComposerSend()
+  })
   $('mobile-enter-action').addEventListener('change', (e) => {
     const action = e.target.value === 'send' ? 'send' : 'newline'
     LS.set('mobileEnterAction', action)

package/public/index.html

@@ -113,7 +113,7 @@
         <button id="btn-rename-session" class="icon-btn hidden" data-i18n-title="session.rename" data-i18n-aria="session.rename">✎</button>
         <button id="btn-archive-session" class="mini-btn hidden" data-i18n="session.archive">归档</button>
         <button id="btn-stats" class="icon-btn" data-i18n-title="stats.title" data-i18n-aria="stats.title"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M5 19V9M12 19V5M19 19v-7M3 19h18"/></svg></button>
-        <button id="btn-fs-send" class="session-send-btn hidden" type="button" data-i18n="composer.send" data-i18n-title="composer.send" data-i18n-aria="composer.send">发送</button>
+        <button id="btn-fs-send" class="session-send-btn hidden" type="button">发送</button>
         <button id="btn-cancel" class="danger-btn hidden" data-i18n="session.stop">停止</button>
       </div>
 
@@ -173,6 +173,7 @@
           <button type="button" class="composer-image-option" data-image-source="CAMERA" role="menuitem"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M4 8.5h3l1.5-2h7L17 8.5h3v10H4z"/><circle cx="12" cy="13.5" r="3.2"/></svg><span data-i18n="composer.takePhoto">拍照</span></button>
           <button type="button" class="composer-image-option" data-image-source="PHOTOS" role="menuitem"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3.5" y="4" width="17" height="16" rx="2"/><circle cx="8.5" cy="9" r="1.2"/><path d="m5 17 4.5-4.5 3 3 2-2L19 17"/></svg><span data-i18n="composer.choosePhoto">相册</span></button>
         </div>
+        <div id="composer-send-status" class="composer-send-status hidden" role="status" aria-live="polite" aria-atomic="true"></div>
         <div id="composer-attachments" class="composer-attachments hidden"></div>
         <div class="composer">
           <button id="btn-plus" class="plus-btn" data-i18n-aria="a11y.more" data-i18n-title="a11y.moreTitle">＋</button>
@@ -183,7 +184,7 @@
             </button>
           </div>
           <button id="btn-image" class="composer-image-btn" type="button" data-i18n-title="composer.addImage" data-i18n-aria="composer.addImage"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3.5" y="4" width="17" height="16" rx="2"/><circle cx="8.5" cy="9" r="1.2"/><path d="m5 17 4.5-4.5 3 3 2-2L19 17"/></svg></button>
-          <button id="btn-send" class="send-btn" data-i18n="composer.send">发送</button>
+          <button id="btn-send" class="send-btn" type="button">发送</button>
         </div>
         <input id="composer-camera-input" class="hidden" type="file" accept="image/*" capture="environment">
         <input id="composer-gallery-input" class="hidden" type="file" accept="image/*" multiple>
@@ -375,6 +376,17 @@
               <option value="send" data-i18n="settings.mobileEnterSend">回车发送</option>
             </select>
           </div>
+          <div class="setting-row">
+            <div><div class="setting-name" data-i18n="settings.steerSendTitle">启用长按插队发送</div><div class="setting-desc" data-i18n="settings.steerSendDesc">繁忙时长按发送切换方式，松开发送；移动手指取消。默认关闭。</div></div>
+            <label class="switch"><input type="checkbox" id="opt-steer-send" data-i18n-aria="settings.steerSendTitle"><span class="slider"></span></label>
+          </div>
+          <div class="setting-row">
+            <div><div class="setting-name" data-i18n="settings.busySendTitle">繁忙时默认发送方式</div><div class="setting-desc" data-i18n="settings.busySendDesc">单击和回车使用默认方式，长按使用另一种；空闲时正常发送。</div></div>
+            <select id="busy-send-mode" class="setting-select" data-i18n-aria="settings.busySendTitle">
+              <option value="queue" data-i18n="send.queueButton">排队发送</option>
+              <option value="steer" data-i18n="send.steerButton">插队发送</option>
+            </select>
+          </div>
           <div class="setting-row">
             <div><div class="setting-name" data-i18n="presets.title">预设提示词</div><div class="setting-desc" data-i18n="presets.desc">常用提示词，对话界面一键插入（最多 20 条）</div></div>
             <button id="btn-preset-add" class="mini-btn" data-i18n="presets.add">新增</button>
@@ -907,6 +919,17 @@
   <script>
     window.APP_STR = {
       zh: {
+        'settings.steerSendTitle': '启用长按插队发送', 'settings.steerSendDesc': '繁忙时长按发送切换方式，松开发送；移动手指取消。默认关闭。',
+        'settings.busySendTitle': '繁忙时默认发送方式', 'settings.busySendDesc': '单击和回车使用默认方式，长按使用另一种；空闲时正常发送。',
+        'send.queueButton': '排队发送', 'send.steerButton': '插队发送', 'send.submitting': '提交中…',
+        'send.holdHint': '长按切换发送方式，松开发送；移动取消', 'send.releaseSteer': '松开插队', 'send.releaseQueue': '松开排队',
+        'send.steerPending': '正在提交插队请求，尚未确认；请勿认为当前任务已打断。',
+        'send.steerSlow': '仍在等待 DSH 确认插队，请勿重复发送；当前任务可能仍在执行。',
+        'send.steerAccepted': 'DSH 已接受插队请求；不代表当前工具已中断。',
+        'send.steerUnconfirmed': '插队结果未确认，消息可能已送达。请先检查会话与队列，勿直接重复发送。',
+        'send.steerRejected': '插队未成功：{msg}。未自动改为排队。',
+        'send.steerSlash': '斜杠命令不支持插队发送，请使用排队发送执行命令。',
+        'send.contextChanged': '已切换会话或服务器，本次消息未发送。',
         'a11y.hostAdmin': '主机管理', 'a11y.refresh': '刷新', 'a11y.more': '更多操作', 'a11y.moreTitle': '指令/权限/模型',
         'conn.on': '已连接', 'conn.off': '未连接', 'conn.reconnecting': '连接中断，正在重连…',
         'conn.reconnectIn': '重连中 {n}s', 'conn.offline': '离线', 'conn.failed': '连接失败',
@@ -1139,6 +1162,17 @@
         'time.justNow': '刚刚', 'time.minAgo': ' 分钟前', 'time.hourAgo': ' 小时前'
       },
       en: {
+        'settings.steerSendTitle': 'Enable hold-to-steer sending', 'settings.steerSendDesc': 'While busy, hold to switch modes and release to send. Move to cancel. Off by default.',
+        'settings.busySendTitle': 'Default sending mode while busy', 'settings.busySendDesc': 'Click and Enter use the default; hold uses the other mode. Normal sending when idle.',
+        'send.queueButton': 'Queue', 'send.steerButton': 'Steer', 'send.submitting': 'Submitting…',
+        'send.holdHint': 'Hold to switch modes; release to send, move to cancel', 'send.releaseSteer': 'Release to steer', 'send.releaseQueue': 'Release to queue',
+        'send.steerPending': 'Submitting steering request, not yet confirmed. The current task may still be running.',
+        'send.steerSlow': 'Still waiting for DSH to confirm. Do not resend; the current task may still be running.',
+        'send.steerAccepted': 'DSH accepted the steering request. The current tool may still be running.',
+        'send.steerUnconfirmed': 'Steering is unconfirmed; the message may have arrived. Check the conversation and queue before resending.',
+        'send.steerRejected': 'Steering failed: {msg}. Not automatically queued.',
+        'send.steerSlash': 'Slash commands cannot be sent as steering. Use queue mode to execute the command.',
+        'send.contextChanged': 'Conversation or server changed; this message was not sent.',
         'a11y.hostAdmin': 'Host admin', 'a11y.refresh': 'Refresh', 'a11y.more': 'More actions', 'a11y.moreTitle': 'Commands / Permissions / Models',
         'conn.on': 'Connected', 'conn.off': 'Offline', 'conn.reconnecting': 'Connection lost, reconnecting…',
         'conn.reconnectIn': 'Reconnecting {n}s', 'conn.offline': 'Offline', 'conn.failed': 'Connection failed',

package/public/styles.css

@@ -1319,3 +1319,9 @@ button:focus-visible, a:focus-visible, input:focus-visible, select:focus-visible
 .update-download-progress { margin-top: 12px; font-size: 12px; line-height: 1.6; overflow-wrap: anywhere; }
 .update-download-progress progress { display: block; width: 100%; height: 10px; margin: 7px 0; accent-color: var(--dsr-accent, #2563eb); }
 #update-download-detail { color: var(--dsr-text-muted); font-variant-numeric: tabular-nums; }
+/* Sending intent remains visible while waiting for a steering acknowledgement. */
+.composer-send-status { padding: 6px 12px; font-size: 12px; line-height: 1.5; overflow-wrap: anywhere; }
+.composer-send-status[data-phase="pending"], .composer-send-status[data-phase="unknown"], .composer-send-status[data-phase="error"] { color: var(--dsr-accent-strong); font-weight: 600; }
+#btn-send, #btn-fs-send { touch-action: none; user-select: none; -webkit-touch-callout: none; }
+#btn-send.steer-mode, #btn-fs-send.steer-mode { outline: 2px solid currentColor; outline-offset: 2px; }
+.send-hold-ready { box-shadow: 0 0 0 3px var(--dsr-accent-strong); }

package/public/update.json

@@ -1,9 +1,9 @@
 {
-  "version": "0.7.0-rc.2",
+  "version": "0.7.0-rc.3",
   "apkUrl": "dsh-remote.apk",
-  "sha256": "71a5cf1849e6eecc3ed72e6d0b3aec176ff9fbc75e50876831d09135c1af3efc",
-  "releasedAt": "2026-09-19T05:04:05.773Z",
-  "notes": "0.7.0-rc.2：修复令牌文件丢失后网关状态误判，健康探测可恢复原令牌，令牌写盘失败拒绝启动；管理认证异常与启停失败显示明确提示。插件网关支持配置 IPv6 监听地址。延续 rc.1 插件中心的搜索、安装、更新、卸载、启停、任务日志与配置备份功能。此为测试版，Android 真机与 Linux/fnOS 使用场景仍待验收。",
+  "sha256": "482490d9801a9e5c947fe02e3c7636b39c7089db8b38f55d732a963d848ee3fa",
+  "releasedAt": "2026-09-20T09:53:01.965Z",
+  "notes": "0.7.0-rc.3：手机端新增可选长按插队发送，默认关闭，可设置繁忙时默认排队或插队；直接提交插队请求，等待、超时与已接受状态分别提示，避免误认为工具已中断，失败时保留草稿。合入鸿蒙客户端、平板分栏与服务卡片源码，完善跨端接续接口；修复 WebSocket Ping 跨包组帧及接续接口非法输入处理。保留 rc.2 令牌恢复、认证状态和 IPv6 监听修复。本次提供 Android APK 与网关，未提供签名鸿蒙 HAP；鸿蒙大文件哈希、断点续传、快速切换服务器及 Android/Linux/fnOS 真机场景仍待验收。",
   "history": [
     {
       "version": "0.6.26",

package/public/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.7.0-rc.2"
+  "version": "0.7.0-rc.3"
 }